last executing test programs: 6m26.313422427s ago: executing program 1 (id=2): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80, &(0x7f0000000180)={[{@barrier}, {@creator={'creator', 0x3d, "5a1b3b9a"}}, {@uid}, {@nobarrier}, {@gid}, {}, {@nls={'nls', 0x3d, 'iso8859-1'}}]}, 0x46, 0x718, &(0x7f00000011c0)="$eJzs3U9sW3cdAPDvsx0n7kTqbe02EFKjVVSwQpvEjBYJiTIhlMOEKu3AOJo2WaM4WZVkKK0QzYDBEU6ohx2GUDjshHZAGuKAGGckpN17r8S92gGj9/zs2E7i2M2/rnw+0sv7vfd+f77vm/d+sZ9bOYD/W3NvxthmJDF38fWNdPvBVq3xYKu23C5HxHhEFCJKrVUkKxHJJxHXorXEF9OdeXfJXuO8+vDj9y/c/7DW2irlS1a/MKjdtuaAETbzJaYiopivR1Taq78b8dqO/u6N1HXSiTtN2Pl24uCkNZvNpLVq2xyl+RD3LfCkuxdRHNtlfzXiVERM5K8DIp8dCscc3qEbaZYDAACAJ1NxvwqnH8Wj2IjJ4wkHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAng5J6zsDk3wptMtTkbS//7+c70uVyycc72Bf3+f4ewvHFAgAAAAAAAAAHJZmsWvjo/yD+3OP4lFsxGSnUpJ95v9ytnEm+/lMvBNrMR+rcSk2oh7rsR6rMRMxNtnVYXmjvr6+OrOz5e8jbdlsNu/lLWcjorqj5ewRnjkAAAAAAAAAPP1+EXMxedJBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAtySi2Fply5l2uRqFUkRMREQ5rbcZ8bd2+fPs7ycdAAAAABy9Sr6eTP7bKjST7D3/C9n7/ol4J1ZiPRZjPRoxHzezZwGtd/2Ff2/WGg+2asvpsrPj7/1npDiyHiOiGO/uMfJ0VuNsp8Vc/CDeiIsxFddjNRbjp1GP9ZiPqaikJxH1SKJaaT29qLbj3D3eaz1b1/tjO9e3/VIWSSUWYjGL7VLcKEfrsUl2DumYL3WN9pdyRN+I76bZSb6bGzJHN7t+X7/Ln8vkmqeH7ONoVLMzH+tkZDrNfZ6NZwfnfsTrpH+kmSh0nkGd2R4l3cxH+qyZH27n/Cej5PxUvk5z/evenB+2ER+l9WdiNgr51RfxQm/Ob3/l/nO9jb/26T+u3yqsLN1aWLt4hKd0EFP7VRhrF/ozUevKxIuDr748E400E5vDZ2Ksf8fEsC2PVjnPRjYVDTlbfj8r1ePlrkvw7bgZ83ElpmMmrsZ0fDtmo9a5wtLlbE9eS7Xl3pxk91ph5/xWGRD8+a92VfrNPpWP0o927Enz8mxXXrtnump2LN9z7bcx3XX1PTf46hv5r0A6/pfycjrGLzt/cZ4EPZnI5+Z2dM8PzsQfskl6rbGytHqrfnvI8S7k6/S2fa93bv7j8FH3/3U/DOn1ks64pWwry0mlfb2kx57vRNubr3L+iUurXWHHsbOdY9WYjMX44Z53ajl/Dbezp9axF7uOfSGPOp05y/nrm/axnlc58XY0slchffadqgE4ZqdeOVWuPKz8q/JB5VeVW5XXJ14bvzr+5XKM/bP01+KfC38qfCd5JT6In8fkSUcKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABPg7U7d5fqjcb8aqcQE/17Dloo7znW4EIU9q2z9cxwHUY1YvBYSV4oH+65H15hPM9ivueN7UOfHvJYlejb0/6GpYP2/FFEDKhTPnDwydDX2OnHHaLrV3CwbLS/OC3b0yyO0LzUbrV7nVKsTcRSPSntcseNb98FUV2qNz5r9jSvRNctAzzlLq8v3768dufuNxaX62/NvzW/Mnv1ytUrtW/NfPPywmJjfrr186SjBI7C2p27xSGrLvz4iGMBAAAAAAAAAAAAhpP/6//1x/7PDKV96pRX13Yf+dxxnyoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwOTX3ZoxtRhIz05em0+0HW7VGurTL2zVLEVGIiORnEcknEdeitUS1q7tkr3Feffjx+xfuf1jb7qvUrl8Y1G44m/kSUxFRzNf7G9+lm5393ejqb/Oxwks6Z5gm7Hw7cXDS/hcAAP//OonviA==") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 6m26.12840922s ago: executing program 1 (id=6): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x1000801, &(0x7f0000000000)=ANY=[], 0x47, 0xc5c, &(0x7f0000002500)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x841, 0x159) pwritev2(r3, 0x0, 0x0, 0xe7b, 0x0, 0x2) openat(0xffffffffffffff9c, 0x0, 0x8042, 0x0) openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x42400, 0x0) lseek(r4, 0xfffffffffffffff9, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 6m24.638156184s ago: executing program 1 (id=7): bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x65) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) socket$key(0xf, 0x3, 0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$int_in(r2, 0x5452, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r2, 0x1) 6m8.406025847s ago: executing program 32 (id=7): bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x65) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) socket$key(0xf, 0x3, 0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$int_in(r2, 0x5452, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r2, 0x1) 5m51.959516134s ago: executing program 5 (id=72): lseek(0xffffffffffffffff, 0x3, 0x0) syz_open_dev$loop(0x0, 0x760, 0xa382) pwritev(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x800000, 0x0) r0 = fsopen(&(0x7f0000000300)='jfs\x00', 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) io_uring_setup(0x23b2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$kcm(0xa, 0x2, 0x3a) r2 = getpid() r3 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r3, &(0x7f00000000c0), 0x10) sendto$l2tp(r3, &(0x7f0000000040)="e5786a0d000000000000c83b", 0xc, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r3, 0x0, 0x19, &(0x7f0000000000)=0x8b6d, 0x4) recvfrom$l2tp(r3, 0x0, 0x0, 0x20, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) fdatasync(r1) writev(r1, &(0x7f0000000200), 0x0) fcntl$setlease(r5, 0x400, 0x1) shutdown(r1, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 5m49.705753229s ago: executing program 5 (id=79): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket(0x2c, 0x4, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x141) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00') r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8924, &(0x7f0000001300)={'nr0\x00'}) keyctl$read(0x2, 0x0, 0x0, 0x0) vmsplice(r3, 0x0, 0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) chdir(0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$overlay(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380), 0x800, &(0x7f0000001540)) bind$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e22, @empty}, 0x10) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x20) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) 5m46.792276305s ago: executing program 5 (id=89): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) readv(r1, &(0x7f0000000880)=[{&(0x7f00000030c0)=""/4096, 0x1000}], 0x1) 5m45.558697794s ago: executing program 5 (id=94): syz_mount_image$nilfs2(&(0x7f00000005c0), &(0x7f0000000080)='./file0\x00', 0x8, &(0x7f00000000c0)=ANY=[], 0x1, 0xad4, &(0x7f0000001540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80086e8a, &(0x7f00000001c0)) 5m45.196566619s ago: executing program 5 (id=95): prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000003c0)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r3, &(0x7f0000000440)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r5, &(0x7f0000000900)={0x1d, 0x0, 0x1}, 0x18) sendmmsg$unix(r5, &(0x7f0000004a80), 0x0, 0x1d3) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_FLUSH(r6, 0x29, 0xd4, &(0x7f00000000c0)=0x7, 0x4) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 5m43.600759614s ago: executing program 5 (id=105): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac14"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0xd50, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x8004ff00, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 5m42.59137541s ago: executing program 33 (id=105): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac14"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0xd50, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x8004ff00, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3m47.811781292s ago: executing program 0 (id=408): lseek(0xffffffffffffffff, 0x3, 0x0) syz_open_dev$loop(0x0, 0x760, 0xa382) pwritev(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x800000, 0x0) r0 = fsopen(&(0x7f0000000300)='jfs\x00', 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) io_uring_setup(0x23b2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$kcm(0xa, 0x2, 0x3a) r2 = getpid() r3 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r3, &(0x7f00000000c0), 0x10) setsockopt$inet_int(r3, 0x0, 0x19, &(0x7f0000000000)=0x8b6d, 0x4) recvfrom$l2tp(r3, 0x0, 0x0, 0x20, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) fdatasync(r1) writev(r1, &(0x7f0000000200), 0x0) fcntl$setlease(r5, 0x400, 0x1) shutdown(r1, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 3m44.194171319s ago: executing program 0 (id=421): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "fc7771", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x3, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2}}}}}}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000010000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000140", 0x58}], 0x1) 3m42.84365575s ago: executing program 0 (id=424): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x18) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x0, 0x0}) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f0000002080)=0x64, 0x23b) 3m40.859118771s ago: executing program 0 (id=428): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) r4 = accept(r3, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000740)=[{0x0, 0x0, 0x0}], 0x1, 0x0) recvmsg(r4, &(0x7f000000b680)={0x0, 0x0, 0x0}, 0x0) 3m39.954823485s ago: executing program 0 (id=433): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f00000004c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002e00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00'}, 0x48) 3m38.552231657s ago: executing program 0 (id=437): bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x8900, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$caif_seqpacket(0x25, 0x5, 0x4) connect$caif(r4, &(0x7f0000000040), 0x18) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_queued\x00', 0x275a, 0x0) copy_file_range(r6, &(0x7f00000001c0), r5, 0x0, 0xfffffff7a003e45c, 0x10000000000000) io_submit(0x0, 0x1, &(0x7f0000002400)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x7, r0, 0x0}]) 3m22.850204642s ago: executing program 34 (id=437): bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x8900, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$caif_seqpacket(0x25, 0x5, 0x4) connect$caif(r4, &(0x7f0000000040), 0x18) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_queued\x00', 0x275a, 0x0) copy_file_range(r6, &(0x7f00000001c0), r5, 0x0, 0xfffffff7a003e45c, 0x10000000000000) io_submit(0x0, 0x1, &(0x7f0000002400)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x7, r0, 0x0}]) 6.739020205s ago: executing program 2 (id=1186): r0 = syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x2) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0205710, &(0x7f0000000040)={0x0, 0x2a, 0x48}) 5.695777341s ago: executing program 7 (id=1187): connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xcabd8245) 5.681171232s ago: executing program 2 (id=1189): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) socket$inet_mptcp(0x2, 0x1, 0x106) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002e00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00'}, 0x48) 5.536688884s ago: executing program 7 (id=1192): socket$l2tp(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x10000, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x800000, 0x0, 0xffffffff}, 0x20, 0x0, 0x7, 0x8, 0x101, 0x14, 0x0, 0x0, 0x0, 0x0, {0x200}}}}]}, 0x78}}, 0x4080) 4.691553318s ago: executing program 2 (id=1197): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x1, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) get_mempolicy(0x0, 0x0, 0x4, &(0x7f0000ffd000/0x3000)=nil, 0x3) 4.293169564s ago: executing program 6 (id=1200): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r1, &(0x7f0000000080)="1c", 0x1, 0x0, 0x0, 0xfffffc89) 3.331491649s ago: executing program 6 (id=1202): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x94}]}, 0x34}}, 0x84) 3.255485519s ago: executing program 6 (id=1204): socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x60480) r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x21, 0x0, 0x4) 3.131606232s ago: executing program 6 (id=1205): bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006b00000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062c30bc068829afff36b31fa7e358e95cfa"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff95}, 0x48) 3.106036062s ago: executing program 6 (id=1206): syz_open_dev$usbmon(&(0x7f0000000280), 0x80000000000000, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pipe2(&(0x7f0000000000), 0x800) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) unshare(0x60480) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x4, 0x0, 0x7fffffff}, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2df0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) 2.627439409s ago: executing program 4 (id=1208): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="12", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000240)=' ', 0x1}], 0x1}}], 0x2, 0x4008000) syz_usb_disconnect(0xffffffffffffffff) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) sendfile(r1, r1, 0x0, 0x7ffff000) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='yeah\x00', 0x5) shutdown(r0, 0x2) 2.627154209s ago: executing program 2 (id=1209): socket$inet6_mptcp(0xa, 0x1, 0x106) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 2.56376671s ago: executing program 2 (id=1210): r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x80000) sched_setscheduler(0x0, 0x2, 0x0) syz_open_dev$video(0x0, 0x3ff, 0x2000) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa08, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x801c581f, 0x0) 2.388580583s ago: executing program 7 (id=1211): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x100) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x21, 0x40000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) 2.275503715s ago: executing program 7 (id=1212): socket$inet6(0xa, 0x3, 0x8000000003c) r0 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@empty, 0x0, 0x0, 0x20, 0x7dc2, 0x2, 0x0, 0x0, 0x5d}, {0x0, 0x7ff, 0x0, 0x10000000000000, 0x0, 0xf42, 0x200000000000}, {0x0, 0x2, 0x40000000000, 0xfffefffffffffffe}, 0x100000, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x33}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x5, 0x0, 0x4, 0x0, 0x400000, 0xf}}, 0xe8) syz_io_uring_setup(0x46d7, &(0x7f0000000080)={0x0, 0xa20a, 0x210, 0x3, 0x1c0}, &(0x7f0000000000), &(0x7f0000000100)) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./control\x00', 0x480, &(0x7f0000000000), 0x1, 0x786, &(0x7f0000000f80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r2, 0x84, 0x7d, &(0x7f0000001f00)=""/4096, &(0x7f0000000000)=0x1000) 2.194437936s ago: executing program 6 (id=1213): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc931e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) connect$unix(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000080)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) pread64(r1, 0x0, 0x0, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x17, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r3, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e') syz_emit_ethernet(0x0, 0x0, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) 2.024873369s ago: executing program 7 (id=1214): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0x4, 0x81, 0x42}, {@rand_addr=0x64010102, 0x4e22, 0x3, 0x1ca, 0x12d5c, 0x12d5c}}, 0x44) 1.888430801s ago: executing program 7 (id=1217): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000200)="c3", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x4e21, @rand_addr=0xfffffffffffffffe}, 0x10) 1.772346913s ago: executing program 4 (id=1219): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) r0 = syz_io_uring_setup(0x6883, &(0x7f0000000740)={0x0, 0x101828, 0x10100, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r0, 0x2deb, 0x5f8b, 0x6, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5420, 0x0) 1.675517904s ago: executing program 3 (id=1220): socket$xdp(0x2c, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 1.675230634s ago: executing program 4 (id=1221): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000002c0)={&(0x7f0000001c40), &(0x7f0000000040)=""/62, &(0x7f0000000180), &(0x7f0000000340), 0x2, r0}, 0x38) 1.600477475s ago: executing program 4 (id=1222): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "f8ca44dfaa00"}}, 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000600)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r2}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x3, 0x2, 0x0, 0x0, "b68c52d2be3c0d90"}}, 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0x10, 0xb}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') linkat(r6, &(0x7f0000000080)='./mnt\x00', r6, &(0x7f00000001c0)='./mnt\x00', 0x1400) recvfrom$inet(r6, &(0x7f0000000500)=""/197, 0xc5, 0x41, &(0x7f00000002c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x1c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0500000004000000ff0f00000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB="000000c5610b7cfadfb47316d100"/27], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x8, 0x3, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x18}}, 0x0, 0xc, 0xff2, &(0x7f0000002e00)=""/4082}, 0x94) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x4200020, 0x0, 0x0, 0x0, {0x30}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x24, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.597857495s ago: executing program 3 (id=1223): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020a000307000000ffe9ffffffff160005001a00"], 0x38}}, 0x1400c0d4) 1.403467279s ago: executing program 3 (id=1224): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x6c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x28, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x40}}}]}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.253156141s ago: executing program 3 (id=1225): socket$inet6(0xa, 0x3, 0x8000000003c) r0 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@empty, 0x0, 0x0, 0x20, 0x7dc2, 0x2, 0x0, 0x0, 0x5d}, {0x0, 0x7ff, 0x0, 0x10000000000000, 0x0, 0xf42, 0x200000000000}, {0x0, 0x2, 0x40000000000, 0xfffefffffffffffe}, 0x100000, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x33}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x5, 0x0, 0x4, 0x0, 0x400000, 0xf}}, 0xe8) syz_io_uring_setup(0x46d7, &(0x7f0000000080)={0x0, 0xa20a, 0x210, 0x3, 0x1c0}, &(0x7f0000000000), &(0x7f0000000100)) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./control\x00', 0x480, &(0x7f0000000000), 0x1, 0x786, &(0x7f0000000f80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r4, 0x84, 0x7d, &(0x7f0000001f00)=""/4096, &(0x7f0000000000)=0x1000) 917.405686ms ago: executing program 4 (id=1226): syz_open_dev$usbmon(&(0x7f0000000280), 0x80000000000000, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pipe2(&(0x7f0000000000), 