last executing test programs: 7m17.801530696s ago: executing program 3 (id=4): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @local}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x2, 0x3, 0x0, 0x4}}, 0x2e) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x1c0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000002, 0x102070, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x58000000, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a41, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) writev(r3, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 7m17.627505847s ago: executing program 3 (id=6): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = syz_open_procfs(0x0, &(0x7f0000000400)='ns\x00') readlinkat(r3, &(0x7f0000000100)='./mnt/file0\x00', &(0x7f0000000440)=""/163, 0xa3) 7m16.564513664s ago: executing program 3 (id=7): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0xa020000) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) mount$bind(0x0, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x84000, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x10) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0xfe, 0xbac, &(0x7f0000003480)="$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") 7m15.124547473s ago: executing program 3 (id=12): r0 = io_uring_setup(0x177f, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xfffffffd}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0xa6, &(0x7f00000003c0)=""/166, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x1, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r4, r3, 0x7, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[], 0x14}}, 0x0) sendto$inet6(r2, &(0x7f0000000040)="0b118f2b4190be586d04d99304c7975dfca451f6a36e5e11c583738f22bfc241adfd70c9456ea4fe6a5e0716c24ab3", 0xfffffffffffffea5, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c) sendmsg$SOCK_DESTROY(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000002440)={0x14}, 0xc3ec}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 7m5.111252881s ago: executing program 3 (id=36): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="3400000010001fff000000000800000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468"], 0x34}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0xfffffffd, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x125f9}}}}}}]}, 0x48}}, 0x0) 7m4.905823243s ago: executing program 32 (id=36): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="3400000010001fff000000000800000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468"], 0x34}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0xfffffffd, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x125f9}}}}}}]}, 0x48}}, 0x0) 6m57.91801896s ago: executing program 4 (id=60): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x3, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0x80}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0}, 0x0) 6m57.673120461s ago: executing program 4 (id=64): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x82000, 0x0, 0xfe, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f00000002c0)={0x18, 0x0, 0x0, {0x9}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="9802"], 0x298) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000100)='./file0\x00') r3 = socket(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000001040)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000002240)='.\x00', 0x0, 0x0) 6m56.879018207s ago: executing program 4 (id=66): prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x300000, 0x0, 0x0, 0x0, 0x40000}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/wireless\x00') preadv(r1, 0x0, 0x0, 0x1000004, 0x4) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000020c0)={@ipv4={'\x00', '\xff\xff', @empty}, 0x80, r4}) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000140)={@loopback, 0x80, r4}) r5 = syz_open_procfs(0x0, &(0x7f0000002700)='cmdline\x00') read$FUSE(r5, &(0x7f0000000000)={0x2020}, 0xfffffc7a) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 6m54.872270811s ago: executing program 4 (id=72): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f00000007c0)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@sysvgroups}, {@acl}, {@usrquota}]}, 0x10, 0x4d7, &(0x7f0000000fc0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r0}, 0x18) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b405000000000000711035000000000015000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x39) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) ioctl$HIDIOCGUSAGES(r3, 0xd01c4813, &(0x7f00000083c0)={{0x3, 0x1, 0x3ff, 0x3, 0x81, 0xb}, 0x1d4, [0x401, 0x6, 0x4, 0xcb5d, 0xffffffff, 0xffffff81, 0x32b4, 0x0, 0x7, 0x9, 0xa317, 0xbe, 0x4, 0xb7, 0x8, 0x0, 0x80, 0x2, 0x8, 0x3, 0x186, 0x9, 0x7, 0x0, 0x95, 0x6, 0x5, 0x5f, 0x8, 0x1, 0x7c, 0xfffffffc, 0x8, 0x8, 0x8, 0xa, 0x6, 0x5, 0x4, 0x400, 0x1, 0xa, 0x8, 0x2, 0x40, 0x53a, 0x8, 0x6, 0x7, 0x5, 0x8001, 0x0, 0x1f, 0x1, 0x4, 0xfffffff7, 0x800000, 0x6, 0x4, 0x10000, 0x0, 0x9c3b, 0x2e248434, 0xfcc, 0x91, 0x7f, 0x39, 0x4, 0xffffffff, 0x80000001, 0x3, 0x4, 0x3ff, 0x6d9c, 0x7fff, 0x8, 0x614, 0x8, 0xff, 0xa710, 0x6, 0xff, 0xf95, 0x4a, 0xd, 0xf, 0x5, 0xfffffffd, 0x9, 0x9, 0x3, 0xf, 0x9, 0x1, 0x9, 0x7, 0x100, 0xffff83fd, 0x1e96, 0x401, 0xffffffff, 0x8732, 0xfffff800, 0x0, 0x3, 0x1, 0x0, 0x1, 0x8fcd, 0x3, 0x9, 0x3, 0x0, 0x800, 0x1, 0x8001, 0x0, 0x80000000, 0x5, 0x6, 0x40, 0x8, 0x6c54, 0xf, 0x5, 0x77, 0x7, 0xbd2, 0x4, 0x2, 0x101, 0x7, 0xc00000, 0x101, 0x2, 0x4, 0x4, 0x6, 0x7, 0x400, 0x4, 0x3, 0x4, 0xff, 0xd0, 0x9, 0x3, 0x75, 0x4, 0x47479268, 0x0, 0x4, 0x7, 0x5, 0x5, 0xb9a4, 0x7fffffff, 0xffffffff, 0x9, 0x9, 0x1, 0x1000, 0xf, 0x5, 0xfffffffb, 0xfffffff5, 0x2, 0xcd, 0x4, 0x1, 0x3, 0x10001, 0x4, 0x81, 0x7, 0x2, 0x50, 0x8001, 0xdb7, 0x4, 0x401, 0x2c, 0x5, 0xd, 0x0, 0x8, 0x1000, 0x2, 0x8, 0x2, 0xd, 0x3, 0x9, 0xa654, 0x5, 0xc458, 0x0, 0xb, 0x237c, 0x5, 0x2, 0x9, 0x7ff, 0xc089, 0x2, 0x8f66, 0x5, 0x6, 0x1, 0xe9, 0x0, 0x3, 0x9c4, 0x4, 0xa71, 0x9, 0x7, 0x0, 0xddc5, 0x3, 0x30, 0x8, 0x4, 0x5, 0x2, 0x2, 0x5, 0x4faf, 0x6, 0x8, 0x1, 0x624, 0x9, 0x3, 0xfc86, 0x9, 0x200, 0x0, 0x2, 0x8cc, 0x6, 0xfffffff7, 0x7fff, 0x8, 0x100, 0x1, 0x2, 0x8001, 0x5, 0x5, 0x9, 0x1, 0x2, 0x1, 0xb, 0xffff, 0x7, 0x4, 0x1, 0x9, 0x1, 0x5, 0x25, 0xeaee, 0x3, 0xf, 0x4, 0x7, 0x1ff, 0x9d100, 0x6, 0x1, 0x100, 0x3, 0x2, 0xcc, 0x5, 0x7, 0x9, 0x200, 0x8, 0x7, 0x8ee, 0x8, 0xa, 0x90bf, 0x8, 0x80000000, 0x81, 0x49, 0x83c, 0x2e, 0xffff051f, 0x0, 0xfffffffd, 0x10001, 0x3e, 0x10000, 0x151abe11, 0x898, 0x2, 0xa00, 0xde, 0x8, 0x0, 0x4, 0xbef7, 0x7, 0xfffffffb, 0x8, 0x5, 0x10000, 0xa78, 0x2b, 0x7, 0x8, 0xf, 0x3df, 0x401, 0x0, 0x27, 0xf316, 0x6, 0x8001, 0x40, 0x2, 0x0, 0x5, 0x8f, 0x4, 0x0, 0x7, 0x8, 0x3, 0x10, 0x9, 0x2, 0x4e4380, 0x3, 0xb, 0xfff, 0x2, 0x3, 0x8001, 0x0, 0x5, 0x6, 0x4b1df081, 0x441, 0x96d2, 0x9, 0x8, 0x9, 0xa, 0x4, 0x8000, 0x1, 0x9, 0xa, 0x3d8, 0xc, 0x7ff, 0xf, 0x3, 0xffffffc0, 0x22, 0x6, 0x2, 0x22, 0x4, 0x1, 0x8, 0x0, 0x6, 0x9, 0x2, 0x45dd, 0x3, 0x6, 0x9, 0x80000001, 0xb9b6, 0x100, 0x78c, 0x3, 0x7fffffff, 0x7fffffff, 0x420, 0x3, 0x8, 0x81, 0x80000001, 0x81, 0x3, 0xffff, 0x7, 0x7, 0x5, 0x1fe000, 0x2, 0x400, 0x1, 0x6, 0x6, 0xcb, 0x5, 0xae, 0x3, 0x9, 0x51, 0xb9d0, 0x8, 0x3, 0x80000000, 0x0, 0x1, 0x1, 0x10001, 0x0, 0x5, 0x400, 0x298, 0x8, 0x8, 0x8, 0xfffffffc, 0x9, 0x6, 0x2, 0x5, 0x10, 0x2, 0x6, 0x8, 0x4, 0x88a, 0x5b0, 0x8, 0x3, 0xc, 0x8, 0x10, 0x800, 0x4, 0x5, 0x401, 0x92, 0x7ff, 0x55aa, 0xfffffff8, 0x0, 0x9, 0x0, 0x1, 0x9, 0x26433bf5, 0x1, 0x100, 0x4, 0x8, 0x9, 0x5, 0xb, 0x80000001, 0x1, 0xe66, 0x7, 0x7, 0x6, 0x8, 0x6, 0x7, 0x6, 0x7fffffff, 0x4, 0x3, 0x2, 0x4, 0x7, 0x6, 0x6, 0x6, 0x3, 0x3, 0x2, 0x7, 0x6, 0x4, 0x0, 0x5, 0xfff, 0x9, 0x8, 0x324a95a5, 0x1000, 0x8, 0x1, 0x9, 0x11, 0xff, 0x81, 0xe, 0x1, 0x2, 0x8, 0x9, 0x35af, 0x15, 0x0, 0x3, 0x400, 0x0, 0x9, 0xffffffff, 0x1, 0x101, 0xced, 0x9, 0x8001, 0x9, 0x651, 0x1, 0x3, 0x7, 0x4ba, 0x4, 0xf689, 0x8, 0x2, 0x0, 0x9, 0x3, 0x6, 0x4, 0x7, 0x4, 0x1, 0xc, 0x2, 0x80000000, 0x5, 0x68e, 0x7, 0x4b28, 0x4, 0x2, 0xd5, 0x19ec, 0x9, 0x8000, 0xc, 0x1, 0xd0c, 0x8, 0x4, 0x40000, 0xba2, 0x465, 0xffffffff, 0x7, 0x7, 0x8001, 0x9, 0x10001, 0x8001, 0x3, 0x3, 0x3, 0x0, 0xfffffff8, 0x9, 0x9, 0x5, 0x9, 0x0, 0x0, 0x7cd827c9, 0xf, 0x8, 0x7, 0x6, 0xaee, 0x6c, 0x10001, 0x5, 0x8001, 0x56f, 0x0, 0x3, 0x5, 0x100, 0x4, 0x3, 0x6, 0x7, 0x5, 0x2, 0xd4, 0x7ff, 0x1, 0x4, 0xfffffff9, 0x0, 0xfffff752, 0x80000001, 0x1, 0x3ff, 0x4, 0x400, 0x1ff, 0xc4, 0x7, 0xfffffff8, 0x3, 0x2, 0x6214, 0x7, 0xab, 0x5, 0xffffff81, 0x7fffffff, 0x0, 0xa3, 0x2, 0x9, 0x3, 0x1, 0x7, 0x8, 0x2, 0x1, 0x101, 0x8, 0x4, 0x0, 0xfffffff2, 0x8, 0xffffffff, 0xa61, 0x9, 0x1ff, 0x5, 0x1, 0x4, 0x5, 0x101, 0x4, 0x7, 0x9, 0xfffffffa, 0x67a, 0x4, 0x80000000, 0x7fffffff, 0x22c, 0xfffffffb, 0x7, 0x7fffffff, 0x2, 0x2, 0x4, 0x3, 0x7, 0x6, 0x7, 0x7, 0x6, 0x5, 0xfffffffc, 0x400, 0xa, 0x54e, 0x7fffffff, 0x5, 0xd, 0x1, 0x6, 0x2, 0x1c0000, 0x9, 0x10, 0xc3da, 0x0, 0x3, 0x4, 0x2, 0x1, 0x3, 0x2, 0x200000, 0x80, 0xd, 0x9, 0x3, 0x0, 0xa, 0x9, 0xcf, 0x5, 0x9, 0x1, 0x7, 0x8, 0x1, 0x8, 0x6, 0x80000000, 0x4c0f, 0x9, 0x5, 0x9, 0xb57f, 0x1, 0x8, 0x7, 0x8, 0xc, 0x9, 0xfffff06f, 0x10001, 0x3, 0x2, 0x9, 0x3, 0x8000, 0xdb9, 0x9930, 0x6, 0xc, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x6c0, 0x22, 0x9, 0x0, 0x7fffffff, 0x2, 0x32, 0x1ff, 0xf, 0xc67, 0x5, 0x5, 0x8, 0x8a, 0x425b, 0x9, 0x9c5, 0xc0000000, 0x4, 0x47, 0xffffffff, 0x5, 0x10001, 0x80000001, 0x9, 0x8, 0xff, 0x0, 0xfffffffe, 0x7, 0xff, 0x7, 0x3, 0x401, 0x8, 0xf2, 0x3, 0xc8, 0x400009, 0x7, 0x7, 0x10001, 0x6, 0x6, 0x8000, 0x7fffffff, 0x5, 0xa, 0x1, 0x8, 0x2, 0x8000, 0x80, 0xf414, 0x5, 0x2, 0x2, 0x2, 0x3ff, 0x9, 0x1, 0xffffffff, 0x400, 0x4, 0x64f5, 0x2, 0x6, 0x4, 0x9, 0x5, 0x1, 0x10, 0x3000000, 0x9, 0x7f, 0x4, 0x10000, 0xde, 0xa3d, 0x5, 0x4, 0x8, 0xffffffff, 0x1ff, 0x2800, 0x5, 0xa8000000, 0x7, 0x1ff, 0xa, 0xfffffff7, 0xe, 0x0, 0x213b, 0x10, 0x9, 0x7a, 0x7, 0x7fff, 0x0, 0xd, 0x938e, 0xa, 0xffffffff, 0x1, 0x0, 0x6, 0x7, 0x9, 0x3, 0x1ff, 0x1, 0x188, 0x2e, 0x100, 0xb278, 0x91, 0x7, 0x4, 0x3, 0xca9, 0x5, 0x10000, 0x9, 0x0, 0x200, 0x1, 0x10001, 0x1, 0x1, 0x7, 0x3, 0xbd, 0x3, 0x3, 0xa, 0x80000001, 0xffffffdd, 0x2, 0x7fffffff, 0x2, 0x9, 0x9, 0xff, 0x0, 0x1, 0x7, 0xffffff39, 0x80000001, 0x2509, 0x9, 0xfffffffb, 0xffffffff, 0x7, 0x5, 0x7, 0x9, 0x3ff, 0x3, 0x2, 0xb, 0x1ff, 0x10001, 0x2, 0x4, 0x101, 0xffffff01, 0x7f9, 0x85, 0x81, 0x4, 0x7, 0xff, 0x4047, 0x0, 0x8, 0x6, 0x1, 0x13e, 0xa, 0x7ff, 0x845c, 0x4, 0x1, 0x7, 0x800000, 0x0, 0x3, 0xb2, 0xae5, 0x1, 0x3, 0xa232, 0x2, 0x8, 0x80, 0x4, 0x800, 0x2, 0x3, 0x8, 0x77eb, 0x7, 0x2, 0x4, 0x6, 0x4, 0x5, 0x2400000, 0x5, 0x2, 0x8000, 0xcfc, 0x7, 0x8, 0x4, 0x786df63e, 0xe, 0x1, 0x7f, 0x4839, 0x9, 0x43b, 0x0, 0x929, 0x6, 0x80000001, 0x80, 0x6, 0x0, 0x5, 0x1, 0x5, 0x6, 0x8, 0x1c38, 0x72, 0x0, 0xf, 0x2, 0x2018e915, 0xfff, 0x7, 0xfffffff2, 0x6, 0x6df, 0xa000000, 0x5, 0x2, 0x5, 0x82, 0x9, 0x0, 0x2, 0x1, 0x5b2, 0x5, 0x8001, 0x8, 0x6, 0x1, 0x79a4, 0x9, 0x2, 0x3ff, 0x7fffffff, 0x1, 0x8, 0x100, 0xf, 0x3, 0x7, 0x6, 0x0, 0x3, 0x8000, 0x8000, 0x6, 0x36ea, 0x10000, 0x0, 0xfc4, 0x10001, 0xf, 0x7, 0x0, 0x57, 0x6, 0xfffffff9, 0x4]}) 6m53.907253207s ago: executing program 4 (id=77): bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000380), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000700)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f00000003c0)=0x1ff, 0x12) 6m51.861779801s ago: executing program 4 (id=82): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000180)='./file1/file4\x00', &(0x7f00000001c0), 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ff1100001f79a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b704000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2000, r1}, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000500)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file1/file4/file7/file5\x00', 0x0) 6m51.779249732s ago: executing program 33 (id=82): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000180)='./file1/file4\x00', &(0x7f00000001c0), 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ff1100001f79a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b704000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2000, r1}, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000500)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file1/file4/file7/file5\x00', 0x0) 6m25.770910547s ago: executing program 2 (id=144): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r2, &(0x7f00000000c0)='\x00', 0x1, 0x809, &(0x7f000005ffe4)={0xa, 0x4e23, 0x8, @loopback, 0x80000000}, 0x1c) recvmmsg(r2, &(0x7f0000005900)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x1000}], 0x1, &(0x7f0000000e40)=""/58, 0x3a}, 0x80}, {{&(0x7f0000000e80)=@alg, 0x80, &(0x7f0000004400)}, 0x4}], 0x4000000000000cc, 0x40010003, 0x0) 6m24.221244128s ago: executing program 2 (id=146): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000005000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8a}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='io.stat\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x1, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x4, 0x0, 0x0, 0xc3100, 0x5, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000a00)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000a40)={0x1, 0xf, 0x4, 0x62}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000b40), 0x0, 0x10, 0x3ff, @void, @value}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x20004011) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0x18, &(0x7f0000000340)=ANY=[@ANYBLOB="18480000faffffff0000000000000000001a0300050000007c010000000000001831000005000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0xc3100, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 6m24.020554909s ago: executing program 2 (id=148): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000000)=0x9106, 0x4) sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x0, 0x4, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) r2 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000001a) fcntl$notify(r2, 0x402, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000001fc0)=""/4096, 0x1000}], 0x1}, 0x8}], 0x2, 0x0, 0x0) 6m23.798997771s ago: executing program 2 (id=149): pipe2$9p(&(0x7f0000000000), 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000001d0000bf91000000000000b7020000000000008500000084000000b700000000d6d6c7a201c5e0a3ed0b0000009500000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000800)={0x68, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140ffffffff080009"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sync() 6m20.216939405s ago: executing program 2 (id=159): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendto$unix(r4, &(0x7f0000000080), 0xffffff9d, 0x0, 0x0, 0x0) 6m18.864892984s ago: executing program 2 (id=162): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x40020000) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000002100)={0x1, 'tunl0\x00', 0x40001}, 0x18) fcntl$notify(0xffffffffffffffff, 0x402, 0x39) open(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x141042, 0x0) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_io_uring_setup(0x92c, 0x0, &(0x7f0000000140), 0x0) getgroups(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 6m3.19886833s ago: executing program 34 (id=162): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x40020000) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000002100)={0x1, 'tunl0\x00', 0x40001}, 0x18) fcntl$notify(0xffffffffffffffff, 0x402, 0x39) open(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x141042, 0x0) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_io_uring_setup(0x92c, 0x0, &(0x7f0000000140), 0x0) getgroups(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 4m41.652585111s ago: executing program 6 (id=408): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, 0x0, 0x0) connect$inet6(r1, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) r2 = dup(r0) r3 = epoll_create1(0x0) r4 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000001040)) write$UHID_INPUT(r2, &(0x7f0000001040)={0xa, {"a2e3ad08ed6b52f99cfbf4c087f71e9b3d0963ff7fc6e5539b9b3b0a8b9b441b4552101b080d29558f0e1ac6e7049b3468959b189a242a9b4bf3988f7ef319520700ffe8d178708c523c921b1b23380a169b63d336cd3b78130daa61d8e81aea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1d020000000000000075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801000000005b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b412435111c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269caf12c31357c8219793e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a687974e7b4ab01b7f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da3710ac000000001a527777a5371f87d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ef06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f103000000416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d601005c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac292d9e53803ed000000009737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b09114edb8e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb67ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe529003d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f070077d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85e654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b405177548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd84e935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba30b4279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227edff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b30f0b932a4d02da711b757fe43c06d21e759595e4e98b27faea8aa12bc8040000000000000033eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d0000010000000000fcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d080e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed704887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6ff7ffb1d62458d0741a12830052fcc460db043afe525629b40d7cee65802cb5e930ed624806c43a006dc9336d07c2b8081c188d26558f48261f7897084c2a1a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c0ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264c7b34252600c9654e502dcea39cb0800eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc640df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c6000064b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa7082ead01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058093fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800, &(0x7f0000000580)={[{@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@nolazytime}, {@barrier}, {@jqfmt_vfsv0}, {@dioread_lock}, {@usrjquota_path={'usrjquota', 0x3d, '.'