last executing test programs: 6m7.705070751s ago: executing program 3 (id=65): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x4, 0x5, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xe}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10003, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r1, &(0x7f0000000000), &(0x7f0000001a00)=""/122}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000140), &(0x7f00000002c0)=""/4095}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r0}, 0x0, 0x0}, 0x20) 6m6.43058487s ago: executing program 3 (id=68): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socket$igmp6(0xa, 0x3, 0x2) fsetxattr$security_evm(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000101fffffff90035306d380b9e8f6c33e518ece81a26998fa7f35023259b7e7555fc"], 0x3e, 0x0) r2 = socket(0x11, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000240)=0x4e6f, 0x4) sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011412012918000e3580009f000114000000040600ac141430e0000001808a8972bd0b72e4108296a3d206"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000}, 0x1) 6m6.150861954s ago: executing program 3 (id=73): ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x890b, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xb}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000800)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x1e}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff}, @fd}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 6m5.981517987s ago: executing program 3 (id=75): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) move_mount(r0, &(0x7f0000000080)='./file0/file0\x00', r0, &(0x7f0000000040)='./file0/../file0\x00', 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x12f451, 0x0) umount2(&(0x7f00000000c0)='./file0/file0\x00', 0x1) 6m5.060720171s ago: executing program 0 (id=77): r0 = gettid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 6m5.056210641s ago: executing program 3 (id=78): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() 6m2.820002734s ago: executing program 3 (id=84): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) writev(r1, &(0x7f00000006c0)=[{&(0x7f0000002680)='3', 0x1}], 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet(r1, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) sendmmsg$inet6(r1, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001700)='y', 0x1}], 0x1}}], 0x1, 0x0) close(r1) 6m2.692102536s ago: executing program 32 (id=84): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) writev(r1, &(0x7f00000006c0)=[{&(0x7f0000002680)='3', 0x1}], 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet(r1, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) sendmmsg$inet6(r1, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001700)='y', 0x1}], 0x1}}], 0x1, 0x0) close(r1) 6m1.576879272s ago: executing program 0 (id=90): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountstats\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pread64(r0, &(0x7f0000002480)=""/237, 0xed, 0x2000000000004ef) 5m59.741373869s ago: executing program 0 (id=94): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r3, 0x6, 0x6, &(0x7f0000000200), 0x4) 5m58.302574861s ago: executing program 0 (id=98): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file0\x00', 0x2810489, &(0x7f0000000580)={[{@lastblock={'lastblock', 0x3d, 0xe2}}, {@unhide}, {@gid_forget}, {@nostrict}, {@unhide}, {@undelete}, {@shortad}, {@uid_ignore}, {@shortad}, {@uid}, {@adinicb}, {@uid_ignore}, {@fileset}, {@uid_forget}]}, 0x4, 0xc24, &(0x7f0000000d00)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) syz_emit_ethernet(0x3e, 0x0, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) 5m56.864875543s ago: executing program 0 (id=102): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x8905, &(0x7f0000000100)) 5m56.107745484s ago: executing program 0 (id=108): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) 5m55.890151797s ago: executing program 33 (id=108): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) 4m27.498544964s ago: executing program 6 (id=387): sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x2d, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000240)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1}, {0x4, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x2, 0x3, 0x100, @void}}}}}}}, 0x0) 4m25.678179041s ago: executing program 6 (id=393): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xea000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup(r0) r4 = fcntl$dupfd(r1, 0x406, r2) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0, 0x4000}) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f00000002c0)) 4m25.343733276s ago: executing program 6 (id=401): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x3c, 0x2, 0xff, 0x1, 0x2, 0x9}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x207, &(0x7f00000005c0)={[{@errors_remount}]}, 0x1, 0x46b, &(0x7f0000000600)="$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") socket$packet(0x11, 0x3, 0x300) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_flowlabel\x00') openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000300)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05"], 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 4m23.868028958s ago: executing program 6 (id=409): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x3, 0x0, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000200)='./bus\x00', 0x100000, &(0x7f0000000200)=ANY=[], 0x1, 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0xf, 0x0, &(0x7f0000000000)) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000200)=""/169, 0xa9) 4m23.437507205s ago: executing program 6 (id=417): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') read$char_usb(r3, &(0x7f0000000040)=""/4109, 0x100d) 4m20.44078084s ago: executing program 6 (id=425): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000005000000090000000100"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f0000000140)={'pim6reg1\x00', @link_local={0x1, 0x80, 0xc2, 0x25, 0x64, 0x2}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4m20.247378782s ago: executing program 34 (id=425): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000005000000090000000100"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f0000000140)={'pim6reg1\x00', @link_local={0x1, 0x80, 0xc2, 0x25, 0x64, 0x2}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 11.899914152s ago: executing program 5 (id=1171): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x9, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffffff8}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r3}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8, 0x0, 0xffff}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 10.852955638s ago: executing program 5 (id=1173): r0 = semget(0x0, 0x2, 0x2c0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) fchdir(r2) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @empty, 0x5}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) 8.531779432s ago: executing program 4 (id=1181): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={r4, 0xfffffff4, 0x6, 0x9, 0x9, 0x9, 0x7fff, 0x1d20, {r4, @in6={{0xa, 0x4e20, 0x3c, @mcast1, 0x75cb}}, 0x3, 0x2, 0x6, 0x9, 0x8}}, &(0x7f0000000040)=0xb0) 7.699284685s ago: executing program 1 (id=1183): r0 = socket$inet6(0xa, 0x800, 0x4) setsockopt$inet_opts(r0, 0x0, 0x6, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0xa) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0xc, 0x2, [@TCA_GRED_LIMIT={0x8, 0x5, 0x719d}]}}]}, 0x3c}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) 6.758446329s ago: executing program 2 (id=1185): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x128000, 0x800}, 0x20) 6.750293989s ago: executing program 4 (id=1186): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="b80000001d0067"], 0xb8}}, 0x0) 6.745312139s ago: executing program 5 (id=1187): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$setperm(0x5, 0x0, 0x8000010) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @rand_addr=0x64010101}}]}, 0x40}}, 0x0) 6.503906913s ago: executing program 7 (id=1188): syz_emit_ethernet(0x6e, &(0x7f0000000440)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4b906", 0x38, 0x3a, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x33, 0x0, @loopback, @empty, [@fragment={0x3b, 0x0, 0x7, 0x0, 0x0, 0x7, 0x68}]}}}}}}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x20001, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0xca02}) close(r0) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be12020506050e020409430009003f000c200a0000000d0085a168d0bf46d32345653600648d0a00120002000a0000005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2", 0x75, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x30, 0x0, 0x0, 0x36fd}, {0x6, 0x0, 0x1}]}, 0x10) syz_emit_ethernet(0x2bb, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f0000000b40)=ANY=[], 0x457f) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000040)={0x80000002}) 6.461790494s ago: executing program 1 (id=1189): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0) read$char_usb(r4, &(0x7f0000000080)=""/139, 0xfdef) 5.024142785s ago: executing program 2 (id=1190): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fedbdf25080000001800028014000380100001800400030008000100050000000c00018008000100", @ANYRES32=r3], 0x38}, 0x1, 0x0, 0x0, 0x4000814}, 0x0) 5.000695925s ago: executing program 4 (id=1191): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7ffffffd, 0x4) write$binfmt_script(r0, 0x0, 0x6f4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="f8000000160001000000000000000000fe8000000000000000000000000000aae0000002000000ee5b000000000000004e2000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8800000000000000000000000000010000000033000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000010000100000000000000000000000a"], 0xf8}, 0x1, 0x0, 0x0, 0x14}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@private2, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, {0x5, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x5}, {0x4, 0x0, 0x2}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7ee643bd1282d893}}}, 0xf8}}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000380)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r4, 0x0, r3, 0x0, 0x3, 0x0) 4.935346076s ago: executing program 2 (id=1192): r0 = socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) close(0x3) 4.912472576s ago: executing program 7 (id=1194): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200601, 0x0) lseek(r0, 0x81, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NFT_MSG_GETCHAIN(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x0) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000370400000000ffdbdf2500000000", @ANYRES32=r5, @ANYBLOB="83450500010000001c0012800b00010067656e65766500000c00028005000d0002000000a19ad46a1816"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x50}, {0x6}]}, 0x10) sendmmsg$inet(r2, &(0x7f0000000440)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty}}}], 0x20}}, {{&(0x7f00000000c0)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @dev={0xac, 0x14, 0x14, 0x2e}, @local}}}], 0x38}}], 0x2, 0x4000084) recvfrom$inet_nvme(r1, 0x0, 0x0, 0x40, 0x0, 0x0) 4.799370388s ago: executing program 5 (id=1195): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r3, 0x4000) close(r3) 3.022826405s ago: executing program 1 (id=1196): mount$fuse(0x0, 0x0, 0x0, 0x1020040, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) write$binfmt_elf64(r1, &(0x7f0000000240)=ANY=[], 0x40000) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000008c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) recvfrom$unix(r2, &(0x7f00000004c0)=""/249, 0xf9, 0x40, 0x0, 0x0) 3.021342335s ago: executing program 2 (id=1197): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0x4}, {0x6, 0xff}]}) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r2, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) 2.950353416s ago: executing program 4 (id=1198): r0 = semget(0x0, 0x2, 0x2c0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) fchdir(r2) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @empty, 0x5}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) 2.263833616s ago: executing program 1 (id=1199): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r4, 0x1}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.193099437s ago: executing program 7 (id=1200): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IFLA_CARRIER={0x5, 0x21, 0x8}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x80000000, 0x33d, 0x8}}]}]}, @IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c801}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_0\x00', 0x0}) write(r0, &(0x7f0000000480)="5ce4b8276f4832147f7137e672df16222c2758364453d053fbb2bd91e81e75df0e5122fa1b4fe0754adc40257eafaa4838fef39ef1c20714", 0x38) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000500), 0x200, 0x0) r6 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x5c, r6, 0x1, 0x70bd25, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r5}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}]}, 0x5c}, 0x1, 0xf000, 0x0, 0x3000000}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) syz_open_dev$loop(0x0, 0x8, 0x2180) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x1000, 0x0, r0, 0x1000, '\x00', r3, r7, 0x3, 0x4, 0x5}, 0x50) 2.191538457s ago: executing program 5 (id=1201): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(&(0x7f0000000100)='\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x40000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x1}, 0x18, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r0, 0x0) mount$tmpfs(0x0, &(0x7f0000000300)='./file0/file1\x00', &(0x7f0000000340), 0x0, 0x0) umount2(&(0x7f0000000380)='./file0/file0\x00', 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x0) mount$bind(&(0x7f0000000440)='\x00', &(0x7f0000000480)='./file0/file0\x00', &(0x7f00000004c0), 0x21, 0x0) pivot_root(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0/file0\x00') 2.084650668s ago: executing program 7 (id=1202): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$llc(0x1a, 0x2, 0x0) socket(0x200000000000011, 0x2, 0x0) socket$inet6(0xa, 0x3, 0xff) socket$inet_smc(0x2b, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x11}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x34) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 2.0018393s ago: executing program 2 (id=1203): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000080)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}]}, 0x1, 0x241, &(0x7f0000000540)="$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") chdir(&(0x7f00000003c0)='./bus\x00') sendmsg$OSF_MSG_REMOVE(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f00000016c0)={0x4bc, 0x1, 0x5, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [{{0x254, 0x1, {{0x2, 0x5}, 0x40, 0x0, 0xfffe, 0xff, 0x16, 'syz0\x00', "3bb39a8a07b3feaf16953efd75b1ff75eebc346414225a05a088c83b395bdc2d", "2125a36bbf6428a077f21f2dbeb2b7a594288ce763348c2a7714049416caacaf", [{0x401, 0x5, {0x3, 0x8000}}, {0x1, 0x4, {0x2, 0x1}}, {0x6, 0xc, {0x0, 0x3ff}}, {0x82, 0x5f, {0x0, 0xfffffff0}}, {0x4, 0x7fff, {0x2, 0x2}}, {0x322, 0x40, {0x2, 0xfff}}, {0x7f3, 0xe, {0x1, 0x43b}}, {0x10, 0xe23c, {0x1, 0x4}}, {0x6, 0x1, {0x3, 0x9}}, {0x9, 0x3, {0x0, 0xa}}, {0xf747, 0x241f, {0x3, 0x8}}, {0x1000, 0x0, {0x3, 0x4}}, {0x0, 0x9, {0x0, 0x4278}}, {0x10, 0xffff, {0x0, 0x2}}, {0x8, 0x8001, {0x2}}, {0x2, 0xfd5, {0x0, 0x1ff}}, {0x1, 0xfff, {0x0, 0x2}}, {0x1, 0x101, {0x0, 0x7}}, {0x2, 0x714f, {0x0, 0x2}}, {0xc1, 0x3, {0x2, 0x5}}, {0x8571, 0x8f, {0x1, 0xa0000000}}, {0x0, 0x10, {0x3, 0x8}}, {0x20, 0x2, {0x2, 0xffffff08}}, {0x5, 0x401, {0x2, 0x3}}, {0x3, 0x85d8, {0x1}}, {0x2, 0x8001, {0x3, 0x80000000}}, {0x38, 0xf206, {0x2, 0xffff3870}}, {0x0, 0x7, {0x2, 0x5}}, {0x8, 0xff, {0x2, 0x1ff}}, {0x8, 0x5, {0x0, 0x5}}, {0x2, 0xfff9, {0x2, 0x1}}, {0x9891, 0x0, {0x1, 0x35}}, {0x4, 0x0, {0x1, 0xff}}, {0x200, 0x3, {0x0, 0x6200}}, {0x1, 0x7, {0x1, 0x7fffffff}}, {0x6b3, 0x2, {0x2, 0x2}}, {0x4, 0x1, {0x0, 0x7fffffff}}, {0x5, 0x3, {0x3, 0x1004}}, {0x3, 0x9, {0x0, 0xf}}, {0x7, 0x7, {0x3, 0xfffffff5}}]}}}, {{0x254, 0x1, {{0x1, 0x7ff}, 0x8, 0x2, 0x8, 0x7ff, 0x20, 'syz1\x00', "fa50e051d353528a1c5cb71327d13e243efb54f9958c541d29bed475df225784", "d72d42f7919a2ccc4d193f1627fc13b99ac575ea0a800f44c8351961b9259cc3", [{0xffff, 0xe32, {0x0, 0x7ff}}, {0xf9, 0x9, {0x3, 0x9}}, {0x0, 0x1, {0x0, 0x7}}, {0x80, 0xfff7, {0x3, 0x10001}}, {0x8, 0x8001, {0x3}}, {0x0, 0x6, {0x0, 0x8}}, {0x920f, 0x6, {0x2, 0x8001}}, {0x2, 0x200, {0x0, 0x5d}}, {0xb933, 0x8f1, {0x0, 0x1}}, {0x4, 0x81, {0x3, 0x9}}, {0xcdb, 0x2, {0x1, 0xc}}, {0x8000, 0x7ff, {0x3, 0xfffffffe}}, {0x5, 0x0, {0x0, 0x5}}, {0xffff, 0x5, {0x1, 0x8}}, {0x3, 0x9, {0x0, 0x1}}, {0xf21, 0x7ff, {0x3, 0x7}}, {0x3, 0x4, {0x0, 0x5}}, {0xc3, 0xa, {0x2, 0xffffffff}}, {0x9, 0x7, {0x1, 0x9}}, {0x1000, 0x4, {0x1, 0xe79}}, {0x100, 0xc, {0x2, 0xffffffff}}, {0x400, 0x8000, {0x3, 0xfffffffc}}, {0x4ecb, 0x10, {0x1, 0x3}}, {0x5, 0x6, {0x1, 0x7}}, {0x8, 0x5, {0x3, 0x5}}, {0x9, 0x9109, {0x2, 0x6}}, {0x5, 0x5, {0x3, 0x7fff}}, {0x4, 0x2, {0x0, 0x8}}, {0x1ff, 0x1, {0x0, 0x8e}}, {0x9, 0x144a, {0x3, 0x8}}, {0x2, 