last executing test programs: 2m42.527932602s ago: executing program 3 (id=115): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x10) (async) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) syz_emit_ethernet(0x80, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0x61, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x4d, 0x0, @wg=@initiation={0x1, 0x1, "65a252e7cb7a5918c004a9971a46afced2c32642b1ec9fe34818d8ccd82041b7", "c930713c550e74ee13c2638ac75b2a9666efd31a34fce4498df8105d8bd8ed283a220c3a9becd8a70d3607ea8270d351", "ae12e16b560f2f8ac4ca3e745ce285f12f6e8719e7f1e7f286a68f76", {"980aa8fb8f80d69f1fb587086447e93e", "55e824bb69e833bd36300b088233545a"}}}}}}}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) r5 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r5, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$int_in(r5, 0x5452, &(0x7f0000000240)=0x3) (async) sendmsg$kcm(r5, &(0x7f0000000300)={0x0, 0x2000, 0x0}, 0x20000818) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x39}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) (async) r6 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2, 0x0, 0x20000000}}, 0x2e) (async) ioctl$PPPIOCGL2TPSTATS(r6, 0x80487436, &(0x7f000001f540)) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=@newtaction={0x8c, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x200, 0x0, 0xfffd}}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x81}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x8c}}, 0x4000000) (async) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x0) getdents64(r9, 0x0, 0x0) (async) symlinkat(&(0x7f0000000040)='./file0\x00', r9, &(0x7f00000000c0)='./file0\x00') 2m42.354007743s ago: executing program 3 (id=118): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20) (async) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x14011, 0x0) (async) syz_mount_image$fuse(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x480a8, &(0x7f0000000340)=ANY=[], 0x21, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./bus\x00', 0x108688d, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14e174135c0b86de) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) chdir(&(0x7f00000003c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x60) (async) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x557103, 0x1ef) (async) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) syncfs(r0) 2m42.349781813s ago: executing program 3 (id=120): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000140)=[@in6={0xa, 0x4e21, 0x3, @remote, 0x4}], 0x1c) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000200), 0x4) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2818082, &(0x7f0000000500)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@shortname_winnt}, {@rodir}, {@shortname_winnt}, {@fat=@codepage={'codepage', 0x3d, '1251'}}, {@fat=@fmask={'fmask', 0x3d, 0x7f}}, {@fat=@debug}, {@uni_xlateno}, {@numtail}, {@utf8}, {@shortname_lower}, {@uni_xlateno}, {@uni_xlate}, {@utf8}]}, 0x7f, 0x2bd, &(0x7f0000000240)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f0000000100)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) listen(r1, 0xfff) accept$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000180)=0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x43c, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x6, 0x1, 0x0, 0x858, 0x200, 0xc, 0x7, 0x5, 0x4, 0x1ec, 0x2, 0x1ff, 0x0, 0x1, 0xd, 0x1, 0x1, 0x9, 0x7ff, 0xcb8d, 0x0, 0xffffff2b, 0xfffffff9, 0x8, 0x8001, 0x1, 0x3e12, 0x9, 0x0, 0x6, 0x52, 0x0, 0x0, 0xe8, 0x6, 0xfffffffa, 0x4, 0x4, 0xe5, 0x2, 0x2584, 0x401, 0x200, 0x2, 0x8, 0x3ff, 0x22, 0x6, 0x0, 0x80000000, 0x1, 0x0, 0x8, 0x10000, 0x6, 0x6, 0x4, 0x3, 0x606, 0x0, 0x6, 0x9, 0x7, 0x9, 0x7fff, 0x5, 0x5, 0x4d1, 0x3, 0x5bbb571f, 0x6, 0x3, 0x1, 0x1, 0x2, 0x200, 0x8000, 0x800, 0xb14a, 0x800, 0x0, 0x5, 0x9, 0x80000001, 0x5, 0x8, 0xbd, 0x8, 0x7, 0x3, 0x6, 0x80, 0x7ff, 0x6, 0x100, 0x0, 0x4, 0x1, 0x6, 0x9, 0x0, 0x6, 0xb23, 0x1000, 0x727, 0x3, 0xc, 0x97, 0x88, 0xc132, 0x5, 0x9, 0x9, 0x10000, 0x7, 0x5, 0xfffffffe, 0x10, 0x6, 0x4, 0x3f4, 0x5, 0x7, 0x2, 0x3, 0x6ee, 0x2, 0x0, 0x9, 0x80000000, 0x4, 0x2, 0x90c, 0x20000, 0x4d, 0x4, 0x8, 0x0, 0x6, 0x0, 0x1000, 0x2, 0x7b28, 0x8, 0x10, 0x0, 0x3ff, 0x2, 0x4, 0x4, 0x101, 0x4, 0x0, 0x71, 0xb3f, 0x57, 0x7, 0x73, 0x0, 0xae60, 0x400, 0x0, 0x80000001, 0x8, 0x5, 0x3, 0x3, 0x40, 0x9, 0xa, 0x5, 0x6, 0xffffebc0, 0xb, 0x7, 0x0, 0x8eb, 0x81, 0x5, 0x0, 0x8, 0xd, 0x80000001, 0x800000, 0x3, 0x3, 0x4, 0xffc0, 0x1c0, 0x80000000, 0x6, 0x5, 0x0, 0xc, 0x4, 0x1, 0x7733470b, 0x0, 0x1, 0x7fffffff, 0xa93, 0x8, 0x8001, 0x71c18, 0x800, 0x9, 0x4, 0x0, 0x2, 0x4, 0x6, 0xfef, 0xe, 0x401, 0x9, 0xe, 0xf8638fe, 0x100000, 0x9, 0x5, 0x1ff, 0x36, 0xfffffffb, 0x7d0b7450, 0x6, 0x0, 0x7ff, 0x100, 0xb3, 0xfffffff7, 0xd, 0x0, 0x8, 0x9, 0x5, 0x4, 0xffff, 0x1, 0x10, 0x6, 0x7f, 0xf9128fb, 0x1, 0xfffffffd, 0x4, 0x3ac9b945, 0x3, 0x8, 0x4, 0x46855c12, 0x73d0, 0x8000, 0x6, 0x800, 0x162, 0x10]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x11}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) 2m41.453527454s ago: executing program 3 (id=131): syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000804, &(0x7f0000006300)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@grpid}, {@bh}, {@grpid}, {@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@init_itable}, {@usrjquota}, {@nolazytime}, {@norecovery}, {@resgid}]}, 0xfe, 0x495, &(0x7f0000000e40)="$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") fanotify_init(0x200, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r0, 0x400, 0x40000866, r0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) write$tun(r1, &(0x7f00000002c0)=ANY=[], 0x11) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x2140, 0x0) vmsplice(r2, &(0x7f00000009c0)=[{&(0x7f0000000140)="d0", 0x1}], 0x1, 0x7) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f0000000140)=""/50) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r3, 0xc0305616, &(0x7f00000000c0)={0x0, {0x4, 0x9}}) ftruncate(r3, 0xc17a) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000200)={0xffffffffffffffff, 0xef7}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$PTRACE_GETSIGMASK(0x420a, r5, 0x8, &(0x7f00000005c0)) fcntl$setsig(r3, 0xa, 0x11) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000180), 0x101, 0x2a000) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) write$evdev(r7, &(0x7f0000000280)=[{{}, 0x2, 0x0, 0x4}, {{r8, r9/1000+60000}, 0x11, 0x6, 0x2c0}], 0x30) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000000100003040000000000ae988e1700000000ea00042ac54ede9a50935dd7fa8c5570dc3d0e9ed561709ad86d8f64df3a18d035c48072e95b9a3ca1e43effeaf82cb47d3adfed5b062615b249a0fb4613bc0268b7ebb266883c2c80c01ce3125b0f90135f", @ANYRES32=0x0, @ANYBLOB="00a3000004000000240012800b0001006d616373656300001400028005000c00010000000800050010000000"], 0x44}, 0x1, 0x0, 0x0, 0x24008000}, 0x20000080) 2m41.362701325s ago: executing program 3 (id=133): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000000a00)={&(0x7f0000000380)={0xa, 0x4e23, 0x1, @mcast1, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000940)=[@pktinfo={{0x20, 0x29, 0x32, {@loopback}}}], 0x20}, 0x8090) (async, rerun: 64) lsetxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=@known='trusted.overlay.impure\x00', &(0x7f0000000340)='^@-!#:,(&\x00', 0xa, 0x1) (async, rerun: 64) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) (async) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f000012b000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x9, &(0x7f0000000000)=[{0x2, 0x6, 0x1}], 0x1, 0xc2ff, 0x0, 0x0, 0xfd, 0x76}) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async, rerun: 32) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x0, 0x28}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e02742e8681985ff97b8745e9bd4", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f0000000080)={0x0, 0x300}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@uuid_auto}, {@lowerdir={'lowerdir', 0x3d, './file7'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x180) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@private2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}}}, &(0x7f0000000580)=0xe8) mount$overlay(0x0, &(0x7f0000000200)='./bus/file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000005c0)={[{@index_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@metacopy_off}], [{@appraise_type}, {@euid_gt={'euid>', r4}}]}) (async, rerun: 64) lsetxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0), 0x2, 0x3) (async, rerun: 64) chdir(&(0x7f00000003c0)='./bus\x00') (async) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) (async, rerun: 64) pivot_root(&(0x7f0000000680)='./bus\x00', &(0x7f0000000000)='./file7\x00') (rerun: 64) 2m40.302646405s ago: executing program 3 (id=141): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="14f3b5715cc0588bd8f39ac6c084f6c02d0000001000010000000000000000000100000a20000000000a05000000000000000000050000060c000440000000ff7f00000478000000000a010800000000000000000700000908000240000000020900010073797a30000000000c00044000000000000100012c000600160c0ac91e32866a471a06decb38022a34ec35e47255107c9eb027d34875760271ed813d16fb66ca0900010073797a30000000000c000440000000000000000330000000120a01030000000000000000070000091c0004800800014040000006080001400000000c0800024000000000140000001100010000000000000000000000000ac861da7d61b6a908e0eb1f6f99cafb0cf4ac92819d94c1d8bd186d5b6757ff55b29e48deaebaf92a29abde380d3c230f154a534d0cbce4d386cd64c2e7e608d34cd58f38dee08f9bc64e0405be42cc8d9535ff288fe509afd6a401b75f2a00c70687633221bd58"], 0xf0}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x401}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@snprintf], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='syzkaller\x00', 0x9, 0x5a, &(0x7f00000003c0)=""/90, 0x41100, 0x46, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x1, 0x5, 0x0, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x2}, 0x94) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000005c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x7a, &(0x7f0000000680)=[{}, {}], 0x10, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0x6a, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000008c0)={r1, r2, 0x7, 0x0, @val=@tracing={r3, 0x6}}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0xf0}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x401}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@snprintf], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='syzkaller\x00', 0x9, 0x5a, &(0x7f00000003c0)=""/90, 0x41100, 0x46, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x1, 0x5, 0x0, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x2}, 0x94) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000005c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x7a, &(0x7f0000000680)=[{}, {}], 0x10, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0x6a, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000008c0)={r1, r2, 0x7, 0x0, @val=@tracing={r3, 0x6}}, 0x20) (async) 2m40.299602974s ago: executing program 32 (id=141): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0xf0}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x401}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@snprintf], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='syzkaller\x00', 0x9, 0x5a, &(0x7f00000003c0)=""/90, 0x41100, 0x46, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x1, 0x5, 0x0, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x2}, 0x94) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000005c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x7a, &(0x7f0000000680)=[{}, {}], 0x10, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0x6a, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000008c0)={r1, r2, 0x7, 0x0, @val=@tracing={r3, 0x6}}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0xf0}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x401}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@snprintf], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='syzkaller\x00', 0x9, 0x5a, &(0x7f00000003c0)=""/90, 0x41100, 0x46, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x1, 0x5, 0x0, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x2}, 0x94) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000005c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x7a, &(0x7f0000000680)=[{}, {}], 0x10, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0x6a, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000008c0)={r1, r2, 0x7, 0x0, @val=@tracing={r3, 0x6}}, 0x20) (async) 2m38.452742241s ago: executing program 1 (id=167): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x21be, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x77359400}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x5, 0x1, &(0x7f0000000080), 0x0) 2m38.451722835s ago: executing program 1 (id=169): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = add_key(&(0x7f0000000280)='big_key\x00', &(0x7f0000000480)={'syz', 0x2}, &(0x7f0000000580)="69264bb228080c52d721e785a1c150a7c31b1bef8bd87d73312458b632d86eb83bd3c66c07491498e06b9a3e0382eea9e39639a59061e4da9f8527f894fe0ac5d64987fe7b3392378f5693507825d4454d104fc9deae47c909179bdb02ae20785dbf358d42d40274257094c9aaa59b53f1c5e89eb52152026037a4d79e13b3c08dd85086df5c80821d44b1c4d47850fc644901afc1bef690871c673934d36b281f38769de4040164bc120b7265d9101f7c03bcb737cd45049b1b2cd875bcc9f07660e7d72ddad710ba5a0e9ef16b59ae015b5fc9110a365de1ce91", 0xdb, 0xfffffffffffffffa) keyctl$read(0xb, r2, &(0x7f0000000680)=""/242, 0xf2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x103, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x24040084) ioctl$XFS_IOC_READLINK_BY_HANDLE(r1, 0xc038586c, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f0000000140)='^-!-/\x00', 0x20241, &(0x7f0000000180)={@align=0xdb9, {0x0, 0x9, 0x73, 0xf445}}, 0x2, &(0x7f00000001c0), &(0x7f00000002c0)=0xb5}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) lremovexattr(&(0x7f0000000380)='./file2\x00', &(0x7f00000003c0)=@random={'trusted.', 'dPx`\xe4C\x97\t\a;'}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x3fff, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) close(0x3) 2m37.778669695s ago: executing program 1 (id=176): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000002f40)=[{{0x0, 0x0, 0x0}, 0xd1f5}], 0x1, 0x12002, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) 2m37.702980218s ago: executing program 1 (id=179): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r0, 0x0) mmap$qrtrtun(&(0x7f0000135000/0x1000)=nil, 0x1000, 0x2000000, 0x80010, r0, 0x7f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) (async) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) (async) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) (async) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) (async) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r0, 0x0) (async) mmap$qrtrtun(&(0x7f0000135000/0x1000)=nil, 0x1000, 0x2000000, 0x80010, r0, 0x7f) (async) 2m36.602436517s ago: executing program 1 (id=187): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x9, 0xec0) ioctl$MON_IOCQ_RING_SIZE(r0, 0x9205) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000000c0)={0xcf50, 0x2924, 0xffff, 0x9dff, 0x11, "0000000000000002"}) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0xff, 0x0, 0xfffffffa, 0x7ffd, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f00000001c0)) ioctl$OCFS2_IOC_UNRESVSP64(r3, 0x4030582b, &(0x7f0000000180)={0x2, 0x0, 0x3ff, 0x3, 0x0, 0x7}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x5, 0x8000, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) openat$cgroup_freezer_state(r3, &(0x7f0000000240), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r4}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x17) 2m35.72874597s ago: executing program 1 (id=198): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000001c40)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@sysvgroups}, {@nodelalloc}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r3, 0x0, 0x0, 0x90001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r5 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000380)='/sys/fs/smackfs/direct\x00', 0x2, 0x0) writev(r5, &(0x7f0000000180)=[{&(0x7f00000006c0)="391c7975ee6d5cbe3208bd00903306e83c5228542f45cb81034df8ee9c78d1389df1b2d389bcd37c6cc3a46bc9c16aa15c68694148dca3f6be3c101feb115466baf5c0b7cea3e2836ec5697438038e95", 0x50}], 0x1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000580)=[@request_death, @clear_death={0x400c630e}], 0x0, 0x1000000, 0x0}) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r7, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x88a, &(0x7f00000001c0)={[{@usrquota}, {@usrjquota, 0x22}, {@data_ordered}, {@noload}, {@grpid}, {@grpjquota, 0x22}, {@init_itable}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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") syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) 2m31.192895008s ago: executing program 0 (id=209): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000040)=0x7ff, 0x4) sendmsg$tipc(r0, &(0x7f0000000240)={&(0x7f0000000100)=@id={0x1e, 0x3, 0x3, {0x4e24}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4011}, 0x240c0) 2m30.158424442s ago: executing program 0 (id=210): timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x8, &(0x7f0000000040)={[{@noauto_da_alloc}, {@errors_remount}]}, 0x21, 0x4f3, &(0x7f00000012c0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f00000000c0)={0x0, 0x2904c, 0x3, 0x10003, '\x00', [{0x0, 0x0, 0x700, 0x7, 0xe6}, {0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x40000000000000}], ['\x00', '\x00', '\x00']}) 2m26.51436401s ago: executing program 0 (id=213): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x40000) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000080)={0x1, 0x1, 0x5, &(0x7f0000000040)={0xb, "82774d8969c7e9a371bdd24d1517b75f3f8e7395eac357f68f38c9cd2926b8ccfe"}}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000880)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@nodioread_nolock}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0xeaff) write$binfmt_aout(r1, 0x0, 0x29f) read$FUSE(r1, &(0x7f0000000dc0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl_fd$Q_QUOTAON(r1, 0xffffffff80000202, r2, &(0x7f0000002e00)='./file1\x00') openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x58042, 0x168) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x58042, 0x168) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="130000000800000008"], 0x50) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000001080)='syzkaller\x00'}, 0x83) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (async) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r7) (async) close(r7) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x8, 0xf, &(0x7f0000000a80)=ANY=[], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r8, 0x0, 0x0}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r8, 0x0, 0x0}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r4, @ANYRES32=r6], 0x20) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r4, @ANYRES32=r6], 0x20) pwritev2(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 2m21.498496356s ago: executing program 0 (id=219): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000240)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7004fddbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="30003300b040000000000000a7bc19"], 0x64}, 0x1, 0x0, 0x0, 0x2004c010}, 0x8800) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x84, 0x1}, 0x48) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0506580c"], 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000040)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x57}}]}, &(0x7f0000000280)='syzkaller\x00'}, 0x1c) 2m20.531763645s ago: executing program 33 (id=198): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000001c40)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@sysvgroups}, {@nodelalloc}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r3, 0x0, 0x0, 0x90001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r5 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000380)='/sys/fs/smackfs/direct\x00', 0x2, 0x0) writev(r5, &(0x7f0000000180)=[{&(0x7f00000006c0)="391c7975ee6d5cbe3208bd00903306e83c5228542f45cb81034df8ee9c78d1389df1b2d389bcd37c6cc3a46bc9c16aa15c68694148dca3f6be3c101feb115466baf5c0b7cea3e2836ec5697438038e95", 0x50}], 0x1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000580)=[@request_death, @clear_death={0x400c630e}], 0x0, 0x1000000, 0x0}) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r7, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x88a, &(0x7f00000001c0)={[{@usrquota}, {@usrjquota, 0x22}, {@data_ordered}, {@noload}, {@grpid}, {@grpjquota, 0x22}, {@init_itable}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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") syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) 2m16.540937581s ago: executing program 0 (id=225): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) (async) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x56a9, 0x5}) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) writev(r1, &(0x7f0000000700)=[{&(0x7f0000000900)='-', 0x1}], 0x1) (async) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0x0, 0x0, 0x7, 0x1, 0x5, "1ae586d32101b5128ed271c679583d00", 0x3f, 0x2}) readv(r2, &(0x7f0000000040)=[{&(0x7f0000000100)=""/150, 0x96}], 0x1) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) r3 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) 2m15.054328915s ago: executing program 0 (id=228): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'vxcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000900)={&(0x7f0000001900)=ANY=[@ANYBLOB="f5fc1c86e92b32202ad9462c000000c604ef385e8a7ad886cbf9dd034c8d61ec67bddad8324224cb7f69f63a572b0cc3c772a25e90d107ea658c35b829f1df13fae60f596b5707373402d3ac6a3302d12364fa5ee596602e791b3102baf4f2d1591fc903ac173b3bf9fb5291ad868fcc19e90fb01f898428dc3047e99a2c59b44a0000000000000000", @ANYRES16=0x0, @ANYBLOB="000225bd7000fddbdf2511000000180001801400020069705f76746930000000000000000000"], 0x2c}}, 0x800) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r4, 0x65, 0x5, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c00078008000640000000400500050002000000050004"], 0x54}}, 0x0) r5 = socket$inet6(0xa, 0x3, 0x7) getsockopt(r5, 0xff, 0x22, 0x0, &(0x7f00000002c0)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000009060102000000002a000000000040000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c000280080001407f0000"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @mcast1, 0x9}, 0x1c) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0xf0, 0x1800, 0x3a, 0x0, 0xbd}, 0x1c) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010002000000000000001200000018000180140002006e657464657673696d30000000000000080006"], 0x34}, 0x1, 0x0, 0x0, 0x2000c055}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000001c00)={&(0x7f00000019c0), 0xc, &(0x7f0000001bc0)={&(0x7f0000001a00)=ANY=[@ANYBLOB="90010000", @ANYRES16=r8, @ANYBLOB="08002abd7000fddbdf25020000005c00018008000100", @ANYRES32=r3, @ANYBLOB="0800030002000000080003000100000014000200697036746e6c300000000000000000001400020073697430000000000000000000000000080003000200000008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="2800018008000100", @ANYRES32=r3, @ANYBLOB="140002007465616d30000000000000000000000008004100", @ANYRES32=r3, @ANYBLOB="7400018008000300030000001400020076657468315f746f5f6272696467650008000100", @ANYRES32=r2, @ANYBLOB="140002006e72300000000000000000000000000008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="1400020070696d367265673000000000000000001400020076657468305f746f5f627269646765005000018008000100", @ANYRES32=r2, @ANYBLOB="080003000000000008000100", @ANYRES32=r2, @ANYBLOB="14000200766c616e31000000000000000000000008000300020000000800030001000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="2800018008000100", @ANYRES32=r2, @ANYBLOB="08000300bee469ac14000200767863616e31000000000000000000000c00018008000100", @ANYRES32=r2, @ANYBLOB], 0x190}, 0x1, 0x0, 0x0, 0x40}, 0x44004) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = accept4$packet(r7, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000300)=0x14, 0x80000) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815001b001105142603600e12080005007a010401a8001600200003400400feff035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf639509215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x4) getsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000340), &(0x7f0000000380)=0x4) recvmmsg(r9, &(0x7f0000001880)=[{{&(0x7f00000000c0)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000400)=""/240, 0xf0}, {&(0x7f0000000140)=""/167, 0xa7}, {&(0x7f00000005c0)=""/113, 0x71}, {&(0x7f0000000640)=""/95, 0x5f}, {&(0x7f00000006c0)=""/30, 0x1e}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/17, 0x11}, {&(0x7f0000001740)=""/88, 0x58}], 0x8, &(0x7f0000001840)=""/39, 0x27}, 0xe56c}], 0x1, 0x40000001, &(0x7f00000018c0)) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00'}) 1m58.307125756s ago: executing program 34 (id=228): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'vxcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000900)={&(0x7f0000001900)=ANY=[@ANYBLOB="f5fc1c86e92b32202ad9462c000000c604ef385e8a7ad886cbf9dd034c8d61ec67bddad8324224cb7f69f63a572b0cc3c772a25e90d107ea658c35b829f1df13fae60f596b5707373402d3ac6a3302d12364fa5ee596602e791b3102baf4f2d1591fc903ac173b3bf9fb5291ad868fcc19e90fb01f898428dc3047e99a2c59b44a0000000000000000", @ANYRES16=0x0, @ANYBLOB="000225bd7000fddbdf2511000000180001801400020069705f76746930000000000000000000"], 0x2c}}, 0x800) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r4, 0x65, 0x5, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c00078008000640000000400500050002000000050004"], 0x54}}, 0x0) r5 = socket$inet6(0xa, 0x3, 0x7) getsockopt(r5, 0xff, 0x22, 0x0, &(0x7f00000002c0)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000009060102000000002a000000000040000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c000280080001407f0000"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @mcast1, 0x9}, 0x1c) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0xf0, 0x1800, 0x3a, 0x0, 0xbd}, 0x1c) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010002000000000000001200000018000180140002006e657464657673696d30000000000000080006"], 0x34}, 0x1, 0x0, 0x0, 0x2000c055}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000001c00)={&(0x7f00000019c0), 0xc, &(0x7f0000001bc0)={&(0x7f0000001a00)=ANY=[@ANYBLOB="90010000", @ANYRES16=r8, @ANYBLOB="08002abd7000fddbdf25020000005c00018008000100", @ANYRES32=r3, @ANYBLOB="0800030002000000080003000100000014000200697036746e6c300000000000000000001400020073697430000000000000000000000000080003000200000008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="2800018008000100", @ANYRES32=r3, @ANYBLOB="140002007465616d30000000000000000000000008004100", @ANYRES32=r3, @ANYBLOB="7400018008000300030000001400020076657468315f746f5f6272696467650008000100", @ANYRES32=r2, @ANYBLOB="140002006e72300000000000000000000000000008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="1400020070696d367265673000000000000000001400020076657468305f746f5f627269646765005000018008000100", @ANYRES32=r2, @ANYBLOB="080003000000000008000100", @ANYRES32=r2, @ANYBLOB="14000200766c616e31000000000000000000000008000300020000000800030001000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="2800018008000100", @ANYRES32=r2, @ANYBLOB="08000300bee469ac14000200767863616e31000000000000000000000c00018008000100", @ANYRES32=r2, @ANYBLOB], 0x190}, 0x1, 0x0, 0x0, 0x40}, 0x44004) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = accept4$packet(r7, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000300)=0x14, 0x80000) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815001b001105142603600e12080005007a010401a8001600200003400400feff035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf639509215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x4) getsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000340), &(0x7f0000000380)=0x4) recvmmsg(r9, &(0x7f0000001880)=[{{&(0x7f00000000c0)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000400)=""/240, 0xf0}, {&(0x7f0000000140)=""/167, 0xa7}, {&(0x7f00000005c0)=""/113, 0x71}, {&(0x7f0000000640)=""/95, 0x5f}, {&(0x7f00000006c0)=""/30, 0x1e}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/17, 0x11}, {&(0x7f0000001740)=""/88, 0x58}], 0x8, &(0x7f0000001840)=""/39, 0x27}, 0xe56c}], 0x1, 0x40000001, &(0x7f00000018c0)) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00'}) 1m55.230343424s ago: executing program 5 (id=242): setitimer(0x2, 0x0, &(0x7f0000002040)) clock_gettime(0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r0) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000fc0)={0x2c, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) futex(&(0x7f000000cffc), 0x8, 0x2, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x0, 0x42, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) unshare(0x2a020400) prctl$PR_SET_TSC(0x1a, 0x1) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x42}, 0x18) mount$cgroup(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)={[{}, {@subsystem='hugetlb'}]}) mprotect(&(0x7f00002ca000/0x3000)=nil, 0x3000, 0x1) 1m52.186398868s ago: executing program 5 (id=245): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="b702000000050000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000681ad64020000000000450404000100ff0f1704000001130a00b7050000030000006a0af2fe000000008500000019000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989425f5d0b79f6584d0416d7c4bb9f547b328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f01000000010000006e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b98d2de10c21d3ea02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d000000200008000000000000001abc11c800000000000000000000000928ee53595a779d243a48cea769470424d20a04c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2c4af38ffb7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0eb3280e09758bd445ab91d20baca005472b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92fe8bad99ca332af00f191b66b6a6f732a91f0e2e9190e4b448da7de018c58e950767f9b320be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c52573d9308a13d115b43f8b1894c8fa8a14dc4810f61ae96bf704526a8919bc700002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381ccc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73cfd1e76982f3d899f71e495f0ba8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e4a48dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f00000021f8547d393dabe616fbbde21c90be00b5a22671395c7a69c6dd4d022ffc97ddb6aa025131652d409da1d8cfc3d219d4b1c1b7b8170d7c33d91db2b73f7ae02485a209a2474b5d0790d05c01bec623056e4d3f4d3149373a28b26a15a1fcce73d57e6eaf7e6f315fe275ebc9ef7aeca277dde01dde724f419803a2172a7833ceab38d21ca4f1dea5e1f4d8824167b21dd289dd4e6ecfba9e163bdbc48e1e758ecde05c10809c9edfa6d77c652fd742e6dad13d2a397bebe3ea8bc087d3720e2202f36c7719ae34f042e19dc08a3323a3d94098a7ec171469352bab1662c3e4d4803c565cfcce32dad628fade43a4844abb230ce608726fd87e93c405a96cf638c41510f26e9da5f316"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x21) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000200)=0x3, 0x4) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="0000000000005842b19a3b43d88e"], 0x14}, 0x1, 0x0, 0x0, 0x20004841}, 0x80) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x54) madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1) syz_emit_ethernet(0x7e, &(0x7f0000000380)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffffff86dd6000000000483a00fe040000d90000000000000000000001ff020000000000000000000000000001020090780000000166b60170000933fe20010000000000000000000000000002ff0200000000000000000000000000013a0204012f40040000000000000000000000ffff0000707aa48d6cebf36d9e046d890e45979e63c292dc13d1f09bec074834b3ba9f3e7d896c5840405edc64f809d8eb03faefa8d674c21bbca626959c253b8a68625950597b9d6b5247ac006c7ce106775c1b08a4"], 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) rt_sigqueueinfo(r6, 0x3a, &(0x7f0000000040)={0x3f, 0x2, 0x8}) 1m46.090348321s ago: executing program 5 (id=247): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) (async) 1m41.626452231s ago: executing program 5 (id=252): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000d00)={[{@grpjquota}]}, 0x3, 0x5ee, &(0x7f0000000280)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x40000042}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) prlimit64(0x0, 0x9, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x38000a00) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f0000000000)={'security\x00', 0x7003, [0x80002, 0x40007, 0x1, 0x2, 0xa]}, &(0x7f0000000100)=0x54) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x210803, 0x0, 0x0, 0x0, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r6, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x20}}, 0x10, 0x0}, 0x0) r7 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r7, &(0x7f0000000880)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=\xb9\xc4\xd7A%S\n\x10i\xcf\x84\x93v\x02\xe4y}\xcbV\xbb\xc1\xd5\x06\v\xdc\xd8\\\xc5\xb3\ag\xa6u\xbe\xf4)\xae\xb6\xfe*\x9d?\xb2C\xf0<\xc9\x820M\x92Tzs\xba\xca\x9d\xad\x17\x1b\x84\xbc\xb3\xd8\xad\f\x17\xbe\x17\xb5}.H\x90\xc7\x0e\xb3y\xd0\xc3\xf0c\x04\xe6\fzZ\x02\xfd_W\x9a\xa7\x81\xfcr\xe9B\x95\x13\x9f\x10\'5\xc0\xf9\xb5\xe1\x15Y\x9b$\xa43\xe7F>\xb7\xa1\xb7zw\xac\xc8\x12\x94\xa7\xe5\xcb\xc0g\x865\\\x9e\xca\x8e\xe2\t\xb7\b\x00\x00\x00\x00\x00\x00\x00i7b\xad\x14oVT\xcb\xea\xd3\xad\xa9\x16\xd5\xb2\xa0 \x13^\xf6>\xd4\x8bZzl\x88\xddn\xab\xd6\x12\x1f\x06', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xdc\xf2\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x113) fspick(0xffffffffffffffff, &(0x7f0000000140)='./file2\x00', 0x0) 1m36.082786323s ago: executing program 5 (id=257): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000019080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x0, 0x0, &(0x7f00000006c0)=ANY=[]}, 0x78) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [], 0xfeffff07, 0x0, 0x0}, 0x1e8) 1m23.962319551s ago: executing program 5 (id=266): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, '\v'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$netlink(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x10000, &(0x7f0000000640), 0x1, 0x5c5, &(0x7f0000001a00)="$eJzs3VuIXHcdB/Dfmd1Jc9mai63aGpvVUFso3dlsNiERHyzxUmtSK4oPoRCW7HQ3ZHZnzW6gOxVM8UUURPBFBKFiH6yIBvJSKbV9aPFFQakXKhoDKohQtFIQQZ3yn8t22pw0pXs5JOfzgTP7P/9zZv7/2eE755w5twBKazQ9ZBEjEXEhIrZ3R18/w2j3T2v/+dk0ZNFuf/YfWWe+6f3nZ/uz9p+3LT0MR2yOiF1HsthbvbzdxeXW6alGo36mN15bmluoLS637j41NzVTn6nPHzg0eXji4OShybV7r+O/2HrzX2+//9Ljz/37v9/53cEfpf6O9KYNvo+1Mhqjvf9JNXYO1A9nEfetdWMFGep+1HH7QF02XGCHeMva7V0/TJ/fOyNibyf/22Mouh/ei089+K/t8Zt7i+4jsH7affmTX24Pqg4+AbjWVTrrwFllLCK65UplbKy7Dn9TbK00motLdz3UPDs/3V1X3hHVykOnGvXx3rbCjqhmaXxfp/za+MQbxvdHdNaBvzK0pTM+drLZmN7oLzugYyTi4oUvnNy07Q35/9tQN//A9Svl/9fPP/lMKr8yVHRvgI2U8v+DV+Y+FfIPpSP/UF7yD+Ul/1Be8g/lJf9QXvIP5SX/UF7yD+Ul/1Be/fw/cOxYPHDsWLvVO/99vjlz6vTswuGJ8bG5syfHTjbPLIzNNJsznTN25q7+uo1mc2HfRJx9uLZUX1yqLS63Tsw1z84vneic13+innMpAKAAxy9tvm/nnmdfzCLi3Ie2dIZkU2+6rML1rd3OnNIPJWXTH8rLpdqgvGzjA9lVpm++0oTG2vcF2BiVojsAFOaOW+z/g7Ly+z+Ul9//obze7jp+FnFujbsCFMTv/1A+fv+H8hq5wv2/bhy4d9d4RLwjIn4+VL2hf68v4Jryuk39kYiLF7/3+drKfbgVFBQUVgrFfVEBG+O10BfdE6Ao0/vPz/aHjWrz6ZmNagnI89I93YOAUu5bvaE7ZXhl30B1nY4T2nlbevzJHx+7c3YoDdH7HlqHpoAc5x6NiPfkLf+zzr6BHb35dnVni5si4uaIeFdEvHuVbX/rMxGj8Xx9sE7+YeO81fzfEhFpcX1rRLw3InZHxPtW2favLqT8/3bLYJ38Qzl88bmiewAU5ZNPFt0DoCjHHWMApfX9R4ruAVCUp35cdA+Aonz9haJ7AOX27D0RMZ63/6/S2d/fV+1dF/CG3rUAtkTE1ojY1juH8MbeOYLbB/YZXs2JT0eMxm0/Hayz/w82Tv/4v9Zlx/9VVo7/G4qIPato4+kPj3wtr35qd8r/44/0j/9LQ2q/fywgsL5eejTi1tz8ZyvH/GaRchrx/rfZxuiXLj2RV//C/el1q7+UfyhG+7sRH4z8/PelUm1pbqG2uNy6u3Mf75n6/IFDk4cnDk4emqx1LhFS618oJMfRf758V179HyZS/r99QP6hGGn5v/UK+R9c///AKto48s2vHs+rH/lzyv/uZ948/5W/b8o+1xnv35fg4amlpTP7IjZlRy+vn1hFR+E6189IP0Mp/3fuzd/+39V7Tlr+H4mIj6b1hYj4X0T8PyI+FhEfj4hPRMS9b9LmN+6YuZRX/6cnUv4fO235D8VI+Z++yvI//f3PKtrYHD/7cl79R/ak/I/9/i9HHxxOg/wDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArL3F5dbpqUajfmYdC0W/RwAAAAAAACiLVwMAAP//Oacv4Q==") fchownat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xee01, 0x0, 0x1000) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0xc) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r5, &(0x7f0000000500)='O', 0xfe6a, 0x80, &(0x7f0000000280)={0xa, 0x0, 0xfffffffe, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1c) shutdown(r5, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x3}, 0x8) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r6, 0xffffffffffffffff, 0x0) 1m21.988103896s ago: executing program 35 (id=266): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, '\v'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$netlink(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x10000, &(0x7f0000000640), 0x1, 0x5c5, &(0x7f0000001a00)="$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") fchownat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xee01, 0x0, 0x1000) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0xc) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r5, &(0x7f0000000500)='O', 0xfe6a, 0x80, &(0x7f0000000280)={0xa, 0x0, 0xfffffffe, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1c) shutdown(r5, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x3}, 0x8) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r6, 0xffffffffffffffff, 0x0) 22.45933516s ago: executing program 4 (id=303): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000001c0), 0x10) io_setup(0x9, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f000000000000", 0x31}]) 20.396797795s ago: executing program 2 (id=304): r0 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0x8dd3, 0x1, 0x42, 0x235}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x1c, r4, 0x83625fc5352ba305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x20008000) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r6, 0xff, 0x1, 0x0, &(0x7f0000000040)) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c) io_setup(0x80000000, &(0x7f0000000000)) close_range(r0, 0xffffffffffffffff, 0x0) 20.395486987s ago: executing program 4 (id=305): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x23, 0x5, 0x70fb832a0e88cd6d) (async) prctl$PR_GET_SPECULATION_CTRL(0x23, 0x5, 0x70fb832a0e88cd6d) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000880)='./file1\x00', 0x1000040, &(0x7f00000000c0), 0x1, 0x5a3, &(0x7f00000002c0)="$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") socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0xa4, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSLVLLST={0x70, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x31d2d82b}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x33a57b06}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7fa8e4f5}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x67}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x46e81ea1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1c}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x34}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x15394adc}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x69}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1218e63}]}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x50001}, 0x80) (async) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0xa4, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSLVLLST={0x70, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x31d2d82b}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x33a57b06}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7fa8e4f5}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x67}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x46e81ea1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1c}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x34}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x15394adc}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x69}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1218e63}]}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x50001}, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="10010000", @ANYRES16=r4, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r5, @ANYBLOB="f400028061000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004"], 0x110}, 0x1, 0x0, 0x0, 0x4000401}, 0x2404c080) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="10010000", @ANYRES16=r4, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r5, @ANYBLOB="f400028061000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004"], 0x110}, 0x1, 0x0, 0x0, 0x4000401}, 0x2404c080) r7 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r8 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r8, 0x8004587d, 0x0) (async) ioctl$EXT4_IOC_MOVE_EXT(r8, 0x8004587d, 0x0) sendfile(r7, r7, 0x0, 0xe3aa6ea) (async) sendfile(r7, r7, 0x0, 0xe3aa6ea) socket$netlink(0x10, 0x3, 0x10) (async) r9 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0xc) r10 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r10, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r10, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r13, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r12], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000002000010000000000000000000a144000000000070020000014000200fc0200000000000000000000000000011400010020010000000000000000000000000001"], 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) 18.290355894s ago: executing program 4 (id=306): r0 = syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@prjquota}, {@bsdgroups}, {@oldalloc}, {@errors_continue}]}, 0x2, 