0x800) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) unshare(0x60480) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x4, 0x0, 0x7fffffff}, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2df0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) 915.272126ms ago: executing program 3 (id=1236): socket$inet6(0xa, 0x3, 0x8000000003c) r0 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@empty, 0x0, 0x0, 0x20, 0x7dc2, 0x2, 0x0, 0x0, 0x5d}, {0x0, 0x7ff, 0x0, 0x10000000000000, 0x0, 0xf42, 0x200000000000}, {0x0, 0x2, 0x40000000000, 0xfffefffffffffffe}, 0x100000, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x33}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x5, 0x0, 0x4, 0x0, 0x400000, 0xf}}, 0xe8) syz_io_uring_setup(0x46d7, &(0x7f0000000080)={0x0, 0xa20a, 0x210, 0x3, 0x1c0}, &(0x7f0000000000), &(0x7f0000000100)) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./control\x00', 0x480, &(0x7f0000000000), 0x1, 0x786, &(0x7f0000000f80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r4, 0x84, 0x7d, &(0x7f0000001f00)=""/4096, &(0x7f0000000000)=0x1000) 675.18336ms ago: executing program 3 (id=1227): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) socket$inet_mptcp(0x2, 0x1, 0x106) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002e00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00'}, 0x48) 583.590921ms ago: executing program 2 (id=1228): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prctl$PR_SET_TSC(0x1a, 0x1) 0s ago: executing program 4 (id=1229): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket(0x2b, 0x1, 0x1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@get={0xe0, 0x13, 0x1, 0x0, 0x0, {{'cbc(blowfish)\x00'}}}, 0xe0}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$VIDIOC_G_SELECTION(r4, 0xc040565e, &(0x7f0000000180)={0x2, 0x2, 0x0, {0x7, 0x23, 0x106, 0xb}}) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x16\x00'}]}, 0x1c}}, 0x0) listen(r1, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r6, @ANYRES64=r6, @ANYRESHEX=r6, @ANYRES16=r6, @ANYBLOB="8a1abd7b9cb83ad71842b4885633b94d5fa914495ff99fb71d905e5c6f8a929043b58e0e614206d0d40d764ce9d38cdc932ea0735a3ef0e6374afac1415a38aa0bcc0f3db29531e62682e96b8ce17761f22d06c58da61cf9dce6ba099e703239f237db589721e2e3c5f732d131c1ecc1d266ed1130ac6462e5cd3432ce56eb781805c9b3b687e028b5b259b3fef2c06ae1323b195a38909d29b10e3538439cd64b8efa9be143bb4728f75893b31202006146dd8d2dddbb3a5944096befd358552534e8019d0894f0bf00d26cd504212fdfbd92dcddd159bda9596e475107", @ANYRES16=r6], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) kernel console output (not intermixed with test programs): 901734][ T4169] Soft offlining pfn 0x11ee46 at process virtual address 0x20420000 [ 135.913265][ T4169] Soft offlining pfn 0x11ee47 at process virtual address 0x20421000 [ 135.918434][ T4169] Soft offlining pfn 0x11e760 at process virtual address 0x20422000 [ 135.931049][ T4169] Soft offlining pfn 0x11e761 at process virtual address 0x20423000 [ 135.939189][ T4169] Soft offlining pfn 0x11e762 at process virtual address 0x20424000 [ 135.944031][ T4169] Soft offlining pfn 0x11e763 at process virtual address 0x20425000 [ 135.949170][ T4169] Soft offlining pfn 0x11e764 at process virtual address 0x20426000 [ 135.956381][ T4169] Soft offlining pfn 0x11e765 at process virtual address 0x20427000 [ 135.961396][ T4169] Soft offlining pfn 0x11e766 at process virtual address 0x20428000 [ 135.964826][ T4169] Soft offlining pfn 0x11e767 at process virtual address 0x20429000 [ 135.969587][ T4169] Soft offlining pfn 0x11ed88 at process virtual address 0x2042a000 [ 135.977181][ T4169] Soft offlining pfn 0x11ed89 at process virtual address 0x2042b000 [ 135.980347][ T4169] Soft offlining pfn 0x11ed8a at process virtual address 0x2042c000 [ 135.983018][ T4169] Soft offlining pfn 0x11ed8b at process virtual address 0x2042d000 [ 135.994457][ T4169] Soft offlining pfn 0x11ed8c at process virtual address 0x2042e000 [ 136.052690][ T4169] Soft offlining pfn 0x11ed8d at process virtual address 0x2042f000 [ 136.110869][ T4169] Soft offlining pfn 0x11ed8e at process virtual address 0x20430000 [ 136.133794][ T4169] Soft offlining pfn 0x11ed8f at process virtual address 0x20431000 [ 136.151889][ T4169] Soft offlining pfn 0x11eed8 at process virtual address 0x20432000 [ 136.199029][ T4169] Soft offlining pfn 0x11eed9 at process virtual address 0x20433000 [ 136.215232][ T4169] Soft offlining pfn 0x11eeda at process virtual address 0x20434000 [ 136.251424][ T4169] Soft offlining pfn 0x11eedb at process virtual address 0x20435000 [ 136.275199][ T4169] Soft offlining pfn 0x11eedc at process virtual address 0x20436000 [ 136.298972][ T4169] Soft offlining pfn 0x11eedd at process virtual address 0x20437000 [ 136.325905][ T4169] Soft offlining pfn 0x11eede at process virtual address 0x20438000 [ 136.341642][ T4169] Soft offlining pfn 0x11eedf at process virtual address 0x20439000 [ 136.379003][ T4169] Soft offlining pfn 0x11e6e8 at process virtual address 0x2043a000 [ 136.396067][ T4169] Soft offlining pfn 0x11e6e9 at process virtual address 0x2043b000 [ 136.408985][ T4169] Soft offlining pfn 0x11e6ea at process virtual address 0x2043c000 [ 136.411692][ T4169] Soft offlining pfn 0x11e6eb at process virtual address 0x2043d000 [ 136.416463][ T4169] Soft offlining pfn 0x11e6ec at process virtual address 0x2043e000 [ 136.455985][ T4169] Soft offlining pfn 0x11e6ed at process virtual address 0x2043f000 [ 136.542289][ T4169] Soft offlining pfn 0x11e6ee at process virtual address 0x20440000 [ 136.565730][ T4169] Soft offlining pfn 0x11e6ef at process virtual address 0x20441000 [ 136.581641][ T4169] Soft offlining pfn 0x11e6a8 at process virtual address 0x20442000 [ 136.584141][ T4169] Soft offlining pfn 0x11e6a9 at process virtual address 0x20443000 [ 136.608805][ T4169] Soft offlining pfn 0x11e6aa at process virtual address 0x20444000 [ 136.611428][ T4169] Soft offlining pfn 0x11e6ab at process virtual address 0x20445000 [ 136.624357][ T4169] Soft offlining pfn 0x11e6ac at process virtual address 0x20446000 [ 136.648766][ T4169] Soft offlining pfn 0x11e6ad at process virtual address 0x20447000 [ 136.659927][ T4169] Soft offlining pfn 0x11e6ae at process virtual address 0x20448000 [ 136.669663][ T4169] Soft offlining pfn 0x11e6af at process virtual address 0x20449000 [ 136.685423][ T4169] Soft offlining pfn 0x11e650 at process virtual address 0x2044a000 [ 136.688031][ T4169] Soft offlining pfn 0x11e651 at process virtual address 0x2044b000 [ 136.700682][ T4169] Soft offlining pfn 0x11e652 at process virtual address 0x2044c000 [ 136.705630][ T4169] Soft offlining pfn 0x11e653 at process virtual address 0x2044d000 [ 136.748674][ T4169] Soft offlining pfn 0x11e654 at process virtual address 0x2044e000 [ 136.750123][ T5033] device vlan0 entered promiscuous mode [ 136.753064][ T4169] Soft offlining pfn 0x11e655 at process virtual address 0x2044f000 [ 136.755443][ T4169] Soft offlining pfn 0x11e656 at process virtual address 0x20450000 [ 136.759198][ T4169] Soft offlining pfn 0x11e657 at process virtual address 0x20451000 [ 136.759539][ T5033] device bridge0 entered promiscuous mode [ 136.776678][ T4169] Soft offlining pfn 0x11e7b0 at process virtual address 0x20452000 [ 136.797291][ T4169] Soft offlining pfn 0x11e7b1 at process virtual address 0x20453000 [ 136.812059][ T4169] Soft offlining pfn 0x11e7b2 at process virtual address 0x20454000 [ 136.827195][ T4169] Soft offlining pfn 0x11e7b3 at process virtual address 0x20455000 [ 136.844445][ T4169] Soft offlining pfn 0x11e7b4 at process virtual address 0x20456000 [ 136.859069][ T4169] Soft offlining pfn 0x11e7b5 at process virtual address 0x20457000 [ 136.874696][ T4169] Soft offlining pfn 0x11e7b6 at process virtual address 0x20458000 [ 136.892777][ T4169] Soft offlining pfn 0x11e7b7 at process virtual address 0x20459000 [ 136.914505][ T4169] Soft offlining pfn 0x11ecb0 at process virtual address 0x2045a000 [ 136.955119][ T4169] Soft offlining pfn 0x11ecb1 at process virtual address 0x2045b000 [ 136.957734][ T4169] Soft offlining pfn 0x11ecb2 at process virtual address 0x2045c000 [ 136.970139][ T4169] Soft offlining pfn 0x11ecb3 at process virtual address 0x2045d000 [ 137.102596][ T5038] netlink: 4 bytes leftover after parsing attributes in process `syz.0.204'. [ 137.133036][ T4169] Soft offlining pfn 0x11ecb4 at process virtual address 0x2045e000 [ 137.151652][ T4169] Soft offlining pfn 0x11ecb5 at process virtual address 0x2045f000 [ 137.154617][ T4169] Soft offlining pfn 0x11ecb6 at process virtual address 0x20460000 [ 137.159845][ T4169] Soft offlining pfn 0x11ecb7 at process virtual address 0x20461000 [ 137.189188][ T4169] Soft offlining pfn 0x11ee08 at process virtual address 0x20462000 [ 137.428748][ T4169] Soft offlining pfn 0x11ee09 at process virtual address 0x20463000 [ 137.746890][ T4169] Soft offlining pfn 0x11ee0a at process virtual address 0x20464000 [ 137.851946][ T4169] Soft offlining pfn 0x11ee0b at process virtual address 0x20465000 [ 137.856624][ T4169] Soft offlining pfn 0x11ee0c at process virtual address 0x20466000 [ 137.860372][ T4169] Soft offlining pfn 0x11ee0d at process virtual address 0x20467000 [ 137.863010][ T4169] Soft offlining pfn 0x11ee0e at process virtual address 0x20468000 [ 137.865602][ T4169] Soft offlining pfn 0x11ee0f at process virtual address 0x20469000 [ 137.869290][ T4169] Soft offlining pfn 0x11e630 at process virtual address 0x2046a000 [ 137.871880][ T4169] Soft offlining pfn 0x11e631 at process virtual address 0x2046b000 [ 137.874526][ T4169] Soft offlining pfn 0x11e632 at process virtual address 0x2046c000 [ 137.879175][ T4169] Soft offlining pfn 0x11e633 at process virtual address 0x2046d000 [ 137.888954][ T4169] Soft offlining pfn 0x11e634 at process virtual address 0x2046e000 [ 137.902679][ T4169] Soft offlining pfn 0x11e635 at process virtual address 0x2046f000 [ 137.915409][ T4169] Soft offlining pfn 0x11e636 at process virtual address 0x20470000 [ 137.917955][ T4169] Soft offlining pfn 0x11e637 at process virtual address 0x20471000 [ 137.938029][ T4169] Soft offlining pfn 0x11ef38 at process virtual address 0x20472000 [ 137.948175][ T4169] Soft offlining pfn 0x11ef39 at process virtual address 0x20473000 [ 137.951192][ T4169] Soft offlining pfn 0x11ef3a at process virtual address 0x20474000 [ 137.999782][ T4169] Soft offlining pfn 0x11ef3b at process virtual address 0x20475000 [ 138.005160][ T4169] Soft offlining pfn 0x11ef3c at process virtual address 0x20476000 [ 138.007905][ T4169] Soft offlining pfn 0x11ef3d at process virtual address 0x20477000 [ 138.014324][ T4169] Soft offlining pfn 0x11ef3e at process virtual address 0x20478000 [ 138.028046][ T4169] Soft offlining pfn 0x11ef3f at process virtual address 0x20479000 [ 138.035923][ T4169] Soft offlining pfn 0x11fa38 at process virtual address 0x2047a000 [ 138.039005][ T4169] Soft offlining pfn 0x11fa39 at process virtual address 0x2047b000 [ 138.049460][ T4169] Soft offlining pfn 0x11fa3a at process virtual address 0x2047c000 [ 138.067341][ T4169] Soft offlining pfn 0x11fa3b at process virtual address 0x2047d000 [ 138.081796][ T4169] Soft offlining pfn 0x11fa3c at process virtual address 0x2047e000 [ 138.109238][ T5049] loop3: detected capacity change from 0 to 2048 [ 138.132063][ T4169] Soft offlining pfn 0x11fa3d at process virtual address 0x2047f000 [ 138.150632][ T5049] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 138.167135][ T4169] Soft offlining pfn 0x11fa3e at process virtual address 0x20480000 [ 138.170565][ T4169] Soft offlining pfn 0x11fa3f at process virtual address 0x20481000 [ 138.173341][ T4169] Soft offlining pfn 0x121dc0 at process virtual address 0x20482000 [ 138.191235][ T4169] Soft offlining pfn 0x121dc1 at process virtual address 0x20483000 [ 138.199016][ T4169] Soft offlining pfn 0x121dc2 at process virtual address 0x20484000 [ 138.225298][ T4169] Soft offlining pfn 0x121dc3 at process virtual address 0x20485000 [ 138.235144][ T4169] Soft offlining pfn 0x121dc4 at process virtual address 0x20486000 [ 138.306338][ T4169] Soft offlining pfn 0x121dc5 at process virtual address 0x20487000 [ 138.391535][ T4169] Soft offlining pfn 0x121dc6 at process virtual address 0x20488000 [ 138.400747][ T4169] Soft offlining pfn 0x121dc7 at process virtual address 0x20489000 [ 138.418814][ T4169] Soft offlining pfn 0x121dc8 at process virtual address 0x2048a000 [ 138.429926][ T4169] Soft offlining pfn 0x121dc9 at process virtual address 0x2048b000 [ 138.440081][ T4169] Soft offlining pfn 0x121dca at process virtual address 0x2048c000 [ 138.449005][ T4169] Soft offlining pfn 0x121dcb at process virtual address 0x2048d000 [ 138.478791][ T4169] Soft offlining pfn 0x121dcc at process virtual address 0x2048e000 [ 138.495900][ T4169] Soft offlining pfn 0x121dcd at process virtual address 0x2048f000 [ 138.515849][ T4169] Soft offlining pfn 0x121dce at process virtual address 0x20490000 [ 138.526479][ T4169] Soft offlining pfn 0x121dcf at process virtual address 0x20491000 [ 138.552363][ T4169] Soft offlining pfn 0x11f970 at process virtual address 0x20492000 [ 138.555450][ T4169] Soft offlining pfn 0x11f971 at process virtual address 0x20493000 [ 138.561476][ T4169] Soft offlining pfn 0x11f972 at process virtual address 0x20494000 [ 138.568943][ T4169] Soft offlining pfn 0x11f973 at process virtual address 0x20495000 [ 138.569695][ T5064] netlink: 'syz.3.207': attribute type 1 has an invalid length. [ 138.583100][ T4169] Soft offlining pfn 0x11f974 at process virtual address 0x20496000 [ 138.597121][ T4169] Soft offlining pfn 0x11f975 at process virtual address 0x20497000 [ 138.613615][ T4169] Soft offlining pfn 0x11f976 at process virtual address 0x20498000 [ 138.628832][ T4169] Soft offlining pfn 0x11f977 at process virtual address 0x20499000 [ 138.638014][ T4169] Soft offlining pfn 0x11f978 at process virtual address 0x2049a000 [ 138.647126][ T4169] Soft offlining pfn 0x11f979 at process virtual address 0x2049b000 [ 138.655225][ T4169] Soft offlining pfn 0x11f97a at process virtual address 0x2049c000 [ 138.661398][ T4169] Soft offlining pfn 0x11f97b at process virtual address 0x2049d000 [ 138.664421][ T4169] Soft offlining pfn 0x11f97c at process virtual address 0x2049e000 [ 138.668374][ T4169] Soft offlining pfn 0x11f97d at process virtual address 0x2049f000 [ 138.850308][ T4169] Soft offlining pfn 0x11f97e at process virtual address 0x204a0000 [ 138.853490][ T4169] Soft offlining pfn 0x11f97f at process virtual address 0x204a1000 [ 138.857720][ T4169] Soft offlining pfn 0x11f7e0 at process virtual address 0x204a2000 [ 138.887870][ T5069] bond2: (slave gretap2): making interface the new active one [ 138.893583][ T4169] Soft offlining pfn 0x11f7e1 at process virtual address 0x204a3000 [ 138.900166][ T5069] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 138.932166][ T4169] Soft offlining pfn 0x11f7e2 at process virtual address 0x204a4000 [ 138.937376][ T4169] Soft offlining pfn 0x11f7e3 at process virtual address 0x204a5000 [ 139.190773][ T4169] Soft offlining pfn 0x11f7e4 at process virtual address 0x204a6000 [ 139.214388][ T4169] Soft offlining pfn 0x11f7e5 at process virtual address 0x204a7000 [ 139.260842][ T4169] Soft offlining pfn 0x11f7e6 at process virtual address 0x204a8000 [ 139.769447][ T4169] Soft offlining pfn 0x11f7e7 at process virtual address 0x204a9000 [ 139.777847][ T4169] Soft offlining pfn 0x11f7e8 at process virtual address 0x204aa000 [ 139.782316][ T4169] Soft offlining pfn 0x11f7e9 at process virtual address 0x204ab000 [ 139.812213][ T4169] Soft offlining pfn 0x11f7ea at process virtual address 0x204ac000 [ 140.048947][ T4169] Soft offlining pfn 0x11f7eb at process virtual address 0x204ad000 [ 140.566988][ T4169] Soft offlining pfn 0x11f7ec at process virtual address 0x204ae000 [ 140.962768][ T4169] Soft offlining pfn 0x11f7ed at process virtual address 0x204af000 [ 140.978745][ T4169] Soft offlining pfn 0x11f7ee at process virtual address 0x204b0000 [ 140.997806][ T4169] Soft offlining pfn 0x11f7ef at process virtual address 0x204b1000 [ 141.019709][ T4169] Soft offlining pfn 0x122430 at process virtual address 0x204b2000 [ 141.829421][ T4169] Soft offlining pfn 0x122431 at process virtual address 0x204b3000 [ 141.846637][ T4169] Soft offlining pfn 0x122432 at process virtual address 0x204b4000 [ 141.854054][ T4169] Soft offlining pfn 0x122433 at process virtual address 0x204b5000 [ 141.925650][ T4169] Soft offlining pfn 0x122434 at process virtual address 0x204b6000 [ 141.931468][ T4169] Soft offlining pfn 0x122435 at process virtual address 0x204b7000 [ 141.935325][ T4169] Soft offlining pfn 0x122436 at process virtual address 0x204b8000 [ 141.949482][ T4169] Soft offlining pfn 0x122437 at process virtual address 0x204b9000 [ 141.951964][ T4169] Soft offlining pfn 0x122438 at process virtual address 0x204ba000 [ 141.954975][ T4169] Soft offlining pfn 0x122439 at process virtual address 0x204bb000 [ 141.973368][ T4169] Soft offlining pfn 0x12243a at process virtual address 0x204bc000 [ 142.000416][ T4169] Soft offlining pfn 0x12243b at process virtual address 0x204bd000 [ 142.009262][ T4169] Soft offlining pfn 0x12243c at process virtual address 0x204be000 [ 142.020771][ T4169] Soft offlining pfn 0x12243d at process virtual address 0x204bf000 [ 142.040874][ T4169] Soft offlining pfn 0x12243e at process virtual address 0x204c0000 [ 142.051882][ T5099] netlink: 4 bytes leftover after parsing attributes in process `syz.2.219'. [ 142.059959][ T4169] Soft offlining pfn 0x12243f at process virtual address 0x204c1000 [ 142.067242][ T4169] Soft offlining pfn 0x121c80 at process virtual address 0x204c2000 [ 142.078986][ T4169] Soft offlining pfn 0x121c81 at process virtual address 0x204c3000 [ 142.108760][ T4169] Soft offlining pfn 0x121c82 at process virtual address 0x204c4000 [ 142.115836][ T4169] Soft offlining pfn 0x121c83 at process virtual address 0x204c5000 [ 142.120744][ T4169] Soft