last executing test programs: 5m59.866088573s ago: executing program 3 (id=591): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x48000) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x30, r4, 0x5, 0x70bd2e, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x44840}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x2b, 'cpu'}]}, 0x5) 5m57.935050019s ago: executing program 3 (id=599): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x221a, 0x4) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000b00)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x20008090}, 0x8000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000a40)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000b40)=""/195, 0xc3, 0x1, 0x0}, &(0x7f0000000a80)=0x40) close_range(r0, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4008010) 5m57.791797041s ago: executing program 3 (id=603): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0xa, 0x1}, @flat=@binder={0x73622a85, 0x1000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f00000034c0)={0x2020}, 0xcac) 5m57.575671058s ago: executing program 3 (id=606): socket(0x10, 0x3, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000040)='.\x02\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="636865636b3d7374726963742c756e686964652c63727566742c696f636861727365743d63a08033322c636865636b3d72656c617865642c6e6f6a6f6c6965742c636865636b3d72656c617865642c6e6f6a6f6c6965742c00"], 0x1, 0x55d, &(0x7f0000000b00)="$eJzs3VFv01YbwPHHpYWSV0LoZUKoKnAom1SkEhwXgiKuPOckPeDYke2g9gpVNEUVKUyUSWtvNm7YJm0fgtt9iH0jtI/AZDspzdo0HaUJ6v6/Co5jH/s8x4n86LTxsQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALG8qm2XLPFN0FpWg3nVKGx8fNnde98KudVXHNKuiJX+k+lpuZKvuvLVx82X0//mZDZ/NSvTaTEtO/+7fPHBpcmJ3v6HBDwSW9s7z1c7nfarcQdygq6eG7ytrgMTh6bh1rUycagq5bJ9Z6kWq5rxdbwSJ7qhvEi7SRipee+WKlUqi0oXV8JWUK+6vu6tvH/bse2yelhsajeKw+DOw2LsLRnfN0E9q5NuTuvcTz+Ij0yiEu02lFrf6LQXh3UgrVQ6SiVnWCXHdpxSyXFK5XuVe/dte3LfCvsfZF+N8X9oMV6f8eoNHM9EN/+LL0YCacmyqAN/PKlKJKE0Bmzv6uX/b+7oQ9vdm/97Wf7Kx80zkuX/a/mra4Py/4BYRvezJduyI89lVTrSkba8GntEo/2pi5ZAjMQSipGGuNka1V2jpCJlKYstT2RJahKLkpoY8UVLLCsSSyI6+0R5EokWVxIJJRIl8+LJLVFSkopUZFGUaCnKioTSkkDqUhU3O8q6bGTnfVGUNSjG3Uqlgd0o9D53bXEO6S35H8f3Wa/fwHF86OV/AAAAAABwalnZb9/T8f+UXM2WasbX9rjDAgAAAAAAn1H2l//ZtJhKl66KxfgfAAAAAIDTxsrusbNEpCDX86V1sbLbpfglAAAAAAAAp0T29/9raZHNgXJdrN3pUhj/AwAAAABwSvwydI79uHnO+vMviaIp601z+Wtr003ruZtn8v3O9I400S2T2ox1oXuQrCjnxeSkp2et6bzS7iSY77vF+rA4rIMC+GlvADIkgEuT8pvcyOvcWMvLtd6WvJVCzfi66IX+g5K47oWJRC8n37/Y+EGy7v8aNC5Ysr7RaRefvuysZbG8SY/yZrM7geK+eRQPieV1Nt9Cds/FgT2eym7E6LZbyNu19/Z/ov+8H6XNtzKX15nrznhb6O//dNpmqdjX+3TbbhTTstFpl47Z87dyM69zc/5mXhwQhVMc9B50z4WzN4pPOhf7o7D6ojgvIsOiWBwUhXW0KABgXNaHZCFrf+L/hGvtp2V3+ZfZ/a3M53XmZ7IL6+TMAXnFHnZFt4+Z3f7Y9wykQTk2bff33XbzrPou3eHdwHZj37HSU3jm9eZ3cnlre+f2xubqs/az9gvHWSzbd237niNTWTe6xZ5IP5wj9wAAcsOfsTO0hnU3H1VfFDl4VP3/3a8UFOWpvJSOrMlCdrdB9o2DA49a2PM1hIUho9ZClibzJ7wsHDK2PJvd5dA7rnNo3f4YFkfxVgAAMDJzQ/LwUfL/wpBxd38u7x8dn5VBdUsjPxcAAPxX6Oi9VUh+tqLINJ+UKpWSmyxpFYXeIxWZal0rEyQ68pbcoK5VMwqT0Av9dOGxqepYxa1mM4wSVQsj1Qxjs5w9+V11H/0e64YbJMaLm752Y628MEhcL1FVE59Xzda3vomXdJTtHDe1Z2rGcxMTBioOW5Gni0rFWu+paKo6SEzNpIuBakam4UYr6nHotxpaWWJJZJpJmB+w15YJamHUyA5bHPfJBgDgC7G1vfN8tdNpvzrBhXH3EQAA9CNLAwAAAAAAAAAAAAAAAAAAAADw5RvF/X8sjGPhbPcdHkFbvamgx93lE16wRtrBSREZZ5eHXjp+PNELE4AT93cAAAD//+IERnQ=") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x1480, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0xaf423, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000000f00)={0x2020}, 0x2020) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x4) 5m56.080785749s ago: executing program 2 (id=610): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x48000) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x30, r4, 0x5, 0x70bd2e, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x44840}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x2b, 'cpu'}]}, 0x5) 5m56.041588753s ago: executing program 3 (id=613): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000008c0)="3bcbdb0fcfa026557d2ea2b0fa34b7b3ddf4e60fe678186210e935989ea66d7c81fcd371943f18f118107da91c", 0x2d}], 0x1}}], 0x1, 0xc814) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendto$inet6(r1, &(0x7f0000000400)="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", 0x1000, 0x4000, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000003bc0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000200)="a7", 0x1}], 0x1}}], 0x1, 0x10000895) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x8, 0x11, r0, 0xf6690000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f00000001c0)=0x40) 5m53.408751135s ago: executing program 2 (id=621): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000440)=ANY=[], 0x1, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) recvmmsg(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x40001000, 0x0) pwritev2(r0, &(0x7f0000001140)=[{&(0x7f0000000fc0)="ea", 0x1}], 0x1, 0x6, 0xde, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r2) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x4, 0x800000000000065, 0x0, 0x0, [{{}, 0xe9}]}) 5m53.241101389s ago: executing program 2 (id=622): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r1 = socket$inet6(0xa, 0x3, 0xb) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@loopback, 0x4e20, 0x0, 0x4, 0x0, 0x2}, {0x0, 0x802, 0x9141, 0x0, 0x0, 0xf42, 0x8}, {0x0, 0x0, 0x0, 0xfffefffffffffffd}, 0x0, 0x0, 0x1, 0x0, 0x4}, {{@in=@empty, 0x0, 0x33}, 0x0, @in6=@empty, 0x3502, 0x0, 0x2, 0x4, 0x0, 0x0, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) 5m53.145363667s ago: executing program 2 (id=624): socket(0x10, 0x3, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000040)='.\x02\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="636865636b3d7374726963742c756e686964652c63727566742c696f636861727365743d63a08033322c636865636b3d72656c617865642c6e6f6a6f6c6965742c636865636b3d72656c617865642c6e6f6a6f6c6965742c00"], 0x1, 0x55d, &(0x7f0000000b00)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x1480, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0xaf423, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000000f00)={0x2020}, 0x2020) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x4) 5m52.337259892s ago: executing program 3 (id=626): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$isdn_base(0x22, 0x3, 0x0) bind$isdn_base(r3, &(0x7f0000000080)={0x22, 0x8, 0x8, 0x81}, 0x6) 5m52.108630291s ago: executing program 32 (id=626): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$isdn_base(0x22, 0x3, 0x0) bind$isdn_base(r3, &(0x7f0000000080)={0x22, 0x8, 0x8, 0x81}, 0x6) 5m52.080881153s ago: executing program 2 (id=639): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) getpid() connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x4, 0x1, 0x0, &(0x7f0000000300)='GPL\x00', 0x2, 0x4a, &(0x7f0000000340)=""/74, 0x41100, 0x23, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, &(0x7f0000000b00)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, r0, r0, 0xffffffffffffffff, r0, 0xffffffffffffffff, r0]}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100462388a8", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/tcp6\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x10, &(0x7f0000000280)={[{@usrjquota_path={'usrjquota', 0x3d, '.'}}, {@nolazytime}]}, 0x9, 0x4d4, &(0x7f0000000540)="$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") 5m51.12303101s ago: executing program 2 (id=634): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x143}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) 5m50.941289135s ago: executing program 33 (id=634): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x143}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) 5m35.337810209s ago: executing program 6 (id=636): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r2, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 5m33.904730465s ago: executing program 6 (id=656): syz_mount_image$hfs(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x1214080, &(0x7f0000000140)={[{@uid}, {@codepage={'codepage', 0x3d, 'iso8859-15'}}, {@gid}, {@dir_umask={'dir_umask', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@part={'part', 0x3d, 0x800}}, {@creator={'creator', 0x3d, "5863953a"}}]}, 0x1, 0x31c, &(0x7f0000000940)="$eJzs3U1P1EAcBvBn2u6yKwQrYEg8oiSeCOBB40ViiBe/gAdDRFgTQsVEMVES4+rZGG8mJh69eTb6FfRi/AJ64mA86YV4sGZmOn1Zpt2ywBayzy9h2bbz8p9OX2aWLAURDayri9/fXdiWP6IGwAVwGXAANAAPwGlMNh5ubK5tBq3VooJclUP+COicYlealY2WLavMp3JEfLnkYSS9jg5HGIbhj66pfvclFqqO0Of+Lg4wFJ2danuj75EdjrZu12BJ9bDYwQ4eYbTKcIiIqHrR/d+J7hIj0fjdcYDpaBx+3O//mfHNTnVxHAnx/d/Ry6GQ++ek2pTM99QUTva+Y2aJtrL0MTGSXRkmu7sOfWRlOkB0m1WqWJzmnbWgNdNWBTzHlUgq2YR6XYVpiJIXbV3/mrLMTQsUtb3YsGpDTbZhPif+8T3X+OknXturW/pSIibxWXwVS8LHG6zG4z8vFHLnqP3jd/SUjn82v0TVSl+nyrQymb+fUpWcMT3w8X3Symbefm3AlbHYyFJE5/jdN3G+qufnwhiyHyvo1s3lt07lGrfmmo+X/1pzTXTmanq1oDWzci8o/CjlwFhndOKluCGm8AsfsJga/zsy9TTyz8zMlV+olNGRUdgeT6XM6ccMdQLftZyZTonMA+2ataOLvcBtXMLog8db68tB0Lpf/RtzqhyRePSBGB2Oco38nUqDhnxTA3Bglf4Lw9C6yUM/mlxTTb34Nmny1vqyaOvF/VWBdlyg2bSQnxjAAoBojbki9FL70zjXUFJgqex/ZG+rNfYD0kTVhwPSVJXZ5GKo1JnS7KHS60/Wl4OerkR0zCSdjsmbVQdDVZDDK6Hnf6n5yqy66sgXv2A2EnYrPFXiXM4MaEy9nig3g4uLzZ3BDZs3XeZcZ88D5zpqdGBqfNZZrB/FiaP4V8m9/ylDLOIbbvHzfyIiIiIiIiIiIiIiIiIiIiIiIiKi42av30bo5esE2Rq3B/AfbxARERERERERERERERERERERERERERER7U/q+b+Aq54YU6/8+b9uief/mudSEFHP/gcAAP//NBBgTQ==") pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f00000002c0)={0x18}, 0x18) write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00\x00\x00\x00'], 0x58) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1]) chdir(&(0x7f0000000100)='./file0\x00') read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80) 5m32.649771297s ago: executing program 6 (id=661): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}, 0x6}, 0x1c) io_setup(0x3f, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='veth0_macvtap\x00', 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040040) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4040011) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0x20) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x4, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 5m27.853329495s ago: executing program 6 (id=678): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000540)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x98, 0x0, &(0x7f0000003200)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1443, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f00000048c0)={0x2020}, 0x2020) 5m27.684065529s ago: executing program 34 (id=678): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000540)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x98, 0x0, &(0x7f0000003200)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1443, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f00000048c0)={0x2020}, 0x2020) 13.708578642s ago: executing program 7 (id=1536): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xe22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x1}, 0x1c) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 13.404155606s ago: executing program 1 (id=1539): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 13.403993786s ago: executing program 7 (id=1540): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x208, 0x1ffe0000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r3, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x5, &(0x7f0000000140)=0x6, 0x4) recvmmsg(r3, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) 12.402097747s ago: executing program 1 (id=1543): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x40880, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) statx(0xffffffffffffff9c, 0x0, 0x100, 0x800, 0x0) syz_fuse_handle_req(r2, 0x0, 0x0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f0000000200)) socket$inet6_udp(0xa, 0x2, 0x0) 11.419655446s ago: executing program 1 (id=1545): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r2], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r5], 0x54}}, 0x0) 11.280079708s ago: executing program 0 (id=1550): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e04010418"], 0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000008900000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x14013, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYRESOCT=r1, @ANYRES64=r0, @ANYRESDEC=0x0, @ANYBLOB="2c696f636861727365743d6d61636761656c69632c0093f8f8a3e5971e0161bb33fd614e6b602b62a80442557b55ba0b49781025f469a524537161528ab37812e04608fdb0dfee81bec85ed4e365bef2b8c0baabe158024fea85b1f1d0cfc37bd9b418d913126f0fbfea0a28e6cda1efe60a094df3d5c80ff4155e715960c05c5ca639f70f66226494f5530dfa08fa72bfb8e4e7628f4a"], 0x4, 0x339, &(0x7f0000000b80)="$eJzs3U9P1EwcB/DvtLtL94EHK2BIPBmUxBMBPGi8QAzxNXgwRIQlIayYKCZKTETPxngzMfHIzbPRt6AX4xvQEwfjSS/EgzUzne5Ol5m2C7iF7PeTuHbb+fObttPO7GYpiKhvXVv4unNpV/4TVQA+gKuAByAAKgDOYDx4sLGZW5DfWhKIc4p9aZY3GrasAXQOLZTvKhgy19G/EUVR9C031c+exELlEWYPNnjAgO6danvQ88gObc62cjtuV38xjrDYwx4eYrjMcIiIqHz6/u/pu8SQHr97HjCpx+En9f6fSI1v9sqL41ho3f+9+H0k5P45pTbJ+d7aZrOxEk/h5NH3klmirSzrORG1d3cN8ZnlDxpDLqMWOxWLV19dazamtlUBzzCnGcnG1OsKkoYormhrwAyACcvcNENW27MNqjZUZRtmHfGPZtVonQB/+I5X9uoWPxWISXwUn8WiCPEaK63xXyUScueoIxV2dJU4/ml3iaqVYZwq1cp2+KdVJWd1DXj/tt3Kumu/BvBlLDayFNE5fg+TOF/W3LkwgvTHCnHrZtytU7lGgYpQswYz12wr0W9rrrHOuuqr1WZjavlu03XSHy3rjE68EDfEBH7gHRaM8b8nU0/C3TNTvVyolPrMyGxPRaV0HMcU1YHvdNUzSbmeuvgV8xy3cQXD9x9trS81m4175S8kXeWA2c8dcTzxiahPR7lG/m+kQSAXqgCc5VTdm6wLf6Iosm6qoBeHoKqaevlNu8lb60tCX/MOV4W8cnZsmncnBjAPQK9JrggHqf1JK9dAu8BC2X/Jo63W2E/IJKoedJCkqtQmHwOFekp935qdnFyP/z/YVYhOoPbRx/jNsoOhMsixg4jnf8Z8ZVpddeRLmDH/ifIKN0qcccyARtTrf8VmcK1inePEwWQhZ851/iJwoaNGD0mNTzuLDXWcOI7fSnb/VYZYwBfc4uf/REREREREREREREREREREREREREQnTbe/Rtj/c4L8hXSNu334hzeIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiA7HeP4v4KsnxtRsz//NelKT4sdPiAmO4vm/foHn/4rtLlpJRDZ/AwAA//9eD1xQ") syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000240)='./file0\x00', 0x8c0, &(0x7f0000000280)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c001967b9b8a6cdd636d75428f2c5e8054d01858eef552755576e749526b36860cf2511040d1ce5a743ffd83d29d1ba3a54a59d8c7aa249f08d3c8c6d04ac105d67934db6190d59f2323b55a5a4"], 0x1, 0x4431, &(0x7f00000088c0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000540)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, "a9ff94950d90ea13d2d79992cfbe45eb89b08210af43c7d7cc4c485911690699613b549edcbb6f5a8d4ec96a76c30624593b878a6ddbec19dfe1355e8036801d8afbbaeebde375c78ce0ff8a680c16ff90434acf941e9d784074ba8a432e3934881e686f40c52029ea418c81e8b6eb190c9cddeee31a06dd89e284d503858b0f36a03fb84970ca539ea4a05c0d5056ecf25d83965de0f9e298ca5cb6f96d85872fe69d37d47e11eacb5eab78ad457b681c21a23b48f4a7202677fc04d0e68ba4c3868b0e5324bf5cd9fe3435214d4f02714e4a4bd415839e658b94a0473d17f543f6ab5eeffac729c182b758dd8c1343c679f10911e1b3ca"}}}, 0x102) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r2, 0xffffffffffffffff, 0x0) 10.14166666s ago: executing program 5 (id=1551): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000001ac0)=""/4096) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) socket(0x1e, 0x1, 0x0) 10.14057278s ago: executing program 4 (id=1552): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x22400, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c37900000000000a000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000000224e0000", 0x58}], 0x1) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) 10.063001366s ago: executing program 1 (id=1553): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x5) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_mtu(r2, 0x0, 0xa, 0x0, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r3, 0x2000009) 8.90838557s ago: executing program 5 (id=1554): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) ioctl$PPPIOCSMAXCID(r0, 0x40047451, 0x0) 8.730861104s ago: executing program 4 (id=1555): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r1, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_io_uring_setup(0x10d, &(0x7f00000005c0)={0x0, 0xb4b7, 0x800, 0x0, 0xfffffffc}, &(0x7f0000000200)=0x0, &(0x7f0000000380)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r7, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}) io_uring_enter(r2, 0x3f70, 0x0, 0x0, 0x0, 0x0) 7.912749881s ago: executing program 1 (id=1556): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000000c0)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, 0x0) 7.836291466s ago: executing program 5 (id=1557): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="20000000140001000000000000000000020000ff", @ANYRES32=r3, @ANYBLOB="08000200ac1414aaf90cbbf3f5c9620bcffb"], 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_msfilter(r5, 0x0, 0x23, &(0x7f0000004b00)=ANY=[@ANYBLOB="e0000808ac1414aa"], 0x10) r6 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1}, 0x24}}, 0x0) 7.773818821s ago: executing program 0 (id=1558): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) fsmount(0xffffffffffffffff, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000000206010100000000000000000000000005000100070000000900020073797a30000000001400078008001240fffffffe080013400000080015000300686173683a69702c706f72742c6e6574000000000500050002000000050004"], 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 7.759688363s ago: executing program 4 (id=1559): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) 6.550584151s ago: executing program 0 (id=1560): recvmsg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) connect$inet(r3, &(0x7f0000001980)={0x2, 0x1, @local}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x810) 5.4392973s ago: executing program 4 (id=1561): syz_emit_ethernet(0x7e, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x34, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='veth1_to_batadv\x00', 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000840, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x50, 0x0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x50}}, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r2, @ANYBLOB="01000000000000000000020000002c000280060002004e2000000800090010000000060002004e210000080007000101000006000f000700000008000400ff7fffff1400028008000600020000000800090008000000080004000200000060000180080009005600000007000600666f00000c0007002000000002000000080008000100000008000b00736970000600010002000000080005"], 0xc4}}, 0x0) 5.43719357s ago: executing program 0 (id=1571): socket(0x1e, 0x4, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x301100, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r3, @ANYBLOB="01000000000000000000010000002c000280060002004e2000000800090010000000060002004e210000080007000101000006000f000700000008000400ff7fffff1400028008000600020000000800090008000000080004000200000060000180080009005600000007000600666f00000c0007002000000002000000080008000100000008000b00736970000600010002000000080005"], 0xc4}}, 0x0) 5.399543993s ago: executing program 5 (id=1562): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r4, r3, 0x0, 0x7ffff000) socket$netlink(0x10, 0x3, 0xb) 5.263775085s ago: executing program 7 (id=1563): r0 = fsopen(&(0x7f0000000400)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000540)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1\xf9\x9c\x83@\x1e\x99\xcah\x85\xb8\xbeSAk\xf4\xb6 \xdf\xa0P\x18\x19\xae\x8c\x9a\x19mm\r<|\xe8\x9e\xa0x\x84p2\xf9\xe2\xed\xb0\f\x7f;\xf6J18G\x84c\x88\x9d{\xf4~\xdby\xe1\xdf\x1a\xae\xd6ez\xe5\xa8\xe1\'', 0x0, r0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000a00)='wsync', &(0x7f0000000b40)="b2", 0x1) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000840)='\x00\x9b~\xd7\xde\x91d\r\xa3e\xec=Z\xce\xb0\xdfr\xbfQ\x85n4\xf5T\xc2\x86;\x03K\x80pF\xeaK\xb4t\xef\'\n\x05\xc9\xcfc\x92\bE\xf9\xf9\xcf\x96\x99\xde\x1e3\xcdA\xf9\x1bj\xc3\x8b\xbe\xee\xb3e\xd8Mk\xf1+\xbf\xd5\x98\x8c\x13\xdc\x85\x17\xcd\xf8\xf5\a\xde9\xd1\x8b\xf0&P\x92\x99u8\xb6,#\x0f\x89\xd9ic\xb5\xba\xe7\x03\x8d-\v\xd3S\x98\x89@\x8aWLU\xb1\xc4i6\xa5\xb7\x1d\xf3s\xaf\x7f\xb16\xa2\xbe\xfa\xfa~2\x1d\xeb\xd0G\xdc\a\xa3\x93n\x82\xa7h\xd7\x83N\x8aW\xaa\xc1\xc7\xec\xea\x13\xbe\xf3fQ\xfa\x8cP\xa7\xc1O,\x83\xec\xa9\xeb\xb2 u\x15A\xde\f8T\x81\xccces\xfa\xef\xf4 =z\xfc\xef]~tY \xef8\r,x~\xa0,\xc7@\xc0\xef\xc1`\xec}\xa2\x8d\x95\xff0c\xcd\x02~\xb7\x1a\x93\xff\xcd\xadB7\x13\x84BPC\xa4\xa2O\xf0\xdd\xde\xc5H.y\xfc\xe9$\xf6\xa6t\xa3\xdbr\x00+\x01{\xfb-\x1f\x1b\xeb\xd9b\xf0\n\x99\x0f4\xfa_\x10\xd0%\xe7o\xc9\bO\xfe\xfb\xca\xf8\x9d]\xa1\x98(Nw\x87\xd15', &(0x7f0000000100)="8d", 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a40)='\xcfD\xbc\xbf\xff\xdc\x83\xc5$\xb3\xecr\xe4G:\x93\xdfj\x96\x7f\x03\xe5\x94\xec\xe6\x04T\xcbn\xa5\xc3\x04[\x02\xa9[=\xf9\x8b\xf7\xc1\x9c\x83@\x1e\x99\xca\xc3\x85\xb8\xbeSAk\xf4\xb6 \xdf\xa0P\x18\x19\xae\x8c\x9a\x19mm\r<|\xe8\x9e\xa0x\x84p2\xf9\xe2\xed\xb0\f\x7f;\xf6J18G\x84c\x88\x9d{\xf4~\xdby:\xd8\xc5\xccrun4\xe0\xca\xc1\x0f\xc3\x03D\xe1\f\xb3O\xa4\x1c\x04]8)}\x83:\x9e\xc0X\xdb\xd9\x89\x94\x9b(\x19\\\xf5!w\xbafo\xea\xe4\xb5Xe\x84\xbc\xcdw\x802\xb4\xb8\x1f\xc2\x97\xbfi\xe8\xf8\xbd\x1d,\xffUX\xbeA\x00{\"\xdbya#I\x03\xec\xed\x8b\x97\xff\x1eiq\xd1n\xf99\xc6\a\a\xed\x0f\x15x\x91\xdc\x05P\xf7\xf3\xad\xa3\xbc\xe4[\xa2\xc7\xfa\x9e\xad\xa2\xad\x86\xc4\aD\xc9\xdf\xf8\xf7\xc1\xc5\xc5.\x8a&:\x90\xb2\x8c\x86\xb2\\\xa8%!\x98TQ\x91\x00\x00\x00\x00$\x99\xbf', &(0x7f00000006c0)='\x01\x8dik\xc2\xed\xf9\x8a\xae\x86\xae)Dn<(\x02:cU\xa0d\xd4\x1f\xd4\x95\x93\xb7\xc1\xcc\x84\x8c\xdd\xbf^]~\xcf\xcb6w\xb3\xfa0b\x88\x04\x10\x9d_\x97\x9f\x89\xb7\xe35C\xf3\x1b\xafV\\wGU\xaf\xa4\f&\xe7m\xf0\xaa{\xb2\xe5\xe2\xeb\x9bN#\x99\xdc\x9f\"\xab&\x8f\x01\x17Y\xaf\xb7\xdc`r\x9c6\\\x0e\x94\xc0a\xf7\xd4u\xdf\xf0\x9b\xb0p\v\xa1\x8a\x145\x9b\xd95\xc8U\xe4V\x81-1\xb0K\x9a\xa3+\x03\xc1\xf0\xeb\xafYI&\x9e\xd0\xe1\x148\xfe\x10\x0f\xbd\xa2\xed}\xe6\x1asT\x1f\x92\xdb\xa1&\'\xc7\xe9\xa5\xd0\x89\x8d\xf1$\"\xdc\xe5\xfcT\xad\fj\xfe\'t', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000180)='$\x00', &(0x7f0000000340)='{)+}@@!}\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000980)=',\xce\xed\"OF\x83\xbfd?.\'R\xa3\x81\x02\x11z@P\xe1\f\xd9\xaaa\xb4\xcb\xbf\xc2\xd4\x970xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xffffefff}, {0x6}]}, 0x10) sendmmsg(r3, &(0x7f0000000180), 0x4000190, 0x0) 3.512606736s ago: executing program 7 (id=1565): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @loopback}}}], 0x20}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0}, 0x80}, {{0x0, 0x0, &(0x7f0000000840)}, 0x3}], 0x2, 0x10022, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1}, 0x48) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000000)=0x1) 2.652383576s ago: executing program 0 (id=1566): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r3, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r4}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x5, 0x4, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r5, &(0x7f0000000080), &(0x7f0000001500)=@udp6=r4}, 0x20) 2.208898891s ago: executing program 5 (id=1567): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x800006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x9, 0xb}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.066625153s ago: executing program 4 (id=1568): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004bc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) socket$inet_dccp(0x2, 0x6, 0x0) unshare(0x24060400) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x989680}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x400, 0x0) 1.948292403s ago: executing program 7 (id=1569): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x3}], 0x1, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r3, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r4, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) 1.948110213s ago: executing program 1 (id=1570): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r2, 0x5452, &(0x7f0000000280)=0x3a0af83a) listen(r2, 0x1e) shutdown(r2, 0x0) 39.652177ms ago: executing program 0 (id=1572): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000640)="8d", &(0x7f00000007c0)=@tcp=r0, 0x2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 22.392748ms ago: executing program 7 (id=1573): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) listen(r1, 0xfffffffb) syz_open_dev$video4linux(0x0, 0x5, 0x0) syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="71756965742c636f6465706167653d69736f383835392d31352c706172743d3078303030303030300000000000000000662c00a20000000700000000ede9debf530c3cc4d04b548919aca0c2937d4da1fc31dc42fc2e3e", @ANYRESDEC=0x0, @ANYRESOCT=r1, @ANYRES16, @ANYRES16], 0x11, 0x2d2, &(0x7f0000000bc0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x101042, 0x1db) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x29a, 0x0, 0x82, 0x0, &(0x7f0000000180)) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) writev(r3, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) 0s ago: executing program 4 (id=1574): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="20000000140001000000000000000000020000ff", @ANYRES32=r3, @ANYBLOB="08000200ac1414aaf90cbbf3f5c9620bcffb"], 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_msfilter(r5, 0x0, 0x23, &(0x7f0000004b00)=ANY=[@ANYBLOB="e0000808ac1414aa"], 0x10) r6 = socket(0x10, 0x803, 0x4) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0) kernel console output (not intermixed with test programs): allback [ 157.554467][ T78] block nbd3: shutting down sockets [ 157.555975][ T78] blk_print_req_error: 118 callbacks suppressed [ 157.555985][ T78] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 157.560623][ T78] buffer_io_error: 100 callbacks suppressed [ 157.560632][ T78] Buffer I/O error on dev nbd3, logical block 0, async page read [ 157.565250][ T78] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 157.568162][ T78] Buffer I/O error on dev nbd3, logical block 0, async page read [ 157.571107][ T78] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 157.573558][ T78] Buffer I/O error on dev nbd3, logical block 0, async page read [ 157.576119][ T78] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 157.578586][ T78] Buffer I/O error on dev nbd3, logical block 0, async page read [ 157.581128][ T78] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 157.583621][ T78] Buffer I/O error on dev nbd3, logical block 0, async page read [ 157.586949][ T78] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 157.589463][ T78] Buffer I/O error on dev nbd3, logical block 0, async page read [ 157.591714][ T78] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 157.594164][ T78] Buffer I/O error on dev nbd3, logical block 0, async page read [ 157.597118][ T78] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 157.599713][ T78] Buffer I/O error on dev nbd3, logical block 0, async page read [ 157.601950][ T4427] ldm_validate_partition_table(): Disk read failed. [ 157.603986][ T78] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 157.606498][ T78] Buffer I/O error on dev nbd3, logical block 0, async page read [ 157.609310][ T78] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 157.611755][ T78] Buffer I/O error on dev nbd3, logical block 0, async page read [ 157.614162][ T4427] Dev nbd3: unable to read RDB block 0 [ 157.616513][ T4427] nbd3: unable to read partition table [ 157.618158][ T4427] nbd3: partition table beyond EOD, truncated [ 157.739582][ T4427] ldm_validate_partition_table(): Disk read failed. [ 157.743635][ T4427] Dev nbd3: unable to read RDB block 0 [ 157.749184][ T4427] nbd3: unable to read partition table [ 157.750779][ T4427] nbd3: partition table beyond EOD, truncated [ 157.767466][ T6069] ldm_validate_partition_table(): Disk read failed. [ 157.773466][ T6069] Dev nbd3: unable to read RDB block 0 [ 157.775478][ T6069] nbd3: unable to read partition table [ 159.031654][ T6069] nbd3: partition table beyond EOD, truncated [ 159.051889][ T6069] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 159.076711][ T6069] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=4, location=4 [ 159.100823][ T6069] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=3, location=3 [ 159.116185][ T6069] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=2, location=2 [ 159.214656][ T6069] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 159.234877][ T6069] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=4, location=4 [ 159.260251][ T6069] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=3, location=3 [ 159.265105][ T6069] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=2, location=2 [ 159.284529][ T6069] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=4, location=4 [ 159.294473][ T6069] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=3, location=3 [ 159.315099][ T6069] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=2, location=2 [ 159.330237][ T6069] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 159.332461][ T6069] UDF-fs: Scanning with blocksize 1024 failed [ 159.347463][ T6069] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 159.362592][ T6069] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=1, location=1 [ 159.373493][ T6069] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=0, location=0 [ 159.376255][ T6069] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 159.378984][ T6069] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=1, location=1 [ 159.381668][ T6069] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=0, location=0 [ 159.384911][ T6069] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=1, location=1 [ 159.387817][ T6069] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=0, location=0 [ 159.390345][ T6069] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 159.392432][ T6069] UDF-fs: Scanning with blocksize 2048 failed [ 159.394534][ T6069] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 159.397343][ T6069] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=0, location=0 [ 159.399855][ T6069] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 159.402514][ T6069] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=0, location=0 [ 159.405090][ T6069] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=0, location=0 [ 159.407648][ T6069] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 159.409742][ T6069] UDF-fs: Scanning with blocksize 4096 failed [ 159.411502][ T6069] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 159.446843][ T6097] netlink: 4 bytes leftover after parsing attributes in process `syz.2.529'. [ 159.456101][ T47] Bluetooth: hci1: command 0x0406 tx timeout [ 159.457740][ T47] Bluetooth: hci2: command 0x0406 tx timeout [ 160.072513][ T27] audit: type=1400 audit(390.036:36): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name=":ched_switch" pid=6111 comm="syz.1.536" [ 160.953693][ T6119] binder: 6118:6119 tried to acquire reference to desc 0, got 1 instead [ 160.981793][ T14] binder: release 6118:6119 transaction 113 out, still active [ 161.025724][ T14] binder: undelivered TRANSACTION_COMPLETE [ 161.085841][ T4442] binder: send failed reply for transaction 113, target dead [ 162.166961][ T6147] loop2: detected capacity change from 0 to 2048 [ 163.938872][ T6147] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 165.182150][ T6164] loop1: detected capacity change from 0 to 512 [ 165.233659][ T6164] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 165.303022][ T6164] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 165.308488][ T6164] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.560: invalid indirect mapped block 2683928664 (level 1) [ 165.334276][ T6164] EXT4-fs (loop1): Remounting filesystem read-only [ 165.583611][ T6164] EXT4-fs (loop1): 1 truncate cleaned up [ 165.613496][ T6164] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 166.500604][ T47] Bluetooth: hci3: command 0x0406 tx timeout [ 166.632299][ T6185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.637796][ T6185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.655809][ T6171] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:477: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 166.664378][ T6171] EXT4-fs (loop1): Remounting filesystem read-only [ 166.787052][ T4306] EXT4-fs (loop1): unmounting filesystem. [ 167.057658][ T27] audit: type=1400 audit(397.026:37): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name=":ched_switch" pid=6162 comm="syz.3.550" [ 167.247403][ T6201] netlink: 4 bytes leftover after parsing attributes in process `syz.1.562'. [ 167.825314][ T6205] loop2: detected capacity change from 0 to 256 [ 167.864897][ T6205] FAT-fs (loop2): Directory bread(block 64) failed [ 167.872131][ T6205] FAT-fs (loop2): Directory bread(block 65) failed [ 167.874102][ T6205] FAT-fs (loop2): Directory bread(block 66) failed [ 167.885716][ T6205] FAT-fs (loop2): Directory bread(block 67) failed [ 167.887616][ T6205] FAT-fs (loop2): Directory bread(block 68) failed [ 167.889483][ T6205] FAT-fs (loop2): Directory bread(block 69) failed [ 167.891329][ T6205] FAT-fs (loop2): Directory bread(block 70) failed [ 167.893103][ T6205] FAT-fs (loop2): Directory bread(block 71) failed [ 167.894957][ T6205] FAT-fs (loop2): Directory bread(block 72) failed [ 167.918619][ T6205] FAT-fs (loop2): Directory bread(block 73) failed [ 170.737321][ T6201] device hsr_slave_1 left promiscuous mode [ 173.745127][ T6269] 9pnet_fd: Insufficient options for proto=fd [ 173.794640][ T6273] loop3: detected capacity change from 0 to 512 [ 173.808524][ T6273] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 173.954111][ T6273] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 174.213978][ T6273] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.584: invalid indirect mapped block 2683928664 (level 1) [ 174.304022][ T6273] EXT4-fs (loop3): Remounting filesystem