}}, {@test_dummy_encryption}]}, 0x0, 0x236, &(0x7f0000000300)="$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") syz_mount_image$ext4(&(0x7f0000000440)='ext2\x00', &(0x7f00000000c0)='./file0\x00', 0x403, &(0x7f0000000100)={[{@grpid}, {@errors_continue}, {@errors_remount}, {@minixdf}, {@discard}, {@usrjquota, 0x2e}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'ext4\x00'}}, {@fowner_lt}], 0x2c}, 0x0, 0x45a, &(0x7f0000000480)="$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") 4m41.102290105s ago: executing program 6 (id=412): prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x31}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit={0x95, 0x0, 0x1008}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 4m38.871267431s ago: executing program 6 (id=416): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) socket(0x11, 0xa, 0xfffffffd) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ptrace$ARCH_MAP_VDSO_32(0x1e, r0, 0x80000000, 0x2002) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) 4m35.667224305s ago: executing program 6 (id=422): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f00000007c0)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@sysvgroups}, {@acl}, {@usrquota}]}, 0x10, 0x4d7, &(0x7f0000000fc0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r0}, 0x18) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b405000000000000711035000000000015000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x39) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) ioctl$HIDIOCGUSAGES(r3, 0xd01c4813, &(0x7f00000083c0)={{0x3, 0x1, 0x3ff, 0x3, 0x81, 0xb}, 0x1d4, [0x401, 0x6, 0x4, 0xcb5d, 0xffffffff, 0xffffff81, 0x32b4, 0x0, 0x7, 0x9, 0xa317, 0xbe, 0x4, 0xb7, 0x8, 0x0, 0x80, 0x2, 0x8, 0x3, 0x186, 0x9, 0x7, 0x0, 0x95, 0x6, 0x5, 0x5f, 0x8, 0x1, 0x7c, 0xfffffffc, 0x8, 0x8, 0x8, 0xa, 0x6, 0x5, 0x4, 0x400, 0x1, 0xa, 0x8, 0x2, 0x40, 0x53a, 0x8, 0x6, 0x7, 0x5, 0x8001, 0x0, 0x1f, 0x1, 0x4, 0xfffffff7, 0x800000, 0x6, 0x4, 0x10000, 0x0, 0x9c3b, 0x2e248434, 0xfcc, 0x91, 0x7f, 0x39, 0x4, 0xffffffff, 0x80000001, 0x3, 0x4, 0x3ff, 0x6d9c, 0x7fff, 0x8, 0x614, 0x8, 0xff, 0xa710, 0x6, 0xff, 0xf95, 0x4a, 0xd, 0xf, 0x5, 0xfffffffd, 0x9, 0x9, 0x3, 0xf, 0x9, 0x1, 0x9, 0x7, 0x100, 0xffff83fd, 0x1e96, 0x401, 0xffffffff, 0x8732, 0xfffff800, 0x0, 0x3, 0x1, 0x0, 0x1, 0x8fcd, 0x3, 0x9, 0x3, 0x0, 0x800, 0x1, 0x8001, 0x0, 0x80000000, 0x5, 0x6, 0x40, 0x8, 0x6c54, 0xf, 0x5, 0x77, 0x7, 0xbd2, 0x4, 0x2, 0x101, 0x7, 0xc00000, 0x101, 0x2, 0x4, 0x4, 0x6, 0x7, 0x400, 0x4, 0x3, 0x4, 0xff, 0xd0, 0x9, 0x3, 0x75, 0x4, 0x47479268, 0x0, 0x4, 0x7, 0x5, 0x5, 0xb9a4, 0x7fffffff, 0xffffffff, 0x9, 0x9, 0x1, 0x1000, 0xf, 0x5, 0xfffffffb, 0xfffffff5, 0x2, 0xcd, 0x4, 0x1, 0x3, 0x10001, 0x4, 0x81, 0x7, 0x2, 0x50, 0x8001, 0xdb7, 0x4, 0x401, 0x2c, 0x5, 0xd, 0x0, 0x8, 0x1000, 0x2, 0x8, 0x2, 0xd, 0x3, 0x9, 0xa654, 0x5, 0xc458, 0x0, 0xb, 0x237c, 0x5, 0x2, 0x9, 0x7ff, 0xc089, 0x2, 0x8f66, 0x5, 0x6, 0x1, 0xe9, 0x0, 0x3, 0x9c4, 0x4, 0xa71, 0x9, 0x7, 0x0, 0xddc5, 0x3, 0x30, 0x8, 0x4, 0x5, 0x2, 0x2, 0x5, 0x4faf, 0x6, 0x8, 0x1, 0x624, 0x9, 0x3, 0xfc86, 0x9, 0x200, 0x0, 0x2, 0x8cc, 0x6, 0xfffffff7, 0x7fff, 0x8, 0x100, 0x1, 0x2, 0x8001, 0x5, 0x5, 0x9, 0x1, 0x2, 0x1, 0xb, 0xffff, 0x7, 0x4, 0x1, 0x9, 0x1, 0x5, 0x25, 0xeaee, 0x3, 0xf, 0x4, 0x7, 0x1ff, 0x9d100, 0x6, 0x1, 0x100, 0x3, 0x2, 0xcc, 0x5, 0x7, 0x9, 0x200, 0x8, 0x7, 0x8ee, 0x8, 0xa, 0x90bf, 0x8, 0x80000000, 0x81, 0x49, 0x83c, 0x2e, 0xffff051f, 0x0, 0xfffffffd, 0x10001, 0x3e, 0x10000, 0x151abe11, 0x898, 0x2, 0xa00, 0xde, 0x8, 0x0, 0x4, 0xbef7, 0x7, 0xfffffffb, 0x8, 0x5, 0x10000, 0xa78, 0x2b, 0x7, 0x8, 0xf, 0x3df, 0x401, 0x0, 0x27, 0xf316, 0x6, 0x8001, 0x40, 0x2, 0x0, 0x5, 0x8f, 0x4, 0x0, 0x7, 0x8, 0x3, 0x10, 0x9, 0x2, 0x4e4380, 0x3, 0xb, 0xfff, 0x2, 0x3, 0x8001, 0x0, 0x5, 0x6, 0x4b1df081, 0x441, 0x96d2, 0x9, 0x8, 0x9, 0xa, 0x4, 0x8000, 0x1, 0x9, 0xa, 0x3d8, 0xc, 0x7ff, 0xf, 0x3, 0xffffffc0, 0x22, 0x6, 0x2, 0x22, 0x4, 0x1, 0x8, 0x0, 0x6, 0x9, 0x2, 0x45dd, 0x3, 0x6, 0x9, 0x80000001, 0xb9b6, 0x100, 0x78c, 0x3, 0x7fffffff, 0x7fffffff, 0x420, 0x3, 0x8, 0x81, 0x80000001, 0x81, 0x3, 0xffff, 0x7, 0x7, 0x5, 0x1fe000, 0x2, 0x400, 0x1, 0x6, 0x6, 0xcb, 0x5, 0xae, 0x3, 0x9, 0x51, 0xb9d0, 0x8, 0x3, 0x80000000, 0x0, 0x1, 0x1, 0x10001, 0x0, 0x5, 0x400, 0x298, 0x8, 0x8, 0x8, 0xfffffffc, 0x9, 0x6, 0x2, 0x5, 0x10, 0x2, 0x6, 0x8, 0x4, 0x88a, 0x5b0, 0x8, 0x3, 0xc, 0x8, 0x10, 0x800, 0x4, 0x5, 0x401, 0x92, 0x7ff, 0x55aa, 0xfffffff8, 0x0, 0x9, 0x0, 0x1, 0x9, 0x26433bf5, 0x1, 0x100, 0x4, 0x8, 0x9, 0x5, 0xb, 0x80000001, 0x1, 0xe66, 0x7, 0x7, 0x6, 0x8, 0x6, 0x7, 0x6, 0x7fffffff, 0x4, 0x3, 0x2, 0x4, 0x7, 0x6, 0x6, 0x6, 0x3, 0x3, 0x2, 0x7, 0x6, 0x4, 0x0, 0x5, 0xfff, 0x9, 0x8, 0x324a95a5, 0x1000, 0x8, 0x1, 0x9, 0x11, 0xff, 0x81, 0xe, 0x1, 0x2, 0x8, 0x9, 0x35af, 0x15, 0x0, 0x3, 0x400, 0x0, 0x9, 0xffffffff, 0x1, 0x101, 0xced, 0x9, 0x8001, 0x9, 0x651, 0x1, 0x3, 0x7, 0x4ba, 0x4, 0xf689, 0x8, 0x2, 0x0, 0x9, 0x3, 0x6, 0x4, 0x7, 0x4, 0x1, 0xc, 0x2, 0x80000000, 0x5, 0x68e, 0x7, 0x4b28, 0x4, 0x2, 0xd5, 0x19ec, 0x9, 0x8000, 0xc, 0x1, 0xd0c, 0x8, 0x4, 0x40000, 0xba2, 0x465, 0xffffffff, 0x7, 0x7, 0x8001, 0x9, 0x10001, 0x8001, 0x3, 0x3, 0x3, 0x0, 0xfffffff8, 0x9, 0x9, 0x5, 0x9, 0x0, 0x0, 0x7cd827c9, 0xf, 0x8, 0x7, 0x6, 0xaee, 0x6c, 0x10001, 0x5, 0x8001, 0x56f, 0x0, 0x3, 0x5, 0x100, 0x4, 0x3, 0x6, 0x7, 0x5, 0x2, 0xd4, 0x7ff, 0x1, 0x4, 0xfffffff9, 0x0, 0xfffff752, 0x80000001, 0x1, 0x3ff, 0x4, 0x400, 0x1ff, 0xc4, 0x7, 0xfffffff8, 0x3, 0x2, 0x6214, 0x7, 0xab, 0x5, 0xffffff81, 0x7fffffff, 0x0, 0xa3, 0x2, 0x9, 0x3, 0x1, 0x7, 0x8, 0x2, 0x1, 0x101, 0x8, 0x4, 0x0, 0xfffffff2, 0x8, 0xffffffff, 0xa61, 0x9, 0x1ff, 0x5, 0x1, 0x4, 0x5, 0x101, 0x4, 0x7, 0x9, 0xfffffffa, 0x67a, 0x4, 0x80000000, 0x7fffffff, 0x22c, 0xfffffffb, 0x7, 0x7fffffff, 0x2, 0x2, 0x4, 0x3, 0x7, 0x6, 0x7, 0x7, 0x6, 0x5, 0xfffffffc, 0x400, 0xa, 0x54e, 0x7fffffff, 0x5, 0xd, 0x1, 0x6, 0x2, 0x1c0000, 0x9, 0x10, 0xc3da, 0x0, 0x3, 0x4, 0x2, 0x1, 0x3, 0x2, 0x200000, 0x80, 0xd, 0x9, 0x3, 0x0, 0xa, 0x9, 0xcf, 0x5, 0x9, 0x1, 0x7, 0x8, 0x1, 0x8, 0x6, 0x80000000, 0x4c0f, 0x9, 0x5, 0x9, 0xb57f, 0x1, 0x8, 0x7, 0x8, 0xc, 0x9, 0xfffff06f, 0x10001, 0x3, 0x2, 0x9, 0x3, 0x8000, 0xdb9, 0x9930, 0x6, 0xc, 0x9, 0x0, 0x1, 0x8000, 0x0, 0x6c0, 0x22, 0x9, 0x0, 0x7fffffff, 0x2, 0x32, 0x1ff, 0xf, 0xc67, 0x5, 0x5, 0x8, 0x8a, 0x425b, 0x9, 0x9c5, 0xc0000000, 0x4, 0x47, 0xffffffff, 0x5, 0x10001, 0x80000001, 0x9, 0x8, 0xff, 0x0, 0xfffffffe, 0x7, 0xff, 0x7, 0x3, 0x401, 0x8, 0xf2, 0x3, 0xc8, 0x400009, 0x7, 0x7, 0x10001, 0x6, 0x6, 0x8000, 0x7fffffff, 0x5, 0xa, 0x1, 0x8, 0x2, 0x8000, 0x80, 0xf414, 0x5, 0x2, 0x2, 0x2, 0x3ff, 0x9, 0x1, 0xffffffff, 0x400, 0x4, 0x64f5, 0x2, 0x6, 0x4, 0x9, 0x5, 0x1, 0x10, 0x3000000, 0x9, 0x7f, 0x4, 0x10000, 0xde, 0xa3d, 0x5, 0x4, 0x8, 0xffffffff, 0x1ff, 0x2800, 0x5, 0xa8000000, 0x7, 0x1ff, 0xa, 0xfffffff7, 0xe, 0x0, 0x213b, 0x10, 0x9, 0x7a, 0x7, 0x7fff, 0x0, 0xd, 0x938e, 0xa, 0xffffffff, 0x1, 0x0, 0x6, 0x7, 0x9, 0x3, 0x1ff, 0x1, 0x188, 0x2e, 0x100, 0xb278, 0x91, 0x7, 0x4, 0x3, 0xca9, 0x5, 0x10000, 0x9, 0x0, 0x200, 0x1, 0x10001, 0x1, 0x1, 0x7, 0x3, 0xbd, 0x3, 0x3, 0xa, 0x80000001, 0xffffffdd, 0x2, 0x7fffffff, 0x2, 0x9, 0x9, 0xff, 0x0, 0x1, 0x7, 0xffffff39, 0x80000001, 0x2509, 0x9, 0xfffffffb, 0xffffffff, 0x7, 0x5, 0x7, 0x9, 0x3ff, 0x3, 0x2, 0xb, 0x1ff, 0x10001, 0x2, 0x4, 0x101, 0xffffff01, 0x7f9, 0x85, 0x81, 0x4, 0x7, 0xff, 0x4047, 0x0, 0x8, 0x6, 0x1, 0x13e, 0xa, 0x7ff, 0x845c, 0x4, 0x1, 0x7, 0x800000, 0x0, 0x3, 0xb2, 0xae5, 0x1, 0x3, 0xa232, 0x2, 0x8, 0x80, 0x4, 0x800, 0x2, 0x3, 0x8, 0x77eb, 0x7, 0x2, 0x4, 0x6, 0x4, 0x5, 0x2400000, 0x5, 0x2, 0x8000, 0xcfc, 0x7, 0x8, 0x4, 0x786df63e, 0xe, 0x1, 0x7f, 0x4839, 0x9, 0x43b, 0x0, 0x929, 0x6, 0x80000001, 0x80, 0x6, 0x0, 0x5, 0x1, 0x5, 0x6, 0x8, 0x1c38, 0x72, 0x0, 0xf, 0x2, 0x2018e915, 0xfff, 0x7, 0xfffffff2, 0x6, 0x6df, 0xa000000, 0x5, 0x2, 0x5, 0x82, 0x9, 0x0, 0x2, 0x1, 0x5b2, 0x5, 0x8001, 0x8, 0x6, 0x1, 0x79a4, 0x9, 0x2, 0x3ff, 0x7fffffff, 0x1, 0x8, 0x100, 0xf, 0x3, 0x7, 0x6, 0x0, 0x3, 0x8000, 0x8000, 0x6, 0x36ea, 0x10000, 0x0, 0xfc4, 0x10001, 0xf, 0x7, 0x0, 0x57, 0x6, 0xfffffff9, 0x4]}) 4m34.218547855s ago: executing program 6 (id=430): syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_snmp6\x00') r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000100)={0x0, r1}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000001740)=""/192, &(0x7f0000000140)=""/92, 0x4000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)=""/57, 0x0, &(0x7f0000000500)=""/4096}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 4m32.029452951s ago: executing program 6 (id=436): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000ec0)={'virt_wifi0\x00', @multicast}) socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x0, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) ioctl$sock_ax25_SIOCADDRT(r2, 0x890b, &(0x7f00000001c0)={@default, @null, 0x7, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) 4m31.180466967s ago: executing program 35 (id=436): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000ec0)={'virt_wifi0\x00', @multicast}) socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x0, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) ioctl$sock_ax25_SIOCADDRT(r2, 0x890b, &(0x7f00000001c0)={@default, @null, 0x7, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) 13.407266813s ago: executing program 7 (id=1013): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@data_err_abort}, {@debug}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@minixdf}]}, 0xfe, 0x46d, &(0x7f0000000f00)="$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") socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x6611, 0x0) 13.119169155s ago: executing program 0 (id=1014): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x2001}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x30, r5, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x8}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x9004) 13.068866195s ago: executing program 8 (id=1015): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 11.162450949s ago: executing program 0 (id=1017): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$inet6(0xa, 0x80003, 0xff) socket$inet6(0xa, 0x80003, 0xff) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) socket$l2tp6(0xa, 0x2, 0x73) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800060000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 9.123444644s ago: executing program 5 (id=1020): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x39}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}]}]}, 0x30}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) close(r0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, 0x0, 0x4000000) 9.087130224s ago: executing program 7 (id=1021): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000001c0)=0x100, 0x4) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) bind$xdp(r0, &(0x7f0000000180)={0x2c, 0x1, r2, 0x0, r3}, 0x10) 9.086335054s ago: executing program 0 (id=1022): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000001a00)=@abs={0x0, 0x0, 0xfffffff4}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$fscrypt_v1(0x0, &(0x7f0000000140)={'fscrypt:', @desc2}, &(0x7f0000000180)={0x0, "eb428edff76dfb8a5421e90d9a0c27a2737bb4e15be1ac96fd5f67778dcd1136ea573155a1e92e47bf28841d0fe60cb5c38c0357e90438a34c92cba1be5695a1"}, 0x48, 0xfffffffffffffff8) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r1, r1}, &(0x7f00000000c0)=""/83, 0x53, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 9.011265595s ago: executing program 8 (id=1023): r0 = socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x80800}) setresuid(0xffffffffffffffff, 0x0, 0xee00) io_uring_enter(r4, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 9.004931305s ago: executing program 1 (id=1024): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f0000000280)={0xa, 0x4e23, 0x3, @loopback}, 0x1c) 7.703170674s ago: executing program 0 (id=1025): sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r2, @ANYBLOB="05005b"], 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) 7.700249834s ago: executing program 8 (id=1026): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x3, &(0x7f0000000000)={[{@nogrpid}, {@noload}, {@noload}]}, 0x1, 0x626, &(0x7f0000000100)="$eJzs3c1vVOUaAPDnTKff994WcnOvuJAmxkCitLSCIcZE2BOCHzvdVFoIUiihNVoksSS4MRo3LkxcuRD/CpXErf+ACzeuDAkxhoUYImPOzDll2s5MP6endH6/5NDz0TnvM6VPn3feec+cADrWSPpPKeJARFxNIobqjpUjOzhS+777f9w4ly5JVCpv/J7EjY+SxfpzJdnXfdmD/x6KJH34/onvVrU7t3D90uTMzPS1bHts/vLVsbmF60cuXp68MH1h+srESxMnjh87fmL86NafX+b0rXffH/rkzFvffPUwGf/2lzNJnIxHXbVj6fNa+djeLbWctj0SlZoH9fvTn+uJLZ57t/hzKP89yfVHUi4sHDbofPb72B0R/4+h6Kr73xyKj18rNDigrSpJ5DUK6DjJpvK/b/sDAXZY3g/IX9s3eh28WqnNvRJgJ9w7VRsAqOV+d0Tk+V/Oxs76qmMDA/eTZeM8SURsbWSuJm3jpx/P3EqXaDIOB7TH4s3ebNx+Zf1Pqrk5HH3VrYH7pWX5X6pb0v2vb7L9kRXb8h92zuLNiHgqq/898Tj/a2/7tcz/kbr8f2eT7ct/AAAAAAAA2D53TkXEC43m/5WW5v/0NJj/MxgRJ7eh/bXf/yvdzVaSbWgOqHPvVMQrDef/Ls3xHe7Ktv5dnQ/QnZy/ODN9NCL+ExGHo7s33R5fcd76GcJHPtv/ZbP26+f/pUvafj4XMDvT3fKKC3GnJucnt/q8gYh7NyOers7/PZjtWT7/L63/SYP6n+b31XW2sf+522ebHVs7/4F2qXwdcahh/X/c3U5afz7HWLU/MJb3CnKPewDPfPj5983al/9QnLT+D7TO/96k/vN65iIWN3D+noh4caFcaXZ8s/3/nuTNrvz8qQ8m5+evjUf0JKdX75/YQMCwh+X5kOdLmv+Hn209/rfU/6/Lw/5o8HegyQjd/x4N/tosHvUfipPm/1Tr+j+8vP5vYCU/xe3hH5q1f3Zd9f9YtaYfzvYY/4N6qz+PY72ZWki4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPCEK0XEvyIpjS6tl0qjoxGDEfHfGCjNzM7NP39+9r0rU+mx6v3/S/mdfodq20l+///huu2J5dv9aVv7IuKLrv7q8dFzszNTRT95AAAAAAAAAAAAAAAAAAAA2CUGq9f8V3pXXv+f+q2r6OiAtitnX+U7dJ4s/z99e8OPrPRufzTATioXHQBQmPXnf3db4wB2XvP8f/CwUrWj4QA7SP8fOtcm89/bBbAHqP/QqdY5ptfX7jiAIqj/AAAAAACwp+w7eOfnJCIWX+6vLqme7JjJ/rC3lYoOACiMObzQucqzRUcAFMVrfCBZWvur4cX+zWf/J+0JCAAAAAAAAAAAAABY5dAB1/9Dp2p9/b+5/bCXtbj+v5r85XV/O/CkaX7rD7Uf9rqVr/HrCrwbfkGHWKvau/4fAAAAAAAAAAAAAHaBvuuXJmdmpq/NLTx5K6/ujjA2trI4ueb3dMfuCLXVSn9ELO151J62uiNi+89cLvpHt46V/CM4Cgyj4L9LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAkn8CAAD//0vxInQ=") r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000844, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x11}}}}}}, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) 7.429301586s ago: executing program 1 (id=1027): socket(0x2, 0x80805, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x10}, 0x9c) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a00)=@newqdisc={0x6c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x403, 0x8001, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}, @TCA_TBF_PRATE64={0xc, 0x5, 0xafa8d36186c14c7d}]}}]}, 0x6c}}, 0x44080) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x4c, 0x24, 0xd0f, 0x0, 0x2, {0x60, 0x0, 0x0, r6, {}, {0xfff2, 0xa}, {0xffe0, 0x8}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xc, 0x8c4, 0xf, 0x7, 0x5, 0x8}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000055}, 0x4000) sendmmsg$inet6(r1, &(0x7f0000003f00)=[{{0x0, 0xf, &(0x7f0000000300)=[{&(0x7f0000000140)="a2", 0x1a058}], 0x1}}], 0x1, 0x0) 7.429109136s ago: executing program 5 (id=1028): syz_open_procfs$namespace(0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r4) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) 6.379776334s ago: executing program 0 (id=1029): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2000c851, 0x0, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0xfffffffd) accept4(r3, 0x0, 0x0, 0x0) 6.351690084s ago: executing program 5 (id=1030): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r6], 0x54}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20, 0x20}}}}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 6.213643845s ago: executing program 7 (id=1031): bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$cgroup(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@subsystem='memory'}]}) pipe2$9p(&(0x7f0000002480), 0x80000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x17, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb5, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 6.208165115s ago: executing program 8 (id=1032): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002940)=[{{0x0, 0x57, 0x0}}], 0x62, 0x0) 4.279693548s ago: executing program 8 (id=1033): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) 4.259456779s ago: executing program 0 (id=1034): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) connect$ax25(r3, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) socket$inet6_mptcp(0xa, 0x1, 0x106) 4.226307979s ago: executing program 1 (id=1035): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) pread64(r0, &(0x7f0000019040)=""/102388, 0x18ff4, 0x400000000003) 1.719285027s ago: executing program 7 (id=1036): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000000), 0x4, 0x5eb, &(0x7f0000000c00)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f00000028c0)={0x0, 0x28}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x101, {0x0, 0x0, 0x0, 0x0, 0x9, 0x386e3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000000480)={0x2020}, 0x2020) 1.681095717s ago: executing program 1 (id=1037): socket$inet(0x2, 0x1, 0x0) pipe2(&(0x7f0000000040), 0x10000) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000200), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x10, 0x4007, @fd_index=0x8000000, 0x2, 0x0}) io_uring_enter(r0, 0x3f70, 0x0, 0x0, 0x0, 0x0) 1.607545138s ago: executing program 5 (id=1038): socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000080)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg(r1, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)='\r', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001900)=ANY=[], 0xb0}}], 0x2, 0x400c878) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x300}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) 1.459304329s ago: executing program 8 (id=1039): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}]}]}, 0x30}}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r7, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) 1.458812129s ago: executing program 7 (id=1040): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000340)={@random="6ea88d319b8c", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x43, 0x4e22, 0x8}}}}}, 0x0) 1.425301869s ago: executing program 5 (id=1041): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_procfs(0x0, &(0x7f0000001240)='stack\x00') syz_fuse_handle_req(r3, &(0x7f0000006cc0)="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", 0x2000, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e6, &(0x7f0000000080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.421564279s ago: executing program 1 (id=1042): ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0xc, 0x80005, 0xed, "0062ba7d82000000000000000000f7ffffff00"}) syz_open_pts(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000080)='./file1\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x278, &(0x7f0000000200)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$FUSE_WRITE(r3, &(0x7f00000000c0)={0x18}, 0xfffffdef) 1.35069054s ago: executing program 7 (id=1043): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x3, &(0x7f0000000000)={[{@nogrpid}, {@noload}, {@noload}]}, 0x1, 