0x4b8d, {0x0, 0x7f}}, {0xf000, 0x9, {0x1, 0xe82}}, {0x9, 0x0, {0x3, 0xfffffb71}}, {0xe, 0x383, {0x0, 0x6}}, {0x1, 0x9, {0x3, 0x4}}, {0x7, 0xb2a, {0x1, 0x9}}, {0x4, 0x6, {0x0, 0x6}}, {0x3ff, 0x0, {0x1, 0x7}}, {0x80, 0x10, {0x0, 0x4}}, {0x8, 0xf0a5, {0x2, 0x4}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x6}, 0x4004) fallocate(0xffffffffffffffff, 0x10, 0xfffffffffffffffc, 0xac9a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) 1.97896602s ago: executing program 5 (id=1204): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000340)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe, 0x0, &(0x7f0000000800)="0000000000000000606b53cc7273", 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000580)={'syz1\x00', {0x6fc9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x3, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0xbeb, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x4, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x8, 0xe, 0x4, 0x2, 0xde, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x200005, 0x40, 0x9, 0x7, 0x1], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0xc32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x2, 0x1, 0x0, 0x6, 0x7, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x10000007, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x858], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x7, 0xfffffffc, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x9, 0x2, 0x5, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x0, 0x0, 0x3ff, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x6, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x403, 0x8000088, 0x2, 0x6, 0x4, 0x10, 0x2, 0x763, 0xb, 0x3776, 0x800, 0x4, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x3d, 0x7, 0x2, 0x4, 0x4, 0x10, 0x340a, 0x0, 0x7fff, 0xffffffff, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) readv(r4, &(0x7f0000000b80)=[{&(0x7f0000000a00)=""/113, 0x71}], 0x1) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 1.133394023s ago: executing program 7 (id=1205): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x150, 0x10, 0x413, 0x70bd28, 0x0, {{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x20, 0x20}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x32}, @in=@private=0xa010100, {0x4, 0x7, 0x0, 0x40000000000004, 0xffffffffffffffff, 0x0, 0x7f}, {0x0, 0x8, 0xcc}, {0xf6}, 0x0, 0x0, 0x2, 0x1, 0x1}, [@algo_aead={0x4c, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x0, 0x40}}, @tfcpad={0x8, 0x16, 0x4}, @mark={0xc, 0x15, {0x35075c, 0x6}}]}, 0x150}}, 0x804) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r3, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c00000010003904fcffffff0000000000000000", @ANYRES32=r3, @ANYBLOB="19000000422200001800128008000100677265000c00028008000600031e6fe72a84fcbef4894b37277f00000108007d3d524d000014"], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x844) 1.109361463s ago: executing program 4 (id=1206): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000b80)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x810040, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x2ad, &(0x7f0000000740)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.095160113s ago: executing program 1 (id=1207): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x37, 0x1, 0x0, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./bus\x00', 0xa00000, &(0x7f0000000680)={[{@rootdir={'rootdir', 0x3d, 0x3}}, {@anchor={'anchor', 0x3d, 0x6}}, {@undelete}, {@uid}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@longad}, {@shortad}, {@uid_forget}, {@dmode={'dmode', 0x3d, 0x4}}]}, 0x1, 0xc49, &(0x7f0000001d40)="$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") truncate(&(0x7f0000000040)='./file1\x00', 0x7fff) r3 = openat(0xffffffffffffff9c, &(0x7f000009de80)='./file1\x00', 0x42, 0x1ff) write(r3, &(0x7f0000000180)="7e7226ce9b4d692092ffa2b579f0ff5793012c9738a9be19ff3e69a683a0a1bbace0dc3853c661a4e1019e7a1f3af60350126cb99c5f3ace6f5616c00e0fb30b2832398fed6233b8632a001dd0a846cbb8a5d77e3208db486b055edb6ae7917f07ccf4b6811be57047aa17799359e733ec395940d1feb7a9ec2ddadb1ff61070c9c00f9db8e47f74a5271fa77b6e692e6ac97aaae883e5522f8e86c2403aec0ff8dee1cba5d40f0969470b9a2a95f6f22f9d4250809400ea8403a6540948", 0xfffffec6) 140.459958ms ago: executing program 2 (id=1208): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440), 0x802, 0x0) sigaltstack(&(0x7f0000000080)={&(0x7f00000000c0)=""/4086, 0x0, 0xfffffffffffffeae}, 0x0) sigaltstack(&(0x7f0000000000)={0x0, 0x40000002}, &(0x7f00000021c0)={0x0}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000006c0)={0x1, &(0x7f0000000500)=[{0x6, 0x43, 0x0, 0x7fff0000}]}) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket(0x840000000002, 0x3, 0xff) sendmmsg$unix(r3, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="90", 0x1}], 0x1, &(0x7f0000000580)=[@rights={{0x18, 0x1, 0x1, [r4, r2]}}], 0x18, 0x8801}}], 0x1, 0x20044034) close_range(r1, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}], 0x1) 19.570199ms ago: executing program 7 (id=1209): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x17, 0x4, &(0x7f0000000480)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1}]}, &(0x7f0000000140)='syzkaller\x00', 0x5, 0xec, &(0x7f0000000000)=""/236}, 0x80) 17.787329ms ago: executing program 4 (id=1210): socket$inet_tcp(0x2, 0x1, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) epoll_create1(0x0) epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000400)="e8", &(0x7f0000000440)=@tcp6=r0, 0x1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 0s ago: executing program 1 (id=1219): prctl$PR_SET_NAME(0xf, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x14) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f00000000c0)=[{r2, 0x100}], 0x1, &(0x7f0000000100)={0x0, 0x989680}, 0x0, 0x0) kernel console output (not intermixed with test programs): unique to avoid problems! [ 41.750708][ T4318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.753940][ T4318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.756848][ T4318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.764494][ T4318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.785602][ T4318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.795576][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 41.798290][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.802501][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.826618][ T4318] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.829470][ T4318] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.831843][ T4318] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.834370][ T4318] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.863328][ T260] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.867115][ T260] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.887653][ T1590] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 42.528919][ T4308] Bluetooth: hci1: command 0x040f tx timeout [ 42.531047][ T4323] Bluetooth: hci4: command 0x040f tx timeout [ 42.531311][ T4313] Bluetooth: hci0: command 0x040f tx timeout [ 42.535249][ T4313] Bluetooth: hci3: command 0x040f tx timeout [ 42.537556][ T4308] Bluetooth: hci2: command 0x040f tx timeout [ 42.906118][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.908540][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.935114][ T260] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 43.016369][ T4404] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.018835][ T4404] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.024136][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 43.256267][ T4458] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17'. [ 43.289702][ T4459] lo speed is unknown, defaulting to 1000 [ 43.299143][ T4459] lo speed is unknown, defaulting to 1000 [ 43.301621][ T4459] lo speed is unknown, defaulting to 1000 [ 43.311987][ T4459] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 43.316390][ T4459] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 43.363826][ T4461] netlink: 6 bytes leftover after parsing attributes in process `syz.4.5'. [ 43.376658][ T4461] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 43.425464][ T4459] lo speed is unknown, defaulting to 1000 [ 43.453059][ T4459] lo speed is unknown, defaulting to 1000 [ 43.464638][ T4459] lo speed is unknown, defaulting to 1000 [ 43.474355][ T4459] lo speed is unknown, defaulting to 1000 [ 43.487147][ T4459] lo speed is unknown, defaulting to 1000 [ 43.818949][ T4344] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 44.002700][ T4344] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 44.005960][ T4344] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.019501][ T4344] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 44.022053][ T4344] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.041810][ T4344] usb 1-1: config 0 descriptor?? [ 44.073625][ T4482] process 'syz.3.26' launched './file1' with NULL argv: empty string added [ 44.095258][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 44.099595][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 44.102047][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 44.105782][ T4484] device bridge_slave_0 left promiscuous mode [ 44.122801][ T4484] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.175483][ T4484] device bridge_slave_1 left promiscuous mode [ 44.177578][ T4484] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.255631][ T4484] bond0: (slave bond_slave_0): Releasing backup interface [ 44.292515][ T4484] bond0: (slave bond_slave_1): Releasing backup interface [ 44.355456][ T4484] team0: Port device team_slave_0 removed [ 44.366454][ T4484] team0: Port device team_slave_1 removed [ 44.369888][ T4484] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.371993][ T4484] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.376887][ T4484] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.380580][ T4484] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.392260][ T4487] netlink: 'syz.4.28': attribute type 10 has an invalid length. [ 44.417489][ T4487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.427241][ T4487] team0: Port device bond0 added [ 44.458362][ T4491] netlink: 12 bytes leftover after parsing attributes in process `syz.2.30'. [ 44.484888][ T4344] savu 0003:1E7D:2D5A.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 44.523871][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 44.529417][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 44.531631][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 44.535828][ T4498] device bridge_slave_0 left promiscuous mode [ 44.537578][ T4498] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.569498][ T47] Bluetooth: hci2: command 0x0419 tx timeout [ 44.571168][ T47] Bluetooth: hci4: command 0x0419 tx timeout [ 44.572773][ T47] Bluetooth: hci3: command 0x0419 tx timeout [ 44.574374][ T47] Bluetooth: hci0: command 0x0419 tx timeout [ 44.576150][ T47] Bluetooth: hci1: command 0x0419 tx timeout [ 44.590051][ T4498] device bridge_slave_1 left promiscuous mode [ 44.591939][ T4498] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.652235][ T4498] bond0: (slave bond_slave_0): Releasing backup interface [ 44.679902][ T4498] bond0: (slave bond_slave_1): Releasing backup interface [ 44.744911][ T4498] team0: Port device team_slave_0 removed [ 44.765663][ T4498] team0: Port device team_slave_1 removed [ 44.768009][ T4498] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.779723][ T4498] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.782799][ T4498] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.784933][ T4498] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.794148][ T4491] Zero length message leads to an empty skb [ 44.941601][ T4509] loop1: detected capacity change from 0 to 128 [ 45.024873][ T4509] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 45.261234][ T4515] netlink: 12 bytes leftover after parsing attributes in process `syz.2.37'. [ 45.283702][ T4418] usb 1-1: USB disconnect, device number 2 [ 45.303983][ T4515] batman_adv: batadv0: Adding interface: bond1 [ 45.305851][ T4515] batman_adv: batadv0: The MTU of interface bond1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.329570][ T4515] batman_adv: batadv0: Not using interface bond1 (retrying later): interface not active [ 45.350747][ T4306] EXT4-fs (loop1): unmounting filesystem. [ 45.364250][ T4517] netlink: 4 bytes leftover after parsing attributes in process `syz.2.37'. [ 45.366816][ T4517] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.530971][ T4517] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.534093][ T4517] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.545356][ T4517] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.556034][ T4517] batman_adv: batadv0: Removing interface: bond1 [ 48.486058][ T4562] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.488264][ T4562] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.559387][ T4573] device bridge_slave_1 left promiscuous mode [ 48.561623][ T4573] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.848459][ C0] sched: RT throttling activated [ 49.929098][ T4573] device bridge_slave_0 left promiscuous mode [ 49.931507][ T4573] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.041672][ T4590] tipc: Started in network mode [ 51.043111][ T4590] tipc: Node identity 4, cluster identity 4711 [ 51.044812][ T4590] tipc: Node number set to 4 [ 51.575146][ T4607] loop1: detected capacity change from 0 to 8 [ 52.591396][ T4614] netlink: 4 bytes leftover after parsing attributes in process `syz.0.71'. [ 52.593896][ T4614] netlink: 1 bytes leftover after parsing attributes in process `syz.0.71'. [ 52.613026][ T4618] loop4: detected capacity change from 0 to 256 [ 52.615346][ T4618] ======================================================= [ 52.615346][ T4618] WARNING: The mand mount option has been deprecated and [ 52.615346][ T4618] and is ignored by this kernel. Remove the mand [ 52.615346][ T4618] option from the mount to silence this warning. [ 52.615346][ T4618] ======================================================= [ 52.622524][ T4616] loop2: detected capacity change from 0 to 512 [ 52.661295][ T4616] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 52.664962][ T4616] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 52.706221][ T4618] FAT-fs (loop4): Directory bread(block 64) failed [ 52.736234][ T4616] EXT4-fs (loop2): 1 truncate cleaned up [ 52.737989][ T4616] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 52.739102][ T4618] FAT-fs (loop4): Directory bread(block 65) failed [ 52.742446][ T4618] FAT-fs (loop4): Directory bread(block 66) failed [ 52.744566][ T4618] FAT-fs (loop4): Directory bread(block 67) failed [ 52.746376][ T4618] FAT-fs (loop4): Directory bread(block 68) failed [ 52.748217][ T4618] FAT-fs (loop4): Directory bread(block 69) failed [ 52.750358][ T4618] FAT-fs (loop4): Directory bread(block 70) failed [ 52.752200][ T4618] FAT-fs (loop4): Directory bread(block 71) failed [ 52.754168][ T4618] FAT-fs (loop4): Directory bread(block 72) failed [ 52.756261][ T4618] FAT-fs (loop4): Directory bread(block 73) failed [ 52.793770][ T4626] netlink: 'syz.0.74': attribute type 1 has an invalid length. [ 52.807516][ T4629] binder: 4628:4629 tried to acquire reference to desc 0, got 1 instead [ 52.811493][ T4629] binder: 4628:4629 got transaction with fd, -1, but target does not allow fds [ 52.814146][ T4629] binder: 4629:4628 translate fd failed [ 52.815802][ T4629] binder: 4628:4629 transaction call to 4628:0 failed 5/29201/-1, size 104-24 line 3424 [ 52.820299][ T4361] binder: undelivered TRANSACTION_ERROR: 29201 [ 52.900336][ T4626] device batadv0 entered promiscuous mode [ 52.912407][ T4626] batman_adv: batadv0: Adding interface: ip6gretap1 [ 52.920139][ T4626] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.947224][ T4626] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 53.001279][ T4314] EXT4-fs (loop2): unmounting filesystem. [ 54.099931][ T4642] binder: 4641:4642 ioctl c0306201 20000080 returned -14 [ 54.112715][ T4642] binder: 4641:4642 tried to acquire reference to desc 0, got 1 instead [ 54.144059][ T24] binder: undelivered transaction 10, process died. [ 55.205509][ T4636] loop2: detected capacity change from 0 to 512 [ 55.982284][ T4636] EXT4-fs: Ignoring removed nomblk_io_submit option [ 55.984325][ T4636] EXT4-fs: Ignoring removed nobh option [ 55.985819][ T4636] EXT4-fs: Ignoring removed nobh option [ 56.029655][ T47] Bluetooth: hci3: command 0x0406 tx timeout [ 56.144213][ T4645] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.249061][ T4636] EXT4-fs: Conflicting test_dummy_encryption options [ 56.400119][ T4666] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 56.410592][ T4645] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.620470][ T47] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 56.629137][ T47] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 56.660197][ T47] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 57.245615][ T47] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 57.249039][ T4313] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 57.251425][ T4313] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 57.270828][ T4645] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.440457][ T4645] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.997372][ T4668] lo speed is unknown, defaulting to 1000 [ 59.318601][ T4313] Bluetooth: hci1: command 0x0409 tx timeout [ 60.767847][ T4707] loop0: detected capacity change from 0 to 2048 [ 60.810346][ T4708] loop2: detected capacity change from 0 to 2048 [ 60.870311][ T4707] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 61.369425][ T4308] Bluetooth: hci1: command 0x041b tx timeout [ 61.679800][ T4668] chnl_net:caif_netlink_parms(): no params data found [ 61.683599][ T4707] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 61.722887][ T4708] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 61.737494][ T4707] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 61.739917][ T4707] UDF-fs: Scanning with blocksize 512 failed [ 61.764171][ T4707] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 61.860368][ T4708] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 61.887258][ T4708] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 718 with error 28 [ 61.897566][ T4718] netlink: 24 bytes leftover after parsing attributes in process `syz.1.101'. [ 61.906702][ T4708] EXT4-fs (loop2): This should not happen!! Data will be lost [ 61.906702][ T4708] [ 61.945830][ T4668] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.946146][ T4727] mmap: syz.2.99 (4727) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 61.949142][ T4668] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.954247][ T4668] device bridge_slave_0 entered promiscuous mode [ 61.958064][ T4668] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.960295][ T4668] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.962977][ T4668] device bridge_slave_1 entered promiscuous mode [ 61.970233][ T4708] EXT4-fs (loop2): Total free blocks count 0 [ 61.972644][ T4708] EXT4-fs (loop2): Free/Dirty block details [ 61.974326][ T4708] EXT4-fs (loop2): free_blocks=2415919104 [ 61.975972][ T4708] EXT4-fs (loop2): dirty_blocks=720 [ 61.977380][ T4708] EXT4-fs (loop2): Block reservation details [ 61.979266][ T4708] EXT4-fs (loop2): i_reserved_data_blocks=45 [ 62.025810][ T4645] tipc: Left network mode [ 62.030359][ T4668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.035107][ T4668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.090933][ T4668] team0: Port device team_slave_0 added [ 62.094282][ T4668] team0: Port device team_slave_1 added [ 62.367183][ T4668] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.369465][ T4668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.376828][ T4668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.417773][ T4745] netlink: 8 bytes leftover after parsing attributes in process `syz.1.105'. [ 62.419477][ T4747] netlink: 24 bytes leftover after parsing attributes in process `syz.4.104'. [ 62.443139][ T4646] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 62.484914][ T4668] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.486907][ T4668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.501556][ T4668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.566411][ T4751] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 62.717058][ T4755] loop1: detected capacity change from 0 to 2048 [ 62.770499][ T4755] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 62.834421][ T4756] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 62.910597][ T4668] device hsr_slave_0 entered promiscuous mode [ 62.948831][ T4668] device hsr_slave_1 entered promiscuous mode [ 62.978627][ T4668] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.980972][ T4668] Cannot create hsr debugfs directory [ 63.234370][ T4313] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 63.237968][ T4313] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 63.244951][ T4313] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 63.253015][ T4313] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 63.299714][ T4313] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 63.308868][ T4313] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 63.353261][ T4770] netlink: 4 bytes leftover after parsing attributes in process `syz.4.111'. [ 63.448843][ T4308] Bluetooth: hci1: command 0x040f tx timeout [ 63.454340][ T4668] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 63.491282][ T4668] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 63.711940][ T4668] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 64.559575][ T4668] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 64.718721][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.720847][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.751605][ T4782] netlink: 'syz.1.114': attribute type 1 has an invalid length. [ 65.547984][ T4313] Bluetooth: hci2: command 0x0409 tx timeout [ 65.550339][ T4313] Bluetooth: hci1: command 0x0419 tx timeout [ 65.644702][ T4806] loop1: detected capacity change from 0 to 512 [ 65.655557][ T4808] binder: 4807:4808 tried to acquire reference to desc 0, got 1 instead [ 65.662866][ T4808] binder: tried to use weak ref as strong ref [ 65.668854][ T4808] binder: 4807:4808 got transaction with invalid handle, 0 [ 65.671600][ T4808] binder: 4808:4807 translate handle failed [ 65.673329][ T4808] binder: 4807:4808 transaction call to 4807:0 failed 15/29201/-22, size 112-24 line 3402 [ 65.677105][ T4806] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 65.682899][ T4806] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c099, mo2=0082] [ 65.685150][ T4806] System zones: 1-12 [ 65.686450][ T4362] binder: undelivered TRANSACTION_ERROR: 29201 [ 65.708261][ T4806] EXT4-fs (loop1): 1 truncate cleaned up [ 65.710088][ T4806] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 65.877465][ T4763] lo speed is unknown, defaulting to 1000 [ 65.904474][ T4306] EXT4-fs (loop1): unmounting filesystem. [ 65.992447][ C1] vcan0: j1939_tp_rxtimer: 0x00000000156170a8: rx timeout, send abort [ 66.030972][ C0] vcan0: j1939_tp_rxtimer: 0x000000004c3e0c3a: rx timeout, send abort [ 66.495387][ C1] vcan0: j1939_tp_rxtimer: 0x00000000156170a8: abort rx timeout. Force session deactivation [ 66.533339][ C0] vcan0: j1939_tp_rxtimer: 0x000000004c3e0c3a: abort rx timeout. Force session deactivation [ 66.863181][ T4826] device netdevsim0 entered promiscuous mode [ 66.866977][ T4826] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 67.122882][ T4645] device hsr_slave_0 left promiscuous mode [ 67.224677][ T4645] device hsr_slave_1 left promiscuous mode [ 67.449206][ T4645] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.452180][ T4645] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.532203][ T4645] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.608756][ T4308] Bluetooth: hci2: command 0x041b tx timeout [ 67.619901][ T4645] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.759494][ T4645] device bridge_slave_1 left promiscuous mode [ 67.762573][ T4645] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.916100][ T4645] device bridge_slave_0 left promiscuous mode [ 67.918544][ T4645] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.074420][ T27] audit: type=1326 audit(68.050:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4860 comm="syz.2.126" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb595aba8 code=0x7fc00000 [ 68.086211][ T27] audit: type=1326 audit(68.050:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4860 comm="syz.2.126" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffb595aba8 code=0x7fc00000 [ 68.093513][ T4645] device veth1_macvtap left promiscuous mode [ 68.095471][ T4645] device veth0_macvtap left promiscuous mode [ 68.097174][ T4645] device veth1_vlan left promiscuous mode [ 68.105039][ T4645] device veth0_vlan left promiscuous mode [ 68.111453][ T27] audit: type=1326 audit(68.060:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4860 comm="syz.2.126" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb595aba8 code=0x7fc00000 [ 69.688788][ T4308] Bluetooth: hci2: command 0x040f tx timeout [ 70.084206][ T113] cfg80211: failed to load regulatory.db [ 70.274577][ T4890] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 71.788903][ T4313] Bluetooth: hci2: command 0x0419 tx timeout [ 72.029945][ T4645] team0 (unregistering): Port device team_slave_1 removed [ 72.223128][ T4645] team0 (unregistering): Port device team_slave_0 removed [ 72.389370][ T4645] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.600122][ T4645] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 75.105641][ T4645] bond0 (unregistering): Released all slaves [ 75.398786][ T4668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.442468][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.446506][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.481812][ T4668] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.522234][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.529267][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.535649][ T4404] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.537709][ T4404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.546017][ T4909] loop1: detected capacity change from 0 to 2048 [ 75.589555][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.593016][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.596024][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.599411][ T4404] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.601507][ T4404] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.604240][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.607259][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.610560][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.613680][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.616445][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.621205][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.624182][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.626845][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.634748][ T4909] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 75.640576][ T4763] chnl_net:caif_netlink_parms(): no params data found [ 75.697853][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.612462][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.616764][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.652417][ T4668] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.730210][ T4763] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.732190][ T4763] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.742077][ T4763] device bridge_slave_0 entered promiscuous mode [ 76.749520][ T4763] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.751855][ T4763] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.754840][ T4763] device bridge_slave_1 entered promiscuous mode [ 76.772599][ T4763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.778003][ T4763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.829783][ T4763] team0: Port device team_slave_0 added [ 76.834083][ T4763] team0: Port device team_slave_1 added [ 76.899408][ T4763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.901757][ T4763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.914639][ T4763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.930195][ T4763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.934768][ T4763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.947375][ T4763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.030849][ T4763] device hsr_slave_0 entered promiscuous mode [ 77.069245][ T4763] device hsr_slave_1 entered promiscuous mode [ 77.104150][ T4763] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.106388][ T4763] Cannot create hsr debugfs directory [ 77.187693][ T4794] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.190082][ T4794] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.212296][ T4668] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.532180][ T4645] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.553551][ T4763] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 77.799850][ T4957] netlink: 12 bytes leftover after parsing attributes in process `syz.2.143'. [ 78.486691][ T4645] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.520755][ T4952] netlink: 'syz.1.145': attribute type 1 has an invalid length. [ 78.558699][ T4952] 8021q: adding VLAN 0 to HW filter on device bond1 [ 78.576596][ T4763] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 78.630445][ T4763] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 78.633051][ T4963] xt_hashlimit: max too large, truncated to 1048576 [ 78.712936][ T4955] bond1: (slave gretap1): making interface the new active one [ 78.717725][ T4955] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 78.784307][ T4645] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.812682][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 78.816734][ T4763] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 78.923488][ T4645] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.965313][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 78.968200][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 79.132148][ T4668] device veth0_vlan entered promiscuous mode [ 79.151199][ T4668] device veth1_vlan entered promiscuous mode [ 79.164149][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 79.170102][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 79.175165][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 79.182832][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 79.186280][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 79.306228][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 79.314447][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 79.317650][ T4996] loop1: detected capacity change from 0 to 512 [ 79.320215][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 79.344736][ T4763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.362812][ T4668] device veth0_macvtap entered promiscuous mode [ 79.399736][ T4668] device veth1_macvtap entered promiscuous mode [ 79.439088][ T4646] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 79.442003][ T4646] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 79.448911][ T4646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.459995][ T4646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.505955][ T4763] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.654261][ T4645] batman_adv: batadv0: Removing interface: ip6gretap1 [ 79.703257][ T4668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.706283][ T4668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.723683][ T4668] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.732040][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.735800][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.840072][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.843039][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.869168][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.871305][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.901328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.904126][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.906670][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.908688][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.944560][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.958200][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.968270][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.981554][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.991097][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.012471][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.017464][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.025714][ T4668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.029402][ T5021] loop2: detected capacity change from 0 to 8 [ 80.031946][ T5021] squashfs: Unknown parameter '/dev/fuse' [ 80.032421][ T4668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.046210][ T4668] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.073501][ T4905] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 80.257328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.260262][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 80.263081][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 80.268142][ T4668] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.279359][ T4668] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.281870][ T4668] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.572498][ T4668] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.207669][ T4794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.212390][ T4794] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.223888][ T4763] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.237312][ T4763] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.242821][ T5032] device gtp0 entered promiscuous mode [ 81.261549][ T4794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.264334][ T4794] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.302804][ T5038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.305529][ T5038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.322082][ T5038] loop4: detected capacity change from 0 to 256 [ 