0x45d, &(0x7f0000000ac0)="$eJzs3M1vFOUfAPDvzLaFH2/tD/EFRG1CDI0vLS2oHLxoNPGA0UQPeKzbQggLNbQmQohUY/BiYoh6Nh5N/Ce8GPVk4lXvhoQoF9BTzczOwHbZLSxddiv7+SQDz7PzdJ/n22eemWfm2W0AA2s8+yeJ2BYRv0XEaD27usB4/b/rV89X/756vprEyspbfyZ5uWtXz1fLouXPbS0yE2lE+klSVLLa4tlzJ2drtfkzRX5q6dR7U4tnzz174tTs8fnj86dnDh8+dHD6hednnutKnFlc1/Z8uLB392vvXHq9evTSuz99l7V3W7G/MY5uGc8C/2sl17zvyW5X1mfbG9LJUB8bQkcqEZF113A+/kejEjc7bzRe/bivjQPuqezatKn97uUV4D6WRL9bAPRHeaHP7n/LrUdTjw3hykv1G6As7uvFVt8zFGlRZrjp/rabxiPi6PI/X2db3KPnEAAAjT6rfnUknmk1/0vjoYZyO4o1lLGI+H9E7IyIByJiV0Q8GJGXfTgiHumw/ualoVvnP+nluwrsDmXzvxeLta3V879y9hdjlSK3PY9/ODl2ojZ/oPidTMTwpiw/vUYd37/y6+ft9jXO/7Itq7+cCxbtuDzU9IBubnZpNp+UdsGVjyL2DLWKP7mxEpBExO6I2NPZW+8oEyee+nZvu0K3j38NXVhnWvkmYn+9/5ejKf5Ssvb65NTmqM0fmCqPilv9/MvFN9vVv674uyDr/y2rj//mImNJ43rtYud1XPz907b3NHd7/I8kb+fno7KjPphdWjozHTGSHMlfHCnK5q/P3PzZMl+Wz+Kf2Nd6/O+MmxU8GhHZQfxYRDweEU8UbS+Pkn1rxP/jy+33bYT+n2t5/rtx/Df1f+eJyskfYnOb+u+s/w/lqYnilfz8dxt32sB1/fIAAADgPyLNPwOfpJM30mk6OVn/DP+u2JLWFhaXnj628P7pufpn5cdiOC2fdI02PA+dTpaLd6znZ4pnxeX+g8Vz4y8r/8vzk9WF2lyfY4dBt7XN+M/8Uel364B7rtU62sxIHxoC9Fzz+E9XZy+80cvGAD3l+9owuG4z/tNetQPoPdd/GFytxv+Fpry1ALg/uf7D4DL+YXAZ/zC4jH8YSOv5Xv8gJco/krpR2tP/RKQbohmdJcor3UZpT/cT+7+oR7juN+znWQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKB7/g0AAP//0TLrKA==") r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x100, 0x62) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x80e8662d, &(0x7f00000004c0)={@id={0x2, 0x0, @b}}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) 15.931377945s ago: executing program 2 (id=307): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x10040d0, 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x4000, 0x82) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r0}, 0xc) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@index_on}], [], 0x2c}) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000100), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100) (async) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) (async) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x10040d0, 0x0, 0x0, 0x0, 0x0) (async) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x4000, 0x82) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r0}, 0xc) (async) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@index_on}], [], 0x2c}) (async) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000100), 0x4) (async) 15.344825038s ago: executing program 4 (id=308): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x4000, &(0x7f0000002000)=ANY=[@ANYBLOB="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"], 0x1, 0x21b, &(0x7f0000000480)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000700)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r5, 0x400, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) truncate(&(0x7f0000000900)='./file1\x00', 0x24b9) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x14b302, 0x8c) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x2, 0x80805, 0x0) pwritev2(r6, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x45412, 0x8, 0x0) sendfile(r1, r1, 0x0, 0x1000000000007) 12.694359857s ago: executing program 2 (id=309): r0 = syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8c, &(0x7f0000000880)=ANY=[], 0x1, 0x2c7, &(0x7f0000000540)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) unshare(0x22020400) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000038c0), r3) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xfff}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r5, &(0x7f0000000000)="18552f", 0x3, 0x48012, 0x0, 0x0) recvfrom$inet(r5, 0x0, 0x0, 0xc9100120, 0x0, 0x0) listen(r2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x4}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x8, 0xb}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000b80)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r7, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) r8 = fcntl$dupfd(r2, 0x0, r6) write$FUSE_NOTIFY_STORE(r8, &(0x7f00000000c0)={0x28, 0x4, 0x0, {0x0, 0x6}}, 0xc388) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r9 = openat$incfs(r0, &(0x7f0000000000)='.log\x00', 0x2000, 0x5) dup(r9) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000000c00078008000640"], 0x5c}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r11, &(0x7f0000019080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) fadvise64(r1, 0x7f, 0x1000000, 0x4) unshare(0x8000000) 11.326290507s ago: executing program 4 (id=310): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xfff5, 0x10}, {}, {0x8, 0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_gact={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x40, 0x5, 0x7, 0xffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x2325, 0x6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r3, 0xe}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) r6 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r6, 0x1, 0x2, &(0x7f0000000240)=""/135, &(0x7f0000000040)=0x87) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a3a0000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000054000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d616376746170000000080001"], 0xf0}}, 0x0) 7.182129133s ago: executing program 2 (id=311): pipe2(&(0x7f0000000340)={0x0, 0x0}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r4, r2}) sendmmsg$inet(r3, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)="fd", 0x1}], 0x1}}], 0x1, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) unshare(0x22060600) tee(r5, r1, 0xff, 0x8) r7 = fanotify_init(0x2, 0x0) fanotify_mark(r7, 0x1, 0x1009, r0, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file1\x00', 0x1008000, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRES8], 0x3, 0x232, &(0x7f0000000640)="$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") prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendto(0xffffffffffffffff, 0x0, 0x0, 0x6008041, 0x0, 0x0) prctl$PR_SET_VMA(0x41555856, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) vmsplice(r6, &(0x7f0000000300)=[{&(0x7f0000000a40)="8b", 0x1}], 0x1, 0x0) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40000}, {{0x18, 0x1, 0x1, 0x0, r11}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0x20000000}, {0x66, 0x0, 0x0, 0x256c6c64}}, [@printk={@s, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) 3.546091437s ago: executing program 2 (id=312): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000001c0), 0x10) io_setup(0x9, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f000000000000", 0x31}]) 2.555423645s ago: executing program 4 (id=313): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x3, 0x3, 0x4, 0x1, 0x0, 0x10, 0x10}]}, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x94) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)={0x58, r0, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random="8e"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x28, 0x51, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "dba06c8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_SEQ={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x7040}, 0x20004800) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r4 = syz_open_dev$mouse(&(0x7f0000000240), 0xfffffffffffffffa, 0x529a01) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000080)="05ff8921f7cd2eeba05c72824e85432ff5bcff54ff0f0000000000006dd930c1684170797a4bb8b9", 0x28, 0x8004, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x1, 0x6, @remote}, 0x14) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r7, &(0x7f0000009780)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000440)=@nullb, r8, &(0x7f0000000480)) write$FUSE_DIRENTPLUS(r7, &(0x7f00000001c0)={0xb8, 0xfffffffffffffff5, 0x3, [{{0x0, 0x1, 0x6, 0xff, 0x10000, 0x0, {0x0, 0x7, 0xc9, 0x1ff, 0x9, 0xf1, 0x400, 0x4, 0x5, 0x4000, 0x100, r8, 0x0, 0x7, 0x81}}, {0x6, 0xffffffffffffff30, 0x9, 0xc6, '/dev/ppp\x00'}}]}, 0xb8) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@broadcast, 0x4e20, 0x3c, 0x4e21, 0xa, 0x2, 0x20, 0x0, 0x16, r6, r8}, {0x3, 0x2, 0x3, 0x3, 0x6, 0x200, 0x8, 0x80000000}, {0x6, 0x6, 0x3, 0x2}, 0x401, 0x6e6bbb, 0x1, 0x1}, {{@in6=@private0, 0x4d2, 0x6c}, 0x2, @in=@rand_addr=0x64010100, 0x3503, 0x3, 0x3, 0x67, 0x7, 0x0, 0x80000000}}, 0xe8) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r3, 0x8, 0x70bd2a, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x46000}, 0x48044) 0s ago: executing program 2 (id=314): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19a91a79220000000400000002465095fd527e44", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xf}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3004006, &(0x7f0000000240)={[{@user_xattr}, {@abort}, {@resuid}, {@user_xattr}, {@discard}, {@errors_remount}, {@debug}, {@noinit_itable}, {@nomblk_io_submit}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x56d, &(0x7f0000000540)="$eJzs3d9rW+UbAPDnpO1+77sOxvgqIsVdOJlLt9YfE7yYl6LDgd7P0mZlNF1Gk861Dtwu3I03MgQRB+K1eu/l8B/wrxjoYMgoinhTOelJm6VJk3Vpm5rPB872vjknfc+Tc56X982bkAD61kj6Ty7iuYj4Mok4UrdvMLKdIyvHLT2+OZluSSwvf/hHEkn2WO34JPv/YFb5f0T88nnEqdz6dssLizMTxWJhLquPVmavjZYXFk9fmZ2YLkwXro6Nj597fXzsrTff6Fqsr1z865sP7r977osTS1//9PDo3STOx6FsX30cz+BWfWUkRrLXZCjONxx4tguN9ZJkp0+ATRnI8nwo0j7gSAxkWQ/8930WEctAn0rkP/Sp2jigNrfv0jx413j0zsoEaH38gyvvjcS+6tzowFLyxMwone8Od6H9tI2ff793N92ie+9DALR163ZEnBkcXN//JVn/t3lnOjimsQ39H2yf++n459Vm45/c6vgnmox/DjbJ3c1on/+5hw2H7OlCs6vS8d/bTce/q4tWwwNZ7XB1zDeUXL5SLKR92/8i4mQM7U3rG63nnFt6sNxqX/34L93S9mtjwew8Hg7uffI5UxOViWeJud6j2xHPNx3/JqvXP2ly/dPX42KHbRwv3Hux1b728W+t5e8jXm56/ddWtJKN1ydHq/fDaO2uWO/PO8d/bdX+TsefXv8DK/H/nU0JG+MfTurXa8tP38Z3+/4ptNq32ft/T/JRtVzrDG5MVCpzZyP2JO+vf3xs7bm1eu34NP6TJzbu/5rd//sj4uMO479z7McXNh//1krjn9r4/m+4/k9fePDep9+2ar+z6/9atXQye6ST/q/TE3yW1w4AAAAAAAB6TS4iDkWSy6+Wc7l8fuXzHcfiQK5YKldOXS7NX52K6ndlh2MoV1vpPrL2eYjqcutw3ecjxhrq4xFxNCK+GthfrecnS8WpnQ4eAAAAAAAAAAAAAAAAAAAAesTBFt//T/02sNNnB2w5P/kN/att/nfjl56AntQm/1/6ZLtOBNh2xv/Qv+Q/9C/5D/1L/kP/kv/Qv+Q/9C/5DwAAAAAAAAAAAAAAAAAAAAAAAAAAAF118cKFdFteenxzMq1PXV+YnyldPz1VKM/kZ+cn85OluWv56VJpuljIT5Zm2/29Yql07exYzN8YrRTKldHywuKl2dL81cqlK7M/HI4oDG1LVAAAAAAAAAAAAAAAAAAAALC7lBcWZyaKxcKcQrWwN3riNHZRYbA3TqM/CxFb1sRO90wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsObfAAAA//9IKziJ") r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000480)='./file2\x00', 0x61000aa0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r5, 0x118, 0x1, 0xffffffffffffffff, 0xfe93) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f0000000400)={0x13, 0x10, 0xfa00, {&(0x7f0000000200), r7, 0x2}}, 0x18) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000000)={0x0, 'erspan0\x00', {0x4}, 0x40}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file7\x00', 0x21c0, 0x103) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2000, 0x103) connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e24}, 0x6e) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e3, &(0x7f0000000000)) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00') kernel console output (not intermixed with test programs): 68][ T4712] hsr_slave_1: entered promiscuous mode [ 29.816782][ T4712] debugfs: 'hsr0' already exists in 'hsr' [ 29.816791][ T4712] Cannot create hsr debugfs directory [ 29.903047][ T4723] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 29.906119][ T4723] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 29.913738][ T4723] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 29.916390][ T4723] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 29.916700][ T4723] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 29.918591][ T4723] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 29.923665][ T4723] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 29.926359][ T4723] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 29.953038][ T4717] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 29.955991][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 29.959546][ T4717] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 29.961756][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 29.966199][ T4723] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.966243][ T4723] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.966404][ T4723] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.966438][ T4723] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.968346][ T4717] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 29.969922][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 29.970205][ T4717] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 29.972353][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 29.994126][ T4713] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 29.997569][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 29.997879][ T4713] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 29.999765][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.002506][ T4717] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.002547][ T4717] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.002639][ T4717] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.002673][ T4717] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.006788][ T4713] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.008903][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.009582][ T4713] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.011047][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.036613][ T4713] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.036664][ T4713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.036742][ T4713] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.036771][ T4713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.040182][ T4723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.043387][ T4723] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.048859][ T4712] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.051266][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.052808][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.054474][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.056961][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.058271][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.060444][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.061902][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.075434][ T4717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.076743][ T4712] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.078942][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.080632][ T4712] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.082658][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.084390][ T4712] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.086782][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.098501][ T4723] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.098532][ T4723] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.106326][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.106383][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.106779][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.106806][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.111143][ T4717] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.117770][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.117819][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.120712][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.120744][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.146854][ T4713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.158971][ T4713] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.171856][ T3148] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.171904][ T3148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.183726][ T4717] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.185868][ T4720] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.187909][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.189444][ T4720] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.191544][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.198158][ T4720] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.214284][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.214619][ T4720] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.217073][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.221764][ T187] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.221802][ T187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.247078][ T4712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.276093][ T4712] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.282515][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.282564][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.291972][ T4723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.299455][ T187] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.299492][ T187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.321837][ T4723] veth0_vlan: entered promiscuous mode [ 30.325730][ T4723] veth1_vlan: entered promiscuous mode [ 30.350172][ T4723] veth0_macvtap: entered promiscuous mode [ 30.352544][ T4723] veth1_macvtap: entered promiscuous mode [ 30.358352][ T4720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.362965][ T4712] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.365393][ T4712] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.371642][ T4723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.382713][ T4720] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.393650][ T4720] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.396900][ T4720] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.399231][ T4723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.411959][ T3148] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.412002][ T3148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.416610][ T3148] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.416648][ T3148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.423599][ T3050] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.423871][ T3050] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.423891][ T3050] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.423908][ T3050] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.449768][ T4717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.476965][ T4717] veth0_vlan: entered promiscuous mode [ 30.480419][ T4717] veth1_vlan: entered promiscuous mode [ 30.501602][ T4717] veth0_macvtap: entered promiscuous mode [ 30.519757][ T4717] veth1_macvtap: entered promiscuous mode [ 30.535969][ T3996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.535998][ T3996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.547638][ T4713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.558760][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.559851][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.583677][ T3765] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.583754][ T3765] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.583815][ T3765] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.583860][ T3765] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.586500][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.586511][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.623559][ T3148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.623586][ T3148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.642333][ T3765] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.642355][ T3765] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.644616][ T4712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.648487][ T4723] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.693032][ T4712] veth0_vlan: entered promiscuous mode [ 30.701907][ T4712] veth1_vlan: entered promiscuous mode [ 30.730952][ T4713] veth0_vlan: entered promiscuous mode [ 30.746874][ T4720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.751213][ T4713] veth1_vlan: entered promiscuous mode [ 30.768769][ T4712] veth0_macvtap: entered promiscuous mode [ 30.769920][ T4712] veth1_macvtap: entered promiscuous mode [ 30.784980][ T4712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.789153][ T4720] veth0_vlan: entered promiscuous mode [ 30.806242][ T4712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.807937][ T4713] veth0_macvtap: entered promiscuous mode [ 30.822193][ T4713] veth1_macvtap: entered promiscuous mode [ 30.825646][ T3996] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.825694][ T3996] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.825716][ T3996] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.825734][ T3996] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.832718][ T4720] veth1_vlan: entered promiscuous mode [ 30.844488][ T4713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.856394][ T4713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.863282][ T4720] veth0_macvtap: entered promiscuous mode [ 30.881338][ T3148] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.881564][ T3148] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.881632][ T3148] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.881647][ T3148] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.893494][ T4720] veth1_macvtap: entered promiscuous mode [ 30.899321][ T4720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.900343][ T4720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.921051][ T3765] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.921113][ T3765] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.921135][ T3765] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.921153][ T3765] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.945309][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.945341][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.994360][ T3765] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.994397][ T3765] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.048955][ T4903] loop0: detected capacity change from 0 to 128 [ 31.064081][ T4903] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 31.130463][ T4722] Bluetooth: hci0: command tx timeout [ 31.130642][ T4722] Bluetooth: hci2: command tx timeout [ 31.130716][ T4722] Bluetooth: hci4: command tx timeout [ 31.131104][ T4715] Bluetooth: hci3: command tx timeout [ 31.146244][ T3148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.147792][ T3148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.208108][ T4729] Bluetooth: hci1: command tx timeout [ 31.325077][ T3996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.326718][ T3996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.438694][ T3765] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.440267][ T3765] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.453074][ T3050] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.453105][ T3050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.674056][ T4917] loop2: detected capacity change from 0 to 128 [ 31.676666][ T4917] ======================================================= [ 31.676666][ T4917] WARNING: The mand mount option has been deprecated and [ 31.676666][ T4917] and is ignored by this kernel. Remove the mand [ 31.676666][ T4917] option from the mount to silence this warning. [ 31.676666][ T4917] ======================================================= [ 31.812016][ T4917] EXT4-fs (loop2): Test dummy encryption mode enabled [ 32.019817][ T4922] loop3: detected capacity change from 0 to 512 [ 32.022824][ T4922] EXT4-fs: Ignoring removed orlov option [ 32.026944][ T4922] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 32.026985][ T4922] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 32.067521][ T4922] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #16: comm syz.3.