last executing test programs: 43.968567921s ago: executing program 4 (id=614): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) execve(&(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000300)={[&(0x7f0000000000)='\x00', &(0x7f0000000080)='\x00']}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8c031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00001dc000/0x4000)=nil, 0x4000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = socket(0x2b, 0x1, 0x0) write(r1, &(0x7f0000000080)="1c0000001d005f0214fffffffffffff8070000000d00000000007ef7", 0x1c) 43.75111447s ago: executing program 4 (id=616): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000280), 0xc2587, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x401, 0x5, 0x101, 0x7, "ea76041d0000000001000200001700004000", 0x203, 0x82}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x2) 43.688486654s ago: executing program 4 (id=618): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) cachestat(0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts-cbc-aes-neon\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f0000006900)={0x0, 0x0, &(0x7f00000068c0)={&(0x7f0000006940)=@newtaction={0xc4, 0x30, 0x200, 0x70bd28, 0x25dfdbfd, {}, [{0xb0, 0x1, [@m_ipt={0xac, 0x15, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}]}, {0x5e, 0x6, "9a4326af200699d8dd14a2de58a3461bb931763cf0257419593dee5c05631b555410b5d5c24294a8305aea1086efd52d19b967c67066f1d2641971ace57b808c40152cf98bb5ce23efae3cdecac36cf051abaf5e0e1c59d81838"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40000}, 0xc044) sendmmsg$alg(r3, &(0x7f0000000800)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="23e92ae17a15c591a931", 0xa}, {&(0x7f0000000280)="e921bce912cc", 0x6}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4800}], 0x1, 0x4ad660ee03514e5c) recvmsg$unix(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000003c0)=""/212, 0xd4}], 0x1}, 0x0) mkdirat$cgroup(r0, &(0x7f0000000000)='syz0\x00', 0x1ff) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd8f}, 0x90) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) write$cgroup_devices(r1, &(0x7f0000000180)={'a', ' *:* ', 'rwm\x00'}, 0xa) 43.496941105s ago: executing program 4 (id=621): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x1000000, &(0x7f0000000100)={[{@jqfmt_vfsv1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xf2a5}}, {@errors_remount}, {@sb={'sb', 0x3d, 0x1}}]}, 0xfe, 0x7b9, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x80, 0x0, 0x242}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) io_uring_enter(r0, 0x7109, 0xc0e1, 0x25, &(0x7f0000000080)={[0x9]}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$cgroup2(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x2000000, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xd5) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000006c80)={0x2020}, 0x2020) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80400, 0x17d) syz_emit_vhci(&(0x7f0000000540)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x6}, @hci_ev_le_phy_update_complete={{}, {0x0, 0xc9, 0x0, 0xf3}}}}, 0x9) fadvise64(r4, 0x7, 0x3, 0x4) 43.126680056s ago: executing program 4 (id=627): socket$netlink(0x10, 0x3, 0x8000000004) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000003a80), 0x0, 0x20000020) close(0x3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x9}]}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socket(0x2000000015, 0x80005, 0x0) r6 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4110}, 0x1}) io_uring_enter(r6, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prlimit64(0x0, 0x9, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffb}, 0x0) mremap(&(0x7f000016c000/0x4000)=nil, 0x4000, 0x40000000, 0x3, &(0x7f000063c000/0x3000)=nil) syz_clone(0xaa0a1000, 0x0, 0x0, 0x0, 0x0, 0x0) 42.667565052s ago: executing program 4 (id=637): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = fsopen(&(0x7f00000001c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x1d, r3}, 0x10, &(0x7f0000000200)={&(0x7f0000000140)={0x6, 0x920, 0x41254ed0, {0x77359400}, {0x0, 0x2710}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x2, 0x1}, 0x3d, 0x3, 0x0, 0x0, "20603473c84534d18915ec250fe247aa272ed00af9a453284c03d746f60c10403825fe37c6c31ede348750cb97b0676b16ba5b781b7ec5529d032cdc7d7065d7"}}, 0x80}, 0x1, 0x0, 0x0, 0x4004804}, 0x4) r4 = socket$inet6_udp(0xa, 0x2, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x1f, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x0, 0x0, 0x0, 0xfffffffe}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xfffffffffffffffd, 0x0, 0x401, 0x3, 0xffffffffffffffff}}]}}}]}, 0x78}}, 0x8c0) socket$nl_route(0x10, 0x3, 0x0) (async) fsopen(&(0x7f00000001c0)='mqueue\x00', 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r1, 0x0, 0x0) (async) fchdir(r2) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00'}) (async) sendmsg$can_bcm(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x1d, r3}, 0x10, &(0x7f0000000200)={&(0x7f0000000140)={0x6, 0x920, 0x41254ed0, {0x77359400}, {0x0, 0x2710}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x2, 0x1}, 0x3d, 0x3, 0x0, 0x0, "20603473c84534d18915ec250fe247aa272ed00af9a453284c03d746f60c10403825fe37c6c31ede348750cb97b0676b16ba5b781b7ec5529d032cdc7d7065d7"}}, 0x80}, 0x1, 0x0, 0x0, 0x4004804}, 0x4) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x1f, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x0, 0x0, 0x0, 0xfffffffe}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xfffffffffffffffd, 0x0, 0x401, 0x3, 0xffffffffffffffff}}]}}}]}, 0x78}}, 0x8c0) (async) 42.615556076s ago: executing program 32 (id=637): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = fsopen(&(0x7f00000001c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x1d, r3}, 0x10, &(0x7f0000000200)={&(0x7f0000000140)={0x6, 0x920, 0x41254ed0, {0x77359400}, {0x0, 0x2710}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x2, 0x1}, 0x3d, 0x3, 0x0, 0x0, "20603473c84534d18915ec250fe247aa272ed00af9a453284c03d746f60c10403825fe37c6c31ede348750cb97b0676b16ba5b781b7ec5529d032cdc7d7065d7"}}, 0x80}, 0x1, 0x0, 0x0, 0x4004804}, 0x4) r4 = socket$inet6_udp(0xa, 0x2, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x1f, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x0, 0x0, 0x0, 0xfffffffe}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xfffffffffffffffd, 0x0, 0x401, 0x3, 0xffffffffffffffff}}]}}}]}, 0x78}}, 0x8c0) socket$nl_route(0x10, 0x3, 0x0) (async) fsopen(&(0x7f00000001c0)='mqueue\x00', 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r1, 0x0, 0x0) (async) fchdir(r2) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00'}) (async) sendmsg$can_bcm(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x1d, r3}, 0x10, &(0x7f0000000200)={&(0x7f0000000140)={0x6, 0x920, 0x41254ed0, {0x77359400}, {0x0, 0x2710}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x2, 0x1}, 0x3d, 0x3, 0x0, 0x0, "20603473c84534d18915ec250fe247aa272ed00af9a453284c03d746f60c10403825fe37c6c31ede348750cb97b0676b16ba5b781b7ec5529d032cdc7d7065d7"}}, 0x80}, 0x1, 0x0, 0x0, 0x4004804}, 0x4) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x1f, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x0, 0x0, 0x0, 0xfffffffe}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xfffffffffffffffd, 0x0, 0x401, 0x3, 0xffffffffffffffff}}]}}}]}, 0x78}}, 0x8c0) (async) 4.876495861s ago: executing program 3 (id=965): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8000000000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000080000000000000000000000850000002000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800200095"], &(0x7f0000000680)='syzkaller\x00'}, 0x6b) 3.968399312s ago: executing program 3 (id=968): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x101540, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x7c9}) ppoll(&(0x7f0000000100)=[{r1, 0x224}], 0x1, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000002ec0)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000002f00)={'binder1\x00'}) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0xc, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x24500, 0x20) fchown(r3, 0xffffffffffffffff, 0x0) lseek(r3, 0x80000000008, 0x1) close(r0) 3.959236776s ago: executing program 3 (id=970): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000280), 0xc2587, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) r2 = socket(0x2, 0x80805, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x20008c0, &(0x7f0000000300)={[{@shortname_lower}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@shortname_lower}, {}, {@shortname_winnt}, {@rodir}, {@shortname_lower}, {@numtail}, {@utf8no}, {@rodir}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@uni_xlateno}]}, 0x1, 0x354, &(0x7f0000000900)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getdents64(0xffffffffffffffff, &(0x7f0000000f80)=""/4091, 0xffb) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x401, 0x5, 0x101, 0x7, "ea76041d0000000001000200001700004000", 0x203, 0x82}) 2.903417692s ago: executing program 3 (id=982): r0 = fanotify_init(0xf00, 0x1) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009e173610ef171e7206de010203010902fcff000000ac0009040000000206"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="000a04000000d562"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fanotify_mark(r0, 0x105, 0x40009965, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000280), 0xc2587, 0x0) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000100)={0x0, 0x1, 0x5, 0x101, 0x7, "ea7604000200001700004000", 0x203, 0x82}) socket(0x2d, 0x2, 0x0) 2.392402038s ago: executing program 2 (id=993): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000280), 0xc2587, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) r2 = socket(0x2, 0x80805, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x20008c0, &(0x7f0000000300)={[{@shortname_lower}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@shortname_lower}, {}, {@shortname_winnt}, {@rodir}, {@shortname_lower}, {@numtail}, {@utf8no}, {@rodir}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@uni_xlateno}]}, 0x1, 0x354, &(0x7f0000000900)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x80) getdents64(r6, &(0x7f0000000f80)=""/4091, 0xffb) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r7, 0x0, 0x485, 0x0, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x401, 0x5, 0x101, 0x7, "ea76041d0000000001000200001700004000", 0x203, 0x82}) 2.066751084s ago: executing program 3 (id=996): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xc4, 0x19, 0x1, 0xffffffff, 0x0, {{@in=@loopback, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x3, 0xa, 0x0, 0x20, 0x87}, {0x0, 0x7fffffffffffffff, 0x0, 0x10800, 0x0, 0x7, 0x0, 0xfffffffffffffffb}, {0x0, 0x4, 0x200000000000000}, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2}, [@mark={0xc, 0x15, {0x35075a, 0x1000}}]}, 0xc4}}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@empty, 0x0, 0x6, 0x0, 0x0, 0xa, 0x10, 0x80}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5, 0x0, 0x0, 0x3, 0x2}}, 0xb8}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x48002) write$binfmt_aout(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB="03040000b5"], 0xc8) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9902) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r4) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r4, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x64, r9, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x800) sendmsg$GTP_CMD_ECHOREQ(r4, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r5, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_LINK={0x8, 0x1, r6}, @GTPA_MS_ADDR6={0x14, 0xc, @loopback}, @GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008044}, 0x40010) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r10, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x11ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 2.000320539s ago: executing program 0 (id=997): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x80c40a, &(0x7f0000000480)={[{@noblock_validity}, {@dioread_lock}, {@init_itable_val={'init_itable', 0x3d, 0xb8f}}, {@nodiscard}, {@inlinecrypt}, {@jqfmt_vfsv1, 0x2e}, {@nobarrier}, {@nodiscard}, {@jqfmt_vfsv0}, {@journal_dev={'journal_dev', 0x3d, 0x4f}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x406}}, {@noload}], [], 0x2c}, 0x81, 0x463, &(0x7f00000083c0)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0x24}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000580)={&(0x7f0000000180), 0xc, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="027425bd70ffff00080003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x81) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@getchain={0x24, 0x66, 0x2, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xfff3, 0xa}, {0xffe0}, {0x6, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x40004) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) sendmmsg$inet(r9, &(0x7f0000002080)=[{{&(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000ac0)="7284ec917d0e00a38106e8c13face81e01ce519e13b45fa26af249ad317c4a2aae509834d75352e6131770190252a97647c5709d5f6c0b28d97dd4b3c13589d11a879be99013e2b05e33f8b3459ba6c92657747ce604f5c69224fad86c2ef85f1e45918dda651c2f4215af2e277a88eb3e099c6262f64f45d77b45b5b3e62114492ecec075b9a1ff8e6f74d79b4baee10c1bebb17f09f02c27c492c149032b545c35b2f1173ca2a45e1b0db283bf6e951699b0ef7e179ee22a88c3b9364631edb21f8d7a380ff1d0dc6e68e0fa02cd", 0xcf}, {&(0x7f0000000c80)="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", 0x4f3}], 0x2, &(0x7f0000000440)=ANY=[@ANYRES32], 0x58}}], 0x2, 0x2000c044) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, 0x60e26, 0x2a0c2}, [@IFLA_MTU={0x8, 0x4, 0x100}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008840}, 0x0) write$binfmt_misc(r9, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket(0x400000000010, 0x3, 0x0) 1.961080042s ago: executing program 1 (id=998): r0 = socket$inet6(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r3, r5, 0x16, 0x0, @void}, 0x10) write$binfmt_script(r5, &(0x7f0000000080)={'#! ', './file0', [{0x20, 'lo\x00'}, {0x20, '-@/-,,'}, {0x20, '((\xd6-\xf0'}], 0xa, "e280c7d224be3732e951c27d2aeb65f9dd34fbb82a889cd3894b7abf007e3bf9e9d4d9c7ccda6ad2f932b4e1ad951350bea01dfdafc2c1fd2c5478f160c003f0c1c261700d16080cea5942108fe032c864d37fb2e7a30d33556684ba32044f98a3a01fe68408ce0a7c30e15db6696de81119b1ab843d9b921280f1c40b4636023da0fe2f82b8fccfccd82ca8b34d9fc340dce865525e0323c276d9f40a8c8fe5e8a065a896da846f96dec2a0d627af7f0f"}, 0xcd) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000030400000000fdffff0000000300", @ANYRES32=r2, @ANYBLOB="000000006f0018000500100002000000080040"], 0x30}}, 0x4000000) r7 = socket(0x2, 0x80805, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6a}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x79}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7b}, {@private=0xa010102, 0x4e22, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r8, 0x0, 0x485, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 1.90040445s ago: executing program 3 (id=1000): openat$nullb(0xffffffffffffff9c, 0x0, 0x101000, 0x0) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@ip_tos_int={{0x14, 0x110}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xa2}}, @ip_retopts={{0x44, 0x0, 0x7, {[@timestamp_addr={0x44, 0x34, 0xe1, 0x1, 0x6, [{@multicast2, 0x6}, {@broadcast, 0x400}, {@loopback, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@multicast2, 0x98}]}]}}}], 0x78, 0x4c00}, 0x0) 1.825919275s ago: executing program 1 (id=1002): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRES64=0x0, @ANYRESOCT, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00g', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000812a8393c72428e76e8d6c1b0ed05f11d71f4aba1861c6b3f425015c3f00"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000ac0)={r0, &(0x7f0000000a00)="a5669402", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000006c0)={[{@grpid}, {@mblk_io_submit}, {@nodioread_nolock}, {@test_dummy_encryption}, {@sb={'sb', 0x3d, 0x80000}}, {@stripe={'stripe', 0x3d, 0x5}}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8000000000000000}}]}, 0x4, 0xbbb, &(0x7f0000000bc0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file3\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x20) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000680), 0x8, &(0x7f00000037c0)={[], [{@euid_eq}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x131542, 0xa7) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000040)=0x56c, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000000040000000000009500000000000008"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x48002) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r4, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) dup3(r4, r3, 0x0) 1.732463177s ago: executing program 5 (id=1003): r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) syz_mount_image$fuse(0x0, &(0x7f0000000740)='./file0\x00', 0x8000, 0x0, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0xfd, 0xfffff01c}, {0x6, 0xe, 0x0, 0xeb}]}, 0x10) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'batadv0\x00', &(0x7f00000000c0)=@ethtool_sset_info={0x37, 0x1, 0x9fd}}) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, r3, 0x2}) r6 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000000300)={r7}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={r7, 0x80000}) 1.625820002s ago: executing program 1 (id=1004): prlimit64(0x0, 0x0, 0x0, 0xfffffffffffffffe) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@name={'name', 0x3d, '.\\'}}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) 1.625434174s ago: executing program 0 (id=1005): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8000000000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000080000000000000000000000850000002000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000098fff30095"], &(0x7f0000000680)='syzkaller\x00'}, 0x6b) 1.6252441s ago: executing program 5 (id=1006): r0 = fanotify_init(0xf00, 0x1) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009e173610ef171e7206de010203010902fcff000000ac0009040000000206"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="000a04000000d562"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fanotify_mark(r0, 0x105, 0x40009965, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000280), 0xc2587, 0x0) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000100)={0x0, 0x1, 0x5, 0x101, 0x7, "ea7604000200001700004000", 0x203, 0x82}) socket(0x2d, 0x2, 0x0) 1.585328368s ago: executing program 1 (id=1007): r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000f8000000bca30000000000002403000020feffff620af0fff8ffffff71a4f2ff000000001f0300000010ff00e5000500000000002604fdffff02000015010000033800001d13fcff000000007a0af0ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe8a, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r4, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f00000024c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="01002abd7000ffdbdf250f000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}}) close(r5) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=@known='user.syz\x00') sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=0x0, @ANYBLOB="2a000e0009"], 0x60}}, 0x0) 1.293921476s ago: executing program 2 (id=1008): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0x1dc7, &(0x7f0000000140)={0x0, 0xd5a8, 0x2, 0x1, 0x382}, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0xa, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) syz_ublk_setup_io_uring(0x71bf, &(0x7f0000000940)={0x0, 0x2, 0x0, 0x0, 0x158}, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r2) socket$inet6(0xa, 0x2, 0x3a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.swap.current\x00', 0x275a, 0x0) socket(0x10, 0x80002, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x2fe}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) syz_ublk_setup_queues(r3, r8, &(0x7f0000000640)={0x0, 0x1463, 0x100, 0x2, 0xb2}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x20, 0x401, 0x31b, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7681, 0x8000, 0x1, 0x3df}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x1, 0x902c4, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4bc6, 0x400, 0x2, 0x40021a, 0x0, r3}}], 0x4, &(0x7f0000001540)={0x2e, 0x35, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x72ccfb459c83c565, {0x6}, 0x0, r7, '\x00', {0x5, 0x64, 0x0, 0x0}}, 0x0) 838.218818ms ago: executing program 2 (id=1009): r0 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0) write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './file0', [{0x20, 'attr/current\x00'}]}, 0x19) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0900000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000001a3f8d21cabe29637f0cfbc300001393bed10199af9aca01b42c38aeec140076283eca9c3206631b1c6a6099dc12913dab804114c995edff883216912bd02b891154ab81e11be5a1bf08a36a2e8f970a334a52ced5191b13f47a6fa039966ff6df1b76e948cc0e1a6d1de7fd66206bf2ec9901ee42a0e1b1f3c6f74168fdd122597b21", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xa, 0x17, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf090000000000009409010000000281650000000000000018010000646c6c2500000000002020207b9af8ff000000002e9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000805f93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 732.466143ms ago: executing program 0 (id=1010): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0xff7f, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) 732.149359ms ago: executing program 5 (id=1011): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000001240)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x83e8}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@fowner_eq}, {@hash}, {@permit_directio}, {@subj_type={'subj_type', 0x3d, '/)/-:$//('}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$eJzs3V9rW+UfAPDvSZP9636/djCGeiGDXTgZS9fWPxOEzUvR4UDvZ2izMpouo0nHWgduF+7GGxmCiAPxBXjv5fAN+CoGOhgyil6IUDnpSZe1Sf8tNbH5fOBsz5Nzkud58pzvyfOck/QEMLBOpv/kIl6OiK+SiJGWdfnIVp5c3W756e2pdEliZeXj35O4sO61kuz/4SzzUkT8/EXEmdzGcmuLS7OlSqU8n+XH6nM3xmqLS2evzZVmyjPl6xOTk+ffnJx45+23utbW1y//+e1HD98//+Wp5W9+fHzsfhIX42i2Lm1XF4q405o5Wfo7SxXi4roNx7tQWD9Jel0BdmUoi/NCpMeAkRjKoh7Y/z6PiBVgQCXiHwZUcxzQnNt3aR78n/HkvdUJ0Mb251fPjcShxtzoyHLy3Mwone+OdqH8tIyffntwP11i8/MQh7fIA+zInbsRcS6f33j8S7Lj3+6da5w83tz6Mgbt8wd66WE6/knuRGyI/9za+CfajH+G28Tubmwd/7nHXSimo3T8927b8e/aoWt0KMv9rzHmKyRXr1XK5yLi/xFxOgoH0/xm13POLz9a6bSudfyXLmn5zbFgVo/H+YPPP2e6VC+9SJtbPbkb8Urb8W+y1v9Jm/5P34/L2yzjRPnBq53Wbd3+vbXyQ8Rrbfv/2RWtZPPrk2ON/WGsuVds9Me9E790Kr/X7U/7/8jm7R9NWq/X1nZexveH/ip3Wrfb/f9A8kkjfSB77FapXp8fjziQfJgfXv/4xLPnNvPN7dP2nz7VPv432//Tyden22z/veP3Om7aD/0/vaP+33ni0Qeffdep/O31/xuN1Onske0c/7ZbwRd57wAAAAAAAKDf5CLiaCS54lo6lysWV7/fcTyO5CrVWv3M1erC9elo/FZ2NAq55pXukZbvQ4xn34dt5ifW5Scj4lhEfD10uJEvTlUr071uPAAAAAAAAAAAAAAAAAAAAPSJ4Q6//0/9OtTr2gF7rnFjg4O9rgXQC1ve8r8bd3oC+tKW8Q/sWzuPf2cGYL/w+Q+DS/zD4BL/MLi2G/+FkT2uCPCv8/kPg0v8AwAAAAAAAAAAAAAAAAAAAAAAAAAAQFddvnQpXVaWn96eSvPTNxcXZqs3z06Xa7PFuYWp4lR1/kZxplqdqZSLU9W5rV6vUq3eGJ+IhVtj9XKtPlZbXLoyV124Xr9yba40U75SLvhjwwAAAAAAAAAAAAAAAAAAALBBbXFptlSplOclOiYuRF9UYy8buGpXT8/3Syskupro8YEJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFr8EwAA//8DDjNQ") r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x100, 0x0) open_by_handle_at(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="08000000020000000b00"], 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x4) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010004b0401800000000000007a000000", @ANYRES32=0x0, @ANYBLOB="4800000000000000240012800b0001006272696467650000140002800800080088a80000060027"], 0x44}}, 0x4) 691.674547ms ago: executing program 1 (id=1012): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000040)=ANY=[@ANYBLOB="c24a5c8eb28f2c685324e3b101a4d13aec6a10af96"], 0x1c}}, 0x4009050) syz_80211_inject_frame(&(0x7f0000000080), &(0x7f00000000c0)=@data_frame={@a_msdu=@type00={{0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1}, {0x7}, @device_b, @device_b, @from_mac=@broadcast, {0x6, 0x1}, "", @value={0xa, 0x0, 0x1, 0x1, 0xb9}}, @random="c42501d9304a4f6c7bd4957d44b9810e1cfa73d867d550924127d85b68ce0b04d39a0a1ad91ab03f97ecbca42683722c06d3cc10a7bf434a6546a7235293f9cca9170000175439f81d44a1a870279e843bd6520e6d439be7cd110fa8b01dc62e78b4f59531df89d1e32fe214d6d7db9180e1d58bc16b8c7e0f520cf03f3bdb8711f1ed3b80fa1390b7762c0d8a6893db286c"}, 0xac) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000040), 0x0) sendmsg$nl_generic(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f00000077c0)={&(0x7f0000001040)={0x1c, 0x3c, 0x51eb40323bf4c37b, 0x70bd29, 0x25dfdbf5, {0x3}, [@generic="57e70fcdd6"]}, 0x1c}}, 0x97cbf3d077ea39fe) 691.461717ms ago: executing program 2 (id=1013): capset(0x0, &(0x7f00000003c0)={0x200000, 0x200000, 0x0, 0x0, 0x8, 0x1000004}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c9f4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75055df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83766b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b556381768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42ddd5f393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8dc0d472672286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8455029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a82a6ef09d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b420e74c6bcdf1ed0b306141a83bf1268e954ad069257fbfaa1a7ea582badc1a7f2a5b0965f3535872d85c0bc3a233a3ea85df6a8ed76f0f803d54b7bef77d8ea71621f8a78dd17c3b58c5c7476ed6191acbb949e77f7cac81c543f7751e5e1000"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@cgroup, r1, 0x2f, 0x0, 0x4}, 0x20) 670.670934ms ago: executing program 0 (id=1014): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0xf, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001}, 0x94) 600.455913ms ago: executing program 2 (id=1015): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRES64=0x0, @ANYRESOCT, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00g', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000812a8393c72428e76e8d6c1b0ed05f11d71f4aba1861c6b3f425015c3f00"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000ac0)={r0, &(0x7f0000000a00)="a5669402", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000006c0)={[{@grpid}, {@mblk_io_submit}, {@nodioread_nolock}, {@test_dummy_encryption}, {@sb={'sb', 0x3d, 0x80000}}, {@stripe={'stripe', 0x3d, 0x5}}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8000000000000000}}]}, 0x4, 0xbbb, &(0x7f0000000bc0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file3\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x20) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000680), 0x8, &(0x7f00000037c0)={[], [{@euid_eq}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x131542, 0xa7) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000000040000000000009500000000000008"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x48002) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) dup3(r3, r2, 0x0) 591.431893ms ago: executing program 0 (id=1016): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000040)=0x10, 0x4) r1 = socket$inet6(0xa, 0x80000, 0x7ff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x5a8, 0xffffffff, 0x1f0, 0x0, 0x2c0, 0xffffffff, 0xffffffff, 0x4d8, 0x4d8, 0x4d8, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@ipv6={@empty, @mcast2, [0x0, 0xff000000, 0x0, 0xffffff00], [0xff000000, 0xff, 0xffff00], 'ip6_vti0\x00', 'ipvlan1\x00', {0xff}, {0xff}, 0x3a, 0x2, 0x4, 0x4}, 0x0, 0x1c8, 0x1f0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x80000001, 0x1, 0x0, 'syz0\x00', 0x8}}, @common=@mh={{0x28}, {"880d", 0x1}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x8}}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast1, [0xffffffff, 0xffffffff, 0xffffff00, 0xffffff00], [0xff000000, 0xff000000, 0xff0000ff, 0xff], 'veth1_macvtap\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x10, 0x2, 0x5}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0xb3}}}, {{@uncond, 0x0, 0x1e0, 0x218, 0x0, {}, [@common=@rt={{0x138}, {0x1, [0x9, 0x1], 0x0, 0x8, 0x4, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, @rand_addr=' \x01\x00', @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, @mcast1, @empty, @private1, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @local, @rand_addr=' \x01\x00'], 0x4}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x1, 0x1, 0x4}, {0x2, 0x4, 0x2}, {0x0, 0x6}, 0xc4a, 0xfff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x608) 540.681414ms ago: executing program 5 (id=1017): r0 = socket$key(0xf, 0x3, 0x2) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e20, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}}}, &(0x7f0000000100)=0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000180)={r2, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e21, @broadcast}]}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000200), &(0x7f0000000240)=0x4) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r4, 0x800, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x2, 0x66}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x40040) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000400)={r2, 0x9a, "c8dcb0473e4a5fd2d8242de519c6ecbe40454311f55141bb91135a10453eba33d41a06ffcfa2f91c5a461ab515f986d69a5fae64e26807f6c09f5876ea644e26111b2ead76346db2eae9629405556d9c50e317345e8517fb1eb36f077cf1c31a05efb1015f53e0c2dfee1b59b5dd924c47ea7f5f6e4df828fc84a1068d9edd14abd8d177baea10b6f64ee359b3933225a425750eee638e23c24b"}, &(0x7f00000004c0)=0xa2) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000500)={r6, 0x9}, 0x8) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000540)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r7, 0x84, 0x1c, &(0x7f0000000580), &(0x7f00000005c0)=0x4) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000000640)={'wg0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f0000000680)={{{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}}}, &(0x7f0000000780)=0xe8) sendmsg$nl_xfrm(r8, &(0x7f00000008c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)=@newpolicy={0xc0, 0x13, 0x100, 0x70bd2a, 0x25dfdbfd, {{@in=@private=0xa010100, @in6=@local, 0x4e20, 0x0, 0x4e24, 0xc, 0x2, 0x20, 0x20, 0x0, r9, r10}, {0x9, 0x0, 0x7, 0x9, 0x0, 0x1, 0x4, 0x10000}, {0x5, 0x7, 0x1}, 0x3, 0x6e6bb9, 0x1, 0x0, 0x1, 0x2}, [@proto={0x5, 0x19, 0x2b}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20040001}, 0x2000c054) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r7, 0x84, 0x78, &(0x7f0000000900)=r3, 0x4) sendmsg$NL80211_CMD_SET_MCAST_RATE(r7, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x388cb1a5b219aea5}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x2c, r4, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000081}, 0x40010) ioctl$VIDIOC_S_DV_TIMINGS(r7, 0xc0845657, &(0x7f0000000a40)={0x0, @bt={0x10000, 0x8, 0x1, 0x1, 0x383, 0xffffff58, 0x6, 0x6, 0xc26, 0x0, 0x1000, 0x5, 0x80000001, 0x3, 0x0, 0x24, {0x8, 0xc28}, 0xf1, 0x8}}) syz_io_uring_setup(0x196f, &(0x7f0000000b00)={0x0, 0xa435, 0x4000, 0x1, 0x83, 0x0, r7}, &(0x7f0000000b80)=0x0, &(0x7f0000000bc0), &(0x7f0000000c00)) r12 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000008, 0x810, r7, 0x8000000) syz_ublk_setup_io_uring(0x4275, &(0x7f0000000c40)={0x0, 0x22ab, 0x8, 0x3, 0x69}, &(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)=0x0) r14 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) r15 = fcntl$getown(r0, 0x9) syz_ublk_add_dev(r7, r11, r12, r13, &(0x7f0000000dc0)={0x2e, 0x41, 0x0, r7, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x17da, 0x0, r14, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000d80)=@new_dev={0x3, 0x55b, 0x0, 0x0, 0x1000, 0xffffffff, r15, 0x0, 0x184}}}, &(0x7f0000000e40)) fanotify_init(0x7d, 0x2) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000ec0)={'ipvlan1\x00', &(0x7f0000000e80)=@ethtool_channels={0x3d, 0x1000, 0x3b, 0x0, 0x10000, 0x4, 0x1, 0x7e, 0x1}}) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000f00)={r6, 0xfffffffd, 0x10}, &(0x7f0000000f40)=0xc) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000f80)={r16, 0x4}, 0xc) 488.507555ms ago: executing program 2 (id=1018): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000280), 0xc2587, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) r2 = socket(0x2, 0x80805, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x20008c0, &(0x7f0000000300)={[{@shortname_lower}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@shortname_lower}, {}, {@shortname_winnt}, {@rodir}, {@shortname_lower}, {@numtail}, {@utf8no}, {@rodir}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@uni_xlateno}]}, 0x1, 0x354, &(0x7f0000000900)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x80) getdents64(r6, &(0x7f0000000f80)=""/4091, 0xffb) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r7, 0x0, 0x485, 0x0, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x401, 0x5, 0x101, 0x7, "ea76041d0000000001000200001700004000", 0x203, 0x82}) 398.418525ms ago: executing program 5 (id=1019): openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) syz_mount_image$fuse(0x0, &(0x7f0000000740)='./file0\x00', 0x8000, 0x0, 0x1, 0x0, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) getsockopt$inet6_int(r0, 0x29, 0x46, 0x0, &(0x7f0000000640)) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) 104.038387ms ago: executing program 5 (id=1020): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0x1dc7, &(0x7f0000000140)={0x0, 0xd5a8, 0x2, 0x1, 0x382}, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0xa, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) syz_ublk_setup_io_uring(0x71bf, &(0x7f0000000940)={0x0, 0x2, 0x0, 0x0, 0x158}, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r2) socket$inet6(0xa, 0x2, 0x3a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.swap.current\x00', 0x275a, 0x0) socket(0x10, 0x80002, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x2fe}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) syz_ublk_setup_queues(r3, r8, &(0x7f0000000640)={0x0, 0x1463, 0x100, 0x2, 0xb2}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x20, 0x401, 0x31b, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7681, 0x8000, 0x1, 0x3df}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x1, 0x902c4, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4bc6, 0x400, 0x2, 0x40021a, 0x0, r3}}], 0x4, &(0x7f0000001540)={0x2e, 0x35, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x72ccfb459c83c565, {0x6}, 0x0, r7, '\x00', {0x5, 0x64, 0x0, 0x0}}, 0x0) 390.142µs ago: executing program 1 (id=1021): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0x5, 0x10}, {0x0, 0x3}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x2}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x10, [0xf, 0xd, 0x6, 0xb, 0x6, 0x4, 0x10, 0xd, 0xf, 0x1, 0x2, 0xf, 0xf, 0x2, 0x4, 0xf], 0x1, [0x8, 0x5, 0x2, 0xc25, 0x6, 0x7, 0x7, 0x8, 0xffff, 0x81, 0x5, 0x6, 0x5, 0x1, 0x4000, 0x1], [0x7, 0x3, 0x0, 0x4f0, 0x800, 0xffff, 0xffff, 0x23, 0xab, 0x5, 0x9, 0x40, 0x101, 0xff, 0x81, 0x5]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r4) 0s ago: executing program 0 (id=1022): r0 = fanotify_init(0xf00, 0x1) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009e173610ef171e7206de010203010902fcff000000ac0009040000000206"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="000a04000000d562"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fanotify_mark(r0, 0x105, 0x40009965, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000280), 0xc2587, 0x0) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000100)={0x0, 0x1, 0x5, 0x101, 0x7, "ea7604000200001700004000", 0x203, 0x82}) socket(0x2d, 0x2, 0x0) kernel console output (not intermixed with test programs): ory failure for pfn 0x13b4e2 at process virtual address 0x20075000 [ 54.596750][ T6379] Memory failure: 0x13b4e2: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.596763][ T6379] Memory failure: 0x13b4e2: recovery action for dirty LRU page: Recovered [ 54.596770][ T6379] Injecting memory failure for pfn 0x13b4e1 at process virtual address 0x20076000 [ 54.596788][ T6379] Memory failure: 0x13b4e1: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.596802][ T6379] Memory failure: 0x13b4e1: recovery action for dirty LRU page: Recovered [ 54.596808][ T6379] Injecting memory failure for pfn 0x13b4e0 at process virtual address 0x20077000 [ 54.596827][ T6379] Memory failure: 0x13b4e0: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.596840][ T6379] Memory failure: 0x13b4e0: recovery action for dirty LRU page: Recovered [ 54.596847][ T6379] Injecting memory failure for pfn 0x13c52f at process virtual address 0x20078000 [ 54.596865][ T6379] Memory failure: 0x13c52f: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.596879][ T6379] Memory failure: 0x13c52f: recovery action for dirty LRU page: Recovered [ 54.596886][ T6379] Injecting memory failure for pfn 0x13c52e at process virtual address 0x20079000 [ 54.596904][ T6379] Memory failure: 0x13c52e: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.596918][ T6379] Memory failure: 0x13c52e: recovery action for dirty LRU page: Recovered [ 54.596925][ T6379] Injecting memory failure for pfn 0x13c52d at process virtual address 0x2007a000 [ 54.596943][ T6379] Memory failure: 0x13c52d: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.596957][ T6379] Memory failure: 0x13c52d: recovery action for dirty LRU page: Recovered [ 54.596963][ T6379] Injecting memory failure for pfn 0x13c52c at process virtual address 0x2007b000 [ 54.596982][ T6379] Memory failure: 0x13c52c: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.596995][ T6379] Memory failure: 0x13c52c: recovery action for dirty LRU page: Recovered [ 54.597002][ T6379] Injecting memory failure for pfn 0x13c52b at process virtual address 0x2007c000 [ 54.597021][ T6379] Memory failure: 0x13c52b: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.597034][ T6379] Memory failure: 0x13c52b: recovery action for dirty LRU page: Recovered [ 54.597041][ T6379] Injecting memory failure for pfn 0x13c52a at process virtual address 0x2007d000 [ 54.597059][ T6379] Memory failure: 0x13c52a: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.597073][ T6379] Memory failure: 0x13c52a: recovery action for dirty LRU page: Recovered [ 54.597079][ T6379] Injecting memory failure for pfn 0x13c529 at process virtual address 0x2007e000 [ 54.597098][ T6379] Memory failure: 0x13c529: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.597111][ T6379] Memory failure: 0x13c529: recovery action for dirty LRU page: Recovered [ 54.597118][ T6379] Injecting memory failure for pfn 0x13c528 at process virtual address 0x2007f000 [ 54.597136][ T6379] Memory failure: 0x13c528: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.597150][ T6379] Memory failure: 0x13c528: recovery action for dirty LRU page: Recovered [ 54.597156][ T6379] Injecting memory failure for pfn 0x13c527 at process virtual address 0x20080000 [ 54.597175][ T6379] Memory failure: 0x13c527: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.597188][ T6379] Memory failure: 0x13c527: recovery action for dirty LRU page: Recovered [ 54.597195][ T6379] Injecting memory failure for pfn 0x13c526 at process virtual address 0x20081000 [ 54.597214][ T6379] Memory failure: 0x13c526: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.597227][ T6379] Memory failure: 0x13c526: recovery action for dirty LRU page: Recovered [ 54.597234][ T6379] Injecting memory failure for pfn 0x13c525 at process virtual address 0x20082000 [ 54.597252][ T6379] Memory failure: 0x13c525: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.597266][ T6379] Memory failure: 0x13c525: recovery action for dirty LRU page: Recovered [ 54.597273][ T6379] Injecting memory failure for pfn 0x13c524 at process virtual address 0x20083000 [ 54.597291][ T6379] Memory failure: 0x13c524: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.597305][ T6379] Memory failure: 0x13c524: recovery action for dirty LRU page: Recovered [ 54.597311][ T6379] Injecting memory failure for pfn 0x13c523 at process virtual address 0x20084000 [ 54.597330][ T6379] Memory failure: 0x13c523: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.597343][ T6379] Memory failure: 0x13c523: recovery action for dirty LRU page: Recovered [ 54.597350][ T6379] Injecting memory failure for pfn 0x13c522 at process virtual address 0x20085000 [ 54.597368][ T6379] Memory failure: 0x13c522: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.597382][ T6379] Memory failure: 0x13c522: recovery action for dirty LRU page: Recovered [ 54.597389][ T6379] Injecting memory failure for pfn 0x13c521 at process virtual address 0x20086000 [ 54.597407][ T6379] Memory failure: 0x13c521: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.597421][ T6379] Memory failure: 0x13c521: recovery action for dirty LRU page: Recovered [ 54.597428][ T6379] Injecting memory failure for pfn 0x13c520 at process virtual address 0x20087000 [ 54.597446][ T6379] Memory failure: 0x13c520: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.597460][ T6379] Memory failure: 0x13c520: recovery action for dirty LRU page: Recovered [ 54.597467][ T6379] Injecting memory failure for pfn 0x13b6ef at process virtual address 0x20088000 [ 54.597486][ T6379] Memory failure: 0x13b6ef: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.597502][ T6379] Memory failure: 0x13b6ef: recovery action for dirty LRU page: Recovered [ 54.597508][ T6379] Injecting memory failure for pfn 0x13b6ee at process virtual address 0x20089000 [ 54.597527][ T6379] Memory failure: 0x13b6ee: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.597541][ T6379] Memory failure: 0x13b6ee: recovery action for dirty LRU page: Recovered [ 54.597547][ T6379] Injecting memory failure for pfn 0x13b6ed at process virtual address 0x2008a000 [ 54.597566][ T6379] Memory failure: 0x13b6ed: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.597579][ T6379] Memory failure: 0x13b6ed: recovery action for dirty LRU page: Recovered [ 54.597586][ T6379] Injecting memory failure for pfn 0x13b6ec at process virtual address 0x2008b000 [ 54.597605][ T6379] Memory failure: 0x13b6ec: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.597618][ T6379] Memory failure: 0x13b6ec: recovery action for dirty LRU page: Recovered [ 54.597625][ T6379] Injecting memory failure for pfn 0x13b6eb at process virtual address 0x2008c000 [ 54.597644][ T6379] Memory failure: 0x13b6eb: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.597657][ T6379] Memory failure: 0x13b6eb: recovery action for dirty LRU page: Recovered [ 54.597664][ T6379] Injecting memory failure for pfn 0x13b6ea at process virtual address 0x2008d000 [ 54.597682][ T6379] Memory failure: 0x13b6ea: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.597696][ T6379] Memory failure: 0x13b6ea: recovery action for dirty LRU page: Recovered [ 54.597702][ T6379] Injecting memory failure for pfn 0x13b6e9 at process virtual address 0x2008e000 [ 54.597721][ T6379] Memory failure: 0x13b6e9: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.597734][ T6379] Memory failure: 0x13b6e9: recovery action for dirty LRU page: Recovered [ 54.597741][ T6379] Injecting memory failure for pfn 0x13b6e8 at process virtual address 0x2008f000 [ 54.597760][ T6379] Memory failure: 0x13b6e8: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.597773][ T6379] Memory failure: 0x13b6e8: recovery action for dirty LRU page: Recovered [ 54.597780][ T6379] Injecting memory failure for pfn 0x13b6e7 at process virtual address 0x20090000 [ 54.597799][ T6379] Memory failure: 0x13b6e7: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.597813][ T6379] Memory failure: 0x13b6e7: recovery action for dirty LRU page: Recovered [ 54.597819][ T6379] Injecting memory failure for pfn 0x13b6e6 at process virtual address 0x20091000 [ 54.597838][ T6379] Memory failure: 0x13b6e6: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.597852][ T6379] Memory failure: 0x13b6e6: recovery action for dirty LRU page: Recovered [ 54.597858][ T6379] Injecting memory failure for pfn 0x13b6e5 at process virtual address 0x20092000 [ 54.597877][ T6379] Memory failure: 0x13b6e5: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.597890][ T6379] Memory failure: 0x13b6e5: recovery action for dirty LRU page: Recovered [ 54.597897][ T6379] Injecting memory failure for pfn 0x13b6e4 at process virtual address 0x20093000 [ 54.597916][ T6379] Memory failure: 0x13b6e4: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.597929][ T6379] Memory failure: 0x13b6e4: recovery action for dirty LRU page: Recovered [ 54.597936][ T6379] Injecting memory failure for pfn 0x13b6e3 at process virtual address 0x20094000 [ 54.597954][ T6379] Memory failure: 0x13b6e3: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.597968][ T6379] Memory failure: 0x13b6e3: recovery action for dirty LRU page: Recovered [ 54.597974][ T6379] Injecting memory failure for pfn 0x13b6e2 at process virtual address 0x20095000 [ 54.597993][ T6379] Memory failure: 0x13b6e2: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.598006][ T6379] Memory failure: 0x13b6e2: recovery action for dirty LRU page: Recovered [ 54.598013][ T6379] Injecting memory failure for pfn 0x13b6e1 at process virtual address 0x20096000 [ 54.598031][ T6379] Memory failure: 0x13b6e1: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.598045][ T6379] Memory failure: 0x13b6e1: recovery action for dirty LRU page: Recovered [ 54.598051][ T6379] Injecting memory failure for pfn 0x13b6e0 at process virtual address 0x20097000 [ 54.598070][ T6379] Memory failure: 0x13b6e0: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.598084][ T6379] Memory failure: 0x13b6e0: recovery action for dirty LRU page: Recovered [ 54.598090][ T6379] Injecting memory failure for pfn 0x13d69f at process virtual address 0x20098000 [ 54.598109][ T6379] Memory failure: 0x13d69f: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.598123][ T6379] Memory failure: 0x13d69f: recovery action for dirty LRU page: Recovered [ 54.598129][ T6379] Injecting memory failure for pfn 0x13d69e at process virtual address 0x20099000 [ 54.598148][ T6379] Memory failure: 0x13d69e: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.598161][ T6379] Memory failure: 0x13d69e: recovery action for dirty LRU page: Recovered [ 54.598168][ T6379] Injecting memory failure for pfn 0x13d69d at process virtual address 0x2009a000 [ 54.598186][ T6379] Memory failure: 0x13d69d: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.598200][ T6379] Memory failure: 0x13d69d: recovery action for dirty LRU page: Recovered [ 54.598206][ T6379] Injecting memory failure for pfn 0x13d69c at process virtual address 0x2009b000 [ 54.598232][ T6379] Memory failure: 0x13d69c: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.598246][ T6379] Memory failure: 0x13d69c: recovery action for dirty LRU page: Recovered [ 54.598252][ T6379] Injecting memory failure for pfn 0x13d69b at process virtual address 0x2009c000 [ 54.598271][ T6379] Memory failure: 0x13d69b: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.598284][ T6379] Memory failure: 0x13d69b: recovery action for dirty LRU page: Recovered [ 54.598291][ T6379] Injecting memory failure for pfn 0x13d69a at process virtual address 0x2009d000 [ 54.598309][ T6379] Memory failure: 0x13d69a: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.598323][ T6379] Memory failure: 0x13d69a: recovery action for dirty LRU page: Recovered [ 54.598330][ T6379] Injecting memory failure for pfn 0x13d699 at process virtual address 0x2009e000 [ 54.598348][ T6379] Memory failure: 0x13d699: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.598362][ T6379] Memory failure: 0x13d699: recovery action for dirty LRU page: Recovered [ 54.598368][ T6379] Injecting memory failure for pfn 0x13d698 at process virtual address 0x2009f000 [ 54.598388][ T6379] Memory failure: 0x13d698: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.598401][ T6379] Memory failure: 0x13d698: recovery action for dirty LRU page: Recovered [ 54.598408][ T6379] Injecting memory failure for pfn 0x13d697 at process virtual address 0x200a0000 [ 54.598427][ T6379] Memory failure: 0x13d697: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.598440][ T6379] Memory failure: 0x13d697: recovery action for dirty LRU page: Recovered [ 54.598447][ T6379] Injecting memory failure for pfn 0x13d696 at process virtual address 0x200a1000 [ 54.598465][ T6379] Memory failure: 0x13d696: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.598479][ T6379] Memory failure: 0x13d696: recovery action for dirty LRU page: Recovered [ 54.598485][ T6379] Injecting memory failure for pfn 0x13d695 at process virtual address 0x200a2000 [ 54.598507][ T6379] Memory failure: 0x13d695: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.598522][ T6379] Memory failure: 0x13d695: recovery action for dirty LRU page: Recovered [ 54.598528][ T6379] Injecting memory failure for pfn 0x13d694 at process virtual address 0x200a3000 [ 54.598547][ T6379] Memory failure: 0x13d694: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.598561][ T6379] Memory failure: 0x13d694: recovery action for dirty LRU page: Recovered [ 54.598567][ T6379] Injecting memory failure for pfn 0x13d693 at process virtual address 0x200a4000 [ 54.598586][ T6379] Memory failure: 0x13d693: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.598600][ T6379] Memory failure: 0x13d693: recovery action for dirty LRU page: Recovered [ 54.598606][ T6379] Injecting memory failure for pfn 0x13d692 at process virtual address 0x200a5000 [ 54.598625][ T6379] Memory failure: 0x13d692: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.598638][ T6379] Memory failure: 0x13d692: recovery action for dirty LRU page: Recovered [ 54.598645][ T6379] Injecting memory failure for pfn 0x13d691 at process virtual address 0x200a6000 [ 54.598663][ T6379] Memory failure: 0x13d691: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.598677][ T6379] Memory failure: 0x13d691: recovery action for dirty LRU page: Recovered [ 54.598684][ T6379] Injecting memory failure for pfn 0x13d690 at process virtual address 0x200a7000 [ 54.598702][ T6379] Memory failure: 0x13d690: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.598716][ T6379] Memory failure: 0x13d690: recovery action for dirty LRU page: Recovered [ 54.598723][ T6379] Injecting memory failure for pfn 0x13ccaf at process virtual address 0x200a8000 [ 54.598742][ T6379] Memory failure: 0x13ccaf: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.598756][ T6379] Memory failure: 0x13ccaf: recovery action for dirty LRU page: Recovered [ 54.598762][ T6379] Injecting memory failure for pfn 0x13ccae at process virtual address 0x200a9000 [ 54.598781][ T6379] Memory failure: 0x13ccae: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.598795][ T6379] Memory failure: 0x13ccae: recovery action for dirty LRU page: Recovered [ 54.598801][ T6379] Injecting memory failure for pfn 0x13ccad at process virtual address 0x200aa000 [ 54.598819][ T6379] Memory failure: 0x13ccad: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.598833][ T6379] Memory failure: 0x13ccad: recovery action for dirty LRU page: Recovered [ 54.598840][ T6379] Injecting memory failure for pfn 0x13ccac at process virtual address 0x200ab000 [ 54.598858][ T6379] Memory failure: 0x13ccac: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.598872][ T6379] Memory failure: 0x13ccac: recovery action for dirty LRU page: Recovered [ 54.598878][ T6379] Injecting memory failure for pfn 0x13ccab at process virtual address 0x200ac000 [ 54.598897][ T6379] Memory failure: 0x13ccab: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.598910][ T6379] Memory failure: 0x13ccab: recovery action for dirty LRU page: Recovered [ 54.598917][ T6379] Injecting memory failure for pfn 0x13ccaa at process virtual address 0x200ad000 [ 54.598935][ T6379] Memory failure: 0x13ccaa: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.598949][ T6379] Memory failure: 0x13ccaa: recovery action for dirty LRU page: Recovered [ 54.598955][ T6379] Injecting memory failure for pfn 0x13cca9 at process virtual address 0x200ae000 [ 54.598974][ T6379] Memory failure: 0x13cca9: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.598987][ T6379] Memory failure: 0x13cca9: recovery action for dirty LRU page: Recovered [ 54.598994][ T6379] Injecting memory failure for pfn 0x13cca8 at process virtual address 0x200af000 [ 54.599012][ T6379] Memory failure: 0x13cca8: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.599026][ T6379] Memory failure: 0x13cca8: recovery action for dirty LRU page: Recovered [ 54.599033][ T6379] Injecting memory failure for pfn 0x13cca7 at process virtual address 0x200b0000 [ 54.599052][ T6379] Memory failure: 0x13cca7: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.599066][ T6379] Memory failure: 0x13cca7: recovery action for dirty LRU page: Recovered [ 54.599072][ T6379] Injecting memory failure for pfn 0x13cca6 at process virtual address 0x200b1000 [ 54.599091][ T6379] Memory failure: 0x13cca6: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.599104][ T6379] Memory failure: 0x13cca6: recovery action for dirty LRU page: Recovered [ 54.599111][ T6379] Injecting memory failure for pfn 0x13cca5 at process virtual address 0x200b2000 [ 54.599129][ T6379] Memory failure: 0x13cca5: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.599143][ T6379] Memory failure: 0x13cca5: recovery action for dirty LRU page: Recovered [ 54.599150][ T6379] Injecting memory failure for pfn 0x13cca4 at process virtual address 0x200b3000 [ 54.599168][ T6379] Memory failure: 0x13cca4: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.599182][ T6379] Memory failure: 0x13cca4: recovery action for dirty LRU page: Recovered [ 54.599188][ T6379] Injecting memory failure for pfn 0x13cca3 at process virtual address 0x200b4000 [ 54.599207][ T6379] Memory failure: 0x13cca3: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.599221][ T6379] Memory failure: 0x13cca3: recovery action for dirty LRU page: Recovered [ 54.599227][ T6379] Injecting memory failure for pfn 0x13cca2 at process virtual address 0x200b5000 [ 54.599246][ T6379] Memory failure: 0x13cca2: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.599259][ T6379] Memory failure: 0x13cca2: recovery action for dirty LRU page: Recovered [ 54.599266][ T6379] Injecting memory failure for pfn 0x13cca1 at process virtual address 0x200b6000 [ 54.599284][ T6379] Memory failure: 0x13cca1: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.599298][ T6379] Memory failure: 0x13cca1: recovery action for dirty LRU page: Recovered [ 54.599305][ T6379] Injecting memory failure for pfn 0x13cca0 at process virtual address 0x200b7000 [ 54.599323][ T6379] Memory failure: 0x13cca0: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.599337][ T6379] Memory failure: 0x13cca0: recovery action for dirty LRU page: Recovered [ 54.599344][ T6379] Injecting memory failure for pfn 0x13c34f at process virtual address 0x200b8000 [ 54.599362][ T6379] Memory failure: 0x13c34f: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.599376][ T6379] Memory failure: 0x13c34f: recovery action for dirty LRU page: Recovered [ 54.599382][ T6379] Injecting memory failure for pfn 0x13c34e at process virtual address 0x200b9000 [ 54.599401][ T6379] Memory failure: 0x13c34e: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.599415][ T6379] Memory failure: 0x13c34e: recovery action for dirty LRU page: Recovered [ 54.599421][ T6379] Injecting memory failure for pfn 0x13c34d at process virtual address 0x200ba000 [ 54.599440][ T6379] Memory failure: 0x13c34d: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.599453][ T6379] Memory failure: 0x13c34d: recovery action for dirty LRU page: Recovered [ 54.599460][ T6379] Injecting memory failure for pfn 0x13c34c at process virtual address 0x200bb000 [ 54.599478][ T6379] Memory failure: 0x13c34c: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.599494][ T6379] Memory failure: 0x13c34c: recovery action for dirty LRU page: Recovered [ 54.599502][ T6379] Injecting memory failure for pfn 0x13c34b at process virtual address 0x200bc000 [ 54.599524][ T6379] Memory failure: 0x13c34b: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.599543][ T6379] Memory failure: 0x13c34b: recovery action for dirty LRU page: Recovered [ 54.599550][ T6379] Injecting memory failure for pfn 0x13c34a at process virtual address 0x200bd000 [ 54.599569][ T6379] Memory failure: 0x13c34a: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.599582][ T6379] Memory failure: 0x13c34a: recovery action for dirty LRU page: Recovered [ 54.599589][ T6379] Injecting memory failure for pfn 0x13c349 at process virtual address 0x200be000 [ 54.599608][ T6379] Memory failure: 0x13c349: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.599621][ T6379] Memory failure: 0x13c349: recovery action for dirty LRU page: Recovered [ 54.599628][ T6379] Injecting memory failure for pfn 0x13c348 at process virtual address 0x200bf000 [ 54.599646][ T6379] Memory failure: 0x13c348: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.599660][ T6379] Memory failure: 0x13c348: recovery action for dirty LRU page: Recovered [ 54.599667][ T6379] Injecting memory failure for pfn 0x13c347 at process virtual address 0x200c0000 [ 54.599685][ T6379] Memory failure: 0x13c347: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.599699][ T6379] Memory failure: 0x13c347: recovery action for dirty LRU page: Recovered [ 54.599705][ T6379] Injecting memory failure for pfn 0x13c346 at process virtual address 0x200c1000 [ 54.599724][ T6379] Memory failure: 0x13c346: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.599738][ T6379] Memory failure: 0x13c346: recovery action for dirty LRU page: Recovered [ 54.599745][ T6379] Injecting memory failure for pfn 0x13c345 at process virtual address 0x200c2000 [ 54.599763][ T6379] Memory failure: 0x13c345: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.599777][ T6379] Memory failure: 0x13c345: recovery action for dirty LRU page: Recovered [ 54.599784][ T6379] Injecting memory failure for pfn 0x13c344 at process virtual address 0x200c3000 [ 54.599802][ T6379] Memory failure: 0x13c344: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.599816][ T6379] Memory failure: 0x13c344: recovery action for dirty LRU page: Recovered [ 54.599822][ T6379] Injecting memory failure for pfn 0x13c343 at process virtual address 0x200c4000 [ 54.599841][ T6379] Memory failure: 0x13c343: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.599855][ T6379] Memory failure: 0x13c343: recovery action for dirty LRU page: Recovered [ 54.599861][ T6379] Injecting memory failure for pfn 0x13c342 at process virtual address 0x200c5000 [ 54.599880][ T6379] Memory failure: 0x13c342: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.599893][ T6379] Memory failure: 0x13c342: recovery action for dirty LRU page: Recovered [ 54.599900][ T6379] Injecting memory failure for pfn 0x13c341 at process virtual address 0x200c6000 [ 54.599918][ T6379] Memory failure: 0x13c341: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.599932][ T6379] Memory failure: 0x13c341: recovery action for dirty LRU page: Recovered [ 54.599938][ T6379] Injecting memory failure for pfn 0x13c340 at process virtual address 0x200c7000 [ 54.599957][ T6379] Memory failure: 0x13c340: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.599971][ T6379] Memory failure: 0x13c340: recovery action for dirty LRU page: Recovered [ 54.599977][ T6379] Injecting memory failure for pfn 0x13b2df at process virtual address 0x200c8000 [ 54.599996][ T6379] Memory failure: 0x13b2df: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.600010][ T6379] Memory failure: 0x13b2df: recovery action for dirty LRU page: Recovered [ 54.600016][ T6379] Injecting memory failure for pfn 0x13b2d0 at process virtual address 0x200c9000 [ 54.600035][ T6379] Memory failure: 0x13b2d0: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.600049][ T6379] Memory failure: 0x13b2d0: recovery action for dirty LRU page: Recovered [ 54.600055][ T6379] Injecting memory failure for pfn 0x13a65f at process virtual address 0x200ca000 [ 54.600074][ T6379] Memory failure: 0x13a65f: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.600088][ T6379] Memory failure: 0x13a65f: recovery action for dirty LRU page: Recovered [ 54.600094][ T6379] Injecting memory failure for pfn 0x13a65e at process virtual address 0x200cb000 [ 54.600113][ T6379] Memory failure: 0x13a65e: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.600127][ T6379] Memory failure: 0x13a65e: recovery action for dirty LRU page: Recovered [ 54.600134][ T6379] Injecting memory failure for pfn 0x13a65d at process virtual address 0x200cc000 [ 54.600152][ T6379] Memory failure: 0x13a65d: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.600166][ T6379] Memory failure: 0x13a65d: recovery action for dirty LRU page: Recovered [ 54.600172][ T6379] Injecting memory failure for pfn 0x13a65c at process virtual address 0x200cd000 [ 54.600191][ T6379] Memory failure: 0x13a65c: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.600204][ T6379] Memory failure: 0x13a65c: recovery action for dirty LRU page: Recovered [ 54.600211][ T6379] Injecting memory failure for pfn 0x13a65b at process virtual address 0x200ce000 [ 54.600230][ T6379] Memory failure: 0x13a65b: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.600243][ T6379] Memory failure: 0x13a65b: recovery action for dirty LRU page: Recovered [ 54.600250][ T6379] Injecting memory failure for pfn 0x13a65a at process virtual address 0x200cf000 [ 54.600268][ T6379] Memory failure: 0x13a65a: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.600282][ T6379] Memory failure: 0x13a65a: recovery action for dirty LRU page: Recovered [ 54.600289][ T6379] Injecting memory failure for pfn 0x13a659 at process virtual address 0x200d0000 [ 54.600308][ T6379] Memory failure: 0x13a659: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.600322][ T6379] Memory failure: 0x13a659: recovery action for dirty LRU page: Recovered [ 54.600328][ T6379] Injecting memory failure for pfn 0x13a658 at process virtual address 0x200d1000 [ 54.600347][ T6379] Memory failure: 0x13a658: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.600360][ T6379] Memory failure: 0x13a658: recovery action for dirty LRU page: Recovered [ 54.600367][ T6379] Injecting memory failure for pfn 0x13a657 at process virtual address 0x200d2000 [ 54.600386][ T6379] Memory failure: 0x13a657: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.600399][ T6379] Memory failure: 0x13a657: recovery action for dirty LRU page: Recovered [ 54.600406][ T6379] Injecting memory failure for pfn 0x13a656 at process virtual address 0x200d3000 [ 54.600425][ T6379] Memory failure: 0x13a656: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.600438][ T6379] Memory failure: 0x13a656: recovery action for dirty LRU page: Recovered [ 54.600445][ T6379] Injecting memory failure for pfn 0x13a655 at process virtual address 0x200d4000 [ 54.600464][ T6379] Memory failure: 0x13a655: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.600477][ T6379] Memory failure: 0x13a655: recovery action for dirty LRU page: Recovered [ 54.600484][ T6379] Injecting memory failure for pfn 0x13a654 at process virtual address 0x200d5000 [ 54.600505][ T6379] Memory failure: 0x13a654: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.600519][ T6379] Memory failure: 0x13a654: recovery action for dirty LRU page: Recovered [ 54.600526][ T6379] Injecting memory failure for pfn 0x13a653 at process virtual address 0x200d6000 [ 54.600544][ T6379] Memory failure: 0x13a653: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.600558][ T6379] Memory failure: 0x13a653: recovery action for dirty LRU page: Recovered [ 54.600564][ T6379] Injecting memory failure for pfn 0x13a652 at process virtual address 0x200d7000 [ 54.600605][ T6379] Memory failure: 0x13a652: Sending SIGBUS to syz.4.417:6379 due to hardware memory corruption [ 54.600619][ T6379] Memory failure: 0x13a652: recovery action for dirty LRU page: Recovered [ 54.600626][ T6379] Injecting memory failure for pfn 0x13a651 at process virtual address 0x200d8000 [ 54.682978][ T6379] Memory failure: 0x13a651: Unknown page state [ 54.682994][ T6379] Memory failure: 0x13a651: recovery action for unknown page: Ignored [ 54.690166][ T6380] fuse: root generation should be zero [ 55.133455][ T1247] wlan1: Trigger new scan to find an IBSS to join [ 55.459676][ T6419] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 55.500991][ T6422] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 55.513173][ T6423] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 55.513185][ T6423] FAT-fs (loop1): Filesystem has been set read-only [ 55.513207][ T6423] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 55.513223][ T6423] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 55.513244][ T6423] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 55.514996][ T6422] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 55.541231][ T4704] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 55.596518][ T6428] binder_user_error: 7 callbacks suppressed [ 55.596530][ T6428] binder: 6426:6428 tried to acquire reference to desc 0, got 1 instead [ 55.597432][ T6428] binder: 6426:6428 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 55.597449][ T6428] binder: 6428 RLIMIT_NICE not set [ 55.597460][ T6428] binder: 6428 RLIMIT_NICE not set [ 55.597576][ T6428] binder: 6428 RLIMIT_NICE not set [ 55.597644][ T6428] binder_alloc: 6426: binder_alloc_buf, no vma [ 55.597650][ T6428] binder_debug: 6 callbacks suppressed [ 55.597655][ T6428] binder: cannot allocate buffer: vma cleared, target dead or dying [ 55.597673][ T6428] binder: 6426:6428 transaction reply to 6426:6428 failed 70/29189/-3, code 0 size 72-0 line 3393 [ 55.597690][ T6428] binder: send failed reply for transaction 69 to 6426:6428 [ 55.600107][ T4796] binder: undelivered TRANSACTION_COMPLETE [ 55.600120][ T4796] binder: undelivered TRANSACTION_ERROR: 29189 [ 55.616342][ T4818] binder: undelivered TRANSACTION_ERROR: 29190 [ 55.959946][ T6462] netlink: 24 bytes leftover after parsing attributes in process `syz.2.441'. [ 56.040026][ T6475] binder: 6474:6475 tried to acquire reference to desc 0, got 1 instead [ 56.040352][ T6475] binder: 6474:6475 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 56.040363][ T6475] binder: 6475 RLIMIT_NICE not set [ 56.040374][ T6475] binder: 6475 RLIMIT_NICE not set [ 56.040465][ T6475] binder: 6475 RLIMIT_NICE not set [ 56.040474][ T6475] binder_alloc: 6474: binder_alloc_buf, no vma [ 56.040484][ T6475] binder: cannot allocate buffer: vma cleared, target dead or dying [ 56.040499][ T6475] binder: 6474:6475 transaction reply to 6474:6475 failed 76/29189/-3, code 0 size 72-0 line 3393 [ 56.040518][ T6475] binder: send failed reply for transaction 75 to 6474:6475 [ 56.040732][ T4818] binder: undelivered TRANSACTION_COMPLETE [ 56.113000][ T6468] netlink: 4 bytes leftover after parsing attributes in process `syz.3.437'. [ 56.125202][ T1247] wlan1: Creating new IBSS network, BSSID 56:47:f1:24:f0:58 [ 56.442077][ T6488] 9p: Unknown Cache mode or invalid value f [ 56.443952][ T6488] netlink: 'syz.1.447': attribute type 2 has an invalid length. [ 56.472608][ T6490] overlayfs: missing 'workdir' [ 56.499015][ T6492] netlink: 8 bytes leftover after parsing attributes in process `syz.1.449'. [ 56.960706][ T6498] xt_hashlimit: size too large, truncated to 1048576 [ 57.018585][ T6504] set_capacity_and_notify: 4 callbacks suppressed [ 57.018793][ T6504] loop4: detected capacity change from 0 to 1024 [ 57.019171][ T6504] EXT4-fs: inline encryption not supported [ 57.147107][ T6513] loop4: detected capacity change from 0 to 128 [ 57.187910][ T6516] binder_alloc: 6515: binder_alloc_buf, no vma [ 58.975944][ T6464] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 59.024536][ T6528] overlayfs: missing 'workdir' [ 59.090670][ T6536] loop3: detected capacity change from 0 to 256 [ 59.096723][ T6534] netlink: 12 bytes leftover after parsing attributes in process `syz.2.464'. [ 59.096763][ T6534] netlink: 'syz.2.464': attribute type 12 has an invalid length. [ 59.099383][ T6534] netlink: 12 bytes leftover after parsing attributes in process `syz.2.464'. [ 59.099399][ T6534] netlink: 'syz.2.464': attribute type 12 has an invalid length. [ 59.100539][ T1066] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.100664][ T1066] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.100774][ T1066] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.110489][ T1066] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.120526][ T6536] FAT-fs (loop3): Directory bread(block 64) failed [ 59.120553][ T6536] FAT-fs (loop3): Directory bread(block 65) failed [ 59.120587][ T6536] FAT-fs (loop3): Directory bread(block 66) failed [ 59.120602][ T6536] FAT-fs (loop3): Directory bread(block 67) failed [ 59.120625][ T6536] FAT-fs (loop3): Directory bread(block 68) failed [ 59.120639][ T6536] FAT-fs (loop3): Directory bread(block 69) failed [ 59.120661][ T6536] FAT-fs (loop3): Directory bread(block 70) failed [ 59.120674][ T6536] FAT-fs (loop3): Directory bread(block 71) failed [ 59.120697][ T6536] FAT-fs (loop3): Directory bread(block 72) failed [ 59.120710][ T6536] FAT-fs (loop3): Directory bread(block 73) failed [ 59.175980][ T6536] overlayfs: failed to resolve './bus': -2 [ 59.176109][ T6540] overlayfs: failed to resolve './bus': -2 [ 59.297686][ T6525] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 59.466514][ T6560] netlink: 84 bytes leftover after parsing attributes in process `syz.2.469'. [ 59.596921][ T6566] loop2: detected capacity change from 0 to 512 [ 59.989705][ T6585] netlink: 12 bytes leftover after parsing attributes in process `syz.0.474'. [ 60.089558][ T6590] loop0: detected capacity change from 0 to 512 [ 60.091657][ T6590] EXT4-fs: Ignoring removed bh option [ 60.093061][ T6590] EXT4-fs: Ignoring removed mblk_io_submit option [ 60.098355][ T6590] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 60.103088][ T6590] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 60.103229][ T6590] EXT4-fs (loop0): orphan cleanup on readonly fs [ 60.108003][ T6590] Quota error (device loop0): do_insert_tree: Free block already used in tree: block 4 [ 60.108054][ T6590] Quota error (device loop0): qtree_write_dquot: Error -5 occurred while creating quota [ 60.108721][ T6590] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.476: Failed to acquire dquot type 1 [ 60.108736][ T6590] loop0: lost filesystem error report for type 5 error -5 [ 60.110802][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 60.110815][ C0] EXT4-fs (loop0): last error at time 2638: ext4_acquire_dquot:7034 [ 60.112301][ T6590] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.476: Invalid block bitmap block 0 in block_group 0 [ 60.112316][ T6590] loop0: lost filesystem error report for type 5 error -117 [ 60.116594][ T6590] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.476: Invalid block bitmap block 0 in block_group 0 [ 60.116615][ T6590] loop0: lost filesystem error report for type 5 error -117 [ 60.129776][ T6590] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.476: Invalid block bitmap block 0 in block_group 0 [ 60.129811][ T6590] loop0: lost filesystem error report for type 5 error -117 [ 60.136808][ T6590] Quota error (device loop0): write_blk: dquota write failed [ 60.136878][ T6590] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 60.136908][ T6590] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.476: Failed to acquire dquot type 1 [ 60.136926][ T6590] loop0: lost filesystem error report for type 5 error -28 [ 60.142579][ T6590] Quota error (device loop0): write_blk: dquota write failed [ 60.142621][ T6590] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 60.142634][ T6590] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.476: Failed to acquire dquot type 1 [ 60.142645][ T6590] loop0: lost filesystem error report for type 5 error -28 [ 60.154110][ T6590] EXT4-fs (loop0): 1 orphan inode deleted [ 60.234532][ T6599] netlink: 12 bytes leftover after parsing attributes in process `syz.4.480'. [ 60.262822][ T6601] loop0: detected capacity change from 0 to 512 [ 60.279130][ T6601] EXT4-fs (loop0): 1 orphan inode deleted [ 60.285787][ T6601] EXT4-fs (loop0): resizing filesystem from 64 to 2 blocks [ 60.285815][ T6601] EXT4-fs warning (device loop0): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 60.295156][ T6599] loop4: detected capacity change from 0 to 8 [ 60.296773][ T6599] squashfs: Unknown parameter ' ' [ 60.797043][ T6628] loop2: detected capacity change from 0 to 1024 [ 60.797438][ T6628] EXT4-fs: Ignoring removed bh option [ 60.797459][ T6628] EXT4-fs: inline encryption not supported [ 60.800459][ T6628] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 60.804505][ T6628] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 2: comm syz.2.489: lblock 2 mapped to illegal pblock 2 (length 1) [ 60.804541][ T6628] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 60.804624][ T6628] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 60.804638][ T6628] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 48: comm syz.2.489: lblock 0 mapped to illegal pblock 48 (length 1) [ 60.804651][ T6628] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 60.804717][ T6628] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 60.804725][ T6628] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.489: Failed to acquire dquot type 0 [ 60.804735][ T6628] loop2: lost filesystem error report for type 5 error -117 [ 60.804814][ T6628] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 60.804823][ T6628] loop2: lost filesystem error report for type 5 error -117 [ 60.804895][ T6628] EXT4-fs error (device loop2): ext4_evict_inode:267: inode #11: comm syz.2.489: mark_inode_dirty error [ 60.804906][ T6628] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 60.804974][ T6628] EXT4-fs warning (device loop2): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 60.805006][ T6628] EXT4-fs (loop2): 1 orphan inode deleted [ 60.833715][ T5353] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 2: comm kworker/u8:16: lblock 2 mapped to illegal pblock 2 (length 1) [ 60.839093][ T5353] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 60.839126][ T5353] EXT4-fs error (device loop2): ext4_write_dquot:7014: comm kworker/u8:16: Failed to commit dquot type 0 [ 60.844784][ T5353] Quota error (device loop2): dquot_write_dquot: Can't write quota structure (error -117). Quota may get out of sync! [ 60.846183][ T6631] binder_user_error: 15 callbacks suppressed [ 60.846192][ T6631] binder: 6630:6631 tried to acquire reference to desc 0, got 1 instead [ 60.846542][ T6631] binder: 6630:6631 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 60.846556][ T6631] binder: 6631 RLIMIT_NICE not set [ 60.846568][ T6631] binder: 6631 RLIMIT_NICE not set [ 60.846651][ T6631] binder: 6630:6631 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 60.846835][ T4811] binder_debug: 16 callbacks suppressed [ 60.846840][ T4811] binder: release 6630:6631 transaction 97 out, still active [ 60.846849][ T4811] binder: undelivered TRANSACTION_COMPLETE [ 60.873687][ T4705] EXT4-fs error (device loop2): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 60.873721][ T4705] loop2: lost filesystem error report for type 5 error -117 [ 60.874179][ T4811] binder: release 6630:6631 transaction 97 in, still active [ 60.874196][ T4811] binder: send failed reply for transaction 97, target dead [ 60.877470][ T4705] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 60.877497][ T4705] loop2: lost filesystem error report for type 5 error -117 [ 60.878137][ T4705] EXT4-fs error (device loop2): ext4_quota_off:7318: inode #3: comm syz-executor: mark_inode_dirty error [ 60.878171][ T4705] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 60.981056][ T6641] loop2: detected capacity change from 0 to 512 [ 60.981378][ T6641] EXT4-fs: Ignoring removed bh option [ 60.986006][ T6641] EXT4-fs: Ignoring removed mblk_io_submit option [ 60.987386][ T6641] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 60.992593][ T6641] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 60.992714][ T6641] EXT4-fs (loop2): orphan cleanup on readonly fs [ 61.002223][ T6641] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.494: Failed to acquire dquot type 1 [ 61.005925][ T6641] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.494: Invalid block bitmap block 0 in block_group 0 [ 61.008900][ T6641] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.494: Invalid block bitmap block 0 in block_group 0 [ 61.009039][ T6641] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.494: Invalid block bitmap block 0 in block_group 0 [ 61.009205][ T6641] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.494: Failed to acquire dquot type 1 [ 61.009441][ T6641] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.494: Failed to acquire dquot type 1 [ 61.009617][ T6641] EXT4-fs (loop2): 1 orphan inode deleted [ 61.012009][ C0] EXT4-fs (loop2): error count since last fsck: 6 [ 61.012025][ C0] EXT4-fs (loop2): last error at time 2638: ext4_acquire_dquot:7034 [ 61.122861][ T6652] loop0: detected capacity change from 0 to 4096 [ 61.127637][ T6652] EXT4-fs: inline encryption not supported [ 61.201540][ T6652] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 61.201569][ T6652] EXT4-fs (loop0): Test dummy encryption mode enabled [ 61.227028][ T6652] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 61.227089][ T6652] System zones: 0-5 [ 61.974628][ T4717] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 61.974665][ T4717] CPU: 0 UID: 0 PID: 4717 Comm: kworker/u9:3 Tainted: G L syzkaller #0 PREEMPT [ 61.974685][ T4717] Tainted: [L]=SOFTLOCKUP [ 61.974689][ T4717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 61.974696][ T4717] Workqueue: hci2 hci_rx_work [ 61.974712][ T4717] Call trace: [ 61.974715][ T4717] show_stack+0x2c/0x3c (C) [ 61.974730][ T4717] __dump_stack+0x30/0x40 [ 61.974742][ T4717] dump_stack_lvl+0xd8/0x12c [ 61.974754][ T4717] dump_stack+0x1c/0x28 [ 61.974765][ T4717] sysfs_warn_dup+0x9c/0xb8 [ 61.974776][ T4717] sysfs_create_dir_ns+0x190/0x1f4 [ 61.974787][ T4717] kobject_add_internal+0x28c/0x6e8 [ 61.974798][ T4717] kobject_add_varg+0x98/0xe4 [ 61.974807][ T4717] kobject_add+0x110/0x1cc [ 61.974816][ T4717] device_add+0x390/0x9e4 [ 61.974825][ T4717] hci_conn_add_sysfs+0xc0/0x1f4 [ 61.974837][ T4717] le_conn_complete_evt+0xc8c/0x10ec [ 61.974848][ T4717] hci_le_conn_complete_evt+0x114/0x40c [ 61.974858][ T4717] hci_le_meta_evt+0x2d4/0x49c [ 61.974870][ T4717] hci_event_packet+0x4e4/0xa00 [ 61.974881][ T4717] hci_rx_work+0x2fc/0xd1c [ 61.974890][ T4717] process_scheduled_works+0x79c/0x1098 [ 61.974900][ T4717] worker_thread+0x754/0xba0 [ 61.974909][ T4717] kthread+0x2f8/0x3c8 [ 61.974917][ T4717] ret_from_fork+0x10/0x20 [ 61.974950][ T4717] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 61.974977][ T4717] Bluetooth: hci2: failed to register connection device [ 64.491633][ T1596] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.493381][ T1596] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.496234][ T11] cfg80211: failed to load regulatory.db [ 88.177444][ T1066] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 118.358367][ T6706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.358596][ T6706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.359474][ T6708] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 118.359498][ T6708] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 118.364526][ T6706] overlayfs: failed to resolve './file0': -2 [ 118.369711][ T6711] binder: 6707:6711 tried to acquire reference to desc 0, got 1 instead [ 118.371799][ T6711] binder: 6707:6711 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 118.374486][ T6711] binder: 6711 RLIMIT_NICE not set [ 118.375448][ T6711] binder: 6711 RLIMIT_NICE not set [ 118.376702][ T6711] binder: 6711 RLIMIT_NICE not set [ 118.377724][ T6711] binder_alloc: 6707: binder_alloc_buf, no vma [ 118.379395][ T6711] binder: cannot allocate buffer: vma cleared, target dead or dying [ 118.379437][ T6711] binder: 6707:6711 transaction reply to 6707:6711 failed 103/29189/-3, code 0 size 0-0 line 3393 [ 118.382886][ T6711] binder: send failed reply for transaction 102 to 6707:6711 [ 118.385009][ T4887] binder: undelivered TRANSACTION_COMPLETE [ 118.386183][ T4887] binder: undelivered TRANSACTION_ERROR: 29189 [ 118.390608][ T6712] loop2: detected capacity change from 0 to 4096 [ 118.394376][ T4887] binder: undelivered TRANSACTION_ERROR: 29190 [ 118.403401][ T6712] EXT4-fs mount: 20 callbacks suppressed [ 118.405076][ T6712] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.409992][ T6719] loop4: detected capacity change from 0 to 2048 [ 118.432639][ T6719] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.460581][ T6719] netlink: 8 bytes leftover after parsing attributes in process `syz.4.515'. [ 118.466903][ T6719] macsec1: entered allmulticast mode [ 118.467990][ T6719] hsr0: entered allmulticast mode [ 118.468946][ T6719] hsr_slave_0: entered allmulticast mode [ 118.469995][ T6719] hsr_slave_1: entered allmulticast mode [ 118.471221][ T6719] hsr0: entered promiscuous mode [ 118.513559][ T6728] loop0: detected capacity change from 0 to 512 [ 118.533206][ T4705] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.543856][ T6728] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.548212][ T6728] netlink: 16 bytes leftover after parsing attributes in process `syz.0.517'. [ 119.427374][ T4714] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.489687][ T6738] loop2: detected capacity change from 0 to 2048 [ 119.534495][ T1066] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 119.544198][ T6738] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.650654][ T6742] loop3: detected capacity change from 0 to 4096 [ 119.657433][ T6742] EXT4-fs: Ignoring removed mblk_io_submit option [ 119.657515][ T6742] ext3: Bad value for 'debug_want_extra_isize' [ 119.699696][ T6742] overlay: Unknown parameter 'euid' [ 119.729700][ T5353] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 119.731900][ T5353] EXT4-fs (loop4): Remounting filesystem read-only [ 119.889398][ T5206] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 119.889896][ T5206] EXT4-fs (loop2): Remounting filesystem read-only [ 119.898423][ T4711] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.951500][ T4705] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.955040][ T6753] loop3: detected capacity change from 0 to 8192 [ 120.157439][ T6767] netlink: 'syz.2.528': attribute type 10 has an invalid length. [ 120.341411][ T6767] macvlan1: entered promiscuous mode [ 120.342341][ T6767] macvlan1: entered allmulticast mode [ 120.411184][ T6770] netlink: 'syz.2.528': attribute type 4 has an invalid length. [ 120.411212][ T6770] netlink: 156 bytes leftover after parsing attributes in process `syz.2.528'. [ 120.420795][ T6767] veth1_vlan: entered allmulticast mode [ 120.425742][ T6767] bond0: (slave macvlan1): Enslaving as an active interface with an up link [ 120.495392][ T6779] loop2: detected capacity change from 0 to 512 [ 120.522589][ T6784] loop0: detected capacity change from 0 to 4096 [ 120.528234][ T6784] EXT4-fs (loop0): filesystem too large to mount safely on this system [ 120.541219][ T6784] cgroup: Unknown subsys name 'cpuset' [ 120.560104][ T6788] loop2: detected capacity change from 0 to 512 [ 120.561868][ T6788] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 120.574505][ T6788] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.534: casefold flag without casefold feature [ 120.574542][ T6788] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 120.577473][ T6788] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.534: couldn't read orphan inode 15 (err -117) [ 120.577512][ T6788] fserror_report: 6 callbacks suppressed [ 120.577536][ T6788] loop2: lost filesystem error report for type 5 error -117 [ 120.583475][ C1] EXT4-fs (loop2): error count since last fsck: 2 [ 120.583508][ C1] EXT4-fs (loop2): initial error at time 2698: ext4_orphan_get:1397: inode 15 [ 120.583549][ C1] EXT4-fs (loop2): last error at time 2698: ext4_orphan_get:1402 [ 120.598197][ T6788] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.622072][ T4705] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.701020][ T6796] loop0: detected capacity change from 0 to 4096 [ 120.702837][ T6796] EXT4-fs: Ignoring removed mblk_io_submit option [ 120.705327][ T6796] ext3: Bad value for 'debug_want_extra_isize' [ 120.742505][ T6796] overlay: Unknown parameter 'euid' [ 121.016883][ T6832] netlink: 32 bytes leftover after parsing attributes in process `syz.3.547'. [ 121.017178][ T6825] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.038567][ T6825] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 121.164384][ T6841] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.176311][ T6841] EXT4-fs error (device loop0): ext4_validate_block_bitmap:423: comm syz.0.550: bg 0: bad block bitmap checksum [ 121.180078][ T6841] __quota_error: 12 callbacks suppressed [ 121.180111][ T6841] Quota error (device loop0): write_blk: dquota write failed [ 121.180173][ T6841] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 121.180195][ T6841] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.550: Failed to acquire dquot type 0 [ 121.214690][ T4714] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.237318][ T6848] overlayfs: invalid redirect ((null)) [ 121.242098][ T6850] netlink: 'syz.4.554': attribute type 10 has an invalid length. [ 121.270584][ T6850] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 121.273338][ T6850] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 121.298533][ T6861] /dev/loop0: Can't open blockdev [ 121.303869][ T6860] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 121.344421][ T6865] binder: 6864:6865 tried to acquire reference to desc 0, got 1 instead [ 121.346373][ T6865] binder: 6864:6865 ERROR: BC_REGISTER_LOOPER called without request [ 121.348743][ T6865] binder: 6865 RLIMIT_NICE not set [ 121.378722][ T6870] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.386782][ T6873] netlink: 16 bytes leftover after parsing attributes in process `syz.0.562'. [ 121.399306][ T4711] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.405775][ T6876] binder: BINDER_SET_CONTEXT_MGR already set [ 121.405800][ T6876] binder: 6864:6876 ioctl 4018620d 20000100 returned -16 [ 121.493242][ T6884] netlink: 'syz.4.566': attribute type 1 has an invalid length. [ 121.516661][ T6884] 8021q: adding VLAN 0 to HW filter on device bond1 [ 121.528184][ T6884] bond1: (slave ip6erspan0): making interface the new active one [ 121.530739][ T6884] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 121.572118][ T6889] FAT-fs (loop4): Directory bread(block 64) failed [ 121.573616][ T6889] FAT-fs (loop4): Directory bread(block 65) failed [ 121.573703][ T6889] FAT-fs (loop4): Directory bread(block 66) failed [ 121.573716][ T6889] FAT-fs (loop4): Directory bread(block 67) failed [ 121.573741][ T6889] FAT-fs (loop4): Directory bread(block 68) failed [ 121.573752][ T6889] FAT-fs (loop4): Directory bread(block 69) failed [ 121.573775][ T6889] FAT-fs (loop4): Directory bread(block 70) failed [ 121.573786][ T6889] FAT-fs (loop4): Directory bread(block 71) failed [ 121.573808][ T6889] FAT-fs (loop4): Directory bread(block 72) failed [ 121.573818][ T6889] FAT-fs (loop4): Directory bread(block 73) failed [ 121.576288][ T6889] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 121.683729][ T6894] EXT4-fs (loop0): can't mount with data_err=abort, fs mounted w/o journal [ 121.972040][ T4704] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.026363][ T6910] trusted_key: encrypted_key: insufficient parameters specified [ 122.047119][ T6912] nfs: Unknown parameter 'ntext' [ 122.055822][ T6905] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 122.138821][ T6916] netlink: 60 bytes leftover after parsing attributes in process `syz.2.575'. [ 122.191939][ T6937] netlink: 4 bytes leftover after parsing attributes in process `syz.0.582'. [ 122.251621][ T6946] netlink: 'syz.2.586': attribute type 1 has an invalid length. [ 122.253107][ T6947] netlink: 'syz.2.586': attribute type 1 has an invalid length. [ 122.260718][ T6946] 8021q: adding VLAN 0 to HW filter on device bond1 [ 122.266476][ T6944] FAT-fs (loop0): Directory bread(block 64) failed [ 122.266516][ T6944] FAT-fs (loop0): Directory bread(block 65) failed [ 122.267966][ T6944] FAT-fs (loop0): Directory bread(block 66) failed [ 122.267981][ T6944] FAT-fs (loop0): Directory bread(block 67) failed [ 122.268006][ T6944] FAT-fs (loop0): Directory bread(block 68) failed [ 122.268017][ T6944] FAT-fs (loop0): Directory bread(block 69) failed [ 122.268041][ T6944] FAT-fs (loop0): Directory bread(block 70) failed [ 122.268052][ T6944] FAT-fs (loop0): Directory bread(block 71) failed [ 122.268074][ T6944] FAT-fs (loop0): Directory bread(block 72) failed [ 122.268084][ T6944] FAT-fs (loop0): Directory bread(block 73) failed [ 122.286384][ T6946] bond1: (slave geneve2): making interface the new active one [ 122.288722][ T6946] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 122.330640][ T30] audit: type=1400 audit(2700.318:11): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=wx pid=6939 comm="syz.3.584" name="103" dev="tmpfs" ino=592 [ 122.333034][ T6954] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0002:7d01 with DS=0x1 [ 122.336255][ T30] audit: type=1400 audit(2700.328:12): lsm=SMACK fn=smack_file_ioctl action=denied subject="w" object="_" requested=w pid=6939 comm="syz.3.584" path="/proc/309/task/312/attr/current" dev="proc" ino=13272 [ 122.662765][ T6985] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 122.664349][ T6985] batman_adv: batadv0: Adding interface: ipvlan0 [ 122.664360][ T6985] batman_adv: batadv0: The MTU of interface ipvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.664378][ T6985] batman_adv: batadv0: Not using interface ipvlan0 (retrying later): interface not active [ 122.669070][ T6985] geneve2: entered promiscuous mode [ 122.669082][ T6985] geneve2: entered allmulticast mode [ 122.670060][ T6985] batman_adv: batadv0: Adding interface: geneve2 [ 122.670070][ T6985] batman_adv: batadv0: Interface activated: geneve2 [ 122.923099][ T6987] netlink: 56 bytes leftover after parsing attributes in process `syz.4.598'. [ 122.931036][ T6989] netlink: 20 bytes leftover after parsing attributes in process `syz.1.601'. [ 122.934321][ T5356] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.934372][ T5356] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.934393][ T5356] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.934410][ T5356] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.934595][ T6989] netlink: 20 bytes leftover after parsing attributes in process `syz.1.601'. [ 122.981385][ T6997] overlayfs: failed to clone upperpath [ 123.028943][ T30] audit: type=1400 audit(2701.018:13): lsm=SMACK fn=smack_inode_link action=denied subject="_" object="lo" requested=w pid=7002 comm="syz.2.606" name="file1" dev="tmpfs" ino=612 [ 123.036467][ T6993] netlink: 'syz.1.602': attribute type 1 has an invalid length. [ 123.046205][ T6993] 8021q: adding VLAN 0 to HW filter on device bond2 [ 123.053545][ T6993] bond2: (slave geneve3): making interface the new active one [ 123.055397][ T6993] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 123.076466][ T6993] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.080438][ T6993] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.602: bg 0: block 345: padding at end of block bitmap is not set [ 123.081105][ T6993] EXT4-fs (loop1): Remounting filesystem read-only [ 123.135105][ T4704] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.151549][ T7013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.151745][ T7013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.152497][ T7013] overlayfs: failed to resolve './file0': -2 [ 123.866661][ T7042] netlink: 'syz.1.617': attribute type 8 has an invalid length. [ 123.866716][ T7042] __nla_validate_parse: 2 callbacks suppressed [ 123.867282][ T7042] netlink: 4 bytes leftover after parsing attributes in process `syz.1.617'. [ 124.081052][ T7058] set_capacity_and_notify: 13 callbacks suppressed [ 124.084489][ T7058] loop1: detected capacity change from 0 to 128 [ 124.094815][ T7058] FAT-fs (loop1): bogus number of FAT sectors [ 124.094853][ T7058] FAT-fs (loop1): Can't find a valid FAT filesystem [ 124.116165][ T7056] loop4: detected capacity change from 0 to 2048 [ 124.138466][ T7063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.140931][ T7063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.143429][ T7063] overlayfs: failed to resolve './file0': -2 [ 124.148635][ T7056] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.151030][ T7064] netlink: 136 bytes leftover after parsing attributes in process `syz.1.624'. [ 124.208526][ T7067] loop1: detected capacity change from 0 to 256 [ 124.215870][ T7067] vfat: Bad value for 'shortname' [ 124.276372][ T7070] netlink: 12 bytes leftover after parsing attributes in process `syz.1.626'. [ 124.285317][ T7070] syzkaller1: entered promiscuous mode [ 124.285351][ T7070] syzkaller1: entered allmulticast mode [ 124.328309][ T7071] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #12: comm syz.4.621: corrupted in-inode xattr: e_name out of bounds [ 124.329809][ T7071] EXT4-fs (loop4): Remounting filesystem read-only [ 124.563695][ T7079] IPv6: NLM_F_REPLACE set, but no existing node found! [ 124.566032][ T7079] 9p: Bad value for 'wfdno' [ 124.712888][ T7083] Illegal XDP return value 4294967274 on prog (id 76) dev N/A, expect packet loss! [ 124.817664][ T7093] loop3: detected capacity change from 0 to 4096 [ 124.821791][ T7093] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.872074][ T7068] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.891541][ T1066] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 124.896030][ T1066] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.945287][ T4713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.954570][ T7108] overlayfs: failed to clone upperpath [ 124.978227][ T1066] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 124.978265][ T1066] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.996647][ T7112] overlayfs: workdir and upperdir must reside under the same mount [ 125.024110][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 125.025208][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 125.025792][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 125.026527][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 125.026771][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 125.077854][ T1066] bond0: (slave netdevsim1): Releasing backup interface [ 125.094471][ T1066] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 125.094522][ T1066] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.100236][ T7119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.102248][ T7119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.107197][ T7119] overlayfs: failed to resolve './file0': -2 [ 125.360383][ T1066] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 125.360427][ T1066] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.506293][ T7113] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.507952][ T7113] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.509573][ T7113] bridge_slave_0: entered allmulticast mode [ 125.511331][ T7113] bridge_slave_0: entered promiscuous mode [ 125.513636][ T7113] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.515198][ T7113] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.516868][ T7113] bridge_slave_1: entered allmulticast mode [ 125.518479][ T7113] bridge_slave_1: entered promiscuous mode [ 125.528737][ T7113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.532216][ T7113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.541702][ T7113] team0: Port device team_slave_0 added [ 125.545123][ T7113] team0: Port device team_slave_1 added [ 125.573067][ T7113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.573098][ T7113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 125.573129][ T7113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.579108][ T7113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.579121][ T7113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 125.579133][ T7113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.590651][ T7113] hsr_slave_0: entered promiscuous mode [ 125.590998][ T7113] hsr_slave_1: entered promiscuous mode [ 125.591204][ T7113] debugfs: 'hsr0' already exists in 'hsr' [ 125.591216][ T7113] Cannot create hsr debugfs directory [ 125.911496][ T7159] loop3: detected capacity change from 0 to 2048 [ 125.933980][ T1596] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.935259][ T1596] ieee802154 phy1 wpan1: encryption failed: -22 [ 125.965636][ T7159] loop3: p1 p2 p3 [ 125.965636][ T7159] p1: [ 125.965748][ T7159] loop3: p1 size 16779263 extends beyond EOD, truncated [ 125.967789][ T7159] loop3: p2 size 458752 extends beyond EOD, truncated [ 125.971605][ T7159] loop3: p3 start 3036741376 is beyond EOD, truncated [ 126.002436][ T7169] loop0: detected capacity change from 0 to 512 [ 126.002793][ T7169] EXT4-fs: Ignoring removed nobh option [ 126.009727][ T7169] EXT4-fs (loop0): orphan cleanup on readonly fs [ 126.015846][ T7169] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #11: block 1: comm syz.0.649: lblock 0 mapped to illegal pblock 1 (length 1) [ 126.015885][ T7169] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 126.023294][ T7169] EXT4-fs (loop0): Remounting filesystem read-only [ 126.023450][ T7169] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 126.023463][ T7169] EXT4-fs warning (device loop0): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 126.023496][ T7169] EXT4-fs (loop0): 1 orphan inode deleted [ 126.023973][ T7169] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 126.053667][ T1066] .: left allmulticast mode [ 126.053727][ T1066] .: left promiscuous mode [ 126.054738][ T1066] bridge0: port 2(.) entered disabled state [ 126.058998][ T1066] bridge_slave_0: left allmulticast mode [ 126.059034][ T1066] bridge_slave_0: left promiscuous mode [ 126.059104][ T1066] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.182454][ T7184] overlayfs: failed to clone upperpath [ 126.226502][ T7186] overlayfs: failed to clone upperpath [ 126.257197][ T1066] bond1 (unregistering): (slave ip6erspan0): Releasing active interface [ 126.264046][ T7188] netlink: 120 bytes leftover after parsing attributes in process `syz.2.653'. [ 126.423078][ T7191] fuse: Bad value for 'fd' [ 126.423875][ T7191] overlayfs: failed to clone upperpath [ 126.476485][ T1066] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.495284][ T1066] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.524408][ T1066] bond0 (unregistering): Released all slaves [ 126.529008][ T1066] bond1 (unregistering): Released all slaves [ 126.554673][ T4395] 8021q: adding VLAN 0 to HW filter on device eth0 [ 126.602574][ T4714] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.634320][ T7194] netlink: 'syz.0.654': attribute type 3 has an invalid length. [ 126.698426][ T7202] loop0: detected capacity change from 0 to 256 [ 126.725992][ T7202] FAT-fs (loop0): Directory bread(block 64) failed [ 126.727391][ T7202] FAT-fs (loop0): Directory bread(block 65) failed [ 126.728687][ T7202] FAT-fs (loop0): Directory bread(block 66) failed [ 126.730066][ T7202] FAT-fs (loop0): Directory bread(block 67) failed [ 126.730115][ T7202] FAT-fs (loop0): Directory bread(block 68) failed [ 126.730135][ T7202] FAT-fs (loop0): Directory bread(block 69) failed [ 126.730167][ T7202] FAT-fs (loop0): Directory bread(block 70) failed [ 126.730184][ T7202] FAT-fs (loop0): Directory bread(block 71) failed [ 126.730271][ T7202] FAT-fs (loop0): Directory bread(block 72) failed [ 126.730287][ T7202] FAT-fs (loop0): Directory bread(block 73) failed [ 126.732441][ T7202] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 126.742080][ T7113] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 126.756642][ T7113] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 126.759049][ T7113] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 126.765523][ T7113] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 126.765831][ T7113] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 126.783763][ T7113] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 126.784059][ T7113] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 126.785955][ T7208] overlayfs: failed to resolve './file0': -2 [ 126.798593][ T7113] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 127.043493][ T50] Bluetooth: hci2: command tx timeout [ 127.223206][ T7226] netlink: 'syz.3.658': attribute type 10 has an invalid length. [ 127.223250][ T7226] netlink: 40 bytes leftover after parsing attributes in process `syz.3.658'. [ 127.230508][ T7228] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 127.230575][ T4395] 8021q: adding VLAN 0 to HW filter on device eth1 [ 127.234215][ T7226] team0: entered promiscuous mode [ 127.235074][ T7228] netlink: 566 bytes leftover after parsing attributes in process `syz.1.659'. [ 127.236989][ T7226] team_slave_0: entered promiscuous mode [ 127.238274][ T7226] team_slave_1: entered promiscuous mode [ 127.239452][ T7226] team0: entered allmulticast mode [ 127.240443][ T7226] team_slave_0: entered allmulticast mode [ 127.241556][ T7226] team_slave_1: entered allmulticast mode [ 127.244265][ T7226] bridge0: port 3(team0) entered blocking state [ 127.245578][ T7226] bridge0: port 3(team0) entered disabled state [ 127.248024][ T7226] bridge0: port 3(team0) entered blocking state [ 127.248112][ T7226] bridge0: port 3(team0) entered forwarding state [ 127.308137][ T7113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.315344][ T1066] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.316930][ T1066] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.318811][ T1066] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.320331][ T1066] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.327166][ T1066] hsr0: left allmulticast mode [ 127.328335][ T1066] veth1_macvtap: left promiscuous mode [ 127.328379][ T1066] veth0_macvtap: left promiscuous mode [ 127.328419][ T1066] veth1_vlan: left promiscuous mode [ 127.328456][ T1066] veth0_vlan: left promiscuous mode [ 127.362104][ T7242] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 127.390472][ T5347] Bluetooth: Error in BCSP hdr checksum [ 127.472279][ T1066] team0 (unregistering): Port device team_slave_1 removed [ 127.478011][ T1066] team0 (unregistering): Port device team_slave_0 removed [ 127.541621][ T7260] overlayfs: failed to clone upperpath [ 127.566946][ T7113] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.567500][ T4395] 8021q: adding VLAN 0 to HW filter on device eth2 [ 127.570749][ T5353] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.570787][ T5353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.573957][ T5353] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.573982][ T5353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.600255][ T7113] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 127.600292][ T7113] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 127.798316][ T7113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.817150][ T1066] IPVS: stop unused estimator thread 0... [ 127.864671][ T4395] 8021q: adding VLAN 0 to HW filter on device eth3 [ 127.971297][ T7113] veth0_vlan: entered promiscuous mode [ 127.977885][ T7113] veth1_vlan: entered promiscuous mode [ 127.995154][ T7113] veth0_macvtap: entered promiscuous mode [ 127.997615][ T7113] veth1_macvtap: entered promiscuous mode [ 128.010727][ T7113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.016392][ T7113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.028411][ T1066] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.029388][ T1066] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.029410][ T1066] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.029426][ T1066] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.104353][ T1066] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.106900][ T1066] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.109014][ T1066] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.111611][ T1066] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.384875][ T7313] loop5: detected capacity change from 0 to 2048 [ 128.407468][ T7313] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.441719][ T7113] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.616277][ T7369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.618641][ T7369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.623027][ T7369] overlayfs: failed to resolve './file0': -2 [ 128.700318][ T7376] loop5: detected capacity change from 0 to 256 [ 128.714357][ T7376] FAT-fs (loop5): Directory bread(block 64) failed [ 128.714685][ T7376] FAT-fs (loop5): Directory bread(block 65) failed [ 128.715053][ T7376] FAT-fs (loop5): Directory bread(block 66) failed [ 128.715071][ T7376] FAT-fs (loop5): Directory bread(block 67) failed [ 128.715097][ T7376] FAT-fs (loop5): Directory bread(block 68) failed [ 128.715108][ T7376] FAT-fs (loop5): Directory bread(block 69) failed [ 128.715132][ T7376] FAT-fs (loop5): Directory bread(block 70) failed [ 128.715143][ T7376] FAT-fs (loop5): Directory bread(block 71) failed [ 128.715166][ T7376] FAT-fs (loop5): Directory bread(block 72) failed [ 128.715177][ T7376] FAT-fs (loop5): Directory bread(block 73) failed [ 128.717308][ T7376] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 129.132695][ T4717] Bluetooth: hci2: command tx timeout [ 129.134806][ T4796] IPVS: starting estimator thread 0... [ 129.232628][ T7381] IPVS: using max 51 ests per chain, 122400 per kthread [ 129.263295][ T7385] overlayfs: failed to clone upperpath [ 129.283414][ T7387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.677'. [ 129.285925][ T7387] overlayfs: failed to clone upperpath [ 129.489413][ T50] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 129.848941][ T7403] loop1: detected capacity change from 0 to 2048 [ 129.894459][ T7403] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.903143][ T7405] loop5: detected capacity change from 0 to 8192 [ 130.172162][ T7405] loop5: detected capacity change from 0 to 8192 [ 130.348078][ T7405] loop5: detected capacity change from 0 to 8192 [ 130.457316][ T7413] netlink: 'syz.0.684': attribute type 2 has an invalid length. [ 130.469714][ T7405] loop5: detected capacity change from 0 to 8192 [ 130.623948][ T7425] overlayfs: failed to resolve './bus': -2 [ 130.638290][ T7405] loop5: detected capacity change from 0 to 8192 [ 130.663274][ T7405] Dev loop5: unable to read RDB block 8 [ 130.663341][ T7405] loop5: unable to read partition table [ 130.663399][ T7405] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 130.731824][ T4704] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.768964][ T7434] loop1: detected capacity change from 0 to 256 [ 130.846661][ T7440] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 130.846950][ T4818] team_slave_0: entered promiscuous mode [ 130.846980][ T4818] team_slave_1: entered promiscuous mode [ 130.849835][ T7440] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 130.853615][ T7442] loop5: detected capacity change from 0 to 512 [ 130.890276][ T7443] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 130.928657][ T7442] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.939415][ T7434] FAT-fs (loop1): Directory bread(block 64) failed [ 130.939449][ T7434] FAT-fs (loop1): Directory bread(block 65) failed [ 130.939482][ T7434] FAT-fs (loop1): Directory bread(block 66) failed [ 130.939502][ T7434] FAT-fs (loop1): Directory bread(block 67) failed [ 130.939529][ T7434] FAT-fs (loop1): Directory bread(block 68) failed [ 130.939544][ T7434] FAT-fs (loop1): Directory bread(block 69) failed [ 130.939570][ T7434] FAT-fs (loop1): Directory bread(block 70) failed [ 130.939584][ T7434] FAT-fs (loop1): Directory bread(block 71) failed [ 130.939609][ T7434] FAT-fs (loop1): Directory bread(block 72) failed [ 130.939623][ T7434] FAT-fs (loop1): Directory bread(block 73) failed [ 130.941809][ T7434] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 130.958110][ T4887] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 131.205379][ T4706] Bluetooth: hci2: command tx timeout [ 131.332256][ T4887] usb 1-1: Using ep0 maxpacket: 16 [ 131.333345][ T4887] usb 1-1: config index 0 descriptor too short (expected 65532, got 18) [ 131.333361][ T4887] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 131.333370][ T4887] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 131.334710][ T4887] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 131.334724][ T4887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.334733][ T4887] usb 1-1: Product: syz [ 131.334740][ T4887] usb 1-1: Manufacturer: syz [ 131.334746][ T4887] usb 1-1: SerialNumber: syz [ 131.338053][ T4887] r8152-cfgselector 1-1: Unknown version 0x0000 [ 131.338066][ T4887] r8152-cfgselector 1-1: config 0 descriptor?? [ 131.546643][ T7427] overlayfs: failed to resolve './file0': -2 [ 131.552874][ T4887] r8152-cfgselector 1-1: Unknown version 0x0000 [ 131.553585][ T4887] r8152-cfgselector 1-1: No union descriptors [ 131.572069][ T4887] r8152-cfgselector 1-1: USB disconnect, device number 4 [ 131.654064][ T7113] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.146804][ T7482] loop5: detected capacity change from 0 to 2048 [ 133.157424][ T7482] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.170426][ T7484] netlink: 'syz.1.704': attribute type 4 has an invalid length. [ 133.204554][ T7484] netlink: 'syz.1.704': attribute type 4 has an invalid length. [ 133.282157][ T4706] Bluetooth: hci2: command tx timeout [ 133.303989][ T7488] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 133.304659][ T7488] EXT4-fs (loop5): Remounting filesystem read-only [ 133.373652][ T7496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.373830][ T7496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.500967][ T7113] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.828765][ T7520] netlink: 'syz.1.714': attribute type 3 has an invalid length. [ 133.828794][ T7520] netlink: 4 bytes leftover after parsing attributes in process `syz.1.714'. [ 133.829127][ T7520] netlink: 28 bytes leftover after parsing attributes in process `syz.1.714'. [ 135.297528][ T7550] netlink: 'syz.3.719': attribute type 1 has an invalid length. [ 135.582813][ T7546] tmpfs: Bad value for 'mpol' [ 135.699873][ T7554] netlink: 4 bytes leftover after parsing attributes in process `syz.3.719'. [ 135.701822][ T1247] bond0 (unregistering): Released all slaves [ 135.752616][ T7555] netlink: 32 bytes leftover after parsing attributes in process `syz.3.719'. [ 135.759095][ T7557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.774676][ T7550] 8021q: adding VLAN 0 to HW filter on device bond1 [ 135.780266][ T7557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.781201][ T7557] overlayfs: failed to resolve './file0': -2 [ 136.220629][ T7569] loop5: detected capacity change from 0 to 2048 [ 136.262615][ T7569] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.326638][ T7576] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 136.330605][ T7576] EXT4-fs (loop5): Remounting filesystem read-only [ 136.388339][ T7113] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.408890][ T7566] loop3: detected capacity change from 0 to 512 [ 136.443448][ T7579] loop5: detected capacity change from 0 to 128 [ 136.454724][ T7579] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 136.499453][ T7113] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 137.556078][ T7605] loop1: detected capacity change from 0 to 8192 [ 137.622639][ T7610] loop5: detected capacity change from 0 to 4096 [ 137.623036][ T7610] EXT4-fs: Ignoring removed mblk_io_submit option [ 137.623083][ T7610] ext3: Bad value for 'debug_want_extra_isize' [ 137.650483][ T7610] overlay: Unknown parameter 'euid' [ 137.840458][ T7632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.843183][ T7632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.847270][ T7632] overlayfs: failed to resolve './file0': -2 [ 137.878052][ T7634] loop0: detected capacity change from 0 to 256 [ 137.889367][ T7634] FAT-fs (loop0): Directory bread(block 64) failed [ 137.889402][ T7634] FAT-fs (loop0): Directory bread(block 65) failed [ 137.889430][ T7634] FAT-fs (loop0): Directory bread(block 66) failed [ 137.889442][ T7634] FAT-fs (loop0): Directory bread(block 67) failed [ 137.889463][ T7634] FAT-fs (loop0): Directory bread(block 68) failed [ 137.889474][ T7634] FAT-fs (loop0): Directory bread(block 69) failed [ 137.889501][ T7634] FAT-fs (loop0): Directory bread(block 70) failed [ 137.889514][ T7634] FAT-fs (loop0): Directory bread(block 71) failed [ 137.889539][ T7634] FAT-fs (loop0): Directory bread(block 72) failed [ 137.889549][ T7634] FAT-fs (loop0): Directory bread(block 73) failed [ 137.895607][ T7634] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 138.858283][ T7666] loop1: detected capacity change from 0 to 4096 [ 138.861456][ T7666] EXT4-fs: Ignoring removed mblk_io_submit option [ 138.861535][ T7666] ext3: Bad value for 'debug_want_extra_isize' [ 138.885686][ T7666] overlay: Unknown parameter 'euid' [ 139.240432][ T7686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.240634][ T7686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.245700][ T7686] overlayfs: failed to resolve './file0': -2 [ 139.276045][ T7695] loop1: detected capacity change from 0 to 256 [ 139.289547][ T7695] FAT-fs (loop1): Directory bread(block 64) failed [ 139.289580][ T7695] FAT-fs (loop1): Directory bread(block 65) failed [ 139.289606][ T7695] FAT-fs (loop1): Directory bread(block 66) failed [ 139.289618][ T7695] FAT-fs (loop1): Directory bread(block 67) failed [ 139.289640][ T7695] FAT-fs (loop1): Directory bread(block 68) failed [ 139.289651][ T7695] FAT-fs (loop1): Directory bread(block 69) failed [ 139.289673][ T7695] FAT-fs (loop1): Directory bread(block 70) failed [ 139.289684][ T7695] FAT-fs (loop1): Directory bread(block 71) failed [ 139.289705][ T7695] FAT-fs (loop1): Directory bread(block 72) failed [ 139.289715][ T7695] FAT-fs (loop1): Directory bread(block 73) failed [ 139.297035][ T7695] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 140.001888][ T7719] loop0: detected capacity change from 0 to 4096 [ 140.005592][ T7719] EXT4-fs: Ignoring removed mblk_io_submit option [ 140.005694][ T7719] ext3: Bad value for 'debug_want_extra_isize' [ 140.079084][ T7719] overlay: Unknown parameter 'euid' [ 140.205709][ T7732] netlink: 12 bytes leftover after parsing attributes in process `syz.1.766'. [ 140.205738][ T7732] netlink: 8 bytes leftover after parsing attributes in process `syz.1.766'. [ 140.240765][ T7735] loop0: detected capacity change from 0 to 1024 [ 140.286267][ T7735] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.376128][ T4714] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.889534][ T7793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.891273][ T7793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.895413][ T7793] overlayfs: failed to resolve './file0': -2 [ 141.579587][ T7804] loop1: detected capacity change from 0 to 4096 [ 141.582175][ T7804] EXT4-fs: Ignoring removed mblk_io_submit option [ 141.582223][ T7804] ext3: Bad value for 'debug_want_extra_isize' [ 141.586737][ T7804] overlay: Unknown parameter 'euid' [ 141.728261][ T7811] loop3: detected capacity change from 0 to 1024 [ 141.759954][ T7811] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.797360][ T4713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.904796][ T7822] netlink: 84 bytes leftover after parsing attributes in process `syz.1.782'. [ 141.966088][ T7828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.159684][ T7836] loop0: detected capacity change from 0 to 4096 [ 142.160068][ T7836] EXT4-fs: Ignoring removed mblk_io_submit option [ 142.160134][ T7836] ext3: Bad value for 'debug_want_extra_isize' [ 142.175042][ T7834] loop5: detected capacity change from 0 to 128 [ 142.178860][ T7834] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 142.197671][ T7836] overlay: Unknown parameter 'euid' [ 142.501978][ T7845] netlink: 4 bytes leftover after parsing attributes in process `syz.3.790'. [ 142.531640][ T24] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 142.889704][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 142.894891][ T24] usb 1-1: config index 0 descriptor too short (expected 65532, got 18) [ 142.897291][ T24] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 142.897324][ T24] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 142.902779][ T24] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 142.904595][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.909545][ T24] usb 1-1: Product: syz [ 142.909579][ T24] usb 1-1: Manufacturer: syz [ 142.909595][ T24] usb 1-1: SerialNumber: syz [ 142.914668][ T24] r8152-cfgselector 1-1: Unknown version 0x0000 [ 142.914694][ T24] r8152-cfgselector 1-1: config 0 descriptor?? [ 142.969863][ T7855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.972141][ T7855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.977691][ T7855] loop5: detected capacity change from 0 to 256 [ 143.013541][ T7860] netlink: 84 bytes leftover after parsing attributes in process `syz.1.796'. [ 143.033996][ T7855] FAT-fs (loop5): Directory bread(block 64) failed [ 143.034032][ T7855] FAT-fs (loop5): Directory bread(block 65) failed [ 143.034056][ T7855] FAT-fs (loop5): Directory bread(block 66) failed [ 143.034067][ T7855] FAT-fs (loop5): Directory bread(block 67) failed [ 143.034089][ T7855] FAT-fs (loop5): Directory bread(block 68) failed [ 143.034099][ T7855] FAT-fs (loop5): Directory bread(block 69) failed [ 143.034120][ T7855] FAT-fs (loop5): Directory bread(block 70) failed [ 143.034131][ T7855] FAT-fs (loop5): Directory bread(block 71) failed [ 143.034151][ T7855] FAT-fs (loop5): Directory bread(block 72) failed [ 143.034162][ T7855] FAT-fs (loop5): Directory bread(block 73) failed [ 143.038420][ T7855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.038592][ T7855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.259867][ T7843] overlayfs: failed to resolve './file0': -2 [ 143.297761][ T7863] loop1: detected capacity change from 0 to 256 [ 143.399942][ T24] r8152-cfgselector 1-1: Unknown version 0x0000 [ 143.400057][ T24] r8152-cfgselector 1-1: No union descriptors [ 143.404570][ T24] r8152-cfgselector 1-1: USB disconnect, device number 5 [ 143.415290][ T7863] FAT-fs (loop1): Directory bread(block 64) failed [ 143.415328][ T7863] FAT-fs (loop1): Directory bread(block 65) failed [ 143.415383][ T7863] FAT-fs (loop1): Directory bread(block 66) failed [ 143.415401][ T7863] FAT-fs (loop1): Directory bread(block 67) failed [ 143.415430][ T7863] FAT-fs (loop1): Directory bread(block 68) failed [ 143.415446][ T7863] FAT-fs (loop1): Directory bread(block 69) failed [ 143.415472][ T7863] FAT-fs (loop1): Directory bread(block 70) failed [ 143.415487][ T7863] FAT-fs (loop1): Directory bread(block 71) failed [ 143.415521][ T7863] FAT-fs (loop1): Directory bread(block 72) failed [ 143.415537][ T7863] FAT-fs (loop1): Directory bread(block 73) failed [ 143.417741][ T7863] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 143.842675][ T7875] loop5: detected capacity change from 0 to 4096 [ 143.846309][ T7875] EXT4-fs: Ignoring removed mblk_io_submit option [ 143.848148][ T7875] ext3: Bad value for 'debug_want_extra_isize' [ 143.853357][ T7875] overlay: Unknown parameter 'euid' [ 144.021089][ T7879] netlink: 'syz.1.802': attribute type 1 has an invalid length. [ 144.029546][ T7879] 8021q: adding VLAN 0 to HW filter on device bond3 [ 144.100340][ T7879] veth3: entered promiscuous mode [ 144.102887][ T7879] bond3: (slave veth3): Enslaving as an active interface with a down link [ 144.217654][ T7889] ip6t_srh: unknown srh invflags 4000 [ 144.413418][ T7897] netlink: 84 bytes leftover after parsing attributes in process `syz.3.807'. [ 144.738973][ T7901] loop3: detected capacity change from 0 to 2048 [ 144.755169][ T7901] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.762206][ T7901] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 144.763142][ T7901] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 144.763167][ T7901] EXT4-fs (loop3): This should not happen!! Data will be lost [ 144.763167][ T7901] [ 144.763179][ T7901] EXT4-fs (loop3): Total free blocks count 0 [ 144.763190][ T7901] EXT4-fs (loop3): Free/Dirty block details [ 144.763202][ T7901] EXT4-fs (loop3): free_blocks=4096 [ 144.763213][ T7901] EXT4-fs (loop3): dirty_blocks=16 [ 144.763223][ T7901] EXT4-fs (loop3): Block reservation details [ 144.763233][ T7901] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 145.239948][ T7914] loop0: detected capacity change from 0 to 256 [ 145.248614][ T7913] loop5: detected capacity change from 0 to 4096 [ 145.250331][ T7913] EXT4-fs: Ignoring removed mblk_io_submit option [ 145.253152][ T7913] ext3: Bad value for 'debug_want_extra_isize' [ 145.269516][ T7914] FAT-fs (loop0): Directory bread(block 64) failed [ 145.269551][ T7914] FAT-fs (loop0): Directory bread(block 65) failed [ 145.269576][ T7914] FAT-fs (loop0): Directory bread(block 66) failed [ 145.269587][ T7914] FAT-fs (loop0): Directory bread(block 67) failed [ 145.269609][ T7914] FAT-fs (loop0): Directory bread(block 68) failed [ 145.269626][ T7914] FAT-fs (loop0): Directory bread(block 69) failed [ 145.269648][ T7914] FAT-fs (loop0): Directory bread(block 70) failed [ 145.269658][ T7914] FAT-fs (loop0): Directory bread(block 71) failed [ 145.269678][ T7914] FAT-fs (loop0): Directory bread(block 72) failed [ 145.269689][ T7914] FAT-fs (loop0): Directory bread(block 73) failed [ 145.275921][ T7913] overlay: Unknown parameter 'euid' [ 145.277969][ T7914] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 145.359559][ T7922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.361784][ T7922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.364982][ T7922] overlayfs: failed to resolve './file0': -2 [ 145.609844][ T4713] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 145.612950][ T4713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.657944][ T7929] overlayfs: failed to clone upperpath [ 145.677288][ T7934] fuse: Bad value for 'fd' [ 145.972255][ T7942] netlink: 84 bytes leftover after parsing attributes in process `syz.5.822'. [ 145.974677][ T7942] FAULT_INJECTION: forcing a failure. [ 145.974677][ T7942] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 145.978242][ T7942] CPU: 1 UID: 0 PID: 7942 Comm: syz.5.822 Tainted: G L syzkaller #0 PREEMPT [ 145.978265][ T7942] Tainted: [L]=SOFTLOCKUP [ 145.978271][ T7942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 145.978279][ T7942] Call trace: [ 145.978283][ T7942] show_stack+0x2c/0x3c (C) [ 145.978311][ T7942] __dump_stack+0x30/0x40 [ 145.978323][ T7942] dump_stack_lvl+0xd8/0x12c [ 145.978334][ T7942] dump_stack+0x1c/0x28 [ 145.978343][ T7942] should_fail_ex+0x414/0x588 [ 145.978352][ T7942] should_fail_alloc_page+0xec/0x10c [ 145.978361][ T7942] prepare_alloc_pages+0x198/0x4b0 [ 145.978370][ T7942] __alloc_frozen_pages_noprof+0x134/0x31c [ 145.978379][ T7942] alloc_pages_mpol+0x1ec/0x464 [ 145.978389][ T7942] folio_alloc_mpol_noprof+0x4c/0x248 [ 145.978397][ T7942] vma_alloc_folio_noprof+0xfc/0x1d8 [ 145.978406][ T7942] vma_alloc_zeroed_movable_folio+0x70/0x84 [ 145.978416][ T7942] folio_prealloc+0x3c/0x1b0 [ 145.978424][ T7942] do_pte_missing+0x1310/0x28a4 [ 145.978432][ T7942] handle_mm_fault+0x1558/0x2454 [ 145.978440][ T7942] do_page_fault+0x768/0xb64 [ 145.978448][ T7942] do_translation_fault+0xc4/0x114 [ 145.978458][ T7942] do_mem_abort+0x70/0x190 [ 145.978466][ T7942] el0_da+0x78/0x254 [ 145.978474][ T7942] el0t_64_sync_handler+0x10c/0x148 [ 145.978482][ T7942] el0t_64_sync+0x198/0x19c [ 145.994884][ T7940] netlink: 84 bytes leftover after parsing attributes in process `syz.3.821'. [ 146.007273][ T7942] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 146.199688][ T7948] EXT4-fs: Ignoring removed mblk_io_submit option [ 146.205763][ T7948] ext3: Bad value for 'debug_want_extra_isize' [ 146.234401][ T7948] overlay: Unknown parameter 'euid' [ 146.670409][ T4804] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 146.820994][ T4804] usb 1-1: Using ep0 maxpacket: 16 [ 146.934958][ T4804] usb 1-1: config index 0 descriptor too short (expected 65532, got 18) [ 146.936667][ T4804] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 146.938363][ T4804] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 146.942516][ T4804] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 146.944495][ T4804] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.946060][ T4804] usb 1-1: Product: syz [ 146.946080][ T4804] usb 1-1: Manufacturer: syz [ 146.946094][ T4804] usb 1-1: SerialNumber: syz [ 146.959131][ T4804] r8152-cfgselector 1-1: Unknown version 0x0000 [ 146.959162][ T4804] r8152-cfgselector 1-1: config 0 descriptor?? [ 147.185923][ T7971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.186672][ T7971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.188387][ T7971] overlayfs: failed to resolve './file0': -2 [ 147.786567][ T7983] netlink: 4 bytes leftover after parsing attributes in process `syz.5.837'. [ 147.789043][ T7983] bridge1: entered promiscuous mode [ 147.789077][ T7983] bridge1: entered allmulticast mode [ 147.841573][ T7986] set_capacity_and_notify: 1 callbacks suppressed [ 147.841611][ T7986] loop3: detected capacity change from 0 to 4096 [ 147.841930][ T7986] EXT4-fs: Ignoring removed mblk_io_submit option [ 147.841976][ T7986] ext3: Bad value for 'debug_want_extra_isize' [ 147.843081][ T7986] overlay: Unknown parameter 'euid' [ 148.145946][ T7988] netlink: 84 bytes leftover after parsing attributes in process `syz.5.839'. [ 148.176984][ T7993] netlink: 84 bytes leftover after parsing attributes in process `syz.3.841'. [ 148.177306][ T7993] FAULT_INJECTION: forcing a failure. [ 148.177306][ T7993] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 148.177322][ T7993] CPU: 0 UID: 0 PID: 7993 Comm: syz.3.841 Tainted: G L syzkaller #0 PREEMPT [ 148.177334][ T7993] Tainted: [L]=SOFTLOCKUP [ 148.177337][ T7993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 148.177342][ T7993] Call trace: [ 148.177345][ T7993] show_stack+0x2c/0x3c (C) [ 148.177363][ T7993] __dump_stack+0x30/0x40 [ 148.177374][ T7993] dump_stack_lvl+0xd8/0x12c [ 148.177383][ T7993] dump_stack+0x1c/0x28 [ 148.177392][ T7993] should_fail_ex+0x414/0x588 [ 148.177402][ T7993] should_fail+0x14/0x24 [ 148.177410][ T7993] should_fail_usercopy+0x20/0x30 [ 148.177419][ T7993] _inline_copy_from_user+0x40/0x180 [ 148.177427][ T7993] move_addr_to_kernel+0x88/0x168 [ 148.177437][ T7993] __sys_sendto+0x1b4/0x338 [ 148.177447][ T7993] __arm64_sys_sendto+0xd8/0xf8 [ 148.177457][ T7993] invoke_syscall+0x98/0x244 [ 148.177466][ T7993] el0_svc_common+0xe8/0x23c [ 148.177476][ T7993] do_el0_svc+0x48/0x58 [ 148.177492][ T7993] el0_svc+0x64/0x260 [ 148.177500][ T7993] el0t_64_sync_handler+0x48/0x148 [ 148.177508][ T7993] el0t_64_sync+0x198/0x19c [ 148.229358][ T7995] netlink: 24 bytes leftover after parsing attributes in process `syz.5.842'. [ 148.244025][ T7995] netlink: 84 bytes leftover after parsing attributes in process `syz.5.842'. [ 148.255225][ T7997] loop3: detected capacity change from 0 to 512 [ 148.274770][ T7997] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.277699][ T7997] Injecting memory failure for pfn 0x13b10a at process virtual address 0x2050a000 [ 148.293305][ T7997] Memory failure: 0x13b10a: recovery action for clean LRU page: Recovered [ 148.348961][ T4713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.384936][ T8005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.388690][ T8005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.394763][ T8005] overlayfs: failed to resolve './file0': -2 [ 148.577666][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 149.046340][ T8022] loop1: detected capacity change from 0 to 4096 [ 149.059521][ T8022] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.452281][ T4811] r8152-cfgselector 1-1: USB disconnect, device number 6 [ 149.514540][ T8034] loop0: detected capacity change from 0 to 1024 [ 149.527376][ T8034] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.566812][ T4714] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.594534][ T8038] netlink: 84 bytes leftover after parsing attributes in process `syz.5.855'. [ 149.624290][ T8040] netlink: 84 bytes leftover after parsing attributes in process `syz.0.856'. [ 149.686211][ T8042] loop5: detected capacity change from 0 to 256 [ 149.707413][ T8042] FAT-fs (loop5): Directory bread(block 64) failed [ 149.707448][ T8042] FAT-fs (loop5): Directory bread(block 65) failed [ 149.707493][ T8042] FAT-fs (loop5): Directory bread(block 66) failed [ 149.707512][ T8042] FAT-fs (loop5): Directory bread(block 67) failed [ 149.707542][ T8042] FAT-fs (loop5): Directory bread(block 68) failed [ 149.707558][ T8042] FAT-fs (loop5): Directory bread(block 69) failed [ 149.707586][ T8042] FAT-fs (loop5): Directory bread(block 70) failed [ 149.707601][ T8042] FAT-fs (loop5): Directory bread(block 71) failed [ 149.707634][ T8042] FAT-fs (loop5): Directory bread(block 72) failed [ 149.707649][ T8042] FAT-fs (loop5): Directory bread(block 73) failed [ 149.721092][ T8042] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 150.143136][ T4704] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.234518][ T8053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.234725][ T8053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.242276][ T8053] overlayfs: failed to resolve './file0': -2 [ 150.262373][ T8054] nfs: Unknown parameter 'Õ' [ 150.654707][ T8058] loop5: detected capacity change from 0 to 4096 [ 150.655054][ T8058] EXT4-fs: Ignoring removed mblk_io_submit option [ 150.655118][ T8058] ext3: Bad value for 'debug_want_extra_isize' [ 150.704623][ T8058] overlay: Unknown parameter 'euid' [ 150.714489][ T8064] Injecting memory failure for pfn 0x13bbb6 at process virtual address 0x20ffe000 [ 150.778856][ T8064] Memory failure: 0x13bbb6: Sending SIGBUS to syz.0.865:8064 due to hardware memory corruption [ 150.778924][ T8064] Memory failure: 0x13bbb6: recovery action for dirty LRU page: Recovered [ 150.786330][ T8074] overlayfs: conflicting lowerdir path [ 150.792790][ T8064] Injecting memory failure for pfn 0x21cf5a at process virtual address 0x20fff000 [ 150.794774][ T8064] Memory failure: 0x21cf5a: unhandlable page. [ 150.795271][ T8064] Memory failure: 0x21cf5a: recovery action for get hwpoison page: Ignored [ 150.876647][ T8088] fuse: Bad value for 'fd' [ 151.026747][ T8098] netlink: 8 bytes leftover after parsing attributes in process `syz.5.868'. [ 151.351661][ T8111] loop5: detected capacity change from 0 to 1024 [ 151.352018][ T8111] ext4: Unknown parameter 'uid' [ 151.529881][ T8117] Invalid ELF header magic: != ELF [ 151.656225][ T14] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 152.336563][ T8140] loop3: detected capacity change from 0 to 4096 [ 152.336933][ T8140] EXT4-fs: Ignoring removed mblk_io_submit option [ 152.340142][ T8140] ext3: Bad value for 'debug_want_extra_isize' [ 152.434680][ T8140] overlay: Unknown parameter 'euid' [ 153.296800][ T8166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.296996][ T8166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.306988][ T8166] overlayfs: failed to resolve './file0': -2 [ 154.068656][ T8199] loop3: detected capacity change from 0 to 256 [ 154.090196][ T8199] FAT-fs (loop3): Directory bread(block 64) failed [ 154.090224][ T8199] FAT-fs (loop3): Directory bread(block 65) failed [ 154.099882][ T8199] FAT-fs (loop3): Directory bread(block 66) failed [ 154.099922][ T8199] FAT-fs (loop3): Directory bread(block 67) failed [ 154.099961][ T8199] FAT-fs (loop3): Directory bread(block 68) failed [ 154.099977][ T8199] FAT-fs (loop3): Directory bread(block 69) failed [ 154.100002][ T8199] FAT-fs (loop3): Directory bread(block 70) failed [ 154.100014][ T8199] FAT-fs (loop3): Directory bread(block 71) failed [ 154.100038][ T8199] FAT-fs (loop3): Directory bread(block 72) failed [ 154.100049][ T8199] FAT-fs (loop3): Directory bread(block 73) failed [ 154.110526][ T8199] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 154.504437][ T8203] loop1: detected capacity change from 0 to 4096 [ 154.506303][ T8203] EXT4-fs: Ignoring removed mblk_io_submit option [ 154.507760][ T8203] ext3: Bad value for 'debug_want_extra_isize' [ 154.573399][ T8203] overlay: Unknown parameter 'euid' [ 154.998034][ T8220] overlayfs: failed to clone upperpath [ 155.081242][ T8228] overlayfs: failed to resolve './file0': -2 [ 155.085061][ T8226] netlink: 84 bytes leftover after parsing attributes in process `syz.0.899'. [ 155.156537][ T8230] mmap: syz.1.896 (8230) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 155.198476][ T8232] loop0: detected capacity change from 0 to 8192 [ 155.250826][ T4337] loop0: p1 < > p3[EZD] [ 155.252328][ T4337] loop0: p3 start 3238002688 is beyond EOD, truncated [ 155.255944][ T8232] loop0: p1 < > p3[EZD] [ 155.257091][ T8232] loop0: p3 start 3238002688 is beyond EOD, truncated [ 155.322675][ T6747] udevd[6747]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 155.329232][ T6747] udevd[6747]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 155.414683][ T8239] loop0: detected capacity change from 0 to 4096 [ 155.420827][ T8239] EXT4-fs: Ignoring removed mblk_io_submit option [ 155.420893][ T8239] ext3: Bad value for 'debug_want_extra_isize' [ 155.425284][ T8239] overlay: Unknown parameter 'euid' [ 155.482648][ T8241] loop0: detected capacity change from 0 to 256 [ 155.495186][ T8241] FAT-fs (loop0): Directory bread(block 64) failed [ 155.495214][ T8241] FAT-fs (loop0): Directory bread(block 65) failed [ 155.495238][ T8241] FAT-fs (loop0): Directory bread(block 66) failed [ 155.495250][ T8241] FAT-fs (loop0): Directory bread(block 67) failed [ 155.495272][ T8241] FAT-fs (loop0): Directory bread(block 68) failed [ 155.495283][ T8241] FAT-fs (loop0): Directory bread(block 69) failed [ 155.495304][ T8241] FAT-fs (loop0): Directory bread(block 70) failed [ 155.495315][ T8241] FAT-fs (loop0): Directory bread(block 71) failed [ 155.495335][ T8241] FAT-fs (loop0): Directory bread(block 72) failed [ 155.495345][ T8241] FAT-fs (loop0): Directory bread(block 73) failed [ 155.497499][ T8241] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 155.915225][ T1247] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.985716][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 155.988954][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 155.991099][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 155.993263][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 155.995326][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 156.008325][ T1247] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.145365][ T1247] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.280219][ T1247] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.361448][ T8250] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.367174][ T8250] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.367274][ T8250] bridge_slave_0: entered allmulticast mode [ 156.367721][ T8250] bridge_slave_0: entered promiscuous mode [ 156.368432][ T8250] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.368474][ T8250] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.368554][ T8250] bridge_slave_1: entered allmulticast mode [ 156.368992][ T8250] bridge_slave_1: entered promiscuous mode [ 156.386268][ T8250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.389507][ T8250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.399651][ T8250] team0: Port device team_slave_0 added [ 156.401550][ T8250] team0: Port device team_slave_1 added [ 156.408132][ T8250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.409668][ T8250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 156.414382][ T8250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.416987][ T8250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.418288][ T8250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 156.423685][ T8250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.438869][ T8250] hsr_slave_0: entered promiscuous mode [ 156.440473][ T8250] hsr_slave_1: entered promiscuous mode [ 156.441840][ T8250] debugfs: 'hsr0' already exists in 'hsr' [ 156.442439][ T8277] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.444890][ T8250] Cannot create hsr debugfs directory [ 156.999285][ T1247] bridge_slave_1: left allmulticast mode [ 156.999324][ T1247] bridge_slave_1: left promiscuous mode [ 156.999417][ T1247] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.004236][ T1247] bridge_slave_0: left allmulticast mode [ 157.004274][ T1247] bridge_slave_0: left promiscuous mode [ 157.004342][ T1247] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.228551][ T1247] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.252161][ T1247] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.271109][ T1247] bond0 (unregistering): Released all slaves [ 157.274590][ T4395] 8021q: adding VLAN 0 to HW filter on device eth4 [ 157.281513][ T8299] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 157.352763][ T8302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.352965][ T8302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.357170][ T8302] overlayfs: failed to resolve './file0': -2 [ 157.602975][ T4395] 8021q: adding VLAN 0 to HW filter on device eth5 [ 157.773469][ T8329] overlayfs: failed to clone upperpath [ 157.798726][ T1247] hsr_slave_0: left promiscuous mode [ 157.806653][ T1247] hsr_slave_1: left promiscuous mode [ 157.806963][ T1247] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.806975][ T1247] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.808124][ T1247] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.808138][ T1247] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.820464][ T1247] veth1_macvtap: left promiscuous mode [ 157.820507][ T1247] veth0_macvtap: left promiscuous mode [ 157.820604][ T1247] veth1_vlan: left promiscuous mode [ 157.820628][ T1247] veth0_vlan: left promiscuous mode [ 158.099970][ T4706] Bluetooth: hci2: command tx timeout [ 158.377358][ T1247] team0 (unregistering): Port device team_slave_1 removed [ 158.382311][ T1247] team0 (unregistering): Port device team_slave_0 removed [ 158.740078][ T8359] netlink: 'syz.2.927': attribute type 1 has an invalid length. [ 158.781191][ T8359] 8021q: adding VLAN 0 to HW filter on device bond2 [ 158.783973][ T8359] netlink: 28 bytes leftover after parsing attributes in process `syz.2.927'. [ 158.814015][ T8360] fuse: fd is not a fuse device [ 158.985870][ T8390] netlink: 56 bytes leftover after parsing attributes in process `syz.1.931'. [ 158.987786][ T8390] netlink: 12 bytes leftover after parsing attributes in process `syz.1.931'. [ 158.991987][ T8390] netlink: 31 bytes leftover after parsing attributes in process `syz.1.931'. [ 158.993935][ T8390] netlink: 'syz.1.931': attribute type 2 has an invalid length. [ 158.996193][ T8390] netlink: 31 bytes leftover after parsing attributes in process `syz.1.931'. [ 159.013982][ T8250] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 159.032619][ T8250] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 159.034568][ T8250] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 159.037391][ T8250] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 159.037976][ T8250] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 159.040340][ T8250] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 159.040624][ T8250] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 159.102060][ T8250] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 159.133380][ T8250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.604857][ T8250] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.608639][ T7536] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.608699][ T7536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.617887][ T7370] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.617935][ T7370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.622458][ T1247] IPVS: stop unused estimator thread 0... [ 159.817158][ T8250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.881681][ T8431] overlayfs: failed to clone upperpath [ 159.909189][ T4804] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 159.977523][ T8435] loop1: detected capacity change from 0 to 256 [ 160.005816][ T8435] FAT-fs (loop1): Directory bread(block 64) failed [ 160.005855][ T8435] FAT-fs (loop1): Directory bread(block 65) failed [ 160.005883][ T8435] FAT-fs (loop1): Directory bread(block 66) failed [ 160.005895][ T8435] FAT-fs (loop1): Directory bread(block 67) failed [ 160.005916][ T8435] FAT-fs (loop1): Directory bread(block 68) failed [ 160.005927][ T8435] FAT-fs (loop1): Directory bread(block 69) failed [ 160.005948][ T8435] FAT-fs (loop1): Directory bread(block 70) failed [ 160.005958][ T8435] FAT-fs (loop1): Directory bread(block 71) failed [ 160.005979][ T8435] FAT-fs (loop1): Directory bread(block 72) failed [ 160.005989][ T8435] FAT-fs (loop1): Directory bread(block 73) failed [ 160.008138][ T8435] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 160.058948][ T4804] usb 1-1: Using ep0 maxpacket: 16 [ 160.061293][ T4804] usb 1-1: config index 0 descriptor too short (expected 65532, got 18) [ 160.061329][ T4804] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 160.061354][ T4804] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 160.068787][ T4804] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 160.068835][ T4804] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.068856][ T4804] usb 1-1: Product: syz [ 160.068868][ T4804] usb 1-1: Manufacturer: syz [ 160.068880][ T4804] usb 1-1: SerialNumber: syz [ 160.086342][ T4804] r8152-cfgselector 1-1: Unknown version 0x0000 [ 160.088011][ T4804] r8152-cfgselector 1-1: config 0 descriptor?? [ 160.120131][ T8250] veth0_vlan: entered promiscuous mode [ 160.124176][ T8250] veth1_vlan: entered promiscuous mode [ 160.158907][ T4706] Bluetooth: hci2: command tx timeout [ 160.352789][ T4804] r8152-cfgselector 1-1: Unknown version 0x0000 [ 160.355133][ T4804] r8152-cfgselector 1-1: No union descriptors [ 160.367730][ T8250] veth0_macvtap: entered promiscuous mode [ 160.371946][ T8250] veth1_macvtap: entered promiscuous mode [ 160.383753][ T8250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.387438][ T8250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.391016][ T1440] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.391106][ T1440] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.391127][ T1440] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.391141][ T1440] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.442575][ T1247] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.442606][ T1247] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.461817][ T1247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.461844][ T1247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.551300][ T8446] loop5: detected capacity change from 0 to 2048 [ 160.551682][ T8446] EXT4-fs: Invalid want_extra_isize 5 [ 160.558063][ T8417] overlayfs: failed to resolve './file0': -2 [ 160.571819][ T4804] r8152-cfgselector 1-1: USB disconnect, device number 7 [ 160.746106][ T8452] loop5: detected capacity change from 0 to 4096 [ 160.759099][ T8452] EXT4-fs: Ignoring removed mblk_io_submit option [ 160.759168][ T8452] ext3: Bad value for 'debug_want_extra_isize' [ 160.791453][ T8452] overlay: Unknown parameter 'euid' [ 161.402878][ T8480] overlayfs: missing 'lowerdir' [ 161.702499][ T8495] loop3: detected capacity change from 0 to 256 [ 161.722563][ T8495] FAT-fs (loop3): Directory bread(block 64) failed [ 161.724571][ T8495] FAT-fs (loop3): Directory bread(block 65) failed [ 161.726685][ T8495] FAT-fs (loop3): Directory bread(block 66) failed [ 161.728190][ T8495] FAT-fs (loop3): Directory bread(block 67) failed [ 161.731131][ T8495] FAT-fs (loop3): Directory bread(block 68) failed [ 161.732599][ T8495] FAT-fs (loop3): Directory bread(block 69) failed [ 161.733997][ T8495] FAT-fs (loop3): Directory bread(block 70) failed [ 161.735385][ T8495] FAT-fs (loop3): Directory bread(block 71) failed [ 161.736800][ T8495] FAT-fs (loop3): Directory bread(block 72) failed [ 161.738156][ T8495] FAT-fs (loop3): Directory bread(block 73) failed [ 161.742258][ T8495] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 162.100461][ T8484] overlayfs: failed to clone upperpath [ 162.238561][ T4706] Bluetooth: hci2: command tx timeout [ 162.253350][ T8508] loop0: detected capacity change from 0 to 4096 [ 162.255930][ T8508] EXT4-fs: Ignoring removed mblk_io_submit option [ 162.255996][ T8508] ext3: Bad value for 'debug_want_extra_isize' [ 162.287344][ T8508] overlay: Unknown parameter 'euid' [ 162.342190][ T8510] loop0: detected capacity change from 0 to 2048 [ 162.349413][ T8510] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 162.349447][ T8510] EXT4-fs (loop0): group descriptors corrupted! [ 162.521892][ T8516] netlink: 20 bytes leftover after parsing attributes in process `syz.5.958'. [ 162.521922][ T8516] netlink: 12 bytes leftover after parsing attributes in process `syz.5.958'. [ 162.586731][ T8523] netlink: 36 bytes leftover after parsing attributes in process `syz.3.960'. [ 162.668648][ T4804] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 162.720331][ T8538] loop5: detected capacity change from 0 to 4096 [ 162.720706][ T8538] EXT4-fs: Ignoring removed mblk_io_submit option [ 162.720928][ T8538] ext3: Bad value for 'debug_want_extra_isize' [ 162.727858][ T8538] overlay: Unknown parameter 'euid' [ 162.963920][ T8543] fuse: Bad value for 'fd' [ 162.978462][ T4804] usb 1-1: Using ep0 maxpacket: 16 [ 162.981089][ T4804] usb 1-1: config index 0 descriptor too short (expected 65532, got 18) [ 162.982899][ T4804] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 162.984594][ T4804] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 162.988275][ T4804] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 162.991128][ T4804] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.991157][ T4804] usb 1-1: Product: syz [ 162.991171][ T4804] usb 1-1: Manufacturer: syz [ 162.991184][ T4804] usb 1-1: SerialNumber: syz [ 163.001574][ T4804] r8152-cfgselector 1-1: Unknown version 0x0000 [ 163.001600][ T4804] r8152-cfgselector 1-1: config 0 descriptor?? [ 163.212781][ T4804] r8152-cfgselector 1-1: Unknown version 0x0000 [ 163.212929][ T4804] r8152-cfgselector 1-1: No union descriptors [ 163.434681][ T8514] overlayfs: failed to resolve './file0': -2 [ 163.441126][ T4797] r8152-cfgselector 1-1: USB disconnect, device number 8 [ 163.617915][ T8556] loop3: detected capacity change from 0 to 256 [ 163.642454][ T8556] FAT-fs (loop3): Directory bread(block 64) failed [ 163.644075][ T8556] FAT-fs (loop3): Directory bread(block 65) failed [ 163.645517][ T8556] FAT-fs (loop3): Directory bread(block 66) failed [ 163.646979][ T8556] FAT-fs (loop3): Directory bread(block 67) failed [ 163.648926][ T8556] FAT-fs (loop3): Directory bread(block 68) failed [ 163.651046][ T8556] FAT-fs (loop3): Directory bread(block 69) failed [ 163.651137][ T8556] FAT-fs (loop3): Directory bread(block 70) failed [ 163.651162][ T8556] FAT-fs (loop3): Directory bread(block 71) failed [ 163.651202][ T8556] FAT-fs (loop3): Directory bread(block 72) failed [ 163.651223][ T8556] FAT-fs (loop3): Directory bread(block 73) failed [ 163.653554][ T8556] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 164.301533][ T8573] overlayfs: failed to resolve './file0': -2 [ 164.320014][ T4706] Bluetooth: hci2: command tx timeout [ 164.685547][ T8590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.686609][ T8590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.690956][ T8590] overlayfs: failed to resolve './file0': -2 [ 164.716697][ T8594] overlayfs: failed to clone upperpath [ 164.876080][ T8606] overlayfs: failed to clone upperpath [ 165.101493][ T8618] Device name cannot be null; rc = [-22] [ 165.482935][ T4706] Bluetooth: hci4: link tx timeout [ 165.483055][ T4706] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 165.525096][ T8628] netlink: 104 bytes leftover after parsing attributes in process `syz.3.996'. [ 165.546869][ T8630] loop0: detected capacity change from 0 to 512 [ 165.557644][ T8630] EXT4-fs: inline encryption not supported [ 165.557682][ T8630] ext4: Bad value for 'jqfmt' [ 165.646388][ T4797] hid (null): unknown global tag 0xf8 [ 165.647731][ T4797] hid-generic 0B59:0006:0008.0002: unknown main item tag 0x5 [ 165.647788][ T4797] hid-generic 0B59:0006:0008.0002: unknown main item tag 0x1 [ 165.647801][ T4797] hid-generic 0B59:0006:0008.0002: unexpected long global item [ 165.647950][ T4797] hid-generic 0B59:0006:0008.0002: probe with driver hid-generic failed with error -22 [ 165.743341][ T8647] loop1: detected capacity change from 0 to 4096 [ 165.743693][ T8647] EXT4-fs: Ignoring removed mblk_io_submit option [ 165.743741][ T8647] ext3: Bad value for 'debug_want_extra_isize' [ 165.745092][ T8647] overlay: Unknown parameter 'euid' [ 165.867381][ T8657] cgroup: Invalid name [ 165.953408][ T8661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.957570][ T8661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.962142][ T8661] overlayfs: failed to resolve './file0': -2 [ 166.875329][ T8677] loop5: detected capacity change from 0 to 1024 [ 166.911900][ T8684] loop0: detected capacity change from 0 to 512 [ 166.923832][ T8677] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.924725][ T8684] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 166.926153][ T8682] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.930034][ T8684] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.956635][ T8677] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2860: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 166.956718][ T8677] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #11: comm syz.5.1011: missing EA_INODE flag [ 166.960076][ T4714] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.964885][ T8677] EXT4-fs (loop5): Remounting filesystem read-only [ 166.965523][ T8677] netlink: 'syz.5.1011': attribute type 8 has an invalid length. [ 167.005686][ T8250] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.518732][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 167 ** replaying previous printk message ** [ 167.569789][ T5552] Unable to handle kernel paging request at virtual address dfff80000000000b [ 167.569821][ T5552] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 167.569842][ T5552] Mem abort info: [ 167.569846][ T5552] ESR = 0x0000000096000005 [ 167.569852][ T5552] EC = 0x25: DABT (current EL), IL = 32 bits [ 167.569858][ T5552] SET = 0, FnV = 0 [ 167.569863][ T5552] EA = 0, S1PTW = 0 [ 167.569868][ T5552] FSC = 0x05: level 1 translation fault [ 167.569872][ T5552] Data abort info: [ 167.569875][ T5552] ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000 [ 167.569880][ T5552] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 167.569886][ T5552] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [ 167.569891][ T5552] [dfff80000000000b] address between user and kernel address ranges [ 167.569967][ T5552] Internal error: Oops: 0000000096000005 [#1] SMP [ 167.586052][ T5552] Modules linked in: [ 167.586868][ T5552] CPU: 1 UID: 0 PID: 5552 Comm: kbnepd bnep0 Tainted: G L syzkaller #0 PREEMPT [ 167.588830][ T5552] Tainted: [L]=SOFTLOCKUP [ 167.589677][ T5552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 167.591618][ T5552] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 167.593068][ T5552] pc : klist_put+0x50/0x118 [ 167.593990][ T5552] lr : klist_put+0x2c/0x118 [ 167.594872][ T5552] sp : ffff80009b3e77a0 [ 167.595651][ T5552] x29: ffff80009b3e77a0 x28: dfff800000000000 x27: 1fffe00019394005 [ 167.597087][ T5552] x26: ffff70001367cf04 x25: ffff0000d5618ce0 x24: 1fffe0001e7d5f0c [ 167.598544][ T5552] x23: dfff800000000000 x22: ffff0000d9d52758 x21: 0000000000000001 [ 167.599989][ T5552] x20: 0000000000000000 x19: ffff0000f3eaf860 x18: 1fffe00035c0cc20 [ 167.601581][ T5552] x17: ffff800084c9bcf4 x16: ffff80008246ef58 x15: ffff8000824a01dc [ 167.603094][ T5552] x14: ffff800080ec3fbc x13: 0000000000000001 x12: 0000000000000000 [ 167.604568][ T5552] x11: 0000000000000000 x10: 0000000000ff0100 x9 : 0000000000000000 [ 167.606064][ T5552] x8 : 000000000000000b x7 : 0000000000000000 x6 : ffff800080b63c5c [ 167.607573][ T5552] x5 : ffff0000d1069b70 x4 : 0000000000000008 x3 : ffff800080eb3e14 [ 167.609179][ T5552] x2 : 0000000000000001 x1 : ffff0000c9ca0000 x0 : 0000000000000058 [ 167.610700][ T5552] Call trace: [ 167.611352][ T5552] klist_put+0x50/0x118 (P) [ 167.612230][ T5552] klist_del+0x24/0x34 [ 167.613068][ T5552] device_del+0x180/0x710 [ 167.613914][ T5552] netdev_unregister_kobject+0x2b4/0x3ac [ 167.615001][ T5552] unregister_netdevice_many_notify+0x13c0/0x18d8 [ 167.616213][ T5552] unregister_netdevice_queue+0x270/0x308 [ 167.617376][ T5552] unregister_netdev+0x2c/0x70 [ 167.618310][ T5552] bnep_session+0x20f0/0x22c8 [ 167.619212][ T5552] kthread+0x2f8/0x3c8 [ 167.619999][ T5552] ret_from_fork+0x10/0x20 [ 167.620854][ T5552] Code: f9400268 927ff914 91016280 d343fc08 (38776908) [ 167.622206][ T5552] ---[ end trace 0000000000000000 ]--- [ 167.944749][ T5552] Kernel panic - not syncing: Oops: Fatal exception [ 167.946024][ T5552] SMP: stopping secondary CPUs [ 167.946957][ T5552] Kernel Offset: disabled [ 167.947776][ T5552] CPU features: 0x08000000,003c0008,27020501,5427fea7 [ 167.949121][ T5552] Memory Limit: none [ 168.266665][ T5552] Rebooting in 86400 seconds..