81.350428][ T5038] exfat: Deprecated parameter 'utf8' [ 81.352137][ T5038] exfat: Bad value for 'dmask' [ 81.590725][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.593144][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.597129][ T4794] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 81.803648][ T4763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.812056][ T4794] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.815028][ T4794] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.820165][ T4794] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.823658][ T4794] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.833820][ T4794] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 82.131526][ T5067] loop5: detected capacity change from 0 to 1024 [ 83.074553][ T5073] fuse: Bad value for 'fd' [ 84.507712][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.519479][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.619495][ T5093] netlink: 20 bytes leftover after parsing attributes in process `syz.4.172'. [ 85.722058][ T4645] device hsr_slave_0 left promiscuous mode [ 85.778823][ T4645] device hsr_slave_1 left promiscuous mode [ 85.860113][ T4645] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.862378][ T4645] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.865037][ T4645] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.872825][ T4645] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.038813][ T4645] device veth1_macvtap left promiscuous mode [ 86.040595][ T4645] device veth0_macvtap left promiscuous mode [ 86.042370][ T4645] device veth1_vlan left promiscuous mode [ 86.045348][ T4645] device veth0_vlan left promiscuous mode [ 86.276516][ T5096] dccp_close: ABORT with 32 bytes unread [ 89.843130][ T5145] binder: 5144:5145 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 89.846994][ T5145] binder: 5145 RLIMIT_NICE not set [ 89.895602][ T5147] binder: 5144:5147 tried to acquire reference to desc 0, got 1 instead [ 89.899302][ T5145] binder: 5145 RLIMIT_NICE not set [ 89.901053][ T5145] binder: send failed reply for transaction 20 to 5144:5147 [ 89.914325][ T5145] binder: 5144:5145 ioctl c0306201 20000280 returned -14 [ 89.919089][ T4369] binder: undelivered TRANSACTION_COMPLETE [ 89.920778][ T4369] binder: undelivered TRANSACTION_ERROR: 29201 [ 90.878199][ T4645] team0 (unregistering): Port device team_slave_1 removed [ 91.344520][ T4645] team0 (unregistering): Port device team_slave_0 removed [ 92.180845][ T4645] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.989495][ T4645] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.425214][ T4645] bond0 (unregistering): Released all slaves [ 95.578760][ T5094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 95.582631][ T5094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 95.585590][ T5094] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 95.588124][ T5094] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 95.607565][ T5155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.187'. [ 95.633252][ T5155] netlink: 28 bytes leftover after parsing attributes in process `syz.1.187'. [ 95.638198][ T5155] device geneve2 entered promiscuous mode [ 95.652709][ T5172] netlink: 'syz.5.192': attribute type 4 has an invalid length. [ 95.685667][ T4763] device veth0_vlan entered promiscuous mode [ 95.701220][ T4763] device veth1_vlan entered promiscuous mode [ 95.779966][ T4794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 95.782941][ T4794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 95.798695][ T27] audit: type=1326 audit(95.770:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5180 comm="syz.1.195" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f35aba8 code=0x0 [ 95.805145][ T4763] device veth0_macvtap entered promiscuous mode [ 95.826058][ T4763] device veth1_macvtap entered promiscuous mode [ 95.887660][ T4763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.904236][ T4763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.914805][ T4763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.917070][ T4794] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 95.920400][ T4794] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 95.923144][ T4794] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 95.930367][ T4794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 95.942913][ T4763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.959305][ T4763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.966660][ T4763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.976569][ T5094] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 95.989255][ T5094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 96.004374][ T4763] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.006866][ T4763] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.019764][ T4763] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.022134][ T4763] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.054410][ T5196] loop4: detected capacity change from 0 to 512 [ 96.059401][ T5193] binder: 5192:5193 tried to acquire reference to desc 0, got 1 instead [ 96.071295][ T5196] ext4: Unknown parameter 'smackfsfloor' [ 96.076192][ T5193] binder: 5192:5193 BC_FREE_BUFFER u0000000020ffd000 matched unreturned or currently freeing buffer [ 96.113698][ T24] binder: undelivered TRANSACTION_COMPLETE [ 96.190315][ T4794] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.190976][ T24] binder: undelivered transaction 25, process died. [ 96.192686][ T4794] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.213990][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 96.235509][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.237851][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.260132][ T4794] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 96.808596][ C1] vcan0: j1939_tp_rxtimer: 0x00000000e0b788f4: rx timeout, send abort [ 97.290449][ T5214] tipc: Started in network mode [ 97.295230][ T5214] tipc: Node identity 4, cluster identity 4711 [ 97.310901][ C1] vcan0: j1939_tp_rxtimer: 0x00000000e0b788f4: abort rx timeout. Force session deactivation [ 97.313563][ T5214] tipc: Node number set to 4 [ 97.331335][ T5209] lo speed is unknown, defaulting to 1000 [ 97.652820][ T5234] binder: 5233:5234 tried to acquire reference to desc 0, got 1 instead [ 97.681583][ T5234] binder: 5233:5234 got new transaction with bad transaction stack, transaction 30 has target 5233:0 [ 97.684857][ T5234] binder: 5233:5234 transaction call to 5233:0 failed 31/29201/-71, size 0-0 line 3114 [ 97.715584][ T4361] binder: release 5233:5234 transaction 30 out, still active [ 97.717820][ T4361] binder: undelivered TRANSACTION_COMPLETE [ 97.719982][ T4361] binder: undelivered TRANSACTION_ERROR: 29201 [ 97.769540][ T4361] binder: send failed reply for transaction 30, target dead [ 97.806416][ T5239] netlink: 'syz.4.212': attribute type 10 has an invalid length. [ 97.813930][ T5237] netlink: 'syz.5.213': attribute type 11 has an invalid length. [ 98.712162][ T5239] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 98.749783][ T4646] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 98.753206][ T5253] netlink: 8 bytes leftover after parsing attributes in process `syz.6.216'. [ 98.852342][ T5257] netlink: 'syz.2.217': attribute type 1 has an invalid length. [ 98.947876][ T5257] 8021q: adding VLAN 0 to HW filter on device bond2 [ 99.044626][ T5263] bond2: (slave ip6erspan0): making interface the new active one [ 99.086607][ T5263] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 99.103283][ T1590] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 100.434267][ T5257] device gretap1 entered promiscuous mode [ 100.660661][ T5294] loop6: detected capacity change from 0 to 128 [ 100.744815][ T5297] tipc: Enabled bearer , priority 10 [ 100.912867][ T5294] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 100.937600][ T5297] loop4: detected capacity change from 0 to 16 [ 102.183897][ T5297] erofs: (device loop4): erofs_superblock_csum_verify: invalid checksum 0x80a9593b, 0x7bbbea8c expected [ 102.262092][ T5297] tipc: Enabled bearer , priority 10 [ 102.287361][ T4907] udevd[4907]: incorrect erofs checksum on /dev/loop4 [ 103.959589][ T4763] EXT4-fs (loop6): unmounting filesystem. [ 107.415721][ T5362] netlink: 'syz.2.239': attribute type 1 has an invalid length. [ 107.471317][ T5362] 8021q: adding VLAN 0 to HW filter on device bond3 [ 107.546486][ T5367] loop5: detected capacity change from 0 to 128 [ 107.626457][ T5362] bond3: (slave gretap2): making interface the new active one [ 107.633866][ T5362] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 107.640374][ T1590] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 109.042376][ T5399] netlink: 24 bytes leftover after parsing attributes in process `syz.5.246'. [ 113.127604][ T5442] tipc: Started in network mode [ 113.129712][ T5442] tipc: Node identity 7f000001, cluster identity 4711 [ 113.131750][ T5442] tipc: Enabling of bearer rejected, failed to enable media [ 114.030972][ T5442] loop5: detected capacity change from 0 to 16 [ 114.078946][ T5442] erofs: (device loop5): erofs_superblock_csum_verify: invalid checksum 0x80a9593b, 0x7bbbea8c expected [ 114.113248][ T4905] udevd[4905]: incorrect erofs checksum on /dev/loop5 [ 114.140450][ T5442] tipc: Enabling of bearer rejected, failed to enable media [ 114.274873][ T5419] loop1: detected capacity change from 0 to 32768 [ 114.312905][ T5419] (syz.1.264,5419,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 114.329467][ T5419] (syz.1.264,5419,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 114.394319][ T5419] (syz.1.264,5419,1):ocfs2_initialize_super:2286 ERROR: status = -12 [ 114.407247][ T5419] (syz.1.264,5419,1):ocfs2_fill_super:1176 ERROR: status = -12 [ 114.632476][ T5464] netlink: 'syz.1.262': attribute type 10 has an invalid length. [ 114.779591][ T5464] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 114.804715][ T55] bond0: (slave bond_slave_0): interface is now down [ 114.806866][ T55] bond0: (slave bond_slave_1): interface is now down [ 114.812207][ T5470] netlink: 'syz.6.265': attribute type 10 has an invalid length. [ 114.839691][ T260] bond0: (slave bond_slave_0): interface is now down [ 114.841488][ T260] bond0: (slave bond_slave_1): interface is now down [ 114.852720][ T5470] device syz_tun entered promiscuous mode [ 114.889544][ T55] bond0: (slave bond_slave_0): interface is now down [ 114.891500][ T55] bond0: (slave bond_slave_1): interface is now down [ 114.898932][ T5470] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 114.910179][ T5252] bond0: (slave bond_slave_0): interface is now down [ 114.912538][ T5252] bond0: (slave bond_slave_1): interface is now down [ 114.914414][ T5252] bond0: (slave syz_tun): interface is now down [ 114.942090][ T5252] bond0: now running without any active interface! [ 115.067646][ T5477] loop1: detected capacity change from 0 to 2048 [ 115.104214][ T5477] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 116.437390][ T5501] tipc: Started in network mode [ 116.442981][ T5501] tipc: Node identity 7f000001, cluster identity 4711 [ 116.478095][ T5501] tipc: Enabled bearer , priority 10 [ 117.581892][ T5501] loop1: detected capacity change from 0 to 16 [ 117.638240][ T5501] erofs: (device loop1): erofs_superblock_csum_verify: invalid checksum 0x80a9593b, 0x7bbbea8c expected [ 117.702862][ T5501] tipc: Enabling of bearer rejected, failed to enable media [ 117.775735][ T4905] udevd[4905]: incorrect erofs checksum on /dev/loop1 [ 117.925930][ T5506] loop5: detected capacity change from 0 to 262144 [ 117.935412][ T4344] tipc: Node number set to 2130706433 [ 117.940396][ T5506] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop5 scanned by syz.5.274 (5506) [ 117.978508][ T5506] BTRFS info (device loop5): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 117.981514][ T5506] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 117.984553][ T5506] BTRFS info (device loop5): using free space tree [ 118.009317][ T5523] binder: 5521:5523 tried to acquire reference to desc 0, got 1 instead [ 118.012014][ T5523] binder: 5521:5523 got transaction with invalid data ptr [ 118.031871][ T5523] binder: 5521:5523 transaction call to 5521:0 failed 36/29201/-14, size 0-24 line 3342 [ 118.036071][ T4384] binder: release 5521:5523 transaction 37 out, still active [ 118.038326][ T4384] binder: undelivered TRANSACTION_COMPLETE [ 118.091680][ T4344] binder: send failed reply for transaction 37, target dead [ 118.935838][ T5506] BTRFS info (device loop5): enabling ssd optimizations [ 119.255036][ T5560] loop1: detected capacity change from 0 to 256 [ 119.275030][ T5560] exfat: Bad value for 'uid' [ 119.381905][ T5567] netlink: 24 bytes leftover after parsing attributes in process `syz.6.293'. [ 119.432784][ T4668] BTRFS info (device loop5): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 119.469640][ T4905] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 122.690996][ T5605] loop6: detected capacity change from 0 to 64 [ 126.128107][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.130085][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.214410][ T4907] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 10 /dev/loop5 scanned by udevd (4907) [ 129.411659][ T5678] binder: 5676:5678 tried to acquire reference to desc 0, got 1 instead [ 129.437542][ T5678] binder: 5676:5678 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 129.481941][ T5678] binder: 5678 RLIMIT_NICE not set [ 129.483458][ T5678] binder: 5678 RLIMIT_NICE not set [ 129.682296][ T5688] binder: 5676:5688 got transaction with invalid offsets ptr [ 129.684546][ T5688] binder: 5676:5688 transaction call to 5676:0 failed 43/29201/-14, size 0-48 line 3278 [ 129.736125][ T5575] binder: release 5676:5678 transaction 42 out, still active [ 129.738342][ T5575] binder: undelivered TRANSACTION_COMPLETE [ 129.745406][ T5575] binder: undelivered TRANSACTION_ERROR: 29201 [ 130.100526][ T5692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.313'. [ 130.243148][ T5575] binder: release 5676:5678 transaction 42 in, still active [ 130.245447][ T5575] binder: send failed reply for transaction 42, target dead [ 132.196473][ T5712] device bridge0 entered promiscuous mode [ 132.212977][ T5712] batman_adv: batadv0: Adding interface: macsec1 [ 132.214931][ T5712] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.282001][ T5712] batman_adv: batadv0: Interface activated: macsec1 [ 132.742815][ T5735] syz.1.323 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 132.774278][ T5735] loop1: detected capacity change from 0 to 1024 [ 134.171029][ T5755] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 134.178363][ T5755] CIFS mount error: No usable UNC path provided in device string! [ 134.178363][ T5755] [ 134.181483][ T5755] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 135.623632][ T5773] netlink: 'syz.2.333': attribute type 11 has an invalid length. [ 135.682308][ T5774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.329'. [ 140.729987][ T27] audit: type=1326 audit(140.710:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5824 comm="syz.5.346" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c95aba8 code=0x7fc00000 [ 140.784521][ T27] audit: type=1326 audit(140.760:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5824 comm="syz.5.346" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffff9c95268c code=0x7fc00000 [ 140.895046][ T5835] netlink: 4 bytes leftover after parsing attributes in process `syz.1.348'. [ 140.947996][ T5837] loop4: detected capacity change from 0 to 8 [ 140.997965][ T5837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.012527][ T5837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.036426][ T5837] SQUASHFS error: Unable to read directory block [629:2b] [ 142.014343][ T27] audit: type=1326 audit(141.990:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5824 comm="syz.5.346" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff9d8ae81c code=0x7fc00000 [ 142.129055][ T5852] loop1: detected capacity change from 0 to 164 [ 142.247703][ T5852] loop1: detected capacity change from 0 to 4096 [ 142.295211][ T5852] NILFS (loop1): unrecognized mount option "barƒier" [ 143.371642][ T5865] binder: 5864:5865 tried to acquire reference to desc 0, got 1 instead [ 143.379433][ T5865] binder: 5864:5865 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 143.402980][ T5865] binder: 5865 RLIMIT_NICE not set [ 143.404462][ T5865] binder: 5865 RLIMIT_NICE not set [ 143.406187][ T5865] binder: release 5864:5865 transaction 48 in, still active [ 143.408209][ T5865] binder: send failed reply for transaction 48 to 5864:5865 [ 143.427251][ T22] binder: undelivered TRANSACTION_COMPLETE [ 143.429015][ T22] binder: undelivered TRANSACTION_ERROR: 29189 [ 145.390866][ T5895] binder: 5894:5895 tried to acquire reference to desc 0, got 1 instead [ 145.412844][ T5895] binder: 5894:5895 ioctl c0306201 20000900 returned -14 [ 145.463088][ T5581] binder: undelivered transaction 53, process died. [ 146.562754][ T5924] loop1: detected capacity change from 0 to 256 [ 146.565161][ T5924] exfat: Bad value for 'uid' [ 147.481269][ T5938] netlink: 'syz.2.374': attribute type 10 has an invalid