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0) [ 32.067567][ T4922] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 32.070616][ T4922] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.4: couldn't read orphan inode 16 (err -117) [ 32.070690][ T4922] loop3: lost filesystem error report for type 5 error -117 [ 32.071287][ T4922] EXT4-fs (loop3): 1 orphan inode deleted [ 32.075522][ T4922] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.250964][ T4917] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 32.617600][ T4717] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 32.636310][ T4909] binder: 4908:4909 ioctl c00c6211 0 returned -14 [ 32.638888][ T4869] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.655688][ T4917] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 32.657433][ T4869] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 33.148520][ T4931] loop0: detected capacity change from 0 to 256 [ 33.248382][ T4729] Bluetooth: hci4: command tx timeout [ 33.249655][ T4729] Bluetooth: hci3: command tx timeout [ 33.249696][ T4729] Bluetooth: hci2: command tx timeout [ 33.249716][ T4729] Bluetooth: hci0: command tx timeout [ 33.285572][ T4722] Bluetooth: hci1: command tx timeout [ 33.295581][ T4928] fido_id[4928]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 33.311226][ T4720] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.315773][ T4723] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 33.386723][ T4937] loop1: detected capacity change from 0 to 128 [ 33.401704][ T4941] syz_tun: entered allmulticast mode [ 33.441838][ T4945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.444421][ T4945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.595991][ T4948] loop3: detected capacity change from 0 to 512 [ 33.600598][ T4948] EXT4-fs: Ignoring removed orlov option [ 34.440595][ T4937] syz.1.12: attempt to access beyond end of device [ 34.440595][ T4937] loop1: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 34.449670][ T4937] syz.1.12: attempt to access beyond end of device [ 34.449670][ T4937] loop1: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 34.452333][ T4937] syz.1.12: attempt to access beyond end of device [ 34.452333][ T4937] loop1: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 34.454607][ T4948] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 34.455191][ T4937] syz.1.12: attempt to access beyond end of device [ 34.455191][ T4937] loop1: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 34.455235][ T4937] syz.1.12: attempt to access beyond end of device [ 34.455235][ T4937] loop1: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 34.455275][ T4937] syz.1.12: attempt to access beyond end of device [ 34.455275][ T4937] loop1: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 34.455312][ T4937] syz.1.12: attempt to access beyond end of device [ 34.455312][ T4937] loop1: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 34.455346][ T4937] syz.1.12: attempt to access beyond end of device [ 34.455346][ T4937] loop1: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 34.455385][ T4937] syz.1.12: attempt to access beyond end of device [ 34.455385][ T4937] loop1: rw=2049, sector=289, nr_sectors = 9 limit=128 [ 34.695730][ T4951] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13'. [ 35.288073][ T4722] Bluetooth: hci0: command tx timeout [ 35.288127][ T4722] Bluetooth: hci2: command tx timeout [ 35.288163][ T4722] Bluetooth: hci3: command tx timeout [ 35.288182][ T4722] Bluetooth: hci4: command tx timeout [ 35.307565][ T4948] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #16: comm syz.3.10: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0) [ 35.307604][ T4948] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 35.311744][ T4948] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.10: couldn't read orphan inode 16 (err -117) [ 35.311771][ T4948] loop3: lost filesystem error report for type 5 error -117 [ 35.314516][ T4948] EXT4-fs (loop3): 1 orphan inode deleted [ 35.315053][ T4948] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.365676][ T4729] Bluetooth: hci1: command tx timeout [ 35.410230][ T3847] kworker/u8:13: attempt to access beyond end of device [ 35.410230][ T3847] loop1: rw=1, sector=305, nr_sectors = 1 limit=128 [ 35.410314][ T3847] Buffer I/O error on dev loop1, logical block 305, lost async page write [ 35.474354][ T4957] Zero length message leads to an empty skb [ 35.522744][ T4965] loop0: detected capacity change from 0 to 512 [ 35.524024][ T4965] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 35.528006][ T4965] EXT4-fs (loop0): 1 truncate cleaned up [ 35.531284][ T4965] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.675255][ T4967] loop4: detected capacity change from 0 to 512 [ 35.678152][ T4967] EXT4-fs: Ignoring removed orlov option [ 35.691214][ T4967] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 36.008159][ T4967] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #16: comm syz.4.15: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0) [ 36.008240][ T4967] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 36.009699][ T4967] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.15: couldn't read orphan inode 16 (err -117) [ 36.009715][ T4967] loop4: lost filesystem error report for type 5 error -117 [ 36.009984][ T4967] EXT4-fs (loop4): 1 orphan inode deleted [ 36.010433][ T4967] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.662029][ T4965] loop8: detected capacity change from 0 to 7 [ 36.662179][ T4720] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.768830][ T4965] loop8: [ 36.768866][ T4965] loop8: partition table partially beyond EOD, truncated [ 36.780431][ T4713] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.792996][ T4980] netlink: 24 bytes leftover after parsing attributes in process `syz.2.19'. [ 36.854042][ T4981] lo speed is unknown, defaulting to 1000 [ 36.854412][ T4981] lo speed is unknown, defaulting to 1000 [ 36.862860][ T4981] lo speed is unknown, defaulting to 1000 [ 36.869660][ T4981] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 36.881151][ T4981] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 37.074050][ T4978] loop1: detected capacity change from 0 to 256 [ 37.074514][ T4978] vfat: Unknown parameter 'uni_xla®P‘šÝ‹te' [ 37.084751][ T4981] lo speed is unknown, defaulting to 1000 [ 37.085211][ T4981] lo speed is unknown, defaulting to 1000 [ 37.085542][ T4981] lo speed is unknown, defaulting to 1000 [ 37.085891][ T4981] lo speed is unknown, defaulting to 1000 [ 37.086236][ T4981] lo speed is unknown, defaulting to 1000 [ 37.198167][ T4717] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.375403][ T4729] Bluetooth: hci4: command tx timeout [ 37.375452][ T4729] Bluetooth: hci3: command tx timeout [ 37.375483][ T4729] Bluetooth: hci2: command tx timeout [ 37.375612][ T4729] Bluetooth: hci0: command tx timeout [ 37.445946][ T4722] Bluetooth: hci1: command tx timeout [ 37.487539][ T4998] netlink: 1372 bytes leftover after parsing attributes in process `syz.3.23'. [ 37.499435][ T4997] loop0: detected capacity change from 0 to 512 [ 37.500236][ T4997] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 37.508022][ T4997] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.22: bad orphan inode 131083 [ 37.508043][ T4997] loop0: lost filesystem error report for type 5 error -117 [ 37.508713][ T4997] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.560745][ T4717] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.074277][ T1022] lo speed is unknown, defaulting to 1000 [ 38.277528][ T4815] hid-generic 0005:4C4A:0A0E.0002: item fetching failed at offset 0/1 [ 38.277717][ T4815] hid-generic 0005:4C4A:0A0E.0002: probe with driver hid-generic failed with error -22 [ 38.281787][ T5011] binder: 5005:5011 got transaction to invalid handle, 1 [ 38.281838][ T5011] binder: 5005:5011 cannot find target node [ 38.281860][ T5011] binder: 5005:5011 transaction call to 0:0 failed 1/29201/-22, code 0 size 0-0 line 3236 [ 38.282470][ T5011] netlink: 28 bytes leftover after parsing attributes in process `syz.1.26'. [ 38.344516][ T5012] loop1: detected capacity change from 0 to 512 [ 38.351201][ T5012] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 38.354231][ T5012] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.26: Invalid block bitmap block 0 in block_group 0 [ 38.354274][ T5012] loop1: lost filesystem error report for type 5 error -117 [ 38.354764][ T5012] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 38.354782][ T5012] loop1: lost filesystem error report for type 5 error -117 [ 38.354850][ C1] EXT4-fs (loop1): error count since last fsck: 2 [ 38.354861][ C1] EXT4-fs (loop1): initial error at time 38: ext4_read_block_bitmap_nowait:483 [ 38.354874][ C1] EXT4-fs (loop1): last error at time 38: ext4_mb_clear_bb:6679 [ 38.357384][ T5012] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #11: comm syz.1.26: attempt to clear invalid blocks 983261 len 1 [ 38.357410][ T5012] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 38.357877][ T5012] EXT4-fs error (device loop1): __ext4_get_inode_loc:4885: comm syz.1.26: Invalid inode table block 0 in block_group 0 [ 38.357898][ T5012] loop1: lost filesystem error report for type 5 error -117 [ 38.359291][ T5012] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 38.359319][ T5012] loop1: lost filesystem error report for type 5 error -117 [ 38.359717][ T5012] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 38.359728][ T5012] loop1: lost filesystem error report for type 5 error -117 [ 38.359947][ T5012] EXT4-fs error (device loop1): __ext4_get_inode_loc:4885: comm syz.1.26: Invalid inode table block 0 in block_group 0 [ 38.359961][ T5012] loop1: lost filesystem error report for type 5 error -117 [ 38.360226][ T5012] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 38.360243][ T5012] loop1: lost filesystem error report for type 5 error -117 [ 38.360362][ T5012] EXT4-fs error (device loop1): ext4_truncate:4690: inode #11: comm syz.1.26: mark_inode_dirty error [ 38.360374][ T5012] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 38.360641][ T5012] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 38.360658][ T5012] loop1: lost filesystem error report for type 5 error -117 [ 38.360785][ T5012] EXT4-fs error (device loop1): __ext4_get_inode_loc:4885: comm syz.1.26: Invalid inode table block 0 in block_group 0 [ 38.360796][ T5012] loop1: lost filesystem error report for type 5 error -117 [ 38.360949][ T5012] EXT4-fs (loop1): 1 truncate cleaned up [ 38.362826][ T5012] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.501237][ T5022] binder: 5021:5022 ioctl 80184540 20000240 returned -22 [ 38.501297][ T5023] binder: 5021:5023 ioctl 80184540 20000240 returned -22 [ 38.521548][ T5024] binder: BINDER_SET_CONTEXT_MGR already set [ 38.521573][ T5024] binder: 5021:5024 ioctl 4018620d 20004a80 returned -16 [ 38.521956][ T5022] binder: 5021:5022 context manager tried to acquire desc 0 [ 38.522523][ T5022] binder: 5021:5022 ioctl c0306201 200004c0 returned -22 [ 38.522822][ T5022] binder: 5021:5022 got transaction to invalid handle, 1 [ 38.523082][ T5023] binder: 5021:5023 got transaction to invalid handle, 1 [ 38.523098][ T5023] binder: 5021:5023 cannot find target node [ 38.523356][ T5023] binder: 5021:5023 transaction call to 0:0 failed 6/29201/-22, code 0 size 72-24 line 3236 [ 38.523566][ T5022] binder: 5021:5022 cannot find target node [ 38.523775][ T5022] binder: 5021:5022 transaction call to 0:0 failed 5/29201/-22, code 0 size 72-24 line 3236 [ 38.524408][ T5023] binder_alloc: binder_alloc_mmap_handler: 5021 20ffe000-21000000 already mapped failed -16 [ 38.550302][ T5022] binder: 5021:5022 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 38.550338][ T5022] binder: 5022 RLIMIT_NICE not set [ 38.552085][ T5022] binder: 5021:5022 got transaction to invalid handle, 3 [ 38.552099][ T5022] binder: 5021:5022 cannot find target node [ 38.552119][ T5022] binder: 5021:5022 transaction call to 0:0 failed 7/29201/-22, code 0 size 0-0 line 3236 [ 38.560769][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.569272][ T26] binder: undelivered TRANSACTION_ERROR: 29201 [ 38.569311][ T26] binder: undelivered TRANSACTION_ERROR: 29201 [ 38.657223][ T5034] loop3: detected capacity change from 0 to 512 [ 38.661495][ T5034] EXT4-fs: Ignoring removed orlov option [ 38.669680][ T5034] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 38.695506][ T5034] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #16: comm syz.3.28: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0) [ 38.695584][ T5034] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 38.699849][ T5034] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.28: couldn't read orphan inode 16 (err -117) [ 38.702478][ T5034] EXT4-fs (loop3): 1 orphan inode deleted [ 38.707525][ T5034] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.581376][ T5040] batadv_slave_0: entered promiscuous mode [ 39.622217][ T5040] loop2: detected capacity change from 0 to 1024 [ 39.622647][ T5040] EXT4-fs: Ignoring removed nomblk_io_submit option [ 39.631674][ T5046] loop1: detected capacity change from 0 to 1024 [ 39.636526][ T5046] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 39.636899][ T5046] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 39.673156][ T5046] JBD2: no valid journal superblock found [ 39.674571][ T5040] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.691370][ T5046] EXT4-fs (loop1): Could not load journal inode [ 39.697392][ T4720] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.710912][ T5040] netlink: 4 bytes leftover after parsing attributes in process `syz.2.34'. [ 39.846144][ T5039] batadv_slave_0: left promiscuous mode [ 40.122257][ T4723] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.354964][ T5073] ieee802154 phy0 wpan0: encryption failed: -22 [ 40.516607][ T5076] loop2: detected capacity change from 0 to 512 [ 40.539188][ T5076] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.618135][ T5083] loop0: detected capacity change from 0 to 256 [ 40.732248][ T5083] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 40.794896][ T5087] loop1: detected capacity change from 0 to 512 [ 40.796577][ T5087] ext3: Unknown parameter 'journal_async_commit"data' [ 41.609670][ T5082] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 41.651236][ T5087] kthread_run failed with err -4 [ 41.669257][ T4723] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.682874][ T5090] loop4: detected capacity change from 0 to 1024 [ 41.750103][ T5095] 9p: Bad value for 'wfdno' [ 41.807352][ T5100] loop1: detected capacity change from 0 to 512 [ 41.808883][ T5100] EXT4-fs: Ignoring removed bh option [ 41.811160][ T5100] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 41.813054][ T5100] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 41.820425][ T5100] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 41.822514][ T5100] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 41.828996][ T5098] usb usb7: usbfs: process 5098 (syz.4.52) did not claim interface 0 before use [ 41.833546][ T5100] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.003817][ T5120] netlink: 8 bytes leftover after parsing attributes in process `syz.2.57'. [ 42.005467][ T5120] netlink: 'syz.2.57': attribute type 9 has an invalid length. [ 42.005479][ T5120] netlink: 47 bytes leftover after parsing attributes in process `syz.2.57'. [ 42.566084][ T5129] loop3: detected capacity change from 0 to 512 [ 42.568313][ T5129] ext4: Unknown parameter 'noacl' [ 42.677790][ T5138] loop3: detected capacity change from 0 to 1024 [ 42.681159][ T5138] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 42.681801][ T5138] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 42.684478][ T5138] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 42.686879][ T5138] EXT4-fs error (device loop3): ext4_free_blocks:6718: comm syz.3.61: Freeing blocks not in datazone - block = 0, count = 4096 [ 42.687262][ T5138] fserror_report: 1 callbacks suppressed [ 42.687281][ T5138] loop3: lost filesystem error report for type 5 error -117 [ 42.687787][ T5138] EXT4-fs (loop3): Remounting filesystem read-only [ 42.687845][ T5138] EXT4-fs (loop3): 1 orphan inode deleted [ 42.688323][ T5138] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.712977][ T3509] EXT4-fs (loop3): Quota write (off=3072, len=1024) cancelled because transaction is not started [ 42.713015][ T3509] Quota error (device loop3): write_blk: dquota write failed [ 42.713082][ T3509] Quota error (device loop3): free_dqentry: Can't move quota data block (2) to free list [ 42.785978][ T5142] tmpfs: Bad value for 'mpol' [ 43.125027][ T4954] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 353: padding at end of block bitmap is not set [ 44.799796][ T5100] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 44.824385][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.873622][ T4720] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.936443][ T5169] loop1: detected capacity change from 0 to 256 [ 44.949360][ T5169] ip6erspan0: entered allmulticast mode [ 45.124251][ T5177] loop0: detected capacity change from 0 to 2048 [ 45.220817][ T5177] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.469196][ T5209] netlink: 8 bytes leftover after parsing attributes in process `syz.3.82'. [ 45.471162][ T5209] netlink: 24 bytes leftover after parsing attributes in process `syz.3.82'. [ 45.473048][ T5209] netlink: 8 bytes leftover after parsing attributes in process `syz.3.82'. [ 45.474728][ T5209] netlink: 24 bytes leftover after parsing attributes in process `syz.3.82'. [ 45.494032][ T5213] netlink: 392 bytes leftover after parsing attributes in process `syz.3.84'. [ 45.763812][ T5236] loop3: detected capacity change from 0 to 128 [ 45.774446][ T5238] netlink: 24 bytes leftover after parsing attributes in process `syz.3.90'. [ 45.791414][ T5236] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 45.802854][ T4717] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.857232][ T5241] lo speed is unknown, defaulting to 1000 [ 45.914769][ T5246] netlink: 4 bytes leftover after parsing attributes in process `syz.0.92'. [ 45.922676][ T5246] netlink: 36 bytes leftover after parsing attributes in process `syz.0.92'. [ 45.948570][ T5259] loop3: detected capacity change from 0 to 1024 [ 45.950575][ T5259] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 45.952340][ T5259] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 45.958085][ T5259] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 2: comm syz.3.96: lblock 2 mapped to illegal pblock 2 (length 1) [ 45.958123][ T5259] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 45.961053][ T5259] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 45.961100][ T5259] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 48: comm syz.3.96: lblock 0 mapped to illegal pblock 48 (length 1) [ 45.961129][ T5259] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 45.966727][ C0] EXT4-fs (loop3): error count since last fsck: 2 [ 45.966740][ C0] EXT4-fs (loop3): initial error at time 45: ext4_map_blocks:791: inode 3: block 2 [ 45.966761][ C0] EXT4-fs (loop3): last error at time 45: ext4_map_blocks:791: inode 3: block 48 [ 45.972935][ T5259] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 45.972949][ T5259] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.96: Failed to acquire dquot type 0 [ 45.972961][ T5259] loop3: lost filesystem error report for type 5 error -117 [ 45.973688][ T5259] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 45.973710][ T5259] loop3: lost filesystem error report for type 5 error -117 [ 45.974363][ T5259] EXT4-fs error (device loop3): ext4_evict_inode:267: inode #11: comm syz.3.96: mark_inode_dirty error [ 45.974381][ T5259] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 45.974471][ T5259] EXT4-fs warning (device loop3): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 45.974525][ T5259] EXT4-fs (loop3): 1 orphan inode deleted [ 45.975777][ T5259] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.998083][ T3148] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 45.998950][ T3148] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 45.998967][ T3148] EXT4-fs error (device loop3): ext4_release_dquot:7070: comm kworker/u8:8: Failed to release dquot type 0 [ 46.006004][ T5259] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 46.015706][ T4720] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.111005][ T5268] IPv6: addrconf: prefix option has invalid lifetime [ 46.124090][ T5268] netlink: 4 bytes leftover after parsing attributes in process `syz.0.99'. [ 46.124093][ T5271] misc userio: Invalid payload size [ 46.130565][ T26] IPVS: starting estimator thread 0... [ 46.177036][ T5280] IPv6: addrconf: prefix option has invalid lifetime [ 46.238383][ T5273] IPVS: using max 45 ests per chain, 108000 per kthread [ 46.247649][ T5263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.249634][ T5263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.260141][ T5290] netlink: 8 bytes leftover after parsing attributes in process `syz.1.105'. [ 46.372673][ T5302] syz.0.108 uses obsolete (PF_INET,SOCK_PACKET) [ 46.412330][ T5306] loop4: detected capacity change from 0 to 512 [ 46.424488][ T5306] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.107: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 46.424543][ T5306] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 46.425320][ T5306] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.107: couldn't read orphan inode 15 (err -117) [ 46.425337][ T5306] loop4: lost filesystem error report for type 5 error -117 [ 46.425918][ T5306] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.482585][ T4713] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.564709][ T5315] netlink: 'syz.0.112': attribute type 29 has an invalid length. [ 46.568565][ T5315] netlink: 'syz.0.112': attribute type 29 has an invalid length. [ 46.740026][ T5342] Driver unsupported XDP return value 0 on prog (id 20) dev N/A, expect packet loss! [ 46.820808][ T5354] loop3: detected capacity change from 0 to 256 [ 46.882205][ T5357] loop2: detected capacity change from 0 to 256 [ 46.909985][ T5357] FAT-fs (loop2): Directory bread(block 64) failed [ 46.910022][ T5357] FAT-fs (loop2): Directory bread(block 65) failed [ 46.910063][ T5357] FAT-fs (loop2): Directory bread(block 66) failed [ 46.910080][ T5357] FAT-fs (loop2): Directory bread(block 67) failed [ 46.910113][ T5357] FAT-fs (loop2): Directory bread(block 68) failed [ 46.910130][ T5357] FAT-fs (loop2): Directory bread(block 69) failed [ 46.910158][ T5357] FAT-fs (loop2): Directory bread(block 70) failed [ 46.910255][ T5357] FAT-fs (loop2): Directory bread(block 71) failed [ 46.910295][ T5357] FAT-fs (loop2): Directory bread(block 72) failed [ 46.910310][ T5357] FAT-fs (loop2): Directory bread(block 73) failed [ 47.012926][ T5337] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 47.063713][ T5371] loop2: detected capacity change from 0 to 512 [ 47.064335][ T5371] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 47.068654][ T5371] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.124: Invalid block bitmap block 0 in block_group 0 [ 47.068671][ T5371] loop2: lost filesystem error report for type 5 error -117 [ 47.068807][ T5371] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 47.068817][ T5371] loop2: lost filesystem error report for type 5 error -117 [ 47.068926][ T5371] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #11: comm syz.2.124: attempt to clear invalid blocks 983261 len 1 [ 47.068939][ T5371] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 47.069051][ T5371] EXT4-fs error (device loop2): __ext4_get_inode_loc:4885: comm syz.2.124: Invalid inode table block 0 in block_group 0 [ 47.069062][ T5371] loop2: lost filesystem error report for type 5 error -117 [ 47.069188][ T5371] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 47.069198][ T5371] loop2: lost filesystem error report for type 5 error -117 [ 47.069302][ T5371] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 47.069310][ T5371] loop2: lost filesystem error report for type 5 error -117 [ 47.069412][ T5371] EXT4-fs error (device loop2): __ext4_get_inode_loc:4885: comm syz.2.124: Invalid inode table block 0 in block_group 0 [ 47.069423][ T5371] loop2: lost filesystem error report for type 5 error -117 [ 47.069522][ T5371] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 47.069626][ T5371] EXT4-fs error (device loop2): ext4_truncate:4690: inode #11: comm syz.2.124: mark_inode_dirty error [ 47.069636][ T5371] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 47.069737][ T5371] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 47.069847][ T5371] EXT4-fs error (device loop2): __ext4_get_inode_loc:4885: comm syz.2.124: Invalid inode table block 0 in block_group 0 [ 47.069973][ T5371] EXT4-fs (loop2): 1 truncate cleaned up [ 47.070461][ T5371] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.072271][ T5371] EXT4-fs error (device loop2): __ext4_get_inode_loc:4885: comm syz.2.124: Invalid inode table block 0 in block_group 0 [ 47.107070][ T4723] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.462608][ T5389] process 'syz.1.127' launched './file0' with NULL argv: empty string added [ 47.489784][ T5395] loop1: detected capacity change from 0 to 512 [ 47.491241][ T5395] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 47.517856][ T5395] EXT4-fs (loop1): failed to initialize system zone (-117) [ 47.517951][ T5395] EXT4-fs (loop1): mount failed [ 47.609980][ T5401] loop4: detected capacity change from 0 to 256 [ 47.612902][ T5401] vfat: Unknown parameter 'dont_measur' [ 47.647735][ T5406] loop3: detected capacity change from 0 to 512 [ 47.648141][ T5406] EXT4-fs: Ignoring removed bh option [ 47.651827][ T5406] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 47.658478][ T5406] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.131: corrupted in-inode xattr: e_value size too large [ 47.658515][ T5406] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 47.661503][ T5406] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.131: couldn't read orphan inode 15 (err -117) [ 47.669400][ T5406] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.690737][ T5406] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #12: comm syz.3.131: corrupted in-inode xattr: bad e_name length [ 47.700225][ T5406] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #12: comm syz.3.131: corrupted in-inode xattr: bad e_name length [ 47.709163][ T5406] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #12: comm syz.3.131: corrupted in-inode xattr: bad e_name length [ 47.760076][ T4720] EXT4-fs error (device loop3): ext4_readdir:265: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 47.766746][ T4720] EXT4-fs error (device loop3): ext4_empty_dir:3125: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 47.771609][ T4720] EXT4-fs error (device loop3): ext4_readdir:265: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 47.777400][ T4720] EXT4-fs error (device loop3): ext4_empty_dir:3125: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 47.781864][ T4720] EXT4-fs error (device loop3): ext4_readdir:265: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 47.787688][ T4720] EXT4-fs error (device loop3): ext4_empty_dir:3125: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 47.791353][ T4720] EXT4-fs error (device loop3): ext4_readdir:265: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 48.138631][ T5426] fuse: Bad value for 'fd' [ 48.144481][ T5426] gretap0: entered promiscuous mode [ 48.148151][ T5426] vlan2: entered promiscuous mode [ 48.561731][ T5432] bond1: (slave veth3): Enslaving as an active interface with a down link [ 48.570662][ T5432] bond1: (slave ip6gretap1): making interface the new active one [ 48.572891][ T5432] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 48.579294][ T5432] nbd: must specify at least one socket [ 48.610395][ T5436] loop0: detected capacity change from 0 to 128 [ 48.622944][ T5436] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 48.652461][ T5438] loop4: detected capacity change from 0 to 4096 [ 48.654255][ T5438] EXT4-fs: Ignoring removed nomblk_io_submit option [ 48.656515][ T5438] EXT4-fs (loop4): Test dummy encryption mode enabled [ 48.659873][ T5438] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 48.659930][ T5438] System zones: 0-5 [ 48.663554][ T5438] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.672908][ T5412] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.818306][ T5444] syz.1.143 (5444) used obsolete PPPIOCDETACH ioctl [ 48.852942][ T4729] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 48.853902][ T4729] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 48.854195][ T4729] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 48.854705][ T4729] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 48.855356][ T4729] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 48.863869][ T4713] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.906499][ T5450] loop1: detected capacity change from 0 to 512 [ 48.937469][ T5450] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 48.937527][ T5450] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 2)! [ 48.937566][ T5450] EXT4-fs (loop1): group descriptors corrupted! [ 48.946211][ T4717] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.065852][ T5471] overlayfs: refusing to follow metacopy origin for (/file1) [ 49.101055][ T5471] hsr_slave_1 (unregistering): left promiscuous mode [ 49.121192][ T5477] loop1: detected capacity change from 0 to 256 [ 49.306735][ T5446] lo speed is unknown, defaulting to 1000 [ 49.307867][ T5486] EXT4-fs: Ignoring removed oldalloc option [ 49.307884][ T5486] ext4: Bad value for 'barrier' [ 49.394078][ T5497] batadv_slave_0: entered promiscuous mode [ 49.421996][ T5497] warning: `syz.0.154' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 49.432342][ T5502] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 49.445692][ T5502] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 49.448097][ T5502] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 49.520746][ T5446] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.520826][ T5446] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.520887][ T5446] bridge_slave_0: entered allmulticast mode [ 49.521334][ T5446] bridge_slave_0: entered promiscuous mode [ 49.522345][ T5446] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.522389][ T5446] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.522441][ T5446] bridge_slave_1: entered allmulticast mode [ 49.522952][ T5446] bridge_slave_1: entered promiscuous mode [ 49.532237][ T5446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.533165][ T5446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.546618][ T5446] team0: Port device team_slave_0 added [ 49.547385][ T5446] team0: Port device team_slave_1 added [ 49.562182][ T5497] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 49.564434][ T5446] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.566979][ T5446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.571475][ T5446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.572239][ T5446] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.572248][ T5446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.572263][ T5446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.582164][ T5495] batadv_slave_0: left promiscuous mode [ 49.611724][ T5446] hsr_slave_0: entered promiscuous mode [ 49.613384][ T5446] hsr_slave_1: entered promiscuous mode [ 49.618809][ T5446] debugfs: 'hsr0' already exists in 'hsr' [ 49.619963][ T5446] Cannot create hsr debugfs directory [ 49.661855][ T5522] EXT4-fs (loop1): can't mount with both data=journal and delalloc [ 49.726722][ T4984] udevd[4984]: symlink '../../loop1' '/dev/disk/by-diskseq/131.tmp-b7:1' failed: Read-only file system [ 49.731341][ T4984] udevd[4984]: symlink '../../loop1' '/dev/disk/by-diskseq/131.tmp-b7:1' failed: Read-only file system [ 49.760771][ T5446] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 49.828806][ T5446] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.830715][ T5446] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 49.834470][ T5446] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.838625][ T5446] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 49.841155][ T5446] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.841447][ T5446] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 49.845000][ T5446] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.899682][ T5446] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.899726][ T5446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.899804][ T5446] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.899836][ T5446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.935838][ T5446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.983769][ T5446] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.009835][ T3996] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.076693][ T187] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.090611][ T3996] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.090664][ T3996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.123034][ T4984] udevd[4984]: symlink '../../loop1' '/dev/disk/by-diskseq/131.tmp-b7:1' failed: Read-only file system [ 50.140086][ T4984] udevd[4984]: symlink '../../loop1' '/dev/disk/by-diskseq/131.tmp-b7:1' failed: Read-only file system [ 50.146427][ T187] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.199346][ T187] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.211551][ T5446] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.249892][ T187] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.278231][ T5446] veth0_vlan: entered promiscuous mode [ 50.280140][ T5446] veth1_vlan: entered promiscuous mode [ 50.287676][ T5446] veth0_macvtap: entered promiscuous mode [ 50.288807][ T5446] veth1_macvtap: entered promiscuous mode [ 50.293190][ T5446] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.294195][ T5446] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.296010][ T3148] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.296117][ T3148] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.296759][ T3148] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.296813][ T3148] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.322370][ T3509] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.323763][ T3509] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.334074][ T3847] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.335871][ T3847] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.575031][ T187] bridge_slave_1: left allmulticast mode [ 50.576474][ T187] bridge_slave_1: left promiscuous mode [ 50.577048][ T187] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.580128][ T187] bridge_slave_0: left allmulticast mode [ 50.580153][ T187] bridge_slave_0: left promiscuous mode [ 50.580225][ T187] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.701033][ T4984] udevd[4984]: symlink '../../loop4' '/dev/disk/by-diskseq/132.tmp-b7:4' failed: Read-only file system [ 50.747758][ T4984] udevd[4984]: symlink '../../loop4' '/dev/disk/by-diskseq/132.tmp-b7:4' failed: Read-only file system [ 50.751031][ T4984] udevd[4984]: symlink '../../loop4' '/dev/disk/by-diskseq/132.tmp-b7:4' failed: Read-only file system [ 50.760401][ T4984] udevd[4984]: symlink '../../loop4' '/dev/disk/by-diskseq/133.tmp-b7:4' failed: Read-only file system [ 50.773394][ T5583] EXT4-fs: Ignoring removed nomblk_io_submit option [ 50.793495][ T5583] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6042c028, mo2=0102] [ 50.793552][ T5583] System zones: 0-1, 3-12 [ 50.794132][ T5583] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.819788][ T4984] udevd[4984]: symlink '../../loop4' '/dev/disk/by-diskseq/134.tmp-b7:4' failed: Read-only file system [ 50.821145][ T4984] udevd[4984]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 50.885597][ T4729] Bluetooth: hci3: command tx timeout [ 50.889894][ T187] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 51.160067][ T187] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 51.186323][ T187] bond0 (unregistering): Released all slaves [ 51.257492][ T5607] __nla_validate_parse: 13 callbacks suppressed [ 51.257527][ T5607] netlink: 8 bytes leftover after parsing attributes in process `syz.5.142'. [ 51.381865][ T4400] 8021q: adding VLAN 0 to HW filter on device eth0 [ 51.397458][ T5622] netlink: 12 bytes leftover after parsing attributes in process `syz.2.178'. [ 52.271877][ T5633] netlink: 12 bytes leftover after parsing attributes in process `syz.0.181'. [ 52.317853][ T5641] set_capacity_and_notify: 5 callbacks suppressed [ 52.340087][ T5641] loop2: detected capacity change from 0 to 512 [ 52.379738][ T5641] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.182: bad orphan inode 16 [ 52.379783][ T5641] fserror_report: 4 callbacks suppressed [ 52.379803][ T5641] loop2: lost filesystem error report for type 5 error -117 [ 52.383331][ T5641] ext4_test_bit(bit=15, block=18) = 1 [ 52.383376][ T5641] is_bad_inode(inode)=0 [ 52.383407][ T5641] NEXT_ORPHAN(inode)=83886080 [ 52.383417][ T5641] max_ino=32 [ 52.383426][ T5641] i_nlink=0 [ 52.385970][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 52.385987][ C0] EXT4-fs (loop2): initial error at time 52: ext4_orphan_get:1423 [ 52.386005][ C0] EXT4-fs (loop2): last error at time 52: ext4_orphan_get:1423 [ 52.403015][ T4713] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.407468][ T5652] loop5: detected capacity change from 0 to 128 [ 52.419799][ T5641] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.435680][ T3509] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 52.435727][ T3509] EXT4-fs error (device loop2): ext4_release_dquot:7070: comm kworker/u8:11: Failed to release dquot type 1 [ 52.435752][ T3509] loop2: lost filesystem error report for type 5 error -117 [ 52.443660][ T5633] netlink: 12 bytes leftover after parsing attributes in process `syz.0.181'. [ 52.509472][ T5661] netlink: 8 bytes leftover after parsing attributes in process `syz.0.186'. [ 52.541991][ T187] hsr_slave_0: left promiscuous mode [ 52.552000][ T5662] loop5: detected capacity change from 0 to 4096 [ 52.553526][ T5662] EXT4-fs: inline encryption not supported [ 52.556896][ T187] hsr_slave_1: left promiscuous mode [ 52.557366][ T187] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.557382][ T187] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.558449][ T187] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.558461][ T187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.570189][ T5662] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 52.570218][ T5662] EXT4-fs (loop5): Test dummy encryption mode enabled [ 52.576959][ T187] veth1_macvtap: left promiscuous mode [ 52.577009][ T187] veth0_macvtap: left promiscuous mode [ 52.577047][ T187] veth1_vlan: left promiscuous mode [ 52.577082][ T187] veth0_vlan: left promiscuous mode [ 52.582472][ T5662] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 52.582551][ T5662] System zones: 0-5 [ 52.586618][ T5662] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.672488][ T5446] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.787755][ T187] team0 (unregistering): Port device team_slave_1 removed [ 52.795973][ T187] team0 (unregistering): Port device team_slave_0 removed [ 52.853004][ T5680] cgroup: Bad value for 'name' [ 52.898864][ T5666] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.901871][ T5666] bridge_slave_1: left promiscuous mode [ 52.903127][ T5666] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.908195][ T5666] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 52.947472][ T4400] 8021q: adding VLAN 0 to HW filter on device eth1 [ 52.964944][ T4729] Bluetooth: hci3: command tx timeout [ 52.969316][ T4723] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.089327][ T5689] loop5: detected capacity change from 0 to 512 [ 53.235565][ T5689] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 53.238484][ T5689] EXT4-fs error (device loop5): ext4_get_journal_inode:5896: comm syz.5.191: inode #1792: comm syz.5.191: iget: illegal inode # [ 53.238512][ T5689] loop5: lost filesystem error report for type 5 error -117 [ 53.240954][ T5689] EXT4-fs (loop5): Remounting filesystem read-only [ 53.240973][ T5689] EXT4-fs (loop5): no journal found [ 53.240988][ T5689] EXT4-fs (loop5): can't get journal size [ 53.244989][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 53.244999][ C0] EXT4-fs (loop5): initial error at time 53: ext4_get_journal_inode:5896 [ 53.245011][ C0] EXT4-fs (loop5): last error at time 53: ext4_get_journal_inode:5896 [ 53.253259][ T5689] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 53.258020][ T5689] EXT4-fs (loop5): failed to initialize system zone (-22) [ 53.258125][ T5689] EXT4-fs (loop5): mount failed [ 53.298213][ T5697] loop0: detected capacity change from 0 to 2048 [ 53.316423][ T5697] loop0: p2 < > p4 [ 53.318599][ T5697] loop0: p4 size 8192 extends beyond EOD, truncated [ 53.489702][ T187] IPVS: stop unused estimator thread 0... [ 53.846974][ T5721] loop1: detected capacity change from 0 to 1024 [ 53.849415][ T5721] EXT4-fs: Ignoring removed nomblk_io_submit option [ 53.895449][ T5721] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.926809][ T4989] udevd[4989]: symlink '../../loop4' '/dev/disk/by-diskseq/138.tmp-b7:4' failed: Read-only file system [ 55.469246][ T4729] Bluetooth: hci3: command tx timeout [ 55.470884][ T5736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.203'. [ 55.470916][ T5736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.203'. [ 55.472479][ T5736] ip6gretap1: entered allmulticast mode [ 55.482674][ T4989] udevd[4989]: symlink '../../loop4' '/dev/disk/by-diskseq/138.tmp-b7:4' failed: Read-only file system [ 55.494461][ T4984] udevd[4984]: symlink '../../loop0' '/dev/disk/by-diskseq/145.tmp-b7:0' failed: Read-only file system [ 55.519748][ T4705] udevd[4705]: symlink '../../loop2' '/dev/disk/by-diskseq/141.tmp-b7:2' failed: Read-only file system [ 55.940273][ T4989] udevd[4989]: symlink '../../loop4' '/dev/disk/by-diskseq/138.tmp-b7:4' failed: Read-only file system [ 55.948245][ T4702] udevd[4702]: symlink '../../loop1' '/dev/disk/by-diskseq/131.tmp-b7:1' failed: Read-only file system [ 55.950853][ T4702] udevd[4702]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 56.491596][ T4984] udevd[4984]: symlink '../../loop1' '/dev/disk/by-diskseq/146.tmp-b7:1' failed: Read-only file system [ 56.492193][ T4984] udevd[4984]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 56.917588][ T4400] 8021q: adding VLAN 0 to HW filter on device eth2 [ 57.535927][ T4729] Bluetooth: hci3: command tx timeout [ 57.558259][ T4702] udevd[4702]: symlink '../../loop0' '/dev/disk/by-diskseq/145.tmp-b7:0' failed: Read-only file system [ 59.496066][ T5771] netlink: 'syz.5.208': attribute type 2 has an invalid length. [ 59.497666][ T5771] netlink: 119 bytes leftover after parsing attributes in process `syz.5.208'. [ 59.944277][ T5772] loop0: detected capacity change from 0 to 512 [ 60.525429][ T4989] udevd[4989]: symlink '../../loop5' '/dev/disk/by-diskseq/143.tmp-b7:5' failed: Read-only file system [ 60.533344][ T4702] udevd[4702]: symlink '../../loop2' '/dev/disk/by-diskseq/141.tmp-b7:2' failed: Read-only file system [ 60.952643][ T5782] loop2: detected capacity change from 0 to 512 [ 60.960849][ T5772] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.538982][ T4984] udevd[4984]: symlink '../../loop0' '/dev/disk/by-diskseq/145.tmp-b7:0' failed: Read-only file system [ 61.541050][ T4984] udevd[4984]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 61.542994][ T5784] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 62.034933][ T5782] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.212: inode has both inline data and extents flags [ 62.034975][ T5782] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 62.044842][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 62.044876][ C0] EXT4-fs (loop2): initial error at time 62: ext4_orphan_get:1397: inode 15 [ 62.044914][ C0] EXT4-fs (loop2): last error at time 62: ext4_orphan_get:1397: inode 15 [ 62.569625][ T4984] udevd[4984]: symlink '../../loop0' '/dev/disk/by-diskseq/145.tmp-b7:0' failed: Read-only file system [ 62.570408][ T4984] udevd[4984]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 62.571980][ T5782] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.212: couldn't read orphan inode 15 (err -117) [ 62.572008][ T5782] loop2: lost filesystem error report for type 5 error -117 [ 62.580601][ T5782] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.958365][ T4717] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.962157][ T5790] netlink: 'syz.5.214': attribute type 10 has an invalid length. [ 62.967792][ T5790] team0: Device vxcan1 is of different type [ 62.978381][ T4702] udevd[4702]: symlink '../../loop5' '/dev/disk/by-diskseq/143.tmp-b7:5' failed: Read-only file system [ 63.498953][ T5792] EXT4-fs error (device loop2): __ext4_add_entry:2412: inode #2: comm syz.2.212: Directory hole found for htree leaf block 0 [ 63.503622][ T5792] EXT4-fs error (device loop2): __ext4_add_entry:2412: inode #2: comm syz.2.212: Directory hole found for htree leaf block 0 [ 63.523579][ T4984] udevd[4984]: symlink '../../loop0' '/dev/disk/by-diskseq/147.tmp-b7:0' failed: Read-only file system [ 63.524499][ T4984] udevd[4984]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 63.528822][ T4989] udevd[4989]: symlink '../../loop2' '/dev/disk/by-diskseq/148.tmp-b7:2' failed: Read-only file system [ 64.491168][ T1595] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.491226][ T1595] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.513683][ T5802] loop0: detected capacity change from 0 to 1024 [ 64.937440][ T867] cfg80211: failed to load regulatory.db [ 65.538083][ T4702] udevd[4702]: symlink '../../loop5' '/dev/disk/by-diskseq/143.tmp-b7:5' failed: Read-only file system [ 65.552756][ T5802] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 65.958117][ T4723] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.978221][ T5814] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: block 3: comm syz.0.213: lblock 3 mapped to illegal pblock 3 (length 3) [ 66.507061][ T4705] udevd[4705]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 66.507476][ T4705] udevd[4705]: symlink '../../loop2' '/dev/disk/by-diskseq/148.tmp-b7:2' failed: Read-only file system [ 66.518942][ T5819] loop2: detected capacity change from 0 to 1024 [ 66.520370][ T4400] 8021q: adding VLAN 0 to HW filter on device eth3 [ 66.534021][ T5817] loop4: detected capacity change from 0 to 2048 [ 66.538265][ T4984] udevd[4984]: symlink '../../loop0' '/dev/disk/by-diskseq/147.tmp-b7:0' failed: Read-only file system [ 66.540924][ T4984] udevd[4984]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 66.977160][ T5814] EXT4-fs error (device loop0): ext4_ext_remove_space:2969: inode #15: comm syz.0.213: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 66.991770][ T5817] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.575636][ T4984] udevd[4984]: symlink '../../loop0' '/dev/disk/by-uuid/00000000-0000-0006-0000-000000000000.tmp-b7:0' failed: Read-only file system [ 67.962356][ T5819] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c028, mo2=0002] [ 67.962442][ T5819] System zones: 0-1, 3-8 [ 67.963030][ T5819] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 67.978628][ T4717] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 68.581642][ T4984] udevd[4984]: symlink '../../loop0' '/dev/disk/by-diskseq/150.tmp-b7:0' failed: Read-only file system [ 68.586798][ T4984] udevd[4984]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 68.587224][ T4984] udevd[4984]: symlink '../../loop0' '/dev/disk/by-uuid/00000000-0000-0006-0000-000000000000.tmp-b7:0' failed: Read-only file system [ 68.954246][ T4702] udevd[4702]: symlink '../../loop4' '/dev/disk/by-diskseq/138.tmp-b7:4' failed: Read-only file system [ 68.977073][ T5783] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 68.984857][ T5783] EXT4-fs (loop2): Remounting filesystem read-only [ 69.990595][ T4713] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.599507][ T4705] udevd[4705]: symlink '../../loop5' '/dev/disk/by-diskseq/143.tmp-b7:5' failed: Read-only file system [ 70.602767][ T4723] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 70.984705][ T4702] udevd[4702]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 71.305560][ T5842] nfs4: Unknown parameter 'smackfshat' [ 71.556413][ T5839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.556616][ T5839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.558027][ T4722] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 71.587818][ T5844] netlink: 24 bytes leftover after parsing attributes in process `syz.0.219'. [ 71.595817][ T4722] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 71.597689][ T4722] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 71.599841][ T4722] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 71.601350][ T4722] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 71.971229][ T4702] udevd[4702]: symlink '../../loop4' '/dev/disk/by-diskseq/153.tmp-b7:4' failed: Read-only file system [ 71.994320][ T4989] udevd[4989]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 72.579008][ T4702] udevd[4702]: symlink '../../loop4' '/dev/disk/by-diskseq/153.tmp-b7:4' failed: Read-only file system [ 72.591181][ T4989] udevd[4989]: symlink '../../loop2' '/dev/disk/by-uuid/00000000-0000-0006-0000-000000000000.tmp-b7:2' failed: Read-only file system [ 73.023373][ T4984] udevd[4984]: symlink '../../loop0' '/dev/disk/by-diskseq/150.tmp-b7:0' failed: Read-only file system [ 73.616373][ T4984] udevd[4984]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 73.617174][ T4984] udevd[4984]: symlink '../../loop0' '/dev/disk/by-uuid/00000000-0000-0006-0000-000000000000.tmp-b7:0' failed: Read-only file system [ 74.002593][ T4702] udevd[4702]: symlink '../../loop4' '/dev/disk/by-diskseq/153.tmp-b7:4' failed: Read-only file system [ 75.050182][ T4722] Bluetooth: hci5: command tx timeout [ 75.571290][ T5873] netlink: 'syz.0.228': attribute type 27 has an invalid length. [ 75.571329][ T5873] netlink: 'syz.0.228': attribute type 3 has an invalid length. [ 75.571475][ T5873] netlink: 132 bytes leftover after parsing attributes in process `syz.0.228'. [ 75.593885][ T5880] netlink: 16 bytes leftover after parsing attributes in process `syz.2.229'. [ 75.623703][ T4984] udevd[4984]: symlink '../../loop2' '/dev/disk/by-diskseq/152.tmp-b7:2' failed: Read-only file system [ 76.582761][ T4989] udevd[4989]: symlink '../../loop0' '/dev/disk/by-diskseq/150.tmp-b7:0' failed: Read-only file system [ 77.088699][ T4984] udevd[4984]: symlink '../../loop0' '/dev/disk/by-diskseq/156.tmp-b7:0' failed: Read-only file system [ 78.087359][ T4722] Bluetooth: hci5: command tx timeout [ 78.600273][ T4984] udevd[4984]: symlink '../../loop4' '/dev/disk/by-diskseq/154.tmp-b7:4' failed: Read-only file system [ 79.094341][ T4984] udevd[4984]: symlink '../../loop2' '/dev/disk/by-diskseq/155.tmp-b7:2' failed: Read-only file system [ 79.098915][ T5890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.099104][ T5890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.101860][ T5889] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.102318][ T5889] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.103629][ T5889] bridge0: entered allmulticast mode [ 80.122655][ T4984] udevd[4984]: symlink '../../loop5' '/dev/disk/by-diskseq/143.tmp-b7:5' failed: Read-only file system [ 80.609990][ T4989] udevd[4989]: symlink '../../loop2' '/dev/disk/by-diskseq/155.tmp-b7:2' failed: Read-only file system [ 81.079261][ T4722] Bluetooth: hci5: command tx timeout [ 81.607808][ T4984] udevd[4984]: symlink '../../loop5' '/dev/disk/by-diskseq/143.tmp-b7:5' failed: Read-only file system [ 82.605664][ T5908] loop5: detected capacity change from 0 to 8 [ 83.087596][ T4989] udevd[4989]: symlink '../../loop2' '/dev/disk/by-diskseq/155.tmp-b7:2' failed: Read-only file system [ 83.575629][ T4722] Bluetooth: hci5: command tx timeout [ 83.621808][ T4984] udevd[4984]: symlink '../../loop5' '/dev/disk/by-diskseq/157.tmp-b7:5' failed: Read-only file system [ 83.645740][ T4984] udevd[4984]: symlink '../../loop5' '/dev/disk/by-diskseq/157.tmp-b7:5' failed: Read-only file system [ 84.099886][ T5908] SQUASHFS error: zlib decompression failed, data probably corrupt [ 84.099928][ T5908] SQUASHFS error: Failed to read block 0x4e8: -5 [ 84.111526][ T5836] lo speed is unknown, defaulting to 1000 [ 84.346104][ T5917] loop2: detected capacity change from 0 to 512 [ 85.128399][ T4984] udevd[4984]: symlink '../../loop2' '/dev/disk/by-diskseq/158.tmp-b7:2' failed: Read-only file system [ 85.129375][ T4984] udevd[4984]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 86.142819][ T4984] udevd[4984]: symlink '../../loop2' '/dev/disk/by-diskseq/158.tmp-b7:2' failed: Read-only file system [ 86.143646][ T4984] udevd[4984]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 86.761153][ T5917] EXT4-fs: error -4 creating inode table initialization thread [ 86.761391][ T5917] EXT4-fs (loop2): mount failed [ 87.781982][ T4984] udevd[4984]: symlink '../../loop5' '/dev/disk/by-diskseq/157.tmp-b7:5' failed: Read-only file system [ 87.805481][ T4984] udevd[4984]: symlink '../../loop5' '/dev/disk/by-diskseq/157.tmp-b7:5' failed: Read-only file system [ 88.206023][ T4984] udevd[4984]: symlink '../../loop5' '/dev/disk/by-diskseq/159.tmp-b7:5' failed: Read-only file system [ 89.193124][ T4989] udevd[4989]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 89.194768][ T4989] udevd[4989]: symlink '../../loop2' '/dev/disk/by-diskseq/158.tmp-b7:2' failed: Read-only file system [ 89.818382][ T4984] udevd[4984]: symlink '../../loop2' '/dev/disk/by-diskseq/158.tmp-b7:2' failed: Read-only file system [ 90.207460][ T4984] udevd[4984]: symlink '../../loop2' '/dev/disk/by-diskseq/160.tmp-b7:2' failed: Read-only file system [ 90.248684][ T4984] udevd[4984]: symlink '../../loop2' '/dev/disk/by-diskseq/160.tmp-b7:2' failed: Read-only file system [ 91.242676][ T5941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.247757][ T5941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.109048][ T5947] netlink: 24 bytes leftover after parsing attributes in process `syz.2.239'. [ 92.335735][ T4729] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 92.351481][ T4729] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 92.360370][ T4984] udevd[4984]: symlink '../../loop5' '/dev/disk/by-diskseq/159.tmp-b7:5' failed: Read-only file system [ 92.834878][ T4729] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 92.858149][ T4989] udevd[4989]: symlink '../../loop4' '/dev/disk/by-diskseq/154.tmp-b7:4' failed: Read-only file system [ 92.864891][ T4729] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 92.865210][ T4729] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 93.294348][ T5956] loop4: detected capacity change from 0 to 512 [ 93.301301][ T5956] EXT4-fs: Ignoring removed nomblk_io_submit option [ 93.835351][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.835404][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.835566][ T5836] bridge_slave_0: entered allmulticast mode [ 93.836015][ T5836] bridge_slave_0: entered promiscuous mode [ 93.839316][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.839385][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.846960][ T5836] bridge_slave_1: entered allmulticast mode [ 93.849571][ T5836] bridge_slave_1: entered promiscuous mode [ 94.280542][ T5962] syz.5.242 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 94.872408][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.873426][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.897207][ T5964] loop2: detected capacity change from 0 to 128 [ 95.277212][ T5956] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 95.277839][ T5956] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 95.277859][ T5956] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e018, mo2=0002] [ 95.277884][ T5956] System zones: 0-1, 15-15, 18-18, 34-34 [ 95.278007][ T5956] EXT4-fs (loop4): orphan cleanup on readonly fs [ 95.278041][ T5956] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 95.278079][ T5956] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 95.278094][ T5956] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 95.285143][ T5956] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.241: bg 0: block 40: padding at end of block bitmap is not set [ 95.285231][ T5956] loop4: lost filesystem error report for type 5 error -117 [ 95.294838][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 95.294863][ C0] EXT4-fs (loop4): initial error at time 95: ext4_validate_block_bitmap:441 [ 95.294894][ C0] EXT4-fs (loop4): last error at time 95: ext4_validate_block_bitmap:441 [ 95.296152][ T5956] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 95.296185][ T5956] loop4: lost filesystem error report for type 5 error -117 [ 95.298638][ T4989] udevd[4989]: symlink '../../loop5' '/dev/disk/by-diskseq/159.tmp-b7:5' failed: Read-only file system [ 95.416410][ T5970] cgroup: subsys name conflicts with all [ 95.886293][ T5836] team0: Port device team_slave_0 added [ 95.895388][ T5836] team0: Port device team_slave_1 added [ 95.905180][ T5956] EXT4-fs (loop4): 1 truncate cleaned up [ 95.905659][ T5956] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 96.885504][ T4989] udevd[4989]: symlink '../../loop2' '/dev/disk/by-diskseq/160.tmp-b7:2' failed: Read-only file system [ 96.896911][ T4729] Bluetooth: hci6: command tx timeout [ 96.903038][ T4713] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.276923][ T4989] udevd[4989]: symlink '../../loop2' '/dev/disk/by-diskseq/162.tmp-b7:2' failed: Read-only file system [ 97.952853][ T4989] udevd[4989]: symlink '../../loop2' '/dev/disk/by-diskseq/162.tmp-b7:2' failed: Read-only file system [ 97.956362][ T4702] udevd[4702]: symlink '../../loop5' '/dev/disk/by-diskseq/159.tmp-b7:5' failed: Read-only file system [ 98.353089][ T4989] udevd[4989]: symlink '../../loop2' '/dev/disk/by-diskseq/162.tmp-b7:2' failed: Read-only file system [ 98.965083][ T4729] Bluetooth: hci6: command tx timeout [ 98.988135][ T4989] udevd[4989]: symlink '../../loop2' '/dev/disk/by-diskseq/163.tmp-b7:2' failed: Read-only file system [ 98.998505][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.345056][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.345164][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.345952][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.345968][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.345989][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.362344][ T4984] udevd[4984]: symlink '../../loop4' '/dev/disk/by-diskseq/161.tmp-b7:4' failed: Read-only file system [ 99.363314][ T4984] udevd[4984]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 99.977772][ T5836] hsr_slave_0: entered promiscuous mode [ 100.005262][ T5836] hsr_slave_1: entered promiscuous mode [ 100.005494][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 100.005511][ T5836] Cannot create hsr debugfs directory [ 100.337088][ T4984] udevd[4984]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 100.337543][ T4984] udevd[4984]: symlink '../../loop4' '/dev/disk/by-diskseq/161.tmp-b7:4' failed: Read-only file system [ 101.106529][ T4729] Bluetooth: hci6: command tx timeout [ 101.449680][ T4702] udevd[4702]: symlink '../../loop2' '/dev/disk/by-diskseq/163.tmp-b7:2' failed: Read-only file system [ 101.577182][ T5983] A link change request failed with some changes committed already. Interface syztnl2 may have been left with an inconsistent configuration, please check. [ 102.466697][ T4984] udevd[4984]: symlink '../../loop4' '/dev/disk/by-diskseq/161.tmp-b7:4' failed: Read-only file system [ 103.061237][ T4984] udevd[4984]: symlink '../../loop4' '/dev/disk/by-diskseq/164.tmp-b7:4' failed: Read-only file system [ 103.425216][ T4729] Bluetooth: hci6: command tx timeout [ 104.005508][ T5997] netlink: 14 bytes leftover after parsing attributes in process `syz.5.247'. [ 104.026242][ T4989] udevd[4989]: symlink '../../loop5' '/dev/disk/by-diskseq/159.tmp-b7:5' failed: Read-only file system [ 104.979099][ T6000] netlink: 14 bytes leftover after parsing attributes in process `syz.5.247'. [ 105.433389][ T4984] udevd[4984]: symlink '../../loop4' '/dev/disk/by-diskseq/164.tmp-b7:4' failed: Read-only file system [ 106.027139][ T4984] udevd[4984]: symlink '../../loop4' '/dev/disk/by-diskseq/164.tmp-b7:4' failed: Read-only file system [ 106.980685][ T4984] udevd[4984]: symlink '../../loop2' '/dev/disk/by-diskseq/163.tmp-b7:2' failed: Read-only file system [ 108.055026][ T6014] loop5: detected capacity change from 0 to 1024 [ 108.055751][ T6014] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 108.542061][ T5836] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 108.999655][ T5870] Set syz1 is full, maxelem 65536 reached [ 109.009455][ T6014] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.525775][ T5836] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 109.541157][ T4984] udevd[4984]: symlink '../../loop5' '/dev/disk/by-diskseq/159.tmp-b7:5' failed: Read-only file system [ 109.542696][ T4984] udevd[4984]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 109.554752][ T4984] udevd[4984]: symlink '../../loop5' '/dev/disk/by-diskseq/165.tmp-b7:5' failed: Read-only file system [ 109.562872][ T5942] lo speed is unknown, defaulting to 1000 [ 109.966586][ T5836] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 109.991274][ T4989] udevd[4989]: symlink '../../loop2' '/dev/disk/by-diskseq/163.tmp-b7:2' failed: Read-only file system [ 110.006119][ T4984] udevd[4984]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 110.548164][ T5836] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 110.548810][ T5836] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 110.559570][ T5836] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 110.997424][ T5836] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 111.578949][ T6014] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 111.584359][ T4989] udevd[4989]: symlink '../../loop4' '/dev/disk/by-diskseq/164.tmp-b7:4' failed: Read-only file system [ 111.599072][ T5836] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 112.580913][ T4984] udevd[4984]: symlink '../../loop4' '/dev/disk/by-diskseq/164.tmp-b7:4' failed: Read-only file system [ 113.014708][ T4984] udevd[4984]: symlink '../../loop2' '/dev/disk/by-diskseq/163.tmp-b7:2' failed: Read-only file system [ 113.018175][ T5446] EXT4-fs error (device loop5): ext4_iget_extra_inode:5128: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 113.597952][ T6041] loop2: detected capacity change from 0 to 128 [ 113.605442][ T6042] netlink: 60 bytes leftover after parsing attributes in process `syz.4.256'. [ 113.605715][ T6042] netlink: 12 bytes leftover after parsing attributes in process `syz.4.256'. [ 113.615896][ T5446] EXT4-fs error (device loop5): ext4_iget_extra_inode:5128: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 114.055923][ T4984] udevd[4984]: symlink '../../loop2' '/dev/disk/by-diskseq/166.tmp-b7:2' failed: Read-only file system [ 114.629350][ T4984] udevd[4984]: symlink '../../loop2' '/dev/disk/by-diskseq/166.tmp-b7:2' failed: Read-only file system [ 115.038698][ T4984] udevd[4984]: symlink '../../loop2' '/dev/disk/by-diskseq/166.tmp-b7:2' failed: Read-only file system [ 115.680989][ T4702] udevd[4702]: symlink '../../loop4' '/dev/disk/by-diskseq/164.tmp-b7:4' failed: Read-only file system [ 115.709531][ T4984] udevd[4984]: symlink '../../loop2' '/dev/disk/by-diskseq/167.tmp-b7:2' failed: Read-only file system [ 117.611719][ T4984] udevd[4984]: symlink '../../loop2' '/dev/disk/by-diskseq/167.tmp-b7:2' failed: Read-only file system [ 117.615818][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.629179][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.699395][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.699457][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.714604][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.714656][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.722820][ T5836] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 118.739066][ T4984] udevd[4984]: symlink '../../loop2' '/dev/disk/by-diskseq/167.tmp-b7:2' failed: Read-only file system [ 119.151768][ T5836] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 119.168593][ T4984] udevd[4984]: symlink '../../loop4' '/dev/disk/by-diskseq/164.tmp-b7:4' failed: Read-only file system [ 120.771602][ T6071] nfs4: Unknown parameter 'smackfshat' [ 121.096360][ T4984] udevd[4984]: symlink '../../loop2' '/dev/disk/by-diskseq/167.tmp-b7:2' failed: Read-only file system [ 122.665540][ T4984] udevd[4984]: symlink '../../loop2' '/dev/disk/by-diskseq/167.tmp-b7:2' failed: Read-only file system [ 122.713483][ T5942] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.722481][ T5942] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.722658][ T5942] bridge_slave_0: entered allmulticast mode [ 122.732570][ T5942] bridge_slave_0: entered promiscuous mode [ 122.734623][ T5942] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.084984][ T5942] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.085193][ T5942] bridge_slave_1: entered allmulticast mode [ 123.085702][ T5942] bridge_slave_1: entered promiscuous mode [ 123.726534][ T4984] udevd[4984]: symlink '../../loop4' '/dev/disk/by-diskseq/164.tmp-b7:4' failed: Read-only file system [ 123.764279][ T5942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.083216][ T5942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.099093][ T5942] team0: Port device team_slave_0 added [ 124.099867][ T5942] team0: Port device team_slave_1 added [ 124.109623][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.109633][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.109644][ T5942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.110205][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.110212][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.110225][ T5942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.334438][ T6100] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 124.758418][ T4984] udevd[4984]: symlink '../../loop4' '/dev/disk/by-diskseq/164.tmp-b7:4' failed: Read-only file system [ 125.098802][ T3050] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.775733][ T5942] hsr_slave_0: entered promiscuous mode [ 125.776111][ T5942] hsr_slave_1: entered promiscuous mode [ 125.778822][ T5942] debugfs: 'hsr0' already exists in 'hsr' [ 125.778849][ T5942] Cannot create hsr debugfs directory [ 126.085491][ T1595] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.085533][ T1595] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.755191][ T3050] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.763945][ T4722] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 128.160553][ T4722] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 128.161551][ T4722] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 128.162196][ T4722] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 128.163066][ T4722] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 128.758907][ T4702] udevd[4702]: symlink '../../loop2' '/dev/disk/by-diskseq/167.tmp-b7:2' failed: Read-only file system [ 130.164121][ T4984] udevd[4984]: symlink '../../loop4' '/dev/disk/by-diskseq/164.tmp-b7:4' failed: Read-only file system [ 130.744928][ T4722] Bluetooth: hci2: command tx timeout [ 131.217521][ T4729] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 131.242011][ T4729] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 131.246865][ T4729] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 131.252138][ T4729] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 132.790694][ T4984] udevd[4984]: symlink '../../loop4' '/dev/disk/by-diskseq/164.tmp-b7:4' failed: Read-only file system [ 132.828953][ T4729] Bluetooth: hci2: command tx timeout [ 132.839886][ T5942] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 132.841168][ T4715] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 133.302465][ T4984] udevd[4984]: symlink '../../loop2' '/dev/disk/by-diskseq/167.tmp-b7:2' failed: Read-only file system [ 133.308048][ T5942] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 133.720154][ T6129] netlink: 'syz.4.270': attribute type 6 has an invalid length. [ 134.241855][ T5942] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 134.738861][ T5942] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 134.739247][ T5942] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 135.234910][ T4722] Bluetooth: hci2: command tx timeout [ 135.262932][ T4984] udevd[4984]: symlink '../../loop4' '/dev/disk/by-diskseq/164.tmp-b7:4' failed: Read-only file system [ 135.289974][ T5942] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 135.303408][ T4989] udevd[4989]: symlink '../../loop2' '/dev/disk/by-diskseq/167.tmp-b7:2' failed: Read-only file system [ 135.775076][ T4722] Bluetooth: hci3: command tx timeout [ 135.776309][ T6144] batadv_slave_1: entered promiscuous mode [ 135.786900][ T6144] netlink: 'syz.4.272': attribute type 1 has an invalid length. [ 135.786930][ T6144] netlink: 'syz.4.272': attribute type 2 has an invalid length. [ 135.787581][ T6144] netlink: 'syz.4.272': attribute type 1 has an invalid length. [ 135.787599][ T6144] netlink: 'syz.4.272': attribute type 2 has an invalid length. [ 136.008687][ T6147] nfs4: Unknown parameter 'smackfshat' [ 137.738870][ T4722] Bluetooth: hci2: command tx timeout [ 138.236276][ T4722] Bluetooth: hci3: command tx timeout [ 138.262104][ T4984] udevd[4984]: symlink '../../loop2' '/dev/disk/by-diskseq/167.tmp-b7:2' failed: Read-only file system [ 138.276248][ T6152] fuse: fd is not a fuse device [ 138.922922][ T3050] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.697139][ T4984] udevd[4984]: symlink '../../loop2' '/dev/disk/by-diskseq/167.tmp-b7:2' failed: Read-only file system [ 139.960620][ T6154] loop2: detected capacity change from 0 to 512 [ 140.650601][ T4722] Bluetooth: hci3: command tx timeout [ 140.674330][ T4984] udevd[4984]: symlink '../../loop2' '/dev/disk/by-diskseq/168.tmp-b7:2' failed: Read-only file system [ 140.677769][ T4984] udevd[4984]: symlink '../../loop2' '/dev/disk/by-diskseq/168.tmp-b7:2' failed: Read-only file system [ 140.886223][ T4984] udevd[4984]: symlink '../../loop2' '/dev/disk/by-diskseq/168.tmp-b7:2' failed: Read-only file system [ 141.650573][ T4984] udevd[4984]: symlink '../../loop2' '/dev/disk/by-diskseq/169.tmp-b7:2' failed: Read-only file system [ 142.732176][ T4722] Bluetooth: hci3: command tx timeout [ 143.660845][ T4984] udevd[4984]: symlink '../../loop2' '/dev/disk/by-diskseq/169.tmp-b7:2' failed: Read-only file system [ 143.725911][ T5942] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 143.735733][ T6161] netlink: 8 bytes leftover after parsing attributes in process `syz.2.277'. [ 143.736561][ T6161] netlink: 4 bytes leftover after parsing attributes in process `syz.2.277'. [ 143.964579][ T5942] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 144.701661][ T6107] lo speed is unknown, defaulting to 1000 [ 145.746600][ T4984] udevd[4984]: symlink '../../loop2' '/dev/disk/by-diskseq/169.tmp-b7:2' failed: Read-only file system [ 145.951049][ T3050] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.005181][ T6144] batadv_slave_1: left promiscuous mode [ 146.749188][ T4984] udevd[4984]: symlink '../../loop2' '/dev/disk/by-diskseq/169.tmp-b7:2' failed: Read-only file system [ 147.028054][ T5942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.029858][ T4984] udevd[4984]: symlink '../../loop4' '/dev/disk/by-diskseq/164.tmp-b7:4' failed: Read-only file system [ 147.721411][ T6179] Invalid ELF header magic: != ELF [ 147.723358][ T5942] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.733964][ T5942] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 147.733996][ T5942] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 148.009318][ T6179] input: syz1 as /devices/virtual/input/input3 [ 148.037812][ T3262] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.037856][ T3262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.041275][ T3262] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.041316][ T3262] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.746119][ T6123] lo speed is unknown, defaulting to 1000 [ 149.036512][ T4984] udevd[4984]: symlink '../../loop2' '/dev/disk/by-diskseq/169.tmp-b7:2' failed: Read-only file system [ 149.047144][ T6187] loop2: detected capacity change from 0 to 512 [ 149.713923][ T6187] EXT4-fs: inline encryption not supported [ 149.714679][ T6187] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 149.718318][ T6187] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2860: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 149.718374][ T6187] EXT4-fs (loop2): 1 truncate cleaned up [ 149.719041][ T6187] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.080862][ T6194] netlink: 64 bytes leftover after parsing attributes in process `syz.4.283'. [ 151.069917][ T4723] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.074614][ T4989] udevd[4989]: symlink '../../loop2' '/dev/disk/by-diskseq/170.tmp-b7:2' failed: Read-only file system [ 151.711664][ T4984] udevd[4984]: symlink '../../loop4' '/dev/disk/by-diskseq/164.tmp-b7:4' failed: Read-only file system [ 152.122068][ T4989] udevd[4989]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 152.903121][ T6200] nfs4: Unknown parameter 'smackfshat' [ 153.095880][ T4989] udevd[4989]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 153.101656][ T4989] udevd[4989]: symlink '../../loop2' '/dev/disk/by-diskseq/170.tmp-b7:2' failed: Read-only file system [ 153.748395][ T4984] udevd[4984]: symlink '../../loop4' '/dev/disk/by-diskseq/164.tmp-b7:4' failed: Read-only file system [ 153.762793][ T4989] udevd[4989]: symlink '../../loop2' '/dev/disk/by-diskseq/170.tmp-b7:2' failed: Read-only file system [ 154.094999][ T4984] udevd[4984]: symlink '../../loop2' '/dev/disk/by-diskseq/170.tmp-b7:2' failed: Read-only file system [ 154.106302][ T4729] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 154.135930][ T4729] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 154.137474][ T4729] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 154.139818][ T4729] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 154.141219][ T4729] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 154.796341][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 154.796396][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 155.100877][ T4984] udevd[4984]: symlink '../../loop2' '/dev/disk/by-diskseq/171.tmp-b7:2' failed: Read-only file system [ 155.817636][ T6217] loop2: detected capacity change from 0 to 256 [ 155.853705][ T4984] udevd[4984]: symlink '../../loop2' '/dev/disk/by-diskseq/172.tmp-b7:2' failed: Read-only file system [ 156.905026][ T3050] bridge_slave_0: left allmulticast mode [ 156.905066][ T3050] bridge_slave_0: left promiscuous mode [ 156.905180][ T3050] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.144996][ T4715] Bluetooth: hci5: command tx timeout [ 157.559835][ T3050] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 158.852433][ T3050] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.938491][ T3050] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.274932][ T4715] Bluetooth: hci5: command tx timeout [ 159.287248][ T3050] bond0 (unregistering): Released all slaves [ 159.294641][ T3050] bond1 (unregistering): (slave veth3): Releasing active interface [ 159.789781][ T3050] bond1 (unregistering): Released all slaves [ 161.285223][ T4715] Bluetooth: hci5: command tx timeout [ 163.365729][ T4715] Bluetooth: hci5: command tx timeout [ 163.890512][ T6237] udevd[6237]: symlink '../../loop2' '/dev/disk/by-diskseq/173.tmp-b7:2' failed: Read-only file system [ 164.824351][ T6237] udevd[6237]: symlink '../../loop4' '/dev/disk/by-diskseq/164.tmp-b7:4' failed: Read-only file system [ 164.844555][ T6107] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.424530][ T6107] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.424699][ T6107] bridge_slave_0: entered allmulticast mode [ 165.425395][ T6107] bridge_slave_0: entered promiscuous mode [ 165.439150][ T6237] udevd[6237]: symlink '../../loop2' '/dev/disk/by-diskseq/173.tmp-b7:2' failed: Read-only file system [ 165.884226][ T6250] loop2: detected capacity change from 0 to 512 [ 166.846357][ T6253] udevd[6253]: symlink '../../loop4' '/dev/disk/by-diskseq/164.tmp-b7:4' failed: Read-only file system [ 166.875185][ T6107] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.875237][ T6107] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.875420][ T6107] bridge_slave_1: entered allmulticast mode [ 166.875909][ T6107] bridge_slave_1: entered promiscuous mode [ 167.358431][ T6107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.379511][ T6237] udevd[6237]: symlink '../../loop2' '/dev/disk/by-diskseq/174.tmp-b7:2' failed: Read-only file system [ 167.386545][ T6237] udevd[6237]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 167.399571][ T4400] 8021q: adding VLAN 0 to HW filter on device eth4 [ 167.842557][ T6123] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.842886][ T6123] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.843104][ T6123] bridge_slave_0: entered allmulticast mode [ 167.843650][ T6123] bridge_slave_0: entered promiscuous mode [ 167.844651][ T6123] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.844779][ T6123] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.845645][ T6250] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 167.845705][ T6250] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 167.845719][ T6250] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.288: Corrupt directory, running e2fsck is recommended [ 167.852399][ T6250] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 167.852453][ T6250] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.288: corrupted in-inode xattr: invalid ea_ino [ 167.852469][ T6250] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 167.854834][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 167.854853][ C1] EXT4-fs (loop2): initial error at time 167: ext4_iget_extra_inode:5128: inode 15 [ 167.854889][ C1] EXT4-fs (loop2): last error at time 167: ext4_iget_extra_inode:5128: inode 15 [ 168.385812][ T6250] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.288: couldn't read orphan inode 15 (err -117) [ 168.388021][ T6250] loop2: lost filesystem error report for type 5 error -117 [ 168.401321][ T6123] bridge_slave_1: entered allmulticast mode [ 168.446978][ T6123] bridge_slave_1: entered promiscuous mode [ 168.454266][ T6107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.840273][ T6237] udevd[6237]: symlink '../../loop4' '/dev/disk/by-diskseq/164.tmp-b7:4' failed: Read-only file system [ 168.852172][ T6107] team0: Port device team_slave_0 added [ 168.854135][ T6107] team0: Port device team_slave_1 added [ 168.855629][ T6250] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.860738][ T6250] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 168.865863][ T6250] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 168.865906][ T6250] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.288: Corrupt directory, running e2fsck is recommended [ 168.872695][ T6250] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 168.872713][ T6250] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 168.872726][ T6250] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.288: Corrupt directory, running e2fsck is recommended [ 168.872752][ T6250] EXT4-fs error (device loop2): ext4_find_dest_de:2050: inode #2: block 3: comm syz.2.288: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 169.445032][ T4722] Bluetooth: hci4: command 0x0406 tx timeout [ 169.464218][ T6204] lo speed is unknown, defaulting to 1000 [ 169.473291][ T6262] EXT4-fs error (device loop2): ext4_find_dest_de:2050: inode #2: block 3: comm syz.2.288: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 169.837676][ T6261] loop4: detected capacity change from 0 to 4096 [ 169.838189][ T6261] ext4: Unknown parameter 'pcr' [ 169.859299][ T6237] udevd[6237]: symlink '../../loop4' '/dev/disk/by-diskseq/175.tmp-b7:4' failed: Read-only file system [ 170.502911][ T6237] udevd[6237]: symlink '../../loop4' '/dev/disk/by-diskseq/175.tmp-b7:4' failed: Read-only file system [ 170.512045][ T6237] udevd[6237]: symlink '../../loop4' '/dev/disk/by-diskseq/175.tmp-b7:4' failed: Read-only file system [ 170.898449][ T6237] udevd[6237]: symlink '../../loop4' '/dev/disk/by-diskseq/176.tmp-b7:4' failed: Read-only file system [ 170.905946][ T6237] udevd[6237]: symlink '../../loop4' '/dev/disk/by-diskseq/176.tmp-b7:4' failed: Read-only file system [ 171.881933][ T6267] netlink: 16 bytes leftover after parsing attributes in process `syz.4.293'. [ 171.882474][ T6267] netlink: 'syz.4.293': attribute type 1 has an invalid length. [ 171.917148][ T6237] udevd[6237]: symlink '../../loop4' '/dev/disk/by-diskseq/176.tmp-b7:4' failed: Read-only file system [ 171.969464][ T4723] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.010244][ T6253] udevd[6253]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 173.017912][ T6237] udevd[6237]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 173.020504][ T6253] udevd[6253]: symlink '../../loop2' '/dev/disk/by-diskseq/174.tmp-b7:2' failed: Read-only file system [ 173.467678][ T6237] udevd[6237]: symlink '../../loop2' '/dev/disk/by-diskseq/174.tmp-b7:2' failed: Read-only file system [ 173.743157][ T6274] nfs4: Unknown parameter 'smackfshat' [ 173.983565][ T6267] 8021q: adding VLAN 0 to HW filter on device bond1 [ 174.013185][ T6268] bond1: entered allmulticast mode [ 174.035249][ T6123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.526209][ T6123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.552038][ T6123] team0: Port device team_slave_0 added [ 174.553477][ T6107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.982051][ T6107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.982148][ T6107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.984921][ T6107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.984940][ T6107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.984967][ T6107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.526552][ T6237] udevd[6237]: symlink '../../loop2' '/dev/disk/by-diskseq/177.tmp-b7:2' failed: Read-only file system [ 175.555293][ T6237] udevd[6237]: symlink '../../loop4' '/dev/disk/by-diskseq/176.tmp-b7:4' failed: Read-only file system [ 176.023590][ T6289] loop4: detected capacity change from 0 to 256 [ 176.023985][ T6289] vfat: Unknown parameter 'nnonumtail' [ 176.538812][ T6237] udevd[6237]: symlink '../../loop2' '/dev/disk/by-diskseq/177.tmp-b7:2' failed: Read-only file system [ 177.059821][ T6253] udevd[6253]: symlink '../../loop4' '/dev/disk/by-diskseq/178.tmp-b7:4' failed: Read-only file system [ 177.062573][ T6293] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 177.596883][ T6237] udevd[6237]: symlink '../../loop4' '/dev/disk/by-diskseq/178.tmp-b7:4' failed: Read-only file system [ 177.993574][ T6237] udevd[6237]: symlink '../../loop4' '/dev/disk/by-diskseq/178.tmp-b7:4' failed: Read-only file system [ 178.525803][ T6237] udevd[6237]: symlink '../../loop4' '/dev/disk/by-diskseq/179.tmp-b7:4' failed: Read-only file system [ 178.530803][ T6237] udevd[6237]: symlink '../../loop4' '/dev/disk/by-diskseq/179.tmp-b7:4' failed: Read-only file system [ 178.546069][ T6123] team0: Port device team_slave_1 added [ 178.547666][ T6107] hsr_slave_0: entered promiscuous mode [ 178.550612][ T6107] hsr_slave_1: entered promiscuous mode [ 178.552090][ T6107] debugfs: 'hsr0' already exists in 'hsr' [ 178.553235][ T6107] Cannot create hsr debugfs directory [ 178.797913][ T6305] loop4: detected capacity change from 0 to 128 [ 179.097508][ T6305] FAT-fs (loop4): Directory bread(block 414) failed [ 179.098694][ T6305] FAT-fs (loop4): Directory bread(block 415) failed [ 179.098709][ T6305] FAT-fs (loop4): Directory bread(block 416) failed [ 179.098723][ T6305] FAT-fs (loop4): Directory bread(block 417) failed [ 179.098735][ T6305] FAT-fs (loop4): Directory bread(block 418) failed [ 179.098746][ T6305] FAT-fs (loop4): Directory bread(block 419) failed [ 179.098757][ T6305] FAT-fs (loop4): Directory bread(block 420) failed [ 179.098767][ T6305] FAT-fs (loop4): Directory bread(block 421) failed [ 179.552531][ T6237] udevd[6237]: symlink '../../loop4' '/dev/disk/by-diskseq/180.tmp-b7:4' failed: Read-only file system [ 180.117055][ T6237] udevd[6237]: symlink '../../loop4' '/dev/disk/by-diskseq/180.tmp-b7:4' failed: Read-only file system [ 180.538078][ T6311] loop4: detected capacity change from 0 to 512 [ 180.564207][ T6311] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 180.585164][ T6311] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 180.586192][ T6311] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.299: Corrupt directory, running e2fsck is recommended [ 181.087636][ T3050] hsr_slave_0: left promiscuous mode [ 181.546595][ T6311] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 181.569120][ T3050] hsr_slave_1: left promiscuous mode [ 181.569777][ T3050] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.569795][ T3050] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.577224][ T3050] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.577253][ T3050] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.586826][ T6311] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.299: corrupted in-inode xattr: invalid ea_ino [ 181.586874][ T6311] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 181.589733][ T6311] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.299: couldn't read orphan inode 15 (err -117) [ 181.589760][ T6311] loop4: lost filesystem error report for type 5 error -117 [ 181.594262][ T6311] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.608991][ T6253] udevd[6253]: symlink '../../loop2' '/dev/disk/by-diskseq/177.tmp-b7:2' failed: Read-only file system [ 182.081325][ T6311] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 182.081370][ T6311] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 182.081389][ T6311] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.299: Corrupt directory, running e2fsck is recommended [ 182.094391][ T6311] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 182.094420][ T6311] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 182.095370][ T6311] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.299: Corrupt directory, running e2fsck is recommended [ 182.095625][ T6311] EXT4-fs error (device loop4): ext4_find_dest_de:2050: inode #2: block 3: comm syz.4.299: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 182.140531][ T6237] udevd[6237]: symlink '../../loop4' '/dev/disk/by-diskseq/180.tmp-b7:4' failed: Read-only file system [ 182.549926][ T3050] veth1_macvtap: left promiscuous mode [ 182.549980][ T3050] veth0_macvtap: left promiscuous mode [ 182.554932][ T3050] veth1_vlan: left promiscuous mode [ 182.554970][ T3050] veth0_vlan: left promiscuous mode [ 182.557321][ T6237] udevd[6237]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 183.099338][ T6322] EXT4-fs error (device loop4): ext4_find_dest_de:2050: inode #2: block 3: comm syz.4.299: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 183.600524][ T6237] udevd[6237]: symlink '../../loop4' '/dev/disk/by-diskseq/182.tmp-b7:4' failed: Read-only file system [ 183.603063][ T6237] udevd[6237]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 183.625444][ T4713] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.609133][ T6237] udevd[6237]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 184.615451][ T6237] udevd[6237]: symlink '../../loop4' '/dev/disk/by-diskseq/182.tmp-b7:4' failed: Read-only file system [ 184.629994][ T6237] udevd[6237]: symlink '../../loop4' '/dev/disk/by-diskseq/182.tmp-b7:4' failed: Read-only file system [ 184.641803][ T6237] udevd[6237]: symlink '../../loop4' '/dev/disk/by-diskseq/183.tmp-b7:4' failed: Read-only file system [ 185.396712][ T6332] nfs4: Unknown parameter 'smackfshat' [ 185.663714][ T3050] team0 (unregistering): Port device team_slave_1 removed [ 185.670818][ T3050] team0 (unregistering): Port device team_slave_0 removed [ 186.706256][ T6237] udevd[6237]: symlink '../../loop4' '/dev/disk/by-diskseq/183.tmp-b7:4' failed: Read-only file system [ 187.672728][ T1595] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.672787][ T1595] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.754884][ T4400] 8021q: adding VLAN 0 to HW filter on device eth5 [ 188.202191][ T6123] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.202227][ T6123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.202258][ T6123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.203793][ T6123] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.203809][ T6123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.203829][ T6123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.223714][ T6237] udevd[6237]: symlink '../../loop2' '/dev/disk/by-diskseq/177.tmp-b7:2' failed: Read-only file system [ 189.212303][ T6237] udevd[6237]: symlink '../../loop4' '/dev/disk/by-diskseq/183.tmp-b7:4' failed: Read-only file system [ 189.248899][ T6340] loop4: detected capacity change from 0 to 1024 [ 189.711221][ T6237] udevd[6237]: symlink '../../loop4' '/dev/disk/by-diskseq/184.tmp-b7:4' failed: Read-only file system [ 189.712553][ T6237] udevd[6237]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 189.717898][ T6340] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 189.725335][ T6237] udevd[6237]: symlink '../../loop4' '/dev/disk/by-uuid/00000000-0000-0006-0000-000000000000.tmp-b7:4' failed: Read-only file system [ 190.207123][ T4713] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 191.193637][ T6237] udevd[6237]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 191.194427][ T6237] udevd[6237]: symlink '../../loop4' '/dev/disk/by-diskseq/184.tmp-b7:4' failed: Read-only file system [ 191.207614][ T6351] loop4: detected capacity change from 0 to 512 [ 191.212180][ T6351] EXT4-fs: Ignoring removed oldalloc option [ 193.185611][ T6351] EXT4-fs: Mount option(s) incompatible with ext2 [ 193.207903][ T6253] udevd[6253]: symlink '../../loop2' '/dev/disk/by-diskseq/177.tmp-b7:2' failed: Read-only file system [ 194.270673][ T6237] udevd[6237]: symlink '../../loop4' '/dev/disk/by-diskseq/184.tmp-b7:4' failed: Read-only file system [ 194.282346][ T6237] udevd[6237]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 194.303504][ T6363] overlayfs: upper fs does not support file handles, falling back to index=off. [ 194.816820][ T6237] udevd[6237]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 194.825153][ T4722] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 194.829685][ T6237] udevd[6237]: symlink '../../loop4' '/dev/disk/by-diskseq/184.tmp-b7:4' failed: Read-only file system [ 194.897985][ T6360] loop4: detected capacity change from 0 to 128 [ 195.319959][ T6237] udevd[6237]: symlink '../../loop4' '/dev/disk/by-diskseq/185.tmp-b7:4' failed: Read-only file system [ 195.845130][ T6237] udevd[6237]: symlink '../../loop4' '/dev/disk/by-label/SYZKALLER.tmp-b7:4' failed: Read-only file system [ 195.845749][ T6237] udevd[6237]: symlink '../../loop4' '/dev/disk/by-uuid/1DC8-5927.tmp-b7:4' failed: Read-only file system [ 196.409053][ T6237] udevd[6237]: symlink '../../loop4' '/dev/disk/by-diskseq/186.tmp-b7:4' failed: Read-only file system [ 196.416036][ T6237] udevd[6237]: symlink '../../loop4' '/dev/disk/by-label/SYZKALLER.tmp-b7:4' failed: Read-only file system [ 197.025214][ T4722] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 197.807627][ T4725] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 197.809438][ T6381] loop2: detected capacity change from 0 to 128 [ 197.810213][ T4725] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 197.810659][ T4725] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 197.811066][ T4725] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 197.811305][ T4725] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 198.394467][ T6204] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.398370][ T6204] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.398558][ T6204] bridge_slave_0: entered allmulticast mode [ 198.399057][ T6204] bridge_slave_0: entered promiscuous mode [ 198.423902][ T6381] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 198.431937][ T6204] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.433271][ T6204] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.434978][ T6204] bridge_slave_1: entered allmulticast mode [ 198.815207][ T6204] bridge_slave_1: entered promiscuous mode [ 198.822562][ T6204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.832089][ T6237] udevd[6237]: symlink '../../loop4' '/dev/disk/by-diskseq/188.tmp-b7:4' failed: Read-only file system [ 199.436700][ T6384] udevd[6384]: symlink '../../loop4' '/dev/disk/by-diskseq/188.tmp-b7:4' failed: Read-only file system [ 199.783713][ T4715] Bluetooth: hci6: Opcode 0x1001 failed: -110 [ 199.817461][ T6204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.824954][ T4722] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 199.828677][ T6384] udevd[6384]: symlink '../../loop4' '/dev/disk/by-diskseq/188.tmp-b7:4' failed: Read-only file system [ 200.457418][ T6253] udevd[6253]: symlink '../../loop2' '/dev/disk/by-diskseq/177.tmp-b7:2' failed: Read-only file system [ 200.837079][ T4725] Bluetooth: hci7: command tx timeout [ 200.848081][ T4725] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 201.429225][ T4725] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 201.430016][ T4725] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 201.430729][ T4725] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 201.430974][ T4725] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 201.437513][ T6398] netlink: 8 bytes leftover after parsing attributes in process `syz.4.310'. [ 201.444608][ T6384] udevd[6384]: symlink '../../loop2' '/dev/disk/by-diskseq/189.tmp-b7:2' failed: Read-only file system [ 202.493651][ T6384] udevd[6384]: symlink '../../loop2' '/dev/disk/by-diskseq/189.tmp-b7:2' failed: Read-only file system [ 202.895896][ T4722] Bluetooth: hci7: command tx timeout [ 203.522927][ T4722] Bluetooth: hci6: command tx timeout [ 203.547777][ T6384] udevd[6384]: symlink '../../loop2' '/dev/disk/by-diskseq/189.tmp-b7:2' failed: Read-only file system [ 203.563836][ T6384] udevd[6384]: symlink '../../loop2' '/dev/disk/by-diskseq/189.tmp-b7:2' failed: Read-only file system [ 203.906358][ T6384] udevd[6384]: symlink '../../loop2' '/dev/disk/by-diskseq/189.tmp-b7:2' failed: Read-only file system [ 203.909577][ T6404] loop2: detected capacity change from 0 to 128 [ 203.945756][ T6384] udevd[6384]: symlink '../../loop2' '/dev/disk/by-diskseq/192.tmp-b7:2' failed: Read-only file system [ 203.948498][ T6384] udevd[6384]: symlink '../../loop2' '/dev/disk/by-label/SYZKALLER.tmp-b7:2' failed: Read-only file system [ 204.578065][ T6384] udevd[6384]: symlink '../../loop2' '/dev/disk/by-uuid/1DC8-5927.tmp-b7:2' failed: Read-only file system [ 205.014964][ T4722] Bluetooth: hci7: command tx timeout [ 205.080869][ T4400] 8021q: adding VLAN 0 to HW filter on device eth6 [ 205.570444][ T6204] team0: Port device team_slave_0 added [ 206.544872][ T4722] Bluetooth: hci6: command tx timeout [ 206.566933][ T6384] udevd[6384]: symlink '../../loop2' '/dev/disk/by-diskseq/192.tmp-b7:2' failed: Read-only file system [ 207.060116][ T6384] udevd[6384]: symlink '../../loop2' '/dev/disk/by-diskseq/192.tmp-b7:2' failed: Read-only file system [ 207.113301][ T6384] udevd[6384]: symlink '../../loop2' '/dev/disk/by-diskseq/193.tmp-b7:2' failed: Read-only file system [ 207.535102][ T4722] Bluetooth: hci7: command tx timeout [ 207.546252][ T6237] udevd[6237]: symlink '../../loop4' '/dev/disk/by-diskseq/190.tmp-b7:4' failed: Read-only file system [ 208.565164][ T4722] Bluetooth: hci6: command tx timeout [ 209.120031][ T6384] udevd[6384]: symlink '../../loop2' '/dev/disk/by-diskseq/193.tmp-b7:2' failed: Read-only file system [ 209.132695][ T6423] loop2: detected capacity change from 0 to 1024 [ 209.136164][ T6423] EXT4-fs: Ignoring removed nomblk_io_submit option [ 209.620071][ T6384] udevd[6384]: symlink '../../loop2' '/dev/disk/by-diskseq/194.tmp-b7:2' failed: Read-only file system [ 209.624902][ T6423] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6042c028, mo2=0102] [ 209.626377][ T6423] System zones: 0-1, 3-12 [ 210.087952][ T6384] udevd[6384]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 210.097044][ T6423] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.611287][ T6204] team0: Port device team_slave_1 added [ 211.097349][ T4722] Bluetooth: hci6: command tx timeout [ 211.103964][ T6204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.644870][ T6204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.644942][ T6204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.645804][ T6204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.645820][ T6204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.645842][ T6204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.605296][ T31] INFO: task syz.1.198:5726 blocked for more than 144 seconds. [ 213.605328][ T31] Tainted: G L syzkaller #0 [ 213.605348][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 213.605357][ T31] task:syz.1.198 state:D stack:0 pid:5726 tgid:5706 ppid:4712 task_flags:0x400040 flags:0x00000001 [ 213.605380][ T31] Call trace: [ 213.605387][ T31] __switch_to+0x2b0/0x6e0 (T) [ 213.605409][ T31] __schedule+0x1bec/0x2dcc [ 213.605423][ T31] schedule+0x140/0x218 [ 213.605436][ T31] schedule_preempt_disabled+0x18/0x2c [ 213.605449][ T31] rwsem_down_write_slowpath+0x6b8/0x113c [ 213.605464][ T31] down_write+0xb4/0xc0 [ 213.605478][ T31] blkdev_fallocate+0x22c/0x354 [ 213.605490][ T31] vfs_fallocate+0x514/0x650 [ 213.605504][ T31] madvise_vma_behavior+0x2778/0x3440 [ 213.605517][ T31] madvise_walk_vmas+0x4b4/0x9a4 [ 213.605528][ T31] madvise_do_behavior+0x5f4/0x7c4 [ 213.605539][ T31] do_madvise+0x1ac/0x278 [ 213.605550][ T31] __arm64_sys_madvise+0xa4/0xc0 [ 213.605562][ T31] invoke_syscall+0x98/0x244 [ 213.605577][ T31] el0_svc_common+0xe8/0x23c [ 213.605590][ T31] do_el0_svc+0x48/0x58 [ 213.605604][ T31] el0_svc+0x64/0x260 [ 213.605615][ T31] el0t_64_sync_handler+0x48/0x148 [ 213.605626][ T31] el0t_64_sync+0x198/0x19c [ 213.605660][ T31] [ 213.605660][ T31] Showing all locks held in the system: [ 213.605668][ T31] 2 locks held by kworker/u8:1/15: [ 213.605676][ T31] #0: ffff0000c004c940 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x748/0x1098 [ 213.605726][ T31] #1: ffff80008eae7c40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x750/0x1098 [ 213.605770][ T31] 1 lock held by khungtaskd/31: [ 213.605778][ T31] #0: ffff800088b672a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x4c/0x188 [ 213.605825][ T31] 2 locks held by kworker/u8:5/1346: [ 213.605836][ T31] 3 locks held by kworker/u8:7/3050: [ 213.605843][ T31] 4 locks held by kworker/u8:8/3148: [ 213.605851][ T31] 2 locks held by kworker/u8:10/3392: [ 213.605859][ T31] #0: ffff0000c004c940 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x748/0x1098 [ 213.605905][ T31] #1: ffff80009b0f7c40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x750/0x1098 [ 213.605945][ T31] 2 locks held by kworker/u8:13/3847: [ 213.605953][ T31] #0: ffff0000c004c940 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x748/0x1098 [ 213.605998][ T31] #1: ffff80009cc67c40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x750/0x1098 [ 213.606039][ T31] 2 locks held by getty/4495: [ 213.606046][ T31] #0: ffff0000cad5c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 213.606086][ T31] #1: ffff80009232e2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x354/0xf84 [ 213.606135][ T31] 1 lock held by syz-executor/4713: [ 213.606144][ T31] 3 locks held by kworker/u9:4/4722: [ 213.606152][ T31] #0: ffff0000c952c940 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x748/0x1098 [ 213.606192][ T31] #1: ffff80009b927c40 ((work_completion)(&hdev->power_on)){+.+.}-{0:0}, at: process_scheduled_works+0x750/0x1098 [ 213.606232][ T31] #2: ffff0000fe890ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_open+0x2c/0xb8 [ 213.606275][ T31] 1 lock held by syz.1.198/5716: [ 213.606283][ T31] 2 locks held by syz.1.198/5725: [ 213.606291][ T31] 2 locks held by syz.1.198/5726: [ 213.606298][ T31] #0: ffff0000c155b5f8 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: blkdev_fallocate+0x208/0x354 [ 213.606343][ T31] #1: ffff0000c155b790 (mapping.invalidate_lock){++++}-{4:4}, at: blkdev_fallocate+0x22c/0x354 [ 213.606384][ T31] 1 lock held by syz-executor/6204: [ 213.606392][ T31] #0: ffff800088b6c8a8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x34c/0x67c [ 213.606438][ T31] 2 locks held by modprobe/6438: [ 213.606447][ T31] 1 lock held by modprobe/6439: [ 213.606454][ T31] 1 lock held by dhcpcd/6440: [ 213.606462][ T31] [ 213.606468][ T31] ============================================= [ 213.606468][ T31] [ 213.606476][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 213.670326][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT [ 213.672056][ T31] Tainted: [L]=SOFTLOCKUP [ 213.672788][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 213.674346][ T31] Call trace: [ 213.674858][ T31] show_stack+0x2c/0x3c (C) [ 213.675575][ T31] __dump_stack+0x30/0x40 [ 213.676277][ T31] dump_stack_lvl+0x30/0x12c [ 213.677057][ T31] dump_stack+0x1c/0x28 [ 213.677748][ T31] vpanic+0x594/0xaf4 [ 213.678454][ T31] vpanic+0x0/0xaf4 [ 213.679070][ T31] hung_task_panic+0x0/0x2c [ 213.679836][ T31] kthread+0x2f8/0x3c8 [ 213.680534][ T31] ret_from_fork+0x10/0x20 [ 213.681312][ T31] SMP: stopping secondary CPUs [ 213.682151][ T31] Kernel Offset: disabled [ 213.682847][ T31] CPU features: 0x08000000,003c0008,27020501,5427fea7 [ 213.684013][ T31] Memory Limit: none [ 213.973438][ T31] Rebooting in 86400 seconds..