last executing test programs: 1m47.110122359s ago: executing program 1 (id=32): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0xffff, 0x0) vmsplice(r1, &(0x7f0000000380)=[{&(0x7f00000002c0)="8a", 0x1}], 0x1, 0x6) 1m46.160586709s ago: executing program 1 (id=50): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe452, 0x1, 0x7, 0x5, 0xa, 0x1, 0x0, 0x10001, 0x1ff}}}}]}, 0x58}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000780)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x1, 0x0, 0x4, 0x2, 0x5, 0x0, 0x0, 0x5}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4044010}, 0x20000000) 1m45.96514954s ago: executing program 1 (id=54): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x24020400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) shutdown(r2, 0x2000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x1f) 1m45.872023885s ago: executing program 1 (id=57): syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x2014890, &(0x7f0000000880)=ANY=[@ANYRES64=0x0, @ANYRES8, @ANYBLOB=',quota,gid=', @ANYRESHEX=0x0, @ANYBLOB=',integrity,e\trors=continue,discard,noquota\x00iochazset=cp850,grpquota,usrquota,uid=', @ANYRESHEX, @ANYRES64, @ANYRES64, @ANYBLOB="7b237355b4d1e791f66bd33bf0dbf679a0897d95ea333c059c60d6965ade9ca00754fa38b119d807c1bae66ea7b03dc51eaa567a467bf9f56f73398007377efb2e2e3f7c8a41e88968f9a4730c50424895a2ea3b3f1bac810636bf", @ANYRES8, @ANYRES64=0x0, @ANYRES32], 0x5, 0x619d, &(0x7f0000006a40)="$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") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000007100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r2, {0x7, 0x2b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, 0x50) read$FUSE(r0, &(0x7f0000002900)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r3}, 0x10) syz_fuse_handle_req(r0, &(0x7f0000004940)="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", 0x2000, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x3c}}) ioctl$FS_IOC_RESVSP(r1, 0x40086602, &(0x7f0000002740)={0x0, 0xdaff}) 1m45.600389649s ago: executing program 1 (id=63): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file0\x00') openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) 1m45.101607216s ago: executing program 4 (id=77): socket$inet_sctp(0x2, 0x1, 0x84) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x42, 0x1fb) close(r0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) 1m45.047024219s ago: executing program 4 (id=78): socket$inet_dccp(0x2, 0x6, 0x0) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000340)={0x0, 0x334f, 0x10, 0x3, 0x802}, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_complete(r1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100}) io_uring_enter(r0, 0x7277, 0x0, 0xe, 0x0, 0x0) 1m45.01659211s ago: executing program 4 (id=79): openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xa41, 0x23) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000000c0)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="d56cea33946c0eae3241d3604bfce89adddb2eb96960338db7572fa254eb7c69dc0cb526989630e26224c258c8d70ccacc5564d67723f4756c0399174c5460c4995942d24092c36dc820e97344798b5bb45423f853bf50e374323abacf0388cd091016b7a3d7843f4d3ae1658bd34d967e3323a64908442788dbc99c1f4248da53fb5be2c8001236b994ca594e3b3c588beaf3cb1c32c072d768b9e665e7d87044fdfc1fd6452593e6793963153f3850bf85042a5c139799ba8f6cb8d877fc436c4f1601270d6e29d60a4c80d6315e46f4219494ce897127d0b76f5d681e90f4e9282468ef7993cd92076aed266c1db8b81b93adc4969c9b89b32b8768c9f39f2d148e933dbb651746a9364f49986ef73b4c29f647b82b83216bb8179fe5346fdacdc5fda4bd48875cd2f1cf57a0c9a91e059446bac310a6d68948675c35a8e442168fd84d78d9800e5b05bdbce3a6eac65bee7279a3628f2a08931d3d52ce490652c20f8ae529eaf24bf421dad976c68b234ee6f6210c9f9aac3a55c6939d6aa3805b95619546264ff3ff82d0dc690e8ead61b6ed528c3c117cd771a3b7feb214ce8d720640d97f14b399b7f46dc4aad83117e8e642ccb117d13f345536fc3801c124cfaf8aa7aafff6c8df3fdd4469c077eccbd8ddacad80d9113dfde26ae67b226185743b2d53667fb3016fe114f87484ab614ddf0887c4b2c85351ab21a0ece6c066a154b38b4d7c1792d2db2cc5f8ceb42078187949d354b7a08d1529f3d10814757179c860db031dad4a3dc13ca01d1013238ed5f7a9674fcc77f0d34e2118fb851c970d86ecf9de1cfdb8d3ab197480e263c3207c3d7ebe17f9547c7c56b08e83de875294d0fd68df1926ecac24350b2c70bd73e14122ed480c564353d34049e67c26036fc35d04022cd35d6ac00756d3b8550bb22ae80a4bd630a00268d07fa249b0bf545dfbf01bea2f12b30738c6e13156244eb24e6d69ba7c3acdbbefe8bbc06b821aebf836ca07a3cc7b6b24686ed8f3b23085c893e72188b797651c5ab5cceb1465414a325f793a3af6d06eed7eb734ad05bc1f6619e8485259f570a482a67273ee01fe15dd938afce026f1111c7a38ed6d1aba34f009ce1e99140fd0db2de74150541fd48dd2ec5b1d15669de2ffe3a198184b6186ccda31aa64c585ff8cb65b67fe1455753895a88b6ab4c6bf1bb8329739178147e6f15801bfa707bd9ec9da662573ce07af684bb7c880a7d63b0a0a7300881408c44e95c679ea32b0eab845d0b333f245e8d6006258678704aa8cccdaf80cc46138d5b7a0804fdfa34c91d61a0d2fa6c62e7d1a675e5743f845ab40ea5df0182d6eb9781905c94751c75a411699a76f48433142c5f109d5dfddcc0b1dc6254efd5ea50d6ffbc7b9ca031e1a0123844b63c48b964645c6d24707582825e219bcd61677ed4fc45ee1f4be91b4c1b856d65a86acf22b8b0d588bc473248ac040326b1490c2fea24bc0c0a721e2ed63e39973cd4d38df1001dba9b9d995c229655dd26f3cd3d64077ec111e2c370717cb4cd068e0d3a52f1027d3df953e1f1ac768a7215a3695722b1b6714ce43801451a9532212b651d073c780d61712aebadd145c1cd95c1dc0dcf51850046ae5771e365f45858a36e48afe563ec0afee3803ff6a35bc25217b53eda39bb813b8d3d728c21a0b80d014003143666c0d1398cc46a01aaaf97117edda217f984010e7c5cf32535a669d4f11f6b70e3a3b823987ef7c9f878415063bf05205e13bcf7acb287bd0bb0fce77529a711f0ed145ea2ecf2194658dff17c5681cf8c7ad8521d235a705292af4878b3f124be2df661026c091d6c07aae1a74c919f7478d1083f70b3a0fe00c2e220ab998b4595268b6f7cabbfc85e59dfb6ab7a794cd3fd70d5cc4d70ca933a4452df5a345cb31f3267de53519ba39c915d492cd4652843f1d30a5fb311e3b5d868347969f013c5e3b4841b22240abcb61a14ff567186766ce8f6ae64877f672835dbff4fcf19c8230d8a402397630effb698a8b0c9a28ae028d7938ffde488fd64113085bce504cd0551e0eb3730c3f781cbecf0c41d2338766d3f6096661c1f1bec3162b8a0c4099fccd9480e821df8782c2e070530befb62bccd8539fe9dc7d8d3f9bded1bb34db3f2d6050885c8f1d57f5e603f629de7491f5fd9fafcceb565abeaec838b10a763a00a4607d4330bdcedc066d8cf9790d806e03c219866bb8f053a6e602645436d1f469df1d5008f5dcd4bdb7ce5b76ec015a8f4693cb2a63ceb2be00bcf221f0ca32db4efaf8f7022622b335fa8dea4afdd86be10be6c4d66e5f57416add4480509cb98cf31cdda84644eeb782eea041d4bc0e005a20bccc3c4a08cefcdb91cc2c61d9231c4e36e96f6edd2133f9b34e7da90ce20d1c60ff223c6a204bb942766a359b923573bbbaf2a827d79e4f649e79a840216ac4ddb3409c94e71ff08d109bc3f0cf6583219de7d7131a956f835ecf5c131a0b1e056a86d800a0204243f3b695029578c064306a31db53f28a8f0c0302486cd05970904e9b5c53100ac1aabb3110a89820e4d8307c3d46084999d0456c53fec61a9242b486eb41a90f3300fdfd0d8a472e8da7a842588721d1df1f5e4cc425efebc75a904ef4cc881346a4bc23eef4d492e3efccebab86ae4213f42671370579ee7f8341396e9515619e100a8fae2c5cba0139a088579ece7a603c8b8bab9998223fe862dff8480aeaa5970c90b894e5f71c2784e4dfd50ed3e9ed91036e8356c09464de13b4a95227203133b2c2c71cd6323492f083bda58ad7721b6666b9cd93f93f0288482813fd8aade02cca81cd35257e023504ac4f86be1c7a810b67c6d7077f5cdbd305b618a05c03d196894bfb1a6ff511e59ac8ce45d16cee95e1de0797a543728caaa43e5ae42a12b6bb7910d18d4e1ea89d264491287eb23a76095a12a39c46a7c85349e2969edaed3c1fa6a2150494f63f4c98c65fcdd650ac7424ac1ae64421294356ac1e4dbf9d4c817f081f4f7751ebf56788d799bac29dc0bfe83ead7ab3e338b8b84df4cad2b549aaac4e6048a6fa8f8f6f1f7e0e51c8b3c872f18c466e590222b03230f46bc8e9a0171bbd2096c7a480d6a6f29bd74b60105bebda42e59cc830c4b31f6c52687b4ec2ba869149ae363d711d099f94ceade1ada193e931ed9aea0a280ed5f25ad5ef2c24a28a0262c80a040187e052ea7d54a528b6fcc176ed3afc07fe6a661d050fb4a3a6abfa3dac5f3230540b45af060781cb5499c2894d6a4a2bf908ddd48d6b34207f56c31229e206c88db3552ceb6e82a0fa2bf7f97baf603d37d6a8b1f2b1f5f95b251129ed05351681908b7cf5cf6cc86dd854174cc19713b4d262b021952b6da5f20f57bbacca62f5b7124409aa625bbea59819baebc1bc2dd188feba48c998d0dbed60d44b8a4f0ac28f6c1c8c9998f7406f1a34e4ce902be2420f7ff51a5ab3b1faa86ab2ec1edbea2493cae090abde43ff27d685c993dedb24eb255772cc56fbd104f4f5275f10d54d7cacb8cbf188ae1a4d29ea880068fb2696b3ba6e8a7c15939e1f7c394ab4bd4c4bef2383121cbeb18646a8e013d570cee3eeecd7fbe84a619f8aa2e34f2e1e9b99d0c7d7d179d9df8d2e2f1cd7ba2c7e60166dc14e5e4ed9c41195935e2884b5bd0057ed0155a5d4c6482e8f554e4cd0d0aef7d6487801ab54d54eb41755d833ab83883b40f47595063ad2a0fee5c661f86b8ab04ad0047d988ad86b3c520eb78dc3d750a57e777f5d766349f1a687e090f744206cb5d048346061b414060f6826d8a884e93f73f1f1f4cb8bd6e8d1215d436d390dbda35b555f550e11e6d8008fce1c429bd9bbd04a1fbb9de28663c1be4d8d7e506bc681ada28a69014b972919b5f70cbb770349324c9af0b7ee7ff4cc8bfe807fb9faa0a69498448b22192d578a1e82582b943051beb543ddca8b643ee6c76ee32278aa8bc92b44a8439a24ed5040545349ab05e831d4511a8da03ca539659585b2267a73775f1cb7c2c5548d3508c896f99a8e5cb55160ab1267e320ac2d7c8f8b57079dd14d301636a1374e24541f8d453978998ed256b381bcf638bb372ce1ebefb341656c02f4092a7667ffec5505e4938dcb03d404654430e244f9f7f7d0fb4189a93f7c2bd7a4fcb3ccff79e41a98adcac3e4c19eebebaec15bd8cea1df0e509cdef62ae10c66734d162caf35a6e511baa717f769c2e449892224fa8ae78de9138cf6ea1d939998a8cb68b0e83cf604e03b99634796d3d495e4617f8fdd9764631e7ed6eafa797deb1159259777bf2915d48b63286f6d6528ad4ca5783609263d9a03aad41ec8ef1e2e1e77734d27229f801192be238468854945c20dab4e1baff9dd593361efda1de95e04561d33cd73a45dff5f85b2e85b0747a49345ac8d38add8ef9c14685eb3d3432f3f994e3ddd4e45b16005870485253afc4f08d8a6d8023b722284d11d56c6ff9209a5bacb7ce1708244bd21878b8cd5c13ab453bd589f6196322de9faede39ce6f94c75d008d2d7ced27a2375cc62c3d5c15c1c4301a01299d8f4c41e5a44e4130e9555a356d6b19728c7d3c86cb9a1ddf906ab63a9447f8233bcd09bd74cf9749f085f0c4689ef40dbc41a7a299f0f891d9d0d3e39409d4d774da53bfb6e8ce668ce50885558e909add2cb9bda2f7e9232541b1a7f742a99740f486ef4f7c98e4052f2da705c56a18d5a8289ae6cbb9dc7de13a8cf420b7a930abaae813b40517d84ae984dfc94cd1021e0e4a7a9e7de841018d474083ca28a829ee03fe625cafcbedadcdef6621ccd679fcd9c9a9ab2136211f8c9a679895aa39facf2d6668e5098b3dd8e0ad78d8caf250dc38f2c9518bccb353ef3418d3906827514c1959d58344ee11a0ef1c1424495cc1a9910187685a47d6dd91f07e5081c5ac3f1b6e363069694dd9072684c5ab0ba56157c10f5fa8409e5bc43b38b31f24a306ca5f7e3de9a392eac1984e877ecb3dfd044f1449b4ae9b586051b1780c0ce462919f4a4b54ad8011d013c3962fc6697d33c2dc6771fec664c82cb16144619b207deb4391866d6c1976b945c5959d19018f15376ce3b05666747743527f22b54171da4dabee2f4e469a5521067de4f92e2bad02e15e812b6cbd27ec88a9eccf600ce7f5643392da9ff6b6412f8e7c68d8c8b9e0006e41777e2a1363a9556befbbb110dff3a84b179da3838acde0b25f53798733a9fb463d76b630aef7c8a43f6219482b34b893fd99cf3a013ecefde7c5c6528e304c1868ff3fd8dd5aba348a05dc950b1c4c281cbb28b800d6d0da180fdee06ec3bad6f97180295ed1d77078156a885b5b0c501ea563e8871adb97dd6052de0ab369bf2d98f434bb2d172d9967bb73d3eba6b52bb8d55d8963bf58d310afedb51c0f94c7814b6da30fd8056ab7be74ac31b1b75c217e3ab93eadcb2d253e5d8bbe47c0f1a411a9e502cf4301d898d905cd5db828e56a722394fa11cca64a03a42e7fc1b3481b71ca0b6a3d9bd1fc8229f7f9d3e6aa0d48051942579fb759201d4715db9a2d399e0745a66dbbd571accf1f2e15573ce832e91bd1f042ab758d9ec13e354f38454cc42668c8d60358916f7e937015f6c38732bcf6131ecde001892cb20fe47153e7e23b1cd2fc4a22662e7bde09f7df10fcbf475783fe23a0fdcb2c3bd8b28453ce523ac19ff77e68c3e9fa0193b796ea68f44132b3a96adebc04181e503f52be4778ef422ce3e6ca38514fa18b500ca518590479e8c73a7942dc2e237d82cda953ae1b296b97ee8ed62e2e755d6ddea7c0334e1b8d76c278bdc454724003106cb6fdc85340d1e784ac8b6551eaabc33c502163ce0d401627bd22ba6be90089372bfa3f91ee745e45844ef8dc0fe3936bef07f9c1d3aadfa4c8e99be6b038bed6beb9597add881da2acc1a3a471f500d68f639cd2bf6f4afab919a2cf747bcbb42b95684e8741b485c3297cf07c7bd98d6653421b61f701a06b82be0fbeecd32eb00feca9c5732bb5e565bccf8c9feb27a50760a785bbb50402768cbd458811e284a604b3374faf3480e1736743665617de9c32fd10e37105ac6dd5303f1a6dc78950bce56215c2a2f9e0ccbc0bf9fe8ccf7647ed29e2aa4948689d681a7a9fe582631338f3eea3df846f28564038ab75aa2a8ee5416b66ceeda9d8f56ecefe07f6a21ace83a2e15ad408d0a480f56708e3d1c96020b124c58f6ff5247f73aff7f77d389167650b8a0b98c97f87a1e5d6c08fa99874ff144bfa905e9da3812f010eeee00f3c9b594450faab5342e1b6e98fed5714a802b67b3e5b1964a62606aacb8222efd4980823f076675ae859e64de7b08f7a0b3d8bc829e1a93eb3b4975b4761cd7fa743e393da537c91f658ea2b23c94244498cdc4bc32c8b9859b9d9792eeabdce635b2d61c311949204826054dba0880505e2b53cc3521fa8b68bbba2ec05050bd3244c02752af1555625ddf50a3656c0043005c43c26a2dc907d5dd67efa831ad974151067b436a75fe99b8c94c9ca9737279fa1aaa09b0108c48c79c7e4ec1eeccfd43aa8e7ab6cacf5a956fc47d4ce77fe719d6eec1730d3e3b3be71d313f644177b6d16df0180848c28b850fbf71168a1ee4e5639bc46f2555b3984dbb91520538dfa6a1905abfb7238ec32831a079882440718a57cfb56634e7de7584097f69f87630693bcf410796266cc3f50302feacfb556bad2506b7191023817527dfe5973101712bda922472076633133a11a76e8bc7d763a2cdaa53fa8d47d442fcc572f791d66d10d8d6a9058ecbbcd6d3dbe45d67b75e1091dd0368bea33ef0f56ba68885630429c24800922062e1066f2d4c4b795332ab03239548df4e6e01c432fe5eb29e8e63f6c7ba4f2edefa208c69e781786e4717c2f71dc2032a98cf1e6d66c10831e17ee776edc6b060ae20d025dc570a88e17da771acd32b7b93d46e43a917b8e2ba8232ad2707324b9b04dd8ee50c3c5a4372c0b1461ab2b7424faf00c7162bd8e8ffc7fadcb055403b0fa7087226ba4330e746af97a3f915f0b9e105759e81fe94a0df0cd6c324fb0b871491b5516c2fbc82c77b07159e3f4c0b7952b74cb4e203a69f241485191e1afc76d12a56db065b0513a41582f655340603c73cb39b728c97d1e919ecf963b91ec2282d25dc426db873394055beb0f9ba20545e2465ce2d0d962f42e1e4c79bdea4cd2829269ff7ef650bbeb5083d39dc7aad668af0b01c521192c548857473b29991f7bb917b5814fe945f4c3ed9bbe0563f4004b391b76860e9fd6b7c0baae82e4ac033f62a2c6ce6a2311b8700b06b5215e604a9b99d37e00450fc7790e893176e9fecda220f838a078a8ef7da7d499b1fe0eb8780c4b9705a6a10674e61b5c228fae1c13488f98c10c1792fa40229dba44b1cb534f9fab6a14407687761d738c91f4b8d4371a1de1a47bde0563a6fc88c4886be5d48c4cb89078c255eb1639598379daf50a672cbf4d8add2d4af6c02aeb1d0f86b611abd363409c7c7fc0b66f307ad3df24241fe06d0f7617d6c3987bb9e5d8f1712aebf095fad19b3b4fcb9cc4fb39012f333c4b040666259ee7bc43cff299a527a8914d71324e91c774b84e9392e615453e9fc648c539059b66f780c888892fe8b30eba799ed18fab08ebc3b9da8bc12a249456351bc0ebafc9f54d5d24697fb53eeb5e734527d690620989f605f57dc65a15a754d304be592acc616cd528b6986064b4457b96cf1fb0ab383a0585acf9887b18e1d6d3aff1e7f2328ea0313a2b36f6f79d671d9ddc4d34fb8fb55a596b2a16c63757083fb4bd01be2e1d82e47c5a44e052279097c5a18feae9884e102cf087611a3b94467ad61635dae6275974f6e6ca7a42ded0ee4577574d56b142853a8c955d92d1eb780de11dc9289acd193214ed4c9f5f26d0481cb3c0c0b8d4c9ad929c61ffeed66bf2e4f7018049593b99358d93559847d55654cee93da30f6578d2e295909791d227a12c09cd4a0edec25d3155086b64a787997a53265cbffb7fe6a2bfd589e12b4d0e21a600276e920397888443584aa99a06d7cfef8e68eeab8fa739c3d8fb74581ceff295110742e763320bed3a4be982b3ebed15ecde37e849aaa91959327d25149f38854ea1137f870aff99979e5e74cc9e45be12e3f0f9912a0955e718a4917e835bca50f43ce92a6bc60ed006b8f623fbacebbfb3dcb4fabd9941a5487c6f637de9a2005a6bc4062e1210a08a51d6f8a5e3f6f97fe90dc7e2e21d4d2f038c0fbc1918aa00e230a4a0e5c41a4808fb9a731271fcc1e73713c9592aa4b2ddccd0d13c3cb68d51166623153445c9ec955c6870dc8543c0684883186082e34ea5714febf8b46921015c3623220d17529896e1a6edac6e32fea2ba30db203238300353602c17dddad7608cad8170b520f6d9d32cdf0156a1de4e9b9eea78f73255ddc6da6994a6018ff900d9886590602ca6a072d8aa5645e2adac0744e2d5b2e1038c746635d5814692c3498aa9043b68f8ce79c44678c5a7d5bc26c085475853b229b2af3dc822ec58047f313c778aae2b64995148174e42908f3ecacd3921855790c0c5a25814416930293010b4f917979d837f4ef9d2d6dce804f5c0926244097746252124a6e0055559ffab197c38778f717362152af8f6dbf7ee03df050ab9b8909556691c2c2775f0f9c26a545db7ba698a4ce37de877705ea97ac0a002db274ea8360a4aa732c2d5e7417138c60cbea69d3b4993ada6a9d8f51d851543a6500a31bac5a057dbef498001f08a44e3c4141900e18b6d73c28c8c67dca805edeb5376384cefe75be1f127225e4d9724b7047d68fa2ed4629e91711a37c80158a07dbce78918931402b472a98a5d5c6b66a2d116314577e94298c37bc441499a9ecea132d87c5d305a0f8f0b3ed16f3b820941082c73b28391d8482ca0cfa78e1e09aa588b0eb1849c6c7916a6bbe56134a6bd93ea306dec125982628dea1db6d022d210627959e1dc819c841f173ed25f356909222e481a1ebb31185fbaeacbd359d2779efe4554ccdac7f4bcc528f656a45049331e16e9c0c796423ec9c7cba15c69d4a8a7741699910f33cc9798a8bf1e48182f08029a14d0131654fd388225d7509e1d7a484e9c7df34d1680bfc6b8d1f6f3920cc4113509fe42dfbd6b261000da9651f7e18088f6c2564472046e5eb7e8c9f8b5286a7452741a7103ced710bfb8e699fb8b1a85c0ae887cc06ef2ff9e2a2b1a77bb4d44ddd4a4e1ba60afcb92baaef108b60486d409889cbb2b1cc77ddff7e4b6caf8cf3488764d84bf3605eb9df709ac6cb36d1a3de89cdd6657f0e6b4009e6dac5d9be14f4ed997cf61e5aaec932520c321359cf286adf6e2dc3094794ae61a4f16089d06e3dc62c958950e73213c1e865c894fe7b8a30de65f5534a1e9c5d19ed49397980126322cb9c72c46a86d7487571300d85b3b5661555f20ab63a78f846c1b8f51a19610a11ffee44f7ccf0f1d67f4148b2c828d74c7f3993965c9067114467a71d242113a68574e28601fce343a023ecc68a72d75259f9a5dce144a7f61ef327192f6474d2bbd06fde3049fe7fb306ba3f54337008d7dbdeaf28a37a224e38ade23adb076cefd3148efcb62539a96d4dfc53f369e34c3d493ac3a5e8c8881133be630a2a906703da62ce7cc02ace9f666d6c3d4b9763a83548825ee1efb54ee3475b09e2616c5bdde3d193181bf020e8ac9ac25f32604b6c11de8ad1a15b9f908c6d7e79181aad1d741b7434aa92597a835c53b9e4b61d6069fa4ee921824d17c98784a8c04590f8d2cf877662b410cae4ebd1ba3616074c020d8cb6099a095735635490d318821310ddd016150edb80370b8d4e2f05557fd619b17192c13353cdae76d495821c610c8641e5b3dff1e7f2ea77b17810ca7975b8e36b7f501a8710b326ef92672096ef66598510902fe663e2a9ef00c3a052f1cfb1739fccb4371f8f28bb92654de5bf87cc2863e92e6d7e4b45d773f90f434eafc8f8398a48527af829a6cae359e7af5941bef158f53798058351107ce58f79ed21036770f6e10e7da92bbca25f369ee83a0f894bbf366a1361f8125b4ffd8e8b4d47ec68cd6b37c840cc5beb8cf65b2269ea1a0e9c371a571f30458ff8ad9bbf8723c19ddae1de5ca7461a436ffcd103c01a20f3252ba0965ee928cfb0d002b9aa4d4f20c805b77e67c8d991c4d07e5419bec9626a32c115d28253dd5f16c17182c1779edf49bdfe3823d87fec88929801163a27bfaeddfd8cdccae8cc3bfd6a9f2e2fec5971fa560c434debd434ff4d0058dcb05d9f3ac5193c458472d6d1685f9f46c8864900c5edbaeeee08971ee1c087f2e11467ff4766743bccf9e3414feedd6dcb904b92a05eec5de8db95444b920c995c770edcedcf7bffc48836c8f30037dde47f0e66fd79550de0ebc3c0c3eba0b66e2a353542eeb20397800e5f41635c5ec2f9a271461bcee8e570ddf945b186f15ab5cabe2a3123189935c6b9010b31732c425a9b2582b097486a5a7b1880b2f16104484e1ca83fa9c278b87e30e4b0cf6ed66c87a979c05683ac94a295d1c53e6f0975a079dd9a2825fdd6ae0926ba1a69f3f69f408eea9d00fbd43235a52c53d11963a611b81dd9f5e05582e1822398873e883662a64c225be19e0b85e102e23fb73d5dcb11435a5437d7418b0409f2e60793038f55ed54c79882b3a17e74ae2148bd558d131dbf446edeb0d05353492534e216761cfcf6582d066a8235a2bd5eb383350a52d7fc2761514e27b6125cb3e387c103dd62e31f5b789c217811c80ccbe3f10fec7a19ad32dc9271368b6d6ba549c45dfd8018507c40962b6ac6468c3078edb71d8ec7f728be8cc23dea1139ac30c2e8d0fc077280e420fbbffc896863db5f1e76922d7dd8e4479c1be822e74212c6f74765e108f916a1b83f6efc8ea54080e9a28b1ba5813a1fefddbe2d0cda413ee1463985b51b59f818f440c9b6a10e4ebf71d37995ae9694ba5867ca2eb2f7bf4e58d26149f2b25943fba216beb3de1f954bcf1bd32ce358b5d23023ab456ebbc493ead41e25b62b5b4ace6c5c18c9a8d512a9cbb4dd59f33663f6138d6b06bc8eb1ec9caccc0077b2e68e7a09d412dfa352e7e5c3942b710ab1648e16d0adda424d9fc2d15c619f4e8093c2b9521e4cdb3f22e655f52ce0fcc1bfd94e56cba8decadb68214451be53f9286c82d2a4912bd2394d1133be908409d791d6d8c2194ca37a76a38d6d0a1fced6478848891d9264cfc08fa849d720339ce00977cad8d9738372184098a7333dd1564d1d7754b4aa4afd6217585804159d31f53017869cb78b718c837b7fd176ce19e3d6996b6f055ed3ba7cd55b0349676c0c113c33d070081ce4ef29af156c4ac8ce760013688d0295d90271e23ef3ca10ec2b3b8898ff070000000000007a10a02d21e5e8995fbc10d2f4d4bf521565376053b80937bfafaac688108f9962b7c72cf0111874ac8ae27d024ee2f9d57f15b9910a7486ef7542c6629fb0520c93a445542d00", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x68801, 