offlining pfn 0x121c84 at process virtual address 0x204c6000 [ 142.129234][ T4169] Soft offlining pfn 0x121c85 at process virtual address 0x204c7000 [ 142.137489][ T4169] Soft offlining pfn 0x121c86 at process virtual address 0x204c8000 [ 142.214002][ T4169] Soft offlining pfn 0x121c87 at process virtual address 0x204c9000 [ 142.217114][ T4169] Soft offlining pfn 0x121c88 at process virtual address 0x204ca000 [ 142.221306][ T4169] Soft offlining pfn 0x121c89 at process virtual address 0x204cb000 [ 142.236050][ T4169] Soft offlining pfn 0x121c8a at process virtual address 0x204cc000 [ 142.274353][ T5102] loop0: detected capacity change from 0 to 4096 [ 142.279033][ T4169] Soft offlining pfn 0x121c8b at process virtual address 0x204cd000 [ 142.281953][ T4169] Soft offlining pfn 0x121c8c at process virtual address 0x204ce000 [ 142.285701][ T4169] Soft offlining pfn 0x121c8d at process virtual address 0x204cf000 [ 142.293909][ T4169] Soft offlining pfn 0x121c8e at process virtual address 0x204d0000 [ 142.305440][ T4169] Soft offlining pfn 0x121c8f at process virtual address 0x204d1000 [ 142.319039][ T4169] Soft offlining pfn 0x121e80 at process virtual address 0x204d2000 [ 142.322999][ T4169] Soft offlining pfn 0x121e81 at process virtual address 0x204d3000 [ 142.327735][ T4169] Soft offlining pfn 0x121e82 at process virtual address 0x204d4000 [ 142.332505][ T5102] ntfs3: Unknown parameter 'windows_names' [ 142.337296][ T4169] Soft offlining pfn 0x121e83 at process virtual address 0x204d5000 [ 142.344377][ T4169] Soft offlining pfn 0x121e84 at process virtual address 0x204d6000 [ 142.349532][ T4169] Soft offlining pfn 0x121e85 at process virtual address 0x204d7000 [ 142.353232][ T4169] Soft offlining pfn 0x121e86 at process virtual address 0x204d8000 [ 142.358179][ T4169] Soft offlining pfn 0x121e87 at process virtual address 0x204d9000 [ 142.363599][ T4169] Soft offlining pfn 0x121e88 at process virtual address 0x204da000 [ 142.377968][ T4169] Soft offlining pfn 0x121e89 at process virtual address 0x204db000 [ 142.395494][ T4169] Soft offlining pfn 0x121e8a at process virtual address 0x204dc000 [ 142.399705][ T4169] Soft offlining pfn 0x121e8b at process virtual address 0x204dd000 [ 142.413448][ T4169] Soft offlining pfn 0x121e8c at process virtual address 0x204de000 [ 142.421345][ T4169] Soft offlining pfn 0x121e8d at process virtual address 0x204df000 [ 142.435852][ T4169] Soft offlining pfn 0x121e8e at process virtual address 0x204e0000 [ 142.448142][ T4169] Soft offlining pfn 0x121e8f at process virtual address 0x204e1000 [ 142.465418][ T4169] Soft offlining pfn 0x11f940 at process virtual address 0x204e2000 [ 142.486439][ T4169] Soft offlining pfn 0x11f941 at process virtual address 0x204e3000 [ 142.495055][ T4169] Soft offlining pfn 0x11f942 at process virtual address 0x204e4000 [ 142.539801][ T4169] Soft offlining pfn 0x11f943 at process virtual address 0x204e5000 [ 142.571743][ T4169] Soft offlining pfn 0x11f944 at process virtual address 0x204e6000 [ 142.575167][ T4169] Soft offlining pfn 0x11f945 at process virtual address 0x204e7000 [ 142.577804][ T4169] Soft offlining pfn 0x11f946 at process virtual address 0x204e8000 [ 142.596067][ T4169] Soft offlining pfn 0x11f947 at process virtual address 0x204e9000 [ 142.606155][ T4169] Soft offlining pfn 0x11f948 at process virtual address 0x204ea000 [ 142.620335][ T4169] Soft offlining pfn 0x11f949 at process virtual address 0x204eb000 [ 142.631009][ T4169] Soft offlining pfn 0x11f94a at process virtual address 0x204ec000 [ 142.651090][ T4169] Soft offlining pfn 0x11f94b at process virtual address 0x204ed000 [ 142.661637][ T4169] Soft offlining pfn 0x11f94c at process virtual address 0x204ee000 [ 142.671149][ T4169] Soft offlining pfn 0x11f94d at process virtual address 0x204ef000 [ 142.683477][ T4169] Soft offlining pfn 0x11f94e at process virtual address 0x204f0000 [ 142.691072][ T4169] Soft offlining pfn 0x11f94f at process virtual address 0x204f1000 [ 142.701111][ T4169] Soft offlining pfn 0x11f950 at process virtual address 0x204f2000 [ 142.718381][ T4169] Soft offlining pfn 0x11f951 at process virtual address 0x204f3000 [ 142.730644][ T4169] Soft offlining pfn 0x11f952 at process virtual address 0x204f4000 [ 142.739721][ T4169] Soft offlining pfn 0x11f953 at process virtual address 0x204f5000 [ 142.757639][ T4169] Soft offlining pfn 0x11f954 at process virtual address 0x204f6000 [ 142.763738][ T4169] Soft offlining pfn 0x11f955 at process virtual address 0x204f7000 [ 142.774867][ T4169] Soft offlining pfn 0x11f956 at process virtual address 0x204f8000 [ 142.790572][ T4169] Soft offlining pfn 0x11f957 at process virtual address 0x204f9000 [ 142.807529][ T4169] Soft offlining pfn 0x11f958 at process virtual address 0x204fa000 [ 142.827332][ T4169] Soft offlining pfn 0x11f959 at process virtual address 0x204fb000 [ 142.839577][ T4169] Soft offlining pfn 0x11f95a at process virtual address 0x204fc000 [ 142.849715][ T4169] Soft offlining pfn 0x11f95b at process virtual address 0x204fd000 [ 143.025918][ T4169] Soft offlining pfn 0x11f95c at process virtual address 0x204fe000 [ 144.454688][ T5126] loop0: detected capacity change from 0 to 64 [ 144.639643][ T4169] Soft offlining pfn 0x11f95d at process virtual address 0x204ff000 [ 144.808899][ T4169] Soft offlining pfn 0x11f95e at process virtual address 0x20500000 [ 144.876751][ T4169] Soft offlining pfn 0x11f95f at process virtual address 0x20501000 [ 144.892566][ T4169] Soft offlining pfn 0x11f920 at process virtual address 0x20502000 [ 144.897481][ T4169] Soft offlining pfn 0x11f921 at process virtual address 0x20503000 [ 145.088806][ T4169] Soft offlining pfn 0x11f922 at process virtual address 0x20504000 [ 145.580247][ T4169] Soft offlining pfn 0x11f923 at process virtual address 0x20505000 [ 145.599044][ T4169] Soft offlining pfn 0x11f924 at process virtual address 0x20506000 [ 145.618820][ T4169] Soft offlining pfn 0x11f925 at process virtual address 0x20507000 [ 145.638821][ T4169] Soft offlining pfn 0x11f926 at process virtual address 0x20508000 [ 145.648753][ T4169] Soft offlining pfn 0x11f927 at process virtual address 0x20509000 [ 145.667929][ T4169] Soft offlining pfn 0x11f928 at process virtual address 0x2050a000 [ 145.689931][ T4169] Soft offlining pfn 0x11f929 at process virtual address 0x2050b000 [ 145.898963][ T4169] Soft offlining pfn 0x11f92a at process virtual address 0x2050c000 [ 146.446892][ T4169] Soft offlining pfn 0x11f92b at process virtual address 0x2050d000 [ 146.708723][ T4169] Soft offlining pfn 0x11f92c at process virtual address 0x2050e000 [ 146.720395][ T4169] Soft offlining pfn 0x11f92d at process virtual address 0x2050f000 [ 146.748705][ T4169] Soft offlining pfn 0x11f92e at process virtual address 0x20510000 [ 146.751601][ T4169] Soft offlining pfn 0x11f92f at process virtual address 0x20511000 [ 146.943091][ T4169] Soft offlining pfn 0x11f930 at process virtual address 0x20512000 [ 146.948794][ T4169] Soft offlining pfn 0x11f931 at process virtual address 0x20513000 [ 146.957813][ T4169] Soft offlining pfn 0x11f932 at process virtual address 0x20514000 [ 146.965625][ T4169] Soft offlining pfn 0x11f933 at process virtual address 0x20515000 [ 147.832794][ T5163] binder: 5157:5163 ioctl c0306201 0 returned -14 [ 148.399056][ T4169] Soft offlining pfn 0x11f934 at process virtual address 0x20516000 [ 148.486753][ T4169] Soft offlining pfn 0x11f935 at process virtual address 0x20517000 [ 148.574917][ T4169] Soft offlining pfn 0x11f936 at process virtual address 0x20518000 [ 148.577578][ T4169] Soft offlining pfn 0x11f937 at process virtual address 0x20519000 [ 148.588844][ T4169] Soft offlining pfn 0x11f938 at process virtual address 0x2051a000 [ 148.603068][ T4169] Soft offlining pfn 0x11f939 at process virtual address 0x2051b000 [ 148.611390][ T4169] Soft offlining pfn 0x11f93a at process virtual address 0x2051c000 [ 148.619826][ T4169] Soft offlining pfn 0x11f93b at process virtual address 0x2051d000 [ 149.318793][ T4169] Soft offlining pfn 0x11f93c at process virtual address 0x2051e000 [ 149.439195][ T4169] Soft offlining pfn 0x11f93d at process virtual address 0x2051f000 [ 149.458447][ T4169] Soft offlining pfn 0x11f93e at process virtual address 0x20520000 [ 149.487626][ T4169] Soft offlining pfn 0x11f93f at process virtual address 0x20521000 [ 149.510998][ T4169] Soft offlining pfn 0x11f7c0 at process virtual address 0x20522000 [ 149.529315][ T4169] Soft offlining pfn 0x11f7c1 at process virtual address 0x20523000 [ 149.535271][ T4169] Soft offlining pfn 0x11f7c2 at process virtual address 0x20524000 [ 149.548882][ T4169] Soft offlining pfn 0x11f7c3 at process virtual address 0x20525000 [ 149.562642][ T4169] Soft offlining pfn 0x11f7c4 at process virtual address 0x20526000 [ 149.565333][ T4169] Soft offlining pfn 0x11f7c5 at process virtual address 0x20527000 [ 149.571347][ T4169] Soft offlining pfn 0x11f7c6 at process virtual address 0x20528000 [ 149.584279][ T4169] Soft offlining pfn 0x11f7c7 at process virtual address 0x20529000 [ 149.592212][ T4169] Soft offlining pfn 0x11f7c8 at process virtual address 0x2052a000 [ 149.601290][ T4169] Soft offlining pfn 0x11f7c9 at process virtual address 0x2052b000 [ 149.605851][ T4169] Soft offlining pfn 0x11f7ca at process virtual address 0x2052c000 [ 149.613923][ T4169] Soft offlining pfn 0x11f7cb at process virtual address 0x2052d000 [ 149.622817][ T4169] Soft offlining pfn 0x11f7cc at process virtual address 0x2052e000 [ 149.634044][ T4169] Soft offlining pfn 0x11f7cd at process virtual address 0x2052f000 [ 149.643039][ T4169] Soft offlining pfn 0x11f7ce at process virtual address 0x20530000 [ 149.656373][ T4169] Soft offlining pfn 0x11f7cf at process virtual address 0x20531000 [ 149.668180][ T4169] Soft offlining pfn 0x11f7d0 at process virtual address 0x20532000 [ 149.679746][ T4169] Soft offlining pfn 0x11f7d1 at process virtual address 0x20533000 [ 149.684341][ T5185] netlink: 20 bytes leftover after parsing attributes in process `syz.2.238'. [ 149.692347][ T4169] Soft offlining pfn 0x11f7d2 at process virtual address 0x20534000 [ 149.696851][ T5185] netlink: 36 bytes leftover after parsing attributes in process `syz.2.238'. [ 149.703078][ T4169] Soft offlining pfn 0x11f7d3 at process virtual address 0x20535000 [ 149.711904][ T4169] Soft offlining pfn 0x11f7d4 at process virtual address 0x20536000 [ 149.723259][ T4169] Soft offlining pfn 0x11f7d5 at process virtual address 0x20537000 [ 149.733397][ T4169] Soft offlining pfn 0x11f7d6 at process virtual address 0x20538000 [ 149.749012][ T4169] Soft offlining pfn 0x11f7d7 at process virtual address 0x20539000 [ 149.759391][ T4169] Soft offlining pfn 0x11f7d8 at process virtual address 0x2053a000 [ 149.767565][ T4169] Soft offlining pfn 0x11f7d9 at process virtual address 0x2053b000 [ 149.785267][ T4169] Soft offlining pfn 0x11f7da at process virtual address 0x2053c000 [ 149.794838][ T4169] Soft offlining pfn 0x11f7db at process virtual address 0x2053d000 [ 149.803040][ T4169] Soft offlining pfn 0x11f7dc at process virtual address 0x2053e000 [ 149.813120][ T4169] Soft offlining pfn 0x11f7dd at process virtual address 0x2053f000 [ 149.822065][ T4169] Soft offlining pfn 0x11f7de at process virtual address 0x20540000 [ 149.829110][ T4169] Soft offlining pfn 0x11f7df at process virtual address 0x20541000 [ 149.842724][ T4169] Soft offlining pfn 0x11f160 at process virtual address 0x20542000 [ 149.854915][ T4169] Soft offlining pfn 0x11f161 at process virtual address 0x20543000 [ 149.864358][ T4169] Soft offlining pfn 0x11f162 at process virtual address 0x20544000 [ 150.088797][ T4169] Soft offlining pfn 0x11f163 at process virtual address 0x20545000 [ 152.068810][ T4169] Soft offlining pfn 0x11f164 at process virtual address 0x20546000 [ 152.277418][ T4169] Soft offlining pfn 0x11f165 at process virtual address 0x20547000 [ 152.295159][ T4169] Soft offlining pfn 0x11f166 at process virtual address 0x20548000 [ 152.304461][ T4169] Soft offlining pfn 0x11f167 at process virtual address 0x20549000 [ 152.332751][ T4169] Soft offlining pfn 0x11f168 at process virtual address 0x2054a000 [ 152.363195][ T4169] Soft offlining pfn 0x11f169 at process virtual address 0x2054b000 [ 152.373787][ T4169] Soft offlining pfn 0x11f16a at process virtual address 0x2054c000 [ 152.538631][ T4169] Soft offlining pfn 0x11f16b at process virtual address 0x2054d000 [ 152.562818][ T4169] Soft offlining pfn 0x11f16c at process virtual address 0x2054e000 [ 152.569268][ T4169] Soft offlining pfn 0x11f16d at process virtual address 0x2054f000 [ 152.572461][ T4169] Soft offlining pfn 0x11f16e at process virtual address 0x20550000 [ 152.583418][ T4169] Soft offlining pfn 0x11f16f at process virtual address 0x20551000 [ 152.599005][ T4169] Soft offlining pfn 0x11f170 at process virtual address 0x20552000 [ 152.613183][ T4169] Soft offlining pfn 0x11f171 at process virtual address 0x20553000 [ 152.981030][ T4169] Soft offlining pfn 0x11f172 at process virtual address 0x20554000 [ 153.358724][ T4169] Soft offlining pfn 0x11f173 at process virtual address 0x20555000 [ 153.408453][ T4169] Soft offlining pfn 0x11f174 at process virtual address 0x20556000 [ 153.412974][ T4169] Soft offlining pfn 0x11f175 at process virtual address 0x20557000 [ 153.415953][ T4169] Soft offlining pfn 0x11f176 at process virtual address 0x20558000 [ 153.442803][ T4169] Soft offlining pfn 0x11f177 at process virtual address 0x20559000 [ 153.454741][ T4169] Soft offlining pfn 0x11f178 at process virtual address 0x2055a000 [ 153.491935][ T4169] Soft offlining pfn 0x11f179 at process virtual address 0x2055b000 [ 154.293806][ T5199] loop0: detected capacity change from 0 to 32768 [ 154.305075][ T4169] Soft offlining pfn 0x11f17a at process virtual address 0x2055c000 [ 154.483930][ T5199] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 154.891121][ T4169] Soft offlining pfn 0x11f17b at process virtual address 0x2055d000 [ 154.894743][ T4169] Soft offlining pfn 0x11f17c at process virtual address 0x2055e000 [ 154.897372][ T4169] Soft offlining pfn 0x11f17d at process virtual address 0x2055f000 [ 154.923708][ T4169] Soft offlining pfn 0x11f17e at process virtual address 0x20560000 [ 154.944921][ T4169] Soft offlining pfn 0x11f17f at process virtual address 0x20561000 [ 154.952566][ T4169] Soft offlining pfn 0x121d80 at process virtual address 0x20562000 [ 154.959379][ T4169] Soft offlining pfn 0x121d81 at process virtual address 0x20563000 [ 155.035073][ T5241] binder: 5238:5241 ioctl c0306201 0 returned -14 [ 155.662085][ T4169] Soft offlining pfn 0x121d82 at process virtual address 0x20564000 [ 155.665147][ T4169] Soft offlining pfn 0x121d83 at process virtual address 0x20565000 [ 155.667830][ T4169] Soft offlining pfn 0x121d84 at process virtual address 0x20566000 [ 155.720673][ T4029] ocfs2: Unmounting device (7,0) on (node local) [ 155.759679][ T4169] Soft offlining pfn 0x121d85 at process virtual address 0x20567000 [ 155.762810][ T4169] Soft offlining pfn 0x121d86 at process virtual address 0x20568000 [ 155.771630][ T4169] Soft offlining pfn 0x121d87 at process virtual address 0x20569000 [ 155.799257][ T4169] Soft offlining pfn 0x121d88 at process virtual address 0x2056a000 [ 155.801901][ T4169] Soft offlining pfn 0x121d89 at process virtual address 0x2056b000 [ 155.829363][ T4169] Soft offlining pfn 0x121d8a at process virtual address 0x2056c000 [ 155.979037][ T4169] Soft offlining pfn 0x121d8b at process virtual address 0x2056d000 [ 156.016599][ T4169] Soft offlining pfn 0x121d8c at process virtual address 0x2056e000 [ 156.022808][ T4169] Soft offlining pfn 0x121d8d at process virtual address 0x2056f000 [ 156.028134][ T4169] Soft offlining pfn 0x121d8e at process virtual address 0x20570000 [ 156.080249][ T4169] Soft offlining pfn 0x121d8f at process virtual address 0x20571000 [ 156.083401][ T4169] Soft offlining pfn 0x121d90 at process virtual address 0x20572000 [ 156.087617][ T4169] Soft offlining pfn 0x121d91 at process virtual address 0x20573000 [ 156.108803][ T4169] Soft offlining pfn 0x121d92 at process virtual address 0x20574000 [ 156.119644][ T4169] Soft offlining pfn 0x121d93 at process virtual address 0x20575000 [ 156.132547][ T4169] Soft offlining pfn 0x121d94 at process virtual address 0x20576000 [ 156.146311][ T4169] Soft offlining pfn 0x121d95 at process virtual address 0x20577000 [ 156.159070][ T4169] Soft offlining pfn 0x121d96 at process virtual address 0x20578000 [ 156.170844][ T5252] loop2: detected capacity change from 0 to 4096 [ 156.179135][ T4169] Soft offlining pfn 0x121d97 at process virtual address 0x20579000 [ 156.191362][ T4169] Soft offlining pfn 0x121d98 at process virtual address 0x2057a000 [ 156.207181][ T4169] Soft offlining pfn 0x121d99 at process virtual address 0x2057b000 [ 156.217877][ T4169] Soft offlining pfn 0x121d9a at process virtual address 0x2057c000 [ 156.244915][ T5252] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 156.249289][ T4169] Soft offlining pfn 0x121d9b at process virtual address 0x2057d000 [ 156.253911][ T4169] Soft offlining pfn 0x121d9c at process virtual address 0x2057e000 [ 156.259106][ T4169] Soft offlining pfn 0x121d9d at process virtual address 0x2057f000 [ 156.270273][ T4169] Soft offlining pfn 0x121d9e at process virtual address 0x20580000 [ 156.305951][ T4169] Soft offlining pfn 0x121d9f at process virtual address 0x20581000 [ 156.323604][ T4169] Soft offlining pfn 0x121da0 at process virtual address 0x20582000 [ 156.393336][ T4169] Soft offlining pfn 0x121da1 at process virtual address 0x20583000 [ 156.503619][ T4169] Soft offlining pfn 0x121da2 at process virtual address 0x20584000 [ 156.506304][ T4169] Soft offlining pfn 0x121da3 at process virtual address 0x20585000 [ 156.509337][ T4169] Soft offlining pfn 0x121da4 at process virtual address 0x20586000 [ 156.519255][ T4169] Soft offlining pfn 0x121da5 at process virtual address 0x20587000 [ 156.530554][ T4169] Soft offlining pfn 0x121da6 at process virtual address 0x20588000 [ 156.533333][ T4169] Soft offlining pfn 0x121da7 at process virtual address 0x20589000 [ 156.546279][ T4169] Soft offlining pfn 0x121da8 at process virtual address 0x2058a000 [ 157.396239][ T4169] Soft offlining pfn 0x121da9 at process virtual address 0x2058b000 [ 157.427213][ T4169] Soft offlining pfn 0x121daa at process virtual address 0x2058c000 [ 157.436289][ T4169] Soft offlining pfn 0x121dab at process virtual address 0x2058d000 [ 157.459678][ T4169] Soft offlining pfn 0x121dac at process virtual address 0x2058e000 [ 157.471974][ T4169] Soft offlining pfn 0x121dad at process virtual address 0x2058f000 [ 157.478813][ T4169] Soft offlining pfn 0x121dae at process virtual address 0x20590000 [ 157.484721][ T4169] Soft offlining pfn 0x121daf at process virtual address 0x20591000 [ 157.502095][ T5276] loop6: detected capacity change from 0 to 256 [ 157.515188][ T4169] Soft offlining pfn 0x121db0 at process virtual address 0x20592000 [ 157.527361][ T4169] Soft offlining pfn 0x121db1 at process virtual address 0x20593000 [ 157.531261][ T4169] Soft offlining pfn 0x121db2 at process virtual address 0x20594000 [ 157.544050][ T4169] Soft offlining pfn 0x121db3 at process virtual address 0x20595000 [ 157.556846][ T4169] Soft offlining pfn 0x121db4 at process virtual address 0x20596000 [ 157.563467][ T5276] exFAT-fs (loop6): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 157.572483][ T4169] Soft offlining pfn 0x121db5 at process virtual address 0x20597000 [ 157.584632][ T4169] Soft offlining pfn 0x121db6 at process virtual address 0x20598000 [ 157.598984][ T4169] Soft offlining pfn 0x121db7 at process virtual address 0x20599000 [ 157.618291][ T4169] Soft offlining pfn 0x121db8 at process virtual address 0x2059a000 [ 157.632300][ T4169] Soft offlining pfn 0x121db9 at process virtual address 0x2059b000 [ 157.644297][ T4169] Soft offlining pfn 0x121dba at process virtual address 0x2059c000 [ 157.655923][ T4169] Soft offlining pfn 0x121dbb at process virtual address 0x2059d000 [ 157.666996][ T4169] Soft offlining pfn 0x121dbc at process virtual address 0x2059e000 [ 157.694923][ T4169] Soft offlining pfn 0x121dbd at process virtual address 0x2059f000 [ 157.705986][ T4169] Soft offlining pfn 0x121dbe at process virtual address 0x205a0000 [ 157.716155][ T4169] Soft offlining pfn 0x121dbf at process virtual address 0x205a1000 [ 157.736995][ T4169] Soft offlining pfn 0x121d40 at process virtual address 0x205a2000 [ 157.910300][ T4169] Soft offlining pfn 0x121d41 at process virtual address 0x205a3000 [ 157.917904][ T4169] Soft offlining pfn 0x121d42 at process virtual address 0x205a4000 [ 157.920924][ T4169] Soft offlining pfn 0x121d43 at process virtual address 0x205a5000 [ 157.932551][ T4169] Soft offlining pfn 0x121d44 at process virtual address 0x205a6000 [ 157.953627][ T4169] Soft offlining pfn 0x121d45 at process virtual address 0x205a7000 [ 158.550932][ T4169] Soft offlining pfn 0x121d46 at process virtual address 0x205a8000 [ 158.746571][ T4169] Soft offlining pfn 0x121d47 at process virtual address 0x205a9000 [ 158.756264][ T4169] Soft offlining pfn 0x121d48 at process virtual address 0x205aa000 [ 158.791404][ T4169] Soft offlining pfn 0x121d49 at process virtual address 0x205ab000 [ 158.798754][ T4169] Soft offlining pfn 0x121d4a at process virtual address 0x205ac000 [ 158.801425][ T4169] Soft offlining pfn 0x121d4b at process virtual address 0x205ad000 [ 158.807328][ T4169] Soft offlining pfn 0x121d4c at process virtual address 0x205ae000 [ 158.810736][ T4169] Soft offlining pfn 0x121d4d at process virtual address 0x205af000 [ 158.865681][ T4169] Soft offlining pfn 0x121d4e at process virtual address 0x205b0000 [ 158.999016][ T4169] Soft offlining pfn 0x121d4f at process virtual address 0x205b1000 [ 159.004515][ T4169] Soft offlining pfn 0x121d50 at process virtual address 0x205b2000 [ 159.010661][ T4169] Soft offlining pfn 0x121d51 at process virtual address 0x205b3000 [ 159.024954][ T4169] Soft offlining pfn 0x121d52 at process virtual address 0x205b4000 [ 159.039507][ T4169] Soft offlining pfn 0x121d53 at process virtual address 0x205b5000 [ 159.042125][ T4169] Soft offlining pfn 0x121d54 at process virtual address 0x205b6000 [ 159.045961][ T4169] Soft offlining pfn 0x121d55 at process virtual address 0x205b7000 [ 159.439819][ T4169] Soft offlining pfn 0x121d56 at process virtual address 0x205b8000 [ 159.680934][ T4169] Soft offlining pfn 0x121d57 at process virtual address 0x205b9000 [ 160.678915][ T4169] Soft offlining pfn 0x121d58 at process virtual address 0x205ba000 [ 160.767789][ T4169] Soft offlining pfn 0x121d59 at process virtual address 0x205bb000 [ 160.787640][ T4169] Soft offlining pfn 0x121d5a at process virtual address 0x205bc000 [ 160.792623][ T4169] Soft offlining pfn 0x121d5b at process virtual address 0x205bd000 [ 160.808822][ T4169] Soft offlining pfn 0x121d5c at process virtual address 0x205be000 [ 160.814413][ T4169] Soft offlining pfn 0x121d5d at process virtual address 0x205bf000 [ 160.828072][ T4169] Soft offlining pfn 0x121d5e at process virtual address 0x205c0000 [ 160.843453][ T4169] Soft offlining pfn 0x121d5f at process virtual address 0x205c1000 [ 161.021511][ T4169] Soft offlining pfn 0x121d60 at process virtual address 0x205c2000 [ 161.025813][ T4169] Soft offlining pfn 0x121d61 at process virtual address 0x205c3000 [ 161.031508][ T4169] Soft offlining pfn 0x121d62 at process virtual address 0x205c4000 [ 161.044579][ T4169] Soft offlining pfn 0x121d63 at process virtual address 0x205c5000 [ 161.899879][ T4169] Soft offlining pfn 0x121d64 at process virtual address 0x205c6000 [ 161.909038][ T4169] Soft offlining pfn 0x121d65 at process virtual address 0x205c7000 [ 161.911556][ T4169] Soft offlining pfn 0x121d66 at process virtual address 0x205c8000 [ 161.925781][ T4169] Soft offlining pfn 0x121d67 at process virtual address 0x205c9000 [ 161.954171][ T4169] Soft offlining pfn 0x121d68 at process virtual address 0x205ca000 [ 161.971307][ T4169] Soft offlining pfn 0x121d69 at process virtual address 0x205cb000 [ 162.088693][ T4169] Soft offlining pfn 0x121d6a at process virtual address 0x205cc000 [ 162.156532][ T4169] Soft offlining pfn 0x121d6b at process virtual address 0x205cd000 [ 162.159939][ T4169] Soft offlining pfn 0x121d6c at process virtual address 0x205ce000 [ 162.163126][ T4169] Soft offlining pfn 0x121d6d at process virtual address 0x205cf000 [ 162.178960][ T4169] Soft offlining pfn 0x121d6e at process virtual address 0x205d0000 [ 162.205064][ T4169] Soft offlining pfn 0x121d6f at process virtual address 0x205d1000 [ 163.030238][ T4169] Soft offlining pfn 0x121d70 at process virtual address 0x205d2000 [ 163.043717][ T4169] Soft offlining pfn 0x121d71 at process virtual address 0x205d3000 [ 163.048970][ T4169] Soft offlining pfn 0x121d72 at process virtual address 0x205d4000 [ 163.058973][ T4169] Soft offlining pfn 0x121d73 at process virtual address 0x205d5000 [ 163.078731][ T4169] Soft offlining pfn 0x121d74 at process virtual address 0x205d6000 [ 163.088327][ T4169] Soft offlining pfn 0x121d75 at process virtual address 0x205d7000 [ 163.110874][ T4169] Soft offlining pfn 0x121d76 at process virtual address 0x205d8000 [ 163.113431][ T4169] Soft offlining pfn 0x121d77 at process virtual address 0x205d9000 [ 163.119006][ T4169] Soft offlining pfn 0x121d78 at process virtual address 0x205da000 [ 163.129377][ T4169] Soft offlining pfn 0x121d79 at process virtual address 0x205db000 [ 163.148674][ T4169] Soft offlining pfn 0x121d7a at process virtual address 0x205dc000 [ 163.158833][ T4169] Soft offlining pfn 0x121d7b at process virtual address 0x205dd000 [ 163.161601][ T4169] Soft offlining pfn 0x121d7c at process virtual address 0x205de000 [ 163.179995][ T4169] Soft offlining pfn 0x121d7d at process virtual address 0x205df000 [ 163.185607][ T4169] Soft offlining pfn 0x121d7e at process virtual address 0x205e0000 [ 163.207608][ T4169] Soft offlining pfn 0x121d7f at process virtual address 0x205e1000 [ 163.224453][ T4169] Soft offlining pfn 0x11f780 at process virtual address 0x205e2000 [ 163.238808][ T4169] Soft offlining pfn 0x11f781 at process virtual address 0x205e3000 [ 163.250617][ T4169] Soft offlining pfn 0x11f782 at process virtual address 0x205e4000 [ 163.268907][ T4169] Soft offlining pfn 0x11f783 at process virtual address 0x205e5000 [ 163.278705][ T4169] Soft offlining pfn 0x11f784 at process virtual address 0x205e6000 [ 163.298922][ T4169] Soft offlining pfn 0x11f785 at process virtual address 0x205e7000 [ 163.308746][ T4169] Soft offlining pfn 0x11f786 at process virtual address 0x205e8000 [ 163.318719][ T4169] Soft offlining pfn 0x11f787 at process virtual address 0x205e9000 [ 163.338701][ T4169] Soft offlining pfn 0x11f788 at process virtual address 0x205ea000 [ 163.346045][ T4169] Soft offlining pfn 0x11f789 at process virtual address 0x205eb000 [ 163.358709][ T4169] Soft offlining pfn 0x11f78a at process virtual address 0x205ec000 [ 163.378849][ T4169] Soft offlining pfn 0x11f78b at process virtual address 0x205ed000 [ 163.388700][ T4169] Soft offlining pfn 0x11f78c at process virtual address 0x205ee000 [ 163.408953][ T4169] Soft offlining pfn 0x11f78d at process virtual address 0x205ef000 [ 163.420066][ T4169] Soft offlining pfn 0x11f78e at process virtual address 0x205f0000 [ 163.428428][ T4169] Soft offlining pfn 0x11f78f at process virtual address 0x205f1000 [ 163.438945][ T4169] Soft offlining pfn 0x11f790 at process virtual address 0x205f2000 [ 163.449603][ T4169] Soft offlining pfn 0x11f791 at process virtual address 0x205f3000 [ 163.456162][ T4169] Soft offlining pfn 0x11f792 at process virtual address 0x205f4000 [ 163.467307][ T5324] loop4: detected capacity change from 0 to 32768 [ 163.473541][ T4169] Soft offlining pfn 0x11f793 at process virtual address 0x205f5000 [ 163.481342][ T4169] Soft offlining pfn 0x11f794 at process virtual address 0x205f6000 [ 163.488129][ T4169] Soft offlining pfn 0x11f795 at process virtual address 0x205f7000 [ 163.496811][ T4169] Soft offlining pfn 0x11f796 at process virtual address 0x205f8000 [ 163.501834][ T5338] loop6: detected capacity change from 0 to 4096 [ 163.507890][ T4169] Soft offlining pfn 0x11f797 at process virtual address 0x205f9000 [ 163.513486][ T5324] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.267 (5324) [ 163.526455][ T4169] Soft offlining pfn 0x11f798 at process virtual address 0x205fa000 [ 163.534803][ T4169] Soft offlining pfn 0x11f799 at process virtual address 0x205fb000 [ 163.548460][ T4169] Soft offlining pfn 0x11f79a at process virtual address 0x205fc000 [ 163.552417][ T5338] ntfs3: loop6: Different NTFS' sector size (1024) and media sector size (512) [ 163.554500][ T5324] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 163.575261][ T5324] BTRFS info (device loop4): setting nodatacow, compression disabled [ 163.577602][ T5324] BTRFS info (device loop4): max_inline at 0 [ 163.580265][ T4169] Soft offlining pfn 0x11f79b at process virtual address 0x205fd000 [ 163.593731][ T5324] BTRFS info (device loop4): enabling disk space caching [ 163.595788][ T5324] BTRFS info (device loop4): turning off barriers [ 163.597562][ T5324] BTRFS info (device loop4): turning on flush-on-commit [ 163.602976][ T4169] Soft offlining pfn 0x11f79c at process virtual address 0x205fe000 [ 163.610077][ T5338] ntfs3: loop6: Failed to load $Extend. [ 163.615071][ T4169] Soft offlining pfn 0x11f79d at process virtual address 0x205ff000 [ 163.648084][ T5324] BTRFS info (device loop4): doing ref verification [ 163.650480][ T5324] BTRFS info (device loop4): force clearing of disk cache [ 163.652527][ T5324] BTRFS info (device loop4): enabling ssd optimizations [ 163.654444][ T5324] BTRFS info (device loop4): max_inline at 4096 [ 163.656116][ T5324] BTRFS info (device loop4): disk space caching is enabled [ 163.690787][ T5324] BTRFS info (device loop4): has skinny extents [ 164.474594][ T5324] BTRFS info (device loop4): clearing free space tree [ 164.477072][ T5324] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 164.494712][ T5324] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 165.073456][ T5341] loop0: detected capacity change from 0 to 32768 [ 166.022029][ T5341] BTRFS: device fsid f8fbafda-0237-42f9-bd6b-a83e6ac3fc88 devid 1 transid 8 /dev/loop0 scanned by syz.0.271 (5341) [ 166.122819][ T5341] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 166.125382][ T5341] BTRFS info (device loop0): using free space tree [ 166.127197][ T5341] BTRFS info (device loop0): has skinny extents [ 166.372987][ T5390] loop6: detected capacity change from 0 to 4096 [ 166.473304][ T5390] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 166.638174][ T5341] BTRFS error (device loop0): open_ctree failed: -12 [ 167.432306][ T1773] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.448679][ T4553] ntfs3: loop6: ntfs_evict_inode r=5 failed, -22. [ 167.535182][ T5430] loop4: detected capacity change from 0 to 512 [ 167.599663][ T5430] EXT4-fs (loop4): Ignoring removed orlov option [ 167.622991][ T5438] loop3: detected capacity change from 0 to 2048 [ 167.642955][ T1773] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.672385][ T4019] BTRFS: device fsid f8fbafda-0237-42f9-bd6b-a83e6ac3fc88 devid 1 transid 8 /dev/loop0 scanned by udevd (4019) [ 167.693258][ T5430] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.273: bg 0: block 411: padding at end of block bitmap is not set [ 167.719287][ T5430] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.273: inode #1: comm syz.4.273: iget: illegal inode # [ 167.758731][ T5430] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.273: error while reading EA inode 1 err=-117 [ 167.766220][ T5430] EXT4-fs (loop4): 1 orphan inode deleted [ 167.767846][ T5430] EXT4-fs (loop4): mounted filesystem without journal. Opts: orlov,nombcache,debug_want_extra_isize=0x000000000000005c,grpquota,barrier,usrjquota=,jqfmt=vfsold,minixdf,,errors=continue. Quota mode: writeback. [ 167.790459][ T5438] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 167.794289][ T5430] EXT4-fs (loop4): shut down requested (2) [ 167.822232][ T5438] fs-verity: sha512 using implementation "sha512-arm64" [ 167.879056][ T1773] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.942194][ T5450] netlink: 'syz.0.280': attribute type 1 has an invalid length. [ 168.232934][ T5454] bond1: (slave gretap1): making interface the new active one [ 168.263848][ T5454] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 168.488478][ T1773] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.909221][ T5495] loop6: detected capacity change from 0 to 64 [ 170.000948][ T5495] hfs: invalid btree extent records (0 size) [ 170.002796][ T5495] hfs: unable to open catalog tree [ 170.004478][ T5495] hfs: can't find a HFS filesystem on dev loop6 [ 172.216083][ T5486] loop2: detected capacity change from 0 to 32768 [ 173.142119][ T5521] loop3: detected capacity change from 0 to 1024 [ 173.193484][ T5525] netlink: 'syz.4.296': attribute type 1 has an invalid length. [ 173.256588][ T5530] bond1: (slave gretap1): making interface the new active one [ 173.259965][ T5530] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 173.315306][ T5532] loop6: detected capacity change from 0 to 164 [ 173.448707][ T5532] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 173.520060][ T5532] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 174.182456][ T25] Bluetooth: hci1: command 0x0406 tx timeout [ 174.237980][ T25] Bluetooth: hci4: command 0x0406 tx timeout [ 174.345558][ T25] Bluetooth: hci2: command 0x0406 tx timeout [ 174.431026][ T25] Bluetooth: hci3: command 0x0406 tx timeout [ 177.029141][ T5570] netlink: 'syz.3.305': attribute type 1 has an invalid length. [ 177.145610][ T5583] netlink: 60 bytes leftover after parsing attributes in process `syz.6.307'. [ 177.210561][ T5570] 8021q: adding VLAN 0 to HW filter on device bond3 [ 177.363043][ T5575] 8021q: adding VLAN 0 to HW filter on device bond3 [ 177.387487][ T5575] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 177.400068][ T5575] bond3: (slave vxcan3): Error -22 calling dev_set_mtu [ 177.478099][ T5583] netlink: 60 bytes leftover after parsing attributes in process `syz.6.307'. [ 177.481216][ T5582] netlink: 60 bytes leftover after parsing attributes in process `syz.6.307'. [ 177.512973][ T5588] netlink: 'syz.2.308': attribute type 1 has an invalid length. [ 177.770060][ T5594] bond1: (slave gretap1): making interface the new active one [ 177.793944][ T5594] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 178.376795][ T5614] binder: 5605:5614 ioctl c0306201 0 returned -14 [ 181.279815][ T5636] loop2: detected capacity change from 0 to 256 [ 181.516650][ T5635] mkiss: ax0: crc mode is auto. [ 181.521941][ T5636] exfat: Unknown parameter 'keep_last_dots' [ 181.619699][ T5647] Zero length message leads to an empty skb [ 182.284391][ T5659] loop4: detected capacity change from 0 to 4096 [ 182.379389][ T5659] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 182.418627][ T1773] device hsr_slave_0 left promiscuous mode [ 183.717605][ T5673] binder: 5665:5673 ioctl c0306201 0 returned -14 [ 184.038842][ T1773] device hsr_slave_1 left promiscuous mode [ 184.529959][ T5685] loop0: detected capacity change from 0 to 256 [ 184.538798][ T1773] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.541128][ T1773] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.839252][ T1773] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.936874][ T1773] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.368923][ T1773] device bridge_slave_1 left promiscuous mode [ 185.370488][ T5685] exfat: Unknown parameter 'keep_last_dots' [ 185.370791][ T1773] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.519811][ T1773] device bridge_slave_0 left promiscuous mode [ 185.521854][ T1773] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.670348][ T5685] loop0: detected capacity change from 0 to 32768 [ 185.784013][ T5690] syz.0.333 uses obsolete (PF_INET,SOCK_PACKET) [ 185.898905][ T1773] device veth1_macvtap left promiscuous mode [ 185.920967][ T1773] device veth0_macvtap left promiscuous mode [ 185.922841][ T1773] device veth1_vlan left promiscuous mode [ 185.924531][ T1773] device veth0_vlan left promiscuous mode [ 187.719225][ T1773] team0 (unregistering): Port device team_slave_1 removed [ 187.751275][ T1773] team0 (unregistering): Port device team_slave_0 removed [ 187.773721][ T5704] loop2: detected capacity change from 0 to 1024 [ 187.776759][ T1773] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 187.785709][ T5704] hfsplus: gid requires an argument [ 187.788282][ T5704] hfsplus: unable to parse mount options [ 187.849564][ T1773] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.117222][ T1773] bond0 (unregistering): Released all slaves [ 188.836174][ T5727] binder: 5720:5727 ioctl c0306201 0 returned -14 [ 192.556838][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 192.559616][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.139151][ T5783] loop2: detected capacity change from 0 to 512 [ 194.010167][ T5783] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 195.557836][ T5798] loop0: detected capacity change from 0 to 512 [ 195.670185][ T5798] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 195.815056][ T5798] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e11c, mo2=0002] [ 195.817844][ T5798] System zones: 1-12 [ 195.820483][ T5798] EXT4-fs (loop0): orphan cleanup on readonly fs [ 195.860483][ T5798] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.361: invalid indirect mapped block 12 (level 1) [ 195.946324][ T5798] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.361: invalid indirect mapped block 2 (level 2) [ 195.957887][ T5798] EXT4-fs (loop0): 1 truncate cleaned up [ 196.058904][ T5798] EXT4-fs (loop0): mounted filesystem without journal. Opts: noinit_itable,jqfmt=vfsv1,noload,errors=remount-ro,errors=continue. Quota mode: none. [ 196.791586][ T5822] loop6: detected capacity change from 0 to 256 [ 196.897299][ T5822] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 203.784694][ T5899] netlink: 20 bytes leftover after parsing attributes in process `syz.0.384'. [ 204.706564][ T5899] device hsr_slave_1 left promiscuous mode [ 205.036285][ T5908] loop6: detected capacity change from 0 to 128 [ 205.148892][ T5891] loop4: detected capacity change from 0 to 32768 [ 208.193126][ T5947] netlink: 12 bytes leftover after parsing attributes in process `syz.4.392'. [ 213.496824][ T5997] udc-core: couldn't find an available UDC or it's busy [ 213.548363][ T5997] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 216.628693][ T6031] loop2: detected capacity change from 0 to 4096 [ 216.834495][ T6042] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 219.249062][ T6068] ODEBUG: Out of memory. ODEBUG disabled [ 220.270065][ T6068] syz.0.424 (6068): drop_caches: 2 [ 220.314119][ T6076] loop6: detected capacity change from 0 to 256 [ 223.859437][ T5398] Bluetooth: hci5: command 0x0405 tx timeout [ 224.091819][ T6130] loop4: detected capacity change from 0 to 256 [ 224.144268][ T6130] exfat: Deprecated parameter 'utf8' [ 224.146966][ T6130] exfat: Deprecated parameter 'namecase' [ 224.156128][ T6130] exfat: Deprecated parameter 'namecase' [ 224.157967][ T6130] exfat: Deprecated parameter 'utf8' [ 224.949933][ T6130] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0xc16fde0e, utbl_chksum : 0xe619d30d) [ 226.017000][ T7] Bluetooth: hci5: command 0x0406 tx timeout [ 231.232844][ T6198] udc-core: couldn't find an available UDC or it's busy [ 231.234787][ T6198] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 231.949078][ T6204] xt_CT: No such helper "netbios-ns" [ 235.222108][ T6234] binder: 6227:6234 ioctl c0306201 0 returned -14 [ 236.433647][ T6243] netlink: 'syz.4.464': attribute type 25 has an invalid length. [ 240.663859][ T6267] loop6: detected capacity change from 0 to 128 [ 243.454733][ T6305] loop6: detected capacity change from 0 to 16 [ 243.812029][ T6305] erofs: (device loop6): mounted with root inode @ nid 36. [ 243.941731][ T6305] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 244.533614][ T5396] Bluetooth: hci0: command 0x0409 tx timeout [ 245.477044][ T6305] erofs: (device loop6): z_erofs_lz4_decompress: failed to decompress -3 in[47, 4049] out[1851] [ 245.482307][ T6305] erofs: (device loop6): z_erofs_readpage: failed to read, err [-117] [ 247.032999][ T4147] Bluetooth: hci0: command 0x041b tx timeout [ 249.653027][ T4097] Bluetooth: hci0: command 0x040f tx timeout [ 249.680124][ T4199] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.480586][ T6359] loop3: detected capacity change from 0 to 128 [ 250.511721][ T6357] loop2: detected capacity change from 0 to 16 [ 250.530611][ T4199] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.543211][ T6359] ufs: You didn't specify the type of your ufs filesystem [ 250.543211][ T6359] [ 250.543211][ T6359] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 250.543211][ T6359] [ 250.543211][ T6359] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 250.580180][ T6359] ufs: ufstype=old is supported read-only [ 250.603675][ T6357] erofs: (device loop2): check_layout_compatibility: unidentified incompatible feature f8, please upgrade kernel version [ 250.616131][ T6359] ufs: ufs_fill_super(): fragment size 3263967611 is not a power of 2 [ 250.825367][ T4199] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.098975][ T4097] Bluetooth: hci0: command 0x0419 tx timeout [ 252.643258][ T6389] loop4: detected capacity change from 0 to 1024 [ 252.660536][ T4199] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.744755][ T6286] chnl_net:caif_netlink_parms(): no params data found [ 253.739312][ T6389] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,errors=remount-ro,. Quota mode: none. [ 253.980810][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 253.982668][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.437757][ T6422] loop2: detected capacity change from 0 to 4096 [ 255.453273][ T6424] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input2 [ 255.836439][ T6286] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.838387][ T6286] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.841835][ T6286] device bridge_slave_0 entered promiscuous mode [ 255.847830][ T6422] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 255.898857][ T6286] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.901184][ T6286] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.904371][ T6286] device bridge_slave_1 entered promiscuous mode [ 255.917543][ T6422] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 255.947253][ T6422] ntfs3: loop2: Failed to load $Extend. [ 256.090072][ T6286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.114359][ T6286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.055124][ T6286] team0: Port device team_slave_0 added [ 257.088939][ T6286] team0: Port device team_slave_1 added [ 257.240268][ T6460] netlink: 8 bytes leftover after parsing attributes in process `syz.6.512'. [ 257.920019][ T6286] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.922094][ T6286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.966885][ T6286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.669517][ T6286] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.671848][ T6286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.718644][ T6286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.143102][ T6482] loop6: detected capacity change from 0 to 4096 [ 262.002073][ T6504] loop3: detected capacity change from 0 to 2048 [ 262.081521][ T6286] device hsr_slave_0 entered promiscuous mode [ 262.130106][ T6286] device hsr_slave_1 entered promiscuous mode [ 262.742993][ T6504] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 262.895168][ T6515] loop4: detected capacity change from 0 to 256 [ 263.084414][ T6515] exfat: Unknown parameter 'keep_last_dots' [ 265.386215][ T6286] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 266.318981][ T4199] bond1: (slave gretap1): Releasing active interface [ 266.495499][ T6286] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 266.540560][ T6286] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 266.581605][ T6286] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 266.846457][ T6545] loop4: detected capacity change from 0 to 32768 [ 266.922233][ T6545] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.529 (6545) [ 266.934277][ T6286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.960681][ T6545] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 266.963142][ T6545] BTRFS info (device loop4): using free space tree [ 266.965116][ T6545] BTRFS info (device loop4): has skinny extents [ 266.974037][ T5472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 266.976764][ T5472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 266.989775][ T6286] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.070274][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 267.109348][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 267.119015][ T4573] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.121012][ T4573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.165036][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 267.178991][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 267.207842][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 267.229038][ T4573] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.231152][ T4573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.234170][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 267.297209][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 269.337968][ T6286] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 269.410085][ T6286] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 269.416332][ T1773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 269.421690][ T1773] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 269.424893][ T1773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 269.427954][ T1773] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 269.484784][ T1773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 269.501929][ T1773] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 269.509968][ T1773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 269.519609][ T1773] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 269.523314][ T1773] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 269.529545][ T1773] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 269.605575][ T6545] BTRFS error (device loop4): open_ctree failed: -22 [ 269.628940][ T6607] loop3: detected capacity change from 0 to 1024 [ 269.659774][ T6607] hfsplus: creator requires a 4 character value [ 269.662364][ T6607] hfsplus: unable to parse mount options [ 271.387178][ T6623] loop2: detected capacity change from 0 to 512 [ 271.406843][ T4199] device hsr_slave_0 left promiscuous mode [ 271.759507][ T4199] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.761909][ T4199] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.764614][ T4199] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.766823][ T4199] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.782705][ T4199] device bridge_slave_1 left promiscuous mode [ 271.784708][ T4199] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.817404][ T6623] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2228: inode #15: comm syz.2.540: corrupted in-inode xattr [ 271.823505][ T6623] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.540: couldn't read orphan inode 15 (err -117) [ 271.958938][ T6623] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,,errors=continue. Quota mode: none. [ 271.972520][ T4199] device bridge_slave_0 left promiscuous mode [ 271.974534][ T4199] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.027120][ T6623] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.540: dx entry: limit 0 != root limit 125 [ 272.049392][ T6623] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.540: Corrupt directory, running e2fsck is recommended [ 272.858927][ T4199] device veth1_macvtap left promiscuous mode [ 272.864194][ T4199] device veth0_macvtap left promiscuous mode [ 273.114607][ T6656] loop2: detected capacity change from 0 to 512 [ 273.159633][ T6656] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 273.163215][ T6656] EXT4-fs (loop2): group descriptors corrupted! [ 274.259741][ T6650] loop6: detected capacity change from 0 to 32768 [ 274.301223][ T6650] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.544 (6650) [ 274.487406][ T6650] BTRFS info (device loop6): using crc32c (crc32c-generic) checksum algorithm [ 274.503002][ T6650] BTRFS info (device loop6): setting nodatacow, compression disabled [ 274.505351][ T6650] BTRFS info (device loop6): max_inline at 0 [ 274.507144][ T6650] BTRFS info (device loop6): turning off barriers [ 274.529338][ T6650] BTRFS info (device loop6): turning on flush-on-commit [ 274.531818][ T6650] BTRFS info (device loop6): doing ref verification [ 274.540089][ T4199] bond1 (unregistering): Released all slaves [ 274.549053][ T6650] BTRFS info (device loop6): force clearing of disk cache [ 274.551264][ T6650] BTRFS info (device loop6): enabling ssd optimizations [ 274.580746][ T6650] BTRFS info (device loop6): max_inline at 4096 [ 274.600542][ T6650] BTRFS info (device loop6): using free space tree [ 274.602401][ T6650] BTRFS info (device loop6): has skinny extents [ 274.773310][ T4199] team0 (unregistering): Port device team_slave_1 removed [ 274.795470][ T4199] team0 (unregistering): Port device team_slave_0 removed [ 274.839668][ T4199] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 274.894764][ T4199] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 274.909937][ T6650] BTRFS info (device loop6): clearing free space tree [ 274.912527][ T6650] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 274.915627][ T6650] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 274.935515][ T6650] BTRFS info (device loop6): creating free space tree [ 274.962185][ T6650] BTRFS info (device loop6): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 274.964763][ T6650] BTRFS info (device loop6): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 275.045013][ T6686] loop4: detected capacity change from 0 to 1024 [ 275.118365][ T6686] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 275.120893][ T6686] EXT4-fs (loop4): Ignoring removed bh option [ 275.163932][ T6686] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x000000000000000a,data_err=ignore,grpquota,nomblk_io_submit,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 275.195729][ T4199] bond0 (unregistering): Released all slaves [ 275.467366][ T6286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.475113][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 275.477521][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 276.410101][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 276.413143][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 276.430552][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 276.433619][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 276.436909][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 276.469636][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 276.483951][ T6286] device veth0_vlan entered promiscuous mode [ 276.505261][ T6286] device veth1_vlan entered promiscuous mode [ 276.664802][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 276.667916][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 276.671419][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 276.682505][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 276.711658][ T6286] device veth0_macvtap entered promiscuous mode [ 276.721111][ T6286] device veth1_macvtap entered promiscuous mode [ 276.747496][ T6286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.758474][ T6286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.768090][ T6286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.777601][ T6286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.786063][ T6286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.793344][ T6286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.802644][ T6286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.812201][ T6286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.831212][ T6286] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 276.847212][ T6286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.865109][ T6286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.877788][ T6286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.894804][ T6286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.904258][ T6286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.913820][ T6286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.923203][ T6286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.936213][ T6286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.948824][ T6286] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.965066][ T6286] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.970860][ T6286] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.975366][ T6286] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.978018][ T6286] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.982446][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 276.985567][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 276.989453][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 277.002216][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 277.005636][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 277.015553][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 277.206299][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.210117][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.227450][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 277.323022][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.325774][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.343845][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 278.280915][ T6717] loop2: detected capacity change from 0 to 32768 [ 278.365788][ T6749] loop7: detected capacity change from 0 to 256 [ 279.469129][ T6749] exfat: Deprecated parameter 'utf8' [ 279.470752][ T6749] exfat: Deprecated parameter 'namecase' [ 279.472498][ T6749] exfat: Deprecated parameter 'utf8' [ 279.489247][ T6717] JBD2: Ignoring recovery information on journal [ 279.555343][ T6749] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 279.581316][ T6717] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 279.677584][ T6759] loop3: detected capacity change from 0 to 1764 [ 279.718193][ T4033] ocfs2: Unmounting device (7,2) on (node local) [ 279.956749][ T6749] overlayfs: unrecognized mount option "#uNԙ:SBݨuԃzP*RoM}~4@Hh40Fi84ޡ48Oh"MI4&dBShM4f" or missing value [ 281.635363][ T6794] loop3: detected capacity change from 0 to 256 [ 281.669897][ T6795] netlink: 8 bytes leftover after parsing attributes in process `syz.6.568'. [ 282.533347][ T6799] loop6: detected capacity change from 0 to 2048 [ 282.666274][ T6799] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 284.301729][ T6826] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 284.313394][ T6826] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 287.299109][ T6881] loop4: detected capacity change from 0 to 2048 [ 287.362528][ T6881] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 287.496493][ T6890] loop2: detected capacity change from 0 to 128 [ 287.559840][ T6890] ufs: You didn't specify the type of your ufs filesystem [ 287.559840][ T6890] [ 287.559840][ T6890] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 287.559840][ T6890] [ 287.559840][ T6890] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 287.610445][ T6890] ufs: ufstype=old is supported read-only [ 287.637028][ T6890] ufs: ufs_fill_super(): fragment size 3263967611 is not a power of 2 [ 291.807865][ T6926] loop2: detected capacity change from 0 to 16 [ 292.592584][ T6926] erofs: (device loop2): mounted with root inode @ nid 36. [ 292.614105][ T6925] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 292.618694][ T6925] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -3 in[47, 4049] out[1851] [ 292.623700][ T6925] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 292.634823][ T6925] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 292.637661][ T6925] erofs: (device loop2): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 292.640287][ T6925] erofs: (device loop2): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 292.642889][ T6925] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 292.645531][ T6925] erofs: (device loop2): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 292.648061][ T6925] erofs: (device loop2): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 292.650570][ T6925] erofs: (device loop2): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 292.653481][ T6925] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 292.656073][ T6925] erofs: (device loop2): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 292.658918][ T6925] erofs: (device loop2): z_erofs_readahead: readahead error at page 27 @ nid 36 [ 292.661492][ T6925] erofs: (device loop2): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 292.664104][ T6925] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 106495 of nid 36 [ 292.666935][ T6925] erofs: (device loop2): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 292.669510][ T6925] erofs: (device loop2): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 292.672196][ T6925] erofs: (device loop2): z_erofs_extent_lookback: unknown type 3 @ lcn 15 of nid 36 [ 292.674762][ T6925] erofs: (device loop2): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 292.678557][ T6925] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 65535 of nid 36 [ 292.681326][ T6925] erofs: (device loop2): z_erofs_readahead: readahead error at page 15 @ nid 36 [ 292.684249][ T6925] attempt to access beyond end of device [ 292.684249][ T6925] loop2: rw=524288, want=848, limit=16 [ 292.687287][ T6925] attempt to access beyond end of device [ 292.687287][ T6925] loop2: rw=524288, want=13478624104, limit=16 [ 292.690980][ T6925] attempt to access beyond end of device [ 292.690980][ T6925] loop2: rw=524288, want=13478624080, limit=16 [ 292.695595][ T6925] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 360447 of nid 36 [ 292.698525][ T6925] erofs: (device loop2): z_erofs_readahead: readahead error at page 87 @ nid 36 [ 292.701027][ T6925] erofs: (device loop2): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 292.703475][ T6925] erofs: (device loop2): z_erofs_extent_lookback: unknown type 3 @ lcn 84 of nid 36 [ 292.706184][ T6925] erofs: (device loop2): z_erofs_readahead: readahead error at page 85 @ nid 36 [ 292.708794][ T6925] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 348159 of nid 36 [ 292.711451][ T6925] erofs: (device loop2): z_erofs_readahead: readahead error at page 84 @ nid 36 [ 292.713819][ T6925] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 344063 of nid 36 [ 292.716595][ T6925] erofs: (device loop2): z_erofs_readahead: readahead error at page 83 @ nid 36 [ 292.719032][ T6925] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 292.721668][ T6925] erofs: (device loop2): z_erofs_readahead: readahead error at page 82 @ nid 36 [ 292.724238][ T6925] erofs: (device loop2): z_erofs_readahead: readahead error at page 81 @ nid 36 [ 292.726765][ T6925] erofs: (device loop2): z_erofs_readahead: readahead error at page 80 @ nid 36 [ 292.729272][ T6925] erofs: (device loop2): z_erofs_readahead: readahead error at page 79 @ nid 36 [ 292.731809][ T6925] erofs: (device loop2): z_erofs_readahead: readahead error at page 78 @ nid 36 [ 292.734306][ T6925] erofs: (device loop2): z_erofs_readahead: readahead error at page 77 @ nid 36 [ 292.736892][ T6925] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 315391 of nid 36 [ 292.739637][ T6925] erofs: (device loop2): z_erofs_readahead: readahead error at page 76 @ nid 36 [ 292.742025][ T6925] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 292.744593][ T6925] erofs: (device loop2): z_erofs_readahead: readahead error at page 75 @ nid 36 [ 292.747250][ T6925] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 307199 of nid 36 [ 292.750077][ T6925] erofs: (device loop2): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 292.752624][ T6925] erofs: (device loop2): z_erofs_readahead: readahead error at page 73 @ nid 36 [ 292.755387][ T6925] erofs: (device loop2): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 292.758244][ T6925] erofs: (device loop2): z_erofs_readahead: readahead error at page 71 @ nid 36 [ 292.760652][ T6925] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 290815 of nid 36 [ 292.763290][ T6925] erofs: (device loop2): z_erofs_readahead: readahead error at page 70 @ nid 36 [ 292.765932][ T6925] erofs: (device loop2): z_erofs_extent_lookback: unknown type 3 @ lcn 64 of nid 36 [ 292.768565][ T6925] erofs: (device loop2): z_erofs_readahead: readahead error at page 65 @ nid 36 [ 292.771139][ T6925] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 266239 of nid 36 [ 292.773940][ T6925] erofs: (device loop2): z_erofs_readahead: readahead error at page 64 @ nid 36 [ 292.776377][ T6925] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 262143 of nid 36 [ 292.779129][ T6925] erofs: (device loop2): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 292.781688][ T6925] erofs: (device loop2): z_erofs_readahead: readahead error at page 61 @ nid 36 [ 292.784086][ T6925] erofs: (device loop2): z_erofs_readahead: readahead error at page 60 @ nid 36 [ 292.787048][ T6925] erofs: (device loop2): z_erofs_readahead: readahead error at page 59 @ nid 36 [ 292.790778][ T6925] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 292.793656][ T6925] erofs: (device loop2): z_erofs_readahead: readahead error at page 58 @ nid 36 [ 292.796459][ T6925] erofs: (device loop2): z_erofs_readahead: readahead error at page 57 @ nid 36 [ 292.799864][ T6925] erofs: (device loop2): z_erofs_readahead: readahead error at page 56 @ nid 36 [ 292.802839][ T6925] erofs: (device loop2): z_erofs_readahead: readahead error at page 55 @ nid 36 [ 292.805933][ T6925] erofs: (device loop2): z_erofs_readahead: readahead error at page 54 @ nid 36 [ 292.808849][ T6925] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 221183 of nid 36 [ 292.811589][ T6925] erofs: (device loop2): z_erofs_readahead: readahead error at page 53 @ nid 36 [ 292.814157][ T6925] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 217087 of nid 36 [ 292.817074][ T6925] erofs: (device loop2): z_erofs_readahead: readahead error at page 52 @ nid 36 [ 292.819723][ T6925] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 212991 of nid 36 [ 292.823185][ T6925] erofs: (device loop2): z_erofs_readahead: readahead error at page 51 @ nid 36 [ 292.825787][ T6925] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 208895 of nid 36 [ 292.828550][ T6925] erofs: (device loop2): z_erofs_readahead: readahead error at page 50 @ nid 36 [ 292.831196][ T6925] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 204799 of nid 36 [ 292.833982][ T6925] erofs: (device loop2): z_erofs_readahead: readahead error at page 49 @ nid 36 [ 292.836593][ T6925] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 200703 of nid 36 [ 292.839409][ T6925] erofs: (device loop2): z_erofs_readahead: readahead error at page 48 @ nid 36 [ 292.841929][ T6925] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 196607 of nid 36 [ 292.846718][ T6925] erofs: (device loop2): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 292.849274][ T6925] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 292.851826][ T6925] erofs: (device loop2): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 292.854456][ T6925] erofs: (device loop2): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 292.857027][ T6925] erofs: (device loop2): z_erofs_readahead: readahead error at page 44 @ nid 36 [ 292.859781][ T6925] attempt to access beyond end of device [ 292.859781][ T6925] loop2: rw=524288, want=40, limit=16 [ 292.862892][ T6925] attempt to access beyond end of device [ 292.862892][ T6925] loop2: rw=524288, want=96, limit=16 [ 292.866096][ T6925] attempt to access beyond end of device [ 292.866096][ T6925] loop2: rw=524288, want=32, limit=16 [ 293.459499][ T6937] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input3 [ 293.995591][ T6943] loop2: detected capacity change from 0 to 4096 [ 301.259001][ T7007] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input4 [ 302.344501][ T7014] loop4: detected capacity change from 0 to 256 [ 304.190144][ T7034] loop3: detected capacity change from 0 to 512 [ 305.439036][ T7034] EXT4-fs (loop3): mounted filesystem without journal. Opts: nolazytime,,errors=continue. Quota mode: writeback. [ 307.671092][ T7055] loop4: detected capacity change from 0 to 32768 [ 307.735018][ T7055] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 307.831904][ T7055] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 307.933358][ T4031] ocfs2: Unmounting device (7,4) on (node local) [ 308.390251][ T7093] loop4: detected capacity change from 0 to 256 [ 309.267009][ T7101] netlink: 'syz.2.626': attribute type 25 has an invalid length. [ 309.673507][ T4480] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 309.772527][ T7109] loop4: detected capacity change from 0 to 4096 [ 309.800056][ T4480] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.802508][ T4480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.513915][ T7123] syz.2.635 (7123): drop_caches: 2 [ 310.515866][ T7123] syz.2.635 (7123): drop_caches: 2 [ 311.101531][ T7137] loop6: detected capacity change from 0 to 512 [ 311.401389][ T7137] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -13 [ 311.404772][ T7137] EXT4-fs error (device loop6): ext4_orphan_get:1401: inode #13: comm syz.6.639: iget: bad i_size value: 12154757448730 [ 311.440196][ T7137] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.639: couldn't read orphan inode 13 (err -117) [ 311.460464][ T7137] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsold,stripe=0x000000000000ffff,sysvgroups,jqfmt=vfsold,nouid32,grpjquota=.,errors=continue. Quota mode: writeback. [ 311.557263][ T7137] EXT4-fs (loop6): shut down requested (1) [ 311.865422][ T7160] loop4: detected capacity change from 0 to 4096 [ 312.075353][ T4031] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 312.077679][ T4031] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 312.926709][ T7159] loop6: detected capacity change from 0 to 32768 [ 312.976220][ T7159] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop6 scanned by syz.6.645 (7159) [ 313.008314][ T7159] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 313.010998][ T7159] BTRFS info (device loop6): turning off barriers [ 313.012980][ T7159] BTRFS warning (device loop6): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 313.016062][ T7159] BTRFS info (device loop6): trying to use backup root at mount time [ 313.018364][ T7159] BTRFS info (device loop6): ignoring bad roots [ 313.020096][ T7159] BTRFS info (device loop6): doing ref verification [ 313.027263][ T7159] BTRFS info (device loop6): turning on async discard [ 313.029450][ T7159] BTRFS info (device loop6): setting nodatasum [ 313.032969][ T7159] BTRFS info (device loop6): setting nodatacow, compression disabled [ 313.035269][ T7159] BTRFS info (device loop6): turning on flush-on-commit [ 313.037262][ T7159] BTRFS info (device loop6): using free space tree [ 313.039133][ T7159] BTRFS info (device loop6): has skinny extents [ 313.419549][ T7159] BTRFS info (device loop6): enabling ssd optimizations [ 314.891853][ T7246] loop6: detected capacity change from 0 to 4096 [ 314.951116][ T7246] ntfs3: Unknown parameter 'windows_names' [ 315.005771][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 315.007550][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.296775][ T7287] loop4: detected capacity change from 0 to 32768 [ 317.344223][ T7289] Unknown status report in ack skb [ 318.029916][ T7283] loop3: detected capacity change from 0 to 32768 [ 318.123948][ T7283] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.671 (7283) [ 318.361204][ T7283] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 318.363876][ T7283] BTRFS info (device loop3): turning off barriers [ 318.365688][ T7283] BTRFS info (device loop3): setting nodatasum [ 318.386695][ T7283] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 318.411133][ T7283] BTRFS info (device loop3): use zstd compression, level 3 [ 318.417676][ T7283] BTRFS info (device loop3): using free space tree [ 318.435755][ T7283] BTRFS info (device loop3): has skinny extents [ 319.279496][ T7297] loop4: detected capacity change from 0 to 32768 [ 319.369135][ T7297] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.676 (7297) [ 319.565525][ T7297] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 319.568497][ T7297] BTRFS info (device loop4): using free space tree [ 319.570374][ T7297] BTRFS info (device loop4): has skinny extents [ 320.035499][ T7297] BTRFS info (device loop4): enabling ssd optimizations [ 320.119822][ T7297] BTRFS info (device loop4): setting compat-ro feature flag for VERITY (0x4) [ 320.372528][ T7356] loop6: detected capacity change from 0 to 32768 [ 320.489741][ T7356] [ 320.489741][ T7356] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 320.489741][ T7356] [ 320.690379][ T7356] [ 320.690379][ T7356] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 320.690379][ T7356] [ 320.710016][ T7356] [ 320.710016][ T7356] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 320.710016][ T7356] [ 320.781933][ T7356] [ 320.781933][ T7356] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 320.781933][ T7356] [ 320.812724][ T240] [ 320.812724][ T240] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 320.812724][ T240] [ 320.829263][ T7371] [ 320.829263][ T7371] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 320.829263][ T7371] [ 320.853321][ T7371] [ 320.853321][ T7371] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 320.853321][ T7371] [ 320.856462][ T7371] [ 320.856462][ T7371] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 320.856462][ T7371] [ 320.894901][ T240] [ 320.894901][ T240] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 320.894901][ T240] [ 321.035497][ T7381] loop2: detected capacity change from 0 to 512 [ 321.060901][ T4553] [ 321.060901][ T4553] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 321.060901][ T4553] [ 321.067823][ T4553] [ 321.067823][ T4553] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 321.067823][ T4553] [ 321.121281][ T7381] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 322.775292][ T7369] loop4: detected capacity change from 0 to 32768 [ 322.795094][ T7369] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.686 (7369) [ 323.146082][ T7398] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 324.086092][ T7398] loop2: detected capacity change from 0 to 32768 [ 324.104483][ T7369] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 324.107538][ T7369] BTRFS info (device loop4): turning off barriers [ 324.109614][ T7369] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 324.112546][ T7369] BTRFS info (device loop4): trying to use backup root at mount time [ 324.149250][ T7398] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.693 (7398) [ 324.154531][ T7369] BTRFS info (device loop4): ignoring bad roots [ 324.156563][ T7369] BTRFS info (device loop4): doing ref verification [ 324.158924][ T7369] BTRFS info (device loop4): turning on async discard [ 324.161195][ T7369] BTRFS info (device loop4): setting nodatasum [ 324.176458][ T7369] BTRFS info (device loop4): setting nodatacow, compression disabled [ 324.179181][ T7369] BTRFS info (device loop4): turning on flush-on-commit [ 324.181499][ T7369] BTRFS info (device loop4): using free space tree [ 324.200693][ T7398] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 324.203780][ T7398] BTRFS info (device loop2): force zlib compression, level 3 [ 324.206031][ T7398] BTRFS info (device loop2): force clearing of disk cache [ 324.208012][ T7398] BTRFS info (device loop2): setting nodatasum [ 324.209757][ T7398] BTRFS info (device loop2): use zlib compression, level 3 [ 324.212122][ T7398] BTRFS info (device loop2): allowing degraded mounts [ 324.214619][ T7398] BTRFS info (device loop2): enabling disk space caching [ 324.216671][ T7398] BTRFS info (device loop2): disk space caching is enabled [ 324.218765][ T7398] BTRFS info (device loop2): has skinny extents [ 324.262638][ T7369] BTRFS info (device loop4): has skinny extents [ 324.303429][ T7369] BTRFS error (device loop4): open_ctree failed: -12 [ 324.514003][ T6434] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by udevd (6434) [ 324.615665][ T4471] BTRFS warning (device loop2): checksum verify failed on 1052672 wanted 0xdff074e1be93285e found 0xfdeaf60d7ef5dcea level 0 [ 324.622717][ T7398] BTRFS error (device loop2): failed to read chunk root [ 325.248476][ T7398] BTRFS error (device loop2): open_ctree failed: -22 [ 329.306055][ T7515] udc-core: couldn't find an available UDC or it's busy [ 329.308145][ T7515] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 330.414521][ T7543] loop3: detected capacity change from 0 to 512 [ 330.478963][ T7543] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 330.522302][ T7544] loop4: detected capacity change from 0 to 512 [ 331.236248][ T7544] EXT2-fs (loop4): error: couldn't mount because of unsupported optional features (18400) [ 331.467110][ T7556] udc-core: couldn't find an available UDC or it's busy [ 331.469293][ T7556] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 332.621766][ T7594] vcan0: tx drop: invalid sa for name 0x0000000000000004 [ 333.237729][ T7612] netlink: 'syz.6.728': attribute type 25 has an invalid length. [ 334.058225][ T7617] loop3: detected capacity change from 0 to 512 [ 334.099390][ T7617] EXT2-fs (loop3): error: couldn't mount because of unsupported optional features (18400) [ 336.975739][ T7678] netlink: 'syz.7.741': attribute type 25 has an invalid length. [ 338.386088][ T7693] loop3: detected capacity change from 0 to 128 [ 341.607000][ T7741] netlink: 'syz.4.754': attribute type 25 has an invalid length. [ 342.626936][ T7747] udc-core: couldn't find an available UDC or it's busy [ 343.207025][ T7747] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 345.811866][ T7771] loop2: detected capacity change from 0 to 128 [ 346.826795][ T7799] udc-core: couldn't find an available UDC or it's busy [ 346.828867][ T7799] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 346.862286][ T7799] input: syz0 as /devices/virtual/input/input5 [ 349.039929][ T7826] netlink: 'syz.3.783': attribute type 25 has an invalid length. [ 351.473561][ T7862] netlink: 'syz.3.796': attribute type 39 has an invalid length. [ 351.581055][ T7873] netlink: 12 bytes leftover after parsing attributes in process `syz.7.799'. [ 351.607119][ T7875] syz.2.800 sent an empty control message without MSG_MORE. [ 353.223541][ T7879] loop6: detected capacity change from 0 to 128 [ 353.246125][ T7873] 8021q: adding VLAN 0 to HW filter on device bond1 [ 353.416655][ T7876] netlink: 'syz.4.795': attribute type 25 has an invalid length. [ 354.226394][ T7904] device syzkaller1 entered promiscuous mode [ 355.247375][ T7918] binder: 7916:7918 ioctl 801c581f 20000480 returned -22 [ 355.289546][ T7918] binder: 7916:7918 tried to acquire reference to desc 0, got 1 instead [ 355.293568][ T7918] binder: 7916:7918 transaction failed 29201/-28, size 0-0 line 3085 [ 355.327492][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 355.600535][ T7925] netlink: 'syz.3.814': attribute type 25 has an invalid length. [ 358.089662][ T7952] binder: 7951:7952 ioctl c0306201 0 returned -14 [ 358.135803][ T7952] netlink: 7 bytes leftover after parsing attributes in process `syz.2.824'. [ 358.339054][ T7958] netlink: 68 bytes leftover after parsing attributes in process `syz.6.827'. [ 358.384099][ T7958] udc-core: couldn't find an available UDC or it's busy [ 358.386108][ T7958] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 358.843177][ T7966] netlink: 'syz.4.828': attribute type 25 has an invalid length. [ 361.184820][ T8001] loop6: detected capacity change from 0 to 2048 [ 361.332553][ T8001] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 363.516573][ T8012] netlink: 'syz.6.841': attribute type 25 has an invalid length. [ 364.072353][ T8026] netlink: 64 bytes leftover after parsing attributes in process `syz.4.847'. [ 365.379043][ T8036] loop4: detected capacity change from 0 to 2048 [ 365.609391][ T8036] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 365.793663][ T8051] netlink: 'syz.7.853': attribute type 25 has an invalid length. [ 366.977312][ T8059] tipc: Started in network mode [ 366.993417][ T8059] tipc: Node identity 3a000000000040120000006e70000001, cluster identity 4711 [ 366.996032][ T8059] tipc: Enabling of bearer rejected, failed to enable media [ 368.599110][ T8077] netlink: 8 bytes leftover after parsing attributes in process `syz.6.865'. [ 368.615595][ T8077] udc-core: couldn't find an available UDC or it's busy [ 368.626258][ T8077] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 369.109401][ T8086] udc-core: couldn't find an available UDC or it's busy [ 369.111572][ T8086] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 369.403245][ T8086] udc-core: couldn't find an available UDC or it's busy [ 369.405514][ T8086] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 369.528202][ T8090] netlink: 'syz.6.868': attribute type 25 has an invalid length. [ 371.570399][ T8107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.873'. [ 373.235719][ T8125] netlink: 'syz.6.880': attribute type 25 has an invalid length. [ 374.043387][ T7435] Bluetooth: hci0: command 0x0405 tx timeout [ 376.009506][ T8154] netlink: 'syz.2.891': attribute type 25 has an invalid length. [ 376.725452][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 376.735257][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 377.269205][ T8173] loop2: detected capacity change from 0 to 2048 [ 377.335035][ T8173] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 378.678747][ T8199] netlink: 'syz.4.903': attribute type 25 has an invalid length. [ 379.511205][ T8202] netlink: 8 bytes leftover after parsing attributes in process `syz.6.901'. [ 380.600440][ T8218] can: request_module (can-proto-4) failed. [ 382.043778][ T8237] netlink: 'syz.6.915': attribute type 25 has an invalid length. [ 384.347170][ T8279] netlink: 'syz.2.932': attribute type 25 has an invalid length. [ 384.765052][ T26] audit: type=1326 audit(385.171:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8286 comm="syz.6.934" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95e999a8 code=0x7ffc0000 [ 384.777126][ T26] audit: type=1326 audit(385.181:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8286 comm="syz.6.934" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff95e999a8 code=0x7ffc0000 [ 384.788345][ T8284] netlink: 8 bytes leftover after parsing attributes in process `syz.7.926'. [ 384.803624][ T26] audit: type=1326 audit(385.201:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8286 comm="syz.6.934" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95e999a8 code=0x7ffc0000 [ 384.857430][ T26] audit: type=1326 audit(385.201:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8286 comm="syz.6.934" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95e999a8 code=0x7ffc0000 [ 384.878340][ T26] audit: type=1326 audit(385.201:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8286 comm="syz.6.934" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff95e999a8 code=0x7ffc0000 [ 384.899287][ T26] audit: type=1326 audit(385.201:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8286 comm="syz.6.934" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95e999a8 code=0x7ffc0000 [ 384.934189][ T26] audit: type=1326 audit(385.201:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8286 comm="syz.6.934" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95e999a8 code=0x7ffc0000 [ 385.016583][ T26] audit: type=1326 audit(385.201:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8286 comm="syz.6.934" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffff95e999a8 code=0x7ffc0000 [ 385.033319][ T26] audit: type=1326 audit(385.201:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8286 comm="syz.6.934" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95e999a8 code=0x7ffc0000 [ 385.047812][ T26] audit: type=1326 audit(385.201:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8286 comm="syz.6.934" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95e999a8 code=0x7ffc0000 [ 387.453208][ T8320] udc-core: couldn't find an available UDC or it's busy [ 387.455223][ T8320] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 387.679861][ T8324] netlink: 20 bytes leftover after parsing attributes in process `syz.4.946'. [ 387.963910][ T8327] netlink: 'syz.4.947': attribute type 25 has an invalid length. [ 388.246368][ T8342] udc-core: couldn't find an available UDC or it's busy [ 388.261242][ T8342] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 390.183020][ T8371] loop6: detected capacity change from 0 to 7 [ 390.212004][ T8371] Dev loop6: unable to read RDB block 7 [ 390.218133][ T8371] loop6: AHDI p1 p2 p3 p4 [ 390.219461][ T8371] loop6: partition table partially beyond EOD, truncated [ 390.252238][ T8371] loop6: p1 start 926365495 is beyond EOD, truncated [ 390.254367][ T8371] loop6: p2 size 47 extends beyond EOD, truncated [ 390.275258][ T8371] loop6: p3 start 1886353253 is beyond EOD, truncated [ 390.281583][ T8375] device gre1 entered promiscuous mode [ 390.404345][ T6434] udevd[6434]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 390.554235][ T8382] netlink: 'syz.7.965': attribute type 25 has an invalid length. [ 391.704663][ T8406] loop2: detected capacity change from 0 to 2048 [ 391.826696][ T8406] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 392.048387][ T8423] netlink: 'syz.6.981': attribute type 1 has an invalid length. [ 392.920401][ T8429] netlink: 'syz.6.983': attribute type 25 has an invalid length. [ 393.897668][ T8457] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 393.900491][ T8457] IPv6: NLM_F_CREATE should be set when creating new route [ 393.987268][ T8458] netlink: 8 bytes leftover after parsing attributes in process `syz.6.990'. [ 394.361512][ T8466] loop4: detected capacity change from 0 to 2048 [ 394.440451][ T8466] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 395.583454][ T8479] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 395.777284][ T8479] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 395.806036][ T8479] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 395.900036][ T8479] device bridge_slave_0 left promiscuous mode [ 395.934897][ T8479] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.748452][ T8479] device bridge_slave_1 left promiscuous mode [ 396.777537][ T8479] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.872802][ T8479] bond0: (slave bond_slave_0): Releasing backup interface [ 397.126366][ T8479] bond0: (slave bond_slave_1): Releasing backup interface [ 397.437606][ T8479] team0: Port device team_slave_0 removed [ 397.452615][ T8479] team0: Port device team_slave_1 removed [ 397.454932][ T8479] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 397.458135][ T8479] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 397.462153][ T8479] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 397.464532][ T8479] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 397.744076][ T8479] bond1: (slave gretap1): Releasing active interface [ 398.587633][ T8479] bond2: (slave gretap2): Releasing active interface [ 398.724858][ T8489] netlink: 'syz.6.1000': attribute type 25 has an invalid length. [ 400.439308][ T8520] capability: warning: `syz.7.1010' uses deprecated v2 capabilities in a way that may be insecure [ 403.234469][ T8551] netlink: 'syz.2.1017': attribute type 25 has an invalid length. [ 404.778093][ T8567] tipc: Failed to obtain node identity [ 404.779855][ T8567] tipc: Enabling of bearer rejected, failed to enable media [ 404.856858][ T8567] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1025'. [ 406.607673][ T8592] netlink: 'syz.2.1032': attribute type 25 has an invalid length. [ 407.282846][ T8604] loop3: detected capacity change from 0 to 2048 [ 408.107023][ T8604] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 409.590964][ T8639] netlink: 'syz.6.1047': attribute type 25 has an invalid length. [ 409.616094][ T4432] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.975579][ T4432] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.060228][ T4432] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.142394][ T4432] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.607994][ T8641] chnl_net:caif_netlink_parms(): no params data found [ 410.885481][ T8641] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.906549][ T8641] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.909458][ T8641] device bridge_slave_0 entered promiscuous mode [ 410.966393][ T8641] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.976608][ T8641] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.987054][ T8641] device bridge_slave_1 entered promiscuous mode [ 411.097911][ T8641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.102837][ T8641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.218125][ T8641] team0: Port device team_slave_0 added [ 411.222132][ T8641] team0: Port device team_slave_1 added [ 411.376027][ T8641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.387657][ T8641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.394996][ T8641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.431662][ T8641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.433650][ T8641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.460531][ T8641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 411.574220][ T8681] loop4: detected capacity change from 0 to 2048 [ 411.648765][ T8641] device hsr_slave_0 entered promiscuous mode [ 411.677302][ T8641] device hsr_slave_1 entered promiscuous mode [ 411.716683][ T8641] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 411.718864][ T8641] Cannot create hsr debugfs directory [ 411.722202][ T8681] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 412.048754][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 412.131332][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 412.131348][ T26] audit: type=1326 audit(412.542:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8655 comm="syz.6.1050" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95e999a8 code=0x7ffc0000 [ 412.147370][ T26] audit: type=1326 audit(412.542:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8655 comm="syz.6.1050" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95e999a8 code=0x7ffc0000 [ 412.182531][ T26] audit: type=1326 audit(412.572:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8655 comm="syz.6.1050" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff95fad7fc code=0x7ffc0000 [ 412.220248][ T26] audit: type=1326 audit(412.572:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8655 comm="syz.6.1050" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff95fad7fc code=0x7ffc0000 [ 412.240413][ T26] audit: type=1326 audit(412.582:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8655 comm="syz.6.1050" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff95fad7fc code=0x7ffc0000 [ 412.270057][ T26] audit: type=1326 audit(412.582:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8655 comm="syz.6.1050" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff95fad7fc code=0x7ffc0000 [ 412.276088][ T26] audit: type=1326 audit(412.582:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8655 comm="syz.6.1050" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff95fad7fc code=0x7ffc0000 [ 412.329076][ T26] audit: type=1326 audit(412.582:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8655 comm="syz.6.1050" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff95fad7fc code=0x7ffc0000 [ 412.335707][ T26] audit: type=1326 audit(412.582:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8655 comm="syz.6.1050" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff95fad7fc code=0x7ffc0000 [ 412.402724][ T26] audit: type=1326 audit(412.592:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8655 comm="syz.6.1050" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff95fad7fc code=0x7ffc0000 [ 412.949486][ T4432] device hsr_slave_0 left promiscuous mode [ 412.989721][ T4432] device hsr_slave_1 left promiscuous mode [ 413.166526][ T4432] device veth1_macvtap left promiscuous mode [ 413.168495][ T4432] device veth0_macvtap left promiscuous mode [ 413.171294][ T4432] device veth1_vlan left promiscuous mode [ 413.173011][ T4432] device veth0_vlan left promiscuous mode [ 413.501538][ T4432] bond3 (unregistering): Released all slaves [ 413.513024][ T4432] bond2 (unregistering): Released all slaves [ 413.533496][ T4432] bond1 (unregistering): Released all slaves [ 414.126487][ T5398] Bluetooth: hci1: command 0x041b tx timeout [ 414.146121][ T4432] bond0 (unregistering): Released all slaves [ 414.273476][ T8738] netlink: 'syz.2.1070': attribute type 25 has an invalid length. [ 414.572655][ T8750] loop2: detected capacity change from 0 to 2048 [ 414.583546][ T8641] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 414.619470][ T8641] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 414.670573][ T8641] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 414.711204][ T8641] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 414.717801][ T8750] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 414.891125][ T8765] tipc: Cannot configure node identity twice [ 415.084687][ T8641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 415.102102][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 415.105225][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 415.144044][ T8641] 8021q: adding VLAN 0 to HW filter on device team0 [ 415.177752][ T5472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 415.180684][ T5472] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 415.183331][ T5472] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.185395][ T5472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.197455][ T5472] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 415.202123][ T5472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 415.208553][ T5472] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 415.214610][ T5472] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.216877][ T5472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.228280][ T5472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 415.253157][ T5472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 415.264522][ T5472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 415.274737][ T5472] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 415.292290][ T5472] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 415.298234][ T5472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 415.304765][ T5472] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 415.409603][ T5472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 415.432818][ T5472] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 415.435783][ T5472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 415.445357][ T5472] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 416.195387][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 416.206413][ T5398] Bluetooth: hci1: command 0x040f tx timeout [ 416.306010][ T8802] netlink: 156 bytes leftover after parsing attributes in process `syz.7.1084'. [ 416.593479][ T8812] netlink: 'syz.6.1085': attribute type 4 has an invalid length. [ 416.772415][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 416.780300][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 416.802311][ T8641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 416.870964][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 416.874093][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 416.918815][ T5472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 416.922057][ T5472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 416.937471][ T5472] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 416.949931][ T5472] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 416.962579][ T8641] device veth0_vlan entered promiscuous mode [ 416.988756][ T8641] device veth1_vlan entered promiscuous mode [ 417.053303][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 417.056532][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 417.069231][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 417.083498][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 417.102026][ T8641] device veth0_macvtap entered promiscuous mode [ 417.115690][ T8641] device veth1_macvtap entered promiscuous mode [ 417.165422][ T8641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.175332][ T8641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.195646][ T8641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.205801][ T8641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.215978][ T8641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.224634][ T8641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.237980][ T8641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.240864][ T8641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.257743][ T8641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 417.369360][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 417.372516][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 417.380797][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 417.394628][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 417.409963][ T8641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.413010][ T8641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.415760][ T8641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.455784][ T8641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.462270][ T8849] loop4: detected capacity change from 0 to 2048 [ 417.464820][ T8641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.476294][ T8641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.479164][ T8641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.482080][ T8641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.514236][ T8641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 417.531227][ T5472] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 417.534393][ T5472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 417.551946][ T8849] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 417.557150][ T8641] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.568509][ T8641] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.607990][ T8641] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.626014][ T8641] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.870165][ T4471] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.872935][ T4471] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.883050][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 417.953093][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.962449][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.996759][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 418.991385][ T3607] Bluetooth: hci1: command 0x0419 tx timeout [ 419.410350][ T8889] udc-core: couldn't find an available UDC or it's busy [ 419.412388][ T8889] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 419.798118][ T8898] netlink: 'syz.3.1102': attribute type 25 has an invalid length. [ 420.692853][ T26] kauditd_printk_skb: 1860 callbacks suppressed [ 420.692870][ T26] audit: type=1326 audit(421.102:1890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8875 comm="syz.7.1097" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff8ce0d7fc code=0x7ffc0000 [ 420.706783][ T26] audit: type=1326 audit(421.102:1891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8875 comm="syz.7.1097" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff8ce0d7fc code=0x7ffc0000 [ 420.725343][ T26] audit: type=1326 audit(421.102:1892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8875 comm="syz.7.1097" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff8ce0d7fc code=0x7ffc0000 [ 420.760319][ T26] audit: type=1326 audit(421.102:1893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8875 comm="syz.7.1097" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff8ce0d7fc code=0x7ffc0000 [ 420.801729][ T26] audit: type=1326 audit(421.102:1894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8875 comm="syz.7.1097" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff8ce0d7fc code=0x7ffc0000 [ 420.829280][ T26] audit: type=1326 audit(421.102:1895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8875 comm="syz.7.1097" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff8ce0d7fc code=0x7ffc0000 [ 420.866295][ T26] audit: type=1326 audit(421.102:1896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8875 comm="syz.7.1097" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff8ce0d7fc code=0x7ffc0000 [ 420.893496][ T26] audit: type=1326 audit(421.102:1897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8875 comm="syz.7.1097" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff8ce0d7fc code=0x7ffc0000 [ 420.920805][ T26] audit: type=1326 audit(421.102:1898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8875 comm="syz.7.1097" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff8ce0d7fc code=0x7ffc0000 [ 420.949703][ T26] audit: type=1326 audit(421.102:1899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8875 comm="syz.7.1097" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff8ce0d7fc code=0x7ffc0000 [ 422.181574][ T8936] netlink: 'syz.3.1114': attribute type 25 has an invalid length. [ 422.801794][ T8944] raw_sendmsg: syz.3.1116 forgot to set AF_INET. Fix it! [ 424.526264][ T3607] Bluetooth: hci0: command 0x0406 tx timeout [ 424.630053][ T8959] loop2: detected capacity change from 0 to 2048 [ 424.727117][ T8959] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 426.167516][ T8981] netlink: 'syz.4.1126': attribute type 6 has an invalid length. [ 427.251139][ T9002] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1135'. [ 429.659940][ T26] kauditd_printk_skb: 821 callbacks suppressed [ 429.659954][ T26] audit: type=1326 audit(430.072:2721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9027 comm="syz.2.1144" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff944807fc code=0x7ffc0000 [ 429.689481][ T26] audit: type=1326 audit(430.102:2722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9027 comm="syz.2.1144" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff944807fc code=0x7ffc0000 [ 429.695486][ T26] audit: type=1326 audit(430.102:2723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9027 comm="syz.2.1144" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff944807fc code=0x7ffc0000 [ 429.724810][ T9048] snd_dummy snd_dummy.0: control 4:2:0:syz0:211 is already present [ 429.726547][ T26] audit: type=1326 audit(430.102:2724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9027 comm="syz.2.1144" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff944807fc code=0x7ffc0000 [ 429.759297][ T26] audit: type=1326 audit(430.102:2725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9027 comm="syz.2.1144" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff944807fc code=0x7ffc0000 [ 429.765516][ T26] audit: type=1326 audit(430.102:2726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9027 comm="syz.2.1144" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff944807fc code=0x7ffc0000 [ 429.806254][ T26] audit: type=1326 audit(430.102:2727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9027 comm="syz.2.1144" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff944807fc code=0x7ffc0000 [ 429.812150][ T26] audit: type=1326 audit(430.102:2728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9027 comm="syz.2.1144" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff944807fc code=0x7ffc0000 [ 429.868480][ T26] audit: type=1326 audit(430.102:2729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9027 comm="syz.2.1144" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff944807fc code=0x7ffc0000 [ 429.874585][ T26] audit: type=1326 audit(430.102:2730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9027 comm="syz.2.1144" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff944807fc code=0x7ffc0000 [ 430.047638][ T9052] usb usb1: usbfs: process 9052 (syz.4.1153) did not claim interface 0 before use [ 430.179377][ T9056] netlink: 668 bytes leftover after parsing attributes in process `syz.3.1156'. [ 430.613783][ T9068] udc-core: couldn't find an available UDC or it's busy [ 430.615939][ T9068] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 431.324359][ T9076] netlink: 'syz.4.1163': attribute type 4 has an invalid length. [ 431.326829][ T9076] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1163'. [ 431.345412][ T9076] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 431.676250][ T9090] input: syz0 as /devices/virtual/input/input6 [ 431.696776][ T9092] usb usb8: usbfs: process 9092 (syz.3.1169) did not claim interface 0 before use [ 432.994905][ T9109] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1174'. [ 433.010920][ T9109] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1174'. [ 433.172287][ T9113] tmpfs: Unknown parameter 'f' [ 433.523079][ T9128] tipc: Started in network mode [ 433.524573][ T9128] tipc: Node identity 40000000000040120000006e70000001, cluster identity 4711 [ 433.531618][ T9128] tipc: Enabling of bearer rejected, failed to enable media [ 437.823743][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 437.825602][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 438.306078][ T9200] usb usb8: usbfs: process 9200 (syz.6.1206) did not claim interface 0 before use [ 439.691268][ T9236] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1222'. [ 440.054599][ T9242] loop3: detected capacity change from 0 to 2048 [ 440.166592][ T9242] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 440.424143][ T9247] loop3: detected capacity change from 0 to 2048 [ 440.448292][ T9250] usb usb8: usbfs: process 9250 (syz.4.1226) did not claim interface 0 before use [ 440.527166][ T9247] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 441.348727][ T9259] [ 441.349592][ T9259] ====================================================== [ 441.351583][ T9259] WARNING: possible circular locking dependency detected [ 441.353533][ T9259] 5.15.186-syzkaller #0 Not tainted [ 441.354996][ T9259] ------------------------------------------------------ [ 441.356870][ T9259] syz.4.1229/9259 is trying to acquire lock: [ 441.358602][ T9259] ffff0000ef380910 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0xcc/0x1bc [ 441.361881][ T9259] [ 441.361881][ T9259] but task is already holding lock: [ 441.364221][ T9259] ffff0000d7638c60 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x1f4/0x568 [ 441.367225][ T9259] [ 441.367225][ T9259] which lock already depends on the new lock. [ 441.367225][ T9259] [ 441.370728][ T9259] [ 441.370728][ T9259] the existing dependency chain (in reverse order) is: [ 441.373744][ T9259] [ 441.373744][ T9259] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 441.375943][ T9259] lock_sock_nested+0xd8/0x1d4 [ 441.377522][ T9259] smc_listen_out+0x11c/0x3e8 [ 441.379035][ T9259] smc_listen_work+0x1d0/0xd2c [ 441.380552][ T9259] process_one_work+0x79c/0x1140 [ 441.382134][ T9259] worker_thread+0x8f4/0x101c [ 441.383646][ T9259] kthread+0x374/0x454 [ 441.385048][ T9259] ret_from_fork+0x10/0x20 [ 441.386421][ T9259] [ 441.386421][ T9259] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 441.389330][ T9259] __lock_acquire+0x2928/0x651c [ 441.390913][ T9259] lock_acquire+0x1f4/0x620 [ 441.392326][ T9259] __flush_work+0xf4/0x1bc [ 441.393904][ T9259] __cancel_work_timer+0x2ec/0x448 [ 441.395591][ T9259] cancel_work_sync+0x24/0x38 [ 441.397163][ T9259] smc_clcsock_release+0x64/0xe8 [ 441.398838][ T9259] __smc_release+0x3bc/0x530 [ 441.400375][ T9259] smc_close_non_accepted+0xdc/0x298 [ 441.402125][ T9259] smc_close_active+0x890/0xc20 [ 441.403715][ T9259] __smc_release+0x2dc/0x530 [ 441.405114][ T9259] smc_release+0x264/0x568 [ 441.406485][ T9259] sock_close+0xb4/0x1f8 [ 441.407857][ T9259] __fput+0x1c0/0x7f8 [ 441.409140][ T9259] ____fput+0x20/0x30 [ 441.410356][ T9259] task_work_run+0x12c/0x1e0 [ 441.412067][ T9259] do_notify_resume+0x24b4/0x3128 [ 441.413800][ T9259] el0_svc+0xf0/0x1e0 [ 441.415070][ T9259] el0t_64_sync_handler+0xcc/0xe4 [ 441.416856][ T9259] el0t_64_sync+0x1a0/0x1a4 [ 441.418205][ T9259] [ 441.418205][ T9259] other info that might help us debug this: [ 441.418205][ T9259] [ 441.421812][ T9259] Possible unsafe locking scenario: [ 441.421812][ T9259] [ 441.424560][ T9259] CPU0 CPU1 [ 441.426154][ T9259] ---- ---- [ 441.427704][ T9259] lock(sk_lock-AF_SMC/1); [ 441.429000][ T9259] lock((work_completion)(&new_smc->smc_listen_work)); [ 441.432123][ T9259] lock(sk_lock-AF_SMC/1); [ 441.434464][ T9259] lock((work_completion)(&new_smc->smc_listen_work)); [ 441.436402][ T9259] [ 441.436402][ T9259] *** DEADLOCK *** [ 441.436402][ T9259] [ 441.438750][ T9259] 2 locks held by syz.4.1229/9259: [ 441.440157][ T9259] #0: ffff0000dcb18210 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x7c/0x1f8 [ 441.443031][ T9259] #1: ffff0000d7638c60 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x1f4/0x568 [ 441.445768][ T9259] [ 441.445768][ T9259] stack backtrace: [ 441.447367][ T9259] CPU: 0 PID: 9259 Comm: syz.4.1229 Not tainted 5.15.186-syzkaller #0 [ 441.449671][ T9259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 441.452518][ T9259] Call trace: [ 441.453394][ T9259] dump_backtrace+0x0/0x43c [ 441.454717][ T9259] show_stack+0x2c/0x3c [ 441.455994][ T9259] __dump_stack+0x30/0x40 [ 441.457193][ T9259] dump_stack_lvl+0xf8/0x160 [ 441.458650][ T9259] dump_stack+0x1c/0x5c [ 441.460027][ T9259] print_circular_bug+0x148/0x1b0 [ 441.461612][ T9259] check_noncircular+0x240/0x2d4 [ 441.463179][ T9259] __lock_acquire+0x2928/0x651c [ 441.464675][ T9259] lock_acquire+0x1f4/0x620 [ 441.466101][ T9259] __flush_work+0xf4/0x1bc [ 441.467485][ T9259] __cancel_work_timer+0x2ec/0x448 [ 441.469093][ T9259] cancel_work_sync+0x24/0x38 [ 441.470606][ T9259] smc_clcsock_release+0x64/0xe8 [ 441.472204][ T9259] __smc_release+0x3bc/0x530 [ 441.473519][ T9259] smc_close_non_accepted+0xdc/0x298 [ 441.475174][ T9259] smc_close_active+0x890/0xc20 [ 441.476531][ T9259] __smc_release+0x2dc/0x530 [ 441.477871][ T9259] smc_release+0x264/0x568 [ 441.479092][ T9259] sock_close+0xb4/0x1f8 [ 441.480309][ T9259] __fput+0x1c0/0x7f8 [ 441.481500][ T9259] ____fput+0x20/0x30 [ 441.482709][ T9259] task_work_run+0x12c/0x1e0 [ 441.483959][ T9259] do_notify_resume+0x24b4/0x3128 [ 441.485365][ T9259] el0_svc+0xf0/0x1e0 [ 441.486468][ T9259] el0t_64_sync_handler+0xcc/0xe4 [ 441.487906][ T9259] el0t_64_sync+0x1a0/0x1a4