read-only [ 174.391126][ T6273] EXT4-fs (loop3): 1 truncate cleaned up [ 174.435167][ T6273] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 174.802201][ T5715] EXT4-fs (loop3): unmounting filesystem. [ 174.940532][ T6265] ptrace attach of "./syz-executor exec"[4314] was attempted by " [ 175.827891][ T6286] netlink: 16 bytes leftover after parsing attributes in process `syz.1.588'. [ 176.944568][ T6304] netlink: 4 bytes leftover after parsing attributes in process `syz.1.593'. [ 176.951955][ T6304] netlink: 1 bytes leftover after parsing attributes in process `syz.1.593'. [ 177.173517][ T6314] xt_CT: You must specify a L4 protocol and not use inversions on it [ 178.141480][ T6326] binder: 6325:6326 tried to acquire reference to desc 0, got 1 instead [ 178.151521][ T6324] loop1: detected capacity change from 0 to 4096 [ 178.163175][ T24] binder: undelivered TRANSACTION_COMPLETE [ 178.186154][ T6324] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 178.224444][ T7] binder: undelivered transaction 118, process died. [ 178.246491][ T6324] ntfs3: loop1: Failed to load $Secure. [ 178.308406][ T6332] loop3: detected capacity change from 0 to 164 [ 178.468531][ T6324] netlink: 8 bytes leftover after parsing attributes in process `syz.1.602'. [ 179.792677][ T5715] Unsupported NM flag settings (8) [ 179.804312][ T5715] Unsupported NM flag settings (8) [ 179.811252][ T5715] Unsupported NM flag settings (8) [ 179.878772][ T5715] Unsupported NM flag settings (8) [ 179.880738][ T5715] Unsupported NM flag settings (8) [ 179.882415][ T5715] Unsupported NM flag settings (8) [ 180.148299][ T6359] xt_CT: You must specify a L4 protocol and not use inversions on it [ 183.491376][ T6384] loop2: detected capacity change from 0 to 164 [ 183.525957][ T6386] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 183.561930][ T4541] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.668067][ T4317] Unsupported NM flag settings (8) [ 183.670344][ T4317] Unsupported NM flag settings (8) [ 183.672567][ T4317] Unsupported NM flag settings (8) [ 183.698433][ T4541] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.954787][ T47] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 183.958423][ T4541] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.961420][ T47] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 183.965217][ T47] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 183.968140][ T47] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 183.970581][ T47] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 183.972830][ T47] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 184.052047][ T6407] capability: warning: `syz.0.630' uses 32-bit capabilities (legacy support in use) [ 184.771953][ T4541] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.823013][ T6413] capability: warning: `syz.0.635' uses deprecated v2 capabilities in a way that may be insecure [ 185.194824][ T4311] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 185.199871][ T4311] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 185.202577][ T4311] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 185.205179][ T4311] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 185.208086][ T4311] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 185.210273][ T4311] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 186.347189][ T4311] Bluetooth: hci4: command 0x0409 tx timeout [ 186.490228][ T6400] lo speed is unknown, defaulting to 1000 [ 186.810515][ T6443] netlink: 4 bytes leftover after parsing attributes in process `syz.0.643'. [ 187.397099][ T4311] Bluetooth: hci3: command 0x0409 tx timeout [ 187.400145][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.422415][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.938073][ T6443] device hsr_slave_1 left promiscuous mode [ 188.435775][ T4311] Bluetooth: hci4: command 0x041b tx timeout [ 188.743986][ T6467] overlayfs: statfs failed on './file0' [ 188.822240][ T6400] chnl_net:caif_netlink_parms(): no params data found [ 188.877332][ T6427] lo speed is unknown, defaulting to 1000 [ 188.927018][ T6471] mmap: syz.4.647 (6471) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 189.054081][ T6400] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.056746][ T6400] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.059515][ T6400] device bridge_slave_0 entered promiscuous mode [ 189.079730][ T6400] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.082074][ T6400] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.084928][ T6400] device bridge_slave_1 entered promiscuous mode [ 189.272229][ T6400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.278773][ T6400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.315298][ T6400] team0: Port device team_slave_0 added [ 189.360277][ T6400] team0: Port device team_slave_1 added [ 189.364388][ T6427] chnl_net:caif_netlink_parms(): no params data found [ 189.401950][ T6400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.403824][ T6400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.412200][ T6400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.425955][ T6400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.428432][ T6400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.436150][ T6400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.455724][ T4311] Bluetooth: hci3: command 0x041b tx timeout [ 189.518276][ T6427] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.525723][ T6427] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.528401][ T6427] device bridge_slave_0 entered promiscuous mode [ 189.617602][ T6400] device hsr_slave_0 entered promiscuous mode [ 189.656668][ T6400] device hsr_slave_1 entered promiscuous mode [ 189.675742][ T6400] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 189.677981][ T6400] Cannot create hsr debugfs directory [ 189.679789][ T6427] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.681926][ T6427] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.684626][ T6427] device bridge_slave_1 entered promiscuous mode [ 189.798327][ T6427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.849613][ T6427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.914571][ T6427] team0: Port device team_slave_0 added [ 189.921380][ T6427] team0: Port device team_slave_1 added [ 190.206052][ T6427] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.207993][ T6427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.215496][ T6427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.220086][ T6427] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.221963][ T6427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.229888][ T6427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.367946][ T6427] device hsr_slave_0 entered promiscuous mode [ 190.416559][ T6427] device hsr_slave_1 entered promiscuous mode [ 190.455824][ T6427] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 190.458096][ T6427] Cannot create hsr debugfs directory [ 190.505628][ T4311] Bluetooth: hci4: command 0x040f tx timeout [ 190.818891][ T6400] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 190.859574][ T6400] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 190.963307][ T4541] device hsr_slave_0 left promiscuous mode [ 191.005878][ T4541] device hsr_slave_1 left promiscuous mode [ 191.106103][ T4541] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.108303][ T4541] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.113366][ T4541] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.115371][ T4541] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.118132][ T4541] device bridge_slave_1 left promiscuous mode [ 191.121372][ T4541] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.177946][ T4541] device bridge_slave_0 left promiscuous mode [ 191.179823][ T4541] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.316177][ T4541] device veth1_macvtap left promiscuous mode [ 191.318350][ T4541] device veth0_macvtap left promiscuous mode [ 191.320164][ T4541] device veth1_vlan left promiscuous mode [ 191.323173][ T4541] device veth0_vlan left promiscuous mode [ 191.535770][ T47] Bluetooth: hci3: command 0x040f tx timeout [ 192.575607][ T4311] Bluetooth: hci4: command 0x0419 tx timeout [ 193.359639][ T4541] team0 (unregistering): Port device team_slave_1 removed [ 193.540062][ T4541] team0 (unregistering): Port device team_slave_0 removed [ 193.616471][ T47] Bluetooth: hci3: command 0x0419 tx timeout [ 193.720169][ T4541] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.962636][ T4541] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.350607][ T4541] bond0 (unregistering): Released all slaves [ 196.528995][ T6400] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 196.568256][ T6400] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 196.751799][ T6427] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 196.811309][ T6400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.813382][ T6427] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 196.839652][ T6427] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 196.914173][ T6427] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 196.948005][ T6450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 196.950707][ T6450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 196.956493][ T6400] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.971947][ T4930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 196.974705][ T4930] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 196.978174][ T4930] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.980093][ T4930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.982466][ T4930] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 197.014999][ T6450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 197.018028][ T6450] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 197.020723][ T6450] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.022675][ T6450] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.027264][ T4930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 197.056389][ T1696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 197.059263][ T1696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 197.063919][ T1696] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 197.069345][ T1696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 197.077071][ T1696] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 197.089161][ T1696] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 197.092044][ T1696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 197.094744][ T1696] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 197.097891][ T1696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 197.101146][ T1696] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 197.107996][ T6400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 197.157864][ T6427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.187400][ T6089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 197.190102][ T6089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 197.209602][ T6427] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.228284][ T6089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 197.231962][ T6089] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 197.234557][ T6089] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.236652][ T6089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.240034][ T6089] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 197.247142][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 197.250440][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 197.253033][ T240] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.254993][ T240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.291737][ T1696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 197.294981][ T1696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 197.306568][ T1696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 197.310976][ T1696] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 197.334231][ T6427] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 197.345890][ T6427] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 197.354197][ T1696] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 197.358112][ T1696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 197.360930][ T1696] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 197.363581][ T1696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 197.379439][ T1696] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 197.382249][ T1696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 197.384880][ T1696] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 197.388969][ T1696] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 197.435710][ T1696] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 197.438008][ T1696] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 197.442995][ T6400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.631537][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 197.633786][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 197.644763][ T6427] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.766598][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 197.769566][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 197.794327][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 197.805247][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 197.810557][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 197.813561][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 197.818151][ T6400] device veth0_vlan entered promiscuous mode [ 197.824420][ T6400] device veth1_vlan entered promiscuous mode [ 197.853017][ T6400] device veth0_macvtap entered promiscuous mode [ 197.866889][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 197.869639][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 197.872210][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 197.875200][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 197.888512][ T6400] device veth1_macvtap entered promiscuous mode [ 197.893708][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 197.897453][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 197.920162][ T6400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.923049][ T6400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.927052][ T6400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.929818][ T6400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.932455][ T6400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.935442][ T6400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.945208][ T6400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.948547][ T6400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.951212][ T6400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.953992][ T6400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.966039][ T6400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.970013][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 197.972864][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 197.985197][ T6400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.988626][ T6400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.991364][ T6400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.994142][ T6400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.997451][ T6400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.000265][ T6400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.002900][ T6400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.006918][ T6400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.009565][ T6400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.012349][ T6400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.017840][ T6400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.021989][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 198.024809][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 198.031362][ T6400] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.033781][ T6400] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.036597][ T6400] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.038974][ T6400] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.060708][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 198.063601][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 198.137267][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 198.140150][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 198.145233][ T6427] device veth0_vlan entered promiscuous mode [ 198.161986][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 198.164641][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 198.169699][ T6427] device veth1_vlan entered promiscuous mode [ 198.194867][ T4429] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.199151][ T4429] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.203935][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 198.207682][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 198.210537][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 198.225457][ T4429] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.228986][ T4429] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.234708][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 198.244777][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 198.252505][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 198.268801][ T6427] device veth0_macvtap entered promiscuous mode [ 198.286185][ T6427] device veth1_macvtap entered promiscuous mode [ 198.299402][ T6427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.302280][ T6427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.304860][ T6427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.308498][ T6427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.311080][ T6427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.313870][ T6427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.316991][ T6427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.319846][ T6427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.322515][ T6427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.325390][ T6427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.328541][ T6427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.331408][ T6427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.341479][ T6427] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.347368][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 198.350104][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 198.352676][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 198.355500][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 198.388538][ T6427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.426269][ T6427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.432418][ T4311] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 198.435724][ T4311] CPU: 0 PID: 4311 Comm: kworker/u5:3 Not tainted 6.1.147-syzkaller #0 [ 198.438158][ T4311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 198.441043][ T4311] Workqueue: hci1 hci_rx_work [ 198.442306][ T4311] Call trace: [ 198.443176][ T4311] dump_backtrace+0x1c8/0x1f4 [ 198.444462][ T4311] show_stack+0x2c/0x3c [ 198.445729][ T4311] __dump_stack+0x30/0x40 [ 198.446978][ T4311] dump_stack_lvl+0xf8/0x160 [ 198.448315][ T4311] dump_stack+0x1c/0x5c [ 198.449565][ T4311] sysfs_create_dir_ns+0x22c/0x24c [ 198.451014][ T4311] kobject_add_internal+0x5a8/0xb30 [ 198.452425][ T4311] kobject_add+0x134/0x1f8 [ 198.453649][ T4311] device_add+0x3f0/0xf94 [ 198.454897][ T4311] hci_conn_add_sysfs+0xbc/0x1cc [ 198.456342][ T4311] le_conn_complete_evt+0xa24/0xf8c [ 198.457810][ T4311] hci_le_conn_complete_evt+0x114/0x3f8 [ 198.459375][ T4311] hci_le_meta_evt+0x2c0/0x4a4 [ 198.460717][ T4311] hci_event_packet+0x6ac/0xf08 [ 198.462019][ T4311] hci_rx_work+0x324/0xaa0 [ 198.463142][ T6427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.463279][ T4311] process_one_work+0x7f4/0x13a8 [ 198.467648][ T4311] worker_thread+0x8c8/0xfbc [ 198.468913][ T4311] kthread+0x250/0x2d8 [ 198.469992][ T4311] ret_from_fork+0x10/0x20 [ 198.472157][ T4311] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 198.472565][ T6427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.475785][ T4311] Bluetooth: hci1: failed to register connection device [ 199.378097][ T6427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.381073][ T6427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.383874][ T6427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.449596][ T6427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.452411][ T6427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.455379][ T6427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.495432][ T6427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.502628][ T6427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.518624][ T6427] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.528170][ T6427] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.530548][ T6427] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.543188][ T6427] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.546479][ T6427] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.649597][ T240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.656785][ T240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.725283][ T240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.737090][ T240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.151490][ T6089] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 200.154530][ T6089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 200.186212][ T6089] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 200.196252][ T6089] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 200.574738][ T6644] netlink: 4 bytes leftover after parsing attributes in process `syz.6.636'. [ 200.739740][ T6646] netlink: 'syz.0.653': attribute type 1 has an invalid length. [ 202.057633][ T6662] loop6: detected capacity change from 0 to 64 [ 202.961881][ T6652] bond3: (slave veth7): Enslaving as an active interface with a down link [ 202.966198][ T6646] netlink: 28 bytes leftover after parsing attributes in process `syz.0.653'. [ 202.993917][ T6646] 8021q: adding VLAN 0 to HW filter on device bond3 [ 205.064078][ T6685] batman_adv: batadv0: Adding interface: macsec1 [ 205.078268][ T6685] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.105840][ T6685] batman_adv: batadv0: Interface activated: macsec1 [ 207.781267][ T6719] block device autoloading is deprecated and will be removed. [ 207.804371][ T6715] md2: error: bitmap file must be a regular file [ 208.006696][ T6729] binder: 6728:6729 tried to acquire reference to desc 0, got 1 instead [ 208.021201][ T4364] binder: release 6728:6729 transaction 129 out, still active [ 208.023250][ T4364] binder: undelivered TRANSACTION_COMPLETE [ 208.054378][ T4364] binder: send failed reply for transaction 129, target dead [ 208.404539][ T4311] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 208.408935][ T4311] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 208.412157][ T4311] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 209.698995][ T4311] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 209.703741][ T4311] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 209.707450][ T4313] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 209.963717][ T6089] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.188255][ T6089] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.003869][ T6749] lo speed is unknown, defaulting to 1000 [ 212.473070][ T4313] Bluetooth: hci3: command 0x0409 tx timeout [ 212.521005][ T6089] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.066067][ T6089] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.824913][ T6845] loop1: detected capacity change from 0 to 32768 [ 214.934434][ T4313] Bluetooth: hci3: command 0x041b tx timeout [ 215.477404][ T6749] chnl_net:caif_netlink_parms(): no params data found [ 215.503160][ T6845] Dev loop1 SGI disklabel: csum bad, label corrupted [ 215.528903][ T3922] Dev loop1 SGI disklabel: csum bad, label corrupted [ 217.013634][ T4313] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 217.016295][ T4313] Bluetooth: hci2: Injecting HCI hardware error event [ 217.018816][ T4313] Bluetooth: hci3: command 0x040f tx timeout [ 217.020671][ T4313] Bluetooth: hci2: hardware error 0x00 [ 218.888076][ T6749] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.890076][ T6749] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.892727][ T6749] device bridge_slave_0 entered promiscuous mode [ 218.914144][ T6749] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.916487][ T6749] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.929525][ T6749] device bridge_slave_1 entered promiscuous mode [ 219.072391][ T47] Bluetooth: hci3: command 0x0419 tx timeout [ 219.130344][ T6891] Driver unsupported XDP return value 0 on prog (id 73) dev N/A, expect packet loss! [ 219.709668][ T6749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.716186][ T6749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.719207][ T6878] process 'syz.1.709' launched '´£«.j—DH' with NULL argv: empty string added [ 219.960561][ T6900] loop5: detected capacity change from 0 to 256 [ 219.962932][ T6900] exfat: Deprecated parameter 'namecase' [ 219.984128][ T6900] exfat: Deprecated parameter 'namecase' [ 220.015815][ T4313] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 220.026873][ T6900] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x18d51376, utbl_chksum : 0xe619d30d) [ 220.154437][ T6749] team0: Port device team_slave_0 added [ 220.172304][ T6907] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.175006][ T6907] device batadv_slave_0 entered promiscuous mode [ 220.287653][ T6749] team0: Port device team_slave_1 added [ 222.736173][ T6944] binder: 6943:6944 tried to acquire reference to desc 0, got 1 instead [ 222.739938][ T6944] binder: release 6943:6944 transaction 134 out, still active [ 222.758981][ T6944] binder: undelivered TRANSACTION_COMPLETE [ 222.827889][ T4442] binder: send failed reply for transaction 134, target dead [ 222.946718][ T6749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.948663][ T6749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.970994][ T6749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.984114][ T6749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.001591][ T6749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.014292][ T6749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.898735][ T6968] loop1: detected capacity change from 0 to 256 [ 223.901113][ T6968] exfat: Deprecated parameter 'namecase' [ 223.902783][ T6968] exfat: Deprecated parameter 'namecase' [ 223.943456][ T6968] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x18d51376, utbl_chksum : 0xe619d30d) [ 223.994920][ T6970] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.998179][ T6970] device batadv_slave_0 entered promiscuous mode [ 224.947507][ T6749] device hsr_slave_0 entered promiscuous mode [ 224.986120][ T6749] device hsr_slave_1 entered promiscuous mode [ 225.026012][ T6749] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 225.028110][ T6749] Cannot create hsr debugfs directory [ 227.743366][ T7036] loop5: detected capacity change from 0 to 8192 [ 227.769740][ T7036] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 227.773590][ T7036] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 227.822032][ T7036] REISERFS (device loop5): using ordered data mode [ 227.823818][ T7036] reiserfs: using flush barriers [ 227.832925][ T7036] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 227.841378][ T7036] REISERFS (device loop5): checking transaction log (loop5) [ 227.847784][ T7036] REISERFS (device loop5): Using r5 hash to sort names [ 227.851827][ T7036] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 228.199271][ T7049] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.872072][ T7049] device batadv_slave_0 entered promiscuous mode [ 229.024463][ T6089] device hsr_slave_0 left promiscuous mode [ 229.798998][ T6089] device hsr_slave_1 left promiscuous mode [ 229.926224][ T6089] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.928285][ T6089] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.944335][ T6089] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.948689][ T6089] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.956415][ T6089] device bridge_slave_1 left promiscuous mode [ 229.958148][ T6089] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.047498][ T6089] device bridge_slave_0 left promiscuous mode [ 230.049295][ T6089] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.125893][ T6089] device veth1_macvtap left promiscuous mode [ 231.127629][ T6089] device veth0_macvtap left promiscuous mode [ 231.129398][ T6089] device veth1_vlan left promiscuous mode [ 231.131096][ T6089] device veth0_vlan left promiscuous mode [ 232.077687][ T7094] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 232.080766][ T7094] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 236.321323][ T6089] team0 (unregistering): Port device team_slave_1 removed [ 236.528240][ T6089] team0 (unregistering): Port device team_slave_0 removed [ 236.727326][ T6089] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 236.956459][ T6089] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.622706][ T6089] bond0 (unregistering): Released all slaves [ 239.839336][ T7107] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.842670][ T7107] device batadv_slave_0 entered promiscuous mode [ 239.869576][ T6749] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 239.920712][ T6749] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 239.967387][ T6749] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 240.014597][ T6749] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 240.183123][ T6749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.190526][ T6843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 240.197884][ T6843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 240.202722][ T6749] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.211171][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 240.213951][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 240.218064][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.220047][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.223072][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 240.232281][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 240.235172][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 240.238700][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.240746][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.243211][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 240.257021][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 240.260112][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 240.264746][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 240.278189][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 240.281249][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 240.289327][ T6749] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 240.293526][ T6749] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 240.298223][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 240.301037][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 240.304225][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 240.323017][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 240.326770][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 240.332973][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 240.479715][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 240.482016][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 240.500197][ T6749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.730597][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 240.733372][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 240.741837][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 240.744562][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 240.754634][ T6749] device veth0_vlan entered promiscuous mode [ 240.762748][ T6749] device veth1_vlan entered promiscuous mode [ 240.765238][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 240.769927][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 240.772386][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 240.795228][ T6749] device veth0_macvtap entered promiscuous mode [ 240.801715][ T6749] device veth1_macvtap entered promiscuous mode [ 240.806035][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 240.808705][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 240.811592][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 240.814517][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 240.821634][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 240.837391][ T6749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.840278][ T6749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.842963][ T6749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.847028][ T6749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.851116][ T6749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 240.853206][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 240.856470][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 240.861195][ T6749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.864120][ T6749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.867576][ T6749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.870674][ T6749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.873695][ T6749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.878908][ T6749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.881697][ T6749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.884638][ T6749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.895257][ T6749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.898972][ T6749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.901700][ T6749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.904732][ T6749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.916345][ T6749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.919782][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 240.922678][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 240.934389][ T6749] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.937014][ T6749] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.939358][ T6749] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.941780][ T6749] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.012147][ T1588] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.014471][ T1588] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.027107][ T6089] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 241.030252][ T6089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.032587][ T6089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.044910][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 245.072978][ T7222] loop1: detected capacity change from 0 to 256 [ 245.092118][ T7222] exfat: Deprecated parameter 'utf8' [ 245.102373][ T7222] exfat: Deprecated parameter 'namecase' [ 245.104267][ T7222] exfat: Deprecated parameter 'namecase' [ 245.114437][ T7222] exfat: Deprecated parameter 'utf8' [ 245.152577][ T7222] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0x822ffc2e, utbl_chksum : 0xe619d30d) [ 245.462655][ T7233] netlink: 165 bytes leftover after parsing attributes in process `syz.5.770'. [ 245.708926][ T7241] loop1: detected capacity change from 0 to 8192 [ 245.732437][ T7241] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 245.743063][ T7241] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 245.750412][ T7241] REISERFS (device loop1): using ordered data mode [ 245.755950][ T7241] reiserfs: using flush barriers [ 245.849069][ T7241] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 245.867078][ T7241] REISERFS (device loop1): checking transaction log (loop1) [ 246.778658][ T7241] REISERFS (device loop1): Using r5 hash to sort names [ 246.791707][ T7241] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 246.937187][ T7265] loop5: detected capacity change from 0 to 512 [ 247.012182][ T7265] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 247.889854][ T6400] EXT4-fs (loop5): unmounting filesystem. [ 248.283831][ T7288] netlink: 60 bytes leftover after parsing attributes in process `syz.5.788'. [ 248.816493][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.818709][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 252.608905][ T7342] loop7: detected capacity change from 0 to 256 [ 252.649799][ T7342] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 254.415190][ T7361] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 254.422846][ T7361] CIFS mount error: No usable UNC path provided in device string! [ 254.422846][ T7361] [ 254.426045][ T7361] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 257.222565][ T7389] loop7: detected capacity change from 0 to 1024 [ 257.261774][ T7389] hfsplus: invalid uid specified [ 257.275284][ T7389] hfsplus: unable to parse mount options [ 258.206635][ T4313] Bluetooth: hci4: link tx timeout [ 258.208419][ T4313] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 259.766854][ T7430] loop1: detected capacity change from 0 to 64 [ 259.821070][ T7430] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 259.854154][ T7430] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop1 [ 260.052841][ T7430] netlink: 'syz.1.825': attribute type 2 has an invalid length. [ 260.265643][ T4313] Bluetooth: hci4: command 0x0406 tx timeout [ 262.271783][ T7472] binder: 7471:7472 tried to acquire reference to desc 0, got 1 instead [ 262.288777][ T7470] device syzkaller0 entered promiscuous mode [ 262.299178][ T7472] binder: 7471:7472 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 262.302790][ T7472] binder: 7472 RLIMIT_NICE not set [ 262.304188][ T7472] binder: 7472 RLIMIT_NICE not set [ 263.020427][ T7472] binder: 7472 RLIMIT_NICE not set [ 263.022097][ T7472] binder: 7471:7472 got transaction with invalid parent offset or type [ 263.024414][ T7472] binder: 7471:7472 transaction reply to 7471:7472 failed 140/29201/-22, size 96-24 line 3448 [ 263.035806][ T7472] binder: send failed reply for transaction 139 to 7471:7472 [ 263.077030][ T240] tipc: Left network mode [ 263.136152][ T111] binder: undelivered TRANSACTION_ERROR: 29190 [ 263.138050][ T111] binder: undelivered TRANSACTION_COMPLETE [ 263.139821][ T111] binder: undelivered TRANSACTION_ERROR: 29201 [ 263.164116][ T7486] netlink: 4 bytes leftover after parsing attributes in process `syz.0.838'. [ 263.241615][ T7488] binder: 7487:7488 tried to acquire reference to desc 0, got 1 instead [ 263.252728][ T7488] binder: 7487:7488 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 263.261368][ T7488] binder: 7488 RLIMIT_NICE not set [ 263.262795][ T7488] binder: 7488 RLIMIT_NICE not set [ 263.289351][ T111] binder: undelivered TRANSACTION_COMPLETE [ 263.291179][ T111] binder: undelivered TRANSACTION_COMPLETE [ 263.292737][ T111] binder: undelivered transaction 148, process died. [ 267.160739][ T7543] tipc: Failed to remove unknown binding: 66,1,1/4:3327005845/3327005847 [ 267.184183][ T7543] tipc: Failed to remove unknown binding: 66,1,1/4:3327005845/3327005847 [ 267.187164][ T7543] tipc: Failed to remove unknown binding: 66,1,1/4:3327005845/3327005847 [ 282.603800][ T7716] sch_tbf: burst 1821 is lower than device lo mtu (11337746) ! [ 282.804310][ T7717] netlink: 12 bytes leftover after parsing attributes in process `syz.0.877'. [ 289.483620][ T4313] Bluetooth: Wrong link type (-22) [ 290.705734][ T7793] netlink: 'syz.1.894': attribute type 4 has an invalid length. [ 290.788879][ T7795] netlink: 'syz.1.894': attribute type 4 has an invalid length. [ 291.661403][ T240] device hsr_slave_0 left promiscuous mode [ 291.686356][ T240] device hsr_slave_1 left promiscuous mode [ 291.781166][ T7827] binder_user_error: 2 callbacks suppressed [ 291.781179][ T7827] binder: 7824:7827 tried to acquire reference to desc 0, got 1 instead [ 291.801150][ T111] binder: release 7824:7827 transaction 153 out, still active [ 291.803469][ T111] binder: undelivered TRANSACTION_COMPLETE [ 291.846684][ T24] binder: send failed reply for transaction 153, target dead [ 291.848323][ T240] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 291.849287][ T24] binder: undelivered death notification, 0000000000000000 [ 291.880876][ T240] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.416557][ T7839] loop5: detected capacity change from 0 to 2048 [ 293.419581][ T47] Bluetooth: Wrong link type (-22) [ 293.503833][ T7839] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 294.101809][ T240] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.103954][ T240] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 294.106596][ T240] device bridge_slave_1 left promiscuous mode [ 294.149815][ T240] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.326949][ T240] device bridge_slave_0 left promiscuous mode [ 294.329093][ T240] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.794294][ T240] device veth1_macvtap left promiscuous mode [ 294.815725][ T240] device veth0_macvtap left promiscuous mode [ 294.817784][ T240] device veth1_vlan left promiscuous mode [ 294.819542][ T240] device veth0_vlan left promiscuous mode [ 294.842254][ T7850] loop5: detected capacity change from 0 to 1024 [ 294.877444][ T7850] EXT4-fs: Ignoring removed nobh option [ 294.894426][ T7850] EXT4-fs: Ignoring removed bh option [ 294.924209][ T7850] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 295.034002][ T7850] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 295.292782][ T6400] EXT4-fs (loop5): unmounting filesystem. [ 295.388346][ T240] bond1 (unregistering): (slave vlan2): Releasing active interface [ 296.997336][ T240] bond1 (unregistering): Released all slaves [ 299.000230][ T240] team0 (unregistering): Port device team_slave_1 removed [ 299.208885][ T240] team0 (unregistering): Port device team_slave_0 removed [ 299.406686][ T240] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 299.626445][ T240] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 302.211599][ T240] bond0 (unregistering): Released all slaves [ 302.455901][ T7842] netlink: 4 bytes leftover after parsing attributes in process `syz.7.910'. [ 302.466247][ T7853] netlink: 4 bytes leftover after parsing attributes in process `syz.7.910'. [ 302.587967][ T7884] netlink: 'syz.0.921': attribute type 3 has an invalid length. [ 302.590372][ T7884] netlink: 'syz.0.921': attribute type 3 has an invalid length. [ 303.406702][ T7894] netlink: 20 bytes leftover after parsing attributes in process `syz.1.920'. [ 303.409379][ T7894] netlink: 152 bytes leftover after parsing attributes in process `syz.1.920'. [ 304.489720][ T7894] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 304.494871][ T7901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.924'. [ 306.115585][ T47] Bluetooth: hci4: command 0x0406 tx timeout [ 307.685496][ T7955] device batadv0 entered promiscuous mode [ 307.687674][ T7955] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 307.690846][ T7955] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 307.693788][ T7953] netlink: 60 bytes leftover after parsing attributes in process `syz.0.938'. [ 307.719741][ T7956] mmap: syz.1.937 (7956): VmData 175906816 exceed data ulimit 67108945. Update limits or use boot option ignore_rlimit_data. [ 309.227138][ T7977] fuse: Bad value for 'fd' [ 310.687249][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.689173][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 310.729391][ T7998] blk_print_req_error: 71 callbacks suppressed [ 310.729405][ T7998] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 310.734046][ T7998] FAT-fs (loop1): unable to read boot sector [ 310.798982][ T27] audit: type=1326 audit(540.766:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7991 comm="syz.0.947" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8cf5af28 code=0x7ffc0000 [ 310.809056][ T27] audit: type=1326 audit(540.776:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7991 comm="syz.0.947" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=448 compat=0 ip=0xffff8cf5af28 code=0x7ffc0000 [ 310.815309][ T27] audit: type=1326 audit(540.776:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7991 comm="syz.0.947" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8cf5af28 code=0x7ffc0000 [ 310.843587][ T27] audit: type=1326 audit(540.776:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7991 comm="syz.0.947" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff8cf59454 code=0x7ffc0000 [ 310.857045][ T27] audit: type=1326 audit(540.776:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7991 comm="syz.0.947" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8cf5af28 code=0x7ffc0000 [ 310.866533][ T27] audit: type=1326 audit(540.776:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7991 comm="syz.0.947" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff8cf5af28 code=0x7ffc0000 [ 310.872447][ T27] audit: type=1326 audit(540.776:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7991 comm="syz.0.947" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8cf5af28 code=0x7ffc0000 [ 311.866906][ T8011] loop5: detected capacity change from 0 to 8192 [ 311.891025][ T8011] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 311.894580][ T8011] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 311.985992][ T8011] REISERFS (device loop5): using ordered data mode [ 311.987960][ T8011] reiserfs: using flush barriers [ 312.025676][ T8011] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 312.046128][ T8011] REISERFS (device loop5): checking transaction log (loop5) [ 312.077206][ T8011] REISERFS (device loop5): Using r5 hash to sort names [ 312.079366][ T8011] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 312.320407][ T8011] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 253, free_space(entry_count) 2 [ 312.334292][ T8011] REISERFS error (device loop5): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 313.243614][ T8035] loop1: detected capacity change from 0 to 256 [ 313.607871][ T8011] REISERFS (device loop5): Remounting filesystem read-only [ 313.612430][ T8011] REISERFS error (device loop5): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 3 0x0 SD] stat data [ 313.908974][ T8035] FAT-fs (loop1): Directory bread(block 64) failed [ 313.910885][ T8035] FAT-fs (loop1): Directory bread(block 65) failed [ 313.912794][ T8035] FAT-fs (loop1): Directory bread(block 66) failed [ 313.914782][ T8035] FAT-fs (loop1): Directory bread(block 67) failed [ 313.916938][ T8035] FAT-fs (loop1): Directory bread(block 68) failed [ 313.918785][ T8035] FAT-fs (loop1): Directory bread(block 69) failed [ 313.920701][ T8035] FAT-fs (loop1): Directory bread(block 70) failed [ 313.922477][ T8035] FAT-fs (loop1): Directory bread(block 71) failed [ 313.924371][ T8035] FAT-fs (loop1): Directory bread(block 72) failed [ 313.926336][ T8035] FAT-fs (loop1): Directory bread(block 73) failed [ 314.089485][ T8011] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 253, free_space(entry_count) 2 [ 314.105319][ T8011] REISERFS error (device loop5): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 314.108818][ T8011] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 253, free_space(entry_count) 2 [ 314.112918][ T8011] REISERFS error (device loop5): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 315.367017][ T8011] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 253, free_space(entry_count) 2 [ 315.405712][ T8011] REISERFS error (device loop5): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 315.409312][ T8011] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 253, free_space(entry_count) 2 [ 315.494230][ T8011] REISERFS error (device loop5): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 315.508055][ T8011] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 253, free_space(entry_count) 2 [ 315.528236][ T8011] REISERFS error (device loop5): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 315.536047][ T8011] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 253, free_space(entry_count) 2 [ 315.565886][ T8011] REISERFS error (device loop5): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 315.613901][ T8011] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 253, free_space(entry_count) 2 [ 315.618314][ T8011] REISERFS error (device loop5): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 315.621357][ T8011] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 253, free_space(entry_count) 2 [ 315.626400][ T8011] REISERFS error (device loop5): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 315.630804][ T8011] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 253, free_space(entry_count) 2 [ 315.634951][ T8011] REISERFS error (device loop5): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 315.639100][ T8011] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 253, free_space(entry_count) 2 [ 315.786185][ T8064] loop1: detected capacity change from 0 to 8 [ 315.788566][ T8064] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 317.272446][ T8064] cramfs: Error -5 while decompressing! [ 317.274370][ T8064] cramfs: 00000000dd6183ac(26)->000000000b802875(4096) [ 317.276387][ T8064] cramfs: Error -3 while decompressing! [ 317.277918][ T8064] cramfs: 00000000319a8d6c(26)->00000000c6e3603d(4096) [ 317.282132][ T8064] cramfs: Error -3 while decompressing! [ 317.286865][ T8064] cramfs: 000000002959a8c7(16)->0000000049e7a67b(4096) [ 317.288870][ T8064] cramfs: Error -5 while decompressing! [ 317.290404][ T8064] cramfs: 00000000dd6183ac(26)->000000000b802875(4096) [ 317.553037][ T8011] REISERFS error (device loop5): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 317.596688][ T8011] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 253, free_space(entry_count) 2 [ 317.658828][ T8025] udevd[8025]: incorrect cramfs checksum on /dev/loop1 [ 317.664467][ T8011] REISERFS error (device loop5): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 317.684335][ T8011] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 253, free_space(entry_count) 2 [ 317.858824][ T8011] REISERFS error (device loop5): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 317.876611][ T8011] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 253, free_space(entry_count) 2 [ 317.880982][ T8011] REISERFS error (device loop5): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 317.900398][ T8011] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 253, free_space(entry_count) 2 [ 317.904792][ T8011] REISERFS error (device loop5): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 318.080170][ T8011] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 253, free_space(entry_count) 2 [ 318.140152][ T8011] REISERFS error (device loop5): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 318.656550][ T8011] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 253, free_space(entry_count) 2 [ 318.660917][ T8011] REISERFS error (device loop5): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 318.664052][ T8011] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 253, free_space(entry_count) 2 [ 318.668623][ T8011] REISERFS error (device loop5): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 323.134463][ T8119] netlink: 'syz.4.974': attribute type 3 has an invalid length. [ 323.149326][ T8119] netlink: 'syz.4.974': attribute type 3 has an invalid length. [ 323.703542][ T8134] netlink: 24 bytes leftover after parsing attributes in process `syz.5.980'. [ 327.068067][ T8186] loop7: detected capacity change from 0 to 512 [ 327.612674][ T8186] EXT4-fs (loop7): 1 truncate cleaned up [ 327.614355][ T8186] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 328.468015][ T8266] loop1: detected capacity change from 0 to 2048 [ 328.586639][ T6749] EXT4-fs (loop7): unmounting filesystem. [ 329.601600][ T8266] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 332.338836][ T8304] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1005'. [ 332.368285][ T8304] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 332.452372][ T4306] EXT4-fs (loop1): unmounting filesystem. [ 333.079364][ T47] Bluetooth: hci3: command 0x0406 tx timeout [ 333.588529][ T8334] binder: 8333:8334 tried to acquire reference to desc 0, got 1 instead [ 333.603903][ T8334] binder_alloc: 8333: pid 8333 spamming oneway? 2 buffers allocated for a total size of 5120 [ 333.614082][ T8334] binder_alloc: 8333: pid 8333 spamming oneway? 3 buffers allocated for a total size of 5128 [ 333.647676][ T8334] binder: 8333:8334 BC_FREE_BUFFER u0000000020ffd000 matched unreturned or currently freeing buffer [ 333.665280][ T4449] binder: undelivered TRANSACTION_COMPLETE [ 333.667599][ T4449] binder: undelivered TRANSACTION_COMPLETE [ 333.669246][ T4449] binder: undelivered TRANSACTION_COMPLETE [ 333.721615][ T4449] binder: undelivered transaction 165, process died. [ 333.723546][ T4449] binder: undelivered transaction 166, process died. [ 333.725488][ T4449] binder: undelivered transaction 164, process died. [ 335.246200][ T8346] trusted_key: encrypted_key: insufficient parameters specified [ 335.732728][ T8368] tipc: Started in network mode [ 336.946086][ T8368] tipc: Node identity 4, cluster identity 4711 [ 336.947877][ T8368] tipc: Node number set to 4 [ 336.965085][ T8376] netlink: 'syz.4.1024': attribute type 8 has an invalid length. [ 337.092287][ T8383] loop1: detected capacity change from 0 to 1024 [ 337.246113][ T8383] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 337.249076][ T8392] tipc: Enabled bearer , priority 10 [ 338.022946][ T8392] tipc: Enabled bearer , priority 0 [ 340.464097][ T4306] EXT4-fs (loop1): unmounting filesystem. [ 343.958675][ T8446] binder: 8445:8446 tried to acquire reference to desc 0, got 1 instead [ 343.964491][ T8446] binder: 8445:8446 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 343.968163][ T8446] binder: 8446 RLIMIT_NICE not set [ 343.969511][ T8446] binder: 8446 RLIMIT_NICE not set [ 343.989020][ T4365] binder: release 8445:8446 transaction 171 out, still active [ 343.991144][ T4365] binder: undelivered TRANSACTION_COMPLETE [ 343.992886][ T4365] binder: send failed reply for transaction 178 to 8445:8446 [ 344.000153][ T4365] binder: release 8445:8446 transaction 171 in, still active [ 344.002318][ T4365] binder: send failed reply for transaction 171, target dead [ 344.004506][ T4365] binder: undelivered TRANSACTION_COMPLETE [ 344.015840][ T4365] binder: undelivered TRANSACTION_ERROR: 29189 [ 344.029178][ T8448] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1041'. [ 344.030620][ T8450] loop5: detected capacity change from 0 to 512 [ 344.092872][ T8448] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1041'. [ 344.111591][ T8450] EXT4-fs (loop5): 1 truncate cleaned up [ 344.113316][ T8450] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 345.189707][ T27] audit: type=1326 audit(575.156:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8492 comm="syz.1.1048" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffad95af28 code=0x0 [ 345.427254][ T6400] EXT4-fs (loop5): unmounting filesystem. [ 345.957616][ T8547] loop1: detected capacity change from 0 to 256 [ 345.972595][ T8547] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 347.331099][ T8579] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1063'. [ 348.554951][ T8594] syz.1.1067 sent an empty control message without MSG_MORE. [ 348.984488][ T8607] loop1: detected capacity change from 0 to 128 [ 349.000724][ T8607] FAT-fs (loop1): bogus number of FAT structure [ 349.002543][ T8607] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 349.017326][ T8607] FAT-fs (loop1): Can't find a valid FAT filesystem [ 349.935899][ T8612] xt_bpf: check failed: parse error [ 349.958214][ T8619] dccp_invalid_packet: P.Data Offset(0) too small [ 353.697144][ T8689] netlink: 'syz.1.1088': attribute type 1 has an invalid length. [ 354.461352][ T8689] 8021q: adding VLAN 0 to HW filter on device bond2 [ 354.926828][ T8696] bond2: (slave veth9): Enslaving as an active interface with a down link [ 356.401666][ T8689] device veth1 entered promiscuous mode [ 356.409533][ T8689] device veth1 left promiscuous mode [ 356.426325][ T8689] bond2: (slave vlan2): making interface the new active one [ 356.436989][ T8689] device veth1 entered promiscuous mode [ 356.449911][ T8689] device vlan2 entered promiscuous mode [ 356.451808][ T8689] bond2: (slave vlan2): Enslaving as an active interface with an up link [ 356.633341][ T7405] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 356.643909][ T8687] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 359.375691][ C1] vcan0: j1939_tp_rxtimer: 0x0000000020630101: rx timeout, send abort [ 359.616102][ T8746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.667573][ T8746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.879760][ C1] vcan0: j1939_tp_rxtimer: 0x0000000020630101: abort rx timeout. Force session deactivation [ 366.233074][ T8794] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1110'. [ 369.587641][ T8862] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1119'. [ 370.175714][ T47] Bluetooth: hci1: command 0x2016 tx timeout [ 371.723374][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 371.725165][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 374.111598][ T8913] tipc: Enabling of bearer rejected, failed to enable media [ 378.394360][ T8983] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 378.521591][ T8986] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1147'. [ 379.565034][ T9007] loop1: detected capacity change from 0 to 1024 [ 379.597968][ T9008] netlink: 'syz.0.1154': attribute type 1 has an invalid length. [ 379.739708][ T9014] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 379.769459][ T9013] binder: 9011:9013 tried to acquire reference to desc 0, got 1 instead [ 379.774614][ T9007] hfsplus: request for non-existent node 33423360 in B*Tree [ 379.786046][ T7014] device vlan2 left promiscuous mode [ 379.813944][ T9007] hfsplus: request for non-existent node 33423360 in B*Tree [ 379.820248][ T9013] binder: 9011:9013 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 379.861642][ T9013] binder: 9013 RLIMIT_NICE not set [ 379.999312][ T9013] binder: 9013 RLIMIT_NICE not set [ 380.516899][ T9025] binder: 9011:9025 got reply transaction with no transaction stack [ 380.519120][ T9025] binder: 9011:9025 transaction reply to 0:0 failed 184/29201/-71, size 0-0 line 2955 [ 380.556044][ T9020] hfsplus: request for non-existent node 33423360 in B*Tree [ 380.582474][ T9020] hfsplus: request for non-existent node 33423360 in B*Tree [ 380.736364][ T9024] hfsplus: request for non-existent node 33423360 in B*Tree [ 380.751725][ T9024] hfsplus: request for non-existent node 33423360 in B*Tree [ 380.790512][ T1516] binder: release 9011:9013 transaction 183 in, still active [ 380.792812][ T1516] binder: send failed reply for transaction 183 to 9011:9013 [ 380.795005][ T1516] binder: undelivered TRANSACTION_ERROR: 29201 [ 380.797102][ T1516] binder: undelivered TRANSACTION_COMPLETE [ 380.798696][ T1516] binder: undelivered TRANSACTION_ERROR: 29189 [ 380.813471][ T9007] hfsplus: request for non-existent node 33423360 in B*Tree [ 380.834900][ T9007] hfsplus: request for non-existent node 33423360 in B*Tree [ 381.596287][ T9008] bond4 (unregistering): (slave ip6gretap1): Releasing backup interface [ 381.645841][ T9020] hfsplus: request for non-existent node 33423360 in B*Tree [ 381.647972][ T9020] hfsplus: request for non-existent node 33423360 in B*Tree [ 381.700175][ T9034] hfsplus: request for non-existent node 33423360 in B*Tree [ 381.702279][ T9034] hfsplus: request for non-existent node 33423360 in B*Tree [ 381.719716][ T9024] hfsplus: request for non-existent node 33423360 in B*Tree [ 381.721848][ T9024] hfsplus: request for non-existent node 33423360 in B*Tree [ 381.731612][ T9008] bond4 (unregistering): Released all slaves [ 381.756124][ T9007] hfsplus: request for non-existent node 33423360 in B*Tree [ 381.758151][ T9007] hfsplus: request for non-existent node 33423360 in B*Tree [ 381.787394][ T9020] hfsplus: request for non-existent node 33423360 in B*Tree [ 381.789371][ T9020] hfsplus: request for non-existent node 33423360 in B*Tree [ 381.842940][ T9007] hfsplus: request for non-existent node 33423360 in B*Tree [ 381.845068][ T9007] hfsplus: request for non-existent node 33423360 in B*Tree [ 381.932487][ T9007] hfsplus: request for non-existent node 33423360 in B*Tree [ 381.934601][ T9007] hfsplus: request for non-existent node 33423360 in B*Tree [ 382.839043][ T9055] loop7: detected capacity change from 0 to 16 [ 383.065157][ T9055] erofs: (device loop7): mounted with root inode @ nid 36. [ 383.372457][ T47] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 383.382568][ T9055] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 383.390735][ T9055] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 383.395469][ T9055] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 383.399683][ T9055] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 383.452882][ T9057] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1164'. [ 383.464625][ T9057] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 383.467265][ T9057] IPv6: NLM_F_CREATE should be set when creating new route [ 384.833925][ T9067] loop7: detected capacity change from 0 to 512 [ 385.799015][ T9067] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 387.063675][ T6749] EXT4-fs (loop7): unmounting filesystem. [ 390.044809][ T9131] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1179'. [ 390.063033][ T9131] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1179'. [ 390.108615][ T9131] netlink: 'syz.7.1179': attribute type 10 has an invalid length. [ 390.138995][ T9131] bridge0: port 3(team0) entered blocking state [ 390.140872][ T9131] bridge0: port 3(team0) entered disabled state [ 390.143589][ T9131] device team0 entered promiscuous mode [ 390.145064][ T9131] device team_slave_0 entered promiscuous mode [ 390.186050][ T9131] device team_slave_1 entered promiscuous mode [ 390.277672][ T9131] bridge0: port 3(team0) entered blocking state [ 390.279650][ T9131] bridge0: port 3(team0) entered forwarding state [ 390.356788][ T9145] loop5: detected capacity change from 0 to 16 [ 391.129419][ T9145] erofs: (device loop5): mounted with root inode @ nid 36. [ 391.307708][ T47] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 391.311549][ T9145] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 391.316804][ T9145] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 391.320751][ T9145] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 391.324645][ T9145] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 391.819089][ T9151] tipc: Started in network mode [ 391.820538][ T9151] tipc: Node identity 080211000001, cluster identity 4711 [ 391.847700][ T9151] tipc: Enabled bearer , priority 0 [ 391.877515][ T9151] device syzkaller0 entered promiscuous mode [ 392.367182][ T9156] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1185'. [ 392.749741][ T9172] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1190'. [ 392.775933][ T9170] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1188'. [ 392.857974][ T14] tipc: Node number set to 134418688 [ 393.019750][ T9183] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 394.543240][ T9203] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1195'. [ 394.554326][ T9185] netlink: 'syz.7.1193': attribute type 1 has an invalid length. [ 394.632714][ T9192] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 394.635221][ T9192] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 394.637796][ T9192] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 394.640197][ T9192] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 394.643650][ T9192] bond1: (slave geneve2): making interface the new active one [ 394.646836][ T9192] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 394.708194][ T9198] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 394.739474][ T9196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1195'. [ 396.466039][ T9219] overlayfs: failed to clone upperpath [ 397.553197][ T9233] lo speed is unknown, defaulting to 1000 [ 401.574159][ T9285] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 401.593072][ T9278] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1214'. [ 401.692446][ T9261] ceph: No mds server is up or the cluster is laggy [ 401.700361][ T9294] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1217'. [ 403.027159][ T9317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1221'. [ 403.029745][ T9317] netlink: 'syz.1.1221': attribute type 5 has an invalid length. [ 403.031925][ T9317] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1221'. [ 403.202475][ T8258] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.204970][ T9317] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 403.210073][ T6861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.216299][ T9317] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 404.986157][ T7014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.997093][ T6843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.001435][ T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.045612][ T4365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.049384][ T4365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.056447][ T6861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.078432][ T1516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.081526][ T9317] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 405.083932][ T9317] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 405.264858][ T9317] device geneve2 entered promiscuous mode [ 406.021662][ T4365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.037562][ T27] audit: type=1326 audit(638.006:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9345 comm="syz.1.1228" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad95af28 code=0x7ffc0000 [ 408.048449][ T27] audit: type=1326 audit(638.016:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9345 comm="syz.1.1228" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffffad95af28 code=0x7ffc0000 [ 408.096932][ T27] audit: type=1326 audit(638.046:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9345 comm="syz.1.1228" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad95af28 code=0x7ffc0000 [ 408.102909][ T27] audit: type=1326 audit(638.046:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9345 comm="syz.1.1228" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad95af28 code=0x7ffc0000 [ 408.176814][ T27] audit: type=1326 audit(638.046:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9345 comm="syz.1.1228" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffad959454 code=0x7ffc0000 [ 408.183184][ T27] audit: type=1326 audit(638.046:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9345 comm="syz.1.1228" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad95af28 code=0x7ffc0000 [ 408.222986][ T27] audit: type=1326 audit(638.046:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9345 comm="syz.1.1228" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad95af28 code=0x7ffc0000 [ 408.255595][ T27] audit: type=1326 audit(638.046:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9345 comm="syz.1.1228" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffad95af28 code=0x7ffc0000 [ 408.295027][ T27] audit: type=1326 audit(638.046:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9345 comm="syz.1.1228" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad95af28 code=0x7ffc0000 [ 409.152582][ T27] audit: type=1326 audit(638.046:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9345 comm="syz.1.1228" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad95af28 code=0x7ffc0000 [ 409.992960][ T4297] net_ratelimit: 4 callbacks suppressed [ 409.992976][ T4297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.045706][ T9354] serio: Serial port pts0 [ 410.097820][ T7014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.222740][ T4297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.241297][ T4364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.243927][ T4364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.156612][ T7014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.190608][ T9388] loop5: detected capacity change from 0 to 256 [ 411.260234][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.263060][ T4364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.287136][ T4297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.293683][ T9388] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 411.316716][ T9394] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1239'. [ 411.489426][ T9388] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 411.492243][ T9388] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 411.514927][ T9388] UDF-fs: Scanning with blocksize 512 failed [ 411.996498][ T9388] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 412.011092][ T9388] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 413.063259][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.269900][ T9417] bridge0: port 1(vxlan0) entered blocking state [ 413.272063][ T9417] bridge0: port 1(vxlan0) entered disabled state [ 413.323073][ T9417] device vxlan0 entered promiscuous mode [ 414.405102][ T9436] Bluetooth: MGMT ver 1.22 [ 416.467682][ T4365] net_ratelimit: 2 callbacks suppressed [ 416.467699][ T4365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.523254][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.528085][ T6861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.698325][ T7405] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.721105][ T9466] loop1: detected capacity change from 0 to 1024 [ 417.535925][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.684138][ T9478] loop7: detected capacity change from 0 to 512 [ 417.704108][ T9478] EXT4-fs: Ignoring removed mblk_io_submit option [ 417.719636][ T9478] EXT4-fs: inline encryption not supported [ 417.734972][ T9478] EXT4-fs: Ignoring removed mblk_io_submit option [ 417.737357][ T9478] EXT4-fs: Ignoring removed nomblk_io_submit option [ 417.747041][ T9478] EXT4-fs (loop7): Test dummy encryption mode enabled [ 417.748953][ T9478] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 417.790394][ T9478] EXT4-fs (loop7): 1 truncate cleaned up [ 417.792438][ T9478] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 418.560179][ T9478] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 418.576358][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.543442][ T6861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.614140][ T6749] EXT4-fs (loop7): unmounting filesystem. [ 419.616335][ T4297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.677305][ T9508] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1264'. [ 419.688130][ T9508] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1264'. [ 419.718132][ T9512] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1267'. [ 419.723056][ T9512] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 419.850088][ T9511] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1266'. [ 420.619003][ T4449] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.656054][ T4449] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.726069][ T9522] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1268'. [ 420.776350][ T9526] tipc: Enabling of bearer rejected, failed to enable media [ 420.920458][ T9537] netlink: 'syz.7.1275': attribute type 10 has an invalid length. [ 420.924111][ T9534] loop1: detected capacity change from 0 to 1024 [ 420.974957][ T9534] EXT4-fs: Ignoring removed nobh option [ 420.987644][ T27] kauditd_printk_skb: 24 callbacks suppressed [ 420.987659][ T27] audit: type=1326 audit(650.946:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9536 comm="syz.0.1274" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8cf5af28 code=0x0 [ 420.998587][ T9534] EXT4-fs: Ignoring removed oldalloc option [ 421.001438][ T9534] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 421.059977][ T9537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.068428][ T9534] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 421.082180][ T9537] device bond0 entered promiscuous mode [ 421.083905][ T9537] device bond_slave_0 entered promiscuous mode [ 421.086228][ T9537] device bond_slave_1 entered promiscuous mode [ 421.088002][ T9537] device macvlan2 entered promiscuous mode [ 421.090685][ T9537] team0: Port device bond0 added [ 421.172131][ T9539] bridge0: port 3(team0) entered disabled state [ 422.199581][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.425734][ T9571] xt_bpf: check failed: parse error [ 423.403683][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.547800][ T9539] device team0 left promiscuous mode [ 423.549316][ T9539] device team_slave_0 left promiscuous mode [ 423.551030][ T9539] device team_slave_1 left promiscuous mode [ 423.552686][ T9539] device bond0 left promiscuous mode [ 423.554202][ T9539] device bond_slave_0 left promiscuous mode [ 423.574794][ T9539] device bond_slave_1 left promiscuous mode [ 423.576806][ T9539] device macvlan2 left promiscuous mode [ 423.579320][ T9539] bridge0: port 3(team0) entered disabled state [ 423.656936][ T9539] team0 (unregistering): Port device team_slave_0 removed [ 423.679023][ T9539] team0 (unregistering): Port device team_slave_1 removed [ 423.697554][ T4364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.702614][ T9539] team0 (unregistering): Port device bond0 removed [ 423.845136][ T4306] EXT4-fs (loop1): unmounting filesystem. [ 423.959552][ T9590] netlink: 'syz.1.1284': attribute type 1 has an invalid length. [ 424.162150][ T9590] bond3: (slave geneve3): Opening slave failed [ 424.241984][ T9597] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1284'. [ 424.417497][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.942930][ T9597] 8021q: adding VLAN 0 to HW filter on device bond3 [ 425.891862][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.307418][ T9621] netlink: 'syz.5.1292': attribute type 4 has an invalid length. [ 426.556460][ T6861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.592231][ T9630] set match dimension is over the limit! [ 427.814764][ T9627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1293'. [ 427.824323][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.826734][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.923423][ T4297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.258685][ T9674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1302'. [ 430.290942][ T9674] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 430.338297][ T9674] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1302'. [ 430.340989][ T9674] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 430.375157][ T9679] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1303'. [ 430.524845][ T4297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.732840][ T4297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.000960][ T4365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.027084][ T4297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.231917][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 433.233770][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 434.187485][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.690357][ T9736] loop1: detected capacity change from 0 to 64 [ 434.709077][ T9736] hfs: type requires a 4 character value [ 434.715915][ T9736] hfs: unable to parse mount options [ 435.753587][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.828592][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.831241][ T111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.942766][ T9742] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1318'. [ 436.899291][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.439923][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.666209][ T9782] loop7: detected capacity change from 0 to 1764 [ 439.252210][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.455704][ T8728] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 441.593979][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.380212][ T9808] netlink: 'syz.0.1330': attribute type 11 has an invalid length. [ 442.476795][ T6861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.714614][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.780097][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.538954][ T9833] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 444.541415][ T9833] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 445.323689][ T4297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.390510][ T6861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.391676][ T9833] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 445.396065][ T9833] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 445.967561][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.662455][ T4297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.468332][ T9833] device batadv0 left promiscuous mode [ 447.696686][ T4297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.895996][ T9833] bond0: (slave macvlan2): Releasing backup interface [ 448.445676][ T9868] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1342'. [ 448.458724][ T9868] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 448.479736][ T9873] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1342'. [ 448.580921][ T9884] lo speed is unknown, defaulting to 1000 [ 448.975864][ T4449] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.119546][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.204841][ T9895] xt_CT: You must specify a L4 protocol and not use inversions on it [ 450.106171][ T4297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.116940][ T9904] devtmpfs: Unknown parameter 'dirsyncâŽö€kÈá9Ä›‘Çk9X÷ð[GÓåñcN½13‰Ÿ”H¢ÿ“ðs³¡ä~ßv÷Ѹ¹ ÀßLû œŒ€‹Dì®” eOp°ªÁtÓCâ{7-`'«*ì+Ê×þk¹2¼WQÒ—N•EZ'£´r¼{½Ò¬Z¦èzÎ6Ì„¾e“Ubš±:ÔÃüú$#Cš6–[YÚH ^ŽBÌÇÌ@Éœøl !×/ŸJ±°åU¥£•“É8qÿ~µì­¶H7¢Ø‡#ïeªQRãÕ†NWXaò°–' [ 451.138494][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.855490][ T9938] tipc: Enabling of bearer rejected, failed to enable media [ 452.422600][ T1516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.742006][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.948674][ T9958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.951814][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.971298][ T9958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.982675][ T9958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.478193][ T9982] loop1: detected capacity change from 0 to 16 [ 454.505391][ T4297] net_ratelimit: 9 callbacks suppressed [ 454.505405][ T4297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.526725][ T9982] erofs: (device loop1): mounted with root inode @ nid 36. [ 455.314651][ T6861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.537458][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.039273][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.116306][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.876035][ T4449] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.083417][ T6861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.095111][ T4297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.095924][ T6861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.193792][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.445749][ T4449] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.452455][T10052] loop5: detected capacity change from 0 to 8192 [ 464.182414][T10052] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 464.206517][T10052] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 464.209120][T10052] REISERFS (device loop5): using ordered data mode [ 464.235712][T10052] reiserfs: using flush barriers [ 464.249322][T10052] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 464.302647][T10052] REISERFS (device loop5): checking transaction log (loop5) [ 464.308671][T10052] REISERFS (device loop5): Using r5 hash to sort names [ 464.310841][T10052] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 464.496384][ T4449] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.523654][ T6861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.924082][T10090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1391'. [ 465.146174][ T6861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.181891][T10096] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1393'. [ 465.189836][T10096] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1393'. [ 466.125858][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.136258][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.460836][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.015430][ T6861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.133330][T10164] loop5: detected capacity change from 0 to 4096 [ 471.602746][ T4449] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.711251][T10164] ntfs: volume version 3.1. [ 472.015799][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.754377][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.965954][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.043466][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.055981][ T6861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.161481][T10207] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1423'. [ 475.179941][T10207] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1423'. [ 476.294592][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.302462][T10213] device syzkaller0 entered promiscuous mode [ 477.621869][ T4449] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.226542][ T6861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.266599][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.306166][T10239] loop1: detected capacity change from 0 to 8192 [ 479.311944][T10239] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 479.317430][T10223] tipc: Enabling of bearer rejected, failed to enable media [ 482.455716][ T4449] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.245960][ T6861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.191253][ T4449] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.865746][ T6861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.311899][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.929967][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.002134][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.503738][ T4449] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.693157][ T6861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.825032][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.049479][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.125850][ T27] audit: type=1326 audit(978.086:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10350 comm="gtp" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8cf5af28 code=0x7ffc0000 [ 492.148551][T10346] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 492.235134][ T27] audit: type=1326 audit(978.176:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10350 comm="gtp" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8cf5af28 code=0x7ffc0000 [ 492.718386][ T27] audit: type=1326 audit(978.186:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10350 comm="gtp" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff8cf5af28 code=0x7ffc0000 [ 492.858295][ T27] audit: type=1326 audit(978.186:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10350 comm="gtp" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8cf5af28 code=0x7ffc0000 [ 492.864763][ T27] audit: type=1326 audit(978.186:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10350 comm="gtp" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8cf5af28 code=0x7ffc0000 [ 492.871185][ T27] audit: type=1326 audit(978.196:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10350 comm="gtp" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff8cf5af28 code=0x7ffc0000 [ 492.883737][ T27] audit: type=1326 audit(978.226:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10350 comm="gtp" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8cf5af28 code=0x7ffc0000 [ 492.977018][ T27] audit: type=1326 audit(978.236:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10350 comm="gtp" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8cf5af28 code=0x7ffc0000 [ 492.989457][ T27] audit: type=1326 audit(978.846:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10350 comm="gtp" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff8cf5af28 code=0x7ffc0000 [ 493.029061][ T27] audit: type=1326 audit(978.846:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10350 comm="gtp" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8cf5af28 code=0x7ffc0000 [ 493.116847][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.746241][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.813867][T10365] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1461'. [ 494.059474][T10365] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1461'. [ 494.061120][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.631522][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 494.633327][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 495.127672][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.422892][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.496737][T10390] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1470'. [ 497.114403][ T4364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.462816][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.496292][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.499524][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.501908][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.504303][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.506751][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.509077][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.313421][ T27] kauditd_printk_skb: 18 callbacks suppressed [ 499.313436][ T27] audit: type=1326 audit(985.276:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10424 comm="gtp" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab75af28 code=0x7ffc0000 [ 499.506944][ T27] audit: type=1326 audit(985.276:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10424 comm="gtp" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffab75af28 code=0x7ffc0000 [ 499.529213][ T27] audit: type=1326 audit(985.276:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10424 comm="gtp" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab75af28 code=0x7ffc0000 [ 500.014600][ T27] audit: type=1326 audit(985.276:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10424 comm="gtp" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab75af28 code=0x7ffc0000 [ 500.035481][ T27] audit: type=1326 audit(985.306:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10424 comm="gtp" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffab75af28 code=0x7ffc0000 [ 500.059929][ T27] audit: type=1326 audit(985.466:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10424 comm="gtp" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab75af28 code=0x7ffc0000 [ 500.087708][ T27] audit: type=1326 audit(985.466:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10424 comm="gtp" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab75af28 code=0x7ffc0000 [ 500.114457][ T27] audit: type=1326 audit(985.486:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10424 comm="gtp" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffab75af28 code=0x7ffc0000 [ 500.133572][ T27] audit: type=1326 audit(985.486:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10424 comm="gtp" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab75af28 code=0x7ffc0000 [ 500.243422][ T4365] net_ratelimit: 62 callbacks suppressed [ 500.243437][ T4365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.302795][ T27] audit: type=1326 audit(985.486:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10424 comm="gtp" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab75af28 code=0x7ffc0000 [ 500.996685][ T1516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.294474][T10449] loop7: detected capacity change from 0 to 40427 [ 501.320486][T10449] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 501.323233][T10449] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 501.561366][T10449] F2FS-fs (loop7): invalid crc value [ 502.034976][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.075651][T10456] tipc: Resetting bearer [ 502.199123][T10461] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1486'. [ 502.225631][T10449] F2FS-fs (loop7): Found nat_bits in checkpoint [ 502.271087][T10449] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 502.273362][T10449] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 503.451854][ T4365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.454270][ T1516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.715208][T10473] tipc: Enabled bearer , priority 0 [ 503.718348][T10473] device syzkaller0 entered promiscuous mode [ 503.827337][ T4365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.329377][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.399197][T10482] tipc: Resetting bearer [ 505.401601][T10471] tipc: Resetting bearer [ 505.617203][T10489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.619787][T10489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.813090][T10471] tipc: Disabling bearer [ 506.377175][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.505859][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.538053][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.063065][T10506] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 509.106098][ T1516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.539425][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.841498][ T1516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.920568][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.216831][ T1516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.329236][T10560] tipc: Started in network mode [ 513.330614][T10560] tipc: Node identity 3e076acb5bb5, cluster identity 4711 [ 513.332554][T10560] tipc: Enabled bearer , priority 0 [ 513.353768][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.356496][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.426023][T10550] device syzkaller0 entered promiscuous mode [ 514.345055][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.400456][T10560] tipc: Resetting bearer [ 514.434962][T10549] tipc: Resetting bearer [ 514.533470][T10577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.537029][T10577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.556374][T10549] tipc: Disabling bearer [ 514.872007][T10587] loop5: detected capacity change from 0 to 512 [ 514.885776][T10587] EXT2-fs (loop5): error: revision level too high, forcing read-only mode [ 514.888377][T10587] EXT2-fs (loop5): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=a00a8] [ 515.862829][ T1516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.435772][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.439116][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.988601][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.364028][T10597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1529'. [ 517.415220][T10607] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1522'. [ 517.629873][T10607] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1522'. [ 518.398285][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.448601][T10616] tipc: Enabled bearer , priority 0 [ 518.459017][T10616] device syzkaller0 entered promiscuous mode [ 520.121604][ T4365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.197225][ T1516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.262130][T10613] tipc: Resetting bearer [ 520.307611][T10640] binder: 10638:10640 tried to acquire reference to desc 0, got 1 instead [ 520.313818][T10640] binder: 10638:10640 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 520.318304][T10640] binder: 10640 RLIMIT_NICE not set [ 520.319721][T10640] binder: 10640 RLIMIT_NICE not set [ 520.322369][T10640] binder: 10640 RLIMIT_NICE not set [ 520.337728][ T1516] binder: undelivered TRANSACTION_COMPLETE [ 520.346448][T10644] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1528'. [ 520.357349][T10613] tipc: Disabling bearer [ 520.372341][T10641] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1530'. [ 522.269441][T10658] loop5: detected capacity change from 0 to 1024 [ 522.348711][T10658] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:477: comm syz.5.1535: Invalid block bitmap block 0 in block_group 0 [ 522.366388][ T1516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.375837][T10658] __quota_error: 14 callbacks suppressed [ 522.375851][T10658] Quota error (device loop5): write_blk: dquota write failed [ 522.379760][T10658] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 522.382471][T10658] EXT4-fs error (device loop5): ext4_acquire_dquot:6814: comm syz.5.1535: Failed to acquire dquot type 0 [ 522.389509][T10658] EXT4-fs error (device loop5): ext4_free_blocks:6210: comm syz.5.1535: Freeing blocks not in datazone - block = 0, count = 4096 [ 522.407769][T10658] EXT4-fs error (device loop5): ext4_read_inode_bitmap:140: comm syz.5.1535: Invalid inode bitmap blk 0 in block_group 0 [ 522.432550][T10658] EXT4-fs error (device loop5) in ext4_free_inode:362: Corrupt filesystem [ 522.446236][ T8258] Quota error (device loop5): do_check_range: Getting block 0 out of range 1-7 [ 522.449967][T10658] EXT4-fs (loop5): 1 orphan inode deleted [ 522.451603][T10658] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 522.470855][ T8258] EXT4-fs error (device loop5): ext4_release_dquot:6850: comm kworker/u4:33: Failed to release dquot type 0 [ 523.354942][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.364214][T10678] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1542'. [ 523.400467][T10678] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1542'. [ 523.430243][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.500089][T10692] netlink: 'syz.1.1545': attribute type 1 has an invalid length. [ 524.546561][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.578954][ T6400] EXT4-fs (loop5): unmounting filesystem. [ 524.677420][T10692] bond4: (slave geneve3): Opening slave failed [ 524.802363][T10701] bond4: (slave ip6gretap1): making interface the new active one [ 524.819166][T10701] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 525.616026][ T1516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.001205][ T4365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.009129][ T4505] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.012448][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.416279][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.944148][ T4364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.796512][T10714] net_ratelimit: 4 callbacks suppressed [ 527.796529][T10714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.009981][T10727] loop1: detected capacity change from 0 to 128 [ 528.014299][T10728] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1557'. [ 528.016403][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.019794][ T4449] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.051071][T10728] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1557'. [ 528.055730][T10727] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 528.235817][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.034578][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.427151][ T4449] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.519664][ T4364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.935706][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.625794][ T1516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.799175][T10755] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1571'. [ 532.167656][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.461599][T10744] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1561'. [ 533.190032][ T7649] net_ratelimit: 1 callbacks suppressed [ 533.190054][ T7649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.812577][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.818586][ T4365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.833960][ T4505] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.836702][ T1516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.840342][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.889067][T10769] tipc: Enabled bearer , priority 0 [ 533.896821][ T4306] EXT4-fs (loop1): unmounting filesystem. [ 533.904949][T10769] device syzkaller0 entered promiscuous mode [ 533.981258][ T4364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.597436][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.660705][T10781] tipc: Resetting bearer [ 535.815745][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.845833][T10767] tipc: Resetting bearer [ 535.893092][T10784] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000 [ 535.896225][T10784] Mem abort info: [ 535.897245][T10784] ESR = 0x0000000086000006 [ 535.898500][T10784] EC = 0x21: IABT (current EL), IL = 32 bits [ 535.900172][T10784] SET = 0, FnV = 0 [ 535.901261][T10784] EA = 0, S1PTW = 0 [ 535.902365][T10784] FSC = 0x06: level 2 translation fault [ 535.903916][T10784] user pgtable: 4k pages, 48-bit VAs, pgdp=000000012efaa000 [ 535.905860][T10784] [0000000000000000] pgd=080000012a11a003, p4d=080000012a11a003, pud=080000011537e003, pmd=0000000000000000 [ 535.909316][T10784] Internal error: Oops: 0000000086000006 [#1] PREEMPT SMP [ 535.911359][T10784] Modules linked in: [ 535.912423][T10784] CPU: 1 PID: 10784 Comm: syz.0.1572 Not tainted 6.1.147-syzkaller #0 [ 535.914659][T10784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 535.917390][T10784] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 535.919533][T10784] pc : 0x0 [ 535.920390][T10784] lr : bond_xdp_xmit+0x27c/0x45c [ 535.921768][T10784] sp : ffff8000210a7220 [ 535.922843][T10784] x29: ffff8000210a72e0 x28: 000000000000000f x27: ffff8000210a7248 [ 535.925050][T10784] x26: dfff800000000000 x25: ffff800012b2fcb8 x24: ffff0000d933c000 [ 535.927306][T10784] x23: fffffbffeffb9048 x22: ffff0000d6ad4000 x21: fffffbffeffb9048 [ 535.929548][T10784] x20: 0000000000000001 x19: 0000000000000000 x18: 0000000000000000 [ 535.931742][T10784] x17: 0000000000000000 x16: ffff8000082d0ec4 x15: 0000000000000002 [ 535.933943][T10784] x14: 0000000000000001 x13: 0000000000ff0100 x12: 0000000000080000 [ 535.936080][T10784] x11: 0000000000004980 x10: ffff80002183c000 x9 : ffff8000210a7280 [ 535.938280][T10784] x8 : 0000000000000000 x7 : 0000000000000000 x6 : 0000000000000000 [ 535.940469][T10784] x5 : 0000000000000000 x4 : 0000000000000008 x3 : 0000000000000001 [ 535.942704][T10784] x2 : ffff8000210a72a0 x1 : 0000000000000001 x0 : ffff0000d933c000 [ 535.944891][T10784] Call trace: [ 535.945833][T10784] 0x0 [ 535.946541][T10784] bq_xmit_all+0xab0/0xf10 [ 535.947769][T10784] __dev_flush+0xc4/0x18c [ 535.948990][T10784] xdp_do_flush+0x14/0x28 [ 535.950193][T10784] bpf_test_run_xdp_live+0x10e0/0x1544 [ 535.951691][T10784] bpf_prog_test_run_xdp+0x560/0xb88 [ 535.953120][T10784] bpf_prog_test_run+0x2dc/0x364 [ 535.954494][T10784] __sys_bpf+0x4ec/0x634 [ 535.955694][T10784] __arm64_sys_bpf+0x80/0x98 [ 535.957012][T10784] invoke_syscall+0x98/0x2bc [ 535.958227][T10784] el0_svc_common+0x138/0x258 [ 535.959508][T10784] do_el0_svc+0x58/0x13c [ 535.960656][T10784] el0_svc+0x58/0x138 [ 535.961774][T10784] el0t_64_sync_handler+0x84/0xf0 [ 535.963125][T10784] el0t_64_sync+0x18c/0x190 [ 535.964392][T10784] Code: bad PC value [ 535.965490][T10784] ---[ end trace 0000000000000000 ]--- [ 536.618011][T10784] Kernel panic - not syncing: Oops: Fatal exception in interrupt [ 536.620281][T10784] SMP: stopping secondary CPUs [ 536.621708][T10784] Kernel Offset: disabled [ 536.622885][T10784] CPU features: 0x080000,02070084,26017203 [ 536.624508][T10784] Memory Limit: none [ 537.221618][T10784] Rebooting in 86400 seconds..