0x164) lseek(r2, 0x40000000f4, 0x4) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f00000010c0)={0x0, &(0x7f0000000400)={0x18, 0x0, 0x2725, {0x7fffffffffffffff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m43.963504987s ago: executing program 4 (id=86): r0 = getpid() syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x3, &(0x7f0000000040), 0x1, 0x525, &(0x7f0000000fc0)="$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") r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r4, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0x85, 0x20000}, 0x20) 1m43.732429679s ago: executing program 4 (id=93): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x250, &(0x7f0000000300)="$eJzs3T9oJFUcB/DvzO565m7RUxtB/AMiooFwdoLN2SgcyHGICCqciNgod8J5h11iZWOhtUoqmyB2RktJE2wUwSpqitgIGiwMFlqs7M4G8mc1ZnfdkcznA5OZybyZ3xt2vm+3ebsBGutskvNJWknmk3SSFHsb3FctZ4e7y3Prl5Ne7+lfi0G7ar+ye96ZJEtJHk2yVhZ5tZ3cWH1+6/eNJx9853rngY9Wn5ub6U0ObW9tPrXz4cW3P73wyI2vv/35YpHz6e67r+krRvyvXSS3/xfF/ieKdt094N+49OYn3/Vzf0eS+wf576RM9eK9e+2mtU4e/uDvzn3vl2/ummVfgenr9Tr998ClHtA4ZZJuinIhSbVdlgsL1Wf471uny9euXntj/pWr16+8XPdIBUxLN9l84vNTn505kP+fWlX+gZOrn/9nLq380N/eadXdG2Am7q5W/fzPv7j4UOQfGkf+obnkH5pL/qG55B+aS/6hueQfTrDOPx+Wf2gu+Yfmkn9orr35BwCapXdqnFnDt05/IjIwc3WPPwAAAAAAAAAAAAAAAAAAwGHLc+uXd5dxr1Ecs/2X7yfbjydpj6rfGvwecXLz4O/p34p+s3212uN2dOiFeye8wIQ+rnn29S0/1lv/q3vqrb94JVl6K8m5dvvw81cMn7/x3XbE8c5LExY4poP5fOzZ2dY/6M+Veutf2Ei+6I8/50aNP2XuHKxHjz/do79i+Uiv/zHhBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJiZvwIAAP//1rxsXQ==") fallocate(0xffffffffffffffff, 0x3, 0x8000c63, 0x8000c62) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x1) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) write$FUSE_BMAP(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0xff10, 0x8000c61) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 1m43.481833882s ago: executing program 1 (id=95): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r2, &(0x7f0000000200)='\n', 0x1, 0x0, 0x0, 0x2}]) 1m43.474539622s ago: executing program 32 (id=95): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r2, &(0x7f0000000200)='\n', 0x1, 0x0, 0x0, 0x2}]) 1m43.004183057s ago: executing program 4 (id=104): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r1, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r3, r2, 0x15, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x30) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000500)={&(0x7f00008ce000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0}, &(0x7f0000000300)=0x40) 1m42.992695278s ago: executing program 33 (id=104): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r1, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r3, r2, 0x15, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x30) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000500)={&(0x7f00008ce000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0}, &(0x7f0000000300)=0x40) 5.164009925s ago: executing program 3 (id=1092): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) write$binfmt_script(r1, &(0x7f00000010c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x106) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000340)=0x6, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000380)=@gcm_128={{0x304}, "ec104bcd6488d2f6", "8f8c2a478c4e48f9575d967978dd13c9", "980900", "c69df17e8d1b3a58"}, 0x28) 5.095280979s ago: executing program 5 (id=1095): syz_mount_image$xfs(&(0x7f0000000000), &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000300)={[{@filestreams}, {@uqnoenforce}]}, 0x1, 0xb8e1, &(0x7f0000013cc0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='pids.events\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0xfffffffd) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001000), 0x581, 0x40000000, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x3a079000) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x2b, 0xb, 0x248020, 0x0, 0x17, 0x4, 0x8, 0x0, 0x0, 0x20, 0x2}}, 0x50) 4.308812221s ago: executing program 3 (id=1100): unshare(0x600) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) shutdown(r0, 0x0) sendmmsg$inet6(r1, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 4.182650927s ago: executing program 5 (id=1101): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4084) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) read(r1, &(0x7f0000001600)=""/233, 0xe9) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x110, &(0x7f0000000080)=0x80000001, 0x0, 0x4) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000400)={&(0x7f000092b000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x1000}) 3.093184755s ago: executing program 3 (id=1105): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000007c0)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000500)=@gcm_128={{0x303}, "a95972fc5ec50719", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) sendto$inet6(r0, &(0x7f0000000100)="b5", 0x1, 0x8000, 0x0, 0x0) shutdown(r0, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff004) 2.619204931s ago: executing program 3 (id=1109): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r3, &(0x7f0000000100)='=', 0x1, 0x4fed3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) vmsplice(r4, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 2.561942284s ago: executing program 5 (id=1110): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x6e22, 0x9, @empty, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r1, 0x5) listen(r0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x200}, 0x1c) listen(r2, 0x0) 2.521603156s ago: executing program 5 (id=1111): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f00000000c0)=0x1, 0x4) 2.433887671s ago: executing program 3 (id=1112): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) ioctl$RNDZAPENTCNT(r0, 0x5204, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 2.389557373s ago: executing program 2 (id=1115): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000dc0)={0x73622a85, 0x10a, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) 2.036550182s ago: executing program 6 (id=1117): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x8, 0x9}}, [@filter_kind_options=@f_u32={{0x5}, {0x14, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x43}, @TCA_U32_HASH={0x8, 0x2, 0x1}]}}]}, 0x40}}, 0x4000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x301, 0x100, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x3}, {}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.008556163s ago: executing program 2 (id=1118): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x14}, [@ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xff00}], {0x95, 0x0, 0x5}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 1.995941334s ago: executing program 0 (id=1119): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) 1.889267579s ago: executing program 0 (id=1120): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 1.87644824s ago: executing program 6 (id=1121): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x47, 0xc11, &(0x7f0000000d00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x107b42, 0x32) ftruncate(r0, 0x6000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x842, 0x20) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) write$FUSE_INIT(r1, &(0x7f0000000000)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x6, 0x5400820, 0xd, 0xf180, 0x1, 0x3, 0x0, 0x0, 0x80, 0x5}}, 0x50) sync_file_range(r1, 0x889, 0x8, 0x2) ptrace$getsig(0x4202, 0x0, 0x4, 0x0) prlimit64(0x0, 0x4, 0x0, 0x0) truncate(0x0, 0x400000f000) truncate(0x0, 0x20fffffffc) 1.534034628s ago: executing program 5 (id=1122): r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r3 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80001) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f0000000040)='.\x00', 0x2) 1.447240233s ago: executing program 6 (id=1123): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000180)='./file1/file4\x00', &(0x7f00000001c0), 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2000, r1}, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000500)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file1/file4/file7/file5\x00', 0x0) 1.105292871s ago: executing program 2 (id=1124): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) 1.066880363s ago: executing program 6 (id=1125): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0xa) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r3 = socket$vsock_stream(0x28, 0x1, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 988.883297ms ago: executing program 0 (id=1126): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x85, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @empty}, 0x10) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3, 0x34f}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x58}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) 925.84204ms ago: executing program 6 (id=1127): sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x400, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x24000010}, 0x40) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000300)={0x18, 0x0, 0x0, {0xfffffffffffffffa}}, 0x18) r3 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000"], 0xb0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000140)=ANY=[], 0x10) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl}]}}) 895.073562ms ago: executing program 0 (id=1128): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x3, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) close(r1) 842.177565ms ago: executing program 6 (id=1129): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) 800.044477ms ago: executing program 0 (id=1130): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001440)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005) 605.808548ms ago: executing program 5 (id=1131): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(r0, 0x5, 0x0) ptrace(0x4206, r0) ptrace(0x4208, r0) ptrace(0x4207, r0) 605.612077ms ago: executing program 2 (id=1132): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0x2, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}, 0x1c) listen(r1, 0x200204) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a98000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 111.815984ms ago: executing program 3 (id=1133): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000180)={[{@nodelalloc}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x599, &(0x7f0000001280)="$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") openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x80, &(0x7f0000000140), 0x1, 0x4dd, &(0x7f0000000240)="$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") quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x3200046, &(0x7f0000000bc0)={[{@delalloc}, {@data_err_abort}, {@resuid}, {@noload}, {@bh}, {@resgid}, {@nodelalloc}, {@grpquota}, {@noload}, {@grpquota}, {@journal_dev={'journal_dev', 0x3d, 0x8001}}, {@oldalloc}]}, 0xfc, 0x562, &(0x7f0000000440)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x20100, 0x4) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000000)={0xd6f0, 0x0, 0x0, 0xfffffffd}) 110.673254ms ago: executing program 2 (id=1143): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a400000", @ANYRES32=r4, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x400000000000047, 0x0) 1.63119ms ago: executing program 0 (id=1134): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r3, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) timer_create(0x7, 0x0, &(0x7f0000000080)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24044040) 0s ago: executing program 2 (id=1145): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=@newtfilter={0x884, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x854, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x18d0b}, @TCA_FLOW_POLICE={0x848, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x4, 0x9, 0x2, 0x2, 0x1ff, 0x4, 0x4, 0x2, 0xd, 0x11f4, 0xf, 0x100, 0x0, 0xfffffffe, 0x4, 0x7f, 0x9, 0x4, 0xa0000, 0x80, 0xc, 0x0, 0x6, 0xf290, 0x8e3, 0x6, 0x20a, 0x0, 0xfffffff3, 0x2b, 0x4, 0x4, 0x800, 0x6, 0xffff8001, 0x80, 0x7a, 0x7, 0x1, 0x3, 0x4050732b, 0x1, 0xf5c8, 0x5e, 0x3, 0xf0, 0x7, 0x946, 0x5, 0x8001, 0xffff, 0xfffffff5, 0xbf2, 0x10001, 0x2, 0x8, 0xfffffffd, 0x8001, 0x6, 0x1, 0x7fffffff, 0xd05, 0x7a, 0x11dc294f, 0x7, 0x5, 0x0, 0x9, 0x1, 0x7, 0x1e8, 0x4, 0x2, 0x8, 0x20000000, 0x80000000, 0x1, 0x9, 0x5, 0x5, 0x80000000, 0x3e64, 0x5, 0x8, 0x6, 0xfffffff6, 0x4, 0x10, 0x9, 0x8, 0xd, 0x2, 0x2, 0x2941, 0x1000, 0x8, 0xff, 0x4, 0x9, 0xf6e2, 0x5, 0x6, 0x4, 0x1, 0x3, 0x0, 0x2ee, 0x444, 0x2, 0x9, 0xb966, 0xb2000, 0x33, 0x9a6d, 0x9, 0x8, 0x200, 0x8, 0x3, 0x89, 0x8, 0x100e, 0x7, 0x4, 0x3, 0x8, 0x3, 0x0, 0x6, 0xbfe8, 0x5, 0x8, 0x3, 0x8, 0x4, 0x4e8d, 0x2, 0x8e, 0xffffff42, 0x5, 0xe, 0x1, 0x6, 0xe, 0x2, 0x4, 0x8, 0x6, 0x1, 0x5, 0x7, 0xffffffff, 0x601, 0x5, 0x160000, 0x9, 0x8, 0x1640, 0x6, 0x6, 0x0, 0xaa, 0x2, 0xedd5, 0xfff, 0x8, 0x7fffffff, 0x8, 0x1, 0x2, 0x3, 0x8, 0x3, 0x0, 0x3, 0x34, 0x9, 0x3, 0x2, 0xffffcd43, 0x7, 0x8, 0x486, 0x1, 0x2, 0x5ca0, 0x3, 0x1000, 0x4, 0x9, 0x8, 0x5, 0x7, 0xfffffffd, 0x7, 0x8, 0xffffffff, 0x22, 0x4, 0x2, 0x0, 0x3, 0x1e, 0x3, 0x8, 0xa1, 0x81, 0x5, 0x1, 0x2, 0x2, 0x7ff, 0xf43, 0x3, 0x8, 0x3, 0x3, 0x4, 0x100000, 0xffff, 0x66c, 0x7ff, 0x3, 0x0, 0x10001, 0x5, 0x0, 0x81, 0x6, 0x9, 0x2823, 0x8, 0xffffffff, 0x0, 0x3, 0x8001, 0x0, 0x9, 0x1, 0x1, 0x9, 0x5, 0x1ff, 0xc79, 0x80000001, 0x200, 0xede5, 0x3, 0x3, 0x0, 0x3, 0x7, 0x8, 0x8, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x4, 0x7, 0x7, 0x7, {0x4, 0x2, 0xfe00, 0xfe42, 0x4, 0x7}, {0x3, 0x1, 0xcf, 0x1, 0x800, 0x2}, 0x7, 0xa6, 0x3}}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x4, 0x0, 0x7, 0xfffffff1, 0x796, 0x5, 0xd2c1, 0x7ff, 0x20, 0x9, 0x9, 0x101, 0x5, 0x2, 0x9, 0xc, 0x800, 0x695, 0x401, 0x2, 0x7, 0x1000, 0x343d41f0, 0x0, 0x3, 0x3, 0x3, 0xc94, 0xa0, 0x1, 0x5, 0x81a, 0x1666, 0x80c, 0x9, 0xffffffff, 0x2, 0x81, 0x5f82, 0x5ff, 0x3, 0xed, 0x4, 0x81, 0x401, 0x1, 0x5fb2, 0x8, 0xfffffe01, 0xc, 0x6, 0x2, 0x0, 0x6, 0x0, 0xffffffff, 0xb1e5, 0x0, 0x8, 0x4, 0x1, 0x0, 0x3, 0x9, 0x3, 0x1, 0x4b, 0x2, 0x5, 0x1f, 0x7, 0x0, 0x4, 0x3, 0x2, 0x4d, 0xffffffff, 0x4, 0x3, 0x6, 0x40, 0x1, 0x3, 0x2, 0x5, 0x1ff, 0x101, 0x8, 0xf48, 0x9, 0xffffffff, 0x200, 0x5, 0x76, 0x6, 0x3, 0x8000, 0x6, 0x9, 0x80000000, 0x6, 0x8001, 0xbe39, 0x7b7, 0x5, 0x8001, 0xb, 0x4, 0x1, 0x8, 0x9, 0xb, 0x6, 0xdfcf, 0x0, 0x442ff558, 0xb481, 0x6, 0x3, 0x4, 0xe, 0x10000, 0x0, 0x31fe, 0xfffff2c1, 0xb, 0x3, 0x6, 0x7b, 0x1d, 0x6, 0xc, 0x10, 0xf91, 0x0, 0x62e, 0x2, 0xfffffffc, 0x5d8, 0x4, 0x5, 0x7, 0x1, 0x3, 0x7, 0x9, 0x5, 0xfffffff7, 0x0, 0x2, 0x7fff, 0x9, 0x5, 0x8, 0x3, 0x0, 0x200, 0xdfb, 0x7, 0x9, 0x223ec3e7, 0xdaa, 0x0, 0x101, 0x1000, 0x4, 0x8, 0x8, 0xf, 0xb, 0x4, 0xfffffffb, 0x491, 0xfffffffb, 0xfffffff9, 0x9c, 0x3, 0x1, 0x4005, 0x1, 0x8001, 0x6, 0x10001, 0x1, 0x3, 0x80000000, 0x4, 0x38b, 0x401, 0x2, 0x10, 0x3, 0x3, 0xbd, 0x4, 0x4, 0x5, 0x5, 0x81, 0x3, 0x202, 0x5, 0x9, 0x81, 0x6, 0x8, 0x79, 0x6, 0x8, 0x1, 0xea58, 0x29dc6e7b, 0x53ad, 0x7, 0xd77, 0xff, 0x8, 0x5, 0x0, 0x0, 0x12, 0x0, 0xf, 0xbb4f, 0x4, 0xe4, 0xbcba, 0x80, 0x8, 0xc6, 0x9, 0x81, 0x10000, 0x70, 0x3, 0x4, 0x80, 0x3, 0x3ff, 0xffffffff, 0x5, 0x7, 0x6, 0x5, 0x8001, 0x73da, 0x401, 0x7, 0xd, 0x81, 0x7, 0x5, 0xf417, 0x6, 0x5]}]}]}}]}, 0x884}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) kernel console output (not intermixed with test programs): an_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.610580][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.616114][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.618517][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.621735][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.625445][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.647342][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.649129][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.655269][ T4435] loop3: detected capacity change from 0 to 1024 [ 29.655762][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.658079][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.663049][ T4435] ======================================================= [ 29.663049][ T4435] WARNING: The mand mount option has been deprecated and [ 29.663049][ T4435] and is ignored by this kernel. Remove the mand [ 29.663049][ T4435] option from the mount to silence this warning. [ 29.663049][ T4435] ======================================================= [ 29.663311][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.669578][ T4435] EXT4-fs: Ignoring removed nobh option [ 29.672321][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.681984][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.683581][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.688648][ T4321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.689155][ T4435] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 29.703990][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.705699][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.708599][ T4329] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.710165][ T4329] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.712717][ T4329] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.714150][ T4329] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.718606][ T4435] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 29.746739][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.748547][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.756781][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.758530][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.760325][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.790744][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.792442][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.794150][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.797280][ T4435] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3852: comm syz.3.4: Allocating blocks 497-513 which overlap fs metadata [ 29.803783][ T4321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.808914][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.810726][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.815964][ T4435] EXT4-fs (loop3): pa 000000005e0afbbe: logic 256, phys. 385, len 8 [ 29.817362][ T4435] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4892: group 0, free 0, pa_free 1 [ 29.831707][ T4441] loop1: detected capacity change from 0 to 32768 [ 29.864212][ T4441] XFS (loop1): Mounting V5 Filesystem [ 29.886443][ T4321] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.887917][ T4321] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.889349][ T4321] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.901176][ T4441] XFS (loop1): Ending clean mount [ 29.907898][ T4441] XFS (loop1): Quotacheck needed: Please wait. [ 29.916833][ T4321] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.926039][ T4441] XFS (loop1): Quotacheck: Done. [ 29.936808][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.938117][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.940089][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 29.974511][ T4331] EXT4-fs (loop3): unmounting filesystem. [ 29.984932][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.986168][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.988636][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 30.010307][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.011977][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.015571][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 30.019705][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.025616][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.027529][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 30.031218][ T4322] XFS (loop1): Unmounting Filesystem [ 30.046967][ T4452] process 'syz.3.7' launched './file1' with NULL argv: empty string added [ 30.066012][ T1605] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.067177][ T1605] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.068915][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 30.104064][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.105353][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.107150][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 30.130213][ T4455] loop2: detected capacity change from 0 to 64 [ 30.342635][ T4467] netlink: 156 bytes leftover after parsing attributes in process `syz.3.12'. [ 30.364425][ T4467] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12'. [ 30.565658][ T4325] Bluetooth: hci0: command 0x041b tx timeout [ 30.566713][ T4325] Bluetooth: hci1: command 0x041b tx timeout [ 30.567698][ T4325] Bluetooth: hci4: command 0x041b tx timeout [ 30.568754][ T4325] Bluetooth: hci2: command 0x041b tx timeout [ 30.639261][ T4482] netlink: 44 bytes leftover after parsing attributes in process `syz.4.17'. [ 30.646170][ T4330] Bluetooth: hci3: command 0x041b tx timeout [ 30.648330][ T4482] netlink: 35 bytes leftover after parsing attributes in process `syz.4.17'. [ 30.649834][ T4482] netlink: 'syz.4.17': attribute type 5 has an invalid length. [ 30.653993][ T4482] netlink: 'syz.4.17': attribute type 6 has an invalid length. [ 30.657428][ T4482] netlink: 35 bytes leftover after parsing attributes in process `syz.4.17'. [ 30.780585][ T27] audit: type=1326 audit(30.760:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4495 comm="syz.2.23" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a375928 code=0x7ffc0000 [ 30.786933][ T27] audit: type=1326 audit(30.770:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4495 comm="syz.2.23" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff8a375928 code=0x7ffc0000 [ 30.790201][ T27] audit: type=1326 audit(30.770:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4495 comm="syz.2.23" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a375928 code=0x7ffc0000 [ 30.802569][ T27] audit: type=1326 audit(30.770:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4495 comm="syz.2.23" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=200 compat=0 ip=0xffff8a375928 code=0x7ffc0000 [ 30.806163][ T27] audit: type=1326 audit(30.770:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4495 comm="syz.2.23" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a375928 code=0x7ffc0000 [ 30.822201][ T27] audit: type=1326 audit(30.770:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4495 comm="syz.2.23" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=203 compat=0 ip=0xffff8a375928 code=0x7ffc0000 [ 30.845007][ T27] audit: type=1326 audit(30.770:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4495 comm="syz.2.23" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a375928 code=0x7ffc0000 [ 30.846331][ T4500] loop3: detected capacity change from 0 to 1024 [ 30.848775][ T27] audit: type=1326 audit(30.770:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4495 comm="syz.2.23" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff8a375928 code=0x7ffc0000 [ 30.859624][ T27] audit: type=1326 audit(30.770:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4495 comm="syz.2.23" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a375928 code=0x7ffc0000 [ 30.866570][ T27] audit: type=1326 audit(30.780:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4495 comm="syz.2.23" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff8a375928 code=0x7ffc0000 [ 30.923084][ T4500] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 31.030618][ T4500] EXT4-fs error (device loop3): __ext4_get_inode_loc:4513: comm syz.3.25: Invalid inode table block 0 in block_group 0 [ 31.066143][ T4331] EXT4-fs (loop3): unmounting filesystem. [ 31.161207][ T4513] capability: warning: `syz.2.29' uses 32-bit capabilities (legacy support in use) [ 31.225291][ T4522] Zero length message leads to an empty skb [ 31.468623][ T4536] loop3: detected capacity change from 0 to 2048 [ 31.491552][ T4536] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 31.621845][ T4538] netlink: 12 bytes leftover after parsing attributes in process `syz.2.39'. [ 32.133922][ T4563] loop2: detected capacity change from 0 to 128 [ 32.195379][ T4569] loop4: detected capacity change from 0 to 512 [ 32.211780][ T4563] loop2: detected capacity change from 128 to 0 [ 32.232949][ T4569] EXT4-fs error (device loop4): ext4_acquire_dquot:6835: comm syz.4.51: Failed to acquire dquot type 0 [ 32.235527][ T4569] EXT4-fs (loop4): Remounting filesystem read-only [ 32.236707][ T4569] EXT4-fs error (device loop4): ext4_acquire_dquot:6835: comm syz.4.51: Failed to acquire dquot type 0 [ 32.241657][ T4569] EXT4-fs (loop4): Remounting filesystem read-only [ 32.244826][ T4569] EXT4-fs error (device loop4): ext4_acquire_dquot:6835: comm syz.4.51: Failed to acquire dquot type 0 [ 32.252432][ T4569] EXT4-fs (loop4): Remounting filesystem read-only [ 32.253807][ T4569] EXT4-fs (loop4): 1 orphan inode deleted [ 32.254770][ T4569] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 32.295450][ T4569] Bluetooth: MGMT ver 1.22 [ 32.325907][ T4569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.327331][ T4569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.528452][ T4586] loop1: detected capacity change from 0 to 32768 [ 32.584569][ T4591] netlink: 4 bytes leftover after parsing attributes in process `syz.3.60'. [ 32.590079][ T4591] device team1 entered promiscuous mode [ 32.592816][ T4591] 8021q: adding VLAN 0 to HW filter on device team1 [ 32.641647][ T4325] Bluetooth: hci2: command 0x040f tx timeout [ 32.642578][ T4325] Bluetooth: hci4: command 0x040f tx timeout [ 32.643398][ T4325] Bluetooth: hci1: command 0x040f tx timeout [ 32.680957][ T4322] non-latin1 character 0x2e66 found in JFS file name [ 32.682787][ T4322] mount with iocharset=utf8 to access [ 32.721128][ T4330] Bluetooth: hci3: command 0x040f tx timeout [ 32.865167][ T4321] EXT4-fs (loop4): unmounting filesystem. [ 32.931972][ T4608] loop4: detected capacity change from 0 to 512 [ 32.944863][ T4608] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 32.967612][ T4608] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 24: comm syz.4.69: lblock 1 mapped to illegal pblock 24 (length 1) [ 32.975289][ T4608] EXT4-fs error (device loop4): ext4_acquire_dquot:6835: comm syz.4.69: Failed to acquire dquot type 0 [ 33.006263][ T4321] EXT4-fs (loop4): unmounting filesystem. [ 33.091717][ T4617] SQUASHFS error: zlib decompression failed, data probably corrupt [ 33.093252][ T4617] SQUASHFS error: Failed to read block 0x9b: -5 [ 33.094157][ T4617] SQUASHFS error: Unable to read metadata cache entry [99] [ 33.095293][ T4617] SQUASHFS error: Unable to read inode 0x127 [ 33.339249][ T4634] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 33.348279][ T4634] ntfs3: loop3: RAW NTFS volume: Filesystem size 0.00 Gb > volume size 0.00 Gb. Mount in read-only [ 33.364514][ T4634] ntfs3: loop3: failed to read volume at offset 0x201800 [ 33.366078][ T4634] ntfs3: loop3: failed to read volume at offset 0x201800 [ 33.371086][ T4634] ntfs3: loop3: failed to read volume at offset 0x201800 [ 33.391557][ T4634] ntfs3: loop3: failed to read volume at offset 0x201800 [ 33.394227][ T4634] ntfs3: loop3: failed to read volume at offset 0x202800 [ 33.395429][ T4634] ntfs3: loop3: failed to read volume at offset 0x203800 [ 33.396647][ T4634] ntfs3: loop3: failed to read volume at offset 0x205800 [ 33.401516][ T4634] ntfs3: loop3: failed to read volume at offset 0x209800 [ 33.573998][ T4641] bpf getsockopt: ignoring program buffer with optlen=1869768547 (max_optlen=4096) [ 34.361172][ T4652] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 34.376403][ T4652] EXT4-fs (loop4): orphan cleanup on readonly fs [ 34.377814][ T4652] EXT4-fs warning (device loop4): ext4_enable_quotas:7087: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 34.380240][ T4652] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 34.389494][ T4652] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.86: iget: bad i_size value: 360287970189639690 [ 34.393547][ T4652] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.86: couldn't read orphan inode 15 (err -117) [ 34.396820][ T4652] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 34.402888][ T4313] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 34.511266][ T4662] exfat: Deprecated parameter 'utf8' [ 34.512088][ T4662] exfat: Deprecated parameter 'utf8' [ 34.513102][ T4662] exfat: Deprecated parameter 'utf8' [ 34.532004][ T4662] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 34.550605][ T4665] netlink: 'syz.0.92': attribute type 1 has an invalid length. [ 34.553277][ T4321] EXT4-fs error (device loop4): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 15 [ 34.557250][ T4321] EXT4-fs error (device loop4): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 15 [ 34.656970][ T4665] device veth1_to_batadv entered promiscuous mode [ 34.672147][ T4667] fuse: Bad value for 'fd' [ 34.721763][ T4325] Bluetooth: hci4: command 0x0419 tx timeout [ 34.722811][ T4325] Bluetooth: hci2: command 0x0419 tx timeout [ 34.811403][ T4330] Bluetooth: hci3: command 0x0419 tx timeout [ 34.853953][ T4330] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 34.855928][ T4330] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 34.857358][ T4330] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 34.859350][ T4330] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 34.860824][ T4330] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 34.862993][ T4330] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 34.935102][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 34.963638][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.052976][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.112723][ T4677] chnl_net:caif_netlink_parms(): no params data found [ 35.136416][ T4677] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.137832][ T4677] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.139838][ T4677] device bridge_slave_0 entered promiscuous mode [ 35.145809][ T4677] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.148317][ T4677] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.150394][ T4677] device bridge_slave_1 entered promiscuous mode [ 35.171121][ T111] kernel read not supported for file [userfaultfd] (pid: 111 comm: kworker/0:2) [ 35.182393][ T4658] EXT4-fs (loop4): unmounting filesystem. [ 35.195284][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.199739][ T4677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.209499][ T4677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.219063][ T4677] team0: Port device team_slave_0 added [ 35.221402][ T4677] team0: Port device team_slave_1 added [ 35.228960][ T4677] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.230356][ T4677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.236282][ T4677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.239372][ T4677] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.240759][ T4677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.245122][ T4677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.322212][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.335044][ T4330] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 35.337162][ T4330] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 35.339212][ T4330] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 35.344185][ T4330] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 35.345718][ T4330] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 35.346988][ T4330] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 35.372148][ T4677] device hsr_slave_0 entered promiscuous mode [ 35.391348][ T4677] device hsr_slave_1 entered promiscuous mode [ 35.420764][ T4677] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 35.422149][ T4677] Cannot create hsr debugfs directory [ 35.467090][ T4677] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 35.482007][ T4677] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 35.531893][ T4677] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 35.584495][ T4677] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 35.654942][ T4677] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.656218][ T4677] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.657860][ T4677] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.658999][ T4677] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.747159][ T4677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.757034][ T4705] chnl_net:caif_netlink_parms(): no params data found [ 35.788518][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.790446][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.795972][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.811177][ T4677] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.820304][ T4724] set_capacity_and_notify: 6 callbacks suppressed [ 35.820312][ T4724] loop0: detected capacity change from 0 to 8192 [ 35.872821][ T4724] loop0: p1 < > p2 p4 < p5 > [ 35.873730][ T4724] loop0: partition table partially beyond EOD, truncated [ 35.875103][ T4724] loop0: p1 start 134217728 is beyond EOD, truncated [ 35.876182][ T4724] loop0: p2 size 591360 extends beyond EOD, truncated [ 35.897123][ T4724] loop0: p5 size 591360 extends beyond EOD, truncated [ 36.016264][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.017752][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.018835][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.027007][ T4314] udevd[4314]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 36.031162][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 36.033541][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.036197][ T4312] udevd[4312]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 36.038352][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.039505][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.046466][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 36.050249][ T4313] udevd[4313]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 36.137166][ T4705] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.138430][ T4705] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.140067][ T4705] device bridge_slave_0 entered promiscuous mode [ 36.147114][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 36.233417][ T4705] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.234687][ T4705] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.236384][ T4705] device bridge_slave_1 entered promiscuous mode [ 36.306451][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 36.308813][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 36.317899][ T4677] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 36.319615][ T4677] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 36.329125][ T4705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.330765][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 36.337621][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 36.339271][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 36.346727][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 36.348928][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 36.352227][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 36.353779][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 36.395709][ T4705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.397703][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 36.414675][ T4705] team0: Port device team_slave_0 added [ 36.417253][ T4705] team0: Port device team_slave_1 added [ 36.504862][ T4705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.506076][ T4705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.510165][ T4705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.539170][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 36.540535][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 36.546661][ T4677] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.550597][ T4705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.556376][ T4705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.568369][ T4705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.663167][ T4705] device hsr_slave_0 entered promiscuous mode [ 36.711086][ T4705] device hsr_slave_1 entered promiscuous mode [ 36.750784][ T4705] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.752043][ T4705] Cannot create hsr debugfs directory [ 36.813837][ T4795] netlink: 4 bytes leftover after parsing attributes in process `syz.2.119'. [ 36.816164][ T4795] device veth1_macvtap left promiscuous mode [ 36.880750][ T4330] Bluetooth: hci1: command 0x0409 tx timeout [ 36.987653][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 36.989369][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 36.992329][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 37.001754][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 37.010326][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 37.014292][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 37.064759][ T4677] device veth0_vlan entered promiscuous mode [ 37.072662][ T4677] device veth1_vlan entered promiscuous mode [ 37.121829][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 37.123660][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 37.144141][ T4815] Bluetooth: MGMT ver 1.22 [ 37.176055][ T4677] device veth0_macvtap entered promiscuous mode [ 37.177986][ T4705] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 37.205949][ T4677] device veth1_macvtap entered promiscuous mode [ 37.214798][ T4705] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 37.266517][ T4677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.268460][ T4677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.269976][ T4677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.273905][ T4826] capability: warning: `syz.2.126' uses deprecated v2 capabilities in a way that may be insecure [ 37.275140][ T4677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.277144][ T4677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.278807][ T4677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.280320][ T4677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.282562][ T4677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.284007][ T4677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.286174][ T4677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.297221][ T4677] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.298548][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 37.300482][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 37.308791][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 37.311196][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 37.360907][ T4330] Bluetooth: hci0: command 0x0409 tx timeout [ 37.536461][ T4705] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 37.564526][ T4705] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 37.657312][ T4677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.659069][ T4677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.661842][ T4677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.663600][ T4677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.665291][ T4677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.667156][ T4677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.668950][ T4677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.675099][ T4677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.676795][ T4677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.678560][ T4677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.682733][ T4677] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.991287][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 37.993134][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 37.996037][ T4677] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.997591][ T4677] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.999100][ T4677] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.003525][ T4677] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.037106][ T4876] netlink: 4 bytes leftover after parsing attributes in process `syz.2.138'. [ 38.219930][ T4881] loop0: detected capacity change from 0 to 256 [ 38.227218][ T4881] exfat: Deprecated parameter 'utf8' [ 38.228081][ T4881] exfat: Deprecated parameter 'utf8' [ 38.229070][ T4881] exfat: Deprecated parameter 'utf8' [ 38.237208][ T4881] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 38.271263][ T11] device hsr_slave_0 left promiscuous mode [ 38.311227][ T11] device hsr_slave_1 left promiscuous mode [ 38.356806][ T4884] loop0: detected capacity change from 0 to 256 [ 38.358262][ T4884] exfat: Deprecated parameter 'utf8' [ 38.366602][ T4884] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 38.390947][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.392243][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 38.394231][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.395400][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 38.396939][ T11] device bridge_slave_1 left promiscuous mode [ 38.400604][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.442213][ T11] device bridge_slave_0 left promiscuous mode [ 38.443360][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.546003][ T4895] loop3: detected capacity change from 0 to 128 [ 38.551615][ T11] device veth1_macvtap left promiscuous mode [ 38.552782][ T11] device veth0_macvtap left promiscuous mode [ 38.553811][ T11] device veth1_vlan left promiscuous mode [ 38.554830][ T11] device veth0_vlan left promiscuous mode [ 38.566666][ T4895] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 38.687279][ T4895] fscrypt: Adiantum using implementation "adiantum(xchacha12-neon,aes-ce,nhpoly1305-generic)" [ 38.725277][ T4331] EXT4-fs (loop3): unmounting filesystem. [ 38.778126][ T4912] ipt_CLUSTERIP: Please specify destination IP [ 38.961058][ T4330] Bluetooth: hci1: command 0x041b tx timeout [ 39.440780][ T4330] Bluetooth: hci0: command 0x041b tx timeout [ 40.039968][ T4938] loop0: detected capacity change from 0 to 128 [ 40.214780][ T4944] loop3: detected capacity change from 0 to 1024 [ 40.219538][ T4944] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 40.221566][ T4944] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 40.245253][ T4944] JBD2: no valid journal superblock found [ 40.246253][ T4944] EXT4-fs (loop3): error loading journal [ 41.041702][ T4330] Bluetooth: hci1: command 0x040f tx timeout [ 41.296362][ T11] team0 (unregistering): Port device team_slave_1 removed [ 41.520743][ T4330] Bluetooth: hci0: command 0x040f tx timeout [ 41.542534][ T11] team0 (unregistering): Port device team_slave_0 removed [ 41.721663][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 41.942133][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 43.120738][ T4325] Bluetooth: hci1: command 0x0419 tx timeout [ 43.412761][ T11] bond0 (unregistering): Released all slaves [ 43.610726][ T4330] Bluetooth: hci0: command 0x0419 tx timeout [ 43.721576][ T268] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.725543][ T268] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.732481][ T4956] netlink: 4 bytes leftover after parsing attributes in process `syz.3.163'. [ 43.740000][ T4958] netlink: 4 bytes leftover after parsing attributes in process `syz.3.163'. [ 43.886332][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 43.910380][ T4705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.912040][ T4947] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.913431][ T4947] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.916157][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 43.926716][ T4705] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.929623][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.931434][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.932802][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.937750][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.947768][ T4406] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.948896][ T4406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.977892][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.979584][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.982155][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.983697][ T268] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.984862][ T268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.028740][ T4948] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.032593][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.043304][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.045776][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.047444][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.056644][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.058504][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.087924][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.089636][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.091468][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.101928][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.105019][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.358675][ T4705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.360978][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 44.362359][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 44.641899][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 44.643815][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.693337][ T4946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 44.694991][ T4946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.696582][ T4946] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.698006][ T4946] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.700492][ T4705] device veth0_vlan entered promiscuous mode [ 44.727745][ T4705] device veth1_vlan entered promiscuous mode [ 44.731898][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 44.775646][ T4946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 44.777506][ T4946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.780283][ T4705] device veth0_macvtap entered promiscuous mode [ 44.802204][ T4705] device veth1_macvtap entered promiscuous mode [ 44.820949][ T4705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.822717][ T4705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.824393][ T4705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.826261][ T4705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.827899][ T4705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.829672][ T4705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.835260][ T4705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.845384][ T4705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.846981][ T4705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.848794][ T4705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.861973][ T4705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.111846][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.115807][ T5071] loop5: detected capacity change from 0 to 8 [ 45.118561][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 45.120232][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 45.127512][ T5071] unable to read id index table [ 45.132243][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.140373][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.150498][ T4705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.153073][ T4705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.154808][ T4705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.157916][ T4705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.164514][ T4705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.169805][ T4705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.176461][ T4705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.181909][ T4705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.188677][ T4705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.196144][ T4705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.204593][ T4705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.252619][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.255299][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.257091][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.262631][ T4705] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.263998][ T4705] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.265468][ T4705] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.266838][ T4705] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.332053][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.340953][ T5088] netlink: 4 bytes leftover after parsing attributes in process `syz.5.195'. [ 45.451990][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.461411][ T5094] netlink: 12 bytes leftover after parsing attributes in process `syz.3.197'. [ 45.486775][ T5086] loop0: detected capacity change from 0 to 32768 [ 45.525050][ T268] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.531473][ T268] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.549976][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.552508][ T4948] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 45.558781][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.564807][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 45.611136][ T5086] XFS (loop0): Mounting V5 Filesystem [ 45.708853][ T5086] XFS (loop0): Ending clean mount [ 45.722250][ T5086] XFS (loop0): Quotacheck needed: Please wait. [ 45.753728][ T5086] XFS (loop0): Quotacheck: Done. [ 45.938529][ T4329] XFS (loop0): Unmounting Filesystem [ 46.034216][ T5129] loop2: detected capacity change from 0 to 512 [ 46.098885][ T5129] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.203: inode has both inline data and extents flags [ 46.105959][ T5129] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.203: couldn't read orphan inode 15 (err -117) [ 46.117205][ T5129] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 46.246776][ T5146] loop6: detected capacity change from 0 to 128 [ 46.277304][ T5129] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:477: comm syz.2.203: Invalid block bitmap block 43690 in block_group 0 [ 46.320065][ T4328] EXT4-fs (loop2): unmounting filesystem. [ 46.345835][ T5146] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000c56) [ 46.347417][ T5146] FAT-fs (loop6): Filesystem has been set read-only [ 46.453060][ T5163] loop3: detected capacity change from 0 to 128 [ 46.478038][ T5164] block device autoloading is deprecated and will be removed. [ 46.492195][ T4314] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 46.567869][ T5172] 9pnet: p9_errstr2errno: server reported unknown error @c0x0000000000000006 [ 47.097322][ T5212] loop3: detected capacity change from 0 to 32768 [ 47.137752][ T5212] XFS (loop3): Mounting V5 Filesystem [ 47.147104][ T5212] XFS (loop3): Ending clean mount [ 47.239444][ T4331] XFS (loop3): Unmounting Filesystem [ 47.442608][ T5257] netlink: 8 bytes leftover after parsing attributes in process `syz.6.226'. [ 47.644802][ T11] device hsr_slave_0 left promiscuous mode [ 47.674558][ T11] device hsr_slave_1 left promiscuous mode [ 47.754090][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.755459][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.757063][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.758177][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.759756][ T11] device bridge_slave_1 left promiscuous mode [ 47.761914][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.802054][ T11] device bridge_slave_0 left promiscuous mode [ 47.803137][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.944256][ T11] device veth1_macvtap left promiscuous mode [ 47.945277][ T11] device veth0_macvtap left promiscuous mode [ 47.946299][ T11] device veth1_vlan left promiscuous mode [ 47.947264][ T11] device veth0_vlan left promiscuous mode [ 48.043567][ T5301] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 48.045326][ T5301] overlayfs: failed to set xattr on upper [ 48.046259][ T5301] overlayfs: ...falling back to index=off,metacopy=off. [ 48.258287][ T5322] loop2: detected capacity change from 0 to 7 [ 48.260569][ T5322] Dev loop2: unable to read RDB block 7 [ 48.265066][ T5322] loop2: AHDI p2 p3 [ 48.265995][ T5322] loop2: partition table partially beyond EOD, truncated [ 48.267667][ T5322] loop2: p3 start 335544320 is beyond EOD, truncated [ 48.300724][ T5326] tipc: Failed to remove unknown binding: 66,1,1/0:940270136/940270138 [ 48.302165][ T5326] tipc: Failed to remove unknown binding: 66,1,1/0:940270136/940270138 [ 48.335027][ T5331] loop0: detected capacity change from 0 to 256 [ 48.336695][ T5331] exfat: Deprecated parameter 'utf8' [ 48.345979][ T5331] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x9ae00b1e, utbl_chksum : 0xe619d30d) [ 48.418439][ T5334] loop6: detected capacity change from 0 to 4096 [ 48.426633][ T5334] EXT4-fs (loop6): Test dummy encryption mode enabled [ 48.431953][ T5334] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 48.448277][ T5334] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce" [ 48.467586][ T5334] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 48.624083][ T4705] EXT4-fs (loop6): unmounting filesystem. [ 48.666389][ T5347] loop0: detected capacity change from 0 to 256 [ 48.670606][ T5347] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18d7c, utbl_chksum : 0xe619d30d) [ 48.697111][ T5347] exFAT-fs (loop0): hint_cluster is invalid (17) [ 49.896880][ T11] team0 (unregistering): Port device team_slave_1 removed [ 49.949773][ T5425] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.274 (5425) [ 50.022066][ T5425] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 50.025816][ T5425] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 50.029629][ T5425] BTRFS info (device loop2): force clearing of disk cache [ 50.037664][ T5425] BTRFS info (device loop2): enabling ssd optimizations [ 50.040384][ T5425] BTRFS info (device loop2): using spread ssd allocation scheme [ 50.044648][ T5425] BTRFS info (device loop2): enabling disk space caching [ 50.053926][ T5425] BTRFS info (device loop2): turning on sync discard [ 50.057051][ T5425] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 50.060360][ T5425] BTRFS info (device loop2): use zstd compression, level 3 [ 50.071731][ T5425] BTRFS info (device loop2): setting nodatacow, compression disabled [ 50.076455][ T5425] BTRFS info (device loop2): disk space caching is enabled [ 50.096343][ T11] team0 (unregistering): Port device team_slave_0 removed [ 50.123928][ T5460] syz.5.280 uses obsolete (PF_INET,SOCK_PACKET) [ 50.209266][ T5425] BTRFS info (device loop2): rebuilding free space tree [ 50.232199][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 50.234289][ T5425] BTRFS info (device loop2): disabling free space tree [ 50.235719][ T5425] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 50.237222][ T5425] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 50.352914][ T5450] set_capacity_and_notify: 1 callbacks suppressed [ 50.352923][ T5450] loop6: detected capacity change from 0 to 32768 [ 50.387755][ T5450] XFS (loop6): Mounting V5 Filesystem [ 50.434040][ T5450] XFS (loop6): Ending clean mount [ 50.444323][ T5450] XFS (loop6): Quotacheck needed: Please wait. [ 50.446304][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 50.466281][ T4328] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 50.484249][ T5450] XFS (loop6): Quotacheck: Done. [ 50.513487][ T5493] overlayfs: statfs failed on './file0' [ 50.717717][ T4705] XFS (loop6): Unmounting Filesystem [ 50.725441][ T5506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.287'. [ 51.060173][ T5518] loop2: detected capacity change from 0 to 7 [ 51.065699][ T5518] Dev loop2: unable to read RDB block 7 [ 51.066635][ T5518] loop2: unable to read partition table [ 51.067726][ T5518] loop2: partition table beyond EOD, truncated [ 51.075713][ T5518] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 51.244163][ T5524] loop6: detected capacity change from 0 to 32768 [ 51.251126][ T5524] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop6 scanned by syz.6.294 (5524) [ 51.263840][ T5524] BTRFS info (device loop6): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 51.265462][ T5524] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 51.267111][ T5524] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_LZO (0x8) [ 51.268687][ T5524] BTRFS info (device loop6): use lzo compression, level 0 [ 51.269892][ T5524] BTRFS info (device loop6): using free space tree [ 51.283953][ T5524] BTRFS info (device loop6): enabling ssd optimizations [ 51.654793][ T4705] BTRFS info (device loop6): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 51.815843][ T11] bond0 (unregistering): Released all slaves [ 52.178967][ T5577] loop5: detected capacity change from 0 to 764 [ 52.482055][ T5611] netlink: 'syz.0.317': attribute type 1 has an invalid length. [ 52.548572][ T5611] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 52.550305][ T5611] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 52.562602][ T5611] bond1: (slave vcan1): making interface the new active one [ 52.564576][ T5611] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 53.318033][ T5689] netlink: 88 bytes leftover after parsing attributes in process `syz.5.332'. [ 53.319789][ T5689] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.321714][ T5689] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.342378][ T5689] netlink: 76 bytes leftover after parsing attributes in process `syz.5.332'. [ 53.343943][ T5689] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.345131][ T5689] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.347336][ T5689] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.348513][ T5689] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.354651][ T5689] netlink: 88 bytes leftover after parsing attributes in process `syz.5.332'. [ 53.356303][ T5689] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.358271][ T5689] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.398742][ T5699] loop2: detected capacity change from 0 to 7 [ 53.401751][ T4314] Dev loop2: unable to read RDB block 7 [ 53.402763][ T4314] loop2: unable to read partition table [ 53.403723][ T4314] loop2: partition table beyond EOD, truncated [ 53.412739][ T5699] Dev loop2: unable to read RDB block 7 [ 53.413773][ T5699] loop2: unable to read partition table [ 53.415053][ T5699] loop2: partition table beyond EOD, truncated [ 53.416266][ T5699] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 53.425172][ T3936] Dev loop2: unable to read RDB block 7 [ 53.426119][ T3936] loop2: unable to read partition table [ 53.427069][ T3936] loop2: partition table beyond EOD, truncated [ 53.556651][ T4325] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 53.558767][ T4325] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 53.560433][ T4325] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 53.565278][ T4325] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 53.568108][ T4325] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 53.569442][ T4325] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 53.594332][ T5715] loop2: detected capacity change from 0 to 7 [ 53.596735][ T5715] Dev loop2: unable to read RDB block 7 [ 53.601725][ T5715] loop2: unable to read partition table [ 53.608169][ T5715] loop2: partition table beyond EOD, truncated [ 53.609253][ T5715] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 53.691629][ T5712] chnl_net:caif_netlink_parms(): no params data found [ 53.715023][ T5712] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.716152][ T5712] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.717721][ T5712] device bridge_slave_0 entered promiscuous mode [ 53.721326][ T5712] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.731048][ T5712] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.732646][ T5712] device bridge_slave_1 entered promiscuous mode [ 53.741084][ T5712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.743930][ T5712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.754585][ T5712] team0: Port device team_slave_0 added [ 53.758409][ T5712] team0: Port device team_slave_1 added [ 53.766311][ T5712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.767552][ T5712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.772502][ T5712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.775267][ T5712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.776503][ T5712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.781147][ T5712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.842819][ T5712] device hsr_slave_0 entered promiscuous mode [ 53.881451][ T5712] device hsr_slave_1 entered promiscuous mode [ 53.920757][ T5712] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.922075][ T5712] Cannot create hsr debugfs directory [ 54.103381][ T5712] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.217051][ T5749] loop6: detected capacity change from 0 to 512 [ 54.220549][ T5749] ext4: Unknown parameter 'dont_measure' [ 54.264396][ T27] kauditd_printk_skb: 13 callbacks suppressed [ 54.264405][ T27] audit: type=1326 audit(54.250:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5748 comm="syz.6.344" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e975928 code=0x0 [ 54.293655][ T5712] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.382092][ T5712] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.454050][ T5712] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.664787][ T5712] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.711995][ T5712] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.751955][ T5712] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.792336][ T5712] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.838606][ T5782] loop3: detected capacity change from 0 to 256 [ 54.849965][ T5782] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 54.994623][ T5712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.998661][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.004617][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.009241][ T5712] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.014220][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.015992][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.020548][ T268] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.021850][ T268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.032346][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.036758][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.051012][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.055981][ T268] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.057222][ T268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.063124][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.073261][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.083419][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.085602][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.087571][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.092893][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.094630][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.110453][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.112252][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.117638][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.119454][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.128556][ T5712] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.215730][ T5712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.218208][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.219877][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.233484][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.235290][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.246831][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.248668][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.252356][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.254460][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.256976][ T5712] device veth0_vlan entered promiscuous mode [ 55.263275][ T5712] device veth1_vlan entered promiscuous mode [ 55.283528][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.285080][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.286464][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.287954][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.291776][ T5712] device veth0_macvtap entered promiscuous mode [ 55.297437][ T5712] device veth1_macvtap entered promiscuous mode [ 55.299948][ T5800] loop2: detected capacity change from 0 to 32768 [ 55.311350][ T5800] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.357 (5800) [ 55.314511][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.316414][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.322005][ T5712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.324492][ T5712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.326176][ T5800] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 55.327925][ T5800] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 55.329574][ T5712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.332007][ T5800] BTRFS info (device loop2): force clearing of disk cache [ 55.333369][ T5800] BTRFS info (device loop2): setting nodatasum [ 55.334504][ T5712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.336268][ T5800] BTRFS warning (device loop2): the 'inode_cache' option is deprecated and has no effect since 5.11 [ 55.338083][ T5712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.339984][ T5800] BTRFS info (device loop2): allowing degraded mounts [ 55.341989][ T5712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.343803][ T5800] BTRFS info (device loop2): enabling disk space caching [ 55.345180][ T5712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.347044][ T5800] BTRFS info (device loop2): disk space caching is enabled [ 55.348612][ T5712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.350551][ T5712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.353209][ T5712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.356149][ T5712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.358338][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.359998][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.372683][ T5712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.374404][ T5712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.375892][ T5712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.377617][ T5712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.379982][ T5712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.382056][ T5712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.384042][ T5712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.385728][ T5712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.387639][ T5712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.389693][ T5712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.392758][ T5712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.395286][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.397625][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.401439][ T5712] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.406562][ T5712] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.408106][ T5712] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.409992][ T5712] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.444695][ T268] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.446232][ T268] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.448966][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.466134][ T5800] BTRFS info (device loop2): enabling ssd optimizations [ 55.469770][ T5800] BTRFS info (device loop2): rebuilding free space tree [ 55.483645][ T268] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.485065][ T268] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.488265][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 55.493142][ T5800] BTRFS info (device loop2): disabling free space tree [ 55.494545][ T5800] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 55.497846][ T5800] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 55.604761][ T4330] Bluetooth: hci3: command 0x0409 tx timeout [ 55.624134][ T4328] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 55.806882][ T4314] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 12 /dev/loop2 scanned by udevd (4314) [ 55.969639][ T5849] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 56.314493][ T5862] team0: Port device team_slave_0 removed [ 56.582759][ T5886] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 56.966359][ T5898] netlink: 8 bytes leftover after parsing attributes in process `syz.5.385'. [ 56.983969][ T5898] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 56.992281][ T5901] loop0: detected capacity change from 0 to 2048 [ 57.016230][ T5901] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 57.136756][ T5712] EXT4-fs (loop0): unmounting filesystem. [ 57.337034][ T5921] loop3: detected capacity change from 0 to 512 [ 57.381303][ T5921] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.394: inode has both inline data and extents flags [ 57.383609][ T5921] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.394: couldn't read orphan inode 15 (err -117) [ 57.408688][ T5921] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 57.535302][ T5941] loop2: detected capacity change from 0 to 1024 [ 57.536881][ T5941] EXT4-fs: Ignoring removed nobh option [ 57.551543][ T5921] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:477: comm syz.3.394: Invalid block bitmap block 43690 in block_group 0 [ 57.575134][ T5941] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 57.626246][ T4331] EXT4-fs (loop3): unmounting filesystem. [ 57.635859][ T5941] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 57.680901][ T4330] Bluetooth: hci3: command 0x041b tx timeout [ 57.766801][ T5941] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3852: comm syz.2.398: Allocating blocks 497-513 which overlap fs metadata [ 57.787886][ T5941] EXT4-fs (loop2): pa 000000009e49755b: logic 256, phys. 385, len 8 [ 57.789159][ T5941] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4892: group 0, free 0, pa_free 1 [ 57.837136][ T5955] loop0: detected capacity change from 0 to 4096 [ 57.865546][ T5955] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 57.876169][ T5955] ntfs3: loop0: RAW NTFS volume: Filesystem size 0.00 Gb > volume size 0.00 Gb. Mount in read-only [ 57.910560][ T5955] ntfs3: loop0: failed to read volume at offset 0x201800 [ 57.911986][ T5955] ntfs3: loop0: failed to read volume at offset 0x201800 [ 57.913174][ T5955] ntfs3: loop0: failed to read volume at offset 0x201800 [ 57.928162][ T5955] ntfs3: loop0: failed to read volume at offset 0x201800 [ 57.943107][ T5955] ntfs3: loop0: failed to read volume at offset 0x202800 [ 57.944325][ T5955] ntfs3: loop0: failed to read volume at offset 0x203800 [ 57.945545][ T5955] ntfs3: loop0: failed to read volume at offset 0x205800 [ 57.969244][ T5955] ntfs3: loop0: failed to read volume at offset 0x209800 [ 58.043626][ T4328] EXT4-fs (loop2): unmounting filesystem. [ 58.094610][ T4325] Bluetooth: Frame is too long (len 11, expected len 4) [ 58.505537][ T6002] loop0: detected capacity change from 0 to 1024 [ 58.642104][ T6002] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 58.643778][ T6002] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 58.650607][ T6002] JBD2: no valid journal superblock found [ 58.651748][ T6002] EXT4-fs (loop0): error loading journal [ 59.735337][ T6015] netlink: 'syz.2.410': attribute type 1 has an invalid length. [ 59.760806][ T4325] Bluetooth: hci3: command 0x040f tx timeout [ 59.800020][ T6023] loop0: detected capacity change from 0 to 1024 [ 59.819856][ T6015] 8021q: adding VLAN 0 to HW filter on device bond1 [ 59.829555][ T6023] EXT4-fs: Ignoring removed nobh option [ 59.836197][ T6023] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 59.838837][ T6024] device veth1_to_batadv entered promiscuous mode [ 59.905784][ T6024] bond1: (slave veth1_to_batadv): making interface the new active one [ 59.913615][ T6023] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 59.946090][ T6024] bond1: (slave veth1_to_batadv): Enslaving as an active interface with an up link [ 59.954384][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 59.966679][ T6023] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3852: comm syz.0.412: Allocating blocks 497-513 which overlap fs metadata [ 59.975186][ T6023] EXT4-fs (loop0): pa 000000001d3c99d8: logic 256, phys. 385, len 8 [ 59.976529][ T6023] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4892: group 0, free 0, pa_free 1 [ 60.094775][ T5712] EXT4-fs (loop0): unmounting filesystem. [ 60.233734][ T6049] binder: 6047:6049 tried to acquire reference to desc 0, got 1 instead [ 60.235751][ T6049] binder: 6047:6049 unknown command 0 [ 60.236720][ T6049] binder: 6047:6049 ioctl c0306201 200001c0 returned -22 [ 60.266617][ T6052] loop0: detected capacity change from 0 to 164 [ 60.348595][ T6050] loop2: detected capacity change from 0 to 4096 [ 60.376021][ T6050] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 60.380477][ T6050] ntfs3: loop2: RAW NTFS volume: Filesystem size 0.00 Gb > volume size 0.00 Gb. Mount in read-only [ 60.417223][ T6050] ntfs3: loop2: failed to read volume at offset 0x201800 [ 60.420939][ T6050] ntfs3: loop2: failed to read volume at offset 0x201800 [ 60.423899][ T6050] ntfs3: loop2: failed to read volume at offset 0x201800 [ 60.427729][ T6050] ntfs3: loop2: failed to read volume at offset 0x201800 [ 60.431737][ T6050] ntfs3: loop2: failed to read volume at offset 0x202800 [ 60.434904][ T6050] ntfs3: loop2: failed to read volume at offset 0x203800 [ 60.438528][ T6050] ntfs3: loop2: failed to read volume at offset 0x205800 [ 60.442248][ T6050] ntfs3: loop2: failed to read volume at offset 0x209800 [ 60.447609][ T6062] loop0: detected capacity change from 0 to 1024 [ 60.449118][ T6062] EXT4-fs: Ignoring removed oldalloc option [ 60.450049][ T6062] EXT4-fs: Ignoring removed bh option [ 60.454761][ T6062] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 60.479993][ T6062] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 60.731990][ T6074] loop5: detected capacity change from 0 to 1024 [ 60.742373][ T6074] EXT4-fs: Ignoring removed nobh option [ 60.761550][ T6074] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 60.815744][ T6074] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 60.888376][ T6074] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3852: comm syz.5.426: Allocating blocks 497-513 which overlap fs metadata [ 60.901709][ T6074] EXT4-fs (loop5): pa 0000000075b0a5e3: logic 256, phys. 385, len 8 [ 60.903059][ T6074] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:4892: group 0, free 0, pa_free 1 [ 61.027881][ T6067] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 61.032825][ T6067] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 61.038647][ T6067] F2FS-fs (loop3): invalid crc value [ 61.096345][ T6067] F2FS-fs (loop3): Found nat_bits in checkpoint [ 61.165780][ T6067] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 61.168603][ T6067] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 61.214453][ T4677] EXT4-fs (loop5): unmounting filesystem. [ 61.467669][ T6093] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 61.469511][ T6093] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 61.629117][ T6093] JBD2: no valid journal superblock found [ 61.630160][ T6093] EXT4-fs (loop5): error loading journal [ 62.140419][ T4330] Bluetooth: hci3: command 0x0419 tx timeout [ 62.480841][ T5712] EXT4-fs (loop0): unmounting filesystem. [ 62.590345][ T6103] set_capacity_and_notify: 2 callbacks suppressed [ 62.590369][ T6103] loop2: detected capacity change from 0 to 64 [ 62.725996][ T27] audit: type=1326 audit(62.710:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6106 comm="syz.5.435" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f175928 code=0x0 [ 62.789139][ T6118] netlink: 16 bytes leftover after parsing attributes in process `syz.0.441'. [ 62.887349][ T6123] loop2: detected capacity change from 0 to 2048 [ 62.933321][ T6123] Alternate GPT is invalid, using primary GPT. [ 62.934420][ T6123] loop2: p1 p2 p3 [ 62.935013][ T6123] loop2: partition table partially beyond EOD, truncated [ 63.007880][ T6133] loop0: detected capacity change from 0 to 1764 [ 63.018835][ T6133] ISOFS: unable to read i-node block [ 63.019810][ T6133] isofs_fill_super: get root inode failed [ 63.023971][ T242] tipc: Subscription rejected, illegal request [ 63.286413][ T4313] udevd[4313]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 63.301114][ T4312] udevd[4312]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 63.365782][ T6154] loop2: detected capacity change from 0 to 1024 [ 63.566957][ T6154] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 63.568931][ T6154] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 63.578094][ T6154] JBD2: no valid journal superblock found [ 63.579032][ T6154] EXT4-fs (loop2): error loading journal [ 64.350661][ C1] sched: RT throttling activated [ 64.364051][ T4313] udevd[4313]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 64.592594][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.593890][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.623513][ T6133] loop0: detected capacity change from 0 to 32768 [ 64.627495][ T6133] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.447 (6133) [ 64.634611][ T6133] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 64.636316][ T6133] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 64.637733][ T6133] BTRFS info (device loop0): turning on flush-on-commit [ 64.638865][ T6133] BTRFS info (device loop0): use zlib compression, level 3 [ 64.640175][ T6133] BTRFS info (device loop0): disabling free space tree [ 64.660987][ T6133] BTRFS info (device loop0): enabling disk space caching [ 64.662237][ T6133] BTRFS info (device loop0): setting nodatasum [ 64.663219][ T6133] BTRFS info (device loop0): turning off barriers [ 64.670086][ T6133] BTRFS info (device loop0): enabling ssd optimizations [ 64.674561][ T6133] BTRFS info (device loop0): force clearing of disk cache [ 64.675755][ T6133] BTRFS info (device loop0): disk space caching is enabled [ 64.754755][ T4330] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 64.853778][ T6196] TCP: tcp_parse_options: Illegal window scaling value 236 > 14 received [ 64.906112][ T4330] Bluetooth: Wrong link type (-22) [ 64.910518][ T6211] loop2: detected capacity change from 0 to 1024 [ 64.912597][ T6211] ext4: Bad value for 'mb_optimize_scan' [ 64.926420][ T6133] BTRFS info (device loop0): rebuilding free space tree [ 64.932068][ T6133] BTRFS info (device loop0): disabling free space tree [ 64.933517][ T6133] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 64.935108][ T6133] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 64.940406][ T6172] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 65.188479][ T5712] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 65.771153][ T4330] Bluetooth: hci4: command 0x0406 tx timeout [ 65.800190][ T6272] loop2: detected capacity change from 0 to 40427 [ 65.808462][ T6272] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 65.809690][ T6272] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 65.819567][ T6272] F2FS-fs (loop2): invalid crc value [ 65.834427][ T6272] F2FS-fs (loop2): Found nat_bits in checkpoint [ 65.849461][ T6272] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 65.850605][ T6272] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 66.246190][ T6272] syz.2.475: attempt to access beyond end of device [ 66.246190][ T6272] loop2: rw=2049, sector=40424, nr_sectors = 8 limit=40427 [ 66.775480][ T6336] netlink: 4 bytes leftover after parsing attributes in process `syz.3.494'. [ 66.947480][ T6344] loop2: detected capacity change from 0 to 128 [ 66.980338][ T6344] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 67.228042][ T4328] EXT4-fs (loop2): unmounting filesystem. [ 67.334891][ T6384] netlink: 'syz.2.502': attribute type 1 has an invalid length. [ 67.359453][ T6384] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 67.365092][ T6384] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 67.366933][ T6384] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 67.596332][ T6406] loop6: detected capacity change from 0 to 128 [ 67.614676][ T6406] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 67.817534][ T6427] netlink: 'syz.3.511': attribute type 10 has an invalid length. [ 67.872267][ T6434] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 67.873371][ T6434] overlayfs: failed to set xattr on upper [ 67.874984][ T6434] overlayfs: ...falling back to index=off,metacopy=off. [ 67.933953][ T6427] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 67.957187][ T6442] loop0: detected capacity change from 0 to 1024 [ 67.970264][ T6442] EXT4-fs: Ignoring removed orlov option [ 67.997222][ T6442] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 68.029107][ T6442] EXT4-fs error (device loop0): __ext4_get_inode_loc:4513: comm syz.0.514: Invalid inode table block 4424061377932439672 in block_group 0 [ 68.356902][ T4705] EXT4-fs (loop6): unmounting filesystem. [ 68.367238][ T6482] tipc: Started in network mode [ 68.368086][ T6482] tipc: Node identity 12e233318a16, cluster identity 4711 [ 68.368982][ T6485] loop5: detected capacity change from 0 to 1024 [ 68.372477][ T6482] tipc: Enabled bearer , priority 0 [ 68.385149][ T6481] tipc: Resetting bearer [ 68.397045][ T6485] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 68.538766][ T6496] loop3: detected capacity change from 0 to 1024 [ 68.549467][ T6496] EXT4-fs: Ignoring removed nomblk_io_submit option [ 68.565521][ T6496] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 68.596573][ T5712] EXT4-fs (loop0): unmounting filesystem. [ 68.674713][ T6510] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 68.676030][ T6510] overlayfs: failed to set xattr on upper [ 68.677167][ T6510] overlayfs: ...falling back to index=off,metacopy=off. [ 69.602071][ T22] cfg80211: failed to load regulatory.db [ 79.526248][ T6481] tipc: Disabling bearer [ 79.580376][ T4331] EXT4-fs (loop3): unmounting filesystem. [ 79.606876][ T6522] tipc: Enabling of bearer rejected, failed to enable media [ 79.608879][ T4405] tipc: Node number set to 2566140721 [ 79.689432][ T6539] tipc: Started in network mode [ 79.690220][ T6539] tipc: Node identity fe1b6def511, cluster identity 4711 [ 79.693859][ T6539] tipc: Enabled bearer , priority 0 [ 79.715804][ T6539] device syzkaller0 entered promiscuous mode [ 79.717412][ T6539] tipc: Resetting bearer [ 79.784349][ T6538] tipc: Resetting bearer [ 79.956517][ T6572] netlink: 4 bytes leftover after parsing attributes in process `syz.5.548'. [ 79.960608][ T6572] netlink: 4 bytes leftover after parsing attributes in process `syz.5.548'. [ 79.964804][ T6572] netlink: 4 bytes leftover after parsing attributes in process `syz.5.548'. [ 81.159250][ T6589] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 81.220306][ T6589] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 81.276431][ T6589] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 81.887921][ T6591] loop5: detected capacity change from 0 to 128 [ 81.908828][ T6591] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 81.940467][ T4677] EXT4-fs (loop5): unmounting filesystem. [ 81.963621][ T6595] loop5: detected capacity change from 0 to 128 [ 82.022257][ T6595] syz.5.557: attempt to access beyond end of device [ 82.022257][ T6595] loop5: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 82.047922][ T6594] syz.5.557: attempt to access beyond end of device [ 82.047922][ T6594] loop5: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 82.078653][ T6597] netlink: 28 bytes leftover after parsing attributes in process `syz.5.558'. [ 83.118287][ T6603] @ [ 83.118287][ T6603] x [ 90.874815][ T6538] tipc: Disabling bearer [ 90.887792][ T5496] tipc: Node number set to 2936761839 [ 91.421931][ T27] audit: type=1326 audit(91.410:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6659 comm="syz.5.572" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f175928 code=0x0 [ 91.534300][ T6661] loop0: detected capacity change from 0 to 32768 [ 91.574982][ T6661] XFS (loop0): Mounting V5 Filesystem [ 91.647435][ T6661] XFS (loop0): Ending clean mount [ 91.650264][ T6661] XFS (loop0): Quotacheck needed: Please wait. [ 91.697720][ T6661] XFS (loop0): Quotacheck: Done. [ 91.865783][ T5712] XFS (loop0): Unmounting Filesystem [ 92.039753][ T6703] netlink: 4 bytes leftover after parsing attributes in process `syz.2.578'. [ 92.271421][ T6720] binder: 6719:6720 tried to acquire reference to desc 0, got 1 instead [ 92.275381][ T22] binder: undelivered TRANSACTION_COMPLETE [ 92.276466][ T22] binder: undelivered TRANSACTION_COMPLETE [ 92.309877][ T22] binder: undelivered transaction 10, process died. [ 92.311084][ T22] binder: undelivered transaction 9, process died. [ 92.691280][ T6749] "syz.6.598" (6749) uses obsolete ecb(arc4) skcipher [ 92.728314][ T6756] tipc: Failed to remove unknown binding: 66,0,0/0:233460247/233460248 [ 92.730433][ T6756] tipc: Failed to remove unknown binding: 66,0,0/0:233460247/233460248 [ 92.807231][ T6758] tipc: Started in network mode [ 92.808117][ T6758] tipc: Node identity , cluster identity 4711 [ 92.809175][ T6758] tipc: Failed to obtain node identity [ 92.810034][ T6758] tipc: Enabling of bearer rejected, failed to enable media [ 92.816771][ T6760] netlink: 12 bytes leftover after parsing attributes in process `syz.6.603'. [ 92.885806][ T6764] netlink: 408 bytes leftover after parsing attributes in process `syz.0.605'. [ 93.062892][ T6771] binder: 6770:6771 tried to acquire reference to desc 0, got 1 instead [ 93.064934][ T6771] binder: 6770:6771 got transaction with invalid data ptr [ 93.068456][ T6771] binder: 6770:6771 transaction call to 6770:0 failed 16/29201/-14, size 0-4088 line 3333 [ 93.078225][ T5496] binder: undelivered TRANSACTION_COMPLETE [ 93.079191][ T5496] binder: undelivered TRANSACTION_ERROR: 29201 [ 93.103954][ T5496] binder: undelivered transaction 15, process died. [ 93.231838][ T6784] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 93.233888][ T6784] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 93.238737][ T6662] Set syz1 is full, maxelem 65536 reached [ 93.404967][ T6801] loop2: detected capacity change from 0 to 1024 [ 93.408357][ T6796] loop5: detected capacity change from 0 to 512 [ 93.409871][ T6796] journal_path: Lookup failure for './file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 93.427742][ T6796] EXT4-fs: error: could not find journal device path [ 93.442701][ T6801] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 93.483647][ T6623] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 93.486494][ T6803] [ 93.528045][ T6801] EXT4-fs error (device loop2): __ext4_get_inode_loc:4513: comm syz.2.621: Invalid inode table block 0 in block_group 0 [ 93.536608][ T6801] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 93.564114][ T4328] EXT4-fs (loop2): unmounting filesystem. [ 93.762892][ T6825] af_packet: tpacket_rcv: packet too big, clamped from 4087 to 3944. macoff=96 [ 93.958148][ T6850] binder: 6849:6850 tried to acquire reference to desc 0, got 1 instead [ 93.960088][ T6850] binder: 6849:6850 got transaction with invalid handle, 2 [ 93.965544][ T6850] binder: 6850:6849 translate handle failed [ 93.966701][ T6850] binder: 6849:6850 transaction call to 6849:0 failed 21/29201/-22, size 72-24 line 3393 [ 93.979252][ T6852] netlink: 28 bytes leftover after parsing attributes in process `syz.0.638'. [ 93.981876][ T6852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.638'. [ 93.985466][ T27] audit: type=1326 audit(93.970:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6847 comm="syz.5.636" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f175928 code=0x0 [ 94.004566][ T6852] netlink: 'syz.0.638': attribute type 10 has an invalid length. [ 94.006428][ T6852] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.007761][ T6852] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.034851][ T6852] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.036176][ T6852] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.038766][ T6852] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.039940][ T6852] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.048628][ T6852] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 94.278118][ T6863] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.279447][ T6863] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.762351][ T6863] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.801720][ T6863] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.846167][ T27] audit: type=1326 audit(94.830:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6876 comm="syz.2.647" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a375928 code=0x0 [ 95.153903][ T6863] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.155639][ T6863] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.157149][ T6863] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.158657][ T6863] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.367905][ T6865] Set syz1 is full, maxelem 65536 reached [ 95.441471][ T6885] wireguard: wg2: Could not create IPv6 socket [ 95.563381][ T6911] netlink: 44 bytes leftover after parsing attributes in process `syz.6.660'. [ 95.567123][ T6909] binder: 6908:6909 tried to acquire reference to desc 0, got 1 instead [ 95.569305][ T6909] binder: 6908:6909 got transaction with unaligned buffers size, 4093 [ 95.572429][ T6911] netlink: 'syz.6.660': attribute type 10 has an invalid length. [ 95.579127][ T6911] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 95.682290][ T27] audit: type=1326 audit(95.670:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6918 comm="syz.2.663" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a375928 code=0x0 [ 95.727112][ T6926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.730180][ T6926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.281831][ T6943] xt_hashlimit: size too large, truncated to 1048576 [ 97.591883][ T6996] loop0: detected capacity change from 0 to 512 [ 97.628752][ T6996] EXT2-fs (loop0): error: couldn't mount because of unsupported optional features (100) [ 97.799237][ T6994] loop2: detected capacity change from 0 to 40427 [ 97.838163][ T6994] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 97.839384][ T6994] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 98.348479][ T7019] VFS: Mount too revealing [ 98.573100][ T7036] loop6: detected capacity change from 0 to 2048 [ 98.597035][ T7036] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 99.316519][ T7066] tipc: Failed to remove unknown binding: 66,0,0/0:1393594564/1393594565 [ 99.321398][ T7050] loop6: detected capacity change from 0 to 40427 [ 99.331253][ T7066] tipc: Failed to remove unknown binding: 66,0,0/0:1393594564/1393594565 [ 99.337721][ T7050] F2FS-fs (loop6): build fault injection attr: rate: 771, type: 0x3ffff [ 99.345299][ T7050] F2FS-fs (loop6): invalid crc value [ 99.368490][ T7050] F2FS-fs (loop6): Found nat_bits in checkpoint [ 99.394259][ T7050] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 99.708326][ T7093] binder: 7092:7093 tried to acquire reference to desc 0, got 1 instead [ 99.711010][ T22] binder_debug: 3 callbacks suppressed [ 99.711017][ T22] binder: release 7092:7093 transaction 33 out, still active [ 99.713215][ T22] binder: undelivered TRANSACTION_COMPLETE [ 99.726606][ T22] binder: send failed reply for transaction 33, target dead [ 99.919345][ T7110] loop5: detected capacity change from 0 to 256 [ 99.948449][ T7110] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 100.164221][ T7125] binder: 7124:7125 unknown command 0 [ 100.165229][ T7125] binder: 7124:7125 ioctl c0306201 20000080 returned -22 [ 100.169475][ T7125] binder: 7124:7125 tried to acquire reference to desc 0, got 1 instead [ 100.173417][ T7119] netlink: 24 bytes leftover after parsing attributes in process `syz.5.736'. [ 100.176447][ T7125] binder: 7124:7125 got transaction with invalid offsets ptr [ 100.178867][ T7125] binder: 7124:7125 transaction call to 7124:0 failed 38/29201/-22, size 104-24 line 3576 [ 100.181749][ T4450] binder: undelivered TRANSACTION_ERROR: 29201 [ 100.184641][ T7120] netlink: 4 bytes leftover after parsing attributes in process `syz.3.734'. [ 100.193962][ T7120] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.195765][ T7120] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.197203][ T7120] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.198542][ T7120] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.208287][ T7120] netlink: 4 bytes leftover after parsing attributes in process `syz.3.734'. [ 100.218293][ T7116] netlink: 4 bytes leftover after parsing attributes in process `syz.3.734'. [ 100.244024][ T7116] netlink: 4 bytes leftover after parsing attributes in process `syz.3.734'. [ 100.386983][ T7132] loop2: detected capacity change from 0 to 4096 [ 100.474096][ T7144] netlink: 12 bytes leftover after parsing attributes in process `syz.3.747'. [ 100.724505][ T7165] overlayfs: failed to clone upperpath [ 100.827926][ T7158] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.829275][ T7158] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.245084][ T7158] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.261887][ T7158] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.599847][ T7158] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.601759][ T7158] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.603104][ T7158] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.604460][ T7158] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.765293][ T7158] device team1 left promiscuous mode [ 101.774993][ T7158] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.776462][ T7158] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.777833][ T7158] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.779436][ T7158] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.834585][ T7177] netlink: 12 bytes leftover after parsing attributes in process `syz.2.756'. [ 102.327457][ T7224] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 102.353385][ T7228] loop6: detected capacity change from 0 to 256 [ 102.357394][ T7228] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x5bae1814, utbl_chksum : 0xe619d30d) [ 102.359663][ T7228] exFAT-fs (loop6): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 102.490054][ T7240] overlayfs: failed to clone upperpath [ 102.560489][ T7252] netlink: 'syz.6.785': attribute type 9 has an invalid length. [ 102.563831][ T7252] netlink: 32 bytes leftover after parsing attributes in process `syz.6.785'. [ 102.867907][ T7267] overlayfs: failed to clone upperpath [ 103.465169][ T7285] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 104.384715][ T7304] netlink: 24 bytes leftover after parsing attributes in process `syz.5.808'. [ 104.564876][ T7316] Invalid ELF header magic: != ELF [ 105.202639][ T7322] loop3: detected capacity change from 0 to 128 [ 105.233114][ T7322] syz.3.816: attempt to access beyond end of device [ 105.233114][ T7322] loop3: rw=2049, sector=145, nr_sectors = 89 limit=128 [ 105.335570][ T7322] syz.3.816: attempt to access beyond end of device [ 105.335570][ T7322] loop3: rw=2049, sector=241, nr_sectors = 800 limit=128 [ 105.390258][ T7322] syz.3.816: attempt to access beyond end of device [ 105.390258][ T7322] loop3: rw=524288, sector=241, nr_sectors = 256 limit=128 [ 105.395625][ T7322] syz.3.816: attempt to access beyond end of device [ 105.395625][ T7322] loop3: rw=0, sector=241, nr_sectors = 8 limit=128 [ 105.402442][ T7322] syz.3.816: attempt to access beyond end of device [ 105.402442][ T7322] loop3: rw=0, sector=241, nr_sectors = 8 limit=128 [ 105.407270][ T7337] loop2: detected capacity change from 0 to 512 [ 105.408118][ T7322] syz.3.816: attempt to access beyond end of device [ 105.408118][ T7322] loop3: rw=0, sector=241, nr_sectors = 8 limit=128 [ 105.408268][ T7322] syz.3.816: attempt to access beyond end of device [ 105.408268][ T7322] loop3: rw=0, sector=241, nr_sectors = 8 limit=128 [ 105.417908][ T7322] syz.3.816: attempt to access beyond end of device [ 105.417908][ T7322] loop3: rw=0, sector=241, nr_sectors = 8 limit=128 [ 105.420235][ T7322] syz.3.816: attempt to access beyond end of device [ 105.420235][ T7322] loop3: rw=0, sector=241, nr_sectors = 8 limit=128 [ 105.423329][ T7322] syz.3.816: attempt to access beyond end of device [ 105.423329][ T7322] loop3: rw=0, sector=241, nr_sectors = 8 limit=128 [ 105.458922][ T7322] Buffer I/O error on dev loop3, logical block 241, async page read [ 105.464489][ T7337] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 105.464654][ T7322] Buffer I/O error on dev loop3, logical block 242, async page read [ 105.480937][ T7322] Buffer I/O error on dev loop3, logical block 243, async page read [ 105.482319][ T7322] Buffer I/O error on dev loop3, logical block 244, async page read [ 105.483888][ T7322] Buffer I/O error on dev loop3, logical block 245, async page read [ 105.485227][ T7322] Buffer I/O error on dev loop3, logical block 246, async page read [ 105.487578][ T7322] Buffer I/O error on dev loop3, logical block 247, async page read [ 105.489345][ T7322] Buffer I/O error on dev loop3, logical block 248, async page read [ 105.491271][ T7322] Buffer I/O error on dev loop3, logical block 241, async page read [ 105.492728][ T7322] Buffer I/O error on dev loop3, logical block 242, async page read [ 105.508216][ T4328] EXT4-fs (loop2): unmounting filesystem. [ 105.642050][ T7354] overlayfs: failed to clone upperpath [ 105.750587][ T7361] netlink: 20 bytes leftover after parsing attributes in process `syz.2.829'. [ 105.825004][ T7371] netlink: 'syz.5.835': attribute type 4 has an invalid length. [ 105.869341][ T7371] netlink: 'syz.5.835': attribute type 4 has an invalid length. [ 105.938354][ T7377] netlink: 'syz.5.838': attribute type 1 has an invalid length. [ 105.952520][ T7377] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.972886][ T7377] bond1: (slave vlan2): making interface the new active one [ 105.975554][ T7377] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 105.977263][ T4948] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 106.181250][ T7393] loop6: detected capacity change from 0 to 512 [ 106.183287][ T7393] EXT4-fs (loop6): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 106.184972][ T7393] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 106.186502][ T7393] EXT4-fs (loop6): The Hurd can't support 64-bit file systems [ 106.244725][ T7399] netlink: 'syz.0.847': attribute type 1 has an invalid length. [ 106.259290][ T7399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.847'. [ 106.267085][ T7399] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 106.270551][ T7399] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 106.284065][ T7399] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 106.328820][ T7399] bond1 (unregistering): Released all slaves [ 106.965570][ T7418] netlink: 4 bytes leftover after parsing attributes in process `syz.5.852'. [ 107.173800][ T7420] netlink: 24 bytes leftover after parsing attributes in process `syz.2.853'. [ 107.179353][ T7425] netlink: 4 bytes leftover after parsing attributes in process `syz.6.855'. [ 107.777082][ T7426] netlink: 12 bytes leftover after parsing attributes in process `syz.2.853'. [ 107.781886][ T7429] netlink: 12 bytes leftover after parsing attributes in process `syz.3.856'. [ 107.831971][ T7434] netlink: 'syz.3.856': attribute type 1 has an invalid length. [ 107.833707][ T7435] netlink: 'syz.3.856': attribute type 1 has an invalid length. [ 107.892716][ T7446] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 108.153807][ T7453] netlink: 'syz.3.863': attribute type 1 has an invalid length. [ 108.161327][ T7453] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.224233][ T7453] bond1: (slave vlan2): Opening slave failed [ 108.296478][ T7470] loop6: detected capacity change from 0 to 128 [ 108.307445][ T7470] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 108.368921][ T7470] fscrypt: loop6: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 108.385106][ T4705] EXT4-fs (loop6): unmounting filesystem. [ 108.965097][ T7506] binder: 7505:7506 unknown command 0 [ 108.966011][ T7506] binder: 7505:7506 ioctl c0306201 20000080 returned -22 [ 108.973298][ T7506] binder: 7505:7506 tried to acquire reference to desc 0, got 1 instead [ 108.974947][ T7506] binder: 7505:7506 got transaction with invalid parent offset or type [ 108.976377][ T7506] binder: 7506:7505 failed to fixup parent [ 108.977357][ T7506] binder: 7505:7506 transaction call to 7505:0 failed 43/29201/-22, size 4192-24 line 3540 [ 108.984966][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 109.156531][ T7517] netlink: 'syz.5.885': attribute type 5 has an invalid length. [ 109.159255][ T7517] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.160906][ T7517] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.162424][ T7517] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.164005][ T7517] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.186880][ T7517] batman_adv: batadv0: Adding interface: vxlan0 [ 109.187976][ T7517] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.201833][ T7517] batman_adv: batadv0: Interface activated: vxlan0 [ 109.230119][ T7523] netlink: 'syz.0.889': attribute type 25 has an invalid length. [ 109.231695][ T7523] netlink: 20 bytes leftover after parsing attributes in process `syz.0.889'. [ 109.235136][ T7523] netlink: 44 bytes leftover after parsing attributes in process `syz.0.889'. [ 109.236493][ T7523] netlink: 40 bytes leftover after parsing attributes in process `syz.0.889'. [ 109.248363][ T7523] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.271299][ T7525] Driver unsupported XDP return value 0 on prog (id 156) dev N/A, expect packet loss! [ 109.825747][ T7537] binder: 7536:7537 tried to acquire reference to desc 0, got 1 instead [ 109.836288][ T7537] binder: 7536:7537 got transaction with invalid offset (65, min 0 max 88) or object. [ 109.842453][ T7537] binder: 7536:7537 transaction call to 7536:0 failed 48/29201/-22, size 88-24 line 3346 [ 109.845769][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 110.316283][ T27] audit: type=1326 audit(110.297:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7558 comm="syz.0.903" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4775928 code=0x7ffc0000 [ 110.320056][ T27] audit: type=1326 audit(110.297:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7558 comm="syz.0.903" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4775928 code=0x7ffc0000 [ 110.320742][ T7560] loop6: detected capacity change from 0 to 1024 [ 110.336213][ T27] audit: type=1326 audit(110.317:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7558 comm="syz.0.903" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb4775928 code=0x7ffc0000 [ 110.337087][ T7560] EXT4-fs: Ignoring removed mblk_io_submit option [ 110.340808][ T27] audit: type=1326 audit(110.317:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7558 comm="syz.0.903" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4775928 code=0x7ffc0000 [ 110.340850][ T27] audit: type=1326 audit(110.317:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7558 comm="syz.0.903" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4775928 code=0x7ffc0000 [ 110.746480][ T27] audit: type=1326 audit(110.327:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7558 comm="syz.0.903" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb4775928 code=0x7ffc0000 [ 110.780069][ T27] audit: type=1326 audit(110.337:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7558 comm="syz.0.903" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4775928 code=0x7ffc0000 [ 110.796691][ T27] audit: type=1326 audit(110.337:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7558 comm="syz.0.903" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4775928 code=0x7ffc0000 [ 110.827390][ T27] audit: type=1326 audit(110.767:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7558 comm="syz.0.903" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb4775928 code=0x7ffc0000 [ 110.863178][ T27] audit: type=1326 audit(110.797:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7558 comm="syz.0.903" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4775928 code=0x7ffc0000 [ 110.892100][ T7560] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 110.933933][ T7568] loop9: detected capacity change from 0 to 7 [ 110.938625][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 110.940367][ C0] buffer_io_error: 27374 callbacks suppressed [ 110.940376][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 110.948243][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 110.949928][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 110.951737][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 110.953123][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 110.954887][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 110.956480][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 110.965797][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 110.967369][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 110.970078][ T4705] EXT4-fs (loop6): unmounting filesystem. [ 110.973068][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 110.974465][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 110.976220][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 110.977749][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 110.979036][ T7568] ldm_validate_partition_table(): Disk read failed. [ 110.980713][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 110.982149][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 110.987784][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 110.989340][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 110.998686][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 111.000248][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 111.036136][ T7568] Dev loop9: unable to read RDB block 0 [ 111.039005][ T7568] loop9: unable to read partition table [ 111.043285][ T7568] loop9: partition table beyond EOD, truncated [ 111.055653][ T7568] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 111.055653][ T7568] ) failed (rc=-5) [ 111.055818][ T7576] netlink: 'syz.0.909': attribute type 10 has an invalid length. [ 111.061908][ T6809] ldm_validate_partition_table(): Disk read failed. [ 111.074395][ T6809] Dev loop9: unable to read RDB block 0 [ 111.077934][ T6809] loop9: unable to read partition table [ 111.080536][ T7576] bridge0: port 3(netdevsim0) entered blocking state [ 111.081933][ T6809] loop9: partition table beyond EOD, truncated [ 111.084921][ T7571] ldm_validate_partition_table(): Disk read failed. [ 111.086263][ T7571] Dev loop9: unable to read RDB block 0 [ 111.087360][ T7571] loop9: unable to read partition table [ 111.088330][ T7571] loop9: partition table beyond EOD, truncated [ 111.089273][ T7571] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 111.089273][ T7571] ) failed (rc=-5) [ 111.100828][ T7576] bridge0: port 3(netdevsim0) entered disabled state [ 111.102563][ T7576] device netdevsim0 entered promiscuous mode [ 111.130053][ T7576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 111.141276][ T7576] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.549913][ T7609] overlayfs: failed to clone upperpath [ 111.795174][ T7624] loop2: detected capacity change from 0 to 512 [ 111.823589][ T7624] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 111.855234][ T7629] 9pnet_fd: Insufficient options for proto=fd [ 111.863689][ T7624] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 111.875432][ T7624] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #15: comm syz.2.926: mark_inode_dirty error [ 111.879678][ T7624] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 32896 with max blocks 1 with error 117 [ 111.882327][ T7624] EXT4-fs (loop2): This should not happen!! Data will be lost [ 111.882327][ T7624] [ 111.895834][ T7623] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:477: comm syz.2.926: Invalid block bitmap block 4605862754441329005 in block_group 0 [ 111.902201][ T7631] debugfs: Directory 'netdev:nicvf0' with parent 'phy13' already present! [ 111.906501][ T7623] EXT4-fs error (device loop2): ext4_discard_preallocations:5130: comm syz.2.926: Error -117 reading block bitmap for 0 [ 111.928703][ T4328] EXT4-fs (loop2): unmounting filesystem. [ 111.978789][ T7635] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 111.979868][ T7635] overlayfs: failed to set xattr on upper [ 111.981710][ T7635] overlayfs: ...falling back to index=off,metacopy=off. [ 112.157352][ T7645] binder: 7644:7645 tried to acquire reference to desc 0, got 1 instead [ 112.159137][ T7645] binder: 7644:7645 got transaction with out-of-order buffer fixup [ 112.160604][ T7645] binder: 7644:7645 transaction call to 7644:0 failed 53/29201/-22, size 112-24 line 3452 [ 112.163797][ T5497] binder: undelivered TRANSACTION_ERROR: 29201 [ 112.225802][ T7651] netlink: 'syz.6.937': attribute type 4 has an invalid length. [ 112.246089][ T5497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.273954][ T7655] __nla_validate_parse: 1 callbacks suppressed [ 112.273965][ T7655] netlink: 12 bytes leftover after parsing attributes in process `syz.6.939'. [ 112.297404][ T7655] 8021q: adding VLAN 0 to HW filter on device bond1 [ 112.316171][ T7655] 8021q: adding VLAN 0 to HW filter on device bond1 [ 112.317761][ T7655] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 112.320154][ T7655] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 112.364944][ T7661] device macvlan2 entered promiscuous mode [ 112.366038][ T7661] bond1: (slave macvlan2): Error -98 calling set_mac_address [ 113.280951][ T5495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.410522][ T7704] loop6: detected capacity change from 0 to 512 [ 113.584563][ T7710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.586281][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.590963][ T7710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.598676][ T7710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.602134][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.605480][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.607048][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.608421][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.348441][ T7711] orangefs_mount: mount request failed with -4 [ 114.495079][ T7718] netlink: 24 bytes leftover after parsing attributes in process `syz.2.959'. [ 114.556469][ T7721] sch_tbf: burst 88 is lower than device veth5 mtu (1514) ! [ 114.646472][ T7726] loop2: detected capacity change from 0 to 7 [ 114.651895][ T7726] Dev loop2: unable to read RDB block 7 [ 114.652896][ T7726] loop2: unable to read partition table [ 114.653835][ T7726] loop2: partition table beyond EOD, truncated [ 114.654834][ T7726] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 114.679100][ T7729] loop0: detected capacity change from 0 to 2048 [ 114.700462][ T7729] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 114.835939][ T7732] loop2: detected capacity change from 0 to 1024 [ 114.837484][ T7732] EXT4-fs: Ignoring removed orlov option [ 114.856149][ T7732] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 114.871986][ T7732] EXT4-fs error (device loop2): ext4_free_inode:282: comm syz.2.965: reserved or nonexistent inode 5 [ 114.926508][ T4328] EXT4-fs (loop2): unmounting filesystem. [ 115.650469][ T7779] netlink: 168 bytes leftover after parsing attributes in process `syz.6.980'. [ 115.676100][ T7781] netlink: 4 bytes leftover after parsing attributes in process `syz.2.981'. [ 115.875256][ T7795] netlink: 'syz.5.987': attribute type 10 has an invalid length. [ 115.960616][ T7795] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 116.595044][ T7774] loop3: detected capacity change from 0 to 131072 [ 116.616155][ T7774] F2FS-fs (loop3): Found nat_bits in checkpoint [ 116.651779][ T7774] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 116.847792][ T7820] VFS: Mount too revealing [ 117.229035][ T7834] loop3: detected capacity change from 0 to 2048 [ 117.370786][ T7834] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 117.424954][ T4370] net_ratelimit: 27 callbacks suppressed [ 117.424968][ T4370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.440971][ T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.736192][ T7855] loop2: detected capacity change from 0 to 128 [ 118.208912][ T7883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.214543][ T7883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.216884][ T7883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.218389][ T7883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.219829][ T7883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.221382][ T7883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.222919][ T7883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.224410][ T7883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.371147][ T4325] Bluetooth: hci2: Malformed HCI Event [ 119.052991][ T7900] binder: 7899:7900 tried to acquire reference to desc 0, got 1 instead [ 119.055271][ T4370] binder: release 7899:7900 transaction 58 out, still active [ 119.056510][ T4370] binder: undelivered TRANSACTION_COMPLETE [ 119.064803][ T4370] binder: send failed reply for transaction 58, target dead [ 122.640887][ T5497] net_ratelimit: 38 callbacks suppressed [ 122.640899][ T5497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.520833][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.690936][ T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.720962][ T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.760890][ T5497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.921964][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.923060][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 125.924791][ T4370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.560915][ T4370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.800923][ T5497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.796715][ T7823] netlink: 8 bytes leftover after parsing attributes in process `syz.6.998'. [ 127.841044][ T5497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.889775][ T7931] bpf setsockopt: ignoring program buffer with optlen=30428 (max_optlen=4096) [ 127.963076][ T7941] netlink: 'syz.6.1040': attribute type 10 has an invalid length. [ 127.969750][ T7941] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 127.986513][ T7941] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1040'. [ 128.122212][ T7955] binder: 7954:7955 tried to acquire reference to desc 0, got 1 instead [ 128.124985][ T7955] binder: 7954:7955 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 128.126941][ T7955] binder: 7955 RLIMIT_NICE not set [ 128.134960][ T4450] binder: release 7954:7955 transaction 63 out, still active [ 128.136170][ T4450] binder: undelivered TRANSACTION_COMPLETE [ 128.136799][ T7958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.141429][ T7958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.144264][ T7958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.148100][ T7958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.153568][ T4450] binder: send failed reply for transaction 63, target dead [ 128.211111][ T7958] "syz.2.1043" (7958) uses obsolete ecb(arc4) skcipher [ 128.743150][ T7975] loop0: detected capacity change from 0 to 1024 [ 128.877001][ T7975] hfsplus: request for non-existent node 16777216 in B*Tree [ 128.878985][ T7975] hfsplus: request for non-existent node 16777216 in B*Tree [ 128.881098][ T5497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.345516][ T7984] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1052'. [ 129.355309][ T7982] binder: 7980:7982 tried to acquire reference to desc 0, got 1 instead [ 129.369577][ T7982] binder_alloc: 7980: binder_alloc_buf size 16384 failed, no address space [ 129.375769][ T7982] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 129.377505][ T7982] binder: cannot allocate buffer: no space left [ 129.378072][ T7982] binder: 7980:7982 transaction call to 7980:0 failed 68/29201/-28, size 0-0 line 3230 [ 129.382281][ T4370] binder: undelivered TRANSACTION_ERROR: 29201 [ 129.911940][ T4370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.921888][ T5497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.008479][ T8019] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1062'. [ 130.227558][ T8014] loop0: detected capacity change from 0 to 40427 [ 130.238315][ T8014] F2FS-fs (loop0): Invalid log sectorsize (1) [ 130.239389][ T8014] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 130.244166][ T8014] F2FS-fs (loop0): invalid crc value [ 130.246187][ T8014] F2FS-fs (loop0): Found nat_bits in checkpoint [ 130.256762][ T8014] F2FS-fs (loop0): Start checkpoint disabled! [ 130.279225][ T8014] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 130.280477][ T8014] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 130.371770][ T8035] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1065'. [ 130.412752][ T8035] bridge4: port 1(vlan2) entered blocking state [ 130.413927][ T8035] bridge4: port 1(vlan2) entered disabled state [ 130.415538][ T8035] device vlan2 entered promiscuous mode [ 130.416520][ T8035] device bridge0 entered promiscuous mode [ 130.449365][ T4946] bio_check_eod: 27673 callbacks suppressed [ 130.449377][ T4946] kworker/u4:8: attempt to access beyond end of device [ 130.449377][ T4946] loop0: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 130.513604][ T8043] tipc: Failed to remove unknown binding: 66,0,0/2936761839:3938924/3938925 [ 130.517648][ T8043] tipc: Failed to remove unknown binding: 66,0,0/2936761839:3938924/3938925 [ 130.996589][ T5496] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.433598][ T8083] netlink: 'syz.0.1082': attribute type 10 has an invalid length. [ 132.488161][ T5497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.531163][ T8083] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 132.548952][ T8087] Injecting memory failure for pfn 0x12027e at process virtual address 0x20003000 [ 132.557598][ T8087] Memory failure: 0x12027e: Failed to invalidate [ 132.558727][ T8087] Memory failure: 0x12027e: clean unevictable LRU page still referenced by 2 users [ 132.560110][ T8087] Memory failure: 0x12027e: recovery action for clean unevictable LRU page: Failed [ 132.696501][ T8092] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1086'. [ 132.709896][ T8100] loop3: detected capacity change from 0 to 256 [ 132.739813][ T8100] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 133.012301][ T4370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.068896][ T4948] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.077237][ T8108] tipc: Started in network mode [ 133.081142][ T8108] tipc: Node identity 7f000001, cluster identity 4711 [ 133.090447][ T8108] tipc: Enabled bearer , priority 10 [ 133.099158][ T8108] loop0: detected capacity change from 0 to 16 [ 133.105562][ T8108] erofs: (device loop0): erofs_superblock_csum_verify: invalid checksum 0x80a9593b, 0x7bbbea8c expected [ 133.118210][ T7923] udevd[7923]: incorrect erofs checksum on /dev/loop0 [ 133.121447][ T8108] tipc: Enabled bearer , priority 10 [ 133.245946][ T8121] loop0: detected capacity change from 0 to 128 [ 133.250499][ T8121] EXT4-fs: Ignoring removed orlov option [ 133.257750][ T8121] EXT4-fs (loop0): Test dummy encryption mode enabled [ 133.270602][ T8121] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 133.273231][ T8121] ext4 filesystem being mounted at /134/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 133.392273][ T8121] EXT4-fs (loop0): re-mounted. Quota mode: none. [ 133.458495][ T5712] EXT4-fs (loop0): unmounting filesystem. [ 133.578046][ T5495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.596219][ T8129] loop0: detected capacity change from 0 to 512 [ 133.615554][ T8129] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 133.627601][ T8129] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 190 vs 220 free clusters [ 133.633739][ T8129] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1097: invalid indirect mapped block 1 (level 1) [ 133.637748][ T8129] EXT4-fs (loop0): 1 truncate cleaned up [ 133.638640][ T8129] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 134.231396][ T4450] tipc: Node number set to 2130706433 [ 134.897704][ T5712] EXT4-fs (loop0): unmounting filesystem. [ 135.161130][ T5497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.500078][ T8156] loop2: detected capacity change from 0 to 256 [ 135.523885][ T8156] FAT-fs (loop2): Directory bread(block 64) failed [ 135.525235][ T8156] FAT-fs (loop2): Directory bread(block 65) failed [ 135.526597][ T8156] FAT-fs (loop2): Directory bread(block 66) failed [ 135.527746][ T8156] FAT-fs (loop2): Directory bread(block 67) failed [ 135.528894][ T8156] FAT-fs (loop2): Directory bread(block 68) failed [ 135.530076][ T8156] FAT-fs (loop2): Directory bread(block 69) failed [ 135.531175][ T4370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.541199][ T8156] FAT-fs (loop2): Directory bread(block 70) failed [ 135.542329][ T8156] FAT-fs (loop2): Directory bread(block 71) failed [ 135.543495][ T8156] FAT-fs (loop2): Directory bread(block 72) failed [ 135.544737][ T8156] FAT-fs (loop2): Directory bread(block 73) failed [ 135.584117][ T8156] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1106'. [ 136.080969][ T4370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.216798][ T8179] binder: 8178:8179 tried to acquire reference to desc 0, got 1 instead [ 136.218943][ T8179] binder: 8178:8179 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 136.234134][ T8179] binder: 8179 RLIMIT_NICE not set [ 136.235088][ T8179] binder: undelivered transaction 73, put_user failed [ 136.236187][ T8179] binder: 8178:8179 ioctl c0306201 20000680 returned -14 [ 136.238763][ T5497] binder: undelivered TRANSACTION_COMPLETE [ 136.245843][ T5497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.303167][ T8189] loop0: detected capacity change from 0 to 64 [ 136.705999][ T8193] loop6: detected capacity change from 0 to 2048 [ 136.741487][ T8193] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 137.285828][ T5497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.755425][ C1] vcan0: j1939_tp_rxtimer: 0x00000000db15afb5: rx timeout, send abort [ 137.797064][ T27] kauditd_printk_skb: 13 callbacks suppressed [ 137.797079][ T27] audit: type=1326 audit(2000000005.060:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8224 comm="syz.5.1131" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f175928 code=0x0 [ 138.148121][ T8173] Set syz1 is full, maxelem 65536 reached [ 138.178692][ T8231] loop3: detected capacity change from 0 to 1024 [ 138.215382][ T8231] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 138.217137][ T8231] ext4 filesystem being mounted at /220/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.255469][ C1] vcan0: j1939_tp_rxtimer: 0x000000009abc6019: rx timeout, send abort [ 138.257969][ C1] vcan0: j1939_tp_rxtimer: 0x00000000db15afb5: abort rx timeout. Force session deactivation [ 138.319356][ T8238] ================================================================== [ 138.320739][ T8238] BUG: KASAN: use-after-free in br_multicast_set_port_router+0x278/0x9e0 [ 138.322145][ T8238] Write of size 8 at addr ffff0000f599ba68 by task syz.0.1134/8238 [ 138.323397][ T8238] [ 138.323819][ T8238] CPU: 1 PID: 8238 Comm: syz.0.1134 Not tainted syzkaller #0 [ 138.325004][ T8238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 138.326615][ T8238] Call trace: [ 138.327186][ T8238] dump_backtrace+0x1c0/0x1ec [ 138.327692][ T8231] EXT4-fs error (device loop3): __ext4_get_inode_loc:4513: comm syz.3.1133: Invalid inode table block 0 in block_group 0 [ 138.327949][ T8238] show_stack+0x2c/0x3c [ 138.327967][ T8238] __dump_stack+0x30/0x40 [ 138.330502][ T8231] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 138.330765][ T8238] dump_stack_lvl+0xf4/0x15c [ 138.330792][ T8238] print_address_description+0x88/0x218 [ 138.330805][ T8238] print_report+0x50/0x68 [ 138.330814][ T8238] kasan_report+0xa8/0xfc [ 138.330822][ T8238] __asan_report_store8_noabort+0x2c/0x38 [ 138.330829][ T8238] br_multicast_set_port_router+0x278/0x9e0 [ 138.330838][ T8238] br_setport+0xa20/0xf54 [ 138.330845][ T8238] br_port_slave_changelink+0x138/0x160 [ 138.339237][ T8238] rtnl_newlink+0x10b8/0x1a50 [ 138.340000][ T8238] rtnetlink_rcv_msg+0x698/0xcdc [ 138.340815][ T8238] netlink_rcv_skb+0x218/0x3e8 [ 138.341576][ T8238] rtnetlink_rcv+0x28/0x38 [ 138.342317][ T8238] netlink_unicast+0x60c/0x814 [ 138.343051][ T8238] netlink_sendmsg+0x6f4/0x9c0 [ 138.343843][ T8238] ____sys_sendmsg+0x5c8/0x938 [ 138.344619][ T8238] __sys_sendmsg+0x288/0x374 [ 138.345397][ T8238] __arm64_sys_sendmsg+0x80/0x94 [ 138.346186][ T8238] invoke_syscall+0x98/0x2b4 [ 138.346863][ T8238] el0_svc_common+0x138/0x258 [ 138.347639][ T8238] do_el0_svc+0x58/0x130 [ 138.348313][ T8238] el0_svc+0x58/0x128 [ 138.348934][ T8238] el0t_64_sync_handler+0x84/0xf0 [ 138.349702][ T8238] el0t_64_sync+0x18c/0x190 [ 138.350411][ T8238] [ 138.350748][ T8238] Allocated by task 8209: [ 138.351438][ T8238] kasan_set_track+0x4c/0x80 [ 138.352152][ T8238] kasan_save_alloc_info+0x24/0x30 [ 138.352909][ T8238] __kasan_kmalloc+0xa0/0xb8 [ 138.353715][ T8238] __kmalloc_node_track_caller+0xe0/0x16c [ 138.354607][ T8238] __alloc_skb+0x264/0x714 [ 138.355282][ T8238] tipc_msg_build+0xc0/0xb9c [ 138.356016][ T8238] tipc_send_group_bcast+0x814/0xacc [ 138.356874][ T8238] __tipc_sendmsg+0x2ac/0x28b8 [ 138.357598][ T8238] tipc_sendmsg+0x60/0x1bc [ 138.358288][ T8238] ____sys_sendmsg+0x5c8/0x938 [ 138.359038][ T8238] __sys_sendmmsg+0x344/0x834 [ 138.359833][ T8238] __arm64_sys_sendmmsg+0xa0/0xbc [ 138.360696][ T8238] invoke_syscall+0x98/0x2b4 [ 138.361422][ T8238] el0_svc_common+0x138/0x258 [ 138.362165][ T8238] do_el0_svc+0x58/0x130 [ 138.362843][ T8238] el0_svc+0x58/0x128 [ 138.363472][ T8238] el0t_64_sync_handler+0x84/0xf0 [ 138.364187][ T8238] el0t_64_sync+0x18c/0x190 [ 138.364851][ T8238] [ 138.365199][ T8238] Freed by task 8209: [ 138.365867][ T8238] kasan_set_track+0x4c/0x80 [ 138.366623][ T8238] kasan_save_free_info+0x38/0x5c [ 138.367421][ T8238] ____kasan_slab_free+0x148/0x1b0 [ 138.368207][ T8238] __kasan_slab_free+0x18/0x28 [ 138.368985][ T8238] slab_free_freelist_hook+0x16c/0x1e8 [ 138.369851][ T8238] __kmem_cache_free+0xbc/0x218 [ 138.370587][ T8238] kfree+0xd0/0x1a8 [ 138.371201][ T8238] skb_release_data+0x434/0x63c [ 138.371914][ T8238] kfree_skb_reason+0x198/0x418 [ 138.372696][ T8238] tipc_mcast_xmit+0xe84/0x1324 [ 138.373477][ T8238] tipc_send_group_bcast+0x840/0xacc [ 138.374318][ T8238] __tipc_sendmsg+0x2ac/0x28b8 [ 138.375050][ T8238] tipc_sendmsg+0x60/0x1bc [ 138.375766][ T8238] ____sys_sendmsg+0x5c8/0x938 [ 138.376611][ T8238] __sys_sendmmsg+0x344/0x834 [ 138.377443][ T8238] __arm64_sys_sendmmsg+0xa0/0xbc [ 138.378292][ T8238] invoke_syscall+0x98/0x2b4 [ 138.379063][ T8238] el0_svc_common+0x138/0x258 [ 138.379905][ T8238] do_el0_svc+0x58/0x130 [ 138.380598][ T8238] el0_svc+0x58/0x128 [ 138.381292][ T8238] el0t_64_sync_handler+0x84/0xf0 [ 138.382250][ T8238] el0t_64_sync+0x18c/0x190 [ 138.382955][ T8238] [ 138.383345][ T8238] Last potentially related work creation: [ 138.384333][ T8238] kasan_save_stack+0x40/0x70 [ 138.385144][ T8238] __kasan_record_aux_stack+0xc0/0xdc [ 138.386013][ T8238] kasan_record_aux_stack_noalloc+0x14/0x20 [ 138.387036][ T8238] call_rcu+0x100/0x94c [ 138.387681][ T8238] del_nbp+0x814/0x904 [ 138.388340][ T8238] br_del_if+0x154/0x320 [ 138.389015][ T8238] br_del_slave+0x28/0x38 [ 138.389764][ T8238] do_setlink+0xc28/0x3434 [ 138.390535][ T8238] rtnl_newlink+0x13cc/0x1a50 [ 138.391319][ T8238] rtnetlink_rcv_msg+0x698/0xcdc [ 138.392103][ T8238] netlink_rcv_skb+0x218/0x3e8 [ 138.392899][ T8238] rtnetlink_rcv+0x28/0x38 [ 138.393661][ T8238] netlink_unicast+0x60c/0x814 [ 138.394496][ T8238] netlink_sendmsg+0x6f4/0x9c0 [ 138.395272][ T8238] ____sys_sendmsg+0x5c8/0x938 [ 138.396012][ T8238] __sys_sendmsg+0x288/0x374 [ 138.396756][ T8238] __arm64_sys_sendmsg+0x80/0x94 [ 138.397533][ T8238] invoke_syscall+0x98/0x2b4 [ 138.398317][ T8238] el0_svc_common+0x138/0x258 [ 138.399102][ T8238] do_el0_svc+0x58/0x130 [ 138.399742][ T8238] el0_svc+0x58/0x128 [ 138.400347][ T8238] el0t_64_sync_handler+0x84/0xf0 [ 138.401160][ T8238] el0t_64_sync+0x18c/0x190 [ 138.401870][ T8238] [ 138.402195][ T8238] Second to last potentially related work creation: [ 138.403231][ T8238] kasan_save_stack+0x40/0x70 [ 138.403964][ T8238] __kasan_record_aux_stack+0xc0/0xdc [ 138.404768][ T8238] kasan_record_aux_stack_noalloc+0x14/0x20 [ 138.405604][ T8238] kvfree_call_rcu+0xb4/0x6e8 [ 138.406348][ T8238] neigh_destroy+0x458/0x650 [ 138.406953][ T8238] neigh_cleanup_and_release+0x154/0x3b4 [ 138.407756][ T8238] neigh_remove_one+0x318/0x420 [ 138.408513][ T8238] ___neigh_create+0x450/0x2400 [ 138.409307][ T8238] __neigh_create+0x44/0x58 [ 138.410018][ T8238] ip6_finish_output2+0x1678/0x1840 [ 138.410796][ T8238] ip6_finish_output+0x594/0x92c [ 138.411534][ T8238] ip6_output+0x274/0x500 [ 138.412216][ T8238] ndisc_send_skb+0xc30/0x164c [ 138.412969][ T8238] ndisc_solicit+0x29c/0x52c [ 138.413658][ T8238] neigh_probe+0xc4/0x124 [ 138.414385][ T8238] __neigh_event_send+0xd00/0x1490 [ 138.415168][ T8238] neigh_resolve_output+0x180/0x650 [ 138.416159][ T8238] ip6_finish_output2+0xd5c/0x1840 [ 138.417075][ T8238] ip6_finish_output+0x594/0x92c [ 138.417919][ T8238] ip6_output+0x274/0x500 [ 138.418613][ T8238] ip6_xmit+0x1164/0x1a24 [ 138.419357][ T8238] tcp_v6_send_synack+0x624/0xb54 [ 138.420184][ T8238] tcp_conn_request+0x18b8/0x25d4 [ 138.421110][ T8238] tcp_v6_conn_request+0x264/0x37c [ 138.421950][ T8238] tcp_rcv_state_process+0x121c/0x3854 [ 138.422814][ T8238] tcp_v6_do_rcv+0x868/0x1128 [ 138.423576][ T8238] tcp_v6_rcv+0x19cc/0x2000 [ 138.424349][ T8238] ip6_protocol_deliver_rcu+0x928/0x11cc [ 138.425313][ T8238] ip6_input_finish+0x164/0x294 [ 138.426094][ T8238] NF_HOOK+0x2dc/0x36c [ 138.426738][ T8238] ip6_input+0x90/0xa8 [ 138.427394][ T8238] ip6_rcv_finish+0x1f4/0x220 [ 138.428126][ T8238] NF_HOOK+0x2dc/0x36c [ 138.428802][ T8238] ipv6_rcv+0x9c/0xbc [ 138.429446][ T8238] __netif_receive_skb+0xcc/0x2a8 [ 138.430253][ T8238] netif_receive_skb+0x1e8/0x924 [ 138.431055][ T8238] tun_rx_batched+0x48c/0x5dc [ 138.431831][ T8238] tun_get_user+0x1fe8/0x3298 [ 138.432607][ T8238] tun_chr_write_iter+0xfc/0x200 [ 138.433323][ T8238] vfs_write+0x3ec/0x7f0 [ 138.433971][ T8238] ksys_write+0x12c/0x224 [ 138.434651][ T8238] __arm64_sys_write+0x7c/0x90 [ 138.435401][ T8238] invoke_syscall+0x98/0x2b4 [ 138.436118][ T8238] el0_svc_common+0x138/0x258 [ 138.436853][ T8238] do_el0_svc+0x58/0x130 [ 138.437580][ T8238] el0_svc+0x58/0x128 [ 138.438243][ T8238] el0t_64_sync_handler+0x84/0xf0 [ 138.439008][ T8238] el0t_64_sync+0x18c/0x190 [ 138.439719][ T8238] [ 138.440122][ T8238] The buggy address belongs to the object at ffff0000f599b800 [ 138.440122][ T8238] which belongs to the cache kmalloc-1k of size 1024 [ 138.442365][ T8238] The buggy address is located 616 bytes inside of [ 138.442365][ T8238] 1024-byte region [ffff0000f599b800, ffff0000f599bc00) [ 138.444559][ T8238] [ 138.444919][ T8238] The buggy address belongs to the physical page: [ 138.445941][ T8238] page:00000000535a3200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x135998 [ 138.447609][ T8238] head:00000000535a3200 order:3 compound_mapcount:0 compound_pincount:0 [ 138.449208][ T8238] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 138.450641][ T8238] raw: 05ffc00000010200 fffffc0003309c00 dead000000000002 ffff0000c0002780 [ 138.452167][ T8238] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 138.453511][ T8238] page dumped because: kasan: bad access detected [ 138.454562][ T8238] [ 138.454914][ T8238] Memory state around the buggy address: [ 138.455846][ T8238] ffff0000f599b900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 138.457107][ T8238] ffff0000f599b980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 138.458549][ T8238] >ffff0000f599ba00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 138.459842][ T8238] ^ [ 138.461139][ T8238] ffff0000f599ba80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 138.462519][ T8238] ffff0000f599bb00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 138.463812][ T8238] ================================================================== [ 138.465237][ T8238] Disabling lock debugging due to kernel taint [ 138.468927][ T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.471808][ T4331] EXT4-fs (loop3): unmounting filesystem. [ 138.756899][ C1] vcan0: j1939_tp_rxtimer: 0x000000009abc6019: abort rx timeout. Force session deactivation [ 139.120832][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.521053][ T5497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.570845][ T5497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.600869][ T5496] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.160765][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.650869][ T5496] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.680787][ T5496] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.730900][ T5496] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.120790][ T4370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.200752][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.760821][ T5496] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.411208][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.413045][ T4370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.800904][ T5496] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.840816][ T5496] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.240747][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog