last executing test programs: 1m23.363870537s ago: executing program 0 (id=1): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x48}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000005304"], 0x14}}, 0x20000000) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newsa={0x158, 0x10, 0x413, 0x0, 0x0, {{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4d4, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x39}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x20000000008}, {0x0, 0x8, 0xcc}, {0xf6}, 0x70bd2c, 0x0, 0xa, 0x2, 0x5}, [@algo_aead={0x67, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0xd8, 0x80, "bed40c8022674b0ecf0153d786cfc67c1aa8a9bb2222a0c819cdef"}}]}, 0x158}}, 0x0) fsopen(0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x9, 0x4, 0x6, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000200), 0x3, r6}, 0x38) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r7}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0xfe}}]}}}]}, 0x5c}}, 0x0) 1m21.095710609s ago: executing program 0 (id=11): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000680)={[{@test_dummy_encryption}, {@init_itable}, {@noload}]}, 0x3, 0x470, &(0x7f0000001240)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000040)='./bus\x00', 0x1020862, 0x0, 0x1, 0x0, &(0x7f0000000000)) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 1m20.914707058s ago: executing program 0 (id=13): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x2200050, &(0x7f0000000000)=ANY=[], 0x1, 0x1516, &(0x7f0000003140)="$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") syz_usb_connect$sierra_net(0x4, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x10, &(0x7f0000006d40)=ANY=[@ANYBLOB="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"], 0xff, 0x14fe, &(0x7f0000002ac0)="$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") ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) open(&(0x7f0000000180)='./bus\x00', 0x14927f, 0x1e9) 1m15.422237304s ago: executing program 0 (id=47): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010"], 0x44}}, 0x2400c080) 1m15.278462038s ago: executing program 32 (id=47): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010"], 0x44}}, 0x2400c080) 32.467950952s ago: executing program 4 (id=279): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000140)={[{@grpid}, {@user_xattr}]}, 0xff, 0x48f, &(0x7f0000000b80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r5, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg$inet6(r5, &(0x7f0000001840), 0x3b, 0x0) 30.892669691s ago: executing program 4 (id=287): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009e173610ef171e7206de01020301090212"], 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000640)={0x0, 0x8, 0x4, "0e1d3fdd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 29.363050567s ago: executing program 4 (id=299): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000005002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf74c5fa4596d483b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000003680)='sched_switch\x00', r0}, 0x18) timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000380)=0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x800040, &(0x7f0000000340), 0x1, 0x5a3, &(0x7f00000005c0)="$eJzs3U9oHPUeAPDvzGZf/+U1ffAevPfooahQoXST9I9WT+1VLBR6KHipYbMNIZtsyG60CTmk9yL2ICq91JsePCoePIgXwYtXL4pnodig0PSgK/svbZPduKlJN81+PjDZ+c1vdr+/38x+J78ZZtgA+tax2p804n8RcSmJGHqkbiCalcca662uLOUfrCzlk6hWL/+SRBIR91eW8q31k+broYhYjoj/RsTX2YgT6ca45YXFqbFisTDXLA9XpmeHywuLJyenxyYKE4WZ0y+/cvbcmbOjp0Y7Nz67tb7e/PHWOze/e+3OrU8+Pbqcf28sifMx2Kx7tB/bqbFNsnF+3fIzOxGsh5JeN4AnkmnmeS2V/hNDkWlmfTvVoafaNGCHVfdFVLciWd7S6sBulmwt/4E9ozUOqJ3/tqbHBgiZDgOHfdsz/rh7oXECUou72pwaNQONaxOxv35ucvDX5LEzk9r55pHtaQJ9bPlGRIwMDGz8/ifN79+TG9mOBrKjvrrQ2FEb93+6dvyJNsefwda107+pdfxb3XD8exg/0+H4d6nLGL+/8dOHHePfiPh/2/jJWvykTfw0It7sMv7tK1+c61RX/SjieLSP35Jsfn14+NpksTDS+Ns2xpfHj766Wf8PdojfuGa7v/5vpt32n+2y/59/89lzy5vEf/H5zfd/u+1/ICLe7TL+v+5//Hqnurs3knu1UcBW939t2Z0u4790/tgPHaoOdPkRAAAAAAAAAABAG2n9XrYkza3Np2ku13iG999xMC2WypUT10rzM+ONe96ORDZt3Wk11CgntfJo837cVvnUuvLp1n3EmQP1ci5fKo73uO8AAAAAAAAAAAAAAAAAAACwWxxa9/z/b5n68//rf64a2Ks6/+Q3sNfJf+hfj+d/sm0/7gvsfo/k/4NetgN46qrG/9C/5D/0L/kP/Uv+Q/+S/9C/5D/0L/kPAAAAAAAAAAAAAAAAAAAAAAAAAAA74tLFi7Wp+mBlKV8rjw8szE+V3jo5XihP5abn87l8aW42N1EqTRQLuXxp+q8+r1gqzY7EzPz14UqhXBkuLyxenS7Nz1SuTk6PTRSuFrJPpVcAAAAAAAAAAAAAAAAAAADwbBmsT0mai4i0Pp+muVzEPyPiSGSTa5PFwkhEHI6I7zPZfbXyaK8bDQAAAAAAAAAAAAAAAAAAAHtMeWFxaqxYLMz1yczAhiXfdl45Ipa3txm1T9zyu7LNfbVbtuGzNnN483Uy0fMW7saZHh+YAAAAAAAAAAAAAAAAAACgDz186Lfbd/yxsw0CAAAAAAAAAAAAAAAAAACAvpT+nEREbTo+9MLg+tp/JKuZ+mtEvH378vvXxyqVudHa8ntryysfNJef6i7ilW3vA9CNVp628hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4qLywODVWLBbmdnCm130EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBJ/BgAA//9UNdg0") setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000200)={0xffffffffffffffff, 0x8022c37b9b00b63a, 0x4, 0x0, 0x8}, 0xc) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) clock_gettime(0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r4, 0x0) mount$overlay(0x0, &(0x7f0000000b80)='./file0\x00', 0x0, 0x0, &(0x7f0000000c00)={[{@index_on}, {@nfs_export_off}], [], 0x2c}) r5 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000300), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESHEX, @ANYBLOB="3a5dde5318b596682760bae0566e5fedd5daa811204d9e7a034188c8c8cd025d6281b27af19510ff38e4f9285babddc5225c891ec3e057d5cbe11580fee717548fa6542e412780287a3f9d2c7ccb", @ANYRESOCT=0x0, @ANYRES16, @ANYRESDEC, @ANYRESOCT=r2, @ANYRES64=r1, @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300), 0xc) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) 28.558501032s ago: executing program 4 (id=309): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000740)={[{@test_dummy_encryption}, {@i_version}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@inlinecrypt}, {@max_batch_time}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 28.441898393s ago: executing program 4 (id=313): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001c00010429bd7000fddbdf2507000000", @ANYRES32=r1, @ANYBLOB="0200ee050a000200aae6dd462c0200000c000e800500010078"], 0x44}, 0x1, 0x0, 0x0, 0xe144e469f031c35f}, 0x20040040) 28.030587789s ago: executing program 4 (id=316): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xc29c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0xb434, 0x0, 0x1, {0x22, 0x6}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x0, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, 0x0, &(0x7f0000001140)={0x0, 0x22, 0x6, {[@main=@item_4={0x3, 0x0, 0xa, "588ba957"}, @global=@item_012={0x0, 0x1, 0x6}]}}, 0x0}, 0x0) 27.983106804s ago: executing program 33 (id=316): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xc29c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0xb434, 0x0, 0x1, {0x22, 0x6}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x0, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, 0x0, &(0x7f0000001140)={0x0, 0x22, 0x6, {[@main=@item_4={0x3, 0x0, 0xa, "588ba957"}, @global=@item_012={0x0, 0x1, 0x6}]}}, 0x0}, 0x0) 7.698251791s ago: executing program 5 (id=432): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, 0x0) sched_setaffinity(0x0, 0xffffffffffffffa8, &(0x7f0000000000)=0x1002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x7, 0x0, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) writev(0xffffffffffffffff, &(0x7f0000000180), 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x41, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x160, 0x10, 0x713, 0x870bd2c, 0x25dfdbfc, {{@in=@broadcast, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x20, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x60, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x543}, {0x5, 0x7fffffffffffffff}, {0x0, 0xffffff80}, 0x70bd28, 0x3500, 0x2, 0x4}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "217d66d38547aa140db8a200000000c538c7cb7a"}}, @replay_val={0x10, 0xa, {0x70bd2d, 0x70bd29, 0x1}}]}, 0x160}, 0x1, 0x0, 0x0, 0x880}, 0x0) 7.638495489s ago: executing program 1 (id=433): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffff12850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='virtio_transport_alloc_pkt\x00', r2}, 0x10) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10) 7.624909639s ago: executing program 1 (id=434): socket$netlink(0x10, 0x3, 0xf) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xd0f, 0x0, 0x25dfdbfc, {0x60, 0x0, 0x0, r5, {}, {0x1, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) 6.830293863s ago: executing program 5 (id=439): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) close(r0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0x8, 0xff7fff01, 0x6, 0x3, 0x7, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x6, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8e, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x80000005, 0xfffffff3, 0x129432e6, 0xc8, 0x5, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0xfffffffd, 0x4, 0x5, 0xfffffffe, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x29e4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x1, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x44, 0x25], [0x9, 0xbb33, 0x7, 0x7fffffff, 0x5, 0x938, 0x2, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x0, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x0, 0x100, 0x9622, 0x9, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x71, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 6.829572772s ago: executing program 5 (id=441): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0xe02, 0x1c0) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r6, r5, 0x0, 0x3a) 6.747784325s ago: executing program 1 (id=442): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f786dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.554151439s ago: executing program 1 (id=444): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x14, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x12}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfd, {{@in=@multicast1, @in=@remote, 0x0, 0xb, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x1, 0x0, 0x80}}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x4d4, 0x3c}, 0x0, @in=@multicast1, 0x3, 0x0, 0x1, 0x8, 0x9, 0x0, 0x400}]}]}, 0xfc}}, 0x0) r8 = io_uring_setup(0x5e69, &(0x7f0000000100)={0x0, 0x1084, 0x40, 0x10000003, 0x2c3}) io_uring_register$IORING_REGISTER_FILES(r8, 0x2, &(0x7f0000000880)=[0xffffffffffffffff], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x1c, r3, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 5.783023831s ago: executing program 6 (id=447): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x200000, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x400, 0x0, 0xa, 0x0, 0x20, 0x5e}, {0x0, 0x800, 0x0, 0x7, 0x0, 0x0, 0x3, 0x7}, {0x0, 0x0, 0x3}}, [@tmpl={0x84, 0x5, [{{@in=@remote, 0x4, 0x6c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x8}, 0x0, 0x0, 0x0, 0x56, 0x0, 0xfffffffd, 0x1}, {{@in6=@mcast1, 0x0, 0x3c}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x44}, 0x0, 0x1, 0x3}]}]}, 0x13c}}, 0x0) 5.714160659s ago: executing program 6 (id=448): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x20000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x24044801}, 0x20010814) close(r3) 5.706115012s ago: executing program 1 (id=449): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = io_uring_setup(0x3c6f, &(0x7f0000000240)={0x0, 0x3b61, 0x9c8afc4d007dcf3c, 0x3, 0x137}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f00000001c0)={0xffffffff, 0x0, &(0x7f0000000800)=[{&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000400)=""/203, 0xcb}, {&(0x7f0000000500)=""/157, 0x9d}, {&(0x7f0000000600)=""/180, 0xb4}, {&(0x7f00000006c0)=""/96, 0x60}, {&(0x7f0000000740)=""/187, 0xbb}], &(0x7f0000000000)=[0x0], 0x7}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10}, 0x50) r4 = socket$inet(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000000140)={@local, @multicast1}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002100)=@newtfilter={0x44, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r7, {0xf}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'veth1_virt_wifi\x00'}]}}]}, 0x44}}, 0x24040084) syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), 0xffffffffffffffff) 5.674899038s ago: executing program 6 (id=450): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="16000000000000000400000002"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x2bc4, 0x0, 0x0, 0xd1be8e5621984e0c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r5}, 0x10) r6 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) 5.602077759s ago: executing program 5 (id=451): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req={0x17d1, 0x7, 0x1, 0x2}, 0x10) socket$xdp(0x2c, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) splice(0xffffffffffffffff, &(0x7f0000000380), 0xffffffffffffffff, &(0x7f00000003c0)=0x1ff, 0x81, 0x0) 3.236653982s ago: executing program 1 (id=454): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0xfffffff7) close(0x3) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x2000001, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 3.236376411s ago: executing program 2 (id=455): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) uname(0x0) 3.235896s ago: executing program 6 (id=456): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") 3.087480952s ago: executing program 2 (id=457): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) 3.014294422s ago: executing program 6 (id=458): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 2.997370138s ago: executing program 6 (id=459): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) epoll_create1(0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000200), 0x1, 0x4fa, &(0x7f00000005c0)="$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") 2.823094401s ago: executing program 2 (id=460): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) timerfd_create(0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r1, 0x5421, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000030000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x4, 0x0, 0x7fffffff, 0x3f8}, 0x0, 0x0) 2.730177294s ago: executing program 5 (id=461): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x5a, &(0x7f0000000180)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x24, 0x2b, 0x0, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[@hopopts={0x3c}, @dstopts={0x87}], {{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) socket$unix(0x1, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x9, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x3}]}, @fwd={0x7}, @restrict={0x0, 0x0, 0x0, 0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x2e, 0x61, 0x2e]}}, 0x0, 0x51}, 0x28) setsockopt$MRT6_PIM(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000100)=0x3, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000bc0), r7) sendmsg$TIPC_CMD_SET_NETID(r7, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c00)={0x24, r8, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x10) 2.72988591s ago: executing program 2 (id=462): r0 = socket(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x20000000) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs={0x40046304, 0x1}], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000500)={@flat=@weak_binder={0x77622a85, 0x0, 0x7fffffffff}, @fd={0x66642a85, 0x0, r5}, @flat=@binder={0x73622a85, 0x1001}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) 1.986216159s ago: executing program 3 (id=463): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='mm_page_alloc\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.881690324s ago: executing program 3 (id=464): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x3d) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000800000000000018010000", @ANYRES32, @ANYRESDEC=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r4}, 0x18) r5 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r6, &(0x7f0000000140)='./file0\x00') readlinkat(r6, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240)=""/65, 0x41) 1.878806338s ago: executing program 5 (id=465): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x2200050, &(0x7f0000000000)=ANY=[], 0x1, 0x1516, &(0x7f0000003140)="$eJzs3Am4T+X2OPC13vfdHDJ8k8x7vWvzTYaXJMmQJEOSJCGZE5IkSZLEIVMSkpDxJJlD5nTSMc9D5qSTK0mSkJDk/T+n4e823H/33l/3r9896/M8+znv2nu/a6991vmePTzPOV90HVa9UY0q9ZkZ/h365wH++CURABIAYCAAZAeAAADK5CiTI217Jo2J/9ZBxH9IgxmXuwJxOUn/0zfpf/om/U/fpP/pm/Q/fZP+p2/S//RN+i9EujYr75WypN9F3v//L6f+J5Pl+v/fB/G3q/7RvtL//zb6X9pb+p9uZPi9ldL/9OL3LwHS//RN+p+eBZe7AHGZyec/fZP+C5Gu/envlDecu9zvtGX5FxYhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEOL/g3P+EgMAP48vd11CCCGEEEIIIYT48/i3LncFQgghhBBCCCGE+M9DUKDBQAAZICMkQCbIDFdAFsgK2SA7xOBKyAFXQU64GnJBbsgDeSEf5IcCEAKBBYYICkIhiMM1UBiuhSJQFIpBcXBQAkrCdVAKrofScAOUgRuhLNwE5aA8VICKcDNUglugMtwKVeA2qArVoDrUgNuhJtwBteBOqA13QR24G+rCPVAP7oX60AAawn3QCO6HxtAEmkIzaA4toOUfzE/K/nvzn4Ee8Cz0hF6QCL2hDzwHfaEf9IcBMBCeh0HwAgyGF2EIDIVh8BIMh5dhBLwCI2EUjIZXYQyMhXEwHibAREiC12ASvA6T4Y37s8JUmAbTYQbMhFnwJsyGOTAX3oJ5MB8WQFKmRbAYlsDbsBTegWR4F5bBe5ACy2EFrIRVsBrWwFpYB+thA2yETbAZtsBW2Abvw3bYATthF+yGPbAXPoB98CHsh48gFT/+F+ef/eV86IaAgAoVGjSYATNgAiZgZsyMWTALZsNsGMMY5sAcmBNzYi7MhXkwD+bDfFgACyAhISNjQSyIcYxjYSyMRbAIFsNi6NBhSSyJpfB6LI2lsQyWwbJYFstheSyPFbEiVsJKWBkrYxWsglWxKlbH6ng73o53YC2shbWxNtbBOlgX62I9rIf1sT42xIbYCBthY2yMTbEpNsfm2BJbYitsha2xNbbFttgO22F7bI8dsAN2xI7YCTthZ+yMXbALdsWu2A2fxqfxGXwGn8VnsRdWVb2xD/bBvtgX++MAHIDP4yB8AV/AF3EIDsVh+BK+hC/jCDyDI3EUjsbRWEmNxXE4HllNxCRMwowwCSfjZJyCU3EqTscZOBNn4SycjXNwDr6F83A+zseFuBAX4xJcgkvxHUzGZFyGZzEFl+MKXImrcDWuwrW4DtfiBtyIG3AzbsatuBXfx/dxB+7AXbgL9+Ae/AA/wA/xQxyCqZiKB/AAHsSDeAgP4WE8jEfwCB7Fo3gMj+FxPI4n8CSewpN4Gk/jGTyL5wDgPJ7HC3gBL+LFtA+/SmOUURlUBpWgElRmlVllUVlUNpVNxVRM5VA5VE6VU+VSuVQelUflU/lUAVVAkSLFKlIFVUEVV3FVWBVWRVQRVUwVU045VVKVVKVUKVValVZl1I2qrLpJlVPlVRtXUVVUlVRbV1ndqqqoKqqqqqaqqxqqhqqpaqpaqpaqrWqrOqqOqqvuUfVUb+yPDVRaZxqpodhYDcOmqplqrlqol/EB1UqNwNaqjWqrHlKjcCS2V61cB/Wo6qjGYSf1uBqPT6guaiJ2VU+pbupp1V09o3qo1q6n6qWmYG/VR03Hvqqf6q8GqNlYTaV1rLp6UQ1RQ9Uw9ZJajC+rEeoVNVKNUqPVq2qMGqvGqfFqgpqoktRrapJ6XU1Wb6gpaqqapqarGWqmmqXeVLPVHDVXvaXmqflqgVqoFqnFaol6Wy1V76hk9a5apt5TKWq5WqFWqlVqtVqj1qp1ar3aoDaqTWqz2qK2qm3qfbVd7VA71S61W+1Re9UHap/6UO1XH6lU9bE6oP6mDqpP1CH1qTqsPlNH1OfqqPpCHVNfquPqK3VCnVSn1NfqtPpGnVFn1Tn1rTqvvlMX1PfqovIKNGqltTY60Bl0Rp2gM+nM+gqdRWfV2XR2HdNX6hz6Kp1TX61z6dw6j8mr8+n8uoAONWmrWUe6oC6k4/oaXVhfq4voorqYLq6dLqFL6ut0KX29Lq1v0GX0jbqsvkmX0+V1BQ/6Zl1J36Ir61t1FX2brqqr6eq6hr5d19R36Fr6Tl1b36Xr6Lt1XX2Prqfv1fV1A91Q36cb6ft1Y91EN9XNdHPdQrfUD+hW+kHdWrfRbfVDup1+WLfXj+gO+lHdUT+mO+nHdWf9hO6in9Rd9VO6m35ad9ff64va6566l07UvXUf/Zzuq/vp/nqAHqif14P0C3qwflEP0UP1MP2SHq5f1iP0K3qkHqVH61f1GD1Wj9Pj9QQ9USfp1/Qk/bqerN/QU/RUPU1P1zP0TN3/p0xz/4n5r//O/ME/HH2r3qbf19v1Dr1T79K79R69V+/V+/Q+vV/v16k6VR/QB/RBfVAf0of0YX1YH9FH9FF9VB/Tx/RxfVyf0Cf1t/prfVp/o8/os/qs/laf1+f1hZ++B2DQKKONMYHJYDKaBJPJZDZXmCwmq8lmspuYudLkMFeZnOZqk8vkNnlMXpPP5DcFTGjIWMMmMgVNIRM315jC5lpTxBQ1xUxx40wJU9Jc9z+e/0f1tTQtTSvTyrQ2rU1b09a0M+1Me9PedDAdTEfT0XQynUxn09l0MV1MV9PVdDPdTHfT3fQwPUxP09MkmkTTxzxn+pp+pr8ZYAaa580gM8gMNoPNEDPEDDPDzHAz3IwwI8xIM9KMNqPNGDPGjDPjzAQzwST57GaSmWQmm8lmiplipg3MbmaYGWaWmWVmm9lmrplr5pl5ZoFZYBaZRWaJWWKWmqUm2SSbZWaZSTHLzXKz0qw0q81qs9asNevNerPRbDSbzWaTYraZbWa72W52mp1mt9lt9pq9Zp/ZZ/ab/SbVpJoD5oA5aA6aQ+aQOWwOmyPmiDlqjppj5pg5bo6bE+aEOWVOmdPmtDljzphz5pw5b86bC+aCuWgupt32BSpQgQlMkCHIECQECUHmIHOQJcgSZAuyBbEgFuQIcgQ5g6uDXEHuIE+QN8gX5A8KBGFAgQ04iIKCQaEgHlwTFA6uDYoERYNiQfHABSWCksF1Qang+qB0cENQJrgxKBvcFJQLygcVgorBzUGl4JagcnBrUCW4LagaVAuqBzWC24OawR1BreDOoHZwV1AnuDuoG9wT1AvuDeoHDYKGwX1Bo+D+oHHQJGgaNAuaBy2Cln9qfu/P5H7Q9Qx7hYlh77BP+FzYN+wX9g8HhAPD58NB4Qvh4PDFcEg4NBwWvhQOD18OR4SvhCPDUeHo8NVwTDg2HBeODyeEE8Ok8LVwUvh6ODl8I5wSTg2nBdPDGeHMcFb4Zjg7nBPODd8K54XzwwXhwnBRuDhE/PFuPDl8N1wWvhemhMvDFeHKcFW4OlwTrg3XhevDDeHGcFO4ucygH3cNt4c7wp3hrnB3uCfcG34Q7gs/DPeHH4Wp4cfhgfBv4cHwk/BQ+Gl4OPwsPBJ+Hh4NvwiPhV+Gx8OvwhPhyUwQfh2eDr8Jz4Rnw3Pht+H58LvwQvh9eDH0aTf3aZd3MmQoA2WgBEqgzJSZslAWykbZKEYxykE5KCflpFyUi/JQHspH+agAFaA0TEwFqSDFKU6FqTAVoSJUjIqRI0clqSSVolJUmkpTGSpDZakslSNLFagC3Uw30y10C91Kt9JtdBtVo2pUg2oQYk2qRbWoNtWmOlSH6lJdqkf1qD7Vp4bUkBpRI2pMjakpNaXm1JxaUktqRa2oNbWmttSW2lE7ak/tqQN1oI7UkTpRJ+pMnakLdaGu1JW6UTfqTt2pB/WgntSTEimR+lAf6kt9qT/1p4E0kAbRIBpMg2kIDaFhNIyG03AaQSNoJI2i0fQqjaGxNI7G0wSaSEmURJNoEk2myTSFptA0mkYzaAbNolk0m2bTXJpL82geLaAFtIgW0RJaQktpKSVTMi2jZZRCKbSCVtAqWkVraA2to3W0gTbQJtpEW2gLbaNttJ22007aSbtpN+2lvbSP9tF+2k+plEoH6AAdpIN0iA7RYTpMR+gIHaWjdIyO0XE6TifoBJ2iU3SaTtMZOkPn6Bydp+/oAn1PF8lTgs1kM9srbBab1Waz2e2v4zw2r81n89sCNrS5bO5fxGStLWKL2mK2uHW2hC1pr/tNXM6WtxVsRXuzrWRvsZVtOZsJ/j6uae+wteydtra9y9awt/8irmPvtnXt/baebWLr22a2oW1hG9n7bWPbxDa1zWxz28K2sw/b9vYR28E+ajvax34TL7Xv2HV2vd1gN9p99kN7zn5rj9ov7Hn7ne1pe9mB9nk7yL5gB9sX7RA79JcxgB1tX7Vj7Fg7zo63E+zE38TT7HQ7w860s+ybdrad85t4iX3bzrPJdoFdaBfZxT/EaTUl23ftMvueTbHL7Qq70q6yq+0au/b/1rrSbrZb7Fa7135gt9sddqfdZXfbPT/Eaeex335kU+3H9oj93B60n9hD9pg9bD/7IU47v2P2S3vcfmVP2JP2lP3anrbf2DP27A/nn3buX9vv7UXrLTCyYs2GA87AGTmBM3FmvoKzcFbOxtk5xldyDr6Kc/LVnItzcx7Oy/k4PxfgkIktM0dckAtxnK/hwnwtF+GiXIyLs+MSXJKv41J8PZfmG7gM38hl+SYux+W5Alfkm7kS38KV+VauwrdxVa7G1bkG3841+Q6uxXdybb6L6/DdXJfv4Xp8L9fnBtyQ7+NGfD835ibclJtxc27BLfkBbsUPcmtuw235IW7HD3N7foQ78KPckR/jTvw4d+YnuAs/yV35Ke7GT3N3foZ78LPck3txIvfmPvwc9+V+3J8H8EB+ngfxCzyYX+QhPJSH8Us8nF/mEfwKj+RRPJpf5TE8lsfxeJ7AEzmJX+NJ/DpP5jd4Ck/laTydZ/BMnsVv8myew3P5LZ7H83kBL+RFvJiX8Nu8lN/hZH6Xl/F7nMLLeQWv5FW8mtfwWl7H63kDb+RNvJm38Fbexu/zdt7BO3kX7+Y9vJc/4H38Ie/njziVP+YD/Dc+yJ/wIf6UD/NnfIQ/56P8BR/jL/k4f8Un+CSf4q/5NH/DZ/gsn+Nv+Tx/xxf4e77IniHCSEU6MlEQZYgyRglRpihzdEWUJcoaZYuyR7HoyihHdFWUM7o6yhXljvJEeaN8Uf6oQBRGFNmIoygqGBWK4tE1UeHo2qhIVDQqFhWPXFQiKhldF5WKro9KRzdEZaIbo7LRTVG5qHxUIaoY3RxVim6JKke3RlWi26KqUbWoelQjuj2qGd0R1YrujGpHd0Wlo7ujutE9Ub3o3qh+1CBqGN0XNYrujxpHTaKmUbOoedQiahk9ELWKHoxaR22ittFDUbvo4ah99EjUIXo06hg9dml70eDHq+mvtidGvSP90xuyO/Wi+OL4kvjb8aXxd+LJ8Xfjy+LvxVPiy+Mr4ivjq+Kr42via+Pr4uvjG+Ib45vim+Nb4lvj3tfICA7THoTBuMBlcBldgsvkMrsrXBaX1WVz2V3MXelyuKtcTne1y+Vyuzwur8vn8rsCLnTkrGMXuYKukIu7a1xhd60r4oq6Yq64c66EK+lauJaupWvlHnStXRvX1j3kHnIPu4fdI+4R96jr6B5zndzjrrN7wnVxT7on3VOum3vadXfPuB7uWdfT9XKJLtH1cX1cX9fX9Xf93UA30A1yg9xgN9gNcUPcMDfMDXfD3Qg3wo10I91oN9qNcWPcODfOTXATXJJLcpPcJDfZTXZT3BQ3zU1zM9wMN8vNcrPdbDfXzXXz3Dy3wC1wi9wit8QtcUvdUpfskt0yt8yluBS3wq1wq9wqt8atcevcOrfBbXCb3Ca3xW1x29w2t91tdzvdTrfb7XZ73V63z+1z+91+l+pS3QF3wB10B90h96k77D5zR9zn7qj7wh1zX7rj7it3wp10p9zX7rT7xp1xZ9059607775zF9z37qLzLin2WmxS7PXY5NgbsSmxqbFpsemxGbGZsVmxN2OzY3Nic2NvxebF5scWxBbGFsUWx5bE3o4tjb0TS469G1sWey+WElseWxFbGVsVWx3zPv/2yBf0hXzcX+ML+2t9EV/UF/PFvfMlfEl/nS/lr/el/Q2+jL/Rl/U3+XK+vK/gm/imvplv7lv4lv4B38o/6Fv7Nr6tf8i38w/79v4R38E/6jv6x3wn/7jv7J/wXfyTvqt/av5PP56+h3/W9/S9fKLv7fv453xf38/39wP8QP+8H+Rf8IP9i36IH+qH+Zf8cP+yH+Ff8SP9KD/av+rH+LF+nB/vJ/iJPsm/5if51/1k/4af4qf6aX66n+Fn+ln+TT/bz/Fz/Vt+np/vF/iFfpFf7Jf4t/1S/45P9u/6Zf49n+KX+xV+pV/lV/s1fq1f59f7DX6j3+Q3+y1+q9/mM8J2v8Pv9Lv8br/H7/Uf+H3+Q7/ff+RT/cf+gP+bP+g/8Yf8p/6w/8wf8Z/7o/4Lf8x/6Y/7r/wJf9Kf8l/70/4bf8af9ef8t/68/85f8N/7i/I3a0IIIYQQ/xT9B9t7/8469dNiAKAPAGTdkffwr3NuyvXjuJ/a1zEGAI/26trg56VBg8TExJ/2TdEQFFoIALFL8zPApXg5tIWHoQO0gVK/W18/VQH5V/mDv9uelj9+I0BmgEw/r0uAH+Jf5b/+H+Rv8vav8/+6/vhCgCKFLs1JO9DP8aX8pf9B/j3t/iB/pk+SAFr/3ZwscCm+lL8kPAiPQYdf7CmEEEIIIYQQQvyonzrf7Y+eb9Oez/OZS3MywqX4j57P/0DlP+MchBBCCCGEEEII8f/2xNPdH3mgQ4c2nf+bBxn/GmX8BQYIAH+BMmTw1x9c7t9MQgghhBBCiD/bpZv+y12JEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgiRfv37/yFM/dM7X+5zFEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIS63/xMAAP//gUVOqg==") syz_usb_connect$sierra_net(0x4, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open(&(0x7f0000000180)='./bus\x00', 0x14927f, 0x1e9) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) 1.734208116s ago: executing program 2 (id=466): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="0200000004000000060000000500"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) 383.867856ms ago: executing program 3 (id=467): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000380)=0x3c, 0xfcb5) 339.560305ms ago: executing program 3 (id=468): open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r1}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)) 246.366204ms ago: executing program 3 (id=469): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x8000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=[r0, r0], 0x0, 0x10, 0x1000}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000000875a0000040000000100000000000000", @ANYRES32=r0], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r1, 0x0, 0x8000000}, 0x27) 227.585625ms ago: executing program 3 (id=470): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0xa, 0x0, 0x0, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x37, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x18, r5, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x4) syz_emit_ethernet(0x4f, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd"], 0x0) io_uring_setup(0xbbc, &(0x7f0000000280)={0x0, 0x42e9, 0x2, 0x0, 0x15a}) 0s ago: executing program 2 (id=471): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5013, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x4, 0x8, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x0, 0x9}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) 0s ago: executing program 6 (id=472): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x103000) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r1) keyctl$read(0xb, r1, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e22, 0xfffffffa, @mcast2, 0x1}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000400)={{0x1, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x704, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46f, &(0x7f0000000bc0)="$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") kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.254' (ED25519) to the list of known hosts. [ 30.111859][ T6518] cgroup: Unknown subsys name 'net' [ 30.244549][ T6518] cgroup: Unknown subsys name 'cpuset' [ 30.246530][ T6518] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 30.392848][ T6518] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 31.510506][ T6531] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 31.513524][ T6531] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 31.514926][ T6531] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 31.516943][ T6531] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 31.519523][ T6531] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 31.525230][ T6123] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 31.526795][ T6123] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 31.528518][ T6123] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 31.529932][ T6123] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 31.532543][ T6537] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 31.535080][ T6537] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 31.538570][ T6537] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 31.542958][ T6537] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 31.544712][ T6537] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 31.546758][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 31.566171][ T6536] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 31.567615][ T6536] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 31.570058][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 31.571812][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 31.576468][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 31.584354][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 31.585935][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 31.587965][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 31.589533][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 31.592189][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 31.685657][ T6528] chnl_net:caif_netlink_parms(): no params data found [ 31.746081][ T6529] chnl_net:caif_netlink_parms(): no params data found [ 31.773340][ T6541] chnl_net:caif_netlink_parms(): no params data found [ 31.783006][ T6528] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.785469][ T6528] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.786819][ T6528] bridge_slave_0: entered allmulticast mode [ 31.788451][ T6528] bridge_slave_0: entered promiscuous mode [ 31.791867][ T6528] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.792165][ T6528] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.792250][ T6528] bridge_slave_1: entered allmulticast mode [ 31.792716][ T6528] bridge_slave_1: entered promiscuous mode [ 31.801912][ T6540] chnl_net:caif_netlink_parms(): no params data found [ 31.809268][ T6532] chnl_net:caif_netlink_parms(): no params data found [ 31.828357][ T6528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.841664][ T6528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.864169][ T6529] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.865717][ T6529] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.867111][ T6529] bridge_slave_0: entered allmulticast mode [ 31.868666][ T6529] bridge_slave_0: entered promiscuous mode [ 31.870222][ T6541] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.870274][ T6541] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.870344][ T6541] bridge_slave_0: entered allmulticast mode [ 31.870768][ T6541] bridge_slave_0: entered promiscuous mode [ 31.871863][ T6541] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.871880][ T6541] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.871926][ T6541] bridge_slave_1: entered allmulticast mode [ 31.872380][ T6541] bridge_slave_1: entered promiscuous mode [ 31.885001][ T6528] team0: Port device team_slave_0 added [ 31.885794][ T6528] team0: Port device team_slave_1 added [ 31.897253][ T6529] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.898428][ T6529] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.899866][ T6529] bridge_slave_1: entered allmulticast mode [ 31.901322][ T6529] bridge_slave_1: entered promiscuous mode [ 31.907331][ T6540] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.907364][ T6540] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.907435][ T6540] bridge_slave_0: entered allmulticast mode [ 31.907882][ T6540] bridge_slave_0: entered promiscuous mode [ 31.912405][ T6528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.912431][ T6528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.912452][ T6528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.927366][ T6540] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.927445][ T6540] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.927536][ T6540] bridge_slave_1: entered allmulticast mode [ 31.927968][ T6540] bridge_slave_1: entered promiscuous mode [ 31.932248][ T6532] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.932300][ T6532] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.932370][ T6532] bridge_slave_0: entered allmulticast mode [ 31.932800][ T6532] bridge_slave_0: entered promiscuous mode [ 31.934399][ T6532] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.934425][ T6532] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.934481][ T6532] bridge_slave_1: entered allmulticast mode [ 31.934881][ T6532] bridge_slave_1: entered promiscuous mode [ 31.939510][ T6528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.939518][ T6528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.939528][ T6528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.942818][ T6541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.947818][ T6529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.956685][ T6532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.959079][ T6541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.965692][ T6529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.966955][ T6540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.968194][ T6540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.969193][ T6532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.996841][ T6528] hsr_slave_0: entered promiscuous mode [ 31.998182][ T6528] hsr_slave_1: entered promiscuous mode [ 32.000265][ T6541] team0: Port device team_slave_0 added [ 32.001056][ T6541] team0: Port device team_slave_1 added [ 32.009285][ T6540] team0: Port device team_slave_0 added [ 32.010004][ T6540] team0: Port device team_slave_1 added [ 32.013754][ T6532] team0: Port device team_slave_0 added [ 32.016474][ T6532] team0: Port device team_slave_1 added [ 32.021740][ T6529] team0: Port device team_slave_0 added [ 32.032694][ T6541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.032717][ T6541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.032732][ T6541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.033710][ T6541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.033718][ T6541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.033730][ T6541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.036964][ T6529] team0: Port device team_slave_1 added [ 32.039513][ T6540] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.039524][ T6540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.039536][ T6540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.040080][ T6540] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.040087][ T6540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.040099][ T6540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.068380][ T6532] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.068403][ T6532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.068421][ T6532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.085361][ T6532] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.085387][ T6532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.085403][ T6532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.097015][ T6541] hsr_slave_0: entered promiscuous mode [ 32.098329][ T6541] hsr_slave_1: entered promiscuous mode [ 32.099532][ T6541] debugfs: 'hsr0' already exists in 'hsr' [ 32.100534][ T6541] Cannot create hsr debugfs directory [ 32.104181][ T6529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.105340][ T6529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.109463][ T6529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.111764][ T6529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.112910][ T6529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.117616][ T6529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.126073][ T6540] hsr_slave_0: entered promiscuous mode [ 32.126376][ T6540] hsr_slave_1: entered promiscuous mode [ 32.126593][ T6540] debugfs: 'hsr0' already exists in 'hsr' [ 32.126604][ T6540] Cannot create hsr debugfs directory [ 32.139665][ T6532] hsr_slave_0: entered promiscuous mode [ 32.139962][ T6532] hsr_slave_1: entered promiscuous mode [ 32.140633][ T6532] debugfs: 'hsr0' already exists in 'hsr' [ 32.140644][ T6532] Cannot create hsr debugfs directory [ 32.184189][ T6529] hsr_slave_0: entered promiscuous mode [ 32.184514][ T6529] hsr_slave_1: entered promiscuous mode [ 32.184697][ T6529] debugfs: 'hsr0' already exists in 'hsr' [ 32.184707][ T6529] Cannot create hsr debugfs directory [ 32.282148][ T6528] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.287236][ T6528] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.289531][ T6528] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.293818][ T6528] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.310356][ T6541] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.313638][ T6541] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.315881][ T6541] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.318574][ T6541] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.332627][ T6528] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.332675][ T6528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.332827][ T6528] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.332851][ T6528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.348037][ T6532] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.350726][ T6532] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.355075][ T6541] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.355122][ T6541] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.355193][ T6541] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.355221][ T6541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.361628][ T6532] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.376286][ T6532] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.394636][ T6528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.399989][ T6529] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.403009][ T6529] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.407847][ T6529] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.410255][ T6529] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.417001][ T6532] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.417047][ T6532] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.417106][ T6532] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.417129][ T6532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.422472][ T6541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.438009][ T1634] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.439728][ T1634] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.442283][ T1634] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.444822][ T1634] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.447488][ T1634] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.449520][ T1634] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.460128][ T6528] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.462125][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.462172][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.469131][ T6541] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.478050][ T250] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.478089][ T250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.482713][ T6540] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.487440][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.487495][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.494711][ T6540] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.497312][ T6540] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.508105][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.508142][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.512945][ T6540] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.526304][ T6528] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.555827][ T6532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.558594][ T6532] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.562913][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.562962][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.569647][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.569690][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.592559][ T6528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.601241][ T6532] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.612364][ T6529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.641413][ T6529] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.648806][ T6540] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.667098][ T6541] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.668943][ T250] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.668989][ T250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.669480][ T250] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.669495][ T250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.674661][ T6528] veth0_vlan: entered promiscuous mode [ 32.678396][ T6528] veth1_vlan: entered promiscuous mode [ 32.698918][ T6541] veth0_vlan: entered promiscuous mode [ 32.700899][ T6540] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.702460][ T4742] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.702517][ T4742] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.712780][ T6532] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.719112][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.719154][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.731638][ T6541] veth1_vlan: entered promiscuous mode [ 32.753651][ T6532] veth0_vlan: entered promiscuous mode [ 32.756531][ T6532] veth1_vlan: entered promiscuous mode [ 32.764808][ T6532] veth0_macvtap: entered promiscuous mode [ 32.779354][ T6528] veth0_macvtap: entered promiscuous mode [ 32.780550][ T6528] veth1_macvtap: entered promiscuous mode [ 32.781968][ T6532] veth1_macvtap: entered promiscuous mode [ 32.801684][ T6541] veth0_macvtap: entered promiscuous mode [ 32.805920][ T6532] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.807978][ T6529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.812598][ T6528] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.817195][ T6541] veth1_macvtap: entered promiscuous mode [ 32.820384][ T6541] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.821297][ T6541] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.826899][ T6532] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.831113][ T6528] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.832763][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.835000][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.838664][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.839570][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.839601][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.839619][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.839634][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.839647][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.839661][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.839673][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.839685][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.839697][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.875469][ T6540] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.899613][ T1634] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.899645][ T1634] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.912050][ T6529] veth0_vlan: entered promiscuous mode [ 32.912160][ T1634] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.912169][ T1634] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.927118][ T6529] veth1_vlan: entered promiscuous mode [ 32.945732][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.945768][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.952656][ T6529] veth0_macvtap: entered promiscuous mode [ 32.956683][ T6529] veth1_macvtap: entered promiscuous mode [ 32.970390][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.970429][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.974900][ T6529] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.982043][ T6529] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.992123][ T6532] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 33.005962][ T4742] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.006012][ T4742] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.006043][ T4742] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.006061][ T4742] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.024700][ T250] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.024732][ T250] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.042092][ T6540] veth0_vlan: entered promiscuous mode [ 33.045850][ T6540] veth1_vlan: entered promiscuous mode [ 33.051974][ T6540] veth0_macvtap: entered promiscuous mode [ 33.056508][ T6540] veth1_macvtap: entered promiscuous mode [ 33.059954][ T6540] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.061616][ T6540] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.099525][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.101108][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.109713][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.111892][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.122263][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.122306][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.142507][ T1634] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.142534][ T1634] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.276960][ T6643] loop3: detected capacity change from 0 to 512 [ 33.281590][ T6643] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 33.415636][ T4742] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.423697][ T4742] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.446067][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.446094][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.528088][ T250] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.528119][ T250] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.544778][ T6536] Bluetooth: hci0: command tx timeout [ 33.887970][ T6536] Bluetooth: hci3: command tx timeout [ 33.893212][ T6536] Bluetooth: hci1: command tx timeout [ 33.894518][ T52] Bluetooth: hci4: command tx timeout [ 33.895787][ T52] Bluetooth: hci2: command tx timeout [ 34.863514][ T31] audit: type=1107 audit(34.720:2): pid=6651 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 35.779929][ T6536] Bluetooth: hci0: command tx timeout [ 35.859724][ T6520] udevd[6520]: symlink '../../loop3' '/dev/disk/by-diskseq/54.tmp-b7:3' failed: Read-only file system [ 35.866865][ T6685] loop0: detected capacity change from 0 to 512 [ 35.872978][ T6685] EXT4-fs (loop0): Test dummy encryption mode enabled [ 35.873008][ T6685] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 35.874913][ T6685] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 35.912320][ T6685] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.11: bad orphan inode 131083 [ 35.927360][ T6685] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.934840][ T6520] udevd[6520]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 35.942741][ T6520] udevd[6520]: symlink '../../loop0' '/dev/disk/by-diskseq/55.tmp-b7:0' failed: Read-only file system [ 35.943558][ T6520] udevd[6520]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 35.944921][ T6536] Bluetooth: hci1: command tx timeout [ 35.948830][ T6685] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 35.953703][ T6536] Bluetooth: hci2: command tx timeout [ 35.953774][ T6536] Bluetooth: hci4: command tx timeout [ 35.953795][ T6536] Bluetooth: hci3: command tx timeout [ 35.956411][ T6520] udevd[6520]: symlink '../../loop0' '/dev/disk/by-diskseq/55.tmp-b7:0' failed: Read-only file system [ 35.956923][ T6520] udevd[6520]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 35.968386][ T6685] overlayfs: upper fs needs to support d_type. [ 35.968625][ T6685] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 36.004630][ T6529] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 13: comm syz-executor: path /1/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 36.055117][ T6695] loop2: detected capacity change from 0 to 16 [ 36.059561][ T6695] erofs (device loop2): mounted with root inode @ nid 36. [ 36.069897][ T6520] udevd[6520]: symlink '../../loop2' '/dev/disk/by-diskseq/56.tmp-b7:2' failed: Read-only file system [ 36.072634][ T6520] udevd[6520]: symlink '../../loop2' '/dev/disk/by-uuid/dc99752b-953d-459c-b2db-a5c46e0e7dba.tmp-b7:2' failed: Read-only file system [ 36.081326][ T6520] udevd[6520]: symlink '../../loop2' '/dev/disk/by-diskseq/56.tmp-b7:2' failed: Read-only file system [ 36.132793][ T6520] udevd[6520]: symlink '../../loop2' '/dev/disk/by-uuid/dc99752b-953d-459c-b2db-a5c46e0e7dba.tmp-b7:2' failed: Read-only file system [ 37.043211][ T6687] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 37.043319][ T6687] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 37.064028][ T6687] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 37.067092][ T6687] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 37.068385][ T6687] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 37.071149][ T6687] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 37.074784][ T6687] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 37.075931][ T6687] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 37.088322][ T6687] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 37.091119][ T6687] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 37.092451][ T6687] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 37.098201][ T6687] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 37.277606][ T6709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.277847][ T6709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.120283][ T6531] Bluetooth: hci0: command 0x0419 tx timeout [ 38.141687][ T6714] input: syz1 as /devices/virtual/input/input2 [ 38.371277][ T6718] fuse: Bad value for 'fd' [ 38.549280][ T6714] loop2: detected capacity change from 0 to 512 [ 38.554062][ T6714] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 38.568714][ T6714] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.592457][ T6714] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 38.634908][ T6725] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 38.833476][ T6727] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 39.056547][ T6541] block device autoloading is deprecated and will be removed. [ 39.087615][ T6729] pim6reg1: entered promiscuous mode [ 39.087652][ T6729] pim6reg1: entered allmulticast mode [ 39.100075][ T6528] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.143272][ T6531] Bluetooth: hci4: command 0x0419 tx timeout [ 39.143662][ T6531] Bluetooth: hci3: command 0x0419 tx timeout [ 39.143696][ T6531] Bluetooth: hci1: command 0x0419 tx timeout [ 39.198156][ T6739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.199834][ T6739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.186841][ T6536] Bluetooth: hci0: command 0x0419 tx timeout [ 40.472091][ T6767] loop2: detected capacity change from 0 to 40427 [ 40.480153][ T6541] block device autoloading is deprecated and will be removed. [ 40.487219][ T6767] F2FS-fs (loop2): invalid crc value [ 40.512993][ T6767] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 40.518103][ T6767] F2FS-fs (loop2): Start checkpoint disabled! [ 40.520820][ T6767] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 40.533833][ T1634] kworker/u8:5: attempt to access beyond end of device [ 40.533833][ T1634] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 40.534192][ T1634] CPU: 1 UID: 0 PID: 1634 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT [ 40.534202][ T1634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 40.534207][ T1634] Workqueue: writeback wb_workfn (flush-7:2) [ 40.534225][ T1634] Call trace: [ 40.534227][ T1634] show_stack+0x2c/0x3c (C) [ 40.534237][ T1634] __dump_stack+0x30/0x40 [ 40.534243][ T1634] dump_stack_lvl+0xd8/0x12c [ 40.534248][ T1634] dump_stack+0x1c/0x28 [ 40.534252][ T1634] f2fs_handle_critical_error+0x34c/0x4b8 [ 40.534261][ T1634] f2fs_stop_checkpoint+0x5c/0x70 [ 40.534266][ T1634] f2fs_write_end_io+0x768/0xa70 [ 40.534273][ T1634] bio_endio+0x858/0x894 [ 40.534280][ T1634] submit_bio_noacct+0x158/0x177c [ 40.534286][ T1634] submit_bio+0x3b4/0x550 [ 40.534291][ T1634] f2fs_submit_write_bio+0x13c/0x324 [ 40.534297][ T1634] __submit_merged_bio+0x254/0x704 [ 40.534303][ T1634] __submit_merged_write_cond+0x23c/0x4ac [ 40.534309][ T1634] f2fs_write_data_pages+0x1d28/0x2634 [ 40.534315][ T1634] do_writepages+0x270/0x468 [ 40.534323][ T1634] __writeback_single_inode+0x15c/0x13e8 [ 40.534329][ T1634] writeback_sb_inodes+0x55c/0xe40 [ 40.534336][ T1634] wb_writeback+0x3cc/0xd70 [ 40.534342][ T1634] wb_workfn+0x338/0xdc0 [ 40.534347][ T1634] process_one_work+0x7e8/0x155c [ 40.534353][ T1634] worker_thread+0x958/0xed8 [ 40.534358][ T1634] kthread+0x5fc/0x75c [ 40.534364][ T1634] ret_from_fork+0x10/0x20 [ 40.534372][ T1634] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 40.624671][ T6775] netlink: 20 bytes leftover after parsing attributes in process `syz.2.39'. [ 40.823470][ T6783] loop2: detected capacity change from 0 to 2048 [ 40.861384][ T6783] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.870419][ T6788] loop4: detected capacity change from 0 to 1024 [ 40.871239][ T6788] EXT4-fs: Ignoring removed bh option [ 40.871258][ T6788] EXT4-fs: Ignoring removed nomblk_io_submit option [ 40.876011][ T6783] EXT4-fs (loop2): Online resizing not supported with bigalloc [ 40.887168][ T6788] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.892485][ T6520] udevd[6520]: symlink '../../loop4' '/dev/disk/by-diskseq/65.tmp-b7:4' failed: Read-only file system [ 40.898616][ T6520] udevd[6520]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 40.918211][ T6520] udevd[6520]: symlink '../../loop4' '/dev/disk/by-diskseq/65.tmp-b7:4' failed: Read-only file system [ 40.919555][ T6520] udevd[6520]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 40.934813][ T6528] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.962226][ T6520] udevd[6520]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 40.965954][ T6520] udevd[6520]: symlink '../../loop2' '/dev/disk/by-diskseq/64.tmp-b7:2' failed: Read-only file system [ 40.976954][ T6520] udevd[6520]: symlink '../../loop2' '/dev/disk/by-diskseq/64.tmp-b7:2' failed: Read-only file system [ 40.991425][ T6520] udevd[6520]: symlink '../../loop2' '/dev/disk/by-diskseq/66.tmp-b7:2' failed: Read-only file system [ 41.005590][ T6792] loop2: detected capacity change from 0 to 1024 [ 41.008064][ T6792] ======================================================= [ 41.008064][ T6792] WARNING: The mand mount option has been deprecated and [ 41.008064][ T6792] and is ignored by this kernel. Remove the mand [ 41.008064][ T6792] option from the mount to silence this warning. [ 41.008064][ T6792] ======================================================= [ 41.022863][ T6792] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.037543][ T6520] udevd[6520]: symlink '../../loop2' '/dev/disk/by-diskseq/67.tmp-b7:2' failed: Read-only file system [ 41.041235][ T6520] udevd[6520]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 41.223588][ T6536] Bluetooth: hci1: command 0x0419 tx timeout [ 41.223635][ T6536] Bluetooth: hci3: command 0x0419 tx timeout [ 41.223675][ T6536] Bluetooth: hci4: command 0x0419 tx timeout [ 41.470563][ T6529] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.733325][ T6536] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 41.739007][ T6536] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 41.740528][ T6536] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 41.740917][ T6536] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 41.741118][ T6536] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 41.752888][ T6540] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.757489][ T6528] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.971361][ T41] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.089881][ T6815] bridge0: entered promiscuous mode [ 42.122474][ T41] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.333183][ T6531] Bluetooth: hci0: command 0x0419 tx timeout [ 42.390593][ T41] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.417505][ T6814] loop4: detected capacity change from 0 to 40427 [ 42.426444][ T6814] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 42.428279][ T6814] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 42.438245][ T6814] F2FS-fs (loop4): invalid crc value [ 42.452983][ T41] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.467272][ T6814] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 42.471969][ T6814] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 42.474688][ T6814] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 42.481163][ T6806] chnl_net:caif_netlink_parms(): no params data found [ 42.580199][ T6806] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.581816][ T6806] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.584735][ T6806] bridge_slave_0: entered allmulticast mode [ 42.586597][ T6806] bridge_slave_0: entered promiscuous mode [ 42.591067][ T6806] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.592654][ T6806] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.600344][ T6806] bridge_slave_1: entered allmulticast mode [ 42.602445][ T6806] bridge_slave_1: entered promiscuous mode [ 42.663328][ T6806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.686812][ T6806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.797671][ T41] bridge_slave_1: left allmulticast mode [ 42.797714][ T41] bridge_slave_1: left promiscuous mode [ 42.798143][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.805803][ T41] bridge_slave_0: left allmulticast mode [ 42.805835][ T41] bridge_slave_0: left promiscuous mode [ 42.805921][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.287776][ T6860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.289307][ T6860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.303248][ T6531] Bluetooth: hci4: command 0x0419 tx timeout [ 43.303289][ T6536] Bluetooth: hci3: command 0x0419 tx timeout [ 43.303328][ T6536] Bluetooth: hci1: command 0x0419 tx timeout [ 43.312648][ T6829] loop1: detected capacity change from 0 to 131072 [ 43.331997][ T6829] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0) [ 43.332037][ T6829] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 43.340307][ T6829] F2FS-fs (loop1): invalid crc value [ 43.372535][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 43.377341][ T6829] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 43.378522][ T6829] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 43.378799][ T6829] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 43.394769][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 43.414525][ T41] bond0 (unregistering): Released all slaves [ 43.420301][ T6806] team0: Port device team_slave_0 added [ 43.426171][ T6806] team0: Port device team_slave_1 added [ 43.443019][ T6806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.444321][ T6806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.444342][ T6806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.445502][ T6806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.445510][ T6806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.445520][ T6806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.478369][ T6806] hsr_slave_0: entered promiscuous mode [ 43.479765][ T6806] hsr_slave_1: entered promiscuous mode [ 43.481461][ T6806] debugfs: 'hsr0' already exists in 'hsr' [ 43.482705][ T6806] Cannot create hsr debugfs directory [ 43.661276][ T6806] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 43.665318][ T6806] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 43.671752][ T6806] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 43.716292][ T6806] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 43.741591][ T6888] loop2: detected capacity change from 0 to 40427 [ 43.743148][ T6888] F2FS-fs (loop2): build fault injection rate: 14 [ 43.743171][ T6888] F2FS-fs (loop2): build fault injection type: 0x3bfe8c [ 43.747094][ T6888] F2FS-fs (loop2): invalid crc value [ 43.760901][ C1] F2FS-fs (loop2): inject read IO error in f2fs_read_end_io of bio_endio+0x858/0x894 [ 43.765365][ C1] F2FS-fs (loop2): inject read IO error in f2fs_read_end_io of bio_endio+0x858/0x894 [ 43.783520][ T52] Bluetooth: hci2: command tx timeout [ 43.788862][ T6888] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 43.788898][ T6888] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x148/0x4a8 [ 43.801167][ T6888] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 43.898360][ T6905] loop4: detected capacity change from 0 to 512 [ 43.925680][ T6909] loop1: detected capacity change from 0 to 128 [ 43.930734][ T6909] EXT4-fs: Ignoring removed nomblk_io_submit option [ 43.937075][ T6909] EXT4-fs (loop1): Test dummy encryption mode enabled [ 43.940125][ T6905] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.962069][ T6909] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 43.963466][ T41] hsr_slave_0: left promiscuous mode [ 43.967474][ T41] hsr_slave_1: left promiscuous mode [ 43.967832][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.967853][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 43.974124][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.974157][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 43.988535][ T41] veth1_macvtap: left promiscuous mode [ 43.989657][ T41] veth0_macvtap: left promiscuous mode [ 43.990818][ T41] veth1_vlan: left promiscuous mode [ 43.991944][ T41] veth0_vlan: left promiscuous mode [ 43.995560][ T6540] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.108629][ T6923] loop4: detected capacity change from 0 to 512 [ 44.112959][ T6923] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.65: casefold flag without casefold feature [ 44.277315][ T6926] netlink: 28 bytes leftover after parsing attributes in process `syz.1.62'. [ 44.363351][ T52] Bluetooth: hci0: command 0x0419 tx timeout [ 44.854481][ T6923] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.65: couldn't read orphan inode 15 (err -117) [ 44.867531][ T6923] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.019620][ T6540] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.115578][ T41] team0 (unregistering): Port device team_slave_1 removed [ 45.130973][ T41] team0 (unregistering): Port device team_slave_0 removed [ 45.265571][ T6806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.302400][ T6806] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.329044][ T1634] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.329159][ T1634] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.352596][ T6541] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 45.361839][ T1634] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.361876][ T1634] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.393156][ T52] Bluetooth: hci1: command 0x0419 tx timeout [ 45.393195][ T52] Bluetooth: hci3: command 0x0419 tx timeout [ 45.393221][ T52] Bluetooth: hci4: command 0x0419 tx timeout [ 45.408865][ T6806] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 45.408894][ T6806] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 45.509319][ T6951] loop3: detected capacity change from 0 to 512 [ 45.863158][ T6531] Bluetooth: hci2: command tx timeout [ 45.884295][ T6951] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.951763][ T6806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.977308][ T6836] udevd[6836]: symlink '../../loop4' '/dev/disk/by-diskseq/79.tmp-b7:4' failed: Read-only file system [ 45.986282][ T6532] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.041722][ T6836] udevd[6836]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 46.042110][ T6836] udevd[6836]: symlink '../../loop3' '/dev/disk/by-diskseq/82.tmp-b7:3' failed: Read-only file system [ 46.055894][ T6836] udevd[6836]: symlink '../../loop3' '/dev/disk/by-diskseq/82.tmp-b7:3' failed: Read-only file system [ 46.066893][ T6836] udevd[6836]: symlink '../../loop3' '/dev/disk/by-diskseq/82.tmp-b7:3' failed: Read-only file system [ 46.118763][ T6836] udevd[6836]: symlink '../../loop3' '/dev/disk/by-diskseq/83.tmp-b7:3' failed: Read-only file system [ 46.128399][ T6520] udevd[6520]: symlink '../../loop4' '/dev/disk/by-diskseq/79.tmp-b7:4' failed: Read-only file system [ 46.160007][ T6806] veth0_vlan: entered promiscuous mode [ 46.165793][ T6806] veth1_vlan: entered promiscuous mode [ 46.179134][ T6836] udevd[6836]: symlink '../../loop4' '/dev/disk/by-diskseq/79.tmp-b7:4' failed: Read-only file system [ 46.206412][ T6806] veth0_macvtap: entered promiscuous mode [ 46.276095][ T6836] udevd[6836]: symlink '../../loop3' '/dev/disk/by-diskseq/83.tmp-b7:3' failed: Read-only file system [ 46.301320][ T6806] veth1_macvtap: entered promiscuous mode [ 46.310202][ T6836] udevd[6836]: symlink '../../loop1' '/dev/disk/by-diskseq/81.tmp-b7:1' failed: Read-only file system [ 46.565457][ T6806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.575347][ T6806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.579381][ T6660] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.579430][ T6660] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.579455][ T6660] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.579469][ T6660] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.668369][ T4846] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.668412][ T4846] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.705883][ T1634] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.705991][ T1634] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.865213][ T7015] syzkaller0: entered promiscuous mode [ 46.867468][ T7015] syzkaller0: entered allmulticast mode [ 47.328376][ T7011] loop3: detected capacity change from 0 to 40427 [ 47.344392][ T7011] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 47.345692][ T7011] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 47.350309][ T7011] F2FS-fs (loop3): invalid crc value [ 47.364446][ T7011] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 47.383667][ T7011] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 47.385028][ T7011] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 48.108592][ T6531] Bluetooth: hci2: command tx timeout [ 48.452306][ T7054] Zero length message leads to an empty skb [ 48.531379][ T7062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.534568][ T7062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.695404][ T7072] loop5: detected capacity change from 0 to 4096 [ 48.708045][ T7072] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.780467][ T7075] loop3: detected capacity change from 0 to 256 [ 48.783537][ T7075] exfat: Deprecated parameter 'namecase' [ 48.783740][ T7075] exfat: Deprecated parameter 'utf8' [ 48.952293][ T7075] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 50.082295][ T6806] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.215782][ T6531] Bluetooth: hci2: command tx timeout [ 51.134735][ T6836] udevd[6836]: symlink '../../loop1' '/dev/disk/by-diskseq/81.tmp-b7:1' failed: Read-only file system [ 51.600285][ T7099] loop5: detected capacity change from 0 to 512 [ 51.600998][ T7099] EXT4-fs: Ignoring removed mblk_io_submit option [ 52.921632][ T7099] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 52.931019][ T6520] udevd[6520]: symlink '../../loop3' '/dev/disk/by-diskseq/88.tmp-b7:3' failed: Read-only file system [ 52.946278][ T6836] udevd[6836]: symlink '../../loop5' '/dev/disk/by-diskseq/90.tmp-b7:5' failed: Read-only file system [ 52.949706][ T6836] udevd[6836]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 52.953727][ T7099] EXT4-fs error (device loop5): xattr_find_entry:333: inode #15: comm syz.5.105: corrupted xattr entries [ 52.959702][ T7099] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 52.960001][ T7099] EXT4-fs (loop5): 1 orphan inode deleted [ 52.960461][ T7099] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.988063][ T6836] udevd[6836]: symlink '../../loop4' '/dev/disk/by-diskseq/79.tmp-b7:4' failed: Read-only file system [ 53.045758][ T7112] loop1: detected capacity change from 0 to 512 [ 53.057337][ T6836] udevd[6836]: symlink '../../loop3' '/dev/disk/by-diskseq/88.tmp-b7:3' failed: Read-only file system [ 53.061326][ T6520] udevd[6520]: symlink '../../loop1' '/dev/disk/by-diskseq/81.tmp-b7:1' failed: Read-only file system [ 53.064963][ T6520] udevd[6520]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 53.075883][ T7112] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.080906][ T6836] udevd[6836]: symlink '../../loop1' '/dev/disk/by-diskseq/91.tmp-b7:1' failed: Read-only file system [ 53.085173][ T6836] udevd[6836]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 53.404059][ T7112] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 53.409051][ T6806] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.420004][ T7112] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.345512][ T7133] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 55.597681][ T7140] loop3: detected capacity change from 0 to 256 [ 55.610121][ T7140] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 56.309471][ T6836] udevd[6836]: symlink '../../loop3' '/dev/disk/by-diskseq/93.tmp-b7:3' failed: Read-only file system [ 56.312519][ T6836] udevd[6836]: symlink '../../loop3' '/dev/disk/by-uuid/1234-1234.tmp-b7:3' failed: Read-only file system [ 56.512269][ T6836] udevd[6836]: symlink '../../loop3' '/dev/disk/by-diskseq/93.tmp-b7:3' failed: Read-only file system [ 56.530646][ T6836] udevd[6836]: symlink '../../loop3' '/dev/disk/by-diskseq/93.tmp-b7:3' failed: Read-only file system [ 56.547021][ T6836] udevd[6836]: symlink '../../loop3' '/dev/disk/by-diskseq/94.tmp-b7:3' failed: Read-only file system [ 57.322328][ T6836] udevd[6836]: symlink '../../loop4' '/dev/disk/by-diskseq/79.tmp-b7:4' failed: Read-only file system [ 57.360073][ T6836] udevd[6836]: symlink '../../loop4' '/dev/disk/by-diskseq/79.tmp-b7:4' failed: Read-only file system [ 57.780264][ T6836] udevd[6836]: symlink '../../loop3' '/dev/disk/by-diskseq/94.tmp-b7:3' failed: Read-only file system [ 57.807016][ T7180] input: syz1 as /devices/virtual/input/input3 [ 57.810047][ T7181] loop3: detected capacity change from 0 to 1024 [ 57.815698][ T7181] EXT4-fs: Ignoring removed i_version option [ 57.815763][ T7181] EXT4-fs: inline encryption not supported [ 57.816489][ T7181] EXT4-fs (loop3): Test dummy encryption mode enabled [ 57.823451][ T7181] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.843594][ T6520] udevd[6520]: symlink '../../loop3' '/dev/disk/by-diskseq/95.tmp-b7:3' failed: Read-only file system [ 57.852486][ T6520] udevd[6520]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 57.875170][ T6532] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.339084][ T7200] loop5: detected capacity change from 0 to 256 [ 58.339710][ T7200] exfat: Deprecated parameter 'namecase' [ 58.339753][ T7200] exfat: Deprecated parameter 'utf8' [ 58.470872][ T7200] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 58.925618][ T7210] netlink: 16 bytes leftover after parsing attributes in process `syz.1.128'. [ 58.925657][ T7210] netlink: 8 bytes leftover after parsing attributes in process `syz.1.128'. [ 58.977048][ T7198] loop2: detected capacity change from 0 to 40427 [ 58.994392][ T7198] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 58.996103][ T7198] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 59.001201][ T7198] F2FS-fs (loop2): invalid crc value [ 59.022318][ T7204] loop3: detected capacity change from 0 to 512 [ 59.036176][ T7204] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.135: casefold flag without casefold feature [ 59.038571][ T7204] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.135: couldn't read orphan inode 15 (err -117) [ 59.041543][ T7204] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.186826][ T7198] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 59.196607][ T7198] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 59.196636][ T7198] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 60.028441][ T6532] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.133921][ T6528] syz-executor: attempt to access beyond end of device [ 60.133921][ T6528] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 60.134419][ T6528] CPU: 0 UID: 0 PID: 6528 Comm: syz-executor Not tainted syzkaller #0 PREEMPT [ 60.134430][ T6528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 60.134434][ T6528] Call trace: [ 60.134437][ T6528] show_stack+0x2c/0x3c (C) [ 60.134451][ T6528] __dump_stack+0x30/0x40 [ 60.134458][ T6528] dump_stack_lvl+0xd8/0x12c [ 60.134463][ T6528] dump_stack+0x1c/0x28 [ 60.134468][ T6528] f2fs_handle_critical_error+0x34c/0x4b8 [ 60.134476][ T6528] f2fs_stop_checkpoint+0x5c/0x70 [ 60.134482][ T6528] f2fs_write_end_io+0x768/0xa70 [ 60.134488][ T6528] bio_endio+0x858/0x894 [ 60.134496][ T6528] submit_bio_noacct+0x158/0x177c [ 60.134501][ T6528] submit_bio+0x3b4/0x550 [ 60.134507][ T6528] f2fs_submit_write_bio+0x13c/0x324 [ 60.134513][ T6528] __submit_merged_bio+0x254/0x704 [ 60.134519][ T6528] __submit_merged_write_cond+0x23c/0x4ac [ 60.134525][ T6528] f2fs_write_data_pages+0x1d28/0x2634 [ 60.134531][ T6528] do_writepages+0x270/0x468 [ 60.134539][ T6528] filemap_fdatawrite+0x14c/0x1f4 [ 60.134546][ T6528] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 60.134551][ T6528] f2fs_write_checkpoint+0x690/0x16a0 [ 60.134556][ T6528] kill_f2fs_super+0x21c/0x584 [ 60.134563][ T6528] deactivate_locked_super+0xc4/0x12c [ 60.134568][ T6528] deactivate_super+0xe0/0x100 [ 60.134573][ T6528] cleanup_mnt+0x31c/0x3ac [ 60.134579][ T6528] __cleanup_mnt+0x20/0x30 [ 60.134584][ T6528] task_work_run+0x1dc/0x260 [ 60.134591][ T6528] exit_to_user_mode_loop+0xfc/0x168 [ 60.134597][ T6528] el0_svc+0x170/0x254 [ 60.134605][ T6528] el0t_64_sync_handler+0x84/0x12c [ 60.134612][ T6528] el0t_64_sync+0x198/0x19c [ 60.134620][ T6528] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 60.852774][ T7255] loop3: detected capacity change from 0 to 8192 [ 60.856159][ T7255] vfat: Unknown parameter ' ' [ 61.124190][ T31] audit: type=1326 audit(60.880:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7241 comm="syz.3.140" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f95b3a8 code=0x7ffc0000 [ 61.124217][ T31] audit: type=1326 audit(60.890:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7241 comm="syz.3.140" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f95b3a8 code=0x7ffc0000 [ 61.124231][ T31] audit: type=1326 audit(60.890:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7241 comm="syz.3.140" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9f95b3a8 code=0x7ffc0000 [ 61.124244][ T31] audit: type=1326 audit(60.890:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7241 comm="syz.3.140" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f95b3a8 code=0x7ffc0000 [ 61.124256][ T31] audit: type=1326 audit(60.890:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7241 comm="syz.3.140" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f95b3a8 code=0x7ffc0000 [ 61.124268][ T31] audit: type=1326 audit(60.890:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7241 comm="syz.3.140" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9f95b3a8 code=0x7ffc0000 [ 61.124280][ T31] audit: type=1326 audit(60.890:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7241 comm="syz.3.140" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f95b3a8 code=0x7ffc0000 [ 61.124291][ T31] audit: type=1326 audit(60.890:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7241 comm="syz.3.140" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f95b3a8 code=0x7ffc0000 [ 61.124303][ T31] audit: type=1326 audit(60.900:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7241 comm="syz.3.140" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9f95b3a8 code=0x7ffc0000 [ 61.124314][ T31] audit: type=1326 audit(60.900:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7241 comm="syz.3.140" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f95b3a8 code=0x7ffc0000 [ 61.328199][ T6836] udevd[6836]: symlink '../../loop3' '/dev/disk/by-diskseq/102.tmp-b7:3' failed: Read-only file system [ 61.398112][ T7261] loop4: detected capacity change from 0 to 512 [ 61.402062][ T7261] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 61.413840][ T6836] udevd[6836]: symlink '../../loop4' '/dev/disk/by-diskseq/104.tmp-b7:4' failed: Read-only file system [ 61.416258][ T6836] udevd[6836]: symlink '../../loop4' '/dev/disk/by-label/SYZKALLER.tmp-b7:4' failed: Read-only file system [ 61.418773][ T6836] udevd[6836]: symlink '../../loop4' '/dev/disk/by-uuid/1DDD-580F.tmp-b7:4' failed: Read-only file system [ 61.452908][ T7264] process 'syz.1.144' launched '/dev/fd/3' with NULL argv: empty string added [ 61.511027][ T6836] udevd[6836]: symlink '../../loop2' '/dev/disk/by-diskseq/98.tmp-b7:2' failed: Read-only file system [ 61.530780][ T6836] udevd[6836]: symlink '../../loop2' '/dev/disk/by-diskseq/98.tmp-b7:2' failed: Read-only file system [ 61.548576][ T6520] udevd[6520]: symlink '../../loop3' '/dev/disk/by-diskseq/103.tmp-b7:3' failed: Read-only file system [ 61.555798][ T6836] udevd[6836]: symlink '../../loop2' '/dev/disk/by-diskseq/98.tmp-b7:2' failed: Read-only file system [ 61.580526][ T7276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.586661][ T7276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.389296][ T7286] netlink: 4 bytes leftover after parsing attributes in process `syz.4.143'. [ 62.975046][ T6836] udevd[6836]: symlink '../../loop2' '/dev/disk/by-diskseq/105.tmp-b7:2' failed: Read-only file system [ 63.031653][ T6836] udevd[6836]: symlink '../../loop2' '/dev/disk/by-diskseq/105.tmp-b7:2' failed: Read-only file system [ 63.058777][ T7300] loop2: detected capacity change from 0 to 8192 [ 63.477672][ T7311] netlink: 44 bytes leftover after parsing attributes in process `syz.1.146'. [ 63.478065][ T7311] netlink: 44 bytes leftover after parsing attributes in process `syz.1.146'. [ 63.479314][ T7311] netlink: 44 bytes leftover after parsing attributes in process `syz.1.146'. [ 63.479684][ T7311] netlink: 44 bytes leftover after parsing attributes in process `syz.1.146'. [ 63.480124][ T7311] netlink: 44 bytes leftover after parsing attributes in process `syz.1.146'. [ 63.480436][ T7311] netlink: 44 bytes leftover after parsing attributes in process `syz.1.146'. [ 63.480517][ T7311] netlink: 44 bytes leftover after parsing attributes in process `syz.1.146'. [ 63.534255][ T7312] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.543400][ T7312] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.044296][ T7315] loop4: detected capacity change from 0 to 512 [ 64.044667][ T7315] EXT4-fs: Ignoring removed mblk_io_submit option [ 64.050771][ T7315] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 64.087404][ T7315] EXT4-fs error (device loop4): xattr_find_entry:333: inode #15: comm syz.4.151: corrupted xattr entries [ 64.089532][ T7315] EXT4-fs (loop4): 1 orphan inode deleted [ 64.089975][ T7315] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.848002][ T7321] netlink: 'syz.5.156': attribute type 4 has an invalid length. [ 64.855930][ T7321] netlink: 'syz.5.156': attribute type 4 has an invalid length. [ 64.864165][ T9] cfg80211: failed to load regulatory.db [ 64.873625][ T2409] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.874858][ T2409] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.376380][ T6540] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.356442][ T7347] loop3: detected capacity change from 0 to 512 [ 66.356876][ T7347] EXT4-fs: Ignoring removed oldalloc option [ 66.392621][ T6836] udevd[6836]: symlink '../../loop3' '/dev/disk/by-diskseq/111.tmp-b7:3' failed: Read-only file system [ 66.398574][ T6836] udevd[6836]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 66.425175][ T6836] udevd[6836]: symlink '../../loop3' '/dev/disk/by-diskseq/111.tmp-b7:3' failed: Read-only file system [ 66.428246][ T6836] udevd[6836]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 66.434413][ T7347] EXT4-fs (loop3): 1 truncate cleaned up [ 66.434879][ T7347] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.479649][ T6532] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.510884][ T6836] udevd[6836]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 66.516114][ T6836] udevd[6836]: symlink '../../loop3' '/dev/disk/by-diskseq/111.tmp-b7:3' failed: Read-only file system [ 66.560974][ T6836] udevd[6836]: symlink '../../loop3' '/dev/disk/by-diskseq/111.tmp-b7:3' failed: Read-only file system [ 66.570865][ T6836] udevd[6836]: symlink '../../loop3' '/dev/disk/by-diskseq/112.tmp-b7:3' failed: Read-only file system [ 66.982903][ T6836] udevd[6836]: symlink '../../loop2' '/dev/disk/by-diskseq/108.tmp-b7:2' failed: Read-only file system [ 67.021918][ T7363] loop2: detected capacity change from 0 to 256 [ 67.044582][ T6836] udevd[6836]: symlink '../../loop2' '/dev/disk/by-diskseq/113.tmp-b7:2' failed: Read-only file system [ 67.052269][ T7363] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 67.190486][ T7365] syzkaller0: entered promiscuous mode [ 67.190523][ T7365] syzkaller0: entered allmulticast mode [ 68.049797][ T7374] loop3: detected capacity change from 0 to 8192 [ 69.490631][ T7400] tipc: Can't bind to reserved service type 0 [ 69.836208][ T7402] Illegal XDP return value 4294967274 on prog (id 9) dev N/A, expect packet loss! [ 70.175770][ T7412] loop4: detected capacity change from 0 to 256 [ 70.238974][ T7412] FAT-fs (loop4): Directory bread(block 64) failed [ 70.240252][ T7412] FAT-fs (loop4): Directory bread(block 65) failed [ 70.241650][ T7412] FAT-fs (loop4): Directory bread(block 66) failed [ 70.242960][ T7412] FAT-fs (loop4): Directory bread(block 67) failed [ 70.244620][ T7412] FAT-fs (loop4): Directory bread(block 68) failed [ 70.245951][ T7412] FAT-fs (loop4): Directory bread(block 69) failed [ 70.247226][ T7412] FAT-fs (loop4): Directory bread(block 70) failed [ 70.283690][ T7412] FAT-fs (loop4): Directory bread(block 71) failed [ 70.486632][ T7412] FAT-fs (loop4): Directory bread(block 72) failed [ 70.486684][ T7412] FAT-fs (loop4): Directory bread(block 73) failed [ 70.511539][ T7420] loop3: detected capacity change from 0 to 256 [ 70.513647][ T7420] exfat: Deprecated parameter 'utf8' [ 70.514584][ T7420] exfat: Deprecated parameter 'namecase' [ 70.515714][ T7420] exfat: Deprecated parameter 'utf8' [ 70.556031][ T7420] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 70.966051][ T7434] loop3: detected capacity change from 0 to 128 [ 71.106639][ T7440] loop4: detected capacity change from 0 to 512 [ 71.114266][ T7440] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 71.424418][ T7440] EXT4-fs (loop4): 1 truncate cleaned up [ 71.424873][ T7440] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.499520][ T7447] fuse: Bad value for 'fd' [ 71.694657][ T6836] udevd[6836]: symlink '../../loop4' '/dev/disk/by-diskseq/122.tmp-b7:4' failed: Read-only file system [ 71.696121][ T6836] udevd[6836]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 71.702776][ T6836] udevd[6836]: symlink '../../loop4' '/dev/disk/by-diskseq/122.tmp-b7:4' failed: Read-only file system [ 71.706763][ T6836] udevd[6836]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 71.749440][ T6836] udevd[6836]: symlink '../../loop2' '/dev/disk/by-diskseq/114.tmp-b7:2' failed: Read-only file system [ 71.831969][ T6836] udevd[6836]: symlink '../../loop3' '/dev/disk/by-diskseq/121.tmp-b7:3' failed: Read-only file system [ 71.839722][ T6836] udevd[6836]: symlink '../../loop3' '/dev/disk/by-diskseq/121.tmp-b7:3' failed: Read-only file system [ 71.848281][ T6836] udevd[6836]: symlink '../../loop3' '/dev/disk/by-diskseq/121.tmp-b7:3' failed: Read-only file system [ 71.947091][ T7460] veth3: entered promiscuous mode [ 72.200034][ T6540] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.257107][ T6836] udevd[6836]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 72.257502][ T6836] udevd[6836]: symlink '../../loop4' '/dev/disk/by-diskseq/122.tmp-b7:4' failed: Read-only file system [ 74.467378][ T7502] loop2: detected capacity change from 0 to 512 [ 74.603108][ T7502] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.212: casefold flag without casefold feature [ 74.709393][ T7502] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.212: couldn't read orphan inode 15 (err -117) [ 74.717008][ T7502] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.890609][ T7523] __nla_validate_parse: 31 callbacks suppressed [ 74.890645][ T7523] netlink: 12 bytes leftover after parsing attributes in process `syz.5.220'. [ 74.890669][ T7523] netlink: 12 bytes leftover after parsing attributes in process `syz.5.220'. [ 74.892698][ T7523] bridge0: port 3(vlan2) entered blocking state [ 74.892740][ T7523] bridge0: port 3(vlan2) entered disabled state [ 74.892841][ T7523] vlan2: entered allmulticast mode [ 74.892855][ T7523] bridge0: entered allmulticast mode [ 74.916161][ T7523] vlan2: left allmulticast mode [ 74.916191][ T7523] bridge0: left allmulticast mode [ 75.296394][ T6528] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.331555][ T7526] loop4: detected capacity change from 0 to 256 [ 75.336479][ T7526] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x368b264c, utbl_chksum : 0xe619d30d) [ 75.350469][ T7526] exFAT-fs (loop4): IO charset B not found [ 75.361245][ T7527] netlink: 4 bytes leftover after parsing attributes in process `syz.3.216'. [ 75.364484][ T7527] macsec0: entered promiscuous mode [ 75.364566][ T7527] macsec0: entered allmulticast mode [ 75.364576][ T7527] veth1_macvtap: entered allmulticast mode [ 75.368917][ T7527] netlink: 12 bytes leftover after parsing attributes in process `syz.3.216'. [ 75.481601][ T7529] loop2: detected capacity change from 0 to 4096 [ 76.425766][ T7529] EXT4-fs (loop2): Test dummy encryption mode enabled [ 76.468004][ T7537] fuse: Bad value for 'fd' [ 76.538698][ T7529] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.691603][ T7539] overlayfs: failed to clone upperpath [ 76.705941][ T7539] overlayfs: failed to clone upperpath [ 76.759020][ T7551] netlink: 96 bytes leftover after parsing attributes in process `syz.5.228'. [ 77.251504][ T7556] fuse: Bad value for 'fd' [ 78.035223][ T7568] fuse: Bad value for 'fd' [ 78.179010][ T6528] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.204841][ T6836] udevd[6836]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 78.207208][ T6836] udevd[6836]: symlink '../../loop2' '/dev/disk/by-diskseq/130.tmp-b7:2' failed: Read-only file system [ 78.221571][ T6836] udevd[6836]: symlink '../../loop2' '/dev/disk/by-diskseq/130.tmp-b7:2' failed: Read-only file system [ 78.234138][ T6836] udevd[6836]: symlink '../../loop2' '/dev/disk/by-diskseq/132.tmp-b7:2' failed: Read-only file system [ 78.315114][ T6836] udevd[6836]: symlink '../../loop4' '/dev/disk/by-diskseq/129.tmp-b7:4' failed: Read-only file system [ 78.351444][ T6836] udevd[6836]: symlink '../../loop4' '/dev/disk/by-diskseq/129.tmp-b7:4' failed: Read-only file system [ 78.376719][ T6836] udevd[6836]: symlink '../../loop4' '/dev/disk/by-diskseq/129.tmp-b7:4' failed: Read-only file system [ 78.452390][ T6836] udevd[6836]: symlink '../../loop4' '/dev/disk/by-diskseq/129.tmp-b7:4' failed: Read-only file system [ 79.106819][ T6836] udevd[6836]: symlink '../../loop2' '/dev/disk/by-diskseq/132.tmp-b7:2' failed: Read-only file system [ 79.147474][ T6836] udevd[6836]: symlink '../../loop2' '/dev/disk/by-diskseq/132.tmp-b7:2' failed: Read-only file system [ 79.171273][ T7595] loop2: detected capacity change from 0 to 128 [ 79.201548][ T7597] fuse: Bad value for 'fd' [ 79.236156][ T7601] netlink: 52 bytes leftover after parsing attributes in process `syz.1.248'. [ 79.236968][ T7601] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.237335][ T7601] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.328804][ T7610] loop2: detected capacity change from 0 to 16 [ 79.349889][ T7610] erofs (device loop2): mounted with root inode @ nid 36. [ 79.360453][ T7612] input: syz1 as /devices/virtual/input/input4 [ 79.432832][ T7610] 9pnet_fd: Insufficient options for proto=fd [ 79.478238][ T7603] loop4: detected capacity change from 0 to 40427 [ 79.480394][ T7603] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 79.481691][ T7603] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 80.254048][ T7603] F2FS-fs (loop4): Encoding requested by superblock is unknown [ 80.347350][ T7621] loop2: detected capacity change from 0 to 512 [ 80.376360][ T7621] EXT4-fs: Ignoring removed bh option [ 80.476104][ T7612] loop3: detected capacity change from 0 to 512 [ 80.482820][ T7621] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 80.485879][ T7612] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 80.902359][ T7621] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 80.925634][ T7612] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.967523][ T7633] netlink: 32 bytes leftover after parsing attributes in process `syz.2.258'. [ 81.002830][ T7612] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 81.065706][ T6532] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.113654][ T7635] kernel profiling enabled (shift: 3) [ 81.177923][ T7637] lo: entered allmulticast mode [ 81.179247][ T7637] tunl0: entered allmulticast mode [ 81.180383][ T7637] gre0: entered allmulticast mode [ 81.181509][ T7637] gretap0: entered allmulticast mode [ 81.182607][ T7637] erspan0: entered allmulticast mode [ 81.183841][ T7637] ip_vti0: entered allmulticast mode [ 81.185230][ T7637] ip6_vti0: entered allmulticast mode [ 81.186381][ T7637] sit0: entered allmulticast mode [ 81.187440][ T7637] ip6tnl0: entered allmulticast mode [ 81.188547][ T7637] ip6gre0: entered allmulticast mode [ 81.189688][ T7637] syz_tun: entered allmulticast mode [ 81.190796][ T7637] ip6gretap0: entered allmulticast mode [ 81.191914][ T7637] bridge0: entered allmulticast mode [ 81.193096][ T7637] vcan0: entered allmulticast mode [ 81.194063][ T7637] bond0: entered allmulticast mode [ 81.194919][ T7637] bond_slave_0: entered allmulticast mode [ 81.196033][ T7637] bond_slave_1: entered allmulticast mode [ 81.197276][ T7637] team0: entered allmulticast mode [ 81.198132][ T7637] team_slave_0: entered allmulticast mode [ 81.199029][ T7637] team_slave_1: entered allmulticast mode [ 81.200399][ T7637] dummy0: entered allmulticast mode [ 81.202449][ T7637] nlmon0: entered allmulticast mode [ 81.204118][ T7637] caif0: entered allmulticast mode [ 81.205008][ T7637] batadv0: entered allmulticast mode [ 81.206559][ T7637] vxcan0: entered allmulticast mode [ 81.207578][ T7637] vxcan1: entered allmulticast mode [ 81.208543][ T7637] veth0: entered allmulticast mode [ 81.209667][ T7637] veth1: entered allmulticast mode [ 81.210877][ T7637] wg0: entered allmulticast mode [ 81.211945][ T7637] wg1: entered allmulticast mode [ 81.213016][ T7637] wg2: entered allmulticast mode [ 81.224627][ T7637] veth0_to_bridge: entered allmulticast mode [ 81.226036][ T7637] bridge_slave_0: left promiscuous mode [ 81.227302][ T7637] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.233280][ T7637] veth1_to_bridge: entered allmulticast mode [ 81.234677][ T7637] bridge_slave_1: left promiscuous mode [ 81.235986][ T7637] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.239682][ T7637] veth0_to_bond: entered allmulticast mode [ 81.241455][ T7637] bond0: (slave bond_slave_0): Releasing backup interface [ 81.265359][ T7637] veth1_to_bond: entered allmulticast mode [ 81.268047][ T7637] bond0: (slave bond_slave_1): Releasing backup interface [ 81.287729][ T7637] veth0_to_team: entered allmulticast mode [ 81.290897][ T7637] team0: Port device team_slave_0 removed [ 81.292464][ T7637] veth1_to_team: entered allmulticast mode [ 81.295771][ T7637] team0: Port device team_slave_1 removed [ 81.297030][ T7637] veth0_to_batadv: entered allmulticast mode [ 81.298674][ T7637] batadv_slave_0: entered allmulticast mode [ 81.299894][ T7637] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.301302][ T7637] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.305444][ T7637] veth1_to_batadv: entered allmulticast mode [ 81.306928][ T7637] batadv_slave_1: entered allmulticast mode [ 81.308022][ T7637] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.309373][ T7637] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.311171][ T7637] xfrm0: entered allmulticast mode [ 81.312301][ T7637] veth0_to_hsr: entered allmulticast mode [ 81.313648][ T7637] hsr_slave_0: entered allmulticast mode [ 81.314843][ T7637] veth1_to_hsr: entered allmulticast mode [ 81.315972][ T7637] hsr_slave_1: entered allmulticast mode [ 81.317071][ T7637] hsr0: entered allmulticast mode [ 81.318123][ T7637] veth1_virt_wifi: entered allmulticast mode [ 81.319327][ T7637] veth0_virt_wifi: entered allmulticast mode [ 81.320639][ T7637] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 81.321939][ T7637] veth1_vlan: entered allmulticast mode [ 81.323799][ T7637] veth0_vlan: entered allmulticast mode [ 81.325017][ T7637] vlan0: entered allmulticast mode [ 81.326086][ T7637] vlan1: entered allmulticast mode [ 81.327177][ T7637] macvlan0: entered allmulticast mode [ 81.328305][ T7637] macvlan1: entered allmulticast mode [ 81.329731][ T7637] ipvlan0: entered allmulticast mode [ 81.330683][ T7637] ipvlan1: entered allmulticast mode [ 81.331875][ T7637] veth0_macvtap: entered allmulticast mode [ 81.333758][ T7637] macvtap0: entered allmulticast mode [ 81.334854][ T7637] macsec0: left promiscuous mode [ 81.335966][ T7637] geneve0: entered allmulticast mode [ 81.337025][ T7637] geneve1: entered allmulticast mode [ 81.338123][ T7637] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 81.340258][ T7637] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 81.341773][ T7637] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 81.344492][ T7637] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 81.345961][ T7637] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 81.347347][ T7637] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 81.348785][ T7637] bridge1: entered allmulticast mode [ 81.378748][ T7650] loop4: detected capacity change from 0 to 512 [ 81.393302][ T7650] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.264: casefold flag without casefold feature [ 81.395617][ T7650] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.264: couldn't read orphan inode 15 (err -117) [ 81.398242][ T7650] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.117531][ T6540] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.284217][ T6836] udevd[6836]: symlink '../../loop2' '/dev/disk/by-diskseq/141.tmp-b7:2' failed: Read-only file system [ 83.350449][ T6520] udevd[6520]: symlink '../../loop2' '/dev/disk/by-diskseq/141.tmp-b7:2' failed: Read-only file system [ 83.355646][ T6836] udevd[6836]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 83.356033][ T6836] udevd[6836]: symlink '../../loop4' '/dev/disk/by-diskseq/143.tmp-b7:4' failed: Read-only file system [ 83.361426][ T6836] udevd[6836]: symlink '../../loop4' '/dev/disk/by-diskseq/143.tmp-b7:4' failed: Read-only file system [ 83.369089][ T6836] udevd[6836]: symlink '../../loop4' '/dev/disk/by-diskseq/144.tmp-b7:4' failed: Read-only file system [ 83.492833][ T6836] udevd[6836]: symlink '../../loop3' '/dev/disk/by-diskseq/142.tmp-b7:3' failed: Read-only file system [ 84.393918][ T6836] udevd[6836]: symlink '../../loop2' '/dev/disk/by-diskseq/141.tmp-b7:2' failed: Read-only file system [ 84.464475][ T6836] udevd[6836]: symlink '../../loop4' '/dev/disk/by-diskseq/144.tmp-b7:4' failed: Read-only file system [ 84.471053][ T7700] loop4: detected capacity change from 0 to 512 [ 84.476448][ T7700] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.279: casefold flag without casefold feature [ 84.476588][ T7700] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.279: couldn't read orphan inode 15 (err -117) [ 84.477096][ T7700] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.490783][ T6520] udevd[6520]: symlink '../../loop3' '/dev/disk/by-diskseq/142.tmp-b7:3' failed: Read-only file system [ 86.032005][ T6540] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.041838][ T7726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.065684][ T7726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.545124][ T7735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.547321][ T7735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.576783][ T7739] loop2: detected capacity change from 0 to 16 [ 86.581674][ T7739] erofs (device loop2): mounted with root inode @ nid 36. [ 87.150699][ T7750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.150865][ T7750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.579353][ T7762] loop4: detected capacity change from 0 to 1024 [ 87.605082][ T7762] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.873288][ T7765] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 393: padding at end of block bitmap is not set [ 88.349481][ T6540] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.369604][ T6836] udevd[6836]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 88.369998][ T6836] udevd[6836]: symlink '../../loop4' '/dev/disk/by-diskseq/149.tmp-b7:4' failed: Read-only file system [ 88.376209][ T6836] udevd[6836]: symlink '../../loop4' '/dev/disk/by-diskseq/149.tmp-b7:4' failed: Read-only file system [ 88.380424][ T7795] loop4: detected capacity change from 0 to 1024 [ 88.383147][ T7795] EXT4-fs: Ignoring removed i_version option [ 88.384148][ T7795] EXT4-fs: inline encryption not supported [ 88.392962][ T6836] udevd[6836]: symlink '../../loop4' '/dev/disk/by-diskseq/150.tmp-b7:4' failed: Read-only file system [ 88.393377][ T7795] EXT4-fs (loop4): Test dummy encryption mode enabled [ 88.397630][ T6836] udevd[6836]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 88.402624][ T7795] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.421888][ T6836] udevd[6836]: symlink '../../loop4' '/dev/disk/by-diskseq/151.tmp-b7:4' failed: Read-only file system [ 88.428803][ T6836] udevd[6836]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 88.447931][ T6520] udevd[6520]: symlink '../../loop2' '/dev/disk/by-diskseq/148.tmp-b7:2' failed: Read-only file system [ 88.471684][ T6540] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 88.473492][ T6540] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 88.486959][ T7131] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.937730][ T4846] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.980484][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.982007][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.985465][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.986927][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.988173][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.005524][ T4846] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.057243][ T6836] udevd[6836]: symlink '../../loop3' '/dev/disk/by-diskseq/142.tmp-b7:3' failed: Read-only file system [ 89.071698][ T4846] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.082354][ T7819] loop3: detected capacity change from 0 to 512 [ 89.085322][ T7819] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 89.092979][ T7819] EXT4-fs (loop3): 1 truncate cleaned up [ 89.098089][ T7819] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.106337][ T6836] udevd[6836]: symlink '../../loop3' '/dev/disk/by-diskseq/152.tmp-b7:3' failed: Read-only file system [ 89.121472][ T6532] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.126641][ T4846] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.227850][ T7812] chnl_net:caif_netlink_parms(): no params data found [ 89.319505][ T4846] bridge_slave_1: left allmulticast mode [ 89.319567][ T4846] bridge_slave_1: left promiscuous mode [ 89.320289][ T4846] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.326747][ T4846] bridge_slave_0: left allmulticast mode [ 89.328177][ T4846] bridge_slave_0: left promiscuous mode [ 89.329442][ T4846] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.338991][ T7836] loop2: detected capacity change from 0 to 128 [ 89.356469][ T7836] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 89.419354][ T7836] fscrypt: loop2: 2 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 13 [ 89.435805][ T6528] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 89.544807][ T7857] overlayfs: failed to clone upperpath [ 89.588627][ T7854] hub 8-0:1.0: USB hub found [ 89.590920][ T7854] hub 8-0:1.0: 8 ports detected [ 89.658322][ T4846] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.950361][ T7863] loop2: detected capacity change from 0 to 512 [ 89.950764][ T7863] EXT4-fs: Ignoring removed orlov option [ 90.059693][ T7863] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 90.059788][ T7863] EXT4-fs (loop2): blocks per group (95) and clusters per group (32768) inconsistent [ 90.114771][ T4846] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 90.236839][ T4846] bond0 (unregistering): Released all slaves [ 90.664779][ T7812] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.664830][ T7812] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.664906][ T7812] bridge_slave_0: entered allmulticast mode [ 90.666545][ T7812] bridge_slave_0: entered promiscuous mode [ 90.832446][ T7812] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.834177][ T7812] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.835755][ T7812] bridge_slave_1: entered allmulticast mode [ 90.837713][ T7812] bridge_slave_1: entered promiscuous mode [ 90.939614][ T7812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.945938][ T7812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.039167][ T7812] team0: Port device team_slave_0 added [ 91.041278][ T7812] team0: Port device team_slave_1 added [ 91.063136][ T52] Bluetooth: hci4: command tx timeout [ 91.092215][ T7812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.092243][ T7812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.092258][ T7812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.094749][ T7812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.094761][ T7812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.094774][ T7812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.112781][ T4846] hsr_slave_0: left promiscuous mode [ 91.114325][ T4846] hsr_slave_1: left promiscuous mode [ 91.115932][ T4846] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.117336][ T4846] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.127983][ T4846] veth1_vlan: left promiscuous mode [ 91.129126][ T4846] veth0_vlan: left promiscuous mode [ 91.143997][ T7890] loop2: detected capacity change from 0 to 40427 [ 91.148145][ T7890] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 91.148355][ T7890] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 91.151445][ T7890] F2FS-fs (loop2): invalid crc value [ 91.201634][ T7890] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 91.230433][ T7890] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 91.230467][ T7890] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 91.339997][ T4846] team0 (unregistering): Port device team_slave_1 removed [ 91.356927][ T4846] team0 (unregistering): Port device team_slave_0 removed [ 92.644455][ T7910] netlink: 'syz.3.335': attribute type 4 has an invalid length. [ 92.712451][ T7911] netlink: 'syz.3.335': attribute type 4 has an invalid length. [ 92.833004][ T7812] hsr_slave_0: entered promiscuous mode [ 92.834051][ T7812] hsr_slave_1: entered promiscuous mode [ 92.834701][ T7812] debugfs: 'hsr0' already exists in 'hsr' [ 92.834716][ T7812] Cannot create hsr debugfs directory [ 93.143670][ T52] Bluetooth: hci4: command tx timeout [ 93.168549][ T7812] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 93.176853][ T7812] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 93.212090][ T6528] syz-executor: attempt to access beyond end of device [ 93.212090][ T6528] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 93.216714][ T6528] CPU: 0 UID: 0 PID: 6528 Comm: syz-executor Not tainted syzkaller #0 PREEMPT [ 93.216735][ T6528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 93.216740][ T6528] Call trace: [ 93.216743][ T6528] show_stack+0x2c/0x3c (C) [ 93.216761][ T6528] __dump_stack+0x30/0x40 [ 93.216771][ T6528] dump_stack_lvl+0xd8/0x12c [ 93.216778][ T6528] dump_stack+0x1c/0x28 [ 93.216783][ T6528] f2fs_handle_critical_error+0x34c/0x4b8 [ 93.216792][ T6528] f2fs_stop_checkpoint+0x5c/0x70 [ 93.216799][ T6528] f2fs_write_end_io+0x768/0xa70 [ 93.216806][ T6528] bio_endio+0x858/0x894 [ 93.216814][ T6528] submit_bio_noacct+0x158/0x177c [ 93.216820][ T6528] submit_bio+0x3b4/0x550 [ 93.216826][ T6528] f2fs_submit_write_bio+0x13c/0x324 [ 93.216833][ T6528] __submit_merged_bio+0x254/0x704 [ 93.216840][ T6528] __submit_merged_write_cond+0x23c/0x4ac [ 93.216846][ T6528] f2fs_write_data_pages+0x1d28/0x2634 [ 93.216853][ T6528] do_writepages+0x270/0x468 [ 93.216860][ T6528] filemap_fdatawrite+0x14c/0x1f4 [ 93.216867][ T6528] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 93.216873][ T6528] f2fs_write_checkpoint+0x690/0x16a0 [ 93.216878][ T6528] kill_f2fs_super+0x21c/0x584 [ 93.216884][ T6528] deactivate_locked_super+0xc4/0x12c [ 93.216890][ T6528] deactivate_super+0xe0/0x100 [ 93.216894][ T6528] cleanup_mnt+0x31c/0x3ac [ 93.216900][ T6528] __cleanup_mnt+0x20/0x30 [ 93.216905][ T6528] task_work_run+0x1dc/0x260 [ 93.216911][ T6528] exit_to_user_mode_loop+0xfc/0x168 [ 93.216917][ T6528] el0_svc+0x170/0x254 [ 93.216925][ T6528] el0t_64_sync_handler+0x84/0x12c [ 93.216932][ T6528] el0t_64_sync+0x198/0x19c [ 93.220310][ T6528] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 93.324673][ T7812] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 93.562266][ T6836] udevd[6836]: symlink '../../loop3' '/dev/disk/by-diskseq/153.tmp-b7:3' failed: Read-only file system [ 93.587293][ T7933] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.587348][ T7933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.587469][ T7933] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.587503][ T7933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.605365][ T7933] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 93.619676][ T7812] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 93.639802][ T6836] udevd[6836]: symlink '../../loop2' '/dev/disk/by-diskseq/158.tmp-b7:2' failed: Read-only file system [ 93.643227][ T6836] udevd[6836]: symlink '../../loop2' '/dev/disk/by-diskseq/158.tmp-b7:2' failed: Read-only file system [ 93.647293][ T6836] udevd[6836]: symlink '../../loop2' '/dev/disk/by-diskseq/158.tmp-b7:2' failed: Read-only file system [ 93.737534][ T7812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.742353][ T6672] Bluetooth: hci5: Frame reassembly failed (-84) [ 93.767449][ T6836] udevd[6836]: symlink '../../loop3' '/dev/disk/by-diskseq/153.tmp-b7:3' failed: Read-only file system [ 93.789694][ T7964] loop3: detected capacity change from 0 to 256 [ 93.807138][ T6836] udevd[6836]: symlink '../../loop3' '/dev/disk/by-diskseq/160.tmp-b7:3' failed: Read-only file system [ 93.817475][ T7812] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.831802][ T6672] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.831849][ T6672] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.840776][ T250] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.840819][ T250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.867973][ T6836] udevd[6836]: symlink '../../loop3' '/dev/disk/by-diskseq/160.tmp-b7:3' failed: Read-only file system [ 93.901251][ T6836] udevd[6836]: symlink '../../loop3' '/dev/disk/by-diskseq/160.tmp-b7:3' failed: Read-only file system [ 93.912877][ T6836] udevd[6836]: symlink '../../loop3' '/dev/disk/by-diskseq/161.tmp-b7:3' failed: Read-only file system [ 93.920769][ T6836] udevd[6836]: symlink '../../loop3' '/dev/disk/by-diskseq/161.tmp-b7:3' failed: Read-only file system [ 93.985622][ T7812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.011100][ T7974] loop3: detected capacity change from 0 to 16 [ 94.012444][ T7974] erofs (device loop3): mounted with root inode @ nid 36. [ 94.014558][ T7974] erofs (device loop3): readahead error at folio 3600 @ nid 36 [ 94.014570][ T7974] erofs (device loop3): readahead error at folio 3599 @ nid 36 [ 94.082071][ T7812] veth0_vlan: entered promiscuous mode [ 94.091510][ T7812] veth1_vlan: entered promiscuous mode [ 94.109551][ T7812] veth0_macvtap: entered promiscuous mode [ 94.110680][ T7812] veth1_macvtap: entered promiscuous mode [ 94.116584][ T7812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.117847][ T7812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.124279][ T6672] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.127332][ T6672] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.127376][ T6672] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.127401][ T6672] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.172936][ T6672] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.174450][ T6672] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.197324][ T6660] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.197356][ T6660] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.225564][ T6531] Bluetooth: hci4: command tx timeout [ 95.722159][ T8026] netlink: 'syz.1.354': attribute type 4 has an invalid length. [ 95.752885][ T8026] netlink: 'syz.1.354': attribute type 4 has an invalid length. [ 95.783678][ T6531] Bluetooth: hci5: command 0x1003 tx timeout [ 95.793287][ T52] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 95.962732][ T8030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.968634][ T8030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.999164][ T8034] loop3: detected capacity change from 0 to 2048 [ 96.031370][ T6836] Alternate GPT is invalid, using primary GPT. [ 96.031465][ T6836] loop3: p1 p2 p3 [ 96.046184][ T8034] Alternate GPT is invalid, using primary GPT. [ 96.046233][ T8034] loop3: p1 p2 p3 [ 97.307749][ T52] Bluetooth: hci4: command tx timeout [ 97.321394][ T8067] pim6reg1: entered promiscuous mode [ 97.321426][ T8067] pim6reg1: entered allmulticast mode [ 97.764592][ T8072] loop2: detected capacity change from 0 to 512 [ 97.765862][ T8072] EXT4-fs: Ignoring removed nobh option [ 97.768623][ T8072] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 97.879651][ T8072] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.371: iget: bad i_size value: 38620345925642 [ 97.945715][ T8072] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.371: couldn't read orphan inode 15 (err -117) [ 97.954069][ T8072] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.651305][ T6520] udevd[6520]: symlink '../../loop3' '/dev/disk/by-diskseq/165.tmp-b7:3' failed: Read-only file system [ 98.664379][ T6836] udevd[6836]: symlink '../../loop2' '/dev/disk/by-diskseq/166.tmp-b7:2' failed: Read-only file system [ 98.666531][ T6836] udevd[6836]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 98.676819][ T6672] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm kworker/u8:11: bg 0: block 5: invalid block bitmap [ 98.680891][ T6672] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28 [ 98.686751][ T6672] EXT4-fs (loop2): This should not happen!! Data will be lost [ 98.686751][ T6672] [ 98.686788][ T6672] EXT4-fs (loop2): Total free blocks count 0 [ 98.686801][ T6672] EXT4-fs (loop2): Free/Dirty block details [ 98.686822][ T6672] EXT4-fs (loop2): free_blocks=0 [ 98.686836][ T6672] EXT4-fs (loop2): dirty_blocks=64 [ 98.686845][ T6672] EXT4-fs (loop2): Block reservation details [ 98.686853][ T6672] EXT4-fs (loop2): i_reserved_data_blocks=64 [ 98.697706][ T8072] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.711677][ T6836] udevd[6836]: symlink '../../loop2' '/dev/disk/by-diskseq/166.tmp-b7:2' failed: Read-only file system [ 98.716812][ T6836] udevd[6836]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 98.745471][ T8077] loop3: detected capacity change from 0 to 512 [ 98.816007][ T6520] udevd[6520]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 98.820726][ T8082] loop6: detected capacity change from 0 to 1024 [ 98.822303][ T6520] udevd[6520]: symlink '../../loop2' '/dev/disk/by-diskseq/166.tmp-b7:2' failed: Read-only file system [ 98.831421][ T6836] udevd[6836]: symlink '../../loop3' '/dev/disk/by-diskseq/167.tmp-b7:3' failed: Read-only file system [ 98.851175][ T8082] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.857286][ T6520] udevd[6520]: symlink '../../loop2' '/dev/disk/by-diskseq/166.tmp-b7:2' failed: Read-only file system [ 98.863736][ T6836] udevd[6836]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 98.869962][ T8077] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.891149][ T8086] loop2: detected capacity change from 0 to 1024 [ 100.356600][ T8086] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.042946][ T6532] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.117471][ T7812] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.132221][ T6528] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.524249][ T8106] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 101.850623][ T8121] loop3: detected capacity change from 0 to 512 [ 102.445356][ T31] kauditd_printk_skb: 16 callbacks suppressed [ 102.445394][ T31] audit: type=1326 audit(102.420:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8129 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f95b3a8 code=0x7ffc0000 [ 102.450500][ T31] audit: type=1326 audit(102.420:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8129 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f95b3a8 code=0x7ffc0000 [ 102.455523][ T31] audit: type=1326 audit(102.430:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8129 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9f95b3a8 code=0x7ffc0000 [ 102.459186][ T31] audit: type=1326 audit(102.430:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8129 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f95b3a8 code=0x7ffc0000 [ 102.462832][ T31] audit: type=1326 audit(102.430:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8129 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f95b3a8 code=0x7ffc0000 [ 102.468774][ T31] audit: type=1326 audit(102.440:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8129 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9f95b3a8 code=0x7ffc0000 [ 102.472907][ T31] audit: type=1326 audit(102.440:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8129 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f95b3a8 code=0x7ffc0000 [ 102.477170][ T31] audit: type=1326 audit(102.450:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8129 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9f95b3a8 code=0x7ffc0000 [ 102.481386][ T31] audit: type=1326 audit(102.450:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8129 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f95b3a8 code=0x7ffc0000 [ 102.485389][ T31] audit: type=1326 audit(102.460:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8129 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f95b3a8 code=0x7ffc0000 [ 104.221451][ T6836] udevd[6836]: symlink '../../loop2' '/dev/disk/by-diskseq/173.tmp-b7:2' failed: Read-only file system [ 104.250570][ T8173] netlink: 28 bytes leftover after parsing attributes in process `syz.2.400'. [ 104.284543][ T6836] udevd[6836]: symlink '../../loop2' '/dev/disk/by-diskseq/173.tmp-b7:2' failed: Read-only file system [ 104.321163][ T6836] udevd[6836]: symlink '../../loop6' '/dev/disk/by-diskseq/172.tmp-b7:6' failed: Read-only file system [ 104.341267][ T6836] udevd[6836]: symlink '../../loop2' '/dev/disk/by-diskseq/173.tmp-b7:2' failed: Read-only file system [ 104.356714][ T8181] netlink: 12 bytes leftover after parsing attributes in process `syz.6.404'. [ 104.384558][ T6836] udevd[6836]: symlink '../../loop2' '/dev/disk/by-diskseq/173.tmp-b7:2' failed: Read-only file system [ 105.234833][ T8189] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 105.496462][ T6836] udevd[6836]: symlink '../../loop2' '/dev/disk/by-diskseq/173.tmp-b7:2' failed: Read-only file system [ 105.517112][ T6836] udevd[6836]: symlink '../../loop6' '/dev/disk/by-diskseq/172.tmp-b7:6' failed: Read-only file system [ 105.547131][ T8198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.552116][ T8198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.565759][ T8202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.567247][ T8202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.812979][ T8221] vlan2: entered allmulticast mode [ 106.659884][ T8232] loop3: detected capacity change from 0 to 4096 [ 106.682225][ T8232] EXT4-fs (loop3): Test dummy encryption mode enabled [ 106.689238][ T6836] udevd[6836]: symlink '../../loop3' '/dev/disk/by-diskseq/176.tmp-b7:3' failed: Read-only file system [ 106.706377][ T6836] udevd[6836]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 106.713780][ T8232] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.728263][ T6836] udevd[6836]: symlink '../../loop2' '/dev/disk/by-diskseq/173.tmp-b7:2' failed: Read-only file system [ 107.789175][ T6532] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.451435][ T8296] loop3: detected capacity change from 0 to 512 [ 108.485984][ T8286] loop6: detected capacity change from 0 to 40427 [ 108.503216][ T8286] F2FS-fs (loop6): invalid crc value [ 108.505542][ T8296] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.521458][ T8286] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 108.524174][ T8286] F2FS-fs (loop6): Start checkpoint disabled! [ 108.534670][ T8286] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 108.665363][ T6532] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.842579][ T8317] syz.6.422: attempt to access beyond end of device [ 108.842579][ T8317] loop6: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 108.979238][ T8317] F2FS-fs (loop6): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 109.140072][ T6660] kworker/u8:10: attempt to access beyond end of device [ 109.140072][ T6660] loop6: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 109.140650][ T6660] CPU: 0 UID: 0 PID: 6660 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT [ 109.140661][ T6660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 109.140665][ T6660] Workqueue: writeback wb_workfn (flush-7:6) [ 109.140683][ T6660] Call trace: [ 109.140686][ T6660] show_stack+0x2c/0x3c (C) [ 109.140696][ T6660] __dump_stack+0x30/0x40 [ 109.140703][ T6660] dump_stack_lvl+0xd8/0x12c [ 109.140708][ T6660] dump_stack+0x1c/0x28 [ 109.140713][ T6660] f2fs_handle_critical_error+0x34c/0x4b8 [ 109.140721][ T6660] f2fs_stop_checkpoint+0x5c/0x70 [ 109.140727][ T6660] f2fs_write_end_io+0x768/0xa70 [ 109.140733][ T6660] bio_endio+0x858/0x894 [ 109.140741][ T6660] submit_bio_noacct+0x158/0x177c [ 109.140747][ T6660] submit_bio+0x3b4/0x550 [ 109.140752][ T6660] f2fs_submit_write_bio+0x13c/0x324 [ 109.140758][ T6660] __submit_merged_bio+0x254/0x704 [ 109.140764][ T6660] __submit_merged_write_cond+0x23c/0x4ac [ 109.140770][ T6660] f2fs_write_data_pages+0x1d28/0x2634 [ 109.140777][ T6660] do_writepages+0x270/0x468 [ 109.140784][ T6660] __writeback_single_inode+0x15c/0x13e8 [ 109.140791][ T6660] writeback_sb_inodes+0x55c/0xe40 [ 109.140798][ T6660] wb_writeback+0x3cc/0xd70 [ 109.140804][ T6660] wb_workfn+0x338/0xdc0 [ 109.140810][ T6660] process_one_work+0x7e8/0x155c [ 109.140815][ T6660] worker_thread+0x958/0xed8 [ 109.140821][ T6660] kthread+0x5fc/0x75c [ 109.140827][ T6660] ret_from_fork+0x10/0x20 [ 109.140834][ T6660] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 109.366201][ T6836] udevd[6836]: symlink '../../loop6' '/dev/disk/by-diskseq/179.tmp-b7:6' failed: Read-only file system [ 109.375177][ T6836] udevd[6836]: symlink '../../loop6' '/dev/disk/by-diskseq/179.tmp-b7:6' failed: Read-only file system [ 109.380958][ T6836] udevd[6836]: symlink '../../loop6' '/dev/disk/by-diskseq/181.tmp-b7:6' failed: Read-only file system [ 109.389854][ T6836] udevd[6836]: symlink '../../loop2' '/dev/disk/by-diskseq/173.tmp-b7:2' failed: Read-only file system [ 109.760152][ T8346] loop6: detected capacity change from 0 to 40427 [ 109.762587][ T8346] F2FS-fs (loop6): Invalid SB checksum offset: 0 [ 109.765060][ T8346] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 109.771372][ T8346] F2FS-fs (loop6): invalid crc value [ 109.803366][ T8346] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 109.805584][ T8346] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 109.805982][ T8346] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 109.809475][ T6836] udevd[6836]: symlink '../../loop6' '/dev/disk/by-diskseq/182.tmp-b7:6' failed: Read-only file system [ 109.812247][ T6836] udevd[6836]: symlink '../../loop6' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:6' failed: Read-only file system [ 109.834365][ T6836] udevd[6836]: symlink '../../loop6' '/dev/disk/by-diskseq/182.tmp-b7:6' failed: Read-only file system [ 109.837214][ T6836] udevd[6836]: symlink '../../loop6' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:6' failed: Read-only file system [ 109.899534][ T7812] syz-executor: attempt to access beyond end of device [ 109.899534][ T7812] loop6: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 109.903343][ T7812] CPU: 0 UID: 0 PID: 7812 Comm: syz-executor Not tainted syzkaller #0 PREEMPT [ 109.903366][ T7812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 109.903371][ T7812] Call trace: [ 109.903375][ T7812] show_stack+0x2c/0x3c (C) [ 109.903390][ T7812] __dump_stack+0x30/0x40 [ 109.903397][ T7812] dump_stack_lvl+0xd8/0x12c [ 109.903403][ T7812] dump_stack+0x1c/0x28 [ 109.903413][ T7812] f2fs_handle_critical_error+0x34c/0x4b8 [ 109.903422][ T7812] f2fs_stop_checkpoint+0x5c/0x70 [ 109.903428][ T7812] f2fs_write_end_io+0x768/0xa70 [ 109.903435][ T7812] bio_endio+0x858/0x894 [ 109.903443][ T7812] submit_bio_noacct+0x158/0x177c [ 109.903448][ T7812] submit_bio+0x3b4/0x550 [ 109.903454][ T7812] f2fs_submit_write_bio+0x13c/0x324 [ 109.903460][ T7812] __submit_merged_bio+0x254/0x704 [ 109.903465][ T7812] __submit_merged_write_cond+0x23c/0x4ac [ 109.903471][ T7812] f2fs_write_data_pages+0x1d28/0x2634 [ 109.903478][ T7812] do_writepages+0x270/0x468 [ 109.903485][ T7812] filemap_fdatawrite+0x14c/0x1f4 [ 109.903492][ T7812] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 109.903497][ T7812] f2fs_write_checkpoint+0x690/0x16a0 [ 109.903503][ T7812] kill_f2fs_super+0x21c/0x584 [ 109.903509][ T7812] deactivate_locked_super+0xc4/0x12c [ 109.903514][ T7812] deactivate_super+0xe0/0x100 [ 109.903518][ T7812] cleanup_mnt+0x31c/0x3ac [ 109.903524][ T7812] __cleanup_mnt+0x20/0x30 [ 109.903529][ T7812] task_work_run+0x1dc/0x260 [ 109.903535][ T7812] exit_to_user_mode_loop+0xfc/0x168 [ 109.903541][ T7812] el0_svc+0x170/0x254 [ 109.903549][ T7812] el0t_64_sync_handler+0x84/0x12c [ 109.903556][ T7812] el0t_64_sync+0x198/0x19c [ 109.909895][ T7812] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 109.910676][ T7812] CPU: 1 UID: 0 PID: 7812 Comm: syz-executor Not tainted syzkaller #0 PREEMPT [ 109.910694][ T7812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 109.910702][ T7812] Call trace: [ 109.910706][ T7812] show_stack+0x2c/0x3c (C) [ 109.910718][ T7812] __dump_stack+0x30/0x40 [ 109.910724][ T7812] dump_stack_lvl+0xd8/0x12c [ 109.910730][ T7812] dump_stack+0x1c/0x28 [ 109.910735][ T7812] f2fs_handle_critical_error+0x34c/0x4b8 [ 109.910742][ T7812] f2fs_stop_checkpoint+0x5c/0x70 [ 109.910748][ T7812] f2fs_write_end_io+0x768/0xa70 [ 109.910754][ T7812] bio_endio+0x858/0x894 [ 109.910761][ T7812] submit_bio_noacct+0x158/0x177c [ 109.910766][ T7812] submit_bio+0x3b4/0x550 [ 109.910772][ T7812] f2fs_submit_write_bio+0x13c/0x324 [ 109.910778][ T7812] __submit_merged_bio+0x254/0x704 [ 109.910783][ T7812] __submit_merged_write_cond+0x23c/0x4ac [ 109.910789][ T7812] f2fs_write_data_pages+0x1d28/0x2634 [ 109.910796][ T7812] do_writepages+0x270/0x468 [ 109.910803][ T7812] filemap_fdatawrite+0x14c/0x1f4 [ 109.910810][ T7812] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 109.910815][ T7812] f2fs_write_checkpoint+0x690/0x16a0 [ 109.910821][ T7812] kill_f2fs_super+0x21c/0x584 [ 109.910827][ T7812] deactivate_locked_super+0xc4/0x12c [ 109.910832][ T7812] deactivate_super+0xe0/0x100 [ 109.910837][ T7812] cleanup_mnt+0x31c/0x3ac [ 109.910842][ T7812] __cleanup_mnt+0x20/0x30 [ 109.910847][ T7812] task_work_run+0x1dc/0x260 [ 109.910853][ T7812] exit_to_user_mode_loop+0xfc/0x168 [ 109.910859][ T7812] el0_svc+0x170/0x254 [ 109.910866][ T7812] el0t_64_sync_handler+0x84/0x12c [ 109.910873][ T7812] el0t_64_sync+0x198/0x19c [ 109.910881][ T7812] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 109.987714][ T6836] udevd[6836]: symlink '../../loop3' '/dev/disk/by-diskseq/180.tmp-b7:3' failed: Read-only file system [ 110.027739][ T6520] udevd[6520]: symlink '../../loop3' '/dev/disk/by-diskseq/180.tmp-b7:3' failed: Read-only file system [ 110.060440][ T8355] netlink: 112 bytes leftover after parsing attributes in process `syz.3.438'. [ 110.060486][ T8355] netlink: 'syz.3.438': attribute type 1 has an invalid length. [ 110.118851][ T8363] loop3: detected capacity change from 0 to 256 [ 110.120743][ T8363] exfat: Deprecated parameter 'utf8' [ 110.121864][ T8363] exfat: Unknown parameter 'fmak' [ 110.128164][ T8363] loop3: detected capacity change from 0 to 512 [ 110.130046][ T8363] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 110.201653][ T8363] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.440: invalid indirect mapped block 4294967295 (level 0) [ 110.204731][ T8363] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.440: invalid indirect mapped block 4294967295 (level 1) [ 110.208800][ T8363] EXT4-fs (loop3): 1 orphan inode deleted [ 110.208827][ T8363] EXT4-fs (loop3): 1 truncate cleaned up [ 110.209266][ T8363] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.317665][ T6532] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.570976][ T8380] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2 [ 110.571246][ T8380] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 110.767416][ T8382] syz.2.446 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 111.187638][ T8386] tipc: Started in network mode [ 111.187680][ T8386] tipc: Node identity 82cdb756224e, cluster identity 4711 [ 111.188302][ T8386] tipc: Enabled bearer , priority 0 [ 111.191908][ T8386] tipc: Disabling bearer [ 111.912949][ T8398] netlink: 24 bytes leftover after parsing attributes in process `syz.5.451'. [ 111.919909][ T8398] netlink: 24 bytes leftover after parsing attributes in process `syz.5.451'. [ 112.001594][ T8400] loop2: detected capacity change from 0 to 512 [ 112.851322][ T8400] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.705545][ T6528] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.731431][ T8405] loop6: detected capacity change from 0 to 1024 [ 113.735449][ T8405] EXT4-fs: Ignoring removed orlov option [ 113.735477][ T8405] EXT4-fs: Ignoring removed nomblk_io_submit option [ 113.773656][ T8405] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.777345][ T8405] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.946048][ T6927] Bluetooth: (null): Invalid header checksum [ 113.947359][ T6927] Bluetooth: (null): Invalid header checksum [ 114.053832][ T6660] Bluetooth: (null): Invalid header checksum [ 114.058349][ T8425] loop6: detected capacity change from 0 to 512 [ 114.099528][ T8425] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.164088][ T4806] Bluetooth: (null): Invalid header checksum [ 114.286842][ T4806] Bluetooth: (null): Invalid header checksum [ 114.606515][ T8438] binder: 8434:8438 IncRefs 0 refcount change on invalid ref 1 ret -22 [ 114.607032][ T8438] binder: 8434:8438 got transaction to invalid handle, 1 [ 114.607094][ T8438] binder: 8434:8438 cannot find target node [ 114.607107][ T8438] binder: 8434:8438 transaction call to 0:0 failed 4/29201/-22, code 0 size 72-24 line 3151 [ 114.856828][ T42] Bluetooth: (null): Invalid header checksum [ 114.856871][ T42] Bluetooth: (null): Invalid header checksum [ 114.856890][ T42] Bluetooth: (null): Invalid header checksum [ 114.856902][ T42] Bluetooth: (null): Invalid header checksum [ 114.856915][ T42] Bluetooth: (null): Invalid header checksum [ 114.939771][ T6836] udevd[6836]: symlink '../../loop3' '/dev/disk/by-diskseq/187.tmp-b7:3' failed: Read-only file system [ 115.044133][ T6836] udevd[6836]: symlink '../../loop3' '/dev/disk/by-diskseq/187.tmp-b7:3' failed: Read-only file system [ 115.066896][ T10] binder: undelivered TRANSACTION_ERROR: 29201 [ 115.148637][ T6836] udevd[6836]: symlink '../../loop2' '/dev/disk/by-diskseq/190.tmp-b7:2' failed: Read-only file system [ 116.550802][ T6836] udevd[6836]: symlink '../../loop3' '/dev/disk/by-diskseq/187.tmp-b7:3' failed: Read-only file system [ 116.592331][ T6836] udevd[6836]: symlink '../../loop3' '/dev/disk/by-diskseq/187.tmp-b7:3' failed: Read-only file system [ 116.637352][ T6836] udevd[6836]: symlink '../../loop3' '/dev/disk/by-diskseq/187.tmp-b7:3' failed: Read-only file system [ 116.697915][ T6836] udevd[6836]: symlink '../../loop3' '/dev/disk/by-diskseq/187.tmp-b7:3' failed: Read-only file system [ 116.925394][ T6836] udevd[6836]: symlink '../../loop2' '/dev/disk/by-diskseq/190.tmp-b7:2' failed: Read-only file system [ 116.935927][ T8464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.936167][ T8464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.124860][ T7812] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.138895][ T6836] udevd[6836]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 117.141349][ T6836] udevd[6836]: symlink '../../loop6' '/dev/disk/by-diskseq/192.tmp-b7:6' failed: Read-only file system [ 117.152737][ T8466] loop6: detected capacity change from 0 to 512 [ 117.161997][ T8466] [ 117.162395][ T8466] ====================================================== [ 117.163483][ T8466] WARNING: possible circular locking dependency detected [ 117.164573][ T8466] syzkaller #0 Not tainted [ 117.165243][ T8466] ------------------------------------------------------ [ 117.166352][ T8466] syz.6.472/8466 is trying to acquire lock: [ 117.167271][ T8466] ffff0000c4160b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x150/0x2a0 [ 117.168959][ T8466] [ 117.168959][ T8466] but task is already holding lock: [ 117.170144][ T8466] ffff0000fa0800c8 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x358/0x6fc [ 117.171721][ T8466] [ 117.171721][ T8466] which lock already depends on the new lock. [ 117.171721][ T8466] [ 117.173335][ T8466] [ 117.173335][ T8466] the existing dependency chain (in reverse order) is: [ 117.174780][ T8466] [ 117.174780][ T8466] -> #2 (&ei->xattr_sem){++++}-{4:4}: [ 117.176009][ T8466] down_write+0x50/0xc0 [ 117.176713][ T8466] ext4_xattr_set_handle+0x11c/0x1260 [ 117.177649][ T8466] ext4_initxattrs+0xa4/0x11c [ 117.178439][ T8466] security_inode_init_security+0x6dc/0x7f4 [ 117.179472][ T8466] ext4_init_security+0x44/0x58 [ 117.180379][ T8466] __ext4_new_inode+0x27f4/0x3190 [ 117.181246][ T8466] ext4_create+0x1f8/0x3fc [ 117.182009][ T8466] path_openat+0x12d8/0x2c40 [ 117.182830][ T8466] do_filp_open+0x18c/0x36c [ 117.183622][ T8466] do_sys_openat2+0x11c/0x1b4 [ 117.184453][ T8466] __arm64_sys_openat+0x120/0x158 [ 117.185318][ T8466] invoke_syscall+0x98/0x254 [ 117.186144][ T8466] el0_svc_common+0x130/0x23c [ 117.186926][ T8466] do_el0_svc+0x48/0x58 [ 117.187699][ T8466] el0_svc+0x5c/0x254 [ 117.188440][ T8466] el0t_64_sync_handler+0x84/0x12c [ 117.189310][ T8466] el0t_64_sync+0x198/0x19c [ 117.190159][ T8466] [ 117.190159][ T8466] -> #1 (jbd2_handle){++++}-{0:0}: [ 117.191271][ T8466] start_this_handle+0xe74/0x10dc [ 117.192065][ T8466] jbd2__journal_start+0x288/0x51c [ 117.192868][ T8466] __ext4_journal_start_sb+0x378/0x88c [ 117.193782][ T8466] ext4_do_writepages+0xb94/0x39b4 [ 117.194647][ T8466] ext4_writepages+0x178/0x2a0 [ 117.195413][ T8466] do_writepages+0x270/0x468 [ 117.196153][ T8466] file_write_and_wait_range+0x1d0/0x2c4 [ 117.197084][ T8466] ext4_sync_file+0x274/0xb44 [ 117.197849][ T8466] __arm64_sys_fsync+0x170/0x1d4 [ 117.198686][ T8466] invoke_syscall+0x98/0x254 [ 117.199509][ T8466] el0_svc_common+0x130/0x23c [ 117.200321][ T8466] do_el0_svc+0x48/0x58 [ 117.201055][ T8466] el0_svc+0x5c/0x254 [ 117.201774][ T8466] el0t_64_sync_handler+0x84/0x12c [ 117.202711][ T8466] el0t_64_sync+0x198/0x19c [ 117.203501][ T8466] [ 117.203501][ T8466] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 117.204853][ T8466] __lock_acquire+0x1774/0x30a4 [ 117.205748][ T8466] lock_acquire+0x14c/0x2e0 [ 117.206566][ T8466] percpu_down_read_internal+0x5c/0x298 [ 117.207526][ T8466] ext4_writepages+0x150/0x2a0 [ 117.208319][ T8466] do_writepages+0x270/0x468 [ 117.209072][ T8466] __writeback_single_inode+0x15c/0x13e8 [ 117.210033][ T8466] writeback_single_inode+0x18c/0x54c [ 117.211023][ T8466] write_inode_now+0x13c/0x1a4 [ 117.211833][ T8466] iput+0x570/0x83c [ 117.212483][ T8466] ext4_xattr_block_set+0x13dc/0x24bc [ 117.213389][ T8466] ext4_expand_extra_isize_ea+0xeb4/0x182c [ 117.214330][ T8466] __ext4_expand_extra_isize+0x2a0/0x37c [ 117.215278][ T8466] __ext4_mark_inode_dirty+0x3c0/0x6fc [ 117.216223][ T8466] ext4_evict_inode+0x930/0x1084 [ 117.217102][ T8466] evict+0x414/0x928 [ 117.217807][ T8466] iput+0x6e4/0x83c [ 117.218495][ T8466] ext4_process_orphan+0x240/0x2b4 [ 117.219450][ T8466] ext4_orphan_cleanup+0x930/0x107c [ 117.220323][ T8466] ext4_fill_super+0x4724/0x4ea4 [ 117.221133][ T8466] get_tree_bdev_flags+0x360/0x414 [ 117.221993][ T8466] get_tree_bdev+0x2c/0x3c [ 117.222703][ T8466] ext4_get_tree+0x28/0x38 [ 117.223426][ T8466] vfs_get_tree+0x90/0x28c [ 117.224154][ T8466] do_new_mount+0x278/0x7f4 [ 117.224873][ T8466] path_mount+0x5b4/0xde0 [ 117.225603][ T8466] __arm64_sys_mount+0x3e8/0x468 [ 117.226368][ T8466] invoke_syscall+0x98/0x254 [ 117.227084][ T8466] el0_svc_common+0x130/0x23c [ 117.227842][ T8466] do_el0_svc+0x48/0x58 [ 117.228509][ T8466] el0_svc+0x5c/0x254 [ 117.229181][ T8466] el0t_64_sync_handler+0x84/0x12c [ 117.230065][ T8466] el0t_64_sync+0x198/0x19c [ 117.230867][ T8466] [ 117.230867][ T8466] other info that might help us debug this: [ 117.230867][ T8466] [ 117.232374][ T8466] Chain exists of: [ 117.232374][ T8466] &sbi->s_writepages_rwsem --> jbd2_handle --> &ei->xattr_sem [ 117.232374][ T8466] [ 117.234350][ T8466] Possible unsafe locking scenario: [ 117.234350][ T8466] [ 117.235406][ T8466] CPU0 CPU1 [ 117.236224][ T8466] ---- ---- [ 117.237002][ T8466] lock(&ei->xattr_sem); [ 117.237731][ T8466] lock(jbd2_handle); [ 117.238722][ T8466] lock(&ei->xattr_sem); [ 117.239717][ T8466] rlock(&sbi->s_writepages_rwsem); [ 117.240485][ T8466] [ 117.240485][ T8466] *** DEADLOCK *** [ 117.240485][ T8466] [ 117.241691][ T8466] 3 locks held by syz.6.472/8466: [ 117.242480][ T8466] #0: ffff0000d9c360e0 (&type->s_umount_key#26/1){+.+.}-{4:4}, at: alloc_super+0x1a0/0x80c [ 117.243988][ T8466] #1: ffff0000d9c36618 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x2b0/0x1084 [ 117.245476][ T8466] #2: ffff0000fa0800c8 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x358/0x6fc [ 117.247088][ T8466] [ 117.247088][ T8466] stack backtrace: [ 117.247968][ T8466] CPU: 1 UID: 0 PID: 8466 Comm: syz.6.472 Not tainted syzkaller #0 PREEMPT [ 117.249244][ T8466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 117.250767][ T8466] Call trace: [ 117.251231][ T8466] show_stack+0x2c/0x3c (C) [ 117.251852][ T8466] __dump_stack+0x30/0x40 [ 117.252441][ T8466] dump_stack_lvl+0xd8/0x12c [ 117.253118][ T8466] dump_stack+0x1c/0x28 [ 117.253797][ T8466] print_circular_bug+0x324/0x32c [ 117.254666][ T8466] check_noncircular+0x154/0x174 [ 117.255403][ T8466] __lock_acquire+0x1774/0x30a4 [ 117.256082][ T8466] lock_acquire+0x14c/0x2e0 [ 117.256717][ T8466] percpu_down_read_internal+0x5c/0x298 [ 117.257535][ T8466] ext4_writepages+0x150/0x2a0 [ 117.258292][ T8466] do_writepages+0x270/0x468 [ 117.259055][ T8466] __writeback_single_inode+0x15c/0x13e8 [ 117.259971][ T8466] writeback_single_inode+0x18c/0x54c [ 117.260826][ T8466] write_inode_now+0x13c/0x1a4 [ 117.261527][ T8466] iput+0x570/0x83c [ 117.262100][ T8466] ext4_xattr_block_set+0x13dc/0x24bc [ 117.262976][ T8466] ext4_expand_extra_isize_ea+0xeb4/0x182c [ 117.263842][ T8466] __ext4_expand_extra_isize+0x2a0/0x37c [ 117.264677][ T8466] __ext4_mark_inode_dirty+0x3c0/0x6fc [ 117.265499][ T8466] ext4_evict_inode+0x930/0x1084 [ 117.266288][ T8466] evict+0x414/0x928 [ 117.266933][ T8466] iput+0x6e4/0x83c [ 117.267588][ T8466] ext4_process_orphan+0x240/0x2b4 [ 117.268426][ T8466] ext4_orphan_cleanup+0x930/0x107c [ 117.269320][ T8466] ext4_fill_super+0x4724/0x4ea4 [ 117.270086][ T8466] get_tree_bdev_flags+0x360/0x414 [ 117.270890][ T8466] get_tree_bdev+0x2c/0x3c [ 117.271589][ T8466] ext4_get_tree+0x28/0x38 [ 117.272300][ T8466] vfs_get_tree+0x90/0x28c [ 117.272994][ T8466] do_new_mount+0x278/0x7f4 [ 117.273750][ T8466] path_mount+0x5b4/0xde0 [ 117.274436][ T8466] __arm64_sys_mount+0x3e8/0x468 [ 117.275211][ T8466] invoke_syscall+0x98/0x254 [ 117.275961][ T8466] el0_svc_common+0x130/0x23c [ 117.276702][ T8466] do_el0_svc+0x48/0x58 [ 117.277349][ T8466] el0_svc+0x5c/0x254 [ 117.278023][ T8466] el0t_64_sync_handler+0x84/0x12c [ 117.278841][ T8466] el0t_64_sync+0x198/0x19c [ 117.281301][ T8466] ------------[ cut here ]------------ [ 117.281319][ T8466] EA inode 11 i_nlink=2 [ 117.282481][ T8466] WARNING: CPU: 1 PID: 8466 at fs/ext4/xattr.c:1053 ext4_xattr_inode_update_ref+0x444/0x488 [ 117.284528][ T8466] Modules linked in: [ 117.285154][ T8466] CPU: 1 UID: 0 PID: 8466 Comm: syz.6.472 Not tainted syzkaller #0 PREEMPT [ 117.286415][ T8466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 117.287888][ T8466] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 117.289039][ T8466] pc : ext4_xattr_inode_update_ref+0x444/0x488 [ 117.290035][ T8466] lr : ext4_xattr_inode_update_ref+0x444/0x488 [ 117.291024][ T8466] sp : ffff80009fa36dc0 [ 117.291654][ T8466] x29: ffff80009fa36e50 x28: 0000000000000000 x27: 1fffe0001f410427 [ 117.292866][ T8466] x26: dfff800000000000 x25: ffff80009fa36dc0 x24: ffff700013f46db8 [ 117.294144][ T8466] x23: ffff800092e28000 x22: ffff0000fa081f88 x21: 0000000000000002 [ 117.295305][ T8466] x20: 0000000000000001 x19: ffff0000fa081f48 x18: 1fffe00033793888 [ 117.296567][ T8466] x17: ffff80008f7ee000 x16: ffff80008b021030 x15: 0000000000000001 [ 117.297877][ T8466] x14: 1fffe00033796300 x13: 0000000000000000 x12: 0000000000000000 [ 117.299166][ T8466] x11: 0000000000080000 x10: 0000000000000003 x9 : 13cb85cfc47a4000 [ 117.300501][ T8466] x8 : 13cb85cfc47a4000 x7 : 0000000000000000 x6 : ffff800080493090 [ 117.301793][ T8466] x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000010 [ 117.303092][ T8466] x2 : ffff80009fa36980 x1 : ffff80008b678a40 x0 : 0000000000000001 [ 117.304382][ T8466] Call trace: [ 117.304892][ T8466] ext4_xattr_inode_update_ref+0x444/0x488 (P) [ 117.305842][ T8466] ext4_xattr_set_entry+0x928/0x15c0 [ 117.306617][ T8466] ext4_xattr_ibody_set+0x204/0x5fc [ 117.307392][ T8466] ext4_expand_extra_isize_ea+0xefc/0x182c [ 117.308251][ T8466] __ext4_expand_extra_isize+0x2a0/0x37c [ 117.309073][ T8466] __ext4_mark_inode_dirty+0x3c0/0x6fc [ 117.309907][ T8466] ext4_evict_inode+0x930/0x1084 [ 117.310680][ T8466] evict+0x414/0x928 [ 117.311245][ T8466] iput+0x6e4/0x83c [ 117.311778][ T8466] ext4_process_orphan+0x240/0x2b4 [ 117.312536][ T8466] ext4_orphan_cleanup+0x930/0x107c [ 117.313325][ T8466] ext4_fill_super+0x4724/0x4ea4 [ 117.314120][ T8466] get_tree_bdev_flags+0x360/0x414 [ 117.314917][ T8466] get_tree_bdev+0x2c/0x3c [ 117.315593][ T8466] ext4_get_tree+0x28/0x38 [ 117.316262][ T8466] vfs_get_tree+0x90/0x28c [ 117.316893][ T8466] do_new_mount+0x278/0x7f4 [ 117.317544][ T8466] path_mount+0x5b4/0xde0 [ 117.318187][ T8466] __arm64_sys_mount+0x3e8/0x468 [ 117.318910][ T8466] invoke_syscall+0x98/0x254 [ 117.319526][ T8466] el0_svc_common+0x130/0x23c [ 117.320266][ T8466] do_el0_svc+0x48/0x58 [ 117.320871][ T8466] el0_svc+0x5c/0x254 [ 117.321474][ T8466] el0t_64_sync_handler+0x84/0x12c [ 117.322281][ T8466] el0t_64_sync+0x198/0x19c [ 117.323018][ T8466] irq event stamp: 2687 [ 117.323698][ T8466] hardirqs last enabled at (2687): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 117.325286][ T8466] hardirqs last disabled at (2686): [] _raw_spin_lock_irqsave+0x2c/0x7c [ 117.326814][ T8466] softirqs last enabled at (1944): [] local_bh_enable+0x10/0x34 [ 117.328248][ T8466] softirqs last disabled at (1942): [] local_bh_disable+0x10/0x34 [ 117.329758][ T8466] ---[ end trace 0000000000000000 ]--- [ 117.331731][ T8466] EXT4-fs (loop6): 1 orphan inode deleted [ 117.332905][ T8466] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.343242][ T7812] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.943353][ T2409] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.943390][ T2409] ieee802154 phy1 wpan1: encryption failed: -22