0x626, &(0x7f0000000100)="$eJzs3c1vVOUaAPDnTKff994WcnOvuJAmxkCitLSCIcZE2BOCHzvdVFoIUiihNVoksSS4MRo3LkxcuRD/CpXErf+ACzeuDAkxhoUYImPOzDll2s5MP6endH6/5NDz0TnvM6VPn3feec+cADrWSPpPKeJARFxNIobqjpUjOzhS+777f9w4ly5JVCpv/J7EjY+SxfpzJdnXfdmD/x6KJH34/onvVrU7t3D90uTMzPS1bHts/vLVsbmF60cuXp68MH1h+srESxMnjh87fmL86NafX+b0rXffH/rkzFvffPUwGf/2lzNJnIxHXbVj6fNa+djeLbWctj0SlZoH9fvTn+uJLZ57t/hzKP89yfVHUi4sHDbofPb72B0R/4+h6Kr73xyKj18rNDigrSpJ5DUK6DjJpvK/b/sDAXZY3g/IX9s3eh28WqnNvRJgJ9w7VRsAqOV+d0Tk+V/Oxs76qmMDA/eTZeM8SURsbWSuJm3jpx/P3EqXaDIOB7TH4s3ebNx+Zf1Pqrk5HH3VrYH7pWX5X6pb0v2vb7L9kRXb8h92zuLNiHgqq/898Tj/a2/7tcz/kbr8f2eT7ct/AAAAAAAA2D53TkXEC43m/5WW5v/0NJj/MxgRJ7eh/bXf/yvdzVaSbWgOqHPvVMQrDef/Ls3xHe7Ktv5dnQ/QnZy/ODN9NCL+ExGHo7s33R5fcd76GcJHPtv/ZbP26+f/pUvafj4XMDvT3fKKC3GnJucnt/q8gYh7NyOers7/PZjtWT7/L63/SYP6n+b31XW2sf+522ebHVs7/4F2qXwdcahh/X/c3U5afz7HWLU/MJb3CnKPewDPfPj5983al/9QnLT+D7TO/96k/vN65iIWN3D+noh4caFcaXZ8s/3/nuTNrvz8qQ8m5+evjUf0JKdX75/YQMCwh+X5kOdLmv+Hn209/rfU/6/Lw/5o8HegyQjd/x4N/tosHvUfipPm/1Tr+j+8vP5vYCU/xe3hH5q1f3Zd9f9YtaYfzvYY/4N6qz+PY72ZWki4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPCEK0XEvyIpjS6tl0qjoxGDEfHfGCjNzM7NP39+9r0rU+mx6v3/S/mdfodq20l+///huu2J5dv9aVv7IuKLrv7q8dFzszNTRT95AAAAAAAAAAAAAAAAAAAA2CUGq9f8V3pXXv+f+q2r6OiAtitnX+U7dJ4s/z99e8OPrPRufzTATioXHQBQmPXnf3db4wB2XvP8f/CwUrWj4QA7SP8fOtcm89/bBbAHqP/QqdY5ptfX7jiAIqj/AAAAAACwp+w7eOfnJCIWX+6vLqme7JjJ/rC3lYoOACiMObzQucqzRUcAFMVrfCBZWvur4cX+zWf/J+0JCAAAAAAAAAAAAABY5dAB1/9Dp2p9/b+5/bCXtbj+v5r85XV/O/CkaX7rD7Uf9rqVr/HrCrwbfkGHWKvau/4fAAAAAAAAAAAAAHaBvuuXJmdmpq/NLTx5K6/ujjA2trI4ueb3dMfuCLXVSn9ELO151J62uiNi+89cLvpHt46V/CM4Cgyj4L9LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAkn8CAAD//0vxInQ=") r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000844, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x11}}}}}}, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) 131.202308ms ago: executing program 1 (id=1044): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000000), 0x2, 0xbb8, &(0x7f00000017c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$adfs(&(0x7f0000009e00), &(0x7f0000009e40)='./file0\x00', 0x4002, &(0x7f00000003c0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB=',uid=', @ANYRESHEX=0x0, @ANYBLOB=',uid=', @ANYRESHEX=0x0, @ANYRES8=r1, @ANYRESHEX=0x0, @ANYBLOB=',uid=', @ANYRESHEX=0x0, @ANYBLOB=',uid<', @ANYRESDEC=0x0, @ANYBLOB="2c657569c32b", @ANYRESDEC=0x0, @ANYRESDEC], 0x1, 0x9dcf, &(0x7f0000013cc0)="$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") madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x2008410, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRESHEX], 0x1, 0x5549, &(0x7f0000003d80)="$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") 0s ago: executing program 5 (id=1045): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x9}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f00000000c0)='wg0\x00', 0x4) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000040)={0x0, 'ip6tnl0\x00', {0x3}, 0x121c}) kernel console output (not intermixed with test programs): ================================ [ 47.641134][ T4458] WARNING: The mand mount option has been deprecated and [ 47.641134][ T4458] and is ignored by this kernel. Remove the mand [ 47.641134][ T4458] option from the mount to silence this warning. [ 47.641134][ T4458] ======================================================= [ 48.528386][ T4311] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 48.531607][ T4311] Bluetooth: hci1: Injecting HCI hardware error event [ 48.536622][ T4311] Bluetooth: hci1: hardware error 0x00 [ 50.730131][ T4478] xt_CT: You must specify a L4 protocol and not use inversions on it [ 50.907335][ C1] sched: RT throttling activated [ 51.545219][ T4482] loop1: detected capacity change from 0 to 512 [ 51.586129][ T4482] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 51.663374][ T4484] process 'syz.0.29' launched './file1' with NULL argv: empty string added [ 51.675500][ T4486] loop4: detected capacity change from 0 to 128 [ 51.685943][ T4482] netlink: 312 bytes leftover after parsing attributes in process `syz.1.27'. [ 51.790400][ T4489] syz.4.30: attempt to access beyond end of device [ 51.790400][ T4489] loop4: rw=2049, sector=145, nr_sectors = 664 limit=128 [ 52.814955][ T4311] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 53.263414][ T4485] syz.4.30: attempt to access beyond end of device [ 53.263414][ T4485] loop4: rw=524288, sector=145, nr_sectors = 33 limit=128 [ 53.285206][ T4486] syz.4.30: attempt to access beyond end of device [ 53.285206][ T4486] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 53.854335][ T4388] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.599094][ T4320] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 54.602190][ T4320] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 54.604612][ T4319] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 54.607045][ T4319] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 54.610021][ T4319] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 54.612184][ T4320] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 55.835220][ T27] audit: type=1326 audit(55.530:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4519 comm="syz.1.41" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c75ad28 code=0x0 [ 55.891607][ T4388] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.909584][ T4507] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 55.916184][ T4532] loop4: detected capacity change from 0 to 8 [ 55.957021][ T4532] SQUASHFS error: zlib decompression failed, data probably corrupt [ 55.981896][ T4532] SQUASHFS error: Failed to read block 0x9b: -5 [ 55.983420][ T4532] SQUASHFS error: Unable to read metadata cache entry [99] [ 55.993881][ T4532] SQUASHFS error: Unable to read inode 0x127 [ 56.209740][ T4388] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.226994][ T4533] loop4: detected capacity change from 0 to 2048 [ 56.267010][ T4535] tipc: Started in network mode [ 56.268985][ T4535] tipc: Node identity aaaaaaaaaa41, cluster identity 4711 [ 56.271794][ T4535] tipc: Enabled bearer , priority 10 [ 56.289125][ T4533] loop4: p2 p3 < > p4 < p5 > [ 56.290454][ T4533] loop4: partition table partially beyond EOD, truncated [ 56.298454][ T4533] loop4: p3 start 4284289 is beyond EOD, truncated [ 56.321761][ T4388] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.663400][ T4320] Bluetooth: hci2: command 0x0409 tx timeout [ 57.644028][ T4351] tipc: Node number set to 15444650 [ 59.249926][ T4311] Bluetooth: hci2: command 0x041b tx timeout [ 59.282811][ T4516] chnl_net:caif_netlink_parms(): no params data found [ 59.413924][ T4571] loop2: detected capacity change from 0 to 2048 [ 59.445669][ T4571] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 59.490640][ T4571] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 60.028865][ T4584] Injecting memory failure for pfn 0x137dfe at process virtual address 0x400000ffe000 [ 60.452425][ T4584] Memory failure: 0x137dfe: recovery action for dirty LRU page: Recovered [ 60.553122][ T4578] netlink: 24 bytes leftover after parsing attributes in process `syz.4.56'. [ 60.663940][ T4516] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.665850][ T4516] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.670281][ T4516] device bridge_slave_0 entered promiscuous mode [ 60.683743][ T4516] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.688056][ T4516] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.748674][ T4516] device bridge_slave_1 entered promiscuous mode [ 60.814115][ T4516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.846461][ T4516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.347597][ T4311] Bluetooth: hci2: command 0x040f tx timeout [ 61.611334][ T4516] team0: Port device team_slave_0 added [ 61.672308][ T4516] team0: Port device team_slave_1 added [ 62.538357][ T4516] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.540374][ T4516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.572154][ T4516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.850742][ T4639] xt_recent: hitcount (768) is larger than allowed maximum (255) [ 63.377590][ T4320] Bluetooth: hci2: command 0x0419 tx timeout [ 63.475766][ T4516] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.478128][ T4516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.507135][ T4516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.534127][ T4632] netlink: 'syz.1.68': attribute type 4 has an invalid length. [ 63.562498][ T4642] netlink: 'syz.1.68': attribute type 4 has an invalid length. [ 63.713880][ T4652] loop4: detected capacity change from 0 to 512 [ 63.799693][ T4516] device hsr_slave_0 entered promiscuous mode [ 63.824072][ T4657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.73'. [ 63.828705][ T4652] Quota error (device loop4): do_check_range: Getting block 6 out of range 1-5 [ 63.831204][ T4652] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 63.845314][ T4657] netlink: 48 bytes leftover after parsing attributes in process `syz.0.73'. [ 63.847667][ T4652] EXT4-fs error (device loop4): ext4_acquire_dquot:6795: comm syz.4.72: Failed to acquire dquot type 0 [ 63.858129][ T4516] device hsr_slave_1 entered promiscuous mode [ 63.867955][ T4652] EXT4-fs (loop4): Remounting filesystem read-only [ 63.870693][ T4652] Quota error (device loop4): do_check_range: Getting block 6 out of range 1-5 [ 63.873221][ T4652] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 63.875710][ T4652] EXT4-fs error (device loop4): ext4_acquire_dquot:6795: comm syz.4.72: Failed to acquire dquot type 0 [ 63.885143][ T4652] EXT4-fs (loop4): Remounting filesystem read-only [ 63.893415][ T4652] Quota error (device loop4): do_check_range: Getting block 6 out of range 1-5 [ 63.897428][ T4516] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.899321][ T4516] Cannot create hsr debugfs directory [ 63.916792][ T4652] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 63.927496][ T4652] EXT4-fs error (device loop4): ext4_acquire_dquot:6795: comm syz.4.72: Failed to acquire dquot type 0 [ 63.943161][ T4652] EXT4-fs (loop4): Remounting filesystem read-only [ 63.951648][ T4652] EXT4-fs (loop4): 1 orphan inode deleted [ 63.954319][ T4652] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 64.460184][ T4670] netlink: 4 bytes leftover after parsing attributes in process `syz.2.76'. [ 64.499989][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.502161][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.564838][ T4301] Quota error (device loop4): do_check_range: Getting block 6 out of range 1-5 [ 64.568050][ T4301] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 64.570379][ T4301] EXT4-fs error (device loop4): ext4_acquire_dquot:6795: comm syz-executor: Failed to acquire dquot type 0 [ 64.574888][ T4301] EXT4-fs (loop4): Remounting filesystem read-only [ 64.971662][ T4687] loop1: detected capacity change from 0 to 256 [ 65.828380][ T4388] device hsr_slave_0 left promiscuous mode [ 66.036117][ T4388] device hsr_slave_1 left promiscuous mode [ 66.261638][ T4301] EXT4-fs (loop4): unmounting filesystem. [ 66.318591][ T4388] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.322135][ T4388] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.460137][ T4388] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.562266][ T4388] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.565100][ T4388] device bridge_slave_1 left promiscuous mode [ 66.567876][ T4388] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.640892][ T4388] device bridge_slave_0 left promiscuous mode [ 66.642681][ T4388] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.768374][ T4388] device veth1_macvtap left promiscuous mode [ 66.770384][ T4388] device veth0_macvtap left promiscuous mode [ 66.772562][ T4388] device veth1_vlan left promiscuous mode [ 66.774195][ T4388] device veth0_vlan left promiscuous mode [ 66.831930][ T4311] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.835278][ T4311] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.839513][ T4694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.843012][ T4311] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.845045][ T4694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.846702][ T4311] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.853818][ T4311] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 66.855957][ T4311] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.255333][ T4706] loop0: detected capacity change from 0 to 512 [ 67.259998][ T4706] EXT2-fs (loop0): warning: feature flags set on rev 0 fs, running e2fsck is recommended [ 67.262776][ T4706] EXT2-fs (loop0): error: couldn't mount RDWR because of unsupported optional features (1000000) [ 68.328886][ T78] block nbd0: Attempted send on invalid socket [ 68.330740][ T78] I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 68.336585][ T78] block nbd0: Attempted send on invalid socket [ 68.339779][ T78] I/O error, dev nbd0, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 68.342019][ T4710] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 68.346712][ T78] block nbd0: Attempted send on invalid socket [ 68.348430][ T78] I/O error, dev nbd0, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 68.351163][ T4710] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 68.357902][ T78] block nbd0: Attempted send on invalid socket [ 68.359585][ T78] I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 68.363733][ T78] block nbd0: Attempted send on invalid socket [ 68.365357][ T78] I/O error, dev nbd0, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 68.367965][ T4710] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 68.372319][ T78] block nbd0: Attempted send on invalid socket [ 68.374519][ T78] I/O error, dev nbd0, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 68.377612][ T4710] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 68.383957][ T78] block nbd0: Attempted send on invalid socket [ 68.385876][ T78] I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 68.390900][ T78] block nbd0: Attempted send on invalid socket [ 68.392842][ T78] I/O error, dev nbd0, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 68.395444][ T4710] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 68.399453][ T78] block nbd0: Attempted send on invalid socket [ 68.401329][ T78] I/O error, dev nbd0, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 68.404099][ T4710] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 68.409090][ T78] block nbd0: Attempted send on invalid socket [ 68.410935][ T78] I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 68.414545][ T4710] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 68.418817][ T4710] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 68.421446][ T4710] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 68.946510][ T4320] Bluetooth: hci0: command 0x0409 tx timeout [ 69.220330][ T4388] team0 (unregistering): Port device team_slave_1 removed [ 69.409954][ T4388] team0 (unregistering): Port device team_slave_0 removed [ 69.588310][ T4388] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 69.620077][ T1516] cfg80211: failed to load regulatory.db [ 69.789076][ T4388] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 70.977397][ T4320] Bluetooth: hci0: command 0x041b tx timeout [ 73.057623][ T4311] Bluetooth: hci0: command 0x040f tx timeout [ 75.147441][ T4320] Bluetooth: hci0: command 0x0419 tx timeout [ 75.612093][ T4388] bond0 (unregistering): Released all slaves [ 75.834841][ T4696] netlink: 24 bytes leftover after parsing attributes in process `syz.1.81'. [ 75.845089][ T4743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.95'. [ 75.865566][ T4744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.95'. [ 75.889187][ T4516] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 75.949488][ T4516] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 75.991103][ T4516] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 76.161755][ T4750] loop2: detected capacity change from 0 to 4096 [ 77.357945][ T4516] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 77.557627][ T4762] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 81.442241][ T4700] chnl_net:caif_netlink_parms(): no params data found [ 81.574295][ T4516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.878813][ T4793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.881247][ T4793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.890279][ T4516] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.973649][ T4797] loop0: detected capacity change from 0 to 40427 [ 81.982235][ T4700] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.983934][ T4700] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.986433][ T4700] device bridge_slave_0 entered promiscuous mode [ 82.009306][ T4797] F2FS-fs (loop0): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 82.017493][ T4797] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 82.052092][ T4797] F2FS-fs (loop0): invalid crc value [ 82.073532][ T4797] F2FS-fs (loop0): Found nat_bits in checkpoint [ 82.088044][ T4700] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.091944][ T4700] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.097993][ T4700] device bridge_slave_1 entered promiscuous mode [ 82.224094][ T4797] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 82.226645][ T4797] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 82.871170][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.873740][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.876133][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.877895][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.880929][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.883446][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.885735][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.887581][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.920897][ T4516] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 82.923426][ T4516] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.013970][ T4700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.016235][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.021768][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.133593][ T4829] syz.0.106: attempt to access beyond end of device [ 83.133593][ T4829] loop0: rw=2051, sector=36912, nr_sectors = 8152 limit=40427 [ 83.137802][ T4829] syz.0.106: attempt to access beyond end of device [ 83.137802][ T4829] loop0: rw=2051, sector=45096, nr_sectors = 85976 limit=40427 [ 83.375039][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.396700][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.408636][ T4829] F2FS-fs (loop0): Issue discard(4614, 4614, 1019) failed, ret: -5 [ 83.408679][ T4829] F2FS-fs (loop0): Issue discard(5637, 5637, 10747) failed, ret: -5 [ 83.426092][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.444626][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.469155][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.487744][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.510342][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.524301][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.533559][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.589317][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.614621][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.648027][ T4700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.724968][ T4700] team0: Port device team_slave_0 added [ 83.758336][ T4700] team0: Port device team_slave_1 added [ 83.792494][ T4847] loop2: detected capacity change from 0 to 256 [ 84.104135][ T4861] loop1: detected capacity change from 0 to 128 [ 84.162518][ T4295] blk_print_req_error: 2 callbacks suppressed [ 84.162534][ T4295] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 84.171252][ T4388] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.205258][ T4700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.207183][ T4700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.217062][ T4700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.284858][ T4861] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 84.322705][ T4700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.327134][ T4700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.334275][ T4700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.340871][ T4830] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.343110][ T4830] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.362600][ T4516] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.329293][ T4388] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.085036][ T4700] device hsr_slave_0 entered promiscuous mode [ 86.167875][ T4700] device hsr_slave_1 entered promiscuous mode [ 86.311060][ T4897] loop1: detected capacity change from 0 to 4096 [ 86.315247][ T4897] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 86.318351][ T4897] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 86.326588][ T4897] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 86.334884][ T4897] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 86.338526][ T4897] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 86.348887][ T4897] ntfs: volume version 3.1. [ 86.362349][ T4897] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 86.366474][ T4897] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 86.817261][ T4388] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.861255][ T4897] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 86.963604][ T4897] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 86.995150][ T4892] tipc: Started in network mode [ 86.996515][ T4892] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 86.998656][ T4892] tipc: Enabled bearer , priority 10 [ 87.058832][ T4897] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 87.146301][ T4905] loop2: detected capacity change from 0 to 128 [ 87.380447][ T4910] loop0: detected capacity change from 0 to 256 [ 87.405519][ T4912] binder: 4911:4912 tried to acquire reference to desc 0, got 1 instead [ 87.415722][ T4910] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 87.750352][ T4388] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.118201][ T4356] tipc: Node number set to 8432298 [ 88.120162][ T4917] binder: 4911:4917 got transaction with invalid offsets ptr [ 88.122366][ T4917] binder: 4911:4917 transaction call to 4911:0 failed 6/29201/-14, size 0-768 line 3278 [ 88.316920][ T4700] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 88.395191][ T4315] binder: release 4911:4912 transaction 5 out, still active [ 88.405557][ T4315] binder: undelivered TRANSACTION_COMPLETE [ 88.407115][ T4315] binder: undelivered TRANSACTION_ERROR: 29201 [ 88.437559][ T4315] binder: send failed reply for transaction 5, target dead [ 89.318946][ T4700] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 89.361913][ T4700] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 89.439237][ T4700] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 89.561495][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 89.564089][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 90.083597][ T4941] netlink: 'syz.0.131': attribute type 1 has an invalid length. [ 90.373726][ T4951] loop2: detected capacity change from 0 to 2048 [ 90.378461][ T4944] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 90.380845][ T4951] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 90.412936][ T4941] 8021q: adding VLAN 0 to HW filter on device bond1 [ 90.428668][ T4423] net_ratelimit: 1052 callbacks suppressed [ 90.428681][ T4423] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 90.435461][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 90.486056][ T4516] device veth0_vlan entered promiscuous mode [ 90.518718][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 90.521339][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 90.524434][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 90.526741][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 90.553434][ T39] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 91.470243][ T4516] device veth1_vlan entered promiscuous mode [ 91.821846][ T4971] loop2: detected capacity change from 0 to 256 [ 91.874312][ T4972] netlink: 24 bytes leftover after parsing attributes in process `syz.0.136'. [ 91.923887][ T4700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.926743][ T4976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.138'. [ 91.930174][ T4976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.138'. [ 91.932416][ T4976] netlink: 'syz.1.138': attribute type 7 has an invalid length. [ 92.151488][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 92.154733][ T4970] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 92.160329][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.258073][ T4516] device veth0_macvtap entered promiscuous mode [ 92.263980][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 92.266576][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.269432][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.279659][ T4700] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.284050][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 92.290239][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 92.300902][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.302765][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.349129][ T4516] device veth1_macvtap entered promiscuous mode [ 92.417042][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 92.420414][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 92.444137][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 92.448390][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 92.451976][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.453787][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.460656][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 92.464550][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 92.467156][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 92.472630][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 92.483313][ T4516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.486408][ T4516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.489522][ T4516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.492185][ T4516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.494589][ T4516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.497023][ T4516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.500980][ T4516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.503607][ T4516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.515730][ T4516] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.577867][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 92.580323][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 92.582863][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 92.585905][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 92.589452][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 92.642941][ T4516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.646947][ T4516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.654788][ T4516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.671485][ T4516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.677673][ T4516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.684168][ T4516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.691184][ T4516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.703319][ T4516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.728893][ T4516] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.736586][ T5003] netlink: 4 bytes leftover after parsing attributes in process `syz.1.143'. [ 92.739741][ T5003] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.742147][ T5003] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.766826][ T5003] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.775562][ T5003] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.785340][ T5003] tipc: Resetting bearer [ 92.934306][ T5003] tipc: Disabling bearer [ 92.952716][ T4700] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 92.955379][ T4700] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.971634][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 92.979444][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 92.984199][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 92.988107][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 93.004453][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 93.013093][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 93.015524][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 93.087600][ T4516] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.091836][ T4516] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.097267][ T4516] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.102692][ T4516] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.255689][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.267370][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.271185][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 93.360765][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 93.363046][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 93.371311][ T4700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.385324][ T4641] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.393346][ T4641] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.418076][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 93.538097][ T4311] Bluetooth: hci4: command 0x0406 tx timeout [ 98.332511][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 98.335196][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 98.346069][ T5091] netlink: 'syz.0.157': attribute type 5 has an invalid length. [ 99.659107][ T4388] device hsr_slave_0 left promiscuous mode [ 99.721985][ T4388] device hsr_slave_1 left promiscuous mode [ 99.837689][ T4388] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.839900][ T4388] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.919987][ T4388] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.922180][ T4388] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.924760][ T4388] device bridge_slave_1 left promiscuous mode [ 99.929619][ T4388] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.019546][ T4388] device bridge_slave_0 left promiscuous mode [ 100.021436][ T4388] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.256109][ T5121] loop5: detected capacity change from 0 to 16 [ 100.299925][ T4388] device veth1_macvtap left promiscuous mode [ 100.304556][ T5121] erofs: (device loop5): erofs_read_inode: bogus i_mode (262) @ nid 36 [ 100.309506][ T4388] device veth0_macvtap left promiscuous mode [ 100.313419][ T4388] device veth1_vlan left promiscuous mode [ 100.315886][ T4388] device veth0_vlan left promiscuous mode [ 103.544329][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 103.544342][ T27] audit: type=1326 audit(103.520:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5149 comm="syz.1.170" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c75ad28 code=0x7ffc0000 [ 103.556892][ T27] audit: type=1326 audit(103.530:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5149 comm="syz.1.170" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9c75ad28 code=0x7ffc0000 [ 103.578042][ T27] audit: type=1326 audit(103.530:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5149 comm="syz.1.170" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c75ad28 code=0x7ffc0000 [ 103.598952][ T27] audit: type=1326 audit(103.530:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5149 comm="syz.1.170" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9c75ad28 code=0x7ffc0000 [ 103.610006][ T27] audit: type=1326 audit(103.530:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5149 comm="syz.1.170" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c75ad28 code=0x7ffc0000 [ 103.627439][ T27] audit: type=1326 audit(103.530:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5149 comm="syz.1.170" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9c75ad28 code=0x7ffc0000 [ 103.632563][ T27] audit: type=1326 audit(103.530:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5149 comm="syz.1.170" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c75ad28 code=0x7ffc0000 [ 104.200692][ T27] audit: type=1326 audit(103.530:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5149 comm="syz.1.170" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=138 compat=0 ip=0xffff9c75ad28 code=0x7ffc0000 [ 104.255189][ T27] audit: type=1326 audit(103.530:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5149 comm="syz.1.170" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c75ad28 code=0x7ffc0000 [ 109.760503][ T4388] team0 (unregistering): Port device team_slave_1 removed [ 109.963082][ T4388] team0 (unregistering): Port device team_slave_0 removed [ 110.128260][ T4388] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.398205][ T4388] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.789611][ T4388] bond0 (unregistering): Released all slaves [ 114.133082][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 114.135732][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 114.168677][ T4700] device veth0_vlan entered promiscuous mode [ 114.177857][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 114.180338][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 114.869322][ T5221] loop5: detected capacity change from 0 to 1024 [ 115.165078][ T4700] device veth1_vlan entered promiscuous mode [ 115.178593][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 115.719205][ T4700] device veth0_macvtap entered promiscuous mode [ 115.732892][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 115.735481][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 115.742696][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 115.753226][ T4700] device veth1_macvtap entered promiscuous mode [ 116.520871][ T5228] loop0: detected capacity change from 0 to 8192 [ 116.548629][ T4311] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 116.557558][ T4311] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 116.560288][ T4319] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 116.563599][ T4319] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 116.565728][ T4319] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 116.576405][ T4319] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 116.590745][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 116.601425][ T5228] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 116.605150][ T5228] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 116.637132][ T5228] REISERFS (device loop0): using ordered data mode [ 116.641664][ T5228] reiserfs: using flush barriers [ 116.676154][ T5228] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 116.683411][ C0] vxcan0: j1939_tp_txtimer: 0x0000000076986445: tx aborted with unknown reason: -2 [ 116.685768][ T4700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.687144][ C0] vxcan0: j1939_xtp_rx_abort_one: 0x00000000bbd9ee30: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250) [ 116.692916][ C0] vxcan0: j1939_xtp_rx_abort_one: 0x0000000076986445: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250) [ 116.714654][ T4700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.717051][ T4700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.727693][ T5228] REISERFS (device loop0): checking transaction log (loop0) [ 116.738946][ T4700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.741360][ T4700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.743887][ T4700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.775470][ T4700] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.778871][ T5247] netlink: 4 bytes leftover after parsing attributes in process `syz.1.194'. [ 116.803165][ T5256] loop5: detected capacity change from 0 to 256 [ 116.843486][ T5256] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 116.909896][ T5256] exFAT-fs (loop5): hint_cluster is invalid (17) [ 116.910784][ T5228] REISERFS (device loop0): Using tea hash to sort names [ 116.918094][ T5228] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 116.945874][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 116.954289][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 116.958564][ T4700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.961294][ T4700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.963660][ T4700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.966016][ T4700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.976618][ T5228] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 8 0x0 SD] (nlink == 1) not found (pos 2) [ 116.987486][ T4700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.990122][ T4700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.992496][ T5228] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 8 0x0 SD] (nlink == 1) not found (pos 2) [ 116.995788][ T5228] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 8 0x0 SD] (nlink == 1) not found (pos 2) [ 117.002933][ T4700] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.009064][ T5228] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 8 0x0 SD] (nlink == 1) not found (pos 2) [ 117.014015][ T5228] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 8 0x0 SD] (nlink == 1) not found (pos 2) [ 117.020194][ T5228] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 8 0x0 SD] (nlink == 1) not found (pos 2) [ 117.025039][ T5228] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 8 0x0 SD] (nlink == 1) not found (pos 2) [ 117.038909][ T5228] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 8 0x0 SD] (nlink == 1) not found (pos 2) [ 117.056389][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 117.063904][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 117.142566][ T4700] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.145661][ T4700] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.152632][ T4700] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.155071][ T4700] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.192343][ T5228] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 8 0x0 SD] (nlink == 1) not found (pos 2) [ 118.718154][ T4319] Bluetooth: hci5: command 0x0409 tx timeout [ 119.064963][ T399] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.067168][ T399] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.082027][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 119.134637][ T5284] binder: 5282:5284 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 119.138587][ T5284] binder: 5284 RLIMIT_NICE not set [ 119.148214][ T4401] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.157098][ T4401] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.170176][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 119.172973][ T5241] chnl_net:caif_netlink_parms(): no params data found [ 119.191795][ T5290] binder: 5282:5290 tried to acquire reference to desc 0, got 1 instead [ 119.195489][ T5284] binder: 5284 RLIMIT_NICE not set [ 119.201848][ T5284] binder: 5284 RLIMIT_NICE not set [ 119.203366][ T5284] binder_alloc: 5282: binder_alloc_buf, no vma [ 119.205141][ T5284] binder: cannot allocate buffer: vma cleared, target dead or dying [ 119.205172][ T5284] binder: 5282:5284 transaction reply to 5282:5290 failed 12/29189/-3, size 0-0 line 3239 [ 119.209850][ T5284] binder: send failed reply for transaction 11 to 5282:5290 [ 119.222918][ T3875] binder: undelivered TRANSACTION_COMPLETE [ 119.224495][ T3875] binder: undelivered TRANSACTION_ERROR: 29189 [ 119.280556][ T4398] binder: undelivered TRANSACTION_ERROR: 29190 [ 119.322456][ T5275] delete_channel: no stack [ 119.513350][ T5241] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.515154][ T5241] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.521483][ T5241] device bridge_slave_0 entered promiscuous mode [ 119.545400][ T5241] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.547228][ T5241] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.568571][ T5241] device bridge_slave_1 entered promiscuous mode [ 119.650854][ T5241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.665569][ T5241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.669170][ T5311] trusted_key: encrypted_key: insufficient parameters specified [ 119.733059][ T5241] team0: Port device team_slave_0 added [ 119.760013][ T5241] team0: Port device team_slave_1 added [ 119.796070][ T5241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.803775][ T5241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.815445][ T5241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.824937][ T5241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.831278][ T5241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.840728][ T5241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.917018][ T5241] device hsr_slave_0 entered promiscuous mode [ 119.989651][ T5241] device hsr_slave_1 entered promiscuous mode [ 120.047514][ T5241] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 120.050491][ T5241] Cannot create hsr debugfs directory [ 120.374349][ T5332] loop6: detected capacity change from 0 to 2048 [ 120.380095][ T5241] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 120.432831][ T5335] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 120.436901][ T5332] syz.6.206 sent an empty control message without MSG_MORE. [ 120.466745][ T5337] netlink: 4 bytes leftover after parsing attributes in process `syz.1.208'. [ 120.478780][ T5241] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 120.523888][ T5241] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 120.561222][ T5241] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 120.738948][ T4320] Bluetooth: hci5: command 0x041b tx timeout [ 122.943469][ T4320] Bluetooth: hci5: command 0x040f tx timeout [ 124.331330][ T4435] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.097646][ T4320] Bluetooth: hci5: command 0x0419 tx timeout [ 126.253781][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.255403][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.428525][ T4435] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.453714][ T5241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.349165][ T4319] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 127.352154][ T4319] Bluetooth: hci2: Injecting HCI hardware error event [ 127.355118][ T4319] Bluetooth: hci2: hardware error 0x00 [ 127.399315][ T5241] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.447863][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 127.450252][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 127.520476][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 127.523139][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 127.527141][ T1614] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.529141][ T1614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.554473][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 127.593340][ T5415] loop6: detected capacity change from 0 to 1024 [ 127.708939][ T4435] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.765168][ T5414] netlink: 4 bytes leftover after parsing attributes in process `syz.1.227'. [ 127.778225][ T5417] netlink: 12 bytes leftover after parsing attributes in process `syz.1.227'. [ 128.759233][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 128.762042][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 128.764269][ T399] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.766144][ T399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.085561][ T4435] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.614820][ T5421] loop0: detected capacity change from 0 to 32768 [ 129.636821][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 129.640990][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 129.644062][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 129.653187][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 129.657135][ T5421] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.229 (5421) [ 129.743475][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 129.762022][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 129.790902][ T4319] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 129.800766][ T5421] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 129.803647][ T5421] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 129.806120][ T5421] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 129.819205][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 129.821805][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 129.824352][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 129.832811][ T5241] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 129.837855][ T5421] BTRFS info (device loop0): use zstd compression, level 3 [ 129.839656][ T5421] BTRFS info (device loop0): using free space tree [ 129.845876][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 130.119486][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 130.692607][ T5448] loop5: detected capacity change from 0 to 512 [ 130.741298][ T5448] EXT2-fs (loop5): warning: mounting ext3 filesystem as ext2 [ 130.810235][ T5421] BTRFS error (device loop0): open_ctree failed: -12 [ 130.869649][ T4435] tipc: Disabling bearer [ 131.197564][ T5484] loop6: detected capacity change from 0 to 128 [ 131.932574][ T4435] tipc: Left network mode [ 132.141257][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 132.143259][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 132.162333][ T5241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.953402][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 135.957997][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 136.144182][ T5241] device veth0_vlan entered promiscuous mode [ 136.150588][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 136.153225][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 136.156058][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 136.158940][ T5545] 9pnet: p9_errstr2errno: server reported unknown error @΂(QhQI [ 136.188922][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 136.202241][ T5241] device veth1_vlan entered promiscuous mode [ 137.053838][ T5241] device veth0_macvtap entered promiscuous mode [ 137.120654][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 137.123263][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 137.125718][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 137.132950][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 138.636767][ T5241] device veth1_macvtap entered promiscuous mode [ 138.648904][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 140.606230][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.612482][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.615783][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.631576][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.634695][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.637265][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.677774][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.680941][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.835751][ T5241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.374263][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 141.377020][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 141.551167][ T5600] loop6: detected capacity change from 0 to 512 [ 141.553342][ T5600] EXT4-fs: quotafile must be on filesystem root [ 141.564544][ T5580] loop0: detected capacity change from 0 to 40427 [ 141.573356][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.576197][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.579401][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.581967][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.584762][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.587288][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.591120][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.593899][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.598093][ T5241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.607177][ T5598] netlink: 'syz.1.262': attribute type 4 has an invalid length. [ 141.617158][ T5207] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 141.636421][ T5580] F2FS-fs (loop0): invalid crc value [ 141.665776][ T5241] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.680078][ T5241] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.690495][ T5241] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.692655][ T5241] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.728422][ T4830] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 141.731261][ T4830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 141.746075][ T5580] F2FS-fs (loop0): Found nat_bits in checkpoint [ 143.049347][ T5621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.052107][ T5621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.076010][ T5624] 9pnet: p9_errstr2errno: server reported unknown error @΂(QhQI [ 143.390452][ T5646] loop0: detected capacity change from 0 to 512 [ 143.409719][ T4830] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.413050][ T4830] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.464620][ T5646] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 143.599064][ T4309] EXT4-fs (loop0): unmounting filesystem. [ 143.664021][ T5659] loop0: detected capacity change from 0 to 512 [ 143.668054][ T5659] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 143.671479][ T5659] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 143.682371][ T5659] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 143.688430][ T5659] EXT4-fs (loop0): 1 truncate cleaned up [ 143.689786][ T5659] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 143.718224][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 143.721160][ T5639] device syzkaller0 entered promiscuous mode [ 143.750026][ T4641] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.752241][ T4641] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.757864][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 143.834476][ T4309] EXT4-fs (loop0): unmounting filesystem. [ 143.910578][ T4435] device hsr_slave_0 left promiscuous mode [ 144.015487][ T4435] device hsr_slave_1 left promiscuous mode [ 144.193280][ T4435] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.205624][ T4435] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.955637][ T4435] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.957691][ T4435] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.961680][ T4435] device bridge_slave_1 left promiscuous mode [ 144.963349][ T4435] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.201918][ T5676] loop6: detected capacity change from 0 to 128 [ 145.235422][ T4435] device bridge_slave_0 left promiscuous mode [ 145.237212][ T4435] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.303707][ T27] audit: type=1326 audit(145.280:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5678 comm="syz.5.278" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c75ad28 code=0x7ffc0000 [ 145.309021][ T27] audit: type=1326 audit(145.280:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5678 comm="syz.5.278" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=277 compat=0 ip=0xffff9c75ad28 code=0x7ffc0000 [ 145.314087][ T27] audit: type=1326 audit(145.280:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5678 comm="syz.5.278" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c75ad28 code=0x7ffc0000 [ 145.334470][ T27] audit: type=1326 audit(145.290:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5678 comm="syz.5.278" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9c75ad28 code=0x7ffc0000 [ 145.357622][ T27] audit: type=1326 audit(145.290:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5678 comm="syz.5.278" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c75ad28 code=0x7ffc0000 [ 145.365079][ T27] audit: type=1326 audit(145.290:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5678 comm="syz.5.278" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9c75ad28 code=0x7ffc0000 [ 145.371608][ T27] audit: type=1326 audit(145.290:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5678 comm="syz.5.278" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c75ad28 code=0x7ffc0000 [ 145.382807][ T27] audit: type=1326 audit(145.290:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5678 comm="syz.5.278" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9c75ad28 code=0x7ffc0000 [ 145.389660][ T27] audit: type=1326 audit(145.290:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5678 comm="syz.5.278" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c75ad28 code=0x7ffc0000 [ 145.395041][ T27] audit: type=1326 audit(145.290:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5678 comm="syz.5.278" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff9c75ad28 code=0x7ffc0000 [ 145.407693][ T4435] device veth1_macvtap left promiscuous mode [ 145.409449][ T4435] device veth0_macvtap left promiscuous mode [ 145.410966][ T4435] device veth1_vlan left promiscuous mode [ 145.426595][ T4435] device veth0_vlan left promiscuous mode [ 145.453840][ T5683] loop5: detected capacity change from 0 to 128 [ 145.489834][ T5683] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 146.268849][ T4516] EXT4-fs (loop5): unmounting filesystem. [ 147.552070][ T5695] ipt_REJECT: TCP_RESET invalid for non-tcp [ 148.930796][ T4435] team0 (unregistering): Port device team_slave_1 removed [ 149.120625][ T4435] team0 (unregistering): Port device team_slave_0 removed [ 149.308248][ T4435] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.290506][ T4435] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.324157][ T5720] dccp_close: ABORT with 32 bytes unread [ 153.390645][ T5722] loop5: detected capacity change from 0 to 2048 [ 153.401073][ T5722] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 153.727234][ T5727] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.290: bg 0: block 234: padding at end of block bitmap is not set [ 153.835025][ T5727] EXT4-fs (loop5): Remounting filesystem read-only [ 154.352719][ T4516] EXT4-fs (loop5): unmounting filesystem. [ 155.013391][ T4435] bond0 (unregistering): Released all slaves [ 158.059355][ T5753] loop7: detected capacity change from 0 to 512 [ 158.061372][ T5753] EXT4-fs: Ignoring removed orlov option [ 158.159535][ T5753] EXT4-fs error (device loop7): ext4_xattr_inode_iget:404: comm syz.7.296: inode #1: comm syz.7.296: iget: illegal inode # [ 158.174819][ T5753] EXT4-fs error (device loop7): ext4_xattr_inode_iget:409: comm syz.7.296: error while reading EA inode 1 err=-117 [ 158.192558][ T5753] EXT4-fs error (device loop7): ext4_xattr_inode_iget:404: comm syz.7.296: inode #1: comm syz.7.296: iget: illegal inode # [ 158.202477][ T5753] EXT4-fs error (device loop7): ext4_xattr_inode_iget:409: comm syz.7.296: error while reading EA inode 1 err=-117 [ 158.213007][ T5753] EXT4-fs (loop7): 1 orphan inode deleted [ 158.214662][ T5753] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 158.351191][ T5743] loop5: detected capacity change from 0 to 32768 [ 159.914591][ T5241] EXT4-fs (loop7): unmounting filesystem. [ 160.265716][ T5789] loop5: detected capacity change from 0 to 1024 [ 160.302516][ T27] kauditd_printk_skb: 23 callbacks suppressed [ 160.302533][ T27] audit: type=1107 audit(160.280:45): pid=5790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 160.317633][ T5789] hfsplus: failed to load root directory [ 161.264537][ T5801] netlink: 40 bytes leftover after parsing attributes in process `syz.5.303'. [ 161.275512][ T5801] netlink: 40 bytes leftover after parsing attributes in process `syz.5.303'. [ 163.177076][ T5836] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 163.198753][ T5836] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 163.868392][ T5842] capability: warning: `syz.5.314' uses deprecated v2 capabilities in a way that may be insecure [ 165.135301][ T5872] netlink: 4 bytes leftover after parsing attributes in process `syz.6.323'. [ 165.324676][ T5884] loop0: detected capacity change from 0 to 1024 [ 166.187475][ T4319] Bluetooth: hci5: command 0x0405 tx timeout [ 166.220819][ T5485] hfsplus: b-tree write err: -5, ino 4 [ 170.230312][ T5940] loop0: detected capacity change from 0 to 256 [ 170.232629][ T5940] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 171.504227][ T5946] loop6: detected capacity change from 0 to 4096 [ 172.654309][ T5962] batman_adv: batadv0: Adding interface: dummy0 [ 172.655860][ T5962] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.735302][ T5962] batman_adv: batadv0: Interface activated: dummy0 [ 175.382497][ T4319] Bluetooth: hci4: command 0x0406 tx timeout [ 177.736541][ T6012] loop5: detected capacity change from 0 to 256 [ 178.760407][ T6023] loop5: detected capacity change from 0 to 2048 [ 178.844872][ T6023] loop5: detected capacity change from 0 to 256 [ 178.881223][ T6020] loop7: detected capacity change from 0 to 8192 [ 178.914353][ T6020] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 178.922386][ T6020] REISERFS (device loop7): found reiserfs format "3.6" with non-standard journal [ 178.924659][ T6020] REISERFS (device loop7): using ordered data mode [ 178.926262][ T6020] reiserfs: using flush barriers [ 178.958531][ T6020] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 178.966525][ T6020] REISERFS (device loop7): checking transaction log (loop7) [ 179.776910][ T6020] REISERFS (device loop7): Using r5 hash to sort names [ 179.796102][ T6020] REISERFS warning (device loop7): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 179.825381][ T6020] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage. [ 181.335353][ T6034] REISERFS warning (device loop7): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 181.341460][ T6034] REISERFS warning (device loop7): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 181.345082][ T6034] REISERFS warning (device loop7): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 182.741204][ T6039] netlink: 32 bytes leftover after parsing attributes in process `syz.6.361'. [ 183.009978][ T6063] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 186.104640][ T6096] loop7: detected capacity change from 0 to 512 [ 186.135594][ T6096] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 186.222271][ T6096] EXT4-fs (loop7): 1 truncate cleaned up [ 186.223628][ T6096] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 187.151393][ T6117] bond0: (slave rose0): Enslaving as an active interface with an up link [ 187.181814][ T5241] EXT4-fs (loop7): unmounting filesystem. [ 188.027020][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.039042][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.094432][ T6131] loop7: detected capacity change from 0 to 256 [ 188.258250][ T6139] loop6: detected capacity change from 0 to 8 [ 188.265576][ T6139] SQUASHFS error: xz decompression failed, data probably corrupt [ 188.301548][ T6139] SQUASHFS error: Failed to read block 0x108: -5 [ 188.303215][ T6139] SQUASHFS error: Unable to read metadata cache entry [106] [ 188.304919][ T6139] SQUASHFS error: Unable to read inode 0x101f [ 188.327268][ T6142] loop5: detected capacity change from 0 to 512 [ 188.330061][ T6142] EXT4-fs: Ignoring removed orlov option [ 188.364647][ T6142] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 188.371997][ T6142] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.384: casefold flag without casefold feature [ 188.376259][ T6142] EXT4-fs (loop5): Remounting filesystem read-only [ 188.382911][ T6142] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.384: couldn't read orphan inode 15 (err -117) [ 188.385883][ T6142] EXT4-fs (loop5): Remounting filesystem read-only [ 188.390541][ T6142] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 188.700974][ T4516] EXT4-fs (loop5): unmounting filesystem. [ 190.815966][ T4320] Bluetooth: hci0: command 0x0406 tx timeout [ 190.849320][ T6158] loop0: detected capacity change from 0 to 8 [ 192.186783][ T6178] sctp: [Deprecated]: syz.5.391 (pid 6178) Use of struct sctp_assoc_value in delayed_ack socket option. [ 192.186783][ T6178] Use struct sctp_sack_info instead [ 193.514394][ T6198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.516584][ T6198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.356927][ T6206] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 194.386048][ T6211] loop5: detected capacity change from 0 to 1024 [ 195.461310][ T6222] loop6: detected capacity change from 0 to 64 [ 195.472970][ T6222] hfs: unable to change iocharset [ 195.474447][ T6222] hfs: unable to parse mount options [ 195.532250][ T5207] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 195.763518][ T5485] hfsplus: bad catalog file entry [ 195.765965][ T5485] hfsplus: b-tree write err: -5, ino 3 [ 197.012610][ T6251] netlink: 156 bytes leftover after parsing attributes in process `syz.7.407'. [ 197.086202][ T6252] loop6: detected capacity change from 0 to 128 [ 197.137361][ T6256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.141701][ T6256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.219792][ T6252] EXT4-fs (loop6): Test dummy encryption mode enabled [ 197.236430][ T6252] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 197.341098][ T6266] overlayfs: missing 'lowerdir' [ 197.384518][ T6266] Zero length message leads to an empty skb [ 197.423741][ T4700] EXT4-fs (loop6): unmounting filesystem. [ 201.634344][ T6308] loop0: detected capacity change from 0 to 1024 [ 202.900095][ T6308] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 202.985291][ T6319] loop6: detected capacity change from 0 to 512 [ 203.025610][ T6301] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.114414][ T6319] Quota error (device loop6): do_check_range: Getting block 6 out of range 1-5 [ 203.116660][ T6319] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 203.152290][ T6319] EXT4-fs error (device loop6): ext4_acquire_dquot:6795: comm syz.6.422: Failed to acquire dquot type 0 [ 203.164533][ T6319] EXT4-fs (loop6): Remounting filesystem read-only [ 203.191875][ T6319] Quota error (device loop6): do_check_range: Getting block 6 out of range 1-5 [ 203.194155][ T6319] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 203.196334][ T6319] EXT4-fs error (device loop6): ext4_acquire_dquot:6795: comm syz.6.422: Failed to acquire dquot type 0 [ 203.201039][ T6319] EXT4-fs (loop6): Remounting filesystem read-only [ 203.203280][ T6319] Quota error (device loop6): do_check_range: Getting block 6 out of range 1-5 [ 203.205401][ T6319] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 203.237521][ T6319] EXT4-fs error (device loop6): ext4_acquire_dquot:6795: comm syz.6.422: Failed to acquire dquot type 0 [ 203.241540][ T6319] EXT4-fs (loop6): Remounting filesystem read-only [ 203.243237][ T6319] EXT4-fs (loop6): 1 orphan inode deleted [ 203.244683][ T6319] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 203.254870][ T27] audit: type=1326 audit(203.230:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6328 comm="syz.7.423" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97b5ad28 code=0x7ffc0000 [ 203.260395][ T27] audit: type=1326 audit(203.230:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6328 comm="syz.7.423" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97b5ad28 code=0x7ffc0000 [ 203.306787][ T27] audit: type=1326 audit(203.280:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6328 comm="syz.7.423" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff97b5ad28 code=0x7ffc0000 [ 203.313836][ T27] audit: type=1326 audit(203.290:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6328 comm="syz.7.423" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97b5ad28 code=0x7ffc0000 [ 203.319292][ T4309] EXT4-fs (loop0): unmounting filesystem. [ 203.356609][ T6333] loop5: detected capacity change from 0 to 128 [ 203.457831][ T6338] netlink: 'syz.0.426': attribute type 7 has an invalid length. [ 203.459856][ T6338] netlink: 8 bytes leftover after parsing attributes in process `syz.0.426'. [ 203.505799][ T14] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 203.685700][ T14] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 203.732166][ T6340] loop7: detected capacity change from 0 to 8 [ 203.873705][ T6333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.932974][ T6333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.014533][ T6340] SQUASHFS error: zlib decompression failed, data probably corrupt [ 204.083687][ T6340] SQUASHFS error: Failed to read block 0x9b: -5 [ 204.134582][ T6340] SQUASHFS error: Unable to read metadata cache entry [99] [ 204.180746][ T6340] SQUASHFS error: Unable to read inode 0x127 [ 204.284967][ T4700] EXT4-fs error (device loop6): ext4_acquire_dquot:6795: comm syz-executor: Failed to acquire dquot type 0 [ 204.309740][ T4700] EXT4-fs (loop6): Remounting filesystem read-only [ 204.457636][ T6352] loop7: detected capacity change from 0 to 2048 [ 204.534075][ T6352] loop7: p2 p3 < > p4 < p5 > [ 204.535405][ T6352] loop7: partition table partially beyond EOD, truncated [ 204.543536][ T6352] loop7: p3 start 4284289 is beyond EOD, truncated [ 205.633555][ T4700] EXT4-fs (loop6): unmounting filesystem. [ 207.360382][ T6382] loop7: detected capacity change from 0 to 1024 [ 207.367912][ T6377] netlink: 4 bytes leftover after parsing attributes in process `syz.0.435'. [ 207.441310][ T6382] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 207.457018][ T4319] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 207.461270][ T4319] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 207.463737][ T4319] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 207.466188][ T4319] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 207.468470][ T4319] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 207.474731][ T4319] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 208.432041][ T9] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.448714][ T6382] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.521784][ T9] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.522251][ T5241] EXT4-fs (loop7): unmounting filesystem. [ 210.662326][ T4319] Bluetooth: hci0: command 0x0409 tx timeout [ 210.872994][ T6427] loop0: detected capacity change from 0 to 8 [ 210.876612][ T6427] SQUASHFS error: zlib decompression failed, data probably corrupt [ 210.911868][ T6427] SQUASHFS error: Failed to read block 0x9b: -5 [ 210.913615][ T6427] SQUASHFS error: Unable to read metadata cache entry [99] [ 210.915410][ T6427] SQUASHFS error: Unable to read inode 0x127 [ 210.950735][ T9] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.955091][ T5207] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 210.966799][ T6390] chnl_net:caif_netlink_parms(): no params data found [ 211.083427][ T6441] loop0: detected capacity change from 0 to 2048 [ 211.100092][ T9] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.112934][ T6441] loop0: p2 p3 < > p4 < p5 > [ 211.114124][ T6441] loop0: partition table partially beyond EOD, truncated [ 211.120077][ T6441] loop0: p3 start 4284289 is beyond EOD, truncated [ 211.173659][ T3913] loop0: p2 p3 < > p4 < p5 > [ 211.174867][ T3913] loop0: partition table partially beyond EOD, truncated [ 211.190173][ T3913] loop0: p3 start 4284289 is beyond EOD, truncated [ 211.292817][ T6390] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.294728][ T6390] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.297216][ T6390] device bridge_slave_0 entered promiscuous mode [ 211.311796][ T6390] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.327600][ T6390] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.340611][ T6390] device bridge_slave_1 entered promiscuous mode [ 211.384510][ T6390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.410041][ T6390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.569120][ T6456] sctp: [Deprecated]: syz.7.451 (pid 6456) Use of struct sctp_assoc_value in delayed_ack socket option. [ 211.569120][ T6456] Use struct sctp_sack_info instead [ 212.323541][ T6390] team0: Port device team_slave_0 added [ 212.363344][ T6390] team0: Port device team_slave_1 added [ 213.266591][ T4319] Bluetooth: hci0: command 0x041b tx timeout [ 213.286955][ T6390] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.336394][ T6390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.344005][ T6390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.350902][ T6390] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.352585][ T6390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.365373][ T6390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.307588][ T4320] Bluetooth: hci0: command 0x040f tx timeout [ 215.319143][ T6390] device hsr_slave_0 entered promiscuous mode [ 215.388047][ T6390] device hsr_slave_1 entered promiscuous mode [ 215.942194][ T6390] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 216.902953][ T6390] Cannot create hsr debugfs directory [ 218.289093][ T4319] Bluetooth: hci0: command 0x0419 tx timeout [ 221.143193][ T6390] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 221.220885][ T6390] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 221.260853][ T6390] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 221.299392][ T6390] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 221.479081][ T6390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.485416][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 221.492407][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 221.498109][ T6390] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.502349][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 221.505095][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 221.510056][ T4422] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.511839][ T4422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.514154][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 221.575368][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 221.578381][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 221.580791][ T4388] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.582636][ T4388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.586386][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 221.661078][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 221.665565][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 221.670735][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 221.673372][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 221.683908][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 221.686855][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 221.690067][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 221.692619][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 221.698902][ T6390] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 221.701958][ T6390] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 221.704423][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 221.706802][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 222.085182][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 222.087254][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 222.096591][ T6390] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.544215][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 222.546682][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 222.571652][ T6390] device veth0_vlan entered promiscuous mode [ 222.578298][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 222.580983][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 222.585544][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 222.592141][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 222.599491][ T9] device hsr_slave_0 left promiscuous mode [ 222.627804][ T9] device hsr_slave_1 left promiscuous mode [ 222.717558][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.719374][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.721894][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.723717][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.725999][ T9] device bridge_slave_1 left promiscuous mode [ 222.727775][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.769613][ T9] device bridge_slave_0 left promiscuous mode [ 222.771348][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.927705][ T9] device veth1_macvtap left promiscuous mode [ 222.929230][ T9] device veth0_macvtap left promiscuous mode [ 222.930865][ T9] device veth1_vlan left promiscuous mode [ 222.932260][ T9] device veth0_vlan left promiscuous mode [ 224.812591][ T9] team0 (unregistering): Port device team_slave_1 removed [ 224.992337][ T9] team0 (unregistering): Port device team_slave_0 removed [ 225.198253][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 225.440627][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 227.983218][ T9] bond0 (unregistering): Released all slaves [ 228.165216][ T6390] device veth1_vlan entered promiscuous mode [ 228.179352][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 228.181772][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 228.192583][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 228.195230][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 228.207641][ T6390] device veth0_macvtap entered promiscuous mode [ 228.211677][ T6390] device veth1_macvtap entered promiscuous mode [ 228.224629][ T6390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.227109][ T6390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.231254][ T6390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.233828][ T6390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.236180][ T6390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.239290][ T6390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.268984][ T6390] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.271252][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 228.273889][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 228.276284][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 228.290432][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 228.295058][ T6390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.303384][ T6390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.305734][ T6390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.308812][ T6390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.311288][ T6390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.313708][ T6390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.317272][ T6390] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.320048][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 228.322621][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 228.329951][ T6390] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.332100][ T6390] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.334212][ T6390] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.336300][ T6390] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.403365][ T4423] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.405508][ T4423] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.415783][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 228.440014][ T4422] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.442364][ T4422] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.447125][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 228.649983][ T6602] loop7: detected capacity change from 0 to 128 [ 229.631619][ T6610] xt_CT: You must specify a L4 protocol and not use inversions on it [ 230.547460][ T6597] Injecting memory failure for pfn 0x1415fe at process virtual address 0x400000ffe000 [ 230.582085][ T6597] Memory failure: 0x1415fe: recovery action for dirty LRU page: Recovered [ 230.595786][ T6602] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 232.218643][ T6636] binder: 6635:6636 tried to acquire reference to desc 0, got 1 instead [ 232.482148][ T6646] binder: 6635:6646 got transaction with invalid offsets ptr [ 232.484165][ T6646] binder: 6635:6646 transaction call to 6635:0 failed 18/29201/-14, size 0-768 line 3278 [ 234.187390][ T7] binder: release 6635:6636 transaction 17 out, still active [ 234.189418][ T7] binder: undelivered TRANSACTION_COMPLETE [ 234.190899][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 235.312255][ T4355] binder: send failed reply for transaction 17, target dead [ 237.751263][ T6681] loop8: detected capacity change from 0 to 128 [ 238.204006][ T6694] xt_CT: You must specify a L4 protocol and not use inversions on it [ 239.306699][ T6691] syz.8.487: attempt to access beyond end of device [ 239.306699][ T6691] loop8: rw=2049, sector=145, nr_sectors = 280 limit=128 [ 240.278774][ T6679] syz.8.487: attempt to access beyond end of device [ 240.278774][ T6679] loop8: rw=524288, sector=145, nr_sectors = 33 limit=128 [ 240.320508][ T6681] syz.8.487: attempt to access beyond end of device [ 240.320508][ T6681] loop8: rw=0, sector=145, nr_sectors = 8 limit=128 [ 240.742573][ T6717] Injecting memory failure for pfn 0x1417fe at process virtual address 0x400000ffe000 [ 241.319991][ T6717] Memory failure: 0x1417fe: recovery action for dirty LRU page: Recovered [ 241.451457][ T6728] loop0: detected capacity change from 0 to 128 [ 241.457798][ T4320] Bluetooth: hci5: command 0x0406 tx timeout [ 242.377899][ T6735] syz.5.509 (6735): drop_caches: 2 [ 242.529547][ T6728] syz.0.507: attempt to access beyond end of device [ 242.529547][ T6728] loop0: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 242.679221][ T6721] loop8: detected capacity change from 0 to 40427 [ 242.703680][ T6721] F2FS-fs (loop8): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 242.706316][ T6721] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 242.714937][ T6721] F2FS-fs (loop8): invalid crc value [ 242.734290][ T6728] syz.0.507: attempt to access beyond end of device [ 242.734290][ T6728] loop0: rw=524288, sector=145, nr_sectors = 33 limit=128 [ 242.743246][ T6728] syz.0.507: attempt to access beyond end of device [ 242.743246][ T6728] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 242.756432][ T6721] F2FS-fs (loop8): Found nat_bits in checkpoint [ 242.845940][ T6721] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 242.854512][ T6721] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4 [ 244.251604][ T6756] syz.8.495: attempt to access beyond end of device [ 244.251604][ T6756] loop8: rw=2051, sector=36912, nr_sectors = 8152 limit=40427 [ 244.255074][ T6756] syz.8.495: attempt to access beyond end of device [ 244.255074][ T6756] loop8: rw=2051, sector=45096, nr_sectors = 85976 limit=40427 [ 245.492319][ T6756] F2FS-fs (loop8): Issue discard(4614, 4614, 1019) failed, ret: -5 [ 245.492368][ T6756] F2FS-fs (loop8): Issue discard(5637, 5637, 10747) failed, ret: -5 [ 245.571117][ T6759] tipc: Started in network mode [ 245.575127][ T6759] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 245.579564][ T6759] tipc: Enabled bearer , priority 10 [ 245.621389][ T6759] loop7: detected capacity change from 0 to 4096 [ 245.625100][ T6759] __ntfs_error: 12 callbacks suppressed [ 245.625113][ T6759] ntfs: (device loop7): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 245.629352][ T6759] ntfs: (device loop7): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 245.632739][ T6759] ntfs: (device loop7): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 245.635540][ T6759] ntfs: (device loop7): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 245.638573][ T6759] ntfs: (device loop7): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 245.654120][ T6759] ntfs: volume version 3.1. [ 245.664350][ T6759] ntfs: (device loop7): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 245.667612][ T6759] ntfs: (device loop7): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 245.671207][ T6759] ntfs: (device loop7): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 245.673895][ T6759] ntfs: (device loop7): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 245.677374][ T6759] ntfs: (device loop7): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 246.687494][ T4460] tipc: Node number set to 8432298 [ 248.002154][ T6786] xt_CT: You must specify a L4 protocol and not use inversions on it [ 249.058193][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 249.060127][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 251.700411][ T6814] syz.7.513 (6814): drop_caches: 2 [ 253.768810][ T6824] binder: 6823:6824 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 253.772217][ T6824] binder: 6824 RLIMIT_NICE not set [ 253.826023][ T6832] binder: 6823:6832 tried to acquire reference to desc 0, got 1 instead [ 253.828398][ T6824] binder: 6824 RLIMIT_NICE not set [ 253.831017][ T6824] binder: 6824 RLIMIT_NICE not set [ 253.832351][ T6824] binder_alloc: 6823: binder_alloc_buf, no vma [ 253.833857][ T6824] binder: cannot allocate buffer: vma cleared, target dead or dying [ 253.833885][ T6824] binder: 6823:6824 transaction reply to 6823:6832 failed 24/29189/-3, size 0-0 line 3239 [ 253.838625][ T6824] binder: send failed reply for transaction 23 to 6823:6832 [ 253.842270][ T4315] binder: undelivered TRANSACTION_COMPLETE [ 253.843779][ T4315] binder: undelivered TRANSACTION_ERROR: 29189 [ 253.904919][ T5470] binder: undelivered TRANSACTION_ERROR: 29190 [ 254.768980][ T6833] tipc: Started in network mode [ 254.770261][ T6833] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 254.772131][ T6833] tipc: Enabled bearer , priority 10 [ 254.804868][ T6833] loop0: detected capacity change from 0 to 4096 [ 254.815990][ T6833] __ntfs_error: 4 callbacks suppressed [ 254.816005][ T6833] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 254.820228][ T6833] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 254.841616][ T6833] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 254.844455][ T6833] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 254.847614][ T6833] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 255.013232][ T6833] ntfs: volume version 3.1. [ 255.016026][ T6833] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 255.019261][ T6833] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 255.024446][ T6833] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 255.028498][ T6833] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 255.031390][ T6833] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 255.052467][ T6846] netlink: 'syz.7.526': attribute type 4 has an invalid length. [ 255.359205][ T6852] loop8: detected capacity change from 0 to 1024 [ 256.086501][ T4355] tipc: Node number set to 8432298 [ 256.226954][ T6854] netlink: 'syz.7.526': attribute type 4 has an invalid length. [ 264.707778][ T3875] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 264.896330][ T6934] netlink: 4 bytes leftover after parsing attributes in process `syz.5.545'. [ 264.934289][ T6934] netlink: 12 bytes leftover after parsing attributes in process `syz.5.545'. [ 267.318816][ T6960] netlink: 40 bytes leftover after parsing attributes in process `syz.0.548'. [ 267.323372][ T6960] netlink: 40 bytes leftover after parsing attributes in process `syz.0.548'. [ 273.556064][ T7017] netlink: 4 bytes leftover after parsing attributes in process `syz.8.563'. [ 273.575303][ T7017] netlink: 12 bytes leftover after parsing attributes in process `syz.8.563'. [ 276.703648][ T7039] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 276.714502][ T7039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.773898][ T7039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.541497][ T7079] loop5: detected capacity change from 0 to 256 [ 280.951909][ T7084] netlink: 4 bytes leftover after parsing attributes in process `syz.7.579'. [ 280.975285][ T7084] netlink: 12 bytes leftover after parsing attributes in process `syz.7.579'. [ 286.501248][ T7159] netlink: 4 bytes leftover after parsing attributes in process `syz.0.597'. [ 286.544455][ T7159] netlink: 12 bytes leftover after parsing attributes in process `syz.0.597'. [ 287.635867][ T7170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.652145][ T7170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.655453][ T7172] loop7: detected capacity change from 0 to 4096 [ 287.685712][ T7172] ntfs3: loop7: try to read out of volume at offset 0x3fffffc0c00 [ 287.706860][ T7172] ntfs3: loop7: try to read out of volume at offset 0x3fffffc0c00 [ 287.709264][ T7172] ntfs3: loop7: try to read out of volume at offset 0x3fffffc0c00 [ 287.711245][ T7172] ntfs3: loop7: try to read out of volume at offset 0x3fffffc0c00 [ 287.713134][ T7172] ntfs3: loop7: try to read out of volume at offset 0x3fffffc1c00 [ 288.662905][ T7172] ntfs3: loop7: try to read out of volume at offset 0x3fffffc2c00 [ 288.801714][ T7172] ntfs3: loop7: try to read out of volume at offset 0x3fffffc4c00 [ 289.426457][ T7172] ntfs3: loop7: try to read out of volume at offset 0x3fffffc8c00 [ 289.433850][ T7172] ntfs3: loop7: try to read out of volume at offset 0x3fffffd0c00 [ 289.435847][ T7172] ntfs3: loop7: try to read out of volume at offset 0x3fffffe0c00 [ 289.594498][ T7187] netlink: 'syz.0.605': attribute type 4 has an invalid length. [ 291.071955][ T7215] xt_recent: hitcount (768) is larger than allowed maximum (255) [ 291.777704][ T7223] loop7: detected capacity change from 0 to 512 [ 291.848747][ T7223] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 293.180577][ T5241] EXT4-fs (loop7): unmounting filesystem. [ 294.989046][ T7250] 9pnet: p9_errstr2errno: server reported unknown error @΂(QhQI [ 298.933952][ T7298] loop0: detected capacity change from 0 to 1024 [ 299.947635][ T7315] xt_recent: hitcount (768) is larger than allowed maximum (255) [ 300.141684][ T7298] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 302.688607][ T7344] 9pnet: p9_errstr2errno: server reported unknown error @΂(QhQI [ 302.896871][ T4309] EXT4-fs (loop0): unmounting filesystem. [ 304.744267][ T7366] netlink: 4 bytes leftover after parsing attributes in process `syz.1.641'. [ 306.314513][ T7381] loop7: detected capacity change from 0 to 2048 [ 306.964099][ T7381] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 307.785043][ T7403] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.644: bg 0: block 234: padding at end of block bitmap is not set [ 309.567504][ T7403] EXT4-fs (loop7): Remounting filesystem read-only [ 310.396954][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.398653][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 311.277364][ T5241] EXT4-fs (loop7): unmounting filesystem. [ 315.970486][ T7459] loop5: detected capacity change from 0 to 256 [ 321.067891][ T7508] loop0: detected capacity change from 0 to 512 [ 321.112097][ T7508] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.672: casefold flag without casefold feature [ 321.115468][ T7508] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.672: couldn't read orphan inode 15 (err -117) [ 321.118947][ T7508] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 321.278506][ T7515] netlink: 'syz.1.674': attribute type 1 has an invalid length. [ 321.294282][ T4309] EXT4-fs (loop0): unmounting filesystem. [ 322.203028][ T7515] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 322.261047][ T4640] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 322.264265][ T7515] 8021q: adding VLAN 0 to HW filter on device bond1 [ 322.272489][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 322.367442][ T4640] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 322.399536][ T7531] netlink: 4 bytes leftover after parsing attributes in process `syz.7.677'. [ 322.402396][ T7531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.404250][ T7531] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.409730][ T7531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.412273][ T7531] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.432109][ T7531] tipc: Resetting bearer [ 323.584289][ T7531] tipc: Disabling bearer [ 324.689257][ T7560] loop8: detected capacity change from 0 to 4096 [ 324.767507][ T7567] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 326.664282][ T7591] netlink: 'syz.8.690': attribute type 1 has an invalid length. [ 328.684152][ T7591] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 328.784941][ T181] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 328.791855][ T7591] 8021q: adding VLAN 0 to HW filter on device bond1 [ 328.794401][ T4830] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 328.897449][ T4830] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 331.590946][ T7629] netlink: 4 bytes leftover after parsing attributes in process `syz.0.696'. [ 331.593200][ T7629] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 331.594949][ T7629] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 331.600553][ T7629] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 331.602343][ T7629] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 331.607079][ T7629] tipc: Resetting bearer [ 331.680810][ T7629] tipc: Disabling bearer [ 336.023236][ T7709] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 336.184701][ T7707] netlink: 32 bytes leftover after parsing attributes in process `syz.0.705'. [ 336.329197][ T7722] loop8: detected capacity change from 0 to 8 [ 336.352120][ T7722] SQUASHFS error: xz decompression failed, data probably corrupt [ 336.353973][ T7722] SQUASHFS error: Failed to read block 0x108: -5 [ 336.354362][ T7724] netlink: 'syz.7.708': attribute type 1 has an invalid length. [ 336.355411][ T7722] SQUASHFS error: Unable to read metadata cache entry [106] [ 337.147422][ T7722] SQUASHFS error: Unable to read inode 0x101f [ 337.233354][ T7724] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 337.262459][ T4641] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 337.277829][ T7724] 8021q: adding VLAN 0 to HW filter on device bond1 [ 337.280156][ T4830] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 337.406424][ T4641] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 338.246101][ T7750] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 338.283221][ T7756] netlink: 'syz.5.721': attribute type 1 has an invalid length. [ 340.397861][ T7765] 8021q: adding VLAN 0 to HW filter on device bond1 [ 342.462096][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 342.462113][ T27] audit: type=1326 audit(341.760:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7780 comm="syz.0.716" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd15ad28 code=0x0 [ 347.713006][ T7836] device vlan2 entered promiscuous mode [ 347.715568][ T7836] device bridge0 entered promiscuous mode [ 347.725422][ T7836] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 353.315810][ T7912] loop0: detected capacity change from 0 to 256 [ 353.376411][ T7907] loop7: detected capacity change from 0 to 128 [ 354.888964][ T7929] device vlan2 entered promiscuous mode [ 354.892272][ T7929] device bridge0 entered promiscuous mode [ 354.903222][ T7929] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 356.104635][ T7952] loop7: detected capacity change from 0 to 1024 [ 356.269489][ T7952] EXT4-fs: Ignoring removed nobh option [ 356.275018][ T7952] EXT4-fs: Ignoring removed bh option [ 356.281203][ T7952] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 356.283877][ T7952] EXT4-fs: test_dummy_encryption requires encrypt feature [ 360.691803][ T8015] sctp: [Deprecated]: syz.7.765 (pid 8015) Use of int in max_burst socket option. [ 360.691803][ T8015] Use struct sctp_assoc_value instead [ 362.546368][ T8040] loop0: detected capacity change from 0 to 512 [ 362.548565][ T8040] EXT4-fs: Ignoring removed oldalloc option [ 363.077893][ T8040] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 363.098852][ T8040] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=b846c01c, mo2=0102] [ 363.100838][ T8040] System zones: 0-2, 18-18, 34-34 [ 363.118165][ T8040] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117 [ 363.120962][ T8040] EXT4-fs error (device loop0): ext4_orphan_get:1426: comm syz.0.764: bad orphan inode 15 [ 363.123804][ T8040] ext4_test_bit(bit=14, block=18) = 1 [ 363.125292][ T8040] is_bad_inode(inode)=0 [ 363.126278][ T8040] NEXT_ORPHAN(inode)=2264924160 [ 363.128486][ T8040] max_ino=32 [ 363.129288][ T8040] i_nlink=0 [ 363.130044][ T8040] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 363.136297][ T8040] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.764: bg 0: block 80: padding at end of block bitmap is not set [ 363.140617][ T8040] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 363.143442][ T8040] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 364.531504][ T8069] loop5: detected capacity change from 0 to 1024 [ 364.548138][ T8069] EXT4-fs: Ignoring removed nobh option [ 364.549659][ T8069] EXT4-fs: Ignoring removed bh option [ 364.562679][ T8069] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 364.572756][ T8069] EXT4-fs: test_dummy_encryption requires encrypt feature [ 364.641831][ T4309] EXT4-fs (loop0): unmounting filesystem. [ 364.755132][ T4793] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.121083][ T8089] loop8: detected capacity change from 0 to 1024 [ 366.146609][ T8095] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 366.168554][ T8069] loop5: detected capacity change from 0 to 1024 [ 366.198353][ T6925] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 366.210364][ T8089] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 366.291693][ T6390] EXT4-fs (loop8): unmounting filesystem. [ 369.080050][ T8145] loop8: detected capacity change from 0 to 256 [ 371.791710][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 371.795269][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 372.516499][ T8172] loop8: detected capacity change from 0 to 1024 [ 372.529109][ T8172] EXT4-fs: Ignoring removed nobh option [ 372.530481][ T8172] EXT4-fs: Ignoring removed bh option [ 372.554803][ T8172] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 372.585470][ T8172] EXT4-fs: test_dummy_encryption requires encrypt feature [ 372.608421][ T8179] netlink: 12 bytes leftover after parsing attributes in process `syz.1.795'. [ 372.633398][ T8179] 8021q: adding VLAN 0 to HW filter on device bond2 [ 373.708670][ T5373] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.772013][ T8172] loop8: detected capacity change from 0 to 1024 [ 374.072548][ T8204] loop0: detected capacity change from 0 to 40427 [ 374.171531][ T8204] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 374.173630][ T8204] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 374.186652][ T8204] F2FS-fs (loop0): invalid crc value [ 374.282983][ T6925] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 375.974070][ T8216] loop5: detected capacity change from 0 to 512 [ 376.038857][ T8204] F2FS-fs (loop0): Found nat_bits in checkpoint [ 376.079516][ T8204] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 376.081297][ T8204] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 376.242521][ T8216] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 376.445755][ T8227] syz.0.799: attempt to access beyond end of device [ 376.445755][ T8227] loop0: rw=2049, sector=77824, nr_sectors = 520 limit=40427 [ 377.796540][ T4516] EXT4-fs (loop5): unmounting filesystem. [ 379.515585][ T8273] netlink: 4 bytes leftover after parsing attributes in process `syz.7.813'. [ 381.755918][ T8316] mmap: syz.5.819 (8316) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 383.081120][ T8327] input: syz1 as /devices/virtual/input/input3 [ 386.977447][ T4319] Bluetooth: hci0: command 0x0405 tx timeout [ 387.138664][ T8385] netlink: 'syz.5.834': attribute type 39 has an invalid length. [ 388.516931][ T8410] loop0: detected capacity change from 0 to 256 [ 388.534019][ T8410] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe1843155, utbl_chksum : 0xe619d30d) [ 391.690711][ T8435] loop0: detected capacity change from 0 to 1024 [ 392.230365][ T8435] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 392.388218][ T5188] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 392.407383][ T5188] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 888 with error 28 [ 392.410693][ T5188] EXT4-fs (loop0): This should not happen!! Data will be lost [ 392.410693][ T5188] [ 392.412831][ T5188] EXT4-fs (loop0): Total free blocks count 0 [ 392.414998][ T5188] EXT4-fs (loop0): Free/Dirty block details [ 392.416949][ T5188] EXT4-fs (loop0): free_blocks=68451041280 [ 392.431614][ T5188] EXT4-fs (loop0): dirty_blocks=1216 [ 392.596565][ T5188] EXT4-fs (loop0): Block reservation details [ 393.730463][ T5188] EXT4-fs (loop0): i_reserved_data_blocks=76 [ 393.833827][ T5188] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 888 with max blocks 400 with error 28 [ 396.590346][ T8503] loop8: detected capacity change from 0 to 64 [ 398.771220][ T8531] Invalid ELF header magic: != ELF [ 400.035632][ T8496] loop7: detected capacity change from 0 to 32768 [ 400.069641][ T8496] read_mapping_page failed! [ 400.072613][ T8496] jfs_mount: Failed to read AGGREGATE_I [ 400.073976][ T8496] Mount JFS Failure: -5 [ 400.075126][ T8496] jfs_mount failed w/return code = -5 [ 403.711874][ T8568] loop8: detected capacity change from 0 to 512 [ 403.872846][ T8563] Cannot find set identified by id 0 to match [ 403.880932][ T8568] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 407.304152][ T6390] EXT4-fs (loop8): unmounting filesystem. [ 407.360000][ T8609] loop5: detected capacity change from 0 to 256 [ 407.385315][ T8609] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe1843155, utbl_chksum : 0xe619d30d) [ 407.395876][ T8601] device wg2 entered promiscuous mode [ 407.402068][ T8607] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 407.596412][ T8618] loop8: detected capacity change from 0 to 4096 [ 407.862568][ T8618] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 409.517528][ T8618] ntfs3: loop8: Failed to load $Extend. [ 413.678439][ T8685] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 415.210022][ T8702] No such timeout policy "syz1" [ 415.623006][ T8705] netlink: 12 bytes leftover after parsing attributes in process `syz.8.901'. [ 416.862405][ T8713] loop5: detected capacity change from 0 to 40427 [ 417.012305][ T8713] F2FS-fs (loop5): build fault injection attr: rate: 771, type: 0x3ffff [ 417.329635][ T8713] F2FS-fs (loop5): invalid crc value [ 417.332494][ T8713] F2FS-fs (loop5): Found nat_bits in checkpoint [ 417.345376][ T8713] F2FS-fs (loop5): recover fsync data on readonly fs [ 417.348848][ T8713] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 419.072099][ T4320] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 419.074986][ T4320] CPU: 0 PID: 4320 Comm: kworker/u5:9 Not tainted 6.1.130-syzkaller #0 [ 419.077027][ T4320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 419.079467][ T4320] Workqueue: hci4 hci_rx_work [ 419.080588][ T4320] Call trace: [ 419.081390][ T4320] dump_backtrace+0x1c8/0x1f4 [ 419.082618][ T4320] show_stack+0x2c/0x3c [ 419.083652][ T4320] dump_stack_lvl+0x108/0x170 [ 419.084786][ T4320] dump_stack+0x1c/0x58 [ 419.085827][ T4320] sysfs_create_dir_ns+0x278/0x318 [ 419.087130][ T4320] kobject_add_internal+0x598/0xb14 [ 419.088371][ T4320] kobject_add+0x14c/0x21c [ 419.089411][ T4320] device_add+0x400/0xef4 [ 419.090517][ T4320] hci_conn_add_sysfs+0xc4/0x1cc [ 419.091775][ T4320] le_conn_complete_evt+0xa48/0xff4 [ 419.093042][ T4320] hci_le_conn_complete_evt+0x114/0x404 [ 419.094406][ T4320] hci_le_meta_evt+0x2b8/0x47c [ 419.095742][ T4320] hci_event_packet+0x6f8/0x109c [ 419.096972][ T4320] hci_rx_work+0x310/0xa84 [ 419.098180][ T4320] process_one_work+0x804/0x1484 [ 419.099398][ T4320] worker_thread+0x8e4/0xfec [ 419.100641][ T4320] kthread+0x250/0x2d8 [ 419.101614][ T4320] ret_from_fork+0x10/0x20 [ 419.104420][ T4320] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 419.110729][ T4320] Bluetooth: hci4: failed to register connection device [ 421.377638][ T8764] loop7: detected capacity change from 0 to 128 [ 421.430490][ T8764] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 422.538099][ T8764] FAT-fs (loop7): Filesystem has been set read-only [ 425.132201][ T8774] MPTCP: kernel_bind error, err=-99 [ 425.368209][ T4319] Bluetooth: hci0: command 0x0406 tx timeout [ 425.939368][ T8800] loop0: detected capacity change from 0 to 40427 [ 426.526474][ T4319] Bluetooth: hci4: command 0x0406 tx timeout [ 426.582327][ T8800] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x3ffff [ 426.598411][ T8800] F2FS-fs (loop0): invalid crc value [ 426.625607][ T8800] F2FS-fs (loop0): Found nat_bits in checkpoint [ 426.718070][ T8800] F2FS-fs (loop0): recover fsync data on readonly fs [ 426.731128][ T8800] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 427.058523][ T4319] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 427.061213][ T4319] CPU: 0 PID: 4319 Comm: kworker/u5:8 Not tainted 6.1.130-syzkaller #0 [ 427.063136][ T4319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 427.065474][ T4319] Workqueue: hci5 hci_rx_work [ 427.066557][ T4319] Call trace: [ 427.067355][ T4319] dump_backtrace+0x1c8/0x1f4 [ 427.068572][ T4319] show_stack+0x2c/0x3c [ 427.069474][ T4319] dump_stack_lvl+0x108/0x170 [ 427.070651][ T4319] dump_stack+0x1c/0x58 [ 427.071682][ T4319] sysfs_create_dir_ns+0x278/0x318 [ 427.072876][ T4319] kobject_add_internal+0x598/0xb14 [ 427.074136][ T4319] kobject_add+0x14c/0x21c [ 427.075250][ T4319] device_add+0x400/0xef4 [ 427.076263][ T4319] hci_conn_add_sysfs+0xc4/0x1cc [ 427.077464][ T4319] le_conn_complete_evt+0xa48/0xff4 [ 427.078794][ T4319] hci_le_conn_complete_evt+0x114/0x404 [ 427.080175][ T4319] hci_le_meta_evt+0x2b8/0x47c [ 427.081335][ T4319] hci_event_packet+0x6f8/0x109c [ 427.082512][ T4319] hci_rx_work+0x310/0xa84 [ 427.083551][ T4319] process_one_work+0x804/0x1484 [ 427.084729][ T4319] worker_thread+0x8e4/0xfec [ 427.085867][ T4319] kthread+0x250/0x2d8 [ 427.086887][ T4319] ret_from_fork+0x10/0x20 [ 427.091271][ T4319] kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 427.094792][ T4319] Bluetooth: hci5: failed to register connection device [ 427.140315][ T8816] netlink: 'syz.5.926': attribute type 1 has an invalid length. [ 427.156084][ T8816] 8021q: adding VLAN 0 to HW filter on device bond2 [ 427.181856][ T8816] device gretap1 entered promiscuous mode [ 427.186464][ T8816] bond2: (slave gretap1): making interface the new active one [ 427.189574][ T8816] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 427.192019][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 427.215580][ T8816] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 429.175076][ T8843] loop5: detected capacity change from 0 to 1024 [ 429.906065][ T8852] loop8: detected capacity change from 0 to 40427 [ 430.441670][ T8852] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 430.443751][ T8852] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 431.107116][ T8803] hfsplus: b-tree write err: -5, ino 4 [ 431.111694][ T8852] F2FS-fs (loop8): invalid crc value [ 431.358843][ T8852] F2FS-fs (loop8): Found nat_bits in checkpoint [ 431.400728][ T8852] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 431.402601][ T8852] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 433.146498][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 433.148418][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 433.443161][ T4423] F2FS-fs (loop8): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 433.616053][ T4423] F2FS-fs (loop8): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 435.305892][ T8913] netlink: 'syz.1.945': attribute type 1 has an invalid length. [ 435.399747][ T8913] 8021q: adding VLAN 0 to HW filter on device bond3 [ 435.459409][ T4320] Bluetooth: hci5: command 0x0406 tx timeout [ 436.520718][ T8922] device gretap1 entered promiscuous mode [ 436.526385][ T8922] bond3: (slave gretap1): making interface the new active one [ 436.538221][ T8922] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 436.541390][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 437.136544][ T8913] bond3: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 437.180756][ T8939] loop8: detected capacity change from 0 to 2048 [ 437.250295][ T8939] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 438.470289][ T8917] loop0: detected capacity change from 0 to 128 [ 438.528279][ T8917] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 438.541030][ T8917] FAT-fs (loop0): Filesystem has been set read-only [ 438.711755][ T8956] loop7: detected capacity change from 0 to 1024 [ 438.724867][ T6390] EXT4-fs (loop8): unmounting filesystem. [ 438.882518][ T8963] No such timeout policy "syz1" [ 440.677597][ T8976] hfsplus: xattr searching failed [ 441.485981][ T8992] loop0: detected capacity change from 0 to 1024 [ 441.508047][ T8992] EXT4-fs: inline encryption not supported [ 441.642615][ T8992] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 442.696006][ T9008] loop8: detected capacity change from 0 to 1024 [ 443.605380][ T4309] EXT4-fs (loop0): unmounting filesystem. [ 443.826998][ T9028] No such timeout policy "syz1" [ 444.486637][ T9032] netlink: 'syz.0.964': attribute type 1 has an invalid length. [ 444.550901][ T9032] 8021q: adding VLAN 0 to HW filter on device bond2 [ 444.700546][ T9032] device gretap1 entered promiscuous mode [ 444.716589][ T9032] bond2: (slave gretap1): making interface the new active one [ 444.730064][ T9032] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 444.732324][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 445.473034][ T9032] bond2: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 447.051299][ T9071] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 452.087135][ T9114] netlink: 'syz.0.984': attribute type 8 has an invalid length. [ 452.661560][ T9125] loop8: detected capacity change from 0 to 256 [ 453.365631][ T9127] loop0: detected capacity change from 0 to 128 [ 453.512975][ T9127] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 453.988070][ T9139] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.997'. [ 455.208379][ T4309] EXT4-fs (loop0): unmounting filesystem. [ 456.944259][ T9170] loop5: detected capacity change from 0 to 2048 [ 457.866659][ T9170] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 458.232622][ T9178] loop5: detected capacity change from 0 to 256 [ 458.276016][ T9178] FAT-fs (loop5): Directory bread(block 64) failed [ 458.277758][ T9178] FAT-fs (loop5): Directory bread(block 65) failed [ 458.279466][ T9178] FAT-fs (loop5): Directory bread(block 66) failed [ 458.281000][ T9178] FAT-fs (loop5): Directory bread(block 67) failed [ 458.282532][ T9178] FAT-fs (loop5): Directory bread(block 68) failed [ 458.284178][ T9178] FAT-fs (loop5): Directory bread(block 69) failed [ 458.285710][ T9178] FAT-fs (loop5): Directory bread(block 70) failed [ 458.323862][ T9178] FAT-fs (loop5): Directory bread(block 71) failed [ 458.325661][ T9178] FAT-fs (loop5): Directory bread(block 72) failed [ 458.327419][ T9178] FAT-fs (loop5): Directory bread(block 73) failed [ 459.260127][ T9179] netlink: 'syz.1.996': attribute type 10 has an invalid length. [ 459.314072][ T9179] device syz_tun entered promiscuous mode [ 460.527088][ T9179] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 460.635048][ T9199] loop0: detected capacity change from 0 to 2048 [ 460.693047][ T9199] EXT4-fs: Ignoring removed mblk_io_submit option [ 460.695542][ T9199] EXT4-fs: Ignoring removed i_version option [ 462.902200][ T9199] EXT4-fs warning (device loop0): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop0. [ 464.283810][ T9241] loop5: detected capacity change from 0 to 16 [ 465.106338][ T9241] erofs: (device loop5): mounted with root inode @ nid 36. [ 465.420638][ T9251] loop7: detected capacity change from 0 to 512 [ 465.437061][ T9251] EXT4-fs: Ignoring removed mblk_io_submit option [ 465.477036][ T9251] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 465.663731][ T4319] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 465.682130][ T9260] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 467.195120][ T9251] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c198, mo2=0002] [ 467.197227][ T9251] System zones: 1-12 [ 467.405374][ T9251] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2186: inode #15: comm syz.7.1013: corrupted in-inode xattr [ 467.443085][ T9251] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.1013: couldn't read orphan inode 15 (err -117) [ 467.816735][ T9251] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 469.491976][ T5241] EXT4-fs (loop7): unmounting filesystem. [ 470.982097][ T9303] loop8: detected capacity change from 0 to 1024 [ 471.006091][ T9303] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 471.029675][ T9303] EXT4-fs error (device loop8): ext4_get_journal_inode:5723: inode #32: comm syz.8.1026: iget: special inode unallocated [ 471.037205][ T9303] EXT4-fs (loop8): no journal found [ 471.043082][ T9303] EXT4-fs (loop8): can't get journal size [ 471.053305][ T9303] EXT4-fs error (device loop8): ext4_protect_reserved_inode:160: inode #32: comm syz.8.1026: iget: special inode unallocated [ 471.056970][ T9303] EXT4-fs (loop8): failed to initialize system zone (-117) [ 471.062491][ T9303] EXT4-fs (loop8): mount failed [ 471.294854][ T9303] netlink: 'syz.8.1026': attribute type 10 has an invalid length. [ 471.298645][ T9303] device syz_tun entered promiscuous mode [ 472.193299][ T9303] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 474.227951][ T9321] netlink: 'syz.5.1030': attribute type 1 has an invalid length. [ 474.621678][ T9322] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 476.795687][ T9348] loop7: detected capacity change from 0 to 1024 [ 476.807767][ T9328] device veth3 entered promiscuous mode [ 476.812660][ T9328] bond3: (slave veth3): Enslaving as a backup interface with a down link [ 476.855928][ T9348] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 476.979277][ T9356] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 477.002631][ T9342] ax25_connect(): syz.0.1034 uses autobind, please contact jreuter@yaina.de [ 477.025679][ T5241] EXT4-fs (loop7): unmounting filesystem. [ 477.175293][ T9342] ------------[ cut here ]------------ [ 477.177201][ T9342] refcount_t: decrement hit 0; leaking memory. [ 478.415448][ T9373] loop7: detected capacity change from 0 to 1024 [ 478.435741][ T9373] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 478.450760][ T9373] EXT4-fs error (device loop7): ext4_get_journal_inode:5723: inode #32: comm syz.7.1043: iget: special inode unallocated [ 478.463529][ T9373] EXT4-fs (loop7): no journal found [ 478.467944][ T9373] EXT4-fs (loop7): can't get journal size [ 478.475430][ T9373] EXT4-fs error (device loop7): ext4_protect_reserved_inode:160: inode #32: comm syz.7.1043: iget: special inode unallocated [ 478.481813][ T9373] EXT4-fs (loop7): failed to initialize system zone (-117) [ 478.486013][ T9373] EXT4-fs (loop7): mount failed [ 478.507998][ T9342] WARNING: CPU: 1 PID: 9342 at lib/refcount.c:31 refcount_warn_saturate+0x1e8/0x20c [ 478.510370][ T9342] Modules linked in: [ 478.511303][ T9342] CPU: 1 PID: 9342 Comm: syz.0.1034 Not tainted 6.1.130-syzkaller #0 [ 478.513237][ T9342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 478.515691][ T9342] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 478.517600][ T9342] pc : refcount_warn_saturate+0x1e8/0x20c [ 478.518998][ T9342] lr : refcount_warn_saturate+0x1e8/0x20c [ 478.520396][ T9342] sp : ffff8000213475d0 [ 478.521460][ T9342] x29: ffff8000213475d0 x28: 1fffe0001beca0c3 x27: dfff800000000000 [ 478.523596][ T9342] x26: dfff800000000000 x25: ffff700004268ec4 x24: ffff0000cab8ae00 [ 478.525697][ T9342] x23: ffff0000cab8ae10 x22: ffff800021347640 x21: 0000000000000004 [ 478.527466][ T9342] x20: ffff0000dc1225fc x19: ffff8000184e9000 x18: ffff800021346ca0 [ 478.529407][ T9342] x17: ffff800018c58000 x16: ffff80000830270c x15: ffff800008a4b9fc [ 478.531447][ T9342] x14: ffff800008a4bcc4 x13: ffff800008230354 x12: 0000000000080000 [ 478.533433][ T9342] x11: 00000000000125de x10: 0000000000000003 x9 : fdaf4301461a2e00 [ 478.535309][ T9342] x8 : fdaf4301461a2e00 x7 : ffff8000081ece70 x6 : ffff800008230354 [ 478.537232][ T9342] x5 : ffff0000dff9a2b8 x4 : ffff800021346fa0 x3 : 0000000000000000 [ 478.539173][ T9342] x2 : 0000000000000006 x1 : ffff80001248d5c0 x0 : 0000000000000001 [ 478.541219][ T9342] Call trace: [ 478.542009][ T9342] refcount_warn_saturate+0x1e8/0x20c [ 478.543356][ T9342] ref_tracker_free+0x550/0x6ac [ 478.544578][ T9342] ax25_release+0x344/0x89c [ 478.545720][ T9342] sock_close+0xb8/0x1fc [ 478.546798][ T9342] __fput+0x1c8/0x7c8 [ 478.547872][ T9342] ____fput+0x20/0x30 [ 478.548901][ T9342] task_work_run+0x240/0x2f0 [ 478.550064][ T9342] get_signal+0x1330/0x1528 [ 478.551212][ T9342] do_notify_resume+0x388/0x2cb8 [ 478.552490][ T9342] el0_svc+0x9c/0x168 [ 478.553375][ T9342] el0t_64_sync_handler+0x84/0xf0 [ 478.554599][ T9342] el0t_64_sync+0x18c/0x190 [ 478.555724][ T9342] irq event stamp: 1312 [ 478.556709][ T9342] hardirqs last enabled at (1311): [] kasan_quarantine_put+0xdc/0x204 [ 478.559031][ T9342] hardirqs last disabled at (1312): [] el1_dbg+0x24/0x80 [ 478.561070][ T9342] softirqs last enabled at (1288): [] handle_softirqs+0xb84/0xd58 [ 478.563443][ T9342] softirqs last disabled at (1271): [] __do_softirq+0x14/0x20 [ 478.565692][ T9342] ---[ end trace 0000000000000000 ]--- [ 478.722594][ T9373] netlink: 'syz.7.1043': attribute type 10 has an invalid length. [ 478.732009][ T9373] device syz_tun entered promiscuous mode [ 479.720139][ T9373] bond0: (slave syz_tun): Enslaving as an active interface with an up link