last executing test programs: 5.609677727s ago: executing program 0 (id=1): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x30}, 0xc) socket$inet6(0xa, 0x1, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) syz_emit_ethernet(0x7e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60fb6809001b2f00fc020000000000000000000000000000ff020000000000000000000000000001242088a88dff00000006000000000800000086dd88a888"], 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000240), 0x35c, 0x0) unshare(0x64000600) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r5, 0x5407, &(0x7f0000001500)={0x5, 0xff, 0x0, 0x7f, 0x11, "60da9be1777e1af0"}) write(r5, &(0x7f0000001000)="1546b2000000000000008043f3526b13f78ada17aefbbfc13bc888a3a46e8f0e809292ee0739b4f208001e8d61881b5d500d6354", 0x34) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000300)="19c90aa3413f6d8d26e41081d849bf0df82b1516743e8919d9ffb15a72d677de57eba5984248799b08dac904d812450149bc11d0d3a26c8f63e3d2ceaa481aec653a81c0fd8b0eb0700f0a1c5ce0951ce865f2076354ebc81d074856212fe7d7faaa13854bdfc0a210f64137aa6104cf0e84d93a6b2e204c0ff93a7f92243474fedb7bbaee9c3286fc02420d5dc85a69f96c", 0x92, 0x15, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='lp', 0x2) socket$kcm(0x29, 0x5, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0x8, 0x2720, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000000280)='./file0/../file0\x00', 0x858465, &(0x7f0000000000)=ANY=[@ANYRES8=r0], 0xfc, 0x1249, &(0x7f0000001240)="$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") 5.603005054s ago: executing program 1 (id=2): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='md0\n', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='raid1\n', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='2\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='1:0\n', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r4, &(0x7f0000000340)='1:1\n', 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0) write(r5, &(0x7f00000003c0)='0\n', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md0/md/dev-ram1/slot\x00', 0x1, 0x0) write(r6, &(0x7f0000000440)='1\n', 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/block/md0/md/dev-ram0/state\x00', 0x1, 0x0) write(r7, &(0x7f00000004c0)='writemostly\n', 0xc) r8 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r8, &(0x7f0000000540)='readonly\n', 0x9) write(r8, &(0x7f0000000580)='inactive\n', 0x9) r9 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/block/md0/md/bitmap/location\x00', 0x1, 0x0) write(r9, &(0x7f0000000600)='1\n', 0x2) write(r8, &(0x7f0000000640)='readonly', 0x8) r10 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./sys/block/md0/md/bitmap/backlog\x00', 0x1, 0x0) write(r10, &(0x7f00000006c0)='1024\n', 0x5) 5.571035258s ago: executing program 3 (id=4): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x30}, 0xc) socket$inet6(0xa, 0x1, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) syz_emit_ethernet(0x7e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60fb6809001b2f00fc020000000000000000000000000000ff020000000000000000000000000001242088a88dff00000006000000000800000086dd88a888"], 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000240), 0x35c, 0x0) unshare(0x64000600) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r5, 0x5407, &(0x7f0000001500)={0x5, 0xff, 0x0, 0x7f, 0x11, "60da9be1777e1af0"}) write(r5, &(0x7f0000001000)="1546b2000000000000008043f3526b13f78ada17aefbbfc13bc888a3a46e8f0e809292ee0739b4f208001e8d61881b5d500d6354", 0x34) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000300)="19c90aa3413f6d8d26e41081d849bf0df82b1516743e8919d9ffb15a72d677de57eba5984248799b08dac904d812450149bc11d0d3a26c8f63e3d2ceaa481aec653a81c0fd8b0eb0700f0a1c5ce0951ce865f2076354ebc81d074856212fe7d7faaa13854bdfc0a210f64137aa6104cf0e84d93a6b2e204c0ff93a7f92243474fedb7bbaee9c3286fc02420d5dc85a69f96c", 0x92, 0x15, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='lp', 0x2) socket$kcm(0x29, 0x5, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0x8, 0x2720, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000000280)='./file0/../file0\x00', 0x858465, &(0x7f0000000000)=ANY=[@ANYRES8=r0], 0xfc, 0x1249, &(0x7f0000001240)="$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") 5.051791447s ago: executing program 2 (id=3): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xd1e2, 0x47fffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001000)=@abs={0x0, 0x0, 0xce27}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000480)={{0xffff, 0x4003, 0x91c, 0x218b}, 'syz0\x00', 0x3d}) ioctl$UI_SET_KEYBIT(r3, 0x40045565, 0x2c0) ioctl$UI_DEV_CREATE(r3, 0x5501) ioctl$UI_DEV_DESTROY(r3, 0x5502) r4 = socket(0x1e, 0x4, 0x0) recvmmsg$unix(r4, &(0x7f0000001fc0)=[{{0x0, 0x0, &(0x7f0000002780)}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000280)=""/18, 0x12}], 0x1}}], 0x2, 0x400122a0, 0x0) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1}}], 0x1, 0x9200000000000000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) fsetxattr$smack_xattr_label(r5, &(0x7f0000000040)='security.SMACK64MMAP\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="732e73953c160000"], 0xd, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0/file1\x00', 0x3082025, 0x0, 0x1, 0x0, 0x0) 5.041262805s ago: executing program 4 (id=5): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xd1e2, 0x47fffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001000)=@abs={0x0, 0x0, 0xce27}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000480)={{0xffff, 0x4003, 0x91c, 0x218b}, 'syz0\x00', 0x3d}) ioctl$UI_SET_KEYBIT(r3, 0x40045565, 0x2c0) ioctl$UI_DEV_CREATE(r3, 0x5501) ioctl$UI_DEV_DESTROY(r3, 0x5502) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x759, &(0x7f0000000580)={[{@nobarrier}, {@noblock_validity}, {@discard}, {@errors_continue}, {@nogrpid, 0x0}, {@noauto_da_alloc}, {@norecovery}, {@journal_checksum}, {@mblk_io_submit}, {@data_err_ignore}, {@sysvgroups}, {@nodiscard}, {@oldalloc}, {@orlov}, {@data_journal}, {@data_writeback}, {@auto_da_alloc}], [{@audit}, {@smackfshat={'smackfshat', 0x3d, 'ext4\x00'}}], 0x2c}, 0x0, 0x502, &(0x7f00000029c0)="$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") r4 = socket(0x1e, 0x4, 0x0) recvmmsg$unix(r4, &(0x7f0000001fc0)=[{{0x0, 0x0, &(0x7f0000002780)}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000280)=""/18, 0x12}], 0x1}}], 0x2, 0x400122a0, 0x0) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1}}], 0x1, 0x9200000000000000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) fsetxattr$smack_xattr_label(r5, &(0x7f0000000040)='security.SMACK64MMAP\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="732e73953c160000"], 0xd, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0/file1\x00', 0x3082025, 0x0, 0x1, 0x0, 0x0) 4.003556853s ago: executing program 3 (id=6): r0 = socket$pppl2tp(0x18, 0x1, 0x1) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) pselect6(0x40, &(0x7f0000000140)={0x1, 0x4, 0x3, 0xff, 0x4, 0xea2b, 0x7, 0x2300000000000}, 0x0, &(0x7f00000001c0)={0x9, 0xbb18, 0x2, 0xc, 0x0, 0x4f, 0x0, 0x4}, &(0x7f0000000200)={0x0, 0x3938700}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newtfilter={0x34, 0x2c, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) nanosleep(&(0x7f0000000900)={0x2}, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast1, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x1, 0x0, 0xfbfd, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x8}}, {{@in=@private=0xa010100, 0x0, 0x32}, 0x0, @in=@remote, 0x0, 0x4}}, 0xe8) r3 = openat$binfmt_register(0xffffff9c, &(0x7f0000000100), 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001080)=ANY=[@ANYBLOB="1c0000"], 0x1c}, 0x1, 0x0, 0x0, 0x44090}, 0x20000010) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) getsockopt$PNPIPE_INITSTATE(r4, 0x113, 0x4, &(0x7f0000001240), &(0x7f0000000040)=0x4) write$binfmt_register(r3, &(0x7f0000000200)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x7fff, 0x3a, '\\.@+', 0x3a, '}-\\-', 0x3a, './file1'}, 0x2f) r5 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r5, &(0x7f0000000040)={0xa, 0xfffe, 0x0, @mcast1={0xff, 0x4}}, 0x1c) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a0"], 0xffd8}}, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x781400, 0x0) connect$pppl2tp(r0, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x32) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000180)) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x5, 0xc9}}}, 0x8) r6 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r6, &(0x7f0000000000)=""/90, 0x5a) getdents64(r6, 0x0, 0x52) keyctl$clear(0x4, 0xfffffffffffffffc) 1.50007367s ago: executing program 2 (id=7): openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r1) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)={0x54, r2, 0x111, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xffffffffffffff4d, 0x3, 0x2}}, {0x8}, {0x6, 0x16, 0x7}, {0x5, 0x12, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x804}, 0x20000) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@ipv6_newaddr={0x48, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40}, [@IFA_CACHEINFO={0x14, 0x6, {0x3, 0xffffffff, 0x1000, 0x4}}, @IFA_FLAGS={0x8}, @IFA_LOCAL={0x14, 0x2, @remote}]}, 0x48}}, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000001080)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}, 0x4}) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000600)={[&(0x7f0000000900)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m', &(0x7f0000000540)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}, &(0x7f0000000240)={[&(0x7f0000000840)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde6\xfd\vQM`\x8f\xec\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0e}\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13?\x87\'S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}) 1.436628538s ago: executing program 1 (id=8): bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_procfs(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x48) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 1.354530502s ago: executing program 4 (id=9): socket$nl_route(0x10, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x1011f, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fanotify_init(0xf00, 0x1) fanotify_mark(r4, 0x105, 0x40009967, r0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) 1.322563934s ago: executing program 2 (id=10): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='md0\n', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='raid1\n', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='2\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='1:0\n', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r4, &(0x7f0000000340)='1:1\n', 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0) write(r5, &(0x7f00000003c0)='0\n', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md0/md/dev-ram1/slot\x00', 0x1, 0x0) write(r6, &(0x7f0000000440)='1\n', 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/block/md0/md/dev-ram0/state\x00', 0x1, 0x0) write(r7, &(0x7f00000004c0)='writemostly\n', 0xc) r8 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r8, &(0x7f0000000540)='readonly\n', 0x9) write(r8, &(0x7f0000000580)='inactive\n', 0x9) r9 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/block/md0/md/bitmap/location\x00', 0x1, 0x0) write(r9, &(0x7f0000000600)='1\n', 0x2) write(r8, &(0x7f0000000640)='readonly\n', 0x9) r10 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r10, &(0x7f00000006c0)='1024\n', 0x5) 1.308590316s ago: executing program 3 (id=11): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'lo\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) 622.212761ms ago: executing program 3 (id=12): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet(0x2, 0x801, 0x0) listen(r4, 0x540) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x7ffff000, 0x0) connect$unix(r2, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$vim2m(0x0, 0x7, 0x2) socket(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, r5) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x20008004}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x1d2) write(r6, &(0x7f0000000600)='12', 0x2) 455.383422ms ago: executing program 0 (id=13): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'lo\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'lo\x00'}) 454.473912ms ago: executing program 1 (id=14): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2710, &(0x7f000001eec0)=""/102389, &(0x7f0000000740)=0x18ff5) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000000c0)='.\x00', 0x8a, &(0x7f00000005c0)={[{@nombcache}, {@errors_remount}, {@acl}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x2}}, {@mblk_io_submit}, {@noquota}, {@nodiscard}, {@nodiscard}, {@usrjquota}, {@norecovery}, {@init_itable_val}]}, 0x6, 0x493, &(0x7f0000000100)="$eJzs3M9vFFUcAPDv7LZFftmK+AMErSCRRG1p+SEHLxhNPGhiogeMp9oWgizU0JoAIQoe8GhIvBs9+xd4ES9GPZl4MtHEozEhphfQxGTN7M7UbbvbbrfbXXA/n2Toe31veO87M2/39c3OBtCzhtN/kohtEfFLRAxWs4srDFd/3Jm/MvnX/JXJJMrlN/5MKvVuz1+ZzKvm+22tZsrlFdq9/nbERKk0fSHLj86de2909tLl586cmzg9fXr6/Pjx40cO7x04Nn60LXGmcd3e/cHMnl2vvHXjtcmTN975/su0v9uy8to42mW4enTrOtDuxrpse0066etiR1iTYkSkp6u/Mv4HoxibF8oG4+WPuto5YEOVy4XypsbFV8vA/1g6UQd6Uf5Gn/79m28dmnrcFW6diIV1jDvZVi3pi0JWpz/7G2kjDEfEyat/f5ZusUHrEAAAtW6eiIhn683/CvFwTb37s3soQxHxQETsiIgHI2JnRDwUUan7SEQ8usb2l94hWT7/KQ+2FFiT0vnfC9m9rcXzv3z2F0PFLLe9En9/cupMafpQdkwORv+mND+2QhvfvPTTJ43Kaud/6Za2n88Fs3780bdkgW5qYm5iPTHXunUtYndfNf6BqI0/WZjzpvPjXRGxu8U2zqxQNrRq/Ctow6S8/HnE09XzfzXmF8efSxrenxx7/tj40dH7ojR9aDS/Kpb74cfrrzdqf/n5P/BFRJPxt8Gtm+XYsuT6X3JYh5KBLFUqTV+YXWMDP0dc//XjyX8aFLd6/Q8kb1bSedcuTszNXRiLGEheXf778f/2zfN5/fT6P7h/If4kasb/jmyf9Pw/FhF7ImJvRDweEU9kfX8yIvZFxP4VDsF3Lz71bqOyxvGvsCrfRmn8U3Vf/xau/6E0NXvp8tnK/foWEsWz33619vhTW7Lzf6SSO5jt08zrX7MdXO/xAwAAgHtBofIZ+KQwspAuFEZGqp/h3xlbCqWZ2blnTs28f36q+ln5oegv5CtdgzXroWPZWl6eH1+SP5ytG39a3FzJj0zOlKa6HTz0uK0Nxn/q92L1529d7SGwoTyvBb3L+IfeZfxD7zL+oXcZ/9C76o3/D7vQD6DzVnn/39ypfgCdZ/4Pvcv4h9612vjf15lnkYHOavhsfGFdj/yvIZH3pPX/pxgRHenqPZD4emB939XQfCIK9Yv62tfExbvlqLaSKDZR51p27Vd/0x91K/c1/WUWixL5m/rqlTfVLerO6xEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEC7/RsAAP//dubSQQ==") r6 = dup3(r1, r0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f0000000600)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000380)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) 86.55954ms ago: executing program 4 (id=15): bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_procfs(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x48) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 0s ago: executing program 0 (id=16): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xd1e2, 0x47fffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001000)=@abs={0x0, 0x0, 0xce27}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000480)={{0xffff, 0x4003, 0x91c, 0x218b}, 'syz0\x00', 0x3d}) ioctl$UI_SET_KEYBIT(r3, 0x40045565, 0x2c0) ioctl$UI_DEV_CREATE(r3, 0x5501) ioctl$UI_DEV_DESTROY(r3, 0x5502) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x759, &(0x7f0000000580)={[{@nobarrier}, {@noblock_validity}, {@discard}, {@errors_continue}, {@nogrpid, 0x0}, {@noauto_da_alloc}, {@norecovery}, {@journal_checksum}, {@mblk_io_submit}, {@data_err_ignore}, {@sysvgroups}, {@nodiscard}, {@oldalloc}, {@orlov}, {@data_journal}, {@data_writeback}, {@auto_da_alloc}], [{@audit}, {@smackfshat={'smackfshat', 0x3d, 'ext4\x00'}}], 0x2c}, 0x0, 0x502, &(0x7f00000029c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r4 = socket(0x1e, 0x4, 0x0) recvmmsg$unix(r4, &(0x7f0000001fc0)=[{{0x0, 0x0, &(0x7f0000002780)}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000280)=""/18, 0x12}], 0x1}}], 0x2, 0x400122a0, 0x0) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1}}], 0x1, 0x9200000000000000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) fsetxattr$smack_xattr_label(r5, &(0x7f0000000040)='security.SMACK64MMAP\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="732e73953c160000"], 0xd, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0/file1\x00', 0x3082025, 0x0, 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.196' (ED25519) to the list of known hosts. [ 28.727163][ T4697] cgroup: Unknown subsys name 'net' [ 28.848457][ T4697] cgroup: Unknown subsys name 'cpuset' [ 28.850465][ T4697] cgroup: Unknown subsys name 'rlimit' [ 29.019647][ T4697] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS Setting up swapspace version 1, size = 127995904 bytes [ 30.472830][ T4710] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 30.475846][ T4714] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 30.476100][ T4714] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 30.489139][ T4712] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 30.490001][ T4721] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 30.490155][ T4721] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 30.491109][ T4721] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 30.491286][ T4721] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 30.491676][ T4721] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 30.492083][ T4721] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 30.492309][ T4721] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.493158][ T4721] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 30.493320][ T4721] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 30.494473][ T4721] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 30.497259][ T4710] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 30.497395][ T4721] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 30.499202][ T4721] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 30.500523][ T4710] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 30.503412][ T4723] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.503458][ T4723] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 30.503514][ T4723] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 30.503815][ T4722] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.504153][ T4722] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.504976][ T4723] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 30.517946][ T4723] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.885633][ T4707] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.888582][ T4707] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.890295][ T4707] bridge_slave_0: entered allmulticast mode [ 30.891980][ T4707] bridge_slave_0: entered promiscuous mode [ 30.909050][ T4707] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.909109][ T4707] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.909182][ T4707] bridge_slave_1: entered allmulticast mode [ 30.909622][ T4707] bridge_slave_1: entered promiscuous mode [ 30.924844][ T4708] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.925871][ T4708] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.925939][ T4708] bridge_slave_0: entered allmulticast mode [ 30.926420][ T4708] bridge_slave_0: entered promiscuous mode [ 30.948486][ T4707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.948608][ T4708] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.948657][ T4708] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.948733][ T4708] bridge_slave_1: entered allmulticast mode [ 30.949204][ T4708] bridge_slave_1: entered promiscuous mode [ 30.969866][ T4711] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.971338][ T4711] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.972733][ T4711] bridge_slave_0: entered allmulticast mode [ 30.973182][ T4711] bridge_slave_0: entered promiscuous mode [ 30.974621][ T4707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.978854][ T4708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.980799][ T4708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.989780][ T4711] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.989880][ T4711] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.989945][ T4711] bridge_slave_1: entered allmulticast mode [ 30.990401][ T4711] bridge_slave_1: entered promiscuous mode [ 31.005123][ T4718] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.005177][ T4718] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.005245][ T4718] bridge_slave_0: entered allmulticast mode [ 31.005971][ T4718] bridge_slave_0: entered promiscuous mode [ 31.013992][ T4707] team0: Port device team_slave_0 added [ 31.014879][ T4707] team0: Port device team_slave_1 added [ 31.016674][ T4711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.016785][ T4718] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.016829][ T4718] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.016884][ T4718] bridge_slave_1: entered allmulticast mode [ 31.017316][ T4718] bridge_slave_1: entered promiscuous mode [ 31.024628][ T4708] team0: Port device team_slave_0 added [ 31.026522][ T4708] team0: Port device team_slave_1 added [ 31.036369][ T4711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.040106][ T4718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.045398][ T4718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.049968][ T4707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.051271][ T4707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.055743][ T4707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.072463][ T4707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.073734][ T4707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.075903][ T4707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.076745][ T4711] team0: Port device team_slave_0 added [ 31.077532][ T4711] team0: Port device team_slave_1 added [ 31.083509][ T4708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.083530][ T4708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.083558][ T4708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.084362][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.084373][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.084386][ T4711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.085253][ T4718] team0: Port device team_slave_0 added [ 31.086914][ T4718] team0: Port device team_slave_1 added [ 31.101359][ T4707] hsr_slave_0: entered promiscuous mode [ 31.101719][ T4707] hsr_slave_1: entered promiscuous mode [ 31.105600][ T4708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.107208][ T4708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.112146][ T4708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.114519][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.114542][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.114558][ T4711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.137313][ T4717] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.137579][ T4717] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.137637][ T4717] bridge_slave_0: entered allmulticast mode [ 31.138052][ T4717] bridge_slave_0: entered promiscuous mode [ 31.139504][ T4717] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.139531][ T4717] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.139622][ T4717] bridge_slave_1: entered allmulticast mode [ 31.140024][ T4717] bridge_slave_1: entered promiscuous mode [ 31.141228][ T4718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.141237][ T4718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.141252][ T4718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.141804][ T4718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.141811][ T4718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.141823][ T4718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.153552][ T4708] hsr_slave_0: entered promiscuous mode [ 31.153846][ T4708] hsr_slave_1: entered promiscuous mode [ 31.154039][ T4708] debugfs: 'hsr0' already exists in 'hsr' [ 31.154082][ T4708] Cannot create hsr debugfs directory [ 31.184534][ T4717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.185600][ T4717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.212258][ T4711] hsr_slave_0: entered promiscuous mode [ 31.212628][ T4711] hsr_slave_1: entered promiscuous mode [ 31.212844][ T4711] debugfs: 'hsr0' already exists in 'hsr' [ 31.212853][ T4711] Cannot create hsr debugfs directory [ 31.217573][ T4717] team0: Port device team_slave_0 added [ 31.218365][ T4717] team0: Port device team_slave_1 added [ 31.222729][ T4718] hsr_slave_0: entered promiscuous mode [ 31.223545][ T4718] hsr_slave_1: entered promiscuous mode [ 31.223743][ T4718] debugfs: 'hsr0' already exists in 'hsr' [ 31.223754][ T4718] Cannot create hsr debugfs directory [ 31.250501][ T4717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.250596][ T4717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.250607][ T4717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.263516][ T4717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.263548][ T4717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.263563][ T4717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.286277][ T4717] hsr_slave_0: entered promiscuous mode [ 31.286603][ T4717] hsr_slave_1: entered promiscuous mode [ 31.286790][ T4717] debugfs: 'hsr0' already exists in 'hsr' [ 31.286800][ T4717] Cannot create hsr debugfs directory [ 31.339398][ T4707] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.342848][ T4707] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.344674][ T4707] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.347379][ T4707] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.354584][ T4707] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.357069][ T4707] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.357398][ T4707] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.359433][ T4707] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.385368][ T4708] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.389617][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.389970][ T4708] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.391885][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.394515][ T4707] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.394572][ T4707] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.394751][ T4707] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.394787][ T4707] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.396617][ T4708] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.398486][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.404641][ T4708] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.407208][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.424559][ T4711] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.426528][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.426884][ T4711] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.428777][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.435296][ T4711] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.438318][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.442215][ T4711] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.444543][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.456703][ T4708] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.456762][ T4708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.456845][ T4708] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.456878][ T4708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.461464][ T4707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.465309][ T4707] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.474637][ T4711] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.474700][ T4711] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.474789][ T4711] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.474829][ T4711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.479518][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.480638][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.483944][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.485275][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.493820][ T4717] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.497151][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.498868][ T4717] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.500982][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.502661][ T4717] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.504859][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.506668][ T4717] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.508900][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.558816][ T4718] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.561194][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.562995][ T4718] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.567025][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.568720][ T4718] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.571062][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.572810][ T4718] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.574950][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.580264][ T4707] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.581410][ T4707] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.584702][ T4717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.601933][ T4717] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.611017][ T4711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.614568][ T1739] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.614628][ T1739] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.623975][ T4711] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.639077][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.639135][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.642276][ T4708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.649859][ T4708] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.663109][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.663172][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.663691][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.663710][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.673261][ T4717] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.680874][ T3384] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.680923][ T3384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.688280][ T3384] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.688333][ T3384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.703322][ T4718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.712009][ T4711] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.714095][ T4711] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.721491][ T4718] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.731168][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.731218][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.732639][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.732660][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.745488][ T4718] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.747807][ T4718] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.760901][ T4708] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.886502][ T4717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.905217][ T4707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.922972][ T4707] veth0_vlan: entered promiscuous mode [ 31.931636][ T4707] veth1_vlan: entered promiscuous mode [ 31.957742][ T4717] veth0_vlan: entered promiscuous mode [ 31.960280][ T4717] veth1_vlan: entered promiscuous mode [ 31.970769][ T4711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.987560][ T4711] veth0_vlan: entered promiscuous mode [ 31.992780][ T4711] veth1_vlan: entered promiscuous mode [ 32.010320][ T4707] veth0_macvtap: entered promiscuous mode [ 32.011671][ T4707] veth1_macvtap: entered promiscuous mode [ 32.013269][ T4717] veth0_macvtap: entered promiscuous mode [ 32.015565][ T4718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.019986][ T4708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.024815][ T4707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.036520][ T4707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.050526][ T4717] veth1_macvtap: entered promiscuous mode [ 32.063491][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.064480][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.078245][ T4711] veth0_macvtap: entered promiscuous mode [ 32.103035][ T4711] veth1_macvtap: entered promiscuous mode [ 32.119704][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.121022][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.136226][ T4718] veth0_vlan: entered promiscuous mode [ 32.139897][ T4718] veth1_vlan: entered promiscuous mode [ 32.146152][ T208] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.146802][ T208] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.146831][ T208] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.146856][ T208] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.146880][ T208] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.146904][ T208] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.146928][ T208] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.146952][ T208] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.146974][ T208] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.146997][ T208] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.147019][ T208] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.150945][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.150957][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.181777][ T4708] veth0_vlan: entered promiscuous mode [ 32.183850][ T4708] veth1_vlan: entered promiscuous mode [ 32.187090][ T14] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.192316][ T208] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.192339][ T208] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.204768][ T4718] veth0_macvtap: entered promiscuous mode [ 32.207868][ T208] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.207891][ T208] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.211282][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.211308][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.215299][ T4718] veth1_macvtap: entered promiscuous mode [ 32.229931][ T4718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.232606][ T4718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.237010][ T14] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.237449][ T3384] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.237472][ T3384] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.245135][ T4708] veth0_macvtap: entered promiscuous mode [ 32.254312][ T4708] veth1_macvtap: entered promiscuous mode [ 32.264027][ T3384] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.265550][ T3384] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.268286][ T4708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.269276][ T4708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.283019][ T4717] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.296712][ T1739] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.300464][ T1739] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.300683][ T1739] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.300827][ T1739] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.300852][ T1739] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.300876][ T1739] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.300900][ T1739] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.433210][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.433251][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.442374][ T4890] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 32.454299][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.454330][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.466554][ T208] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.469078][ T208] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.701456][ T4712] Bluetooth: hci3: command tx timeout [ 32.701706][ T4712] Bluetooth: hci0: command tx timeout [ 32.701954][ T4712] Bluetooth: hci4: command tx timeout [ 32.702126][ T4712] Bluetooth: hci1: command tx timeout [ 32.702402][ T4712] Bluetooth: hci2: command tx timeout [ 32.749926][ T4894] percpu: allocation failed, size=32 align=4 atomic=1, atomic alloc failed, no space left [ 32.780409][ T4893] loop3: detected capacity change from 0 to 8192 [ 32.802659][ T3384] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.802689][ T3384] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.971138][ T4904] input: syz0 as /devices/virtual/input/input2 [ 33.979536][ T4905] input: syz0 as /devices/virtual/input/input3 [ 34.474033][ T4910] loop4: detected capacity change from 0 to 512 [ 34.477333][ T4910] ======================================================= [ 34.477333][ T4910] WARNING: The mand mount option has been deprecated and [ 34.477333][ T4910] and is ignored by this kernel. Remove the mand [ 34.477333][ T4910] option from the mount to silence this warning. [ 34.477333][ T4910] ======================================================= [ 34.902699][ T4722] Bluetooth: hci2: command tx timeout [ 34.902740][ T4722] Bluetooth: hci1: command tx timeout [ 34.902764][ T4722] Bluetooth: hci4: command tx timeout [ 34.902787][ T4722] Bluetooth: hci0: command tx timeout [ 34.902807][ T4722] Bluetooth: hci3: command tx timeout [ 35.000169][ T4910] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 35.921462][ T4895] md/raid1:md0: not clean -- starting background reconstruction [ 35.923221][ T4895] md/raid1:md0: active with 2 out of 2 mirrors [ 35.939692][ T4918] md_update_sb: can't update sb for read-only array md0 [ 36.143020][ T4910] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c840e018, mo2=0002] [ 36.143582][ T4910] EXT4-fs (loop4): orphan cleanup on readonly fs [ 36.143640][ T4910] EXT4-fs error (device loop4): __ext4_iget:5592: inode #11: block 7176215: comm syz.4.5: invalid block [ 36.143689][ T4910] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 36.145721][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 36.145746][ C0] EXT4-fs (loop4): initial error at time 36: __ext4_iget:5592: inode 11: block 7176215 [ 36.145782][ C0] EXT4-fs (loop4): last error at time 36: __ext4_iget:5592: inode 11: block 7176215 [ 36.236057][ T4910] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.5: couldn't read orphan inode 11 (err -117) [ 36.236142][ T4910] loop4: lost filesystem error report for type 5 error -117 [ 36.258424][ T4910] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 36.341095][ T4897] loop0: detected capacity change from 0 to 8192 [ 36.499328][ T4921] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7'. [ 36.554825][ T4708] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 36.954933][ T4932] hub 8-0:1.0: USB hub found [ 36.955747][ T4932] hub 8-0:1.0: 8 ports detected [ 37.003063][ T4712] Bluetooth: hci3: command tx timeout [ 37.003182][ T4712] Bluetooth: hci0: command tx timeout [ 37.003226][ T4712] Bluetooth: hci4: command tx timeout [ 37.003655][ T4712] Bluetooth: hci1: command tx timeout [ 37.003744][ T4712] Bluetooth: hci2: command tx timeout [ 37.246084][ T4926] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 37.336317][ T4926] md: could not open device unknown-block(1,0). [ 37.411387][ T4926] md: could not open device unknown-block(1,1). [ 37.799877][ T4949] loop1: detected capacity change from 0 to 512 [ 37.800278][ T4949] EXT4-fs: Ignoring removed mblk_io_submit option [ 37.820153][ T208] netdevsim netdevsim12 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.821987][ T4949] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 37.843105][ T4949] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2933: inode #15: comm syz.1.14: corrupted xattr block 252: invalid header [ 37.843160][ T4949] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 37.844556][ T4949] EXT4-fs (loop1): Remounting filesystem read-only [ 37.844584][ T4949] EXT4-fs warning (device loop1): ext4_evict_inode:288: xattr delete (err -117) [ 37.844710][ T4949] EXT4-fs (loop1): 1 orphan inode deleted [ 37.845376][ T4949] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.861067][ T4948] binder: 4944:4948 tried to acquire reference to desc 0, got 1 instead [ 37.864160][ T4948] binder: 4944:4948 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 37.864176][ T4948] binder: 4948 RLIMIT_NICE not set [ 37.864236][ T4948] binder: 4948 RLIMIT_NICE not set [ 37.868493][ T4948] binder: 4948 RLIMIT_NICE not set [ 37.868531][ T4948] binder: 4944:4948 got transaction with invalid data ptr [ 37.868614][ T4948] binder: 4944:4948 transaction reply to 4944:4948 failed 12/29201/-14, code 0 size 0-24 line 3511 [ 37.868635][ T4948] binder: send failed reply for transaction 5 to 4944:4948 [ 37.888860][ T4943] md/raid1:md0: not clean -- starting background reconstruction [ 37.888889][ T4943] md/raid1:md0: active with 2 out of 2 mirrors [ 37.895554][ T4943] md_update_sb: can't update sb for read-only array md0 [ 37.896527][ T4955] md_update_sb: can't update sb for read-only array md0 [ 38.143275][ T4943] [ 38.143787][ T4943] ====================================================== [ 38.145094][ T4943] WARNING: possible circular locking dependency detected [ 38.146363][ T4943] syzkaller #0 Not tainted [ 38.147174][ T4943] ------------------------------------------------------ [ 38.148449][ T4943] syz.2.10/4943 is trying to acquire lock: [ 38.149605][ T4943] ffff0000ca274358 (&mddev->reconfig_mutex){+.+.}-{4:4}, at: location_store+0xb8/0x938 [ 38.151301][ T4943] [ 38.151301][ T4943] but task is already holding lock: [ 38.152595][ T4943] ffff0000d6ebf698 (kn->active#62){++++}-{0:0}, at: kernfs_fop_write_iter+0x1f0/0x3b8 [ 38.154384][ T4943] [ 38.154384][ T4943] which lock already depends on the new lock. [ 38.154384][ T4943] [ 38.156306][ T4943] [ 38.156306][ T4943] the existing dependency chain (in reverse order) is: [ 38.157927][ T4943] [ 38.157927][ T4943] -> #1 (kn->active#62){++++}-{0:0}: [ 38.159286][ T4943] kernfs_drain+0x1cc/0x4d0 [ 38.160303][ T4943] __kernfs_remove+0x354/0x718 [ 38.161265][ T4943] kernfs_remove_by_name_ns+0x70/0xd0 [ 38.162275][ T4943] remove_files+0x90/0x184 [ 38.163144][ T4943] sysfs_remove_group+0x98/0x160 [ 38.164135][ T4943] md_bitmap_destroy+0x1b0/0x230 [ 38.165074][ T4943] __md_stop+0x54/0x154 [ 38.165978][ T4943] do_md_stop+0x284/0xe6c [ 38.166859][ T4943] array_state_store+0x6ac/0xce8 [ 38.167828][ T4943] md_attr_store+0x304/0x438 [ 38.168698][ T4943] sysfs_kf_write+0xe0/0x108 [ 38.169605][ T4943] kernfs_fop_write_iter+0x260/0x3b8 [ 38.170698][ T4943] vfs_write+0x51c/0xa0c [ 38.171599][ T4943] ksys_write+0x12c/0x228 [ 38.172497][ T4943] __arm64_sys_write+0x84/0x98 [ 38.173511][ T4943] invoke_syscall+0x98/0x244 [ 38.174424][ T4943] el0_svc_common+0xec/0x23c [ 38.175349][ T4943] do_el0_svc+0x4c/0x5c [ 38.176201][ T4943] el0_svc+0x64/0x260 [ 38.176989][ T4943] el0t_64_sync_handler+0x44/0x104 [ 38.178014][ T4943] el0t_64_sync+0x198/0x19c [ 38.178920][ T4943] [ 38.178920][ T4943] -> #0 (&mddev->reconfig_mutex){+.+.}-{4:4}: [ 38.180468][ T4943] __lock_acquire+0x1600/0x2a6c [ 38.181486][ T4943] lock_acquire+0x150/0x370 [ 38.182323][ T4943] __mutex_lock+0x164/0xf14 [ 38.183192][ T4943] mutex_lock_interruptible_nested+0x24/0x30 [ 38.184361][ T4943] location_store+0xb8/0x938 [ 38.185280][ T4943] md_attr_store+0x304/0x438 [ 38.186192][ T4943] sysfs_kf_write+0xe0/0x108 [ 38.187108][ T4943] kernfs_fop_write_iter+0x260/0x3b8 [ 38.188160][ T4943] vfs_write+0x51c/0xa0c [ 38.188989][ T4943] ksys_write+0x12c/0x228 [ 38.189838][ T4943] __arm64_sys_write+0x84/0x98 [ 38.190755][ T4943] invoke_syscall+0x98/0x244 [ 38.191623][ T4943] el0_svc_common+0xec/0x23c [ 38.192505][ T4943] do_el0_svc+0x4c/0x5c [ 38.193384][ T4943] el0_svc+0x64/0x260 [ 38.194164][ T4943] el0t_64_sync_handler+0x44/0x104 [ 38.195139][ T4943] el0t_64_sync+0x198/0x19c [ 38.196038][ T4943] [ 38.196038][ T4943] other info that might help us debug this: [ 38.196038][ T4943] [ 38.197967][ T4943] Possible unsafe locking scenario: [ 38.197967][ T4943] [ 38.199255][ T4943] CPU0 CPU1 [ 38.200155][ T4943] ---- ---- [ 38.201094][ T4943] rlock(kn->active#62); [ 38.201877][ T4943] lock(&mddev->reconfig_mutex); [ 38.203363][ T4943] lock(kn->active#62); [ 38.204626][ T4943] lock(&mddev->reconfig_mutex); [ 38.205544][ T4943] [ 38.205544][ T4943] *** DEADLOCK *** [ 38.205544][ T4943] [ 38.206994][ T4943] locks held by syz.2.10/4943: 4, last CPU#0: [ 38.208034][ T4943] #0: ffff0000ccb88b70 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x100/0x144 [ 38.209720][ T4943] #1: ffff0000c63f2460 (sb_writers#6){.+.+}-{0:0}, at: vfs_write+0x248/0xa0c [ 38.211334][ T4943] #2: ffff0000d7e2ac80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1b0/0x3b8 [ 38.212987][ T4943] #3: ffff0000d6ebf698 (kn->active#62){++++}-{0:0}, at: kernfs_fop_write_iter+0x1f0/0x3b8 [ 38.214800][ T4943] [ 38.214800][ T4943] stack backtrace: [ 38.215810][ T4943] CPU: 0 UID: 0 PID: 4943 Comm: syz.2.10 Not tainted syzkaller #0 PREEMPT [ 38.217347][ T4943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 38.219124][ T4943] Call trace: [ 38.219716][ T4943] show_stack+0x2c/0x3c (C) [ 38.220523][ T4943] __dump_stack+0x30/0x40 [ 38.221285][ T4943] dump_stack_lvl+0xd8/0x12c [ 38.222076][ T4943] dump_stack+0x1c/0x28 [ 38.222813][ T4943] print_circular_bug+0x328/0x330 [ 38.223703][ T4943] check_noncircular+0x158/0x174 [ 38.224599][ T4943] __lock_acquire+0x1600/0x2a6c [ 38.225487][ T4943] lock_acquire+0x150/0x370 [ 38.226304][ T4943] __mutex_lock+0x164/0xf14 [ 38.227113][ T4943] mutex_lock_interruptible_nested+0x24/0x30 [ 38.228146][ T4943] location_store+0xb8/0x938 [ 38.228987][ T4943] md_attr_store+0x304/0x438 [ 38.229727][ T4943] sysfs_kf_write+0xe0/0x108 [ 38.230497][ T4943] kernfs_fop_write_iter+0x260/0x3b8 [ 38.231449][ T4943] vfs_write+0x51c/0xa0c [ 38.232210][ T4943] ksys_write+0x12c/0x228 [ 38.233008][ T4943] __arm64_sys_write+0x84/0x98 [ 38.233878][ T4943] invoke_syscall+0x98/0x244 [ 38.234724][ T4943] el0_svc_common+0xec/0x23c [ 38.235595][ T4943] do_el0_svc+0x4c/0x5c [ 38.236358][ T4943] el0_svc+0x64/0x260 [ 38.237058][ T4943] el0t_64_sync_handler+0x44/0x104 [ 38.237957][ T4943] el0t_64_sync+0x198/0x19c [ 38.349209][ T4965] input: syz0 as /devices/virtual/input/input4 [ 38.443541][ T1178] binder: undelivered TRANSACTION_ERROR: 29190 [ 38.534564][ T4967] loop0: detected capacity change from 0 to 512 [ 38.536165][ T1178] binder: undelivered TRANSACTION_COMPLETE [ 38.536229][ T1178] binder: undelivered TRANSACTION_ERROR: 29201 [ 38.611771][ T4707] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.612320][ T4967] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 38.780407][ T4967] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c840e018, mo2=0002] [ 38.780898][ T4967] EXT4-fs (loop0): orphan cleanup on readonly fs [ 38.781294][ T4967] EXT4-fs error (device loop0): __ext4_iget:5592: inode #11: block 7176215: comm syz.0.16: invalid block [ 38.781337][ T4967] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 38.781792][ T4967] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.16: couldn't read orphan inode 11 (err -117) [ 38.781836][ T4967] loop0: lost filesystem error report for type 5 error -117 [ 38.783933][ T4967] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 38.947999][ T4965] EXT4-fs warning (device loop0): dx_probe:861: inode #2: comm syz.0.16: dx entry: limit 0 != root limit 125 [ 38.948068][ T4965] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.16: Corrupt directory, running e2fsck is recommended [ 39.219260][ T4722] Bluetooth: hci1: command tx timeout [ 39.219298][ T4722] Bluetooth: hci2: command tx timeout [ 39.219319][ T4722] Bluetooth: hci4: command tx timeout [ 39.219338][ T4722] Bluetooth: hci0: command tx timeout [ 39.219354][ T4722] Bluetooth: hci3: command tx timeout [ 39.259299][ T4962] md/raid1:md0: not clean -- starting background reconstruction [ 39.259327][ T4962] md/raid1:md0: active with 2 out of 2 mirrors [ 39.259422][ T4962] md_update_sb: can't update sb for read-only array md0 [ 39.263231][ T4971] md_update_sb: can't update sb for read-only array md0 [ 39.394255][ T4717] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007.