length. [ 147.504732][ T5906] loop1: detected capacity change from 0 to 4096 [ 147.514504][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.553967][ T5938] device bridge_slave_1 left promiscuous mode [ 147.558209][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.565838][ T5906] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 147.609869][ T4308] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 147.612441][ T4308] Bluetooth: hci4: Injecting HCI hardware error event [ 147.615666][ T4313] Bluetooth: hci4: hardware error 0x00 [ 147.658110][ T5938] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 147.674257][ T5906] ntfs: (device loop1): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 147.677261][ T5906] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing. [ 147.685812][ T5906] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 147.699986][ T5906] ntfs: (device loop1): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 147.736338][ T5943] netlink: 4 bytes leftover after parsing attributes in process `syz.5.376'. [ 147.763760][ T5906] ntfs: volume version 3.1. [ 147.767458][ T5906] ntfs: (device loop1): load_and_init_quota(): Failed to find inode number for $Quota. [ 147.770701][ T5906] ntfs: (device loop1): load_system_files(): Failed to load $Quota. Will not be able to remount read-write. Run chkdsk. [ 148.464240][ T5906] ntfs: (device loop1): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set macgaelic. You might want to try to use the mount option nls=utf8. [ 148.503817][ T5906] ntfs: (device loop1): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 148.674984][ T5957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.677822][ T5957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.681975][ T5957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.798041][ T5957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.450354][ T5957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.452862][ T5957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.055872][ T4313] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 151.304924][ T5978] 9pnet: p9_errstr2errno: server reported unknown error 184467440737 [ 152.328980][ T5993] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.086496][ T5993] device batadv_slave_0 entered promiscuous mode [ 153.369748][ T6019] binder: 6017:6019 tried to acquire reference to desc 0, got 1 instead [ 153.375347][ T6019] binder: cannot allocate buffer [ 153.375380][ T6019] binder: 6017:6019 transaction async to 6017:0 failed 58/29201/-22, size 0-24 line 3239 [ 153.381287][ T5816] binder: undelivered TRANSACTION_ERROR: 29201 [ 153.495460][ T6027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.498055][ T6027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.554558][ T6034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.557176][ T6034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.573065][ T6032] loop6: detected capacity change from 0 to 512 [ 153.583034][ T27] audit: type=1326 audit(409.550:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6024 comm="syz.1.398" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f35aba8 code=0x7ffc0000 [ 153.599113][ T27] audit: type=1326 audit(409.570:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6024 comm="syz.1.398" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=15 compat=0 ip=0xffff9f35aba8 code=0x7ffc0000 [ 153.613137][ T6036] capability: warning: `syz.2.402' uses deprecated v2 capabilities in a way that may be insecure [ 153.616314][ T27] audit: type=1326 audit(409.570:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6024 comm="syz.1.398" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f35aba8 code=0x7ffc0000 [ 153.616463][ T6032] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 153.633157][ T27] audit: type=1326 audit(409.570:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6024 comm="syz.1.398" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f35aba8 code=0x7ffc0000 [ 153.660030][ T6032] EXT4-fs (loop6): orphan cleanup on readonly fs [ 153.663329][ T6032] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:511: comm syz.6.401: Block bitmap for bg 0 marked uninitialized [ 153.673864][ T6032] EXT4-fs (loop6): Remounting filesystem read-only [ 153.675817][ T6032] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 153.683683][ T6032] EXT4-fs (loop6): Remounting filesystem read-only [ 153.685631][ T6032] EXT4-fs (loop6): 1 orphan inode deleted [ 153.687162][ T6032] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 153.713557][ T6032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.727924][ T6032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.904600][ T6050] netlink: 'syz.2.405': attribute type 5 has an invalid length. [ 154.912373][ T6066] binder: 6064:6066 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 154.944802][ T4763] EXT4-fs (loop6): unmounting filesystem. [ 155.083632][ T6074] netlink: 4 bytes leftover after parsing attributes in process `syz.1.411'. [ 155.150100][ T6077] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 155.253721][ T6085] batman_adv: batadv0: Adding interface: dummy0 [ 155.263764][ T6085] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.292631][ T6085] batman_adv: batadv0: Interface activated: dummy0 [ 155.320960][ T6085] batadv0: mtu less than device minimum [ 155.329188][ T6085] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 155.335325][ T6085] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 155.341427][ T6085] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 155.347350][ T6085] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 155.353357][ T6085] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 155.359219][ T6085] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 155.365210][ T6085] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 155.371124][ T6085] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 155.377038][ T6085] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 157.453872][ T5710] bond0: (slave syz_tun): Releasing backup interface [ 158.745517][ T4313] Bluetooth: hci0: command 0x0406 tx timeout [ 158.747504][ T4308] Bluetooth: hci3: command 0x0406 tx timeout [ 159.428185][ T9] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.431957][ T4308] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 159.459553][ T4308] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 159.463182][ T4308] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 159.466676][ T4308] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 159.531810][ T4308] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 159.534358][ T4313] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 160.672124][ T9] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.683584][ T6165] netlink: 'syz.4.434': attribute type 4 has an invalid length. [ 161.359016][ T5579] lo speed is unknown, defaulting to 1000 [ 161.487049][ T9] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.491549][ T6162] netlink: 'syz.4.434': attribute type 4 has an invalid length. [ 161.497220][ T6170] netlink: 24 bytes leftover after parsing attributes in process `syz.5.437'. [ 161.511086][ T5579] lo speed is unknown, defaulting to 1000 [ 161.618687][ T4313] Bluetooth: hci2: command 0x0409 tx timeout [ 161.699063][ T6180] loop5: detected capacity change from 0 to 256 [ 161.722654][ T6180] FAT-fs (loop5): Directory bread(block 64) failed [ 161.724627][ T6180] FAT-fs (loop5): Directory bread(block 65) failed [ 161.726633][ T6180] FAT-fs (loop5): Directory bread(block 66) failed [ 161.728527][ T6180] FAT-fs (loop5): Directory bread(block 67) failed [ 161.730353][ T6180] FAT-fs (loop5): Directory bread(block 68) failed [ 161.732392][ T6180] FAT-fs (loop5): Directory bread(block 69) failed [ 161.734334][ T6180] FAT-fs (loop5): Directory bread(block 70) failed [ 161.736173][ T6180] FAT-fs (loop5): Directory bread(block 71) failed [ 161.737978][ T6180] FAT-fs (loop5): Directory bread(block 72) failed [ 161.739998][ T6180] FAT-fs (loop5): Directory bread(block 73) failed [ 161.844475][ T9] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.320205][ T6144] lo speed is unknown, defaulting to 1000 [ 163.936226][ T4313] Bluetooth: hci2: command 0x041b tx timeout [ 165.289602][ T6211] net_ratelimit: 10 callbacks suppressed [ 165.289623][ T6211] batman_adv: batadv0: Local translation table size (148) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:52:c4:42:77:fb [ 165.296091][ T6211] batman_adv: batadv0: Local translation table size (148) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:52:c4:42:77:fb [ 165.300310][ T6211] batman_adv: batadv0: Local translation table size (148) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:52:c4:42:77:fb [ 165.304492][ T6211] batman_adv: batadv0: Local translation table size (148) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:52:c4:42:77:fb [ 165.308665][ T6211] batman_adv: batadv0: Local translation table size (148) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:52:c4:42:77:fb [ 165.312752][ T6211] batman_adv: batadv0: Local translation table size (148) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:52:c4:42:77:fb [ 165.316821][ T6211] batman_adv: batadv0: Local translation table size (148) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:52:c4:42:77:fb [ 165.321003][ T6211] batman_adv: batadv0: Local translation table size (148) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:52:c4:42:77:fb [ 165.325121][ T6211] batman_adv: batadv0: Local translation table size (148) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:52:c4:42:77:fb [ 165.329184][ T6211] batman_adv: batadv0: Local translation table size (148) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:52:c4:42:77:fb [ 166.008868][ T4313] Bluetooth: hci2: command 0x040f tx timeout [ 168.088929][ T47] Bluetooth: hci2: command 0x0419 tx timeout [ 168.264248][ T6144] chnl_net:caif_netlink_parms(): no params data found [ 168.501909][ T6227] netlink: 165 bytes leftover after parsing attributes in process `syz.5.446'. [ 169.417223][ T27] audit: type=1326 audit(425.380:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6266 comm="syz.4.455" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a35aba8 code=0x7fc00000 [ 169.515198][ T27] audit: type=1326 audit(425.480:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6266 comm="syz.4.455" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffff9a35268c code=0x7fc00000 [ 169.560329][ T6272] bridge0: port 2(vxlan0) entered blocking state [ 169.566664][ T6272] bridge0: port 2(vxlan0) entered disabled state [ 169.581843][ T6272] device vxlan0 entered promiscuous mode [ 169.648279][ T6144] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.656934][ T6144] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.667352][ T6144] device bridge_slave_0 entered promiscuous mode [ 169.687382][ T6144] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.705651][ T6144] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.720792][ T6144] device bridge_slave_1 entered promiscuous mode [ 169.782483][ T6276] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 169.836601][ T6280] netlink: 12 bytes leftover after parsing attributes in process `syz.2.457'. [ 169.901758][ T6287] loop5: detected capacity change from 0 to 8 [ 169.953016][ T6287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.963172][ T6287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.966196][ T6144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.994500][ T6287] SQUASHFS error: Unable to read directory block [629:2b] [ 170.024768][ T6144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.115741][ T6144] team0: Port device team_slave_0 added [ 170.124954][ T6144] team0: Port device team_slave_1 added [ 170.228294][ T6144] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.235358][ T6144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.245283][ T27] audit: type=1326 audit(426.220:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6266 comm="syz.4.455" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff9b17481c code=0x7fc00000 [ 170.278573][ T6144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.289870][ T6144] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.291778][ T6144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.328602][ T6144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.841254][ T6144] device hsr_slave_0 entered promiscuous mode [ 171.858853][ T6144] device hsr_slave_1 entered promiscuous mode [ 171.899138][ T6144] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 171.901372][ T6144] Cannot create hsr debugfs directory [ 172.162978][ T6316] netlink: 'syz.5.466': attribute type 10 has an invalid length. [ 172.171124][ T6316] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.191830][ T6316] device bridge_slave_1 left promiscuous mode [ 172.193686][ T6316] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.234594][ T6316] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 172.244167][ T6320] tipc: Enabling of bearer rejected, already enabled [ 172.312824][ T6327] tipc: Enabled bearer , priority 0 [ 172.594138][ T27] audit: type=1326 audit(428.560:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6335 comm="syz.1.478" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f35aba8 code=0x7fc00000 [ 173.470286][ T27] audit: type=1326 audit(429.440:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6335 comm="syz.1.478" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffff9f35268c code=0x7fc00000 [ 173.528849][ T4313] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 173.531448][ T4313] Bluetooth: hci1: Injecting HCI hardware error event [ 173.535043][ T4313] Bluetooth: hci1: hardware error 0x00 [ 173.571970][ T27] audit: type=1326 audit(429.540:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6335 comm="syz.1.478" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffa00c881c code=0x7fc00000 [ 173.959647][ T6353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.472'. [ 174.765593][ T6362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.768097][ T6362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.778118][ T9] device hsr_slave_0 left promiscuous mode [ 174.808927][ T9] device hsr_slave_1 left promiscuous mode [ 174.868703][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.871360][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.874180][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.877570][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.891510][ T9] device bridge_slave_1 left promiscuous mode [ 174.895672][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.940100][ T9] device bridge_slave_0 left promiscuous mode [ 174.941924][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.588770][ T9] device veth1_macvtap left promiscuous mode [ 175.590730][ T9] device veth0_macvtap left promiscuous mode [ 175.592738][ T9] device veth1_vlan left promiscuous mode [ 175.594603][ T9] device veth0_vlan left promiscuous mode [ 175.929061][ T4313] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 177.463468][ T9] team0 (unregistering): Port device team_slave_1 removed [ 177.663507][ T9] team0 (unregistering): Port device team_slave_0 removed [ 177.841234][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.070466][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.514516][ T9] bond0 (unregistering): Released all slaves [ 180.823799][ T6144] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 182.243165][ T6144] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 183.139634][ T6144] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 183.221338][ T6144] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 183.396861][ T6144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.406510][ T260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 183.413659][ T260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 183.422731][ T6144] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.428062][ T260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 183.436523][ T260] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 183.443693][ T260] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.445783][ T260] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.456671][ T260] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 183.466566][ T260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 183.470373][ T260] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 183.473407][ T260] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.475529][ T260] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.478179][ T260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 183.498338][ T260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 183.511744][ T260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 183.517776][ T260] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 183.526729][ T260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 183.548183][ T260] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 183.562711][ T6144] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 183.568598][ T6144] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 183.573142][ T260] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 183.575792][ T260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 183.596216][ T260] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 183.601054][ T260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 183.603890][ T260] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 183.624302][ T260] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 183.914075][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 183.916463][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 183.943073][ T6144] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.025225][ T6460] netlink: 8 bytes leftover after parsing attributes in process `syz.4.486'. [ 186.148839][ T6477] CIFS mount error: No usable UNC path provided in device string! [ 186.148839][ T6477] [ 186.151702][ T6477] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 186.804066][ T4795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 186.807232][ T4795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 186.829532][ T4795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 186.832277][ T4795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 186.845406][ T6144] device veth0_vlan entered promiscuous mode [ 186.849496][ T4795] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 186.852500][ T4795] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 186.867153][ T6144] device veth1_vlan entered promiscuous mode [ 186.906922][ T5252] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 186.910765][ T5252] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 186.919535][ T5252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 186.922328][ T5252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 186.934549][ T6144] device veth0_macvtap entered promiscuous mode [ 186.939366][ T6144] device veth1_macvtap entered promiscuous mode [ 186.961131][ T6144] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.963245][ T4795] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 186.983057][ T4795] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 186.985787][ T4795] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 186.991459][ T4795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 186.995593][ T6144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.999362][ T6144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.010309][ T6144] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.012544][ T5252] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 187.015407][ T5252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 187.031890][ T6144] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.034485][ T6144] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.036849][ T6144] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.039945][ T6144] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.117002][ T4404] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.119773][ T4404] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.127271][ T4795] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 187.147139][ T4404] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.150366][ T4404] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.155647][ T4795] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 187.419029][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.420757][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.119852][ T6553] netlink: 4 bytes leftover after parsing attributes in process `syz.2.508'. [ 194.668237][ T6575] netlink: 164 bytes leftover after parsing attributes in process `syz.4.513'. [ 195.953708][ T6563] netlink: 'syz.5.510': attribute type 4 has an invalid length. [ 195.955989][ T6564] netlink: 'syz.5.510': attribute type 4 has an invalid length. [ 196.128168][ T27] audit: type=1326 audit(452.090:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6577 comm="syz.7.514" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9575aba8 code=0x7fc00000 [ 196.948264][ T27] audit: type=1326 audit(452.880:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6577 comm="syz.7.514" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffff9575aba8 code=0x7fc00000 [ 198.485612][ T6634] netlink: 'syz.1.528': attribute type 4 has an invalid length. [ 198.582987][ T4313] Bluetooth: hci2: hardware error 0x09 [ 198.583143][ T6634] netlink: 'syz.1.528': attribute type 4 has an invalid length. [ 199.973211][ T6667] netlink: 12 bytes leftover after parsing attributes in process `syz.1.535'. [ 199.977943][ T6667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:0c) already exists on: macsec1 [ 200.008841][ T6667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.019599][ T6667] device vlan2 entered promiscuous mode [ 200.025772][ T6667] device bridge0 entered promiscuous mode [ 200.972370][ T4313] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 201.758584][ T27] audit: type=1326 audit(457.650:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6662 comm="syz.5.534" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c95aba8 code=0x7fc00000 [ 201.764785][ T27] audit: type=1326 audit(457.650:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6662 comm="syz.5.534" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffff9c95aba8 code=0x7fc00000 [ 201.818106][ T27] audit: type=1326 audit(457.650:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6662 comm="syz.5.534" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c95aba8 code=0x7fc00000 [ 201.824353][ T27] audit: type=1326 audit(457.650:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6662 comm="syz.5.534" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c95aba8 code=0x7fc00000 [ 201.830389][ T27] audit: type=1326 audit(457.650:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6662 comm="syz.5.534" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c95aba8 code=0x7fc00000 [ 201.836484][ T27] audit: type=1326 audit(457.650:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6662 comm="syz.5.534" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c95aba8 code=0x7fc00000 [ 201.842653][ T27] audit: type=1326 audit(457.650:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6662 comm="syz.5.534" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c95aba8 code=0x7fc00000 [ 201.848877][ T27] audit: type=1326 audit(457.650:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6662 comm="syz.5.534" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c95aba8 code=0x7fc00000 [ 201.861586][ T27] audit: type=1326 audit(457.650:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6662 comm="syz.5.534" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c95aba8 code=0x7fc00000 [ 201.867790][ T27] audit: type=1326 audit(457.650:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6662 comm="syz.5.534" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c95aba8 code=0x7fc00000 [ 203.466345][ T6697] netlink: 'syz.2.542': attribute type 4 has an invalid length. [ 203.579854][ T6697] netlink: 'syz.2.542': attribute type 4 has an invalid length. [ 203.771454][ T6711] netlink: 16 bytes leftover after parsing attributes in process `syz.5.547'. [ 205.509563][ T6736] netlink: 'syz.2.553': attribute type 10 has an invalid length. [ 205.515457][ T6738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.518301][ T6736] device syz_tun entered promiscuous mode [ 205.577084][ T6738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.395734][ T6736] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 206.432429][ T6745] loop1: detected capacity change from 0 to 1024 [ 206.516850][ T6745] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 207.348003][ T6764] overlayfs: workdir and upperdir must reside under the same mount [ 207.752705][ T6773] netlink: 'syz.7.559': attribute type 4 has an invalid length. [ 207.803219][ T6781] netlink: 'syz.7.559': attribute type 4 has an invalid length. [ 208.799386][ T4306] EXT4-fs (loop1): unmounting filesystem. [ 210.636990][ T6808] netlink: 4 bytes leftover after parsing attributes in process `syz.7.567'. [ 211.703501][ T6826] overlayfs: failed to clone upperpath [ 212.844823][ T6842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.865522][ T6842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.981455][ T6850] loop5: detected capacity change from 0 to 1024 [ 213.974428][ T6850] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 214.057962][ T6870] netlink: 'syz.1.581': attribute type 4 has an invalid length. [ 215.272526][ T4668] EXT4-fs (loop5): unmounting filesystem. [ 215.448990][ T6893] Driver unsupported XDP return value 0 on prog (id 75) dev N/A, expect packet loss! [ 216.777710][ T6915] loop1: detected capacity change from 0 to 512 [ 216.843613][ T6915] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 216.903211][ T6915] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 216.906659][ T6915] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.589: invalid indirect mapped block 2683928664 (level 1) [ 216.952055][ T6915] EXT4-fs (loop1): Remounting filesystem read-only [ 217.022612][ T6915] EXT4-fs (loop1): 1 truncate cleaned up [ 217.024350][ T6915] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 218.255645][ T4306] EXT4-fs (loop1): unmounting filesystem. [ 218.771290][ T6936] device vlan0 entered promiscuous mode [ 219.165533][ T6954] netlink: 'syz.7.600': attribute type 10 has an invalid length. [ 221.060452][ T6954] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 221.401114][ T6980] overlayfs: workdir and upperdir must reside under the same mount [ 221.758714][ T6986] 8021q: adding VLAN 0 to HW filter on device bond1 [ 222.590155][ T6991] device macvlan2 entered promiscuous mode [ 222.593555][ T6991] device bond1 entered promiscuous mode [ 222.595525][ T6991] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 222.644417][ T6991] device bond1 left promiscuous mode [ 222.684240][ T6977] loop7: detected capacity change from 0 to 32768 [ 222.707997][ T6977] (syz.7.606,6977,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 222.765262][ T6977] (syz.7.606,6977,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 222.820876][ T7002] loop1: detected capacity change from 0 to 512 [ 223.678395][ T7002] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 224.229924][ T6977] JBD2: Ignoring recovery information on journal [ 224.472041][ T6977] JBD2: recovery failed [ 224.473418][ T6977] (syz.7.606,6977,0):ocfs2_journal_load:1134 ERROR: Failed to load journal! [ 224.499670][ T6977] (syz.7.606,6977,0):ocfs2_check_volume:2433 ERROR: ocfs2 journal load failed! -5 [ 224.518822][ T6977] (syz.7.606,6977,0):ocfs2_check_volume:2489 ERROR: status = -5 [ 224.535746][ T6977] (syz.7.606,6977,0):ocfs2_mount_volume:1821 ERROR: status = -5 [ 224.596854][ T6977] (syz.7.606,6977,0):ocfs2_fill_super:1176 ERROR: status = -5 [ 224.793773][ T7016] loop5: detected capacity change from 0 to 256 [ 224.796128][ T7016] exfat: Bad value for 'uid' [ 224.854312][ T6398] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 226.029706][ T4306] EXT4-fs (loop1): unmounting filesystem. [ 229.022873][ T7028] netlink: 'syz.4.614': attribute type 10 has an invalid length. [ 231.628952][ T7066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.648304][ T7066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.706551][ T7065] device vlan0 entered promiscuous mode [ 232.607277][ T7066] loop5: detected capacity change from 0 to 4096 [ 235.333079][ T7083] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 236.710940][ T7105] netlink: 8 bytes leftover after parsing attributes in process `syz.5.632'. [ 240.029161][ T7154] binder: 7152:7154 tried to acquire reference to desc 0, got 1 instead [ 240.052137][ T7154] binder: 7152:7154 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 240.055635][ T7154] binder: 7154 RLIMIT_NICE not set [ 240.066533][ T7154] binder: 7154 RLIMIT_NICE not set [ 240.523581][ T7163] loop7: detected capacity change from 0 to 16 [ 240.526114][ T7163] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 240.813030][ T7164] binder: 7152:7164 got reply transaction with no transaction stack [ 240.815392][ T7164] binder: 7152:7164 transaction reply to 0:0 failed 66/29201/-71, size 0-0 line 2955 [ 240.820471][ T5816] binder: release 7152:7154 transaction 65 out, still active [ 240.822802][ T5816] binder: undelivered TRANSACTION_COMPLETE [ 240.903232][ T5816] binder: release 7152:7154 transaction 65 in, still active [ 240.905328][ T5816] binder: send failed reply for transaction 65, target dead [ 240.907353][ T5816] binder: undelivered TRANSACTION_ERROR: 29201 [ 240.940941][ T7167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.648'. [ 242.392284][ T4313] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 242.395161][ T4313] Bluetooth: hci3: Injecting HCI hardware error event [ 242.399311][ T4313] Bluetooth: hci3: hardware error 0x00 [ 244.588913][ T4313] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 244.731387][ T7219] loop7: detected capacity change from 0 to 512 [ 246.130590][ T7219] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 246.368424][ T7219] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 246.555039][ T6144] EXT4-fs (loop7): unmounting filesystem. [ 246.672778][ T7235] loop7: detected capacity change from 0 to 256 [ 246.697873][ T7237] loop5: detected capacity change from 0 to 64 [ 246.698212][ T7235] exfat: Deprecated parameter 'namecase' [ 246.713153][ T7235] exfat: Deprecated parameter 'codepage' [ 246.714869][ T7235] exfat: Bad value for 'codepage' [ 246.850107][ T7244] loop7: detected capacity change from 0 to 1024 [ 246.852478][ T7244] EXT4-fs: Ignoring removed nobh option [ 246.895282][ T7244] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 246.931137][ T7250] binder: 7249:7250 tried to acquire reference to desc 0, got 1 instead [ 246.941452][ T7250] binder: 7249:7250 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 246.945084][ T7250] binder: 7250 RLIMIT_NICE not set [ 246.946483][ T7250] binder: 7250 RLIMIT_NICE not set [ 247.008152][ T7250] binder: 7250 RLIMIT_NICE not set [ 247.050745][ T7250] binder_alloc: 7249: binder_alloc_buf, no vma [ 247.054443][ T7250] binder: cannot allocate buffer: vma cleared, target dead or dying [ 247.054478][ T7250] binder: 7249:7250 transaction reply to 7249:7250 failed 72/29189/-3, size 0-0 line 3239 [ 247.059837][ T7244] EXT4-fs (loop7): can't mount with data_err=abort, fs mounted w/o journal [ 247.076416][ T7250] binder: send failed reply for transaction 71 to 7249:7250 [ 247.083467][ T4369] binder: undelivered TRANSACTION_COMPLETE [ 247.085181][ T4369] binder: undelivered TRANSACTION_ERROR: 29189 [ 247.096326][ T7252] loop5: detected capacity change from 0 to 64 [ 247.113246][ T7252] syz.5.662: attempt to access beyond end of device [ 247.113246][ T7252] loop5: rw=0, sector=65534, nr_sectors = 2 limit=64 [ 247.117325][ T7252] Buffer I/O error on dev loop5, logical block 32767, async page read [ 247.125160][ T6384] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 247.180727][ T5580] binder: undelivered TRANSACTION_ERROR: 29190 [ 247.199203][ T7244] loop7: detected capacity change from 0 to 1024 [ 247.214618][ T7244] EXT4-fs: Ignoring removed orlov option [ 247.277357][ T7244] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 247.337756][ T7261] netlink: 156 bytes leftover after parsing attributes in process `syz.1.669'. [ 247.516492][ T6144] EXT4-fs (loop7): unmounting filesystem. [ 248.840357][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.842181][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 248.849545][ T7283] loop7: detected capacity change from 0 to 4096 [ 249.012614][ T7291] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 250.181719][ T7305] loop5: detected capacity change from 0 to 512 [ 250.622677][ T7305] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 250.824531][ T7305] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 250.992054][ T7302] binder: 7301:7302 tried to acquire reference to desc 0, got 1 instead [ 251.174011][ T5578] binder: undelivered TRANSACTION_COMPLETE [ 251.209384][ T4668] EXT4-fs (loop5): unmounting filesystem. [ 251.258350][ T5579] binder: undelivered transaction 77, process died. [ 252.175570][ T7321] netlink: 'syz.2.680': attribute type 10 has an invalid length. [ 252.197671][ T7321] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 252.409926][ T7336] xt_recent: hitcount (768) is larger than allowed maximum (255) [ 253.089676][ T5575] af_packet: tpacket_rcv: packet too big, clamped from 94 to 4294967286. macoff=82 [ 253.172272][ T7343] lo speed is unknown, defaulting to 1000 [ 253.214305][ T7343] lo speed is unknown, defaulting to 1000 [ 253.216217][ T7343] lo speed is unknown, defaulting to 1000 [ 253.372394][ T4369] lo speed is unknown, defaulting to 1000 [ 253.380518][ T7343] infiniband sz1: set down [ 253.382200][ T7343] infiniband sz1: added lo [ 254.418694][ T7343] RDS/IB: sz1: added [ 254.420534][ T7343] smc: adding ib device sz1 with port count 1 [ 254.485094][ T7343] smc: ib device sz1 port 1 has pnetid [ 254.489979][ T4369] lo speed is unknown, defaulting to 1000 [ 254.532101][ T7343] lo speed is unknown, defaulting to 1000 [ 254.803053][ T7343] lo speed is unknown, defaulting to 1000 [ 254.907359][ T7382] Invalid option length (1047307) for dns_resolver key [ 255.666393][ T7343] lo speed is unknown, defaulting to 1000 [ 255.907146][ T7343] lo speed is unknown, defaulting to 1000 [ 256.043013][ T7407] netlink: 4 bytes leftover after parsing attributes in process `syz.7.700'. [ 256.152546][ T7411] netlink: 12 bytes leftover after parsing attributes in process `syz.2.701'. [ 256.180894][ T7343] lo speed is unknown, defaulting to 1000 [ 256.191027][ T7412] bridge2: port 1(ip6gretap1) entered blocking state [ 256.208554][ T7412] bridge2: port 1(ip6gretap1) entered disabled state [ 256.214026][ T7412] device ip6gretap1 entered promiscuous mode [ 256.273353][ T7411] device veth3 entered promiscuous mode [ 256.278790][ T7411] bridge2: port 2(veth3) entered blocking state [ 256.280925][ T7411] bridge2: port 2(veth3) entered disabled state [ 257.651593][ T7430] binder: 7429:7430 tried to acquire reference to desc 0, got 1 instead [ 257.672866][ T4384] binder: undelivered TRANSACTION_COMPLETE [ 257.726721][ T4384] binder: undelivered transaction 82, process died. [ 258.223238][ T7444] loop7: detected capacity change from 0 to 32768 [ 259.513032][ T7444] Dev loop7 SGI disklabel: csum bad, label corrupted [ 261.236758][ T7472] loop5: detected capacity change from 0 to 4096 [ 261.366117][ T7485] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 262.311640][ T27] kauditd_printk_skb: 39 callbacks suppressed [ 262.311652][ T27] audit: type=1326 audit(518.280:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7490 comm="syz.7.732" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9575aba8 code=0x7ffc0000 [ 262.330006][ T27] audit: type=1326 audit(518.300:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7490 comm="syz.7.732" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9575aba8 code=0x7ffc0000 [ 262.377401][ T27] audit: type=1326 audit(518.300:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7490 comm="syz.7.732" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=209 compat=0 ip=0xffff9575aba8 code=0x7ffc0000 [ 262.398572][ T27] audit: type=1326 audit(518.300:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7490 comm="syz.7.732" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9575aba8 code=0x7ffc0000 [ 262.428816][ T27] audit: type=1326 audit(518.300:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7490 comm="syz.7.732" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9575aba8 code=0x7ffc0000 [ 262.448873][ T27] audit: type=1326 audit(518.300:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7490 comm="syz.7.732" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=57 compat=0 ip=0xffff9575aba8 code=0x7ffc0000 [ 262.474217][ T27] audit: type=1326 audit(518.300:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7490 comm="syz.7.732" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9575aba8 code=0x7ffc0000 [ 262.507115][ T27] audit: type=1326 audit(518.320:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7490 comm="syz.7.732" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9575aba8 code=0x7ffc0000 [ 262.534842][ T27] audit: type=1326 audit(518.320:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7490 comm="syz.7.732" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff9575aba8 code=0x7ffc0000 [ 262.557361][ T7515] netlink: 4 bytes leftover after parsing attributes in process `syz.7.725'. [ 262.560040][ T27] audit: type=1326 audit(518.320:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7490 comm="syz.7.732" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9575aba8 code=0x7ffc0000 [ 262.625269][ T7515] netlink: 4 bytes leftover after parsing attributes in process `syz.7.725'. [ 266.070238][ T7554] loop5: detected capacity change from 0 to 64 [ 266.093367][ T7554] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing [ 266.103506][ T7554] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop5 [ 266.156084][ T7554] netlink: 'syz.5.737': attribute type 2 has an invalid length. [ 268.610636][ T7590] loop7: detected capacity change from 0 to 512 [ 268.677904][ T7590] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2818: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 268.688740][ T7590] EXT4-fs (loop7): 1 truncate cleaned up [ 268.690326][ T7590] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 269.160467][ T7620] ptrace attach of "./syz-executor exec"[4668] was attempted by ""[7620] [ 269.380562][ T7594] EXT4-fs error (device loop7): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 270.169637][ T7672] loop5: detected capacity change from 0 to 164 [ 271.101315][ T7683] netlink: 'syz.4.756': attribute type 3 has an invalid length. [ 271.104644][ T7683] netlink: 'syz.4.756': attribute type 3 has an invalid length. [ 271.214833][ T6144] EXT4-fs (loop7): unmounting filesystem. [ 271.353277][ T7672] rock: directory entry would overflow storage [ 271.355403][ T7672] rock: sig=0x5053, size=7, remaining=4 [ 271.392147][ T7672] isofs_fill_super: root inode is not a directory. Corrupted media? [ 273.535204][ T7736] netlink: 96 bytes leftover after parsing attributes in process `syz.1.772'. [ 274.494307][ T7748] netlink: 24 bytes leftover after parsing attributes in process `syz.5.766'. [ 274.672485][ T7757] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 275.165773][ T7778] loop7: detected capacity change from 0 to 256 [ 275.214451][ T7778] FAT-fs (loop7): Directory bread(block 64) failed [ 275.224821][ T7778] FAT-fs (loop7): Directory bread(block 65) failed [ 275.236732][ T7778] FAT-fs (loop7): Directory bread(block 66) failed [ 275.250503][ T7778] FAT-fs (loop7): Directory bread(block 67) failed [ 275.252508][ T7778] FAT-fs (loop7): Directory bread(block 68) failed [ 275.254378][ T7778] FAT-fs (loop7): Directory bread(block 69) failed [ 275.256361][ T7778] FAT-fs (loop7): Directory bread(block 70) failed [ 275.260425][ T7778] FAT-fs (loop7): Directory bread(block 71) failed [ 275.266704][ T7778] FAT-fs (loop7): Directory bread(block 72) failed [ 275.268764][ T7778] FAT-fs (loop7): Directory bread(block 73) failed [ 278.085285][ T7825] loop5: detected capacity change from 0 to 256 [ 278.167777][ T7825] FAT-fs (loop5): Directory bread(block 64) failed [ 278.195408][ T7825] FAT-fs (loop5): Directory bread(block 65) failed [ 278.231289][ T7825] FAT-fs (loop5): Directory bread(block 66) failed [ 278.245816][ T7825] FAT-fs (loop5): Directory bread(block 67) failed [ 278.262121][ T7825] FAT-fs (loop5): Directory bread(block 68) failed [ 278.274200][ T7825] FAT-fs (loop5): Directory bread(block 69) failed [ 278.287659][ T7825] FAT-fs (loop5): Directory bread(block 70) failed [ 278.306094][ T7825] FAT-fs (loop5): Directory bread(block 71) failed [ 278.318750][ T7825] FAT-fs (loop5): Directory bread(block 72) failed [ 278.334717][ T7825] FAT-fs (loop5): Directory bread(block 73) failed [ 278.605106][ T7836] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 279.383653][ T7855] loop5: detected capacity change from 0 to 128 [ 279.506472][ T7855] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 280.589333][ T7870] loop7: detected capacity change from 0 to 64 [ 280.728120][ T7870] syz.7.794: attempt to access beyond end of device [ 280.728120][ T7870] loop7: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 280.732409][ T7870] Buffer I/O error on dev loop7, logical block 134217734, async page read [ 280.859761][ T7870] Trying to free block not in datazone [ 281.279984][ T4668] EXT4-fs (loop5): unmounting filesystem. [ 281.372749][ T7873] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 281.375344][ T7873] IPv6: NLM_F_CREATE should be set when creating new route [ 281.490781][ T7876] netlink: 4 bytes leftover after parsing attributes in process `syz.2.798'. [ 281.653140][ T7889] loop7: detected capacity change from 0 to 1024 [ 281.710230][ T7889] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 283.424511][ T6144] EXT4-fs (loop7): unmounting filesystem. [ 283.463639][ T7911] net_ratelimit: 244 callbacks suppressed [ 283.463655][ T7911] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 284.524733][ T7925] loop7: detected capacity change from 0 to 128 [ 284.575454][ T7925] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 287.123904][ T6144] EXT4-fs (loop7): unmounting filesystem. [ 287.288079][ T7951] fuse: Unknown parameter 'fd18446744073709551615' [ 287.452546][ T7963] loop7: detected capacity change from 0 to 128 [ 287.478536][ T7963] FAT-fs (loop7): bogus logical sector size 0 [ 287.480468][ T7963] FAT-fs (loop7): Can't find a valid FAT filesystem [ 287.505206][ T7954] netlink: 40 bytes leftover after parsing attributes in process `syz.5.817'. [ 288.422051][ T7975] netlink: 'syz.1.821': attribute type 3 has an invalid length. [ 288.424412][ T7975] netlink: 'syz.1.821': attribute type 3 has an invalid length. [ 292.615652][ T8031] netlink: 4 bytes leftover after parsing attributes in process `syz.5.828'. [ 293.346233][ T8039] netlink: 32 bytes leftover after parsing attributes in process `syz.4.835'. [ 293.413483][ T8039] netlink: 32 bytes leftover after parsing attributes in process `syz.4.835'. [ 293.427495][ T8038] loop7: detected capacity change from 0 to 2048 [ 293.595845][ T6384] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 298.335525][ T8104] loop7: detected capacity change from 0 to 64 [ 300.937277][ T8133] binder: 8129:8133 tried to acquire reference to desc 0, got 1 instead [ 300.989765][ T8133] binder: 8129:8133 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 300.993367][ T8133] binder: 8133 RLIMIT_NICE not set [ 300.994790][ T8133] binder: 8133 RLIMIT_NICE not set [ 301.019271][ T8133] binder: 8133 RLIMIT_NICE not set [ 301.021037][ T8133] binder: 8129:8133 Acquire 1 refcount change on invalid ref 5 ret -22 [ 301.080102][ T8139] binder: 8138:8139 tried to acquire reference to desc 0, got 1 instead [ 301.124128][ T8139] binder: 8138:8139 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 301.124969][ T5575] binder: undelivered TRANSACTION_COMPLETE [ 301.127796][ T8139] binder: 8139 RLIMIT_NICE not set [ 301.130289][ T5575] binder: undelivered TRANSACTION_COMPLETE [ 301.133176][ T5575] binder: undelivered transaction 96, process died. [ 301.205827][ T8139] binder: 8139 RLIMIT_NICE not set [ 301.206005][ T8150] binder: 8138:8150 transaction reply to 0:0 failed 100/29201/-71, size 88-24 line 2955 [ 301.222203][ T8151] binder: release 8149:8151 transaction 105 out, still active [ 301.228879][ T8151] binder: undelivered TRANSACTION_COMPLETE [ 301.230985][ T8151] binder: 8151:8149 reply target not found [ 301.232644][ T8151] binder: 8149:8151 transaction reply to 0:0 failed 106/29189/0, size 0-0 line 2984 [ 301.239073][ T8151] binder: send failed reply for transaction 105, target dead [ 301.296913][ T22] binder: undelivered TRANSACTION_ERROR: 29190 [ 301.361780][ T8155] netlink: 20 bytes leftover after parsing attributes in process `syz.4.863'. [ 301.600739][ T8165] netlink: 'syz.4.868': attribute type 8 has an invalid length. [ 303.379379][ T8179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.871'. [ 305.494909][ T8213] loop7: detected capacity change from 0 to 4197 [ 305.589653][ T8224] loop1: detected capacity change from 0 to 16 [ 305.630550][ T8224] erofs: (device loop1): mounted with root inode @ nid 36. [ 305.729826][ T8224] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 305.738602][ T8224] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -3 in[47, 4049] out[1851] [ 305.742068][ T8224] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 305.802131][ T8224] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 305.805582][ T8224] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 305.808151][ T8224] erofs: (device loop1): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 305.811375][ T8224] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 305.814011][ T8224] erofs: (device loop1): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 305.816574][ T8224] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 305.819340][ T8224] erofs: (device loop1): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 305.822066][ T8224] erofs: (device loop1): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 305.824572][ T8224] erofs: (device loop1): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 305.827495][ T8224] erofs: (device loop1): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 305.830658][ T8224] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 305.833229][ T8224] erofs: (device loop1): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 305.836484][ T8224] erofs: (device loop1): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 305.839248][ T8224] erofs: (device loop1): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 305.842405][ T8224] erofs: (device loop1): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 305.847156][ T8224] syz.1.880: attempt to access beyond end of device [ 305.847156][ T8224] loop1: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 305.851440][ T8224] syz.1.880: attempt to access beyond end of device [ 305.851440][ T8224] loop1: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 305.855781][ T8224] syz.1.880: attempt to access beyond end of device [ 305.855781][ T8224] loop1: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 305.863342][ T8224] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -3 in[47, 4049] out[2639] [ 305.876199][ T8224] erofs: (device loop1): z_erofs_readahead: readahead error at page 87 @ nid 36 [ 305.879243][ T8224] erofs: (device loop1): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 305.882407][ T8224] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 305.885045][ T8224] erofs: (device loop1): z_erofs_readahead: readahead error at page 83 @ nid 36 [ 305.887570][ T8224] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 305.890446][ T8224] erofs: (device loop1): z_erofs_readahead: readahead error at page 82 @ nid 36 [ 305.893500][ T8224] erofs: (device loop1): z_erofs_readahead: readahead error at page 79 @ nid 36 [ 305.896077][ T8224] erofs: (device loop1): z_erofs_readahead: readahead error at page 78 @ nid 36 [ 305.898914][ T8224] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 305.901526][ T8224] erofs: (device loop1): z_erofs_readahead: readahead error at page 76 @ nid 36 [ 305.904176][ T8224] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 305.906831][ T8224] erofs: (device loop1): z_erofs_readahead: readahead error at page 75 @ nid 36 [ 305.909683][ T8224] erofs: (device loop1): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 305.912395][ T8224] erofs: (device loop1): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 305.914899][ T8224] erofs: (device loop1): z_erofs_readahead: readahead error at page 71 @ nid 36 [ 305.917363][ T8224] erofs: (device loop1): z_erofs_readahead: readahead error at page 70 @ nid 36 [ 305.921030][ T8224] erofs: (device loop1): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 305.923807][ T8224] erofs: (device loop1): z_erofs_readahead: readahead error at page 61 @ nid 36 [ 305.926437][ T8224] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 305.929131][ T8224] erofs: (device loop1): z_erofs_readahead: readahead error at page 59 @ nid 36 [ 305.931762][ T8224] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 305.934335][ T8224] erofs: (device loop1): z_erofs_readahead: readahead error at page 58 @ nid 36 [ 305.937147][ T8224] erofs: (device loop1): z_erofs_readahead: readahead error at page 56 @ nid 36 [ 305.940835][ T8224] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 305.943382][ T8224] erofs: (device loop1): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 305.945944][ T8224] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 305.948519][ T8224] erofs: (device loop1): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 305.951173][ T8224] erofs: (device loop1): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 305.954477][ T8224] syz.1.880: attempt to access beyond end of device [ 305.954477][ T8224] loop1: rw=524288, sector=32, nr_sectors = 64 limit=16 [ 305.959616][ T8224] syz.1.880: attempt to access beyond end of device [ 305.959616][ T8224] loop1: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 305.964570][ T8224] syz.1.880: attempt to access beyond end of device [ 305.964570][ T8224] loop1: rw=524288, sector=14425508768, nr_sectors = 8 limit=16 [ 305.971342][ T8224] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -3 in[47, 4049] out[5297] [ 306.195268][ T8213] F2FS-fs (loop7): build fault injection attr: rate: 771, type: 0x3ffff [ 306.248117][ T8213] syz.7.879: attempt to access beyond end of device [ 306.248117][ T8213] loop7: rw=12288, sector=8192, nr_sectors = 8 limit=4197 [ 307.601468][ T8198] loop5: detected capacity change from 0 to 40427 [ 307.618945][ T8213] F2FS-fs (loop7): Failed to initialize F2FS segment manager (-4) [ 307.671120][ T8198] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 307.673077][ T8198] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 307.880909][ T8198] F2FS-fs (loop5): Failed to initialize F2FS segment manager (-4) [ 311.172636][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.174508][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 311.182746][ T8273] xt_bpf: check failed: parse error [ 313.330317][ T8313] dccp_close: ABORT with 32 bytes unread [ 313.430277][ T8314] affs: No valid root block on device nullb0 [ 314.771379][ T8345] loop1: detected capacity change from 0 to 512 [ 314.822856][ T8345] EXT2-fs (loop1): error: revision level too high, forcing read-only mode [ 314.825458][ T8345] EXT2-fs (loop1): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=a00a8] [ 315.670646][ T8351] netlink: 'syz.2.908': attribute type 10 has an invalid length. [ 315.892375][ T8367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.910'. [ 315.931608][ T8367] netlink: 48 bytes leftover after parsing attributes in process `syz.1.910'. [ 318.596511][ T8388] loop1: detected capacity change from 0 to 2048 [ 318.735847][ T8390] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 318.745081][ T8388] syz.1.918 sent an empty control message without MSG_MORE. [ 320.566022][ T8408] netlink: 'syz.2.924': attribute type 1 has an invalid length. [ 320.610035][ T8408] 8021q: adding VLAN 0 to HW filter on device bond4 [ 320.651417][ T8408] bond4: (slave bridge5): making interface the new active one [ 320.655011][ T8408] bond4: (slave bridge5): Enslaving as an active interface with an up link [ 320.741646][ T260] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 320.744616][ T8410] netlink: 8 bytes leftover after parsing attributes in process `syz.2.924'. [ 321.727789][ T8424] loop5: detected capacity change from 0 to 512 [ 321.749236][ T8424] EXT2-fs (loop5): warning: feature flags set on rev 0 fs, running e2fsck is recommended [ 321.752555][ T8424] EXT2-fs (loop5): error: couldn't mount RDWR because of unsupported optional features (1000000) [ 321.842929][ T8422] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 321.871338][ T6384] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 324.210511][ T8442] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 325.142620][ T8446] netlink: 'syz.7.935': attribute type 10 has an invalid length. [ 325.456083][ T8454] loop5: detected capacity change from 0 to 128 [ 326.673737][ T8460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.938'. [ 329.069383][ T8486] loop5: detected capacity change from 0 to 512 [ 329.175881][ T8486] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 330.061069][ T8486] EXT4-fs: Cannot change quota options when quota turned on [ 330.161732][ T4668] EXT4-fs (loop5): unmounting filesystem. [ 334.000391][ T8525] binder_user_error: 6 callbacks suppressed [ 334.000403][ T8525] binder: 8518:8525 tried to acquire reference to desc 0, got 1 instead [ 334.041561][ T8525] binder: 8518:8525 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 334.068757][ T8525] binder: 8525 RLIMIT_NICE not set [ 334.075859][ T8525] binder: 8525 RLIMIT_NICE not set [ 334.082442][ T8525] binder: 8525 RLIMIT_NICE not set [ 334.812400][ T5816] binder_debug: 5 callbacks suppressed [ 334.812440][ T5816] binder: undelivered TRANSACTION_COMPLETE [ 334.837792][ T5816] binder: undelivered TRANSACTION_COMPLETE [ 334.839919][ T5816] binder: undelivered transaction 112, process died. [ 338.177194][ T8570] tipc: Enabling of bearer rejected, already enabled [ 338.201368][ T8570] tipc: Enabled bearer , priority 0 [ 338.548533][ T8592] netlink: 28 bytes leftover after parsing attributes in process `syz.5.982'. [ 338.551246][ T8592] netlink: 28 bytes leftover after parsing attributes in process `syz.5.982'. [ 349.924461][ T8700] loop5: detected capacity change from 0 to 512 [ 350.860352][ T7668] __quota_error: 22 callbacks suppressed [ 350.860367][ T7668] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 350.865392][ T7668] EXT4-fs error (device loop5): ext4_release_dquot:6850: comm kworker/u4:23: Failed to release dquot type 1 [ 350.869844][ T8700] EXT4-fs (loop5): 1 orphan inode deleted [ 350.873149][ T8700] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 352.226335][ T4668] EXT4-fs (loop5): unmounting filesystem. [ 355.027379][ T8741] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1020'. [ 355.172082][ T8748] trusted_key: encrypted_key: insufficient parameters specified [ 355.290901][ T8751] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1026'. [ 357.939735][ T8776] loop1: detected capacity change from 0 to 256 [ 359.173719][ T8793] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1043'. [ 359.176400][ T8793] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1043'. [ 362.141164][ T8824] fuse: Bad value for 'fd' [ 365.453569][ T8861] loop1: detected capacity change from 0 to 256 [ 365.746234][ T8861] FAT-fs (loop1): Directory bread(block 64) failed [ 365.748345][ T8861] FAT-fs (loop1): Directory bread(block 65) failed [ 365.750817][ T8861] FAT-fs (loop1): Directory bread(block 66) failed [ 365.752934][ T8861] FAT-fs (loop1): Directory bread(block 67) failed [ 365.755379][ T8861] FAT-fs (loop1): Directory bread(block 68) failed [ 365.757360][ T8861] FAT-fs (loop1): Directory bread(block 69) failed [ 365.759801][ T8861] FAT-fs (loop1): Directory bread(block 70) failed [ 365.761872][ T8861] FAT-fs (loop1): Directory bread(block 71) failed [ 365.764377][ T8861] FAT-fs (loop1): Directory bread(block 72) failed [ 365.766409][ T8861] FAT-fs (loop1): Directory bread(block 73) failed [ 365.855557][ T8853] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1059'. [ 365.858396][ T8853] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1059'. [ 371.737479][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 371.739431][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 375.548908][ T8930] loop5: detected capacity change from 0 to 16 [ 375.580753][ T8930] erofs: (device loop5): mounted with root inode @ nid 36. [ 375.795098][ T4313] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 375.803947][ T8930] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 375.811298][ T8930] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 375.815960][ T8930] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 375.820701][ T8930] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 379.845384][ T8969] Cannot find set identified by id 0 to match [ 380.721559][ T8986] loop5: detected capacity change from 0 to 256 [ 382.429712][ T9001] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1098'. [ 384.188336][ T9020] Bluetooth: MGMT ver 1.22 [ 385.406446][ T9039] loop1: detected capacity change from 0 to 2048 [ 385.561199][ T9039] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 387.550849][ T9055] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1111'. [ 387.654926][ T9062] loop1: detected capacity change from 0 to 16 [ 388.621253][ T9070] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 389.690348][ T9088] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1123'. [ 394.202542][ T9108] set match dimension is over the limit! [ 395.837658][ T9120] loop1: detected capacity change from 0 to 128 [ 396.569649][ T9120] EXT4-fs (loop1): Test dummy encryption mode enabled [ 396.641052][ T9120] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 396.938869][ T9120] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce" [ 398.521007][ T4306] EXT4-fs (loop1): unmounting filesystem. [ 398.732448][ T9155] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1139'. [ 399.742420][ T9170] overlayfs: failed to clone upperpath [ 399.810410][ T9150] could not allocate digest TFM handle sha1-ssse3 [ 402.829367][ T9188] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 404.039930][ T9216] loop1: detected capacity change from 0 to 64 [ 404.073774][ T9216] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 404.615970][ T9213] lo speed is unknown, defaulting to 1000 [ 404.680980][ T9213] lo speed is unknown, defaulting to 1000 [ 404.934214][ T9217] loop5: detected capacity change from 0 to 512 [ 404.936623][ T9217] EXT4-fs: Ignoring removed mblk_io_submit option [ 404.938542][ T9217] EXT4-fs: Ignoring removed bh option [ 404.970774][ T9217] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 404.974153][ T9217] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 405.012505][ T9217] EXT4-fs (loop5): 1 truncate cleaned up [ 405.014206][ T9217] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 405.743139][ T9231] tipc: Enabling of bearer rejected, already enabled [ 405.905946][ T4668] EXT4-fs (loop5): unmounting filesystem. [ 405.925655][ T9238] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1164'. [ 405.959869][ T27] audit: type=1326 audit(661.930:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9240 comm="syz.4.1166" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a35aba8 code=0x7ffc0000 [ 405.971651][ T27] audit: type=1326 audit(661.930:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9240 comm="syz.4.1166" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a35aba8 code=0x7ffc0000 [ 405.985075][ T27] audit: type=1326 audit(661.950:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9240 comm="syz.4.1166" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffff9a35aba8 code=0x7ffc0000 [ 406.031971][ T27] audit: type=1326 audit(661.950:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9240 comm="syz.4.1166" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a35aba8 code=0x7ffc0000 [ 406.037223][ T9244] loop5: detected capacity change from 0 to 1764 [ 406.088682][ T27] audit: type=1326 audit(661.950:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9240 comm="syz.4.1166" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a35aba8 code=0x7ffc0000 [ 406.105056][ T27] audit: type=1326 audit(661.950:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9240 comm="syz.4.1166" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff9a3590d4 code=0x7ffc0000 [ 406.121833][ T27] audit: type=1326 audit(661.950:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9240 comm="syz.4.1166" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a35aba8 code=0x7ffc0000 [ 406.138273][ T27] audit: type=1326 audit(661.950:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9240 comm="syz.4.1166" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a35aba8 code=0x7ffc0000 [ 406.176845][ T27] audit: type=1326 audit(661.950:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9240 comm="syz.4.1166" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff9a35aba8 code=0x7ffc0000 [ 406.213764][ T27] audit: type=1326 audit(661.950:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9240 comm="syz.4.1166" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a35aba8 code=0x7ffc0000 [ 406.252655][ T7679] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.258419][ T5578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.263369][ T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.266695][ T4376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.685671][ T4376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.954330][ T7679] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.989446][ T5578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.002869][ T4376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.005953][ T4384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.204357][ T7671] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.207560][ T7671] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.211000][ T4376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.216520][ T4376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.235592][ T5578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.238079][ T5578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.341005][ T9304] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1180'. [ 413.078692][ T9337] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1186'. [ 413.780444][ C0] net_ratelimit: 15 callbacks suppressed [ 413.780458][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.792363][ T5575] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.833387][ T4376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.836511][ T4384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.929642][ T7671] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.933013][ T5575] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.037737][ T5575] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.040539][ T5578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.698313][ T4369] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.759061][ T5579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.920223][ T27] kauditd_printk_skb: 25 callbacks suppressed [ 415.920237][ T27] audit: type=1326 audit(671.890:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9358 comm="syz.2.1197" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb595aba8 code=0x0 [ 417.788028][ T9380] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1203'. [ 417.804568][ T9382] input: syz1 as /devices/virtual/input/input4 [ 417.811774][ T9380] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1203'. [ 417.869542][ T9392] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1205'. [ 417.893506][ T9393] loop1: detected capacity change from 0 to 2048 [ 418.475873][ T9393] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 418.638680][ T9392] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 418.651910][ T9396] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1205'. [ 418.654573][ T9396] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 418.828441][ T5575] net_ratelimit: 25 callbacks suppressed [ 418.830203][ T5575] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.849014][ T4794] [ 418.849811][ T4794] ============================================ [ 418.851608][ T4794] WARNING: possible recursive locking detected [ 418.853317][ T4794] 6.1.143-syzkaller #0 Not tainted [ 418.854777][ T4794] -------------------------------------------- [ 418.856518][ T4794] kworker/u4:12/4794 is trying to acquire lock: [ 418.858230][ T4794] ffff0000f4e5e9e8 (rlock-AF_UNIX){+.+.}-{2:2}, at: unix_collect_skb+0x140/0x480 [ 418.860840][ T4794] [ 418.860840][ T4794] but task is already holding lock: [ 418.862860][ T4794] ffff0000f4e5c9e8 (rlock-AF_UNIX){+.+.}-{2:2}, at: unix_collect_skb+0xa8/0x480 [ 418.865408][ T4794] [ 418.865408][ T4794] other info that might help us debug this: [ 418.867695][ T4794] Possible unsafe locking scenario: [ 418.867695][ T4794] [ 418.869743][ T4794] CPU0 [ 418.870646][ T4794] ---- [ 418.871588][ T4794] lock(rlock-AF_UNIX); [ 418.872778][ T4794] lock(rlock-AF_UNIX); [ 418.873986][ T4794] [ 418.873986][ T4794] *** DEADLOCK *** [ 418.873986][ T4794] [ 418.876284][ T4794] May be due to missing lock nesting notation [ 418.876284][ T4794] [ 418.878644][ T4794] 4 locks held by kworker/u4:12/4794: [ 418.880110][ T4794] #0: ffff0000c0029138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x6b4/0x13a8 [ 418.883179][ T4794] #1: ffff800020fb7c20 (unix_gc_work){+.+.}-{0:0}, at: process_one_work+0x6f8/0x13a8 [ 418.885845][ T4794] #2: ffff800017817358 (unix_gc_lock){+.+.}-{2:2}, at: __unix_gc+0xb8/0x1334 [ 418.888356][ T4794] #3: ffff0000f4e5c9e8 (rlock-AF_UNIX){+.+.}-{2:2}, at: unix_collect_skb+0xa8/0x480 [ 418.890925][ T4794] [ 418.890925][ T4794] stack backtrace: [ 418.892558][ T4794] CPU: 1 PID: 4794 Comm: kworker/u4:12 Not tainted 6.1.143-syzkaller #0 [ 418.894841][ T4794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 418.897696][ T4794] Workqueue: events_unbound __unix_gc [ 418.899185][ T4794] Call trace: [ 418.900110][ T4794] dump_backtrace+0x1c8/0x1f4 [ 418.901381][ T4794] show_stack+0x2c/0x3c [ 418.902549][ T4794] __dump_stack+0x30/0x40 [ 418.903749][ T4794] dump_stack_lvl+0xf8/0x160 [ 418.904964][ T4794] dump_stack+0x1c/0x5c [ 418.906105][ T4794] __lock_acquire+0x18b4/0x6544 [ 418.907490][ T4794] lock_acquire+0x20c/0x644 [ 418.908771][ T4794] _raw_spin_lock+0x54/0x6c [ 418.910058][ T4794] unix_collect_skb+0x140/0x480 [ 418.911406][ T4794] __unix_gc+0xd18/0x1334 [ 418.912571][ T4794] process_one_work+0x7f4/0x13a8 [ 418.913985][ T4794] worker_thread+0x8c8/0xfbc [ 418.915280][ T4794] kthread+0x250/0x2d8 [ 418.916422][ T4794] ret_from_fork+0x10/0x20 [ 419.048662][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.700149][ T7679] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.753982][ T4384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.897156][ T4376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.899741][ T4369] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.989684][ T5578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.992122][ T5578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.328788][ T4384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.969060][ T4376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.098979][ T4384] net_ratelimit: 9 callbacks suppressed [ 424.098994][ T4384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.103005][ T4384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.888855][ T5578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.128975][ T4376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.131474][ T4376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.179090][ T4376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.181703][ T4369] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.408711][ T5575] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.218954][ T4384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.221349][ T4384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog