last executing test programs: 4m10.500590218s ago: executing program 3 (id=533): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xd0f, 0x470bd30, 0x25dfdbff, {0x60, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x1c, 0x0, 0x5, 0x0, 0xb, 0x3, 0x1}}, {0x6, 0x2, [0x2]}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000) 4m9.801739135s ago: executing program 3 (id=542): socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008072, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f000035d000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) 4m9.617565189s ago: executing program 3 (id=549): socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000028c0)={0x3c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004001}, 0x8000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x6, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r3, @ANYBLOB="00000000000000302bd6f000000000009500000000000000"], &(0x7f0000000d40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x60}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r6 = io_uring_setup(0x1f35, &(0x7f0000000040)={0x0, 0x2096c, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r6, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 4m7.960652129s ago: executing program 4 (id=557): write(0xffffffffffffffff, &(0x7f0000000000)="680000001800050602000000000000000a400000fe040001000000001400010020010db800a000000000000000000001080006000001000008000400010000000600150003000000200016800c0001001234567890abcdef05000800200000000500090003000000", 0x68) 4m7.819218522s ago: executing program 4 (id=560): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000180001000000000000000000020000000000000900000000060015000200000014001680060008800c"], 0x38}}, 0x0) 4m7.53075447s ago: executing program 4 (id=561): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000040)) 4m7.388743542s ago: executing program 3 (id=562): mkdirat(0xffffffffffffff9c, 0x0, 0x30) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x88000, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x40086604, 0xfffffffffffffffe) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) keyctl$assume_authority(0x10, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r1, 0x3312, 0x2) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000000)={@empty, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x8, 0x43f, 0x6, 0x80c20048}) 4m6.408209736s ago: executing program 3 (id=567): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) unshare(0x60040000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = getpgid(0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6c0000001000030429bd7000fedbdf2500007400", @ANYRES32=r1, @ANYBLOB="202f010000900000440012800b00010062726964676500003400028005002c0001000000050019000400000005001900040000000500260001000000080005000100000005002b002a00000008001300", @ANYRES32=r3], 0x6c}, 0x1, 0x0, 0x0, 0x4c801}, 0x24008000) 4m5.008515s ago: executing program 3 (id=574): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x2}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240448a4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, &(0x7f0000000280)='0', 0x5dc, 0x40000, &(0x7f0000000340)={0x11, 0x6, r3, 0x1, 0x2, 0x6, @local}, 0x14) 4m5.00846047s ago: executing program 4 (id=575): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 4m4.911108022s ago: executing program 4 (id=577): bpf$PROG_LOAD(0x5, &(0x7f0000002340)={0x3, 0x5, &(0x7f0000000880)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) 4m4.280681587s ago: executing program 4 (id=579): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000009c0)="d80000001c0081064e81f782db44b9040a1d080404000000000081a1180002000600142603600e1208000f000000000100001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e40ae8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccc29e00360db70100000d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e7834", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x8000800) 3m49.14506846s ago: executing program 32 (id=578): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x401, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x200}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x3c}, 0x1, 0xd, 0x0, 0x4000000}, 0xc080) 3m49.107744131s ago: executing program 33 (id=574): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x2}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240448a4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, &(0x7f0000000280)='0', 0x5dc, 0x40000, &(0x7f0000000340)={0x11, 0x6, r3, 0x1, 0x2, 0x6, @local}, 0x14) 3m49.092014851s ago: executing program 34 (id=579): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000009c0)="d80000001c0081064e81f782db44b9040a1d080404000000000081a1180002000600142603600e1208000f000000000100001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e40ae8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccc29e00360db70100000d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e7834", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x8000800) 3m33.530964864s ago: executing program 7 (id=702): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x5, 0x2, 0x6, 0x3}) sendmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a001000987155ec4a4ba7d9", 0x2e}], 0x1}, 0xc0) 3m32.04560816s ago: executing program 6 (id=711): syz_open_dev$vim2m(0x0, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000700000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000440005002001000000000000000000000000000000000002320000000a000000fc0100000000000000000000000000000000000004"], 0xfc}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e0"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000800) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 3m32.000880231s ago: executing program 7 (id=713): socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000000000)={'team_slave_1\x00', @random="440000001000"}) 3m31.884616673s ago: executing program 7 (id=715): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x16}, 0x300, 0x0, 0x2, 0x9, 0x0, 0x7}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x300, 0x0, 0x3, 0x0, 0x6, 0xf}, 0x20) 3m31.884488604s ago: executing program 7 (id=716): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xe}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x9, 0xc89f, 0xffff5ef5, 0x0, 0x19, 0x3, 0x4000}}, {0x4}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 3m31.715825237s ago: executing program 6 (id=723): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r0, 0x0, 0x37e9, 0x2f92) write$FUSE_DIRENTPLUS(r0, &(0x7f00000048c0)={0x10}, 0x10) 3m31.698033928s ago: executing program 7 (id=724): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x1010051, &(0x7f0000000940)={[{@journal_dev}, {@noload}, {@noblock_validity}, {@oldalloc}, {@data_ordered}, {@grpjquota}]}, 0x1, 0x546, &(0x7f0000000180)="$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") socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x106, 0x2}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0xa}}, 0x20) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 3m31.59238068s ago: executing program 6 (id=727): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f00000071c0)=[{{&(0x7f0000000300)={0xa, 0x4e24, 0x10, @dev={0xfe, 0x80, '\x00', 0x19}, 0x7}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000340)}], 0x1}}], 0x1, 0x4004) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) r5 = syz_open_procfs(r0, &(0x7f0000000040)='net/dev\x00') ioctl$DVB_DEMUX_DMX_QBUF(r5, 0xc0186f3f, &(0x7f0000000280)={0xc2a2, 0x2, 0x1, 0xf7, 0x2, 0x8}) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/net/sctp/assocs\x00', 0x0, 0x0) 3m30.658040063s ago: executing program 7 (id=731): io_setup(0x8, &(0x7f0000001d80)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x27, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0x605, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_red={{0x8}, {0x10, 0x2, [@TCA_RED_FLAGS={0xc, 0x4, {0x8, 0x17}}]}}]}, 0x3c}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0xfffffff8, 0x0, 0x0, 0x40f00, 0x15, '\x00', 0x0, @fallback=0x1f}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r5, 0x18000000000002a0, 0xfe2a, 0x0, &(0x7f0000001840)="b9ff0307683a268cb8091a99888e", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r6 = syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x0) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f0000000080)) io_pgetevents(r0, 0x3, 0x0, &(0x7f0000000000), &(0x7f0000001e40), 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_int(r7, &(0x7f00000000c0)='blkio.reset_stats\x00', 0x2, 0x0) getpid() r8 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r8, 0x29, 0x2, &(0x7f0000000040)=0xfffc, 0x4) sendto$inet6(r8, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x4000, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmmsg(r8, &(0x7f0000003bc0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x10102, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) 3m30.261823572s ago: executing program 6 (id=735): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8000002) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000480)={[{@block_validity}, {}, {@user_xattr}, {@norecovery}, {@resuid}, {@orlov}, {@usrquota}, {@debug}, {@norecovery}]}, 0x3, 0x569, &(0x7f0000000940)="$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") socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) write$P9_RVERSION(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065fffffc7f00000800395032303030"], 0xfe78) 3m29.332597205s ago: executing program 6 (id=741): mkdirat(0xffffffffffffff9c, 0x0, 0x30) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x88000, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x40086604, 0xfffffffffffffffe) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee6, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$assume_authority(0x10, 0x0) 3m29.210750997s ago: executing program 6 (id=743): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x121800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x1}]}}]}, 0x3c}}, 0x20044040) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000280)="05", 0x5dc, 0x4009, &(0x7f0000000140)={0x11, 0x86dd, 0x0, 0x1, 0x3, 0x6, @remote}, 0x14) 3m15.612530023s ago: executing program 35 (id=731): io_setup(0x8, &(0x7f0000001d80)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x27, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0x605, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_red={{0x8}, {0x10, 0x2, [@TCA_RED_FLAGS={0xc, 0x4, {0x8, 0x17}}]}}]}, 0x3c}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0xfffffff8, 0x0, 0x0, 0x40f00, 0x15, '\x00', 0x0, @fallback=0x1f}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r5, 0x18000000000002a0, 0xfe2a, 0x0, &(0x7f0000001840)="b9ff0307683a268cb8091a99888e", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r6 = syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x0) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f0000000080)) io_pgetevents(r0, 0x3, 0x0, &(0x7f0000000000), &(0x7f0000001e40), 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_int(r7, &(0x7f00000000c0)='blkio.reset_stats\x00', 0x2, 0x0) getpid() r8 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r8, 0x29, 0x2, &(0x7f0000000040)=0xfffc, 0x4) sendto$inet6(r8, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x4000, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmmsg(r8, &(0x7f0000003bc0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x10102, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) 3m14.165103518s ago: executing program 36 (id=743): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x121800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x1}]}}]}, 0x3c}}, 0x20044040) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000280)="05", 0x5dc, 0x4009, &(0x7f0000000140)={0x11, 0x86dd, 0x0, 0x1, 0x3, 0x6, @remote}, 0x14) 1m44.564736985s ago: executing program 9 (id=1740): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb77d8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2714, 0x0, &(0x7f0000000000)) 1m43.48437804s ago: executing program 9 (id=1757): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a400000000108000340"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000028c0)={0x3c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004001}, 0x8000) 1m43.370463173s ago: executing program 9 (id=1759): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x14, 0x11, &(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r1}, 0xc) 1m43.292666005s ago: executing program 9 (id=1760): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") socket$kcm(0x29, 0x7, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') 1m43.253502436s ago: executing program 9 (id=1762): mkdirat(0xffffffffffffff9c, 0x0, 0x30) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x88000, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r1, 0x3312, 0x2) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={@empty, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x8, 0x43f, 0x6, 0x80c20048}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8}}, 0x1c}}, 0x0) unshare(0x2c020400) 1m42.698842179s ago: executing program 9 (id=1768): socket(0x23, 0x80805, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x20000800) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x0, 0xc8, 0x8, 0x1c0, 0x5803, 0x1c0, 0x2e8, 0x2e8, 0x320, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00', {}, {0xff}}, 0x0, 0x168, 0x198, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x0, {0x8}}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x13}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x1403, 0xc23, 0x70bd2e, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x14f7325d9d03b00}, 0x4000) 1m42.607526442s ago: executing program 37 (id=1768): socket(0x23, 0x80805, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x20000800) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x0, 0xc8, 0x8, 0x1c0, 0x5803, 0x1c0, 0x2e8, 0x2e8, 0x320, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00', {}, {0xff}}, 0x0, 0x168, 0x198, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x0, {0x8}}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x13}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x1403, 0xc23, 0x70bd2e, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x14f7325d9d03b00}, 0x4000) 8.271218662s ago: executing program 2 (id=2572): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$eJzs3cFvG1kZAPBvnLhJs+mmC3sABGxZFgqq6iTubrTqhfYCQlUlRMWJQxsSN4pi11Hsiib0kB65V6ISJ+A/4MYBqScO3LjBjUs5IBWoQA0SB6MZT1I3sZNAnbiJfz9pMvPeTP29F/e953mR5wUwtC5ExGZEnImIOxExlecn+RbX2lt63csXDxe2XjxcSKLVuvX3JDuf5kXHv0m9k7/meER8/zsRP0r2xm2sb6zMV6uVtTw93aytTjfWNy4vF/Kc8tzs3MynVz4p962uH9R+/fzbyzd+8NvffOnZHza/+ZO0WJM/PZed66xHP7WrXozJjrzRiLhxFMEGZDT//8PJk7a2z0TEh1n7n4qR7N0EAE6zVmsqWlOdaQDgtEvv/ycjKZTyuYDJKBRKpfYc3vsxUajWG81LU/X79xYjm8M6H8XC3eVqZSafKzwfxSRNz2bHr9Ll19KPK1ci4r2IeDx2NjtfWqhXFwf5wQcAhtg7u8b/f421x/9OxUEVDgA4OuODLgAAcOyM/wAwfIz/ADB8/ofx37cDAeCUcP8PAMPH+A8Aw+fA8f/R8ZQDADgW37t5M91aW+3nX28/qfvyYqWxUqrdXygt1NdWS0v1+lK1UlpotQ56vWq9vjr78U6ysb5xu1a/f695e7k2v1S5XfEsAQAYvPc+ePqndNDfvHo226JjLQdjNZxuhUEXABiYkUEXABgY3+eB4XWIe3zTAHDKdVmity2fIEh6XfDE4q9wUl38vPl/GFZvMv9v7gBOtv9v/v9bfS8HcPyM4TC8Wq3Emv8AMGTM8QM9//6f6/mIkCf9LwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcFJPZlhRK2Vrgm+nPQqkUcS4izkcxubtcrcxExLsR8cex4lianh10oQGAN1T4a5Kv/3Vx6qPJ3WfPJP8ey/YR8eOf3/rZg/lmc202zf/HTn7zSZp/trlWPjOICgAAna7tzcrG73K+77iRf/ni4cL2dpxFfH69vbhoGncr39pnRmM0249HMSIm/pnk6bb088pIH+JvPoqIz23XfzwedESYzOZA2iuf7o6fxj7X9/idv//d8Quv1beQnUv3xex38dnYVTjgQE+vt/vJvO2lTTxvf4W4kO27t//xrId6c2n/lzbXrT39X2Gn/xvZEz/J2vyFnfT+JXn+8e++uyezNdU+9yjiC6Pd4ic78ZPu/W/xo0PW8c9f/PKHvc61fhFxsWv9t1ekrmXd7HSztjrdWN+4vFybX6osVe6Vy3OzczOfXvmkPJ3NUbd//r5bjL9dvfRur/hp/Sd6xB/fv/7xtUPW/5f/ufPDr+wT/xtf7f7+v79P/HRM/Poh489PXOu5fHcaf7FH/Q94/+PSIeM/+8vG4iEvBQCOQWN9Y2W+Wq2sHXCQftY86BoHhz9I7+3fgmJkB7EZ0a8XzCYlIqLrNekn6rejykd1kAws+q/6/YKD7pmAo/aq0Q+6JAAAAAAAAAAAAAAAQC+N9Y2Vse7f1urbwaDrCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOn13wAAAP//KHnENg==") r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x88000, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r1, 0x3312, 0x2) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={@empty, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x8, 0x43f, 0x6, 0x80c20048}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8}}, 0x1c}}, 0x0) unshare(0x2c020400) 7.375277333s ago: executing program 2 (id=2581): syz_io_uring_setup(0xf00, &(0x7f0000000640)={0x0, 0x5961, 0x10000, 0x2, 0x4e}, &(0x7f0000000100), 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket(0x2, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000011c0)=[@in={0x2, 0x4e23, @private=0xa010100}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r1, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) 5.882685339s ago: executing program 5 (id=2585): socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$video(0x0, 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 4.864810103s ago: executing program 8 (id=2590): sendmsg(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000780)=[{0x0}, {0x0}, {0x0}], 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x4e8}, 0x40040) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 4.819841145s ago: executing program 2 (id=2592): syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000080)='./file1/file0\x00', 0x1000056, &(0x7f00000000c0), 0x1, 0x5ab, &(0x7f0000000d00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xa0}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) read$FUSE(r3, &(0x7f00000027c0)={0x2020}, 0x2020) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r9, r7, &(0x7f0000000880)={0x0, 0xfffffffe, 0x0, 0x3, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x3, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1678, 0x2, 0x40040001, 0x334, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 4.819344194s ago: executing program 8 (id=2593): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800, 0x0, 0x2}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$netlink(0x10, 0x3, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='bic', 0x3) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000400000006000000aa0b000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00c7e3ec6892a288c300000000a81800"/28], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000008c0), &(0x7f0000000b80), 0x2000005, r5}, 0x38) bpf$MAP_CREATE(0x0, 0x0, 0x50) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001040)={'vxcan1\x00'}) ppoll(&(0x7f0000000800)=[{r0, 0x4}], 0x1, 0x0, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a00100000000280607ee622", 0x2e}], 0x1}, 0x24000044) 3.722346771s ago: executing program 0 (id=2594): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff0700670600000200000027"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="080004"], 0x54}, 0x1, 0xba01, 0x0, 0x4004}, 0x4000000) 3.527896006s ago: executing program 2 (id=2597): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) timer_create(0x3, 0x0, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000600)="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", 0x800}], 0x1}, 0x4040000) 3.498272846s ago: executing program 5 (id=2599): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000009c0)="d80000001c0081064e81f782db44b9040a1d080404000000000081a1180002000600142603600e1208000f000000000100001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e40ae8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccc29e00360db70100000d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e7834", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x8000800) 3.447104987s ago: executing program 8 (id=2600): sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000004080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40008d5}, 0x10) r0 = inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x400) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) syz_init_net_socket$llc(0x1a, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) brk(0x20ff3000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, r4) setpgid(0x0, r4) mount$overlay(0x0, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 3.441837247s ago: executing program 1 (id=2601): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x15, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x30) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/fs/bcache/register\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='/|ev/loop0', 0xa) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 3.366834019s ago: executing program 5 (id=2602): syz_io_uring_setup(0xf00, &(0x7f0000000640)={0x0, 0x5961, 0x10000, 0x2, 0x4e}, &(0x7f0000000100), 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket(0x2, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000011c0)=[@in={0x2, 0x4e23, @private=0xa010100}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r1, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) 3.3554331s ago: executing program 1 (id=2603): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f0000000280)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3}, 0x14) syz_emit_ethernet(0xd81, &(0x7f0000001b40)={@empty, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x7, 0x6, "acdaea", 0xd4b, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, {[@dstopts={0x3b, 0x19b, '\x00', [@ra={0x5, 0x2, 0x80}, @jumbo={0xc2, 0x4, 0x7}, @generic={0xfa, 0x29, "ebf9ea79413a0467db3deffcbdbb4ca4e53ce325600527602f611fcee3320ae84fcd83d8349c527adc"}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x5, 0xc9d, "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"}]}], {{0x4e20, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x8, 0x2, 0x0, 0x2, {[@exp_smc={0xfe, 0x6}]}}, {"ffaf37c94bd77d95f8a7484ed5752f3c6fb324fa40e0752e7aeed8dbcb9f5dec2fac17c637d154e0e3e643c5c4ad6e690f5d716d8f8bd53711e5c2afbc460074139a39173b2d24"}}}}}}}, 0x0) 3.31949114s ago: executing program 0 (id=2604): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f0000001080)='\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000480)='./tracefs_dir/trace\x00', 0xfe8, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x1c, 0x0, 0x10ada85e65c25359, 0x70bd25, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8441}, 0x2004000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) request_key(&(0x7f00000010c0)='dns_resolver\x00', &(0x7f0000001100)={'syz', 0x2}, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$sock(r1, 0x0, 0x0, 0x20000044) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000000)={'ipvs\x00'}, &(0x7f0000000040)=0x1e) 3.024631608s ago: executing program 1 (id=2605): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) timer_create(0x3, 0x0, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000600)="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", 0xfff}], 0x1}, 0x4040000) 2.343789404s ago: executing program 8 (id=2606): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000240)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@jqfmt_vfsv1}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@commit}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x80) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0) 2.215131677s ago: executing program 8 (id=2607): socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000028c0)={0x3c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004001}, 0x8000) 2.150141879s ago: executing program 0 (id=2608): syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000080)='./file1/file0\x00', 0x1000056, &(0x7f00000000c0), 0x1, 0x5ab, &(0x7f0000000d00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xa0}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) read$FUSE(r3, &(0x7f00000027c0)={0x2020}, 0x2020) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r9, r7, &(0x7f0000000880)={0x0, 0xfffffffe, 0x0, 0x3, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x3, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1678, 0x2, 0x40040001, 0x334, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 2.123022449s ago: executing program 1 (id=2609): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$xdp(0x2c, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x400000000000004) socket$inet6_sctp(0xa, 0x5, 0x84) fsopen(&(0x7f0000000140)='fuseblk\x00', 0x1) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) pipe2(&(0x7f0000000000), 0x80000) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4000003, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r1, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 2.015745592s ago: executing program 5 (id=2610): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800, 0x0, 0x2}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$netlink(0x10, 0x3, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='bic', 0x3) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000400000006000000aa0b000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00c7e3ec6892a288c300000000a81800"/28], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000008c0), &(0x7f0000000b80), 0x2000005, r5}, 0x38) bpf$MAP_CREATE(0x0, 0x0, 0x50) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001040)={'vxcan1\x00'}) ppoll(&(0x7f0000000800)=[{r0, 0x4}], 0x1, 0x0, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a00100000000280607ee622", 0x2e}], 0x1}, 0x24000044) 2.015438392s ago: executing program 2 (id=2611): socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$video(0x0, 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 1.074795274s ago: executing program 0 (id=2612): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000500)='./file0\x00', 0x120444c, &(0x7f0000000380)=ANY=[@ANYRES16=0x0, @ANYRESHEX, @ANYRESOCT=0x0, @ANYRESDEC, @ANYBLOB="a6af03000000000000006c42ac9eefc3f3304a519189b105d77c5f5267121c170995cd3bb174096f3c", @ANYBLOB="a51b7d19e69bbcb11700c2dcb2d851f79d44e9bb8469d2a5dd66597db213ade6acfaffd88afce31be876c207fb5d362b6e91010b006a4279f2d4d02752a02b76b5413c5e7cd22d3cfad489bd1b84a85aa8ad47cc69d09522d51cf5cf88cf9da13593310d5e0d03a6e17940ddd391c7796ad75f4fa75bd62cb78c43c92e61de110508c5d605a2f981314c38526ac5aac6e4445e32d7cf128b440ca715e901f8b4299226dfd9bfec7a37f3bf63af2da22cff8e27e7b7f1e1906fe520b65051ea9c14827e9cd737a6952d478ff3cb4436a913", @ANYRES32, @ANYRES16, @ANYRES32], 0x0, 0x1e4, &(0x7f0000000540)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 717.520253ms ago: executing program 1 (id=2613): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000009c0)="d80000001c0081064e81f782db44b9040a1d080404000000000081a1180002000600142603600e1208000f000000000100001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e40ae8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccc29e00360db70100000d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e7834", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x8000800) 717.342773ms ago: executing program 5 (id=2614): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x15, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x30) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/fs/bcache/register\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='/|ev/loop0', 0xa) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 717.192063ms ago: executing program 0 (id=2615): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000d80)={'veth0_to_bond\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001280)={0x0}}, 0x40000c0) 716.723213ms ago: executing program 1 (id=2616): sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000004080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40008d5}, 0x10) r0 = inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x400) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) syz_init_net_socket$llc(0x1a, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) brk(0x20ff3000) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, r4) setpgid(0x0, r4) mount$overlay(0x0, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 662.524474ms ago: executing program 8 (id=2617): unshare(0x62000000) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 648.507865ms ago: executing program 5 (id=2618): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000380)={0x14, 0xa, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x8801) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000600)="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", 0xfff}], 0x1}, 0x4040000) 596.640755ms ago: executing program 0 (id=2619): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f0000001080)='\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000480)='./tracefs_dir/trace\x00', 0xfe8, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x1c, 0x0, 0x10ada85e65c25359, 0x70bd25, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8441}, 0x2004000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) request_key(&(0x7f00000010c0)='dns_resolver\x00', &(0x7f0000001100)={'syz', 0x2}, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$sock(r1, 0x0, 0x0, 0x20000044) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000000)={'ipvs\x00'}, &(0x7f0000000040)=0x1e) 0s ago: executing program 2 (id=2620): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000001880)='./bus\x00', 0x2000000, 0x0, 0x1, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) gettid() getdents64(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0f85403, &(0x7f0000000540)={{0x3, 0x0, 0x1, 0x1, 0x1}, 0xfffffffb, 0x25, 'id1\x00', 'timer1\x00', 0x0, 0x9, 0x200, 0x38e41e62, 0x64}) kernel console output (not intermixed with test programs): mode [ 117.055258][ T6007] device veth1_vlan entered promiscuous mode [ 117.060015][ T1305] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 117.062195][ T1305] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 117.064070][ T1305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 117.066337][ T1305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 117.068480][ T5996] device veth0_macvtap entered promiscuous mode [ 117.079273][ T5996] device veth1_macvtap entered promiscuous mode [ 117.095746][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 117.097478][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 117.098997][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 117.102824][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 117.105080][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 117.144500][ T5996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.146547][ T5996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.148359][ T5996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.150274][ T5996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.152938][ T5996] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.159851][ T6007] device veth0_macvtap entered promiscuous mode [ 117.164142][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 117.165846][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 117.167476][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 117.170954][ T5996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.173065][ T5996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.176033][ T5996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.180328][ T5996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.183080][ T5996] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.228844][ T6007] device veth1_macvtap entered promiscuous mode [ 117.239796][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 117.241941][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 117.243675][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 117.255838][ T5996] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.257360][ T5996] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.258974][ T5996] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.261406][ T5996] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.346466][ T6007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.348381][ T6007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.350042][ T6007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.354432][ T6007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.356090][ T6007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.357781][ T6007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.360360][ T6007] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.364895][ T1305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 117.366575][ T1305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 117.380319][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 117.382162][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 117.689891][ T6007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.692305][ T6007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.693995][ T6007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.700799][ T6007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.702621][ T6007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.704346][ T6007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.706734][ T6007] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.709518][ T6007] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.712162][ T6007] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.713793][ T6007] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.715310][ T6007] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.735401][ T1305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 117.738136][ T1305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 117.781033][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 117.783741][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 117.788376][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 117.789945][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 117.794782][ T6005] device veth0_vlan entered promiscuous mode [ 117.825608][ T4807] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.827095][ T4807] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.847252][ T4807] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 117.855400][ T6005] device veth1_vlan entered promiscuous mode [ 117.880040][ T4807] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.882147][ T4877] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.885583][ T4877] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.886913][ T4807] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.895512][ T4807] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 117.899252][ T4807] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 117.905137][ T4807] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 117.906798][ T4807] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 117.924538][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 117.926275][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 117.929872][ T4821] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.930100][ T6005] device veth0_macvtap entered promiscuous mode [ 117.931783][ T4821] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.937101][ T4821] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 117.938666][ T4821] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 117.952691][ T6005] device veth1_macvtap entered promiscuous mode [ 117.990817][ T6005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.000652][ T6005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.005595][ T6005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.009656][ T6005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.012592][ T6005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.016107][ T6005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.017995][ T6005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.019889][ T6005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.022577][ T6005] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.037683][ T6005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.039661][ T6005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.041640][ T6005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.043628][ T6005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.045558][ T6005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.047410][ T6005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.049123][ T6005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.051008][ T6005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.054783][ T6005] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.059400][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 118.061254][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 118.063956][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 118.065946][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 118.068825][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 118.077117][ T6005] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.078781][ T6005] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.080234][ T6005] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.378954][ T6005] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.420510][ T48] Bluetooth: hci7: command 0x040f tx timeout [ 118.422643][ T4331] Bluetooth: hci5: command 0x040f tx timeout [ 118.424197][ T4333] Bluetooth: hci6: command 0x040f tx timeout [ 119.092282][ T6211] binder: 6210:6211 tried to acquire reference to desc 0, got 1 instead [ 119.094639][ T6211] binder: 6210:6211 got transaction with invalid offset (24, min 24 max 32) or object. [ 119.096431][ T6211] binder: 6210:6211 transaction call to 6210:0 failed 5/29201/-22, size 32-24 line 3363 [ 119.099080][ T4374] binder: undelivered TRANSACTION_ERROR: 29201 [ 119.126583][ T6215] loop5: detected capacity change from 0 to 512 [ 119.146463][ T6215] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 119.255882][ T6212] device xfrm1 entered promiscuous mode [ 119.778716][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.782631][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.786148][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 119.799498][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.801279][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.803362][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 120.097315][ T5996] EXT4-fs (loop5): unmounting filesystem. [ 120.329490][ T6245] Soft offlining pfn 0x144204 at process virtual address 0x20ffe000 [ 120.334457][ T6245] Soft offlining pfn 0x144205 at process virtual address 0x20fff000 [ 120.490599][ T4336] Bluetooth: hci6: command 0x0419 tx timeout [ 120.491825][ T4331] Bluetooth: hci7: command 0x0419 tx timeout [ 120.493001][ T4333] Bluetooth: hci5: command 0x0419 tx timeout [ 120.612267][ T6247] loop7: detected capacity change from 0 to 512 [ 120.616023][ T6247] EXT4-fs: inline encryption not supported [ 120.634503][ T6247] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 120.636098][ T6247] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 120.667103][ T6247] Quota error (device loop7): do_insert_tree: Free block already used in tree: block 1 [ 120.685022][ T6247] Quota error (device loop7): qtree_write_dquot: Error -5 occurred while creating quota [ 120.686905][ T6247] EXT4-fs error (device loop7): ext4_acquire_dquot:6841: comm syz.7.585: Failed to acquire dquot type 1 [ 120.695552][ T6247] EXT4-fs (loop7): Remounting filesystem read-only [ 120.697214][ T6247] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 46 vs 41 free clusters [ 120.701484][ T6247] EXT4-fs (loop7): Remounting filesystem read-only [ 120.702811][ T6247] EXT4-fs error (device loop7): ext4_do_update_inode:5279: inode #12: comm syz.7.585: corrupted inode contents [ 120.705124][ T6247] EXT4-fs (loop7): Remounting filesystem read-only [ 120.706352][ T6247] EXT4-fs error (device loop7): ext4_dirty_inode:6156: inode #12: comm syz.7.585: mark_inode_dirty error [ 120.708529][ T6247] EXT4-fs (loop7): Remounting filesystem read-only [ 120.709895][ T6247] EXT4-fs error (device loop7): ext4_do_update_inode:5279: inode #12: comm syz.7.585: corrupted inode contents [ 120.752394][ T6247] EXT4-fs (loop7): Remounting filesystem read-only [ 120.765505][ T6247] EXT4-fs error (device loop7): __ext4_ext_dirty:202: inode #12: comm syz.7.585: mark_inode_dirty error [ 120.775514][ T6273] loop5: detected capacity change from 0 to 4096 [ 120.778874][ T6247] EXT4-fs (loop7): Remounting filesystem read-only [ 120.785320][ T6273] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 120.801296][ T6247] EXT4-fs error (device loop7): ext4_do_update_inode:5279: inode #12: comm syz.7.585: corrupted inode contents [ 120.846119][ T6247] EXT4-fs (loop7): Remounting filesystem read-only [ 120.847535][ T6247] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 120.850348][ T6247] EXT4-fs (loop7): Remounting filesystem read-only [ 120.853356][ T6247] EXT4-fs error (device loop7): ext4_do_update_inode:5279: inode #12: comm syz.7.585: corrupted inode contents [ 120.856251][ T6247] EXT4-fs (loop7): Remounting filesystem read-only [ 120.859349][ T6247] EXT4-fs error (device loop7): ext4_truncate:4325: inode #12: comm syz.7.585: mark_inode_dirty error [ 120.869600][ T6247] EXT4-fs (loop7): Remounting filesystem read-only [ 120.875450][ T6247] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem [ 120.882976][ T5996] EXT4-fs (loop5): unmounting filesystem. [ 120.900827][ T6247] EXT4-fs (loop7): Remounting filesystem read-only [ 120.906256][ T6247] EXT4-fs (loop7): 1 truncate cleaned up [ 120.912568][ T6247] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 121.141151][ T6005] EXT4-fs (loop7): unmounting filesystem. [ 121.757592][ T6331] loop6: detected capacity change from 0 to 4096 [ 121.783176][ T6331] EXT4-fs (loop6): Test dummy encryption mode enabled [ 121.816458][ T6331] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 122.185590][ T6354] Soft offlining pfn 0x14072f at process virtual address 0x20ffe000 [ 122.187854][ T6354] Soft offlining pfn 0x13fa74 at process virtual address 0x20fff000 [ 122.704543][ T6007] EXT4-fs (loop6): unmounting filesystem. [ 122.716952][ T6363] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 122.721885][ T6363] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 122.793666][ T6371] netlink: 104 bytes leftover after parsing attributes in process `syz.5.653'. [ 122.803182][ T6363] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 124.407003][ T6455] loop5: detected capacity change from 0 to 512 [ 124.453085][ T6455] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 124.915468][ T6452] device syzkaller0 entered promiscuous mode [ 125.268771][ T5996] EXT4-fs (loop5): unmounting filesystem. [ 125.274564][ T6486] loop7: detected capacity change from 0 to 1024 [ 125.289973][ T6486] EXT4-fs: Ignoring removed bh option [ 125.304318][ T6486] EXT4-fs: Ignoring removed bh option [ 125.305806][ T6491] loop5: detected capacity change from 0 to 128 [ 125.328280][ T6486] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 125.357760][ T6486] overlayfs: missing 'lowerdir' [ 125.394747][ T6486] EXT4-fs (loop7): re-mounted. Quota mode: none. [ 125.567469][ T6005] EXT4-fs (loop7): unmounting filesystem. [ 125.588959][ T6508] binder: 6507:6508 got transaction to invalid handle, 1 [ 125.596969][ T6508] binder: 6508:6507 cannot find target node [ 125.599342][ T6508] binder: 6507:6508 transaction call to 0:0 failed 11/29201/-22, size 32-24 line 3062 [ 125.630951][ T4489] binder: undelivered TRANSACTION_ERROR: 29201 [ 125.931283][ T2064] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.933328][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 128.994769][ T6552] netlink: 'syz.7.702': attribute type 10 has an invalid length. [ 128.996636][ T6552] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.997986][ T6552] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.141197][ T6595] netlink: 68 bytes leftover after parsing attributes in process `syz.6.711'. [ 129.342336][ T6595] netlink: 8 bytes leftover after parsing attributes in process `syz.6.711'. [ 129.418136][ T6636] loop7: detected capacity change from 0 to 512 [ 129.445661][ T6636] EXT4-fs: Ignoring removed oldalloc option [ 129.458847][ T6636] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 129.460965][ T6636] EXT4-fs (loop7): can't mount with data=, fs mounted w/o journal [ 129.467777][ T6641] loop5: detected capacity change from 0 to 512 [ 129.551835][ T6641] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 130.371671][ T5996] EXT4-fs (loop5): unmounting filesystem. [ 130.388889][ T4389] device hsr_slave_0 left promiscuous mode [ 130.434940][ T4389] device hsr_slave_1 left promiscuous mode [ 130.561221][ T4389] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.562694][ T4389] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.569345][ T4389] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.571013][ T4389] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.578012][ T4389] device bridge_slave_1 left promiscuous mode [ 130.645121][ T4389] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.821988][ T4389] device bridge_slave_0 left promiscuous mode [ 130.823521][ T4389] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.906353][ T6673] loop6: detected capacity change from 0 to 1024 [ 130.907746][ T6673] EXT4-fs: Ignoring removed orlov option [ 130.943953][ T6673] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec118, mo2=0002] [ 130.947651][ T6673] System zones: 0-1, 3-12 [ 130.963676][ T6673] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 131.394814][ T4389] device hsr_slave_0 left promiscuous mode [ 131.430629][ T4389] device hsr_slave_1 left promiscuous mode [ 131.511302][ T4389] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.513718][ T4389] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.520373][ T4389] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.522217][ T4389] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.524073][ T4389] device bridge_slave_1 left promiscuous mode [ 131.525454][ T4389] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.572200][ T4389] device bridge_slave_0 left promiscuous mode [ 131.574721][ T4389] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.604204][ T4389] device hsr_slave_0 left promiscuous mode [ 131.653427][ T4389] device hsr_slave_1 left promiscuous mode [ 131.707711][ T6007] EXT4-fs (loop6): unmounting filesystem. [ 131.730595][ T4389] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.732743][ T4389] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.733128][ T6704] loop6: detected capacity change from 0 to 512 [ 131.735486][ T4389] device bridge_slave_1 left promiscuous mode [ 131.738867][ T4389] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.753195][ T6704] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 131.791263][ T4389] device bridge_slave_0 left promiscuous mode [ 131.792503][ T4389] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.857704][ T6007] EXT4-fs (loop6): unmounting filesystem. [ 131.887067][ T6711] loop5: detected capacity change from 0 to 512 [ 131.906400][ T6711] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 131.911243][ T6711] EXT4-fs (loop5): re-mounted. Quota mode: writeback. [ 131.926596][ T6711] EXT4-fs (loop5): re-mounted. Quota mode: writeback. [ 131.955777][ T5996] EXT4-fs (loop5): unmounting filesystem. [ 131.994931][ T6721] loop5: detected capacity change from 0 to 4096 [ 132.011140][ T4389] device veth1_macvtap left promiscuous mode [ 132.012271][ T4389] device veth0_macvtap left promiscuous mode [ 132.013299][ T4389] device veth1_vlan left promiscuous mode [ 132.014799][ T4389] device veth0_vlan left promiscuous mode [ 132.016496][ T6721] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 132.038745][ T5996] EXT4-fs (loop5): unmounting filesystem. [ 132.074941][ T4389] device veth1_macvtap left promiscuous mode [ 132.076065][ T4389] device veth0_macvtap left promiscuous mode [ 132.077114][ T4389] device veth1_vlan left promiscuous mode [ 132.078281][ T4389] device veth0_vlan left promiscuous mode [ 135.251889][ T4389] team0 (unregistering): Port device team_slave_1 removed [ 135.414166][ T4389] team0 (unregistering): Port device team_slave_0 removed [ 135.570879][ T4389] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.780887][ T4389] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 137.282493][ T4389] bond0 (unregistering): Released all slaves [ 139.632145][ T4389] team0 (unregistering): Port device team_slave_1 removed [ 139.801781][ T4389] team0 (unregistering): Port device team_slave_0 removed [ 139.960856][ T4389] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.171866][ T4389] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.681360][ T4389] bond0 (unregistering): Released all slaves [ 144.043026][ T4389] team0 (unregistering): Port device team_slave_1 removed [ 144.201082][ T4389] team0 (unregistering): Port device team_slave_0 removed [ 144.361287][ T4389] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.561904][ T4389] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.509022][ T4331] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 145.511557][ T4331] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 145.513205][ T4331] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 145.514746][ T4331] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 145.516266][ T4331] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 145.517655][ T4331] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 146.091468][ T4389] bond0 (unregistering): Released all slaves [ 146.582121][ T6768] binder: 6767:6768 tried to acquire reference to desc 0, got 1 instead [ 146.584040][ T6768] binder_alloc: 6767: binder_alloc_buf, no vma [ 146.585120][ T6768] binder: cannot allocate buffer: vma cleared, target dead or dying [ 146.585147][ T6768] binder: 6767:6768 transaction call to 6767:0 failed 16/29189/-3, size 32-24 line 3247 [ 146.594110][ T6665] binder: undelivered TRANSACTION_ERROR: 29189 [ 147.036647][ T6751] chnl_net:caif_netlink_parms(): no params data found [ 147.049349][ T6786] loop5: detected capacity change from 0 to 4096 [ 147.079228][ T6751] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.080875][ T6751] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.082584][ T6751] device bridge_slave_0 entered promiscuous mode [ 147.084792][ T6751] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.086085][ T6751] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.087895][ T6786] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 147.100064][ T6751] device bridge_slave_1 entered promiscuous mode [ 147.131183][ T4333] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 147.133634][ T4333] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 147.135578][ T4333] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 147.137195][ T4333] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 147.139224][ T4333] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 147.140414][ T5996] EXT4-fs (loop5): unmounting filesystem. [ 147.141027][ T4333] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 147.197133][ T6751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.210934][ T6751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.241279][ T6751] team0: Port device team_slave_0 added [ 147.244190][ T6751] team0: Port device team_slave_1 added [ 147.255367][ T6751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.258057][ T6751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.266445][ T6751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.530919][ T4333] Bluetooth: hci2: command 0x0409 tx timeout [ 147.641101][ T6751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.642377][ T6751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.646836][ T6751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.692706][ T6751] device hsr_slave_0 entered promiscuous mode [ 147.800759][ T6751] device hsr_slave_1 entered promiscuous mode [ 148.231302][ T6751] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 148.272208][ T6751] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 148.304179][ T6794] chnl_net:caif_netlink_parms(): no params data found [ 148.306403][ T6751] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 148.369512][ T6751] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 148.479819][ T6794] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.483701][ T6794] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.773625][ T6794] device bridge_slave_0 entered promiscuous mode [ 148.839047][ T6751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.858911][ T6831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 148.861277][ T6831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 148.864846][ T6794] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.866155][ T6794] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.867827][ T6794] device bridge_slave_1 entered promiscuous mode [ 148.878976][ T6751] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.886870][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 148.888779][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 148.890410][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.891815][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.179620][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 149.187275][ T4898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 149.188976][ T4898] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 149.190830][ T4898] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.192199][ T4898] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.195023][ T6794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.200232][ T6420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 149.207067][ T6420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 149.234224][ T4333] Bluetooth: hci3: command 0x0409 tx timeout [ 149.259195][ T6889] binder: 6888:6889 tried to acquire reference to desc 0, got 1 instead [ 149.261298][ T6889] binder_alloc: 6888: binder_alloc_buf, no vma [ 149.262957][ T6889] binder: cannot allocate buffer: vma cleared, target dead or dying [ 149.262985][ T6889] binder: 6888:6889 transaction call to 6888:0 failed 21/29189/-3, size 32-24 line 3247 [ 149.266452][ T115] binder: undelivered TRANSACTION_ERROR: 29189 [ 149.268380][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 149.274185][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 149.276979][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 149.310094][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 149.320853][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 149.324237][ T6794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.651998][ T4333] Bluetooth: hci2: command 0x041b tx timeout [ 149.873926][ T6901] : renamed from bond_slave_0 [ 149.917413][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 149.920251][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 149.929707][ T6794] team0: Port device team_slave_0 added [ 149.932560][ T6794] team0: Port device team_slave_1 added [ 149.950015][ T6751] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 149.957784][ T6751] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 149.962239][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 149.964230][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 149.977908][ T6794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.984445][ T6794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.994392][ T6794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.999280][ T6794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.003951][ T6794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.012305][ T6794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.082824][ T6794] device hsr_slave_0 entered promiscuous mode [ 150.121319][ T6794] device hsr_slave_1 entered promiscuous mode [ 150.160800][ T6794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 150.196103][ T6794] Cannot create hsr debugfs directory [ 150.638034][ T6751] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.653626][ T6420] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 150.655084][ T6420] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 150.663897][ T6794] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 150.713121][ T6947] device gtp0 entered promiscuous mode [ 150.717144][ T6947] team0: Device gtp0 is of different type [ 150.822233][ T6794] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 150.892056][ T6794] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 150.988252][ T6961] overlayfs: failed to clone upperpath [ 151.265055][ T6794] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 151.290611][ T4333] Bluetooth: hci3: command 0x041b tx timeout [ 151.324019][ T6965] netlink: 12 bytes leftover after parsing attributes in process `syz.1.788'. [ 151.423387][ T6965] bond1 (unregistering): Released all slaves [ 151.459464][ T6903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 151.463345][ T6903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 151.484367][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 151.486162][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 151.488036][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 151.490197][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 151.506912][ T6751] device veth0_vlan entered promiscuous mode [ 151.537709][ T6751] device veth1_vlan entered promiscuous mode [ 151.596202][ T6794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.604263][ T6751] device veth0_macvtap entered promiscuous mode [ 151.623632][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 151.625370][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 151.627389][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 151.629142][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 151.636259][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 151.642909][ T6794] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.647127][ T6751] device veth1_macvtap entered promiscuous mode [ 151.648728][ T4821] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 151.650512][ T4821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 151.652673][ T4821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 151.850640][ T4331] Bluetooth: hci2: command 0x040f tx timeout [ 151.974605][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 151.976279][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 151.977810][ T4379] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.978980][ T4379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.981685][ T6986] netlink: 104 bytes leftover after parsing attributes in process `syz.1.793'. [ 151.990268][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 152.020853][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 152.023489][ T4379] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.024703][ T4379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.026858][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 152.060025][ T6794] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 152.064714][ T6794] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 152.072594][ T6903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 152.074932][ T6903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 152.078665][ T6903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 152.081621][ T6903] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 152.083368][ T6903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 152.085324][ T6903] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 152.094447][ T6903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 152.098340][ T6903] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 152.103676][ T6903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 152.107552][ T6903] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 152.114370][ T6903] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 152.135082][ T6903] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 153.370492][ T4333] Bluetooth: hci3: command 0x040f tx timeout [ 153.471838][ T6751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.473898][ T6751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.475804][ T6751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.477748][ T6751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.479666][ T6751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.481603][ T6751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.484104][ T6751] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.493195][ T6903] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 153.495111][ T6903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 153.583224][ T4389] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.587638][ T6751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.589503][ T6751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.591982][ T6751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.593957][ T6751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.595552][ T6751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.597279][ T6751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.599465][ T6751] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.606665][ T6903] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 153.608470][ T6903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 153.616445][ T6751] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.617953][ T6751] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.619584][ T6751] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.621190][ T6751] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.903737][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 153.905282][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 153.930501][ T4331] Bluetooth: hci2: command 0x0419 tx timeout [ 153.944463][ T7025] loop5: detected capacity change from 0 to 512 [ 153.951582][ T4389] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.970993][ T6794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.984270][ T4475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.986485][ T4475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.991652][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 154.004748][ T4389] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.015280][ T7025] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 154.051299][ T4475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.083588][ T4475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.137779][ T4389] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.264758][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 154.463845][ T7049] netlink: 104 bytes leftover after parsing attributes in process `syz.0.803'. [ 154.515964][ T7053] loop8: detected capacity change from 0 to 512 [ 154.825678][ T7053] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 154.851656][ T5996] EXT4-fs (loop5): unmounting filesystem. [ 154.874067][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 154.878207][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 154.884644][ T6751] EXT4-fs (loop8): unmounting filesystem. [ 154.896689][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 154.898514][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 154.982779][ T4389] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.987781][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 154.989637][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 155.013420][ T6794] device veth0_vlan entered promiscuous mode [ 155.024402][ T6794] device veth1_vlan entered promiscuous mode [ 155.036407][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 155.038198][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 155.039924][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 155.042969][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 155.045187][ T7068] device syzkaller0 entered promiscuous mode [ 155.091755][ T6794] device veth0_macvtap entered promiscuous mode [ 155.153609][ T7083] loop5: detected capacity change from 0 to 512 [ 155.166319][ T7083] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 155.212571][ T4389] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.229147][ T6794] device veth1_macvtap entered promiscuous mode [ 155.242576][ T6794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.246572][ T6794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.250607][ T6794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.254431][ T6794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.257187][ T6794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.261182][ T6794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.264757][ T6794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.266389][ T6794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.269413][ T6794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.272617][ T6794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.274623][ T6794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.276287][ T6794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.278008][ T6794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.280007][ T6794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.450568][ T4333] Bluetooth: hci3: command 0x0419 tx timeout [ 155.545540][ T6794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.554873][ T6794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.566410][ T6794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.575712][ T6794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.581304][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 155.583277][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 155.584937][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 155.586715][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 155.592823][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 155.602754][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 155.641736][ T4389] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.660863][ T7106] netlink: 104 bytes leftover after parsing attributes in process `syz.8.814'. [ 155.665743][ T6794] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.667717][ T6794] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.669468][ T6794] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.674374][ T6794] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.735316][ T7111] loop8: detected capacity change from 0 to 512 [ 155.772759][ T4389] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.071754][ T5996] EXT4-fs (loop5): unmounting filesystem. [ 156.076550][ T4373] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.085729][ T4373] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.107739][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 156.114770][ T4379] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.116507][ T4379] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.119250][ T7111] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 156.130165][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 156.144764][ T6751] EXT4-fs (loop8): unmounting filesystem. [ 156.259625][ T7131] loop9: detected capacity change from 0 to 512 [ 156.266757][ T7131] EXT4-fs (loop9): Test dummy encryption mode enabled [ 156.285149][ T7131] EXT4-fs error (device loop9): ext4_orphan_get:1405: inode #15: comm syz.9.759: inode has both inline data and extents flags [ 156.289330][ T7131] EXT4-fs error (device loop9): ext4_orphan_get:1410: comm syz.9.759: couldn't read orphan inode 15 (err -117) [ 156.298860][ T7131] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 156.345428][ T7131] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce" [ 157.268319][ T7163] netlink: 104 bytes leftover after parsing attributes in process `syz.8.826'. [ 157.588656][ T7174] loop8: detected capacity change from 0 to 512 [ 157.605898][ T6794] EXT4-fs (loop9): unmounting filesystem. [ 157.623157][ T7174] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 157.965945][ T6751] EXT4-fs (loop8): unmounting filesystem. [ 158.349333][ T7193] loop9: detected capacity change from 0 to 128 [ 158.631309][ T7193] FAT-fs (loop9): bogus number of reserved sectors [ 158.632469][ T7193] FAT-fs (loop9): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 158.633988][ T7193] FAT-fs (loop9): Can't find a valid FAT filesystem [ 159.072638][ T7193] random: crng reseeded on system resumption [ 159.478876][ T7203] binder: tried to use weak ref as strong ref [ 159.480005][ T7203] binder: 7201:7203 Acquire 1 refcount change on invalid ref 0 ret -22 [ 159.486687][ T7203] binder: 7201:7203 got transaction to invalid handle, 1 [ 159.490788][ T7203] binder: 7203:7201 cannot find target node [ 159.491741][ T7203] binder: 7201:7203 transaction call to 0:0 failed 24/29201/-22, size 32-24 line 3062 [ 159.494153][ T4497] binder: undelivered TRANSACTION_ERROR: 29201 [ 159.499377][ T7205] netlink: 104 bytes leftover after parsing attributes in process `syz.0.840'. [ 159.704102][ T7211] loop5: detected capacity change from 0 to 512 [ 159.736220][ T7211] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 159.845190][ T7221] loop8: detected capacity change from 0 to 512 [ 160.120144][ T7226] netlink: 104 bytes leftover after parsing attributes in process `syz.0.853'. [ 160.142151][ T7221] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 160.153805][ T7221] EXT4-fs (loop8): re-mounted. Quota mode: writeback. [ 160.175693][ T7221] EXT4-fs (loop8): re-mounted. Quota mode: writeback. [ 160.213585][ T6751] EXT4-fs (loop8): unmounting filesystem. [ 160.565785][ T5996] EXT4-fs (loop5): unmounting filesystem. [ 160.646636][ T7261] loop5: detected capacity change from 0 to 512 [ 160.659467][ T7264] binder: BINDER_SET_CONTEXT_MGR already set [ 160.661261][ T7264] binder: 7263:7264 ioctl 4018620d 20004a80 returned -16 [ 160.662912][ T7264] binder: 7263:7264 got transaction to invalid handle, 1 [ 160.664218][ T7264] binder: 7264:7263 cannot find target node [ 160.665383][ T7264] binder: 7263:7264 transaction call to 0:0 failed 27/29201/-22, size 32-24 line 3062 [ 160.667457][ T4497] binder: undelivered TRANSACTION_ERROR: 29201 [ 161.033242][ T7261] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 161.569859][ T5996] EXT4-fs (loop5): unmounting filesystem. [ 162.307712][ T7308] device syzkaller0 entered promiscuous mode [ 163.047189][ T7356] loop9: detected capacity change from 0 to 512 [ 163.176003][ T7356] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 163.638551][ T7378] binder: BINDER_SET_CONTEXT_MGR already set [ 163.647376][ T7378] binder: 7377:7378 ioctl 4018620d 20004a80 returned -16 [ 163.662125][ T7378] binder: 7377:7378 got transaction to invalid handle, 1 [ 163.667778][ T7378] binder: 7378:7377 cannot find target node [ 163.675263][ T7378] binder: 7377:7378 transaction call to 0:0 failed 30/29201/-22, size 32-24 line 3062 [ 163.711890][ T3900] binder: undelivered TRANSACTION_ERROR: 29201 [ 164.045832][ T6794] EXT4-fs (loop9): unmounting filesystem. [ 164.604647][ T7426] loop5: detected capacity change from 0 to 512 [ 164.654474][ T7426] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 164.853004][ T7451] loop8: detected capacity change from 0 to 512 [ 164.905046][ T7451] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 165.129138][ T7469] loop9: detected capacity change from 0 to 512 [ 165.182682][ T7469] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 165.703004][ T6751] EXT4-fs (loop8): unmounting filesystem. [ 165.994430][ T6794] EXT4-fs (loop9): unmounting filesystem. [ 166.136689][ T7524] device syzkaller0 entered promiscuous mode [ 166.148038][ T5996] EXT4-fs (loop5): unmounting filesystem. [ 166.195549][ T7541] loop5: detected capacity change from 0 to 512 [ 166.240777][ T7541] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 166.245527][ T4389] device hsr_slave_0 left promiscuous mode [ 166.311973][ T4389] device hsr_slave_1 left promiscuous mode [ 166.401203][ T4389] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.402843][ T4389] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.405655][ T4389] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.407004][ T4389] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.408552][ T4389] device bridge_slave_1 left promiscuous mode [ 166.414687][ T4389] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.461610][ T4389] device bridge_slave_0 left promiscuous mode [ 166.462837][ T4389] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.692919][ T4389] device hsr_slave_0 left promiscuous mode [ 166.711028][ T4389] device hsr_slave_1 left promiscuous mode [ 166.761132][ T7569] loop8: detected capacity change from 0 to 512 [ 166.771630][ T4389] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.775129][ T4389] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.777874][ T4389] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.779451][ T4389] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.785295][ T4389] device bridge_slave_1 left promiscuous mode [ 166.786895][ T4389] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.789564][ T7569] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 166.821114][ T4389] device bridge_slave_0 left promiscuous mode [ 166.822484][ T4389] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.950585][ T4389] device veth1_macvtap left promiscuous mode [ 166.951953][ T4389] device veth0_macvtap left promiscuous mode [ 166.953343][ T4389] device veth1_vlan left promiscuous mode [ 166.954535][ T4389] device veth0_vlan left promiscuous mode [ 167.041439][ T4389] device veth1_macvtap left promiscuous mode [ 167.043910][ T4389] device veth0_macvtap left promiscuous mode [ 167.047420][ T4389] device veth1_vlan left promiscuous mode [ 167.048751][ T4389] device veth0_vlan left promiscuous mode [ 167.620258][ T6751] EXT4-fs (loop8): unmounting filesystem. [ 167.646751][ T7597] loop8: detected capacity change from 0 to 512 [ 167.655100][ T7597] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 167.668566][ T7597] EXT4-fs (loop8): re-mounted. Quota mode: writeback. [ 167.684367][ T6751] EXT4-fs (loop8): unmounting filesystem. [ 167.699919][ T7601] binder: BINDER_SET_CONTEXT_MGR already set [ 167.704659][ T7601] binder: 7600:7601 ioctl 4018620d 20004a80 returned -16 [ 167.804464][ T7607] loop8: detected capacity change from 0 to 512 [ 167.829619][ T7607] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 168.664357][ T6751] EXT4-fs (loop8): unmounting filesystem. [ 169.778479][ T7626] loop8: detected capacity change from 0 to 512 [ 169.807864][ T7626] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 169.813076][ T4389] team0 (unregistering): Port device team_slave_1 removed [ 170.016957][ T4389] team0 (unregistering): Port device team_slave_0 removed [ 170.195187][ T4389] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.420879][ T4389] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.635816][ T6751] EXT4-fs (loop8): unmounting filesystem. [ 170.685216][ T7634] binder: BINDER_SET_CONTEXT_MGR already set [ 170.686242][ T7634] binder: 7633:7634 ioctl 4018620d 20004a80 returned -16 [ 170.709190][ T7636] loop8: detected capacity change from 0 to 512 [ 170.727312][ T7636] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 170.743918][ T7636] EXT4-fs (loop8): re-mounted. Quota mode: writeback. [ 170.754010][ T6751] EXT4-fs (loop8): unmounting filesystem. [ 171.713879][ T7646] loop8: detected capacity change from 0 to 512 [ 171.744065][ T7646] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 172.471909][ T4389] bond0 (unregistering): Released all slaves [ 172.569090][ T6751] EXT4-fs (loop8): unmounting filesystem. [ 173.759363][ T7666] loop8: detected capacity change from 0 to 512 [ 173.771778][ T7666] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 174.617646][ T6751] EXT4-fs (loop8): unmounting filesystem. [ 174.639327][ T7672] binder: BINDER_SET_CONTEXT_MGR already set [ 174.640351][ T7672] binder: 7671:7672 ioctl 4018620d 20004a80 returned -16 [ 174.679639][ T7674] loop8: detected capacity change from 0 to 512 [ 174.691974][ T7674] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 174.696010][ T7674] EXT4-fs (loop8): re-mounted. Quota mode: writeback. [ 174.705703][ T6751] EXT4-fs (loop8): unmounting filesystem. [ 175.343468][ T4389] team0 (unregistering): Port device team_slave_1 removed [ 175.501338][ T4389] team0 (unregistering): Port device team_slave_0 removed [ 175.652793][ T4389] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.661874][ T7686] loop8: detected capacity change from 0 to 512 [ 175.682240][ T7686] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 176.026550][ T4389] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 177.571394][ T4389] bond0 (unregistering): Released all slaves [ 177.891832][ T7567] netlink: 32 bytes leftover after parsing attributes in process `syz.0.929'. [ 177.894147][ T5996] EXT4-fs (loop5): unmounting filesystem. [ 177.936837][ T6751] EXT4-fs (loop8): unmounting filesystem. [ 178.176698][ T7717] binder: 7716:7717 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 178.193934][ T7717] binder: 7716:7717 got transaction to invalid handle, 1 [ 178.195122][ T7717] binder: 7717:7716 cannot find target node [ 178.196085][ T7717] binder: 7716:7717 transaction call to 0:0 failed 36/29201/-22, size 32-24 line 3062 [ 178.204952][ T7721] loop9: detected capacity change from 0 to 512 [ 178.209177][ T4492] binder: undelivered TRANSACTION_ERROR: 29201 [ 178.248076][ T7721] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 178.255036][ T7721] EXT4-fs (loop9): re-mounted. Quota mode: writeback. [ 178.358014][ T6794] EXT4-fs (loop9): unmounting filesystem. [ 178.759567][ T7738] loop8: detected capacity change from 0 to 512 [ 178.789976][ T7738] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 179.027821][ T7766] loop9: detected capacity change from 0 to 512 [ 179.073564][ T7766] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 179.485367][ T6751] EXT4-fs (loop8): unmounting filesystem. [ 179.597580][ T7782] device syzkaller0 entered promiscuous mode [ 179.770070][ T27] audit: type=1326 audit(179.750:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7799 comm="syz.8.991" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa0379228 code=0x0 [ 179.878839][ T6794] EXT4-fs (loop9): unmounting filesystem. [ 180.248021][ T7829] loop9: detected capacity change from 0 to 512 [ 180.292951][ T7829] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 180.712003][ T7850] loop5: detected capacity change from 0 to 512 [ 180.787805][ T7850] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 180.805069][ T7850] EXT4-fs (loop5): re-mounted. Quota mode: writeback. [ 180.855430][ T5996] EXT4-fs (loop5): unmounting filesystem. [ 181.341812][ T6794] EXT4-fs (loop9): unmounting filesystem. [ 181.354703][ T7868] device syzkaller0 entered promiscuous mode [ 181.512532][ T7896] binder: 7894:7896 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 181.567334][ T7898] binder: 7894:7898 got transaction to invalid handle, 1 [ 181.568709][ T7898] binder: 7898:7894 cannot find target node [ 181.569794][ T7898] binder: 7894:7898 transaction call to 0:0 failed 38/29201/-22, size 32-24 line 3062 [ 181.586962][ T115] binder: undelivered TRANSACTION_ERROR: 29201 [ 181.940562][ T7909] loop5: detected capacity change from 0 to 512 [ 181.997072][ T7909] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 182.586390][ T7951] binder: 7950:7951 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 182.589265][ T7951] binder: 7950:7951 got transaction to invalid handle, 1 [ 182.600571][ T7951] binder: 7951:7950 cannot find target node [ 182.601834][ T7951] binder: 7950:7951 transaction call to 0:0 failed 40/29201/-22, size 32-24 line 3062 [ 182.618537][ T14] binder: undelivered TRANSACTION_ERROR: 29201 [ 183.056794][ T5996] EXT4-fs (loop5): unmounting filesystem. [ 183.603289][ T8002] binder: 8001:8002 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 183.605968][ T8002] binder: 8001:8002 got transaction to invalid handle, 1 [ 183.607148][ T8002] binder: 8002:8001 cannot find target node [ 183.608113][ T8002] binder: 8001:8002 transaction call to 0:0 failed 42/29201/-22, size 32-24 line 3062 [ 183.619004][ T4492] binder: undelivered TRANSACTION_ERROR: 29201 [ 183.693613][ T8012] loop9: detected capacity change from 0 to 512 [ 183.728436][ T8015] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1042'. [ 183.732716][ T8012] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 183.875512][ T8024] loop5: detected capacity change from 0 to 512 [ 183.908452][ T8024] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 184.718666][ T6794] EXT4-fs (loop9): unmounting filesystem. [ 184.742992][ T5996] EXT4-fs (loop5): unmounting filesystem. [ 184.752997][ T8056] binder: 8055:8056 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 184.755606][ T8056] binder: 8055:8056 got transaction to invalid handle, 1 [ 184.756837][ T8056] binder: 8056:8055 cannot find target node [ 184.757818][ T8056] binder: 8055:8056 transaction call to 0:0 failed 44/29201/-22, size 32-24 line 3062 [ 184.759510][ T14] binder: undelivered TRANSACTION_ERROR: 29201 [ 184.777434][ T8059] netlink: 104 bytes leftover after parsing attributes in process `syz.9.1054'. [ 185.473807][ T8108] netlink: 104 bytes leftover after parsing attributes in process `syz.9.1066'. [ 185.797965][ T8121] binder: 8120:8121 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 185.804188][ T8121] binder: 8120:8121 got transaction to invalid handle, 1 [ 185.805532][ T8121] binder: 8121:8120 cannot find target node [ 185.811399][ T8121] binder: 8120:8121 transaction call to 0:0 failed 46/29201/-22, size 32-24 line 3062 [ 185.816664][ T115] binder: undelivered TRANSACTION_ERROR: 29201 [ 185.865366][ T8127] loop9: detected capacity change from 0 to 512 [ 185.916373][ T8127] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 186.482575][ T8162] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1079'. [ 186.862281][ T6794] EXT4-fs (loop9): unmounting filesystem. [ 187.282133][ T8200] loop9: detected capacity change from 0 to 512 [ 187.420169][ T2064] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.421429][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.430203][ T8200] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 187.480560][ T8200] EXT4-fs (loop9): re-mounted. Quota mode: writeback. [ 187.507100][ T8212] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1092'. [ 187.549385][ T6794] EXT4-fs (loop9): unmounting filesystem. [ 187.620987][ T8217] binder: 8216:8217 ioctl 4018620d 0 returned -22 [ 187.626628][ T8217] binder: 8216:8217 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 187.639551][ T8217] binder: 8216:8217 got transaction to invalid handle, 1 [ 187.646388][ T8217] binder: 8217:8216 cannot find target node [ 187.745620][ T8221] loop5: detected capacity change from 0 to 512 [ 187.787230][ T8221] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 188.552099][ T8257] loop9: detected capacity change from 0 to 512 [ 188.593856][ T5996] EXT4-fs (loop5): unmounting filesystem. [ 188.719124][ T8263] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1105'. [ 188.741846][ T8257] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 188.746162][ T8257] EXT4-fs (loop9): re-mounted. Quota mode: writeback. [ 188.777347][ T8269] binder: 8268:8269 ioctl 4018620d 0 returned -22 [ 188.777384][ T6794] EXT4-fs (loop9): unmounting filesystem. [ 188.779002][ T8269] binder: 8268:8269 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 188.806150][ T8269] binder: 8268:8269 got transaction to invalid handle, 1 [ 188.807565][ T8269] binder_debug: 2 callbacks suppressed [ 188.807577][ T8269] binder: 8269:8268 cannot find target node [ 188.809737][ T8269] binder: 8268:8269 transaction call to 0:0 failed 52/29201/-22, size 32-24 line 3062 [ 188.874663][ T14] binder: undelivered TRANSACTION_ERROR: 29201 [ 188.894956][ T8278] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1110'. [ 189.116113][ T8293] loop8: detected capacity change from 0 to 512 [ 189.154748][ T8293] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 189.672914][ T8311] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1119'. [ 189.970839][ T6751] EXT4-fs (loop8): unmounting filesystem. [ 190.319819][ T8362] loop9: detected capacity change from 0 to 512 [ 190.348807][ T8362] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 190.351354][ T8368] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1133'. [ 190.353360][ T8362] EXT4-fs (loop9): re-mounted. Quota mode: writeback. [ 190.365837][ T6794] EXT4-fs (loop9): unmounting filesystem. [ 190.385071][ T8370] binder: BINDER_SET_CONTEXT_MGR already set [ 190.386262][ T8370] binder: 8369:8370 ioctl 4018620d 20004a80 returned -16 [ 190.442072][ T8378] loop9: detected capacity change from 0 to 512 [ 190.457695][ T8378] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 190.879313][ T8429] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1145'. [ 191.055987][ T8447] binder: BINDER_SET_CONTEXT_MGR already set [ 191.059261][ T8447] binder: 8446:8447 ioctl 4018620d 20004a80 returned -16 [ 191.299088][ T6794] EXT4-fs (loop9): unmounting filesystem. [ 191.761095][ T8479] netlink: 104 bytes leftover after parsing attributes in process `syz.9.1158'. [ 191.782836][ T8483] loop8: detected capacity change from 0 to 512 [ 191.827400][ T8483] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 191.837000][ T8483] EXT4-fs (loop8): re-mounted. Quota mode: writeback. [ 191.859333][ T8483] EXT4-fs (loop8): re-mounted. Quota mode: writeback. [ 191.907314][ T6751] EXT4-fs (loop8): unmounting filesystem. [ 192.147620][ T8510] binder: BINDER_SET_CONTEXT_MGR already set [ 192.148761][ T8510] binder: 8509:8510 ioctl 4018620d 20004a80 returned -16 [ 192.250103][ T8519] loop5: detected capacity change from 0 to 512 [ 192.285940][ T8519] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 192.480364][ T8546] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1171'. [ 192.969758][ T8594] netlink: 104 bytes leftover after parsing attributes in process `syz.9.1185'. [ 193.112624][ T5996] EXT4-fs (loop5): unmounting filesystem. [ 193.146821][ T8610] loop5: detected capacity change from 0 to 512 [ 193.185984][ T8610] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 193.229621][ T5996] EXT4-fs (loop5): unmounting filesystem. [ 193.278433][ T8623] binder: 8621:8623 ioctl c0306201 0 returned -14 [ 193.287251][ T8623] binder: 8621:8623 got transaction to invalid handle, 1 [ 193.288516][ T8623] binder: 8623:8621 cannot find target node [ 193.289529][ T8623] binder: 8621:8623 transaction call to 0:0 failed 59/29201/-22, size 32-24 line 3062 [ 193.330563][ T4497] binder: undelivered TRANSACTION_ERROR: 29201 [ 193.597165][ T8647] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1198'. [ 193.704982][ T8652] netlink: 2128 bytes leftover after parsing attributes in process `syz.5.1200'. [ 193.887571][ T8658] netlink: 'syz.9.1199': attribute type 10 has an invalid length. [ 193.891154][ T8658] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.892671][ T8658] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.902162][ T8658] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.903404][ T8658] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.905016][ T8658] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.906298][ T8658] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.916662][ T8658] team0: Port device bridge0 added [ 194.856625][ T8675] loop5: detected capacity change from 0 to 512 [ 194.904991][ T8675] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 194.959564][ T8687] binder: 8684:8687 ioctl c0306201 0 returned -14 [ 194.989090][ T8687] binder: 8684:8687 got transaction to invalid handle, 1 [ 194.990395][ T8687] binder: 8687:8684 cannot find target node [ 194.998973][ T8687] binder: 8684:8687 transaction call to 0:0 failed 63/29201/-22, size 32-24 line 3062 [ 195.006988][ T4497] binder: undelivered TRANSACTION_ERROR: 29201 [ 195.015631][ T8694] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1210'. [ 195.713664][ T5996] EXT4-fs (loop5): unmounting filesystem. [ 195.964927][ T8767] binder: 8766:8767 got transaction to invalid handle, 1 [ 195.966239][ T8767] binder: 8767:8766 cannot find target node [ 195.967262][ T8767] binder: 8766:8767 transaction call to 0:0 failed 67/29201/-22, size 32-24 line 3062 [ 195.969246][ T6665] binder: undelivered TRANSACTION_ERROR: 29201 [ 195.989166][ T8769] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1223'. [ 196.326033][ T8791] loop5: detected capacity change from 0 to 512 [ 196.380333][ T8791] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 197.019056][ T8820] netlink: 596 bytes leftover after parsing attributes in process `syz.8.1238'. [ 197.169950][ T5996] EXT4-fs (loop5): unmounting filesystem. [ 197.272951][ T8851] loop5: detected capacity change from 0 to 512 [ 197.316694][ T8851] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 198.290286][ T5996] EXT4-fs (loop5): unmounting filesystem. [ 198.764414][ T8946] Bluetooth: MGMT ver 1.22 [ 198.811552][ T8953] loop9: detected capacity change from 0 to 512 [ 198.823480][ T8953] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 199.570983][ T8992] loop8: detected capacity change from 0 to 512 [ 199.593063][ T8992] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 199.671952][ T6794] EXT4-fs (loop9): unmounting filesystem. [ 200.469859][ T9041] loop9: detected capacity change from 0 to 512 [ 200.509558][ T9041] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 200.861775][ T6751] EXT4-fs (loop8): unmounting filesystem. [ 201.181132][ T9072] binder: tried to use weak ref as strong ref [ 201.182263][ T9072] binder: 9068:9072 Acquire 1 refcount change on invalid ref 0 ret -22 [ 201.183985][ T9072] binder: 9068:9072 got transaction to invalid handle, 1 [ 201.185419][ T9072] binder: 9072:9068 cannot find target node [ 201.186502][ T9072] binder: 9068:9072 transaction call to 0:0 failed 70/29201/-22, size 32-24 line 3062 [ 201.188369][ T4492] binder: undelivered TRANSACTION_ERROR: 29201 [ 201.326846][ T6794] EXT4-fs (loop9): unmounting filesystem. [ 201.407615][ T9098] loop8: detected capacity change from 0 to 512 [ 201.483665][ T9098] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 201.690164][ T9118] binder: tried to use weak ref as strong ref [ 201.693947][ T9118] binder: 9117:9118 Acquire 1 refcount change on invalid ref 0 ret -22 [ 201.705602][ T9118] binder: 9117:9118 got transaction to invalid handle, 1 [ 201.707061][ T9118] binder: 9118:9117 cannot find target node [ 201.719662][ T9118] binder: 9117:9118 transaction call to 0:0 failed 73/29201/-22, size 32-24 line 3062 [ 201.722791][ T6665] binder: undelivered TRANSACTION_ERROR: 29201 [ 201.928279][ T9129] loop5: detected capacity change from 0 to 2048 [ 201.968221][ T9129] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 201.996531][ T5996] EXT4-fs (loop5): unmounting filesystem. [ 202.141915][ T9138] loop5: detected capacity change from 0 to 512 [ 202.187578][ T9138] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 202.676542][ T6751] EXT4-fs (loop8): unmounting filesystem. [ 203.023760][ T9178] loop9: detected capacity change from 0 to 8 [ 203.034622][ T9178] SQUASHFS error: zlib decompression failed, data probably corrupt [ 203.036160][ T9178] SQUASHFS error: Failed to read block 0x9b: -5 [ 203.037267][ T9178] SQUASHFS error: Unable to read metadata cache entry [99] [ 203.038585][ T9178] SQUASHFS error: Unable to read inode 0x127 [ 203.054119][ T5996] EXT4-fs (loop5): unmounting filesystem. [ 203.659151][ T9225] loop9: detected capacity change from 0 to 512 [ 203.679111][ T9227] loop8: detected capacity change from 0 to 512 [ 203.724797][ T9225] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 203.759719][ T9227] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 204.022646][ T9247] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1340'. [ 204.024786][ T9253] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 204.526410][ T6751] EXT4-fs (loop8): unmounting filesystem. [ 204.658956][ T9301] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1352'. [ 204.969793][ T6794] EXT4-fs (loop9): unmounting filesystem. [ 205.144149][ T9337] loop5: detected capacity change from 0 to 512 [ 205.203829][ T9337] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 205.310317][ T5996] EXT4-fs (loop5): unmounting filesystem. [ 205.367037][ T9355] binder: 9354:9355 ioctl 4018620d 0 returned -22 [ 205.369374][ T9355] binder: tried to use weak ref as strong ref [ 205.406640][ T9355] binder: 9354:9355 Acquire 1 refcount change on invalid ref 0 ret -22 [ 205.410008][ T9355] binder: 9354:9355 got transaction to invalid handle, 1 [ 205.414016][ T9355] binder: 9355:9354 cannot find target node [ 205.415104][ T9355] binder: 9354:9355 transaction call to 0:0 failed 76/29201/-22, size 32-24 line 3062 [ 205.443330][ T6665] binder: undelivered TRANSACTION_ERROR: 29201 [ 205.562084][ T9368] block device autoloading is deprecated and will be removed. [ 205.576221][ T9372] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 205.663507][ T9377] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1368'. [ 205.678949][ T9380] loop5: detected capacity change from 0 to 512 [ 205.725968][ T9380] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 206.086192][ T9405] binder: 9403:9405 ioctl c0306201 0 returned -14 [ 206.097392][ T9407] loop8: detected capacity change from 0 to 1024 [ 206.098404][ T9405] binder: 9403:9405 got transaction to invalid handle, 1 [ 206.103070][ T9405] binder: 9405:9403 cannot find target node [ 206.112579][ T9407] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 206.196069][ T9407] EXT4-fs: Ignoring removed bh option [ 206.197213][ T9407] EXT4-fs: old and new quota format mixing [ 206.280109][ T6751] EXT4-fs (loop8): unmounting filesystem. [ 206.973307][ T5996] EXT4-fs (loop5): unmounting filesystem. [ 207.027969][ T9475] binder: 9474:9475 ioctl c0306201 0 returned -14 [ 207.030184][ T9475] binder: 9474:9475 got transaction to invalid handle, 1 [ 207.035450][ T9475] binder_debug: 2 callbacks suppressed [ 207.035500][ T9475] binder: 9475:9474 cannot find target node [ 207.043641][ T9475] binder: 9474:9475 transaction call to 0:0 failed 84/29201/-22, size 32-24 line 3062 [ 207.050154][ T4492] binder: undelivered TRANSACTION_ERROR: 29201 [ 207.053769][ T9476] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1388'. [ 207.055340][ T9476] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1388'. [ 207.129313][ T9480] loop8: detected capacity change from 0 to 512 [ 207.135753][ T9482] loop9: detected capacity change from 0 to 128 [ 207.138529][ T9482] EXT4-fs (loop9): can't mount with journal_async_commit, fs mounted w/o journal [ 207.183664][ T9480] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 207.294852][ T6751] EXT4-fs (loop8): unmounting filesystem. [ 207.623846][ T9518] loop9: detected capacity change from 0 to 512 [ 207.687555][ T9525] binder: 9524:9525 ioctl c0306201 0 returned -14 [ 207.693330][ T9525] binder: 9524:9525 got transaction to invalid handle, 1 [ 207.694582][ T9525] binder: 9525:9524 cannot find target node [ 207.695512][ T9525] binder: 9524:9525 transaction call to 0:0 failed 88/29201/-22, size 32-24 line 3062 [ 207.704721][ T4380] binder: undelivered TRANSACTION_ERROR: 29201 [ 207.751925][ T9529] device gre0 entered promiscuous mode [ 207.770238][ T9518] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 207.778236][ T9533] loop8: detected capacity change from 0 to 512 [ 207.862302][ T9533] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 207.891450][ T6751] EXT4-fs (loop8): unmounting filesystem. [ 208.865323][ T9609] binder: 9606:9609 got transaction to invalid handle, 1 [ 208.866921][ T9609] binder: 9609:9606 cannot find target node [ 208.868142][ T9609] binder: 9606:9609 transaction call to 0:0 failed 92/29201/-22, size 32-24 line 3062 [ 208.886935][ T3900] binder: undelivered TRANSACTION_ERROR: 29201 [ 209.098062][ T6794] EXT4-fs (loop9): unmounting filesystem. [ 209.134525][ T9622] loop8: detected capacity change from 0 to 512 [ 209.175135][ T9622] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 209.189058][ T6751] EXT4-fs (loop8): unmounting filesystem. [ 209.659189][ T9665] binder: 9664:9665 got transaction to invalid handle, 1 [ 209.663296][ T9665] binder: 9665:9664 cannot find target node [ 211.230728][ T9718] binder: 9717:9718 got transaction to invalid handle, 1 [ 211.572575][ T9738] usb usb8: usbfs: process 9738 (syz.8.1444) did not claim interface 0 before use [ 211.678413][ T9743] loop8: detected capacity change from 0 to 512 [ 211.689402][ T9743] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 212.177085][ T9753] loop8: detected capacity change from 0 to 2048 [ 212.216009][ T9753] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 212.282327][ T9753] fuse: Unknown parameter '0xffffffffffffffff' [ 212.390218][ T6751] EXT4-fs (loop8): unmounting filesystem. [ 212.638489][ T9793] loop9: detected capacity change from 0 to 512 [ 212.764284][ T9793] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 213.187819][ T9825] loop5: detected capacity change from 0 to 512 [ 213.222518][ T9825] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 213.628600][ T6794] EXT4-fs (loop9): unmounting filesystem. [ 213.639119][ T9838] binder: 9834:9838 got transaction to invalid handle, 1 [ 213.654395][ T9838] binder_debug: 5 callbacks suppressed [ 213.654409][ T9838] binder: 9838:9834 cannot find target node [ 213.656457][ T9838] binder: 9834:9838 transaction call to 0:0 failed 104/29201/-22, size 32-24 line 3062 [ 213.660171][ T4492] binder: undelivered TRANSACTION_ERROR: 29201 [ 214.035733][ T5996] EXT4-fs (loop5): unmounting filesystem. [ 214.167532][ T9878] loop5: detected capacity change from 0 to 8 [ 214.359978][ T9895] loop5: detected capacity change from 0 to 512 [ 214.368795][ T9894] binder: 9892:9894 got transaction to invalid handle, 1 [ 214.376977][ T9894] binder: 9894:9892 cannot find target node [ 214.378151][ T9894] binder: 9892:9894 transaction call to 0:0 failed 108/29201/-22, size 32-24 line 3062 [ 214.394951][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 214.403970][ T9895] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 214.801252][ T9905] loop8: detected capacity change from 0 to 1024 [ 215.268632][ T5996] EXT4-fs (loop5): unmounting filesystem. [ 215.860989][ T9947] device syzkaller0 entered promiscuous mode [ 216.082412][ T9962] binder: 9961:9962 tried to acquire reference to desc 0, got 1 instead [ 216.089045][ T9962] binder: 9961:9962 ioctl c0306201 0 returned -14 [ 216.420365][ T9968] loop8: detected capacity change from 0 to 512 [ 216.469015][ T9968] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 217.266773][ T6751] EXT4-fs (loop8): unmounting filesystem. [ 217.543497][T10024] device syzkaller0 entered promiscuous mode [ 217.629941][T10029] binder: 10028:10029 tried to acquire reference to desc 0, got 1 instead [ 217.642451][T10029] binder: 10028:10029 ioctl c0306201 0 returned -14 [ 217.809878][T10046] loop5: detected capacity change from 0 to 512 [ 217.853383][T10046] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 218.680234][ T5996] EXT4-fs (loop5): unmounting filesystem. [ 218.708588][T10096] device syzkaller0 entered promiscuous mode [ 218.911563][T10123] loop5: detected capacity change from 0 to 512 [ 219.021030][T10123] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 219.765025][ T5996] EXT4-fs (loop5): unmounting filesystem. [ 219.832605][T10165] binder: 10164:10165 tried to acquire reference to desc 0, got 1 instead [ 220.522305][T10199] device syzkaller0 entered promiscuous mode [ 220.703220][T10214] loop5: detected capacity change from 0 to 512 [ 220.773547][T10231] binder: 10230:10231 tried to acquire reference to desc 0, got 1 instead [ 220.800755][T10214] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 221.544744][ T5996] EXT4-fs (loop5): unmounting filesystem. [ 221.881760][T10281] device syzkaller0 entered promiscuous mode [ 222.523412][T10304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1556'. [ 222.525244][T10304] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1556'. [ 222.548329][T10303] binder: 10302:10303 tried to acquire reference to desc 0, got 1 instead [ 223.111497][T10336] device syzkaller0 entered promiscuous mode [ 223.350016][T10354] binder: BINDER_SET_CONTEXT_MGR already set [ 223.363592][T10354] binder: 10353:10354 ioctl 4018620d 20004a80 returned -16 [ 223.369438][T10354] binder: tried to use weak ref as strong ref [ 223.373301][T10354] binder: 10353:10354 Acquire 1 refcount change on invalid ref 0 ret -22 [ 223.687356][T10386] loop9: detected capacity change from 0 to 512 [ 223.712845][T10386] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 223.742749][T10386] EXT4-fs (loop9): 1 truncate cleaned up [ 223.743703][T10386] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 223.856501][T10395] device syzkaller0 entered promiscuous mode [ 224.289775][T10412] tipc: Started in network mode [ 224.290912][T10412] tipc: Node identity 2000004, cluster identity 4711 [ 224.292142][T10412] tipc: Node number set to 33554436 [ 224.358001][T10416] binder: 10415:10416 tried to acquire reference to desc 0, got 1 instead [ 224.539957][ T6794] EXT4-fs (loop9): unmounting filesystem. [ 224.926778][T10442] loop9: detected capacity change from 0 to 512 [ 224.943528][T10442] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 224.963943][T10442] EXT4-fs (loop9): 1 truncate cleaned up [ 224.964967][T10442] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 225.152842][T10459] device syzkaller0 entered promiscuous mode [ 225.172433][ T6794] EXT4-fs (loop9): unmounting filesystem. [ 225.213741][T10463] binder: 10462:10463 tried to acquire reference to desc 0, got 1 instead [ 225.542152][T10471] loop9: detected capacity change from 0 to 512 [ 225.575981][T10471] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 226.262924][ T3993] device veth0_macvtap left promiscuous mode [ 227.143794][ T6794] EXT4-fs (loop9): unmounting filesystem. [ 227.540483][T10565] loop8: detected capacity change from 0 to 1024 [ 227.558132][T10565] EXT4-fs: Ignoring removed bh option [ 227.601775][T10565] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 227.660195][T10570] binder: 10569:10570 tried to acquire reference to desc 0, got 1 instead [ 227.675506][T10570] binder: 10569:10570 got transaction with invalid data ptr [ 227.686113][T10570] binder: 10569:10570 transaction call to 10569:0 failed 143/29201/-14, size 0-24 line 3350 [ 227.702687][ T4380] binder: undelivered TRANSACTION_ERROR: 29201 [ 227.794679][T10580] loop5: detected capacity change from 0 to 256 [ 227.863037][T10583] loop5: detected capacity change from 0 to 512 [ 227.894383][T10583] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 228.385256][ T6751] EXT4-fs (loop8): unmounting filesystem. [ 228.522167][T10612] overlayfs: unrecognized mount option "verity=require" or missing value [ 228.724322][ T5996] EXT4-fs (loop5): unmounting filesystem. [ 229.048003][T10630] device syzkaller0 entered promiscuous mode [ 229.275460][T10635] loop5: detected capacity change from 0 to 8 [ 229.323597][T10635] SQUASHFS error: Unable to read directory block [631:72] [ 229.325095][T10635] SQUASHFS error: Unable to read directory block [631:72] [ 229.495360][T10652] loop5: detected capacity change from 0 to 512 [ 229.544278][T10652] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 229.657315][T10667] loop9: detected capacity change from 0 to 256 [ 229.933317][T10667] FAT-fs (loop9): Unrecognized mount option "uni_xlate=3" or missing value [ 229.935162][T10670] binder: 10668:10670 tried to acquire reference to desc 0, got 1 instead [ 229.984574][ T14] binder: release 10668:10670 transaction 148 out, still active [ 229.992001][ T14] binder: undelivered TRANSACTION_COMPLETE [ 230.045131][ T14] binder: send failed reply for transaction 148, target dead [ 230.341951][ T5996] EXT4-fs (loop5): unmounting filesystem. [ 230.474955][T10684] loop8: detected capacity change from 0 to 1024 [ 230.476475][T10684] EXT4-fs: Ignoring removed oldalloc option [ 230.482174][T10684] EXT4-fs: Ignoring removed oldalloc option [ 230.486403][T10684] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 230.579248][T10684] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 231.121221][ T6751] EXT4-fs (loop8): unmounting filesystem. [ 231.214869][T10722] loop8: detected capacity change from 0 to 512 [ 231.238630][T10722] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 231.665920][T10732] binder: 10731:10732 tried to acquire reference to desc 0, got 1 instead [ 231.668172][ T115] binder: release 10731:10732 transaction 153 out, still active [ 231.669577][ T115] binder: undelivered TRANSACTION_COMPLETE [ 231.679767][ T115] binder: send failed reply for transaction 153, target dead [ 232.076690][ T6751] EXT4-fs (loop8): unmounting filesystem. [ 232.120197][T10758] device gre0 left promiscuous mode [ 232.822432][T10786] loop9: detected capacity change from 0 to 1024 [ 232.827752][T10788] loop5: detected capacity change from 0 to 512 [ 232.828217][T10786] EXT4-fs: Ignoring removed nomblk_io_submit option [ 232.841924][T10788] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 232.849877][T10786] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 232.882811][ T6794] EXT4-fs (loop9): unmounting filesystem. [ 233.275077][T10799] device syzkaller0 entered promiscuous mode [ 233.577180][T10809] netlink: 'syz.1.1696': attribute type 2 has an invalid length. [ 233.688107][ T5996] EXT4-fs (loop5): unmounting filesystem. [ 234.117939][T10843] device syzkaller0 entered promiscuous mode [ 235.160834][T10879] netlink: 'syz.1.1718': attribute type 29 has an invalid length. [ 235.162409][T10879] netlink: 'syz.1.1718': attribute type 29 has an invalid length. [ 235.530531][ T4331] Bluetooth: hci5: command 0x0406 tx timeout [ 235.824037][T10897] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1727'. [ 235.905460][T10903] loop8: detected capacity change from 0 to 256 [ 235.983324][T10908] device syzkaller0 entered promiscuous mode [ 236.042913][T10910] loop8: detected capacity change from 0 to 256 [ 236.044462][T10910] FAT-fs (loop8): Unrecognized mount option "ÿÿ" or missing value [ 236.127655][ T6809] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 236.676869][T10943] loop5: detected capacity change from 0 to 512 [ 236.696149][T10943] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 236.698111][T10943] FAT-fs (loop5): Filesystem has been set read-only [ 237.719500][T10979] bcache: register_bcache() error : failed to open device [ 237.769266][T10984] device syzkaller0 entered promiscuous mode [ 237.776843][T10986] loop9: detected capacity change from 0 to 512 [ 237.804142][T10986] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 237.837993][ T6794] EXT4-fs error (device loop9): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 237.845613][ T6794] EXT4-fs error (device loop9): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 237.847686][ T6794] EXT4-fs error (device loop9): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 237.849773][ T6794] EXT4-fs error (device loop9): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 237.863913][ T6794] EXT4-fs error (device loop9): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 237.866131][ T6794] EXT4-fs error (device loop9): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 237.868309][ T6794] EXT4-fs error (device loop9): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 237.871668][ T6794] EXT4-fs error (device loop9): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 237.873888][ T6794] EXT4-fs error (device loop9): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 237.876026][ T6794] EXT4-fs error (device loop9): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 238.362556][ T6794] EXT4-fs (loop9): unmounting filesystem. [ 238.550094][ T4331] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 238.553217][ T4331] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 238.555026][ T4331] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 238.557666][ T4331] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 238.559323][ T4331] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 238.561035][ T4331] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 238.662406][ T6420] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.719092][T11013] bcache: register_bcache() error : failed to open device [ 238.752308][ T6420] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.862303][ T6420] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.872455][T11008] chnl_net:caif_netlink_parms(): no params data found [ 239.011651][ T6420] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.336140][T11008] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.338653][T11008] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.361779][T11008] device bridge_slave_0 entered promiscuous mode [ 239.365968][T11008] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.367420][T11008] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.432895][T11008] device bridge_slave_1 entered promiscuous mode [ 239.484276][T11037] Injecting memory failure for pfn 0x141822 at process virtual address 0x20001000 [ 239.493463][T11008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.496694][T11037] Memory failure: 0x141822: recovery action for clean LRU page: Recovered [ 239.498126][T11037] Injecting memory failure for pfn 0x143ff8 at process virtual address 0x20002000 [ 239.504166][T11008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.514539][T11037] Memory failure: 0x143ff8: recovery action for clean LRU page: Recovered [ 239.516081][T11037] Injecting memory failure for pfn 0x138cb9 at process virtual address 0x20003000 [ 239.520766][T11037] Memory failure: 0x138cb9: recovery action for clean LRU page: Recovered [ 239.535217][T11008] team0: Port device team_slave_0 added [ 239.622821][T11050] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1781'. [ 239.694559][T11008] team0: Port device team_slave_1 added [ 239.700267][T11008] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.708208][T11008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.719803][T11008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.783154][T11008] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.784330][T11008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.799138][T11008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.851673][T11008] device hsr_slave_0 entered promiscuous mode [ 239.883303][T11008] device hsr_slave_1 entered promiscuous mode [ 239.933175][T11008] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 239.934717][T11008] Cannot create hsr debugfs directory [ 240.571061][ T4333] Bluetooth: hci3: command 0x0409 tx timeout [ 241.354689][T11125] loop5: detected capacity change from 0 to 512 [ 241.364533][T11125] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 241.714889][T11145] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1794'. [ 242.483177][ T6420] device hsr_slave_0 left promiscuous mode [ 242.650564][ T4333] Bluetooth: hci3: command 0x041b tx timeout [ 242.655404][ T6420] device hsr_slave_1 left promiscuous mode [ 242.677104][ T5996] EXT4-fs (loop5): unmounting filesystem. [ 242.710824][ T6420] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.712123][ T6420] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.717562][ T6420] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.718764][ T6420] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.721827][ T6420] device bridge_slave_1 left promiscuous mode [ 242.723138][ T6420] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.761201][ T6420] device bridge_slave_0 left promiscuous mode [ 242.762475][ T6420] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.845354][T11212] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1806'. [ 242.922407][ T6420] device veth1_macvtap left promiscuous mode [ 242.924456][ T6420] device veth0_macvtap left promiscuous mode [ 242.925844][ T6420] device veth1_vlan left promiscuous mode [ 242.927494][ T6420] device veth0_vlan left promiscuous mode [ 244.730467][ T4331] Bluetooth: hci3: command 0x040f tx timeout [ 245.322266][ T6420] team0 (unregistering): Port device team_slave_1 removed [ 245.481314][ T6420] team0 (unregistering): Port device team_slave_0 removed [ 245.643716][ T6420] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.841231][ T6420] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.810520][ T4333] Bluetooth: hci3: command 0x0419 tx timeout [ 247.211725][ T6420] team0 (unregistering): Port device bridge0 removed [ 247.341751][ T6420] bond0 (unregistering): Released all slaves [ 248.254392][T11272] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1818'. [ 248.704179][T11008] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 248.812296][ T2064] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.814534][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 248.832635][T11008] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 248.875162][T11008] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 248.921770][T11008] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 249.088396][T11008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.099751][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 249.101522][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 249.105011][T11008] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.114403][ T7194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 249.116144][ T7194] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 249.117682][ T7194] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.118902][ T7194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.125184][ T7194] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 249.131969][ T7194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 249.142975][ T7194] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 249.145056][ T7194] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.146312][ T7194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.147879][ T7194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 249.149602][ T7194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 249.153546][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 249.155773][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 249.157376][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 249.161274][ T6420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 249.163127][ T6420] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 249.166508][ T6420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 249.168488][ T6420] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 249.174319][T11008] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 249.178542][T11008] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 249.183183][ T6420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 249.184997][ T6420] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 249.331398][ T6420] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 249.332865][ T6420] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 249.353100][T11008] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.367890][ T6420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 249.369748][ T6420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 249.386640][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 249.388228][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 249.389846][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 249.396661][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 249.401675][T11008] device veth0_vlan entered promiscuous mode [ 249.404877][T11008] device veth1_vlan entered promiscuous mode [ 249.442244][ T6420] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 249.443912][ T6420] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 249.445532][ T6420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 249.447086][ T6420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 249.466561][T11008] device veth0_macvtap entered promiscuous mode [ 249.478900][T11335] loop8: detected capacity change from 0 to 512 [ 249.531452][T11008] device veth1_macvtap entered promiscuous mode [ 249.549476][T11008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.564308][T11335] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 249.573814][T11008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.575560][T11008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.577245][T11008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.860286][T11008] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.881957][T11349] device syzkaller0 entered promiscuous mode [ 249.892624][ T7150] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 249.895522][ T7150] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 249.900343][ T7150] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 249.907512][ T7150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 249.915431][T11008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.917444][T11008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.919364][T11008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.927547][T11008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.933256][T11008] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.971343][ T7411] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 249.973130][ T7411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 249.977825][T11008] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.979648][T11008] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.981598][T11008] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.985423][T11008] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.075934][ T6420] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.077559][ T6420] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.079089][ T6420] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 250.099696][ T6420] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.101548][ T6420] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.103668][ T6420] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 250.256261][T11376] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1831'. [ 251.012714][ T6751] EXT4-fs (loop8): unmounting filesystem. [ 251.182667][T11421] device syzkaller0 entered promiscuous mode [ 251.492260][T11441] loop8: detected capacity change from 0 to 1024 [ 251.504598][T11441] ext4: Unknown parameter 'smackfsroot' [ 251.608205][T11446] bcache: register_bcache() error : failed to open device [ 251.694592][T11449] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1846'. [ 251.767145][T11456] loop8: detected capacity change from 0 to 512 [ 251.831029][T11456] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 252.845048][T11515] bcache: register_bcache() error : failed to open device [ 253.325241][ T6751] EXT4-fs (loop8): unmounting filesystem. [ 253.369933][T11554] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1867'. [ 253.548620][T11566] bcache: register_bcache() error : failed to open device [ 254.256734][T11608] loop8: detected capacity change from 0 to 512 [ 254.310831][T11608] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 255.790032][T11695] device syzkaller0 entered promiscuous mode [ 255.907982][ T6751] EXT4-fs (loop8): unmounting filesystem. [ 256.390196][T11717] bcache: register_bcache() error : failed to open device [ 256.712606][T11749] loop5: detected capacity change from 0 to 512 [ 256.743883][T11749] EXT4-fs (loop5): Test dummy encryption mode enabled [ 256.766726][T11749] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #15: comm syz.5.1906: inode has both inline data and extents flags [ 256.890731][T11749] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.1906: couldn't read orphan inode 15 (err -117) [ 256.892890][T11749] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 257.322354][T11789] overlayfs: failed to clone upperpath [ 258.288534][ T4333] Bluetooth: hci5: command 0x2016 tx timeout [ 258.309896][ T5996] EXT4-fs (loop5): unmounting filesystem. [ 259.074008][T11854] tipc: Started in network mode [ 259.076204][T11854] tipc: Node identity 2000004, cluster identity 4711 [ 259.077587][T11854] tipc: Node number set to 33554436 [ 259.085633][T11850] device syzkaller0 entered promiscuous mode [ 260.035965][T11887] loop8: detected capacity change from 0 to 512 [ 260.079008][T11887] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 260.450749][ T4333] Bluetooth: hci5: command 0x0406 tx timeout [ 260.879666][ T6751] EXT4-fs (loop8): unmounting filesystem. [ 262.006754][T11959] device syzkaller0 entered promiscuous mode [ 262.078177][T11969] tipc: Started in network mode [ 262.079143][T11969] tipc: Node identity 2000004, cluster identity 4711 [ 262.086788][T11969] tipc: Node number set to 33554436 [ 262.339486][T11983] loop2: detected capacity change from 0 to 1024 [ 262.352729][T11983] EXT4-fs: Ignoring removed oldalloc option [ 262.360947][T11983] EXT4-fs: Ignoring removed oldalloc option [ 262.369896][T11983] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 262.712266][T11983] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 262.801487][T11008] EXT4-fs (loop2): unmounting filesystem. [ 262.855675][T12009] loop2: detected capacity change from 0 to 512 [ 262.898667][T12009] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 263.496109][T12056] overlayfs: failed to clone upperpath [ 264.922368][T12073] loop8: detected capacity change from 0 to 1024 [ 264.934066][T12073] EXT4-fs: Ignoring removed oldalloc option [ 264.937344][T12073] EXT4-fs: Ignoring removed oldalloc option [ 264.945964][T12073] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 265.039098][T12073] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 265.388354][ T6751] EXT4-fs (loop8): unmounting filesystem. [ 265.526535][T11008] EXT4-fs (loop2): unmounting filesystem. [ 268.606017][T12167] netlink: 'syz.2.1979': attribute type 10 has an invalid length. [ 268.609409][T12167] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.610812][T12167] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.619936][T12167] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.621316][T12167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.623007][T12167] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.624586][T12167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.635411][T12167] team0: Port device bridge0 added [ 270.753884][T12216] loop5: detected capacity change from 0 to 512 [ 270.797700][T12216] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 271.372605][ T4333] Bluetooth: hci2: command 0x0406 tx timeout [ 271.566381][T12246] loop8: detected capacity change from 0 to 512 [ 271.879001][ T5996] EXT4-fs (loop5): unmounting filesystem. [ 271.913566][T12256] autofs4:pid:12256:autofs_fill_super: called with bogus options [ 272.071364][T12262] device syzkaller0 entered promiscuous mode [ 272.122088][T12262] tipc: Enabled bearer , priority 0 [ 272.124609][T12259] tipc: Resetting bearer [ 272.251882][T12259] tipc: Disabling bearer [ 272.438664][T12285] loop5: detected capacity change from 0 to 512 [ 272.493265][T12285] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 272.615007][T12292] autofs4:pid:12292:autofs_fill_super: called with bogus options [ 272.998800][T12298] loop8: detected capacity change from 0 to 8 [ 273.300996][ T5996] EXT4-fs (loop5): unmounting filesystem. [ 273.770517][ T4331] Bluetooth: hci2: command 0x2016 tx timeout [ 273.777077][T12323] autofs4:pid:12323:autofs_fill_super: called with bogus options [ 275.890639][ T4331] Bluetooth: hci2: command 0x0406 tx timeout [ 278.580033][T12463] netlink: 'syz.8.2069': attribute type 4 has an invalid length. [ 280.097276][T12497] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2078'. [ 280.102118][T12498] loop5: detected capacity change from 0 to 256 [ 281.534499][T12578] loop2: detected capacity change from 0 to 512 [ 282.396059][T12609] loop5: detected capacity change from 0 to 256 [ 282.562564][T12630] loop5: detected capacity change from 0 to 512 [ 282.612852][T11251] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 283.239607][T12670] overlayfs: failed to resolve './file0': -2 [ 284.978238][T12710] overlayfs: failed to resolve './file0': -2 [ 285.100312][T12721] loop8: detected capacity change from 0 to 512 [ 285.414668][T12726] binder: 12723:12726 tried to acquire reference to desc 0, got 1 instead [ 285.420913][T12726] binder: 12723:12726 got transaction with invalid handle, 3 [ 285.422566][T12726] binder: 12726:12723 translate handle failed [ 285.423860][T12726] binder: 12723:12726 transaction call to 12723:0 failed 158/29201/-22, size 72-24 line 3410 [ 285.428112][ T4489] binder: undelivered TRANSACTION_ERROR: 29201 [ 287.092705][T12755] overlayfs: failed to resolve './file0': -2 [ 287.158430][T12764] bcache: register_bcache() error : failed to open device [ 287.497552][T12775] loop2: detected capacity change from 0 to 512 [ 287.536530][T12775] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 288.213541][T12797] loop8: detected capacity change from 0 to 8 [ 288.225857][T12797] overlayfs: failed to resolve './file1': -2 [ 288.398866][T11008] EXT4-fs (loop2): unmounting filesystem. [ 289.244734][T12834] loop5: detected capacity change from 0 to 512 [ 289.306011][T12834] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 289.954862][T12855] bcache: register_bcache() error : failed to open device [ 290.194617][ T5996] EXT4-fs (loop5): unmounting filesystem. [ 290.706654][T12884] loop5: detected capacity change from 0 to 256 [ 290.825133][T12888] bcache: register_bcache() error : failed to open device [ 291.525333][T12920] bcache: register_bcache() error : failed to open device [ 292.792334][T12955] bcache: register_bcache() error : failed to open device [ 293.217631][T12968] loop5: detected capacity change from 0 to 1024 [ 293.901666][T12988] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2231'. [ 293.908777][T12988] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2231'. [ 294.515506][T12996] bcache: register_bcache() error : failed to open device [ 294.984372][T13006] loop8: detected capacity change from 0 to 8 [ 294.995853][T13006] overlayfs: failed to resolve './file1': -2 [ 295.155703][T13021] loop8: detected capacity change from 0 to 1024 [ 295.948337][T13043] loop2: detected capacity change from 0 to 8 [ 295.963306][T13043] overlayfs: failed to resolve './file1': -2 [ 297.194776][T13075] overlayfs: failed to resolve './file1': -2 [ 297.393095][T13079] loop2: detected capacity change from 0 to 1024 [ 299.077224][T13111] loop5: detected capacity change from 0 to 8 [ 299.099502][T13114] bcache: register_bcache() error : failed to open device [ 299.609842][T13128] loop8: detected capacity change from 0 to 1024 [ 299.653089][T11251] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 301.170913][T13164] loop2: detected capacity change from 0 to 8 [ 301.252290][T13168] bcache: register_bcache() error : failed to open device [ 301.931575][T13190] loop8: detected capacity change from 0 to 1024 [ 301.947645][T13192] loop2: detected capacity change from 0 to 256 [ 302.552591][T13200] loop5: detected capacity change from 0 to 8 [ 302.634326][T13213] loop2: detected capacity change from 0 to 512 [ 302.648173][T13213] journal_path: Lookup failure for './file1/file0' [ 302.649672][T13213] EXT4-fs: error: could not find journal device path [ 304.279099][T13260] loop5: detected capacity change from 0 to 1024 [ 305.163595][T13282] loop8: detected capacity change from 0 to 8 [ 305.308602][T13290] loop8: detected capacity change from 0 to 256 [ 305.879616][T13306] IPVS: sync thread started: state = BACKUP, mcast_ifn = macsec0, syncid = 3, id = 0 [ 306.026863][T13315] loop5: detected capacity change from 0 to 8 [ 306.446156][T13326] bcache: register_bcache() error : failed to open device [ 307.682749][T13368] bcache: register_bcache() error : failed to open device [ 308.210046][T13392] loop8: detected capacity change from 0 to 256 [ 308.656579][T13400] loop5: detected capacity change from 0 to 8 [ 308.779093][T13412] bcache: register_bcache() error : failed to open device [ 309.508073][T13419] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2377'. [ 309.508189][T13426] loop8: detected capacity change from 0 to 256 [ 310.035521][T13448] bcache: register_bcache() error : failed to open device [ 310.301306][ T2064] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.304230][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 310.679337][T13476] autofs4:pid:13476:autofs_fill_super: called with bogus options [ 310.938721][T13479] loop2: detected capacity change from 0 to 8 [ 310.953552][T13479] overlayfs: missing 'lowerdir' [ 311.027714][T13483] loop2: detected capacity change from 0 to 512 [ 311.041774][T13483] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 311.047762][T13486] loop8: detected capacity change from 0 to 1024 [ 311.051317][T13483] EXT4-fs (loop2): 1 truncate cleaned up [ 311.052427][T13483] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 311.102519][T11251] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 312.081194][T13505] loop8: detected capacity change from 0 to 512 [ 312.130346][T11008] EXT4-fs (loop2): unmounting filesystem. [ 312.233224][T13514] loop8: detected capacity change from 0 to 256 [ 312.779549][T13530] autofs4:pid:13530:autofs_fill_super: called with bogus options [ 313.144929][T13529] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.146533][T13529] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.939722][T13529] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.952660][T13529] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.236013][T13529] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.237664][T13529] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.239199][T13529] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.241205][T13529] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.404431][T13535] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2420'. [ 314.414344][T13536] bridge1: port 1(veth3) entered blocking state [ 314.415536][T13536] bridge1: port 1(veth3) entered disabled state [ 314.416993][T13536] device veth3 entered promiscuous mode [ 314.436401][T13538] bridge1: port 2(veth0_to_bond) entered blocking state [ 314.437939][T13538] bridge1: port 2(veth0_to_bond) entered disabled state [ 314.441195][T13538] device veth0_to_bond entered promiscuous mode [ 314.454089][T13539] bridge1: port 3(veth5) entered blocking state [ 314.455476][T13539] bridge1: port 3(veth5) entered disabled state [ 314.457146][T13539] device veth5 entered promiscuous mode [ 314.574753][ T4333] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 314.576837][ T4333] Bluetooth: hci3: Injecting HCI hardware error event [ 314.580962][ T4331] Bluetooth: hci3: hardware error 0x00 [ 315.152128][T13577] loop2: detected capacity change from 0 to 256 [ 315.318734][T13582] autofs4:pid:13582:autofs_fill_super: called with bogus options [ 315.427130][T13584] netlink: 'syz.2.2436': attribute type 10 has an invalid length. [ 316.383021][T13584] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.384414][T13584] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.468765][T13593] loop2: detected capacity change from 0 to 512 [ 316.609157][T11251] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 316.647623][T13606] loop8: detected capacity change from 0 to 256 [ 317.520068][T13624] netlink: 'syz.2.2450': attribute type 10 has an invalid length. [ 317.870703][ T4331] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 318.397759][T13641] loop8: detected capacity change from 0 to 512 [ 318.423407][T11251] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 318.425547][T13644] loop2: detected capacity change from 0 to 256 [ 320.241814][T13664] netlink: 'syz.0.2464': attribute type 10 has an invalid length. [ 320.254727][T13664] team0: Port device bridge0 added [ 321.220257][T13674] overlayfs: missing 'lowerdir' [ 321.336562][T13686] loop5: detected capacity change from 0 to 512 [ 321.359742][T13688] device syzkaller0 entered promiscuous mode [ 321.404682][T11251] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 321.405886][T13688] tipc: Enabled bearer , priority 0 [ 321.409479][T13687] tipc: Resetting bearer [ 322.731530][T13687] tipc: Disabling bearer [ 323.451288][T13703] netlink: 'syz.5.2478': attribute type 10 has an invalid length. [ 323.453202][T13703] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.454634][T13703] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.458661][T13703] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.459854][T13703] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.461543][T13703] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.462783][T13703] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.466097][T13703] team0: Port device bridge0 added [ 323.472458][T13704] netlink: 'syz.1.2477': attribute type 16 has an invalid length. [ 323.473736][T13704] netlink: 'syz.1.2477': attribute type 17 has an invalid length. [ 323.483533][T13704] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 323.485676][T13704] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 323.491736][T13704] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 323.498999][T13704] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 323.508258][T13704] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 323.510179][T13704] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 323.515763][T13704] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 323.523468][T13704] IPv6: ADDRCONF(NETDEV_CHANGE): sit0: link becomes ready [ 323.526678][T13704] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 323.607618][T13704] IPv6: ADDRCONF(NETDEV_CHANGE): ip6gre0: link becomes ready [ 323.617639][T13704] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 323.621792][T13704] IPv6: ADDRCONF(NETDEV_CHANGE): ip6gretap0: link becomes ready [ 323.628955][T13704] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 323.632931][T13704] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 323.638022][T13704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.639548][T13704] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 323.731735][T13704] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.847398][T13704] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 323.849356][T13704] IPv6: ADDRCONF(NETDEV_CHANGE): nlmon0: link becomes ready [ 323.862574][T13711] loop5: detected capacity change from 0 to 8 [ 323.870097][T13711] overlayfs: missing 'lowerdir' [ 323.890588][T13704] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 323.998272][T13721] loop5: detected capacity change from 0 to 4096 [ 324.003770][T13721] EXT4-fs: inline encryption not supported [ 324.005574][T13721] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 324.007142][T13721] EXT4-fs (loop5): Test dummy encryption mode enabled [ 324.009074][T13721] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 324.010671][T13721] System zones: 0-5 [ 324.024567][T13721] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 324.043214][ T5996] EXT4-fs (loop5): unmounting filesystem. [ 325.316600][T13755] loop8: detected capacity change from 0 to 256 [ 326.298379][T13782] loop8: detected capacity change from 0 to 512 [ 326.312609][T13782] EXT4-fs: inline encryption not supported [ 326.318273][T13782] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 326.402649][T13782] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 326.404629][T13782] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.2505: invalid indirect mapped block 2683928664 (level 1) [ 326.413618][T13782] EXT4-fs (loop8): 1 truncate cleaned up [ 326.414852][T13782] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 327.109603][T13794] EXT4-fs error (device loop8): ext4_get_branch:178: inode #13: block 1803188595: comm syz.8.2505: invalid block [ 327.113745][T13794] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.2505: invalid indirect mapped block 2054779762 (level 0) [ 327.167950][ T6751] EXT4-fs (loop8): unmounting filesystem. [ 327.590629][T13811] loop8: detected capacity change from 0 to 512 [ 328.211203][T13840] loop8: detected capacity change from 0 to 64 [ 328.600101][T13846] MTD: Couldn't look up './dev/mtdblock0': -2 [ 329.433345][T13864] loop8: detected capacity change from 0 to 512 [ 329.554423][T13870] loop8: detected capacity change from 0 to 512 [ 329.588683][T13870] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 330.397594][ T6751] EXT4-fs (loop8): unmounting filesystem. [ 330.404323][T13888] MTD: Couldn't look up './dev/mtdblock0': -2 [ 330.526488][T13906] loop8: detected capacity change from 0 to 512 [ 330.646298][T13912] bcache: register_bcache() error : failed to open device [ 331.007100][T13923] loop8: detected capacity change from 0 to 512 [ 331.038377][T13923] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 331.138966][T13925] netlink: 'syz.5.2548': attribute type 16 has an invalid length. [ 331.142988][T13925] netlink: 'syz.5.2548': attribute type 17 has an invalid length. [ 331.145289][T13925] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 331.147145][T13925] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 331.149068][T13925] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 331.151291][T13925] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 331.346970][T13930] MTD: Couldn't look up './dev/mtdblock0': -2 [ 331.565417][T13944] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2555'. [ 331.610562][T13948] loop5: detected capacity change from 0 to 512 [ 331.867852][ T6751] EXT4-fs (loop8): unmounting filesystem. [ 332.220317][T13958] MTD: Couldn't look up './dev/mtdblock0': -2 [ 332.294162][T13960] netlink: 'syz.8.2562': attribute type 16 has an invalid length. [ 332.295748][T13960] netlink: 'syz.8.2562': attribute type 17 has an invalid length. [ 332.298688][T13960] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 332.300758][T13960] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 332.304879][T13960] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 332.309710][T13960] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 332.391886][T13974] overlayfs: missing 'lowerdir' [ 332.730153][T13983] loop2: detected capacity change from 0 to 512 [ 333.132072][T13990] loop2: detected capacity change from 0 to 512 [ 333.154376][T13990] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 333.609129][T14009] overlayfs: missing 'lowerdir' [ 333.678324][T14012] netlink: 'syz.1.2579': attribute type 16 has an invalid length. [ 333.679595][T14012] netlink: 'syz.1.2579': attribute type 17 has an invalid length. [ 333.682568][T14012] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 333.710941][T11008] EXT4-fs (loop2): unmounting filesystem. [ 334.780229][T14012] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 335.007244][T14015] MTD: Couldn't look up './dev/mtdblock0': -2 [ 335.039513][T14017] netlink: 'syz.5.2577': attribute type 10 has an invalid length. [ 335.047937][T14017] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.049283][T14017] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.103171][T14022] loop5: detected capacity change from 0 to 256 [ 336.319814][T14053] loop2: detected capacity change from 0 to 1024 [ 336.352528][T11251] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 337.565348][T14070] overlayfs: missing 'workdir' [ 337.590590][T14057] netlink: 'syz.8.2593': attribute type 10 has an invalid length. [ 337.595509][T14057] team0: Port device bridge0 added [ 337.655043][T14073] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2599'. [ 338.778900][T14096] loop8: detected capacity change from 0 to 1024 [ 338.800141][T14096] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 338.825522][T14096] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.2606: bg 0: block 112: padding at end of block bitmap is not set [ 338.839338][T14096] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 44 with error 28 [ 338.844092][T14096] EXT4-fs (loop8): This should not happen!! Data will be lost [ 338.844092][T14096] [ 338.845777][T14096] EXT4-fs (loop8): Total free blocks count 0 [ 338.846739][T14096] EXT4-fs (loop8): Free/Dirty block details [ 338.847937][T14096] EXT4-fs (loop8): free_blocks=0 [ 338.848835][T14096] EXT4-fs (loop8): dirty_blocks=64 [ 338.849866][T14096] EXT4-fs (loop8): Block reservation details [ 338.854367][T14096] EXT4-fs (loop8): i_reserved_data_blocks=4 [ 338.867917][ T6751] EXT4-fs (loop8): unmounting filesystem. [ 339.570287][T14115] netlink: 'syz.5.2610': attribute type 10 has an invalid length. [ 340.085257][T14118] overlayfs: missing 'workdir' [ 340.354656][T14124] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2613'. [ 341.047911][T14146] netlink: 'syz.8.2617': attribute type 16 has an invalid length. [ 341.049588][T14146] netlink: 'syz.8.2617': attribute type 17 has an invalid length. [ 341.074553][T14146] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 341.082424][T14146] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 341.098632][T14146] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 341.100083][T14146] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 341.102174][T14146] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 341.103906][T14146] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.105610][T14148] loop2: detected capacity change from 0 to 512 [ 341.105770][T14146] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.120020][T14148] EXT4-fs (loop2): Test dummy encryption mode enabled [ 341.126969][T14148] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.2620: inode has both inline data and extents flags [ 341.129908][T14148] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.2620: couldn't read orphan inode 15 (err -117) [ 341.132885][T14148] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 341.151067][T14146] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 341.155734][ T14] IPv6: BUG: Address fc00:: on device lo is missing its host route. [ 341.962807][T11008] EXT4-fs (loop2): unmounting filesystem.