last executing test programs: 11m4.511475471s ago: executing program 2 (id=368): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200000, &(0x7f0000000140), 0x1, 0x50d, &(0x7f0000001bc0)="$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") lsetxattr$security_capability(&(0x7f0000000280)='./file1\x00', &(0x7f0000000080), &(0x7f0000000180)=@v3={0x3000000, [{0x7fffffdf, 0xabda}, {0x3, 0x2}], 0xee00}, 0x18, 0x1) syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x129242, 0x0) 11m3.258473761s ago: executing program 2 (id=373): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x6, 0xf, 0x8, 0x41}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0xffffffffffffffd4, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) 11m2.369640825s ago: executing program 2 (id=378): syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0x69f1, 0xc00, 0x5, 0x2d4}, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) userfaultfd(0x801) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x9) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$rds(0x15, 0x5, 0x0) socket$tipc(0x1e, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) socket(0x200000100000011, 0x3, 0x6) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) 11m1.554682928s ago: executing program 2 (id=383): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200000, &(0x7f0000000140), 0x1, 0x50d, &(0x7f0000001bc0)="$eJzs3c9vI1cdAPDveGPHyaZNWnoABO3SFha0WifxtlHVA5QTQqgSokeQtiHxRlHsOIqd0oQ9pGckTkhU4gRH/gDOPSFx5ILgxqUckPgRgRokDkYzHqdO1t5NyQ+n8ecjzc5787z+vrfZeS/+JvYLYGzdioj9iChFxNsRMZtfT/Ij3uge6eM+Oni4cnjwcCWJTuetfyRZe3ot+v5O6mb+nOWI+N63In6YPBq3tbu3sVyv17bz+ny7sTXf2t27u95YXqut1Tar1aXFpYXX7r1aPbexvtAo5aUvfvj7/a/9OO3WTH6lfxznqTv04lGc1EREfOcigo3AjXw8pVF3hP9LISKejYgXs/t/Nm5kX00A4DrrdGajM9tfP5IcrwIA10Uhy4ElhUqeC5iJQqFS6ebwnovpQr3Zat950NzZXO3myuaiWHiwXq8t5LnCuSgmaX0xK39cr56o34uIZyLiZ5NTWb2y0qyvjvIbHwAYYzdPrP//nuyu/wDANVcedQcAgEtn/QeA8WP9B4DxY/0HgPHTXf+nRt0NAOASef0PAOPH+g8AY+W7b76ZHp3D/POvV9/Z3dlovnN3tdbaqDR2Viorze2tylqzuZZ9Zk/jSc9Xbza3Fl+JnXfnvr7Vas+3dvfuN5o7m+372ed6368Vs0ftX8LIAIBhnnnhgz8l6Yr8+lR2RN9eDsWR9gy4aIVRdwAYmRuj7gAwMnb7gvF1htf4xYifShHAp9rvsj8HbNF7THnQG4Q6nU7noroFXLjbn5P/h3HVl//3W8AwZuT/YXzJ/8P46nSS027yH6d9IABwtcnxA0N+/v9sfv51/sOBH6yefMT7F9krAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuNp6+/9W8r3AZ6JQqFQinoqIuSgmD9brtYWIeDoi/jhZnEzriyPuMwBwVoW/Jvn+X7dnX5451vT8zaNiKSJ+9Iu3fv7ucru9/YeIUvLPyd719vv59eonClw6rxEAAI/XW6ezc98L+Y8OHq70jsvsz9++GRHlbvzDg1IcHsWfiInsXI5iREz/K8nrXUlf7uIs9t+LiM8OGn8SM1kOpLvz6cn4aeynLjV+4Vj8QtbWPaf/Fp85h77AuPkgnX/eGHT/FeJWdh58/5ezGers8vkvfaqVw2wO/Dh+b/67MWT+u3XaGK/89tvd0tSjbe9FfH4iohf7sG/+6cVPhsR/+ZTx//yF518c1tb5ZcTtGBy/P9Z8u7E139rdu7veWF6rrdU2q9WlxaWF1+69Wp3PctTzw1eDv79+5+lhben4p4fELz9h/F8+5fh/9d+3v/+lx8T/6kuD4hfiucfET9fEr5wy/vL0b8rD2tL4q0PG/6Sv/51Txv/wL3uPbBsOAIxOa3dvY7ler20rKFz9Qvpf9gp0Y2DhG5cVqxSDm37yUveePtHU+97/E8YaNmOcR9YNuAqObvqI+M+oOwMAAAAAAAAAAAAAAAx0Ge9YGvUYAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuL7+FwAA//87osfs") lsetxattr$security_capability(&(0x7f0000000280)='./file1\x00', &(0x7f0000000080), &(0x7f0000000180)=@v3={0x3000000, [{0x7fffffdf, 0xabda}, {0x3, 0x2}], 0xee00}, 0x18, 0x1) syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x129242, 0x0) 11m0.433077938s ago: executing program 2 (id=390): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x0) 10m59.470580152s ago: executing program 2 (id=395): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x44, 0x6, 0x4a0, 0x138, 0x0, 0x368, 0x1d0, 0x138, 0x408, 0x408, 0x408, 0x408, 0x408, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x4}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff000000, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x11, 0x0, 0x28}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x10, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0xffffff00, 'vlan1\x00', 'nr0\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast2, 0xff, 0xffffff00, 'ip6gre0\x00', 'virt_wifi0\x00', {0xff}, {}, 0x2e, 0x0, 0x1}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {0xe6d959333babc205}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x28, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, r4, 0x0, 0x11}, [@NDA_DST_MAC={0xa, 0x1, @link_local}]}, 0x28}}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file4\x00', 0x1, 0x20) sendmsg$nl_generic(r1, 0x0, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a70000000090a3f4fc2c9a6bb6a7a00e70a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000d2c00128014000180090001006c6173740000000004000280140001800c000100636f756e7465720004000280080003400000013014000000110001"], 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x200400d0) 10m44.196461989s ago: executing program 32 (id=395): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x44, 0x6, 0x4a0, 0x138, 0x0, 0x368, 0x1d0, 0x138, 0x408, 0x408, 0x408, 0x408, 0x408, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x4}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff000000, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x11, 0x0, 0x28}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x10, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0xffffff00, 'vlan1\x00', 'nr0\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast2, 0xff, 0xffffff00, 'ip6gre0\x00', 'virt_wifi0\x00', {0xff}, {}, 0x2e, 0x0, 0x1}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {0xe6d959333babc205}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x28, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, r4, 0x0, 0x11}, [@NDA_DST_MAC={0xa, 0x1, @link_local}]}, 0x28}}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file4\x00', 0x1, 0x20) sendmsg$nl_generic(r1, 0x0, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a70000000090a3f4fc2c9a6bb6a7a00e70a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000d2c00128014000180090001006c6173740000000004000280140001800c000100636f756e7465720004000280080003400000013014000000110001"], 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x200400d0) 10m14.393205302s ago: executing program 3 (id=550): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x0, 0x0) 10m13.617788465s ago: executing program 3 (id=553): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x0) 10m12.858427167s ago: executing program 3 (id=557): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x140, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c8f0}, 0x4890) r3 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r3, &(0x7f00000005c0)="bad330fb", 0x4, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r2, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 10m11.540193208s ago: executing program 3 (id=561): syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0), 0x0, 0x48e, &(0x7f0000000d00)="$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") mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x80000, 0x0) move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x107) 10m9.792817333s ago: executing program 3 (id=567): syz_emit_vhci(&(0x7f0000000800)=ANY=[@ANYBLOB="041208"], 0xb) socket$nl_route(0x10, 0x3, 0x0) 10m8.918246919s ago: executing program 3 (id=570): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x140, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c8f0}, 0x4890) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, &(0x7f00000005c0)="bad330fb", 0x4, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 10m6.565173105s ago: executing program 33 (id=570): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x140, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c8f0}, 0x4890) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, &(0x7f00000005c0)="bad330fb", 0x4, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 5m15.078692316s ago: executing program 5 (id=1745): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x15, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @empty}, 0x80ad}, 0x1c) 5m14.007143705s ago: executing program 5 (id=1749): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000004000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0/file1\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f00000006c0)=ANY=[], 0x34, 0x1) read$FUSE(r0, &(0x7f0000006200)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x40488102, 0x0, 0x0, 0x7, 0xa15, 0x0, 0x0, 0x1, 0x6}}, 0x50) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0/file1\x00', 0x2100014, 0x0, 0x1, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000008240)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x90, 0x0, 0x1, {0xffffffffffffffff, 0x2, 0x0, 0x2, 0x0, 0x8001, {0x1, 0x0, 0xf8, 0x0, 0xc28d, 0x8000000000000004, 0x0, 0xfffffffd, 0x0, 0xc000, 0xfefffffe, 0x0, 0x0, 0x8009aa}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000002140)="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", 0x2000, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x90, 0x0, 0x9, {0xffffffffffffffff, 0x2, 0x1, 0x3, 0x5, 0x1, {0x20004, 0x800001, 0x8000002004, 0x3, 0x4362d09f, 0x80000002, 0x0, 0xffff0000, 0x0, 0xc000, 0x103, r2, 0x0, 0xfffffff8, 0xdffffffe}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 5m12.724877645s ago: executing program 5 (id=1753): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1b6042c, 0x0, 0xff, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) setxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x1) 5m11.574007394s ago: executing program 5 (id=1756): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000ec13000101a4bd7000fddbdf25011f8810ff03000000000000ffffffff0f000000c300000006000000000000000500000005000000", @ANYRES32=0x0, @ANYBLOB="01000000ffff"], 0x4c}, 0x1, 0x0, 0x0, 0x40480cc}, 0x40000) ioctl$TIOCGSOFTCAR(r0, 0x5414, &(0x7f0000000040)) 5m11.019256715s ago: executing program 5 (id=1758): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3801009, 0x0, 0x11, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x81c0, 0x8103) linkat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x400) chdir(&(0x7f00000003c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc00, 0x836d9fb164f927b3) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) 5m10.059878646s ago: executing program 5 (id=1760): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) bind$netlink(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x60040000) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x1302000, 0x800, 0x0, 0x1}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 4m54.781002446s ago: executing program 34 (id=1760): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) bind$netlink(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x60040000) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x1302000, 0x800, 0x0, 0x1}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 3m35.777845509s ago: executing program 1 (id=1975): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x45c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0x10}, {0x0, 0xfff1}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x0, 0x1, 0xfff, 0x1, 0x9}, {0xd, 0x1, 0x1, 0x9, 0x8ad, 0x89b}, 0x0, 0xc, 0x4d}}, @TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x896f, 0x0, 0x6, 0x3, 0x5, 0xfff, 0x15079dc, 0x2, 0x0, 0x5f0000, 0x0, 0x8, 0x2, 0xc4b7, 0x4, 0x735, 0x2, 0x1, 0xe, 0x7fffffff, 0x3, 0x2, 0x0, 0xff, 0x7, 0x4, 0x9, 0x2, 0xb0, 0x2fe, 0x6, 0x6, 0x2, 0x1, 0x3d9, 0x9, 0x9, 0x5a0f, 0x3, 0xb, 0x4, 0x4, 0x4, 0x4, 0x2, 0x3, 0x6, 0x6, 0x352c, 0x5, 0xd, 0x80000000, 0xe00000, 0x7fffffff, 0x6, 0x2, 0x7, 0x5, 0x200, 0x6, 0xd61, 0xfffffffa, 0x5, 0x0, 0xd69, 0x5, 0xffffffff, 0xed2a, 0x40000000, 0x1, 0x3, 0x4, 0xb, 0x8, 0xff, 0x3, 0x7, 0x9, 0x8, 0x5, 0x6eaa3f69, 0x3, 0x9, 0x3ff, 0x3, 0xaad0, 0xf, 0xf, 0xf, 0x8001, 0x8000, 0x9, 0x3, 0x5, 0x5, 0x7fffffff, 0x900000, 0x8, 0x3, 0x7fffffff, 0x0, 0x3, 0x71, 0x8, 0xffffffff, 0x6, 0x2, 0x4, 0x5, 0x0, 0x4, 0x4, 0xd, 0x1, 0x5, 0x1, 0x1, 0x5f, 0xff, 0x6, 0x40, 0x8, 0x4, 0x86, 0xd, 0x9, 0x2, 0x9, 0xfff, 0x9bb, 0x0, 0x8, 0x2000000, 0x7, 0x0, 0x2, 0x200, 0x3, 0xffffffff, 0x90, 0x2, 0x9, 0x0, 0x3, 0x8, 0x1, 0x1, 0x17f, 0x3, 0x3, 0x2, 0x40, 0x3, 0x5, 0x4, 0x10000, 0x7f, 0xb, 0x3, 0x8a9, 0xb7a, 0x3, 0xfffffffa, 0x6, 0x24, 0x41, 0x423, 0x8000, 0xf78, 0x6, 0x1, 0x5, 0x8, 0x8, 0x3ff, 0x7, 0x6, 0x1c000, 0x5, 0x1000, 0x1, 0x2, 0xffffffcf, 0x9, 0x10, 0x1000, 0x0, 0x1000, 0x7, 0x1, 0x3ff, 0x2, 0x1, 0x3, 0x6, 0x5, 0x3, 0xb76, 0x4, 0x8, 0xd8c4, 0x1ff, 0x400, 0x0, 0x44, 0xfff, 0x2d36, 0x3, 0xc00000, 0x404, 0x7, 0x2311, 0x1f03, 0xbf9d, 0xa0000000, 0x6ef, 0x81, 0x213e, 0x3, 0x4, 0x6, 0x401, 0x4, 0x4, 0x2, 0x4, 0x7a, 0x5, 0x92, 0x10, 0x9, 0x8, 0x0, 0x4, 0x2, 0x10000, 0x1, 0x3, 0x5, 0x80000001, 0x401, 0xbd8, 0xffffe1af, 0xbf2, 0x9, 0x1, 0x5, 0x4, 0x9641, 0x4, 0x6d, 0x6, 0x4, 0x8, 0x6abac065]}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0xb3538085985bb3d6}, 0x0) 3m34.426753717s ago: executing program 1 (id=1977): r0 = syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000140)={0x8b28, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) r3 = syz_open_procfs(r0, 0x0) pread64(r3, &(0x7f0000000140)=""/15, 0xf, 0x4) 3m32.983519251s ago: executing program 1 (id=1981): r0 = socket(0xa, 0x2400000001, 0x0) getsockopt$sock_int(r0, 0x1, 0x2c, 0x0, 0x0) 3m31.667622112s ago: executing program 1 (id=1985): syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="043003087bc9"], 0x6) 3m30.118359525s ago: executing program 1 (id=1988): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x10) mknodat$loop(r0, &(0x7f00000000c0)='./file0\x00', 0xc000, 0x1) 3m28.886399008s ago: executing program 1 (id=1992): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3801009, 0x0, 0x11, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x81c0, 0x8103) linkat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x400) chdir(&(0x7f00000003c0)='./bus\x00') openat(0xffffffffffffff9c, 0x0, 0xc00, 0x836d9fb164f927b3) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) 3m13.540838465s ago: executing program 35 (id=1992): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3801009, 0x0, 0x11, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x81c0, 0x8103) linkat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x400) chdir(&(0x7f00000003c0)='./bus\x00') openat(0xffffffffffffff9c, 0x0, 0xc00, 0x836d9fb164f927b3) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) 3m13.421488124s ago: executing program 6 (id=2018): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x9820}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000003}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0x80000003}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 3m10.952379581s ago: executing program 6 (id=2023): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x10001, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 3m9.21898085s ago: executing program 6 (id=2026): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x8, "b5465da5cc590d3033de259c2996817bb959ebc8ed112ca501209bdef7afde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000380)={"0880bced01eb0100000000000000000700000000000000c900", r4, 0xffffffffffffffff}) ppoll(&(0x7f0000000200)=[{r5, 0x348}], 0x1, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m6.926173852s ago: executing program 6 (id=2030): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106}}, 0x20) unshare(0x8000400) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {&(0x7f0000000200), r1, r0}}, 0x18) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="0d000000246804003199aee6fdb9291b3091ec1a2d41d2270a00d8ec030f5919f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d256a67fec0cbb5c4e93d5c151d97f676ab93b1efbd46f600dc964231e3257bf358448fddf894c0cdfa9115adbe5b19bc912fcbc8aac7719b649b1ff1267491da", 0xff}, {&(0x7f00000024c0)="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", 0xffd}], 0x3) 3m5.486671345s ago: executing program 6 (id=2032): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000101401002dbd700001dcdf2508004b00130004000800030001000000080001000000000008004a"], 0x30}, 0x1, 0x0, 0x0, 0x50}, 0xc0) 3m3.424898136s ago: executing program 6 (id=2036): ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1e0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000010c0)={0x14, 0x19, 0x301, 0x270bd24, 0x25dfdbfa, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0x4008005}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x12, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @cgroup_sock_addr=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000) 2m48.112095833s ago: executing program 36 (id=2036): ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1e0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000010c0)={0x14, 0x19, 0x301, 0x270bd24, 0x25dfdbfa, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0x4008005}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x12, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @cgroup_sock_addr=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000) 9.407565471s ago: executing program 0 (id=2688): r0 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/dev\x00') pread64(r0, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB], 0xfdef) 9.283174724s ago: executing program 9 (id=2690): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000000130005000000", @ANYRES32=r1, @ANYBLOB="003000000000000014001a80100004800c"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) 8.572939628s ago: executing program 9 (id=2694): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x1c, 0x0, 0x4, 0xf0bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0xb6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000080}, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xf, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240), 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 8.39077992s ago: executing program 0 (id=2695): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x81, &(0x7f0000001180)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000740)={0x13, 0x10, 0xfa00, {&(0x7f0000000540), r1, 0x2}}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1eae8f721276f1}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@map=0x1, 0xf, 0x1, 0x0, &(0x7f00000000c0)=[0x0], 0x1, 0x0, &(0x7f0000000100)=[0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) socket$igmp(0x2, 0x3, 0x2) r9 = socket$netlink(0x10, 0x3, 0x4) writev(r9, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)={@cgroup, r3, 0x31, 0x18, 0x0, @void, @value=r2, @void, @void, r5}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r11, @ANYBLOB="00000000100000001c001a800800", @ANYRES16=r12], 0x44}}, 0x2000800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 7.358985272s ago: executing program 9 (id=2699): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$GETPID(0x0, 0x4, 0xb, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0)=0x4f8d, 0x4) 5.230803167s ago: executing program 7 (id=2708): r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82, 0x0, 0x0}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0xb, 0x4004, @fd, 0xf8, 0x0, 0x0, 0x11, 0x1}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 4.993255371s ago: executing program 8 (id=2710): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r3, 0x7}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, r6, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r6, 0x7}}, 0x48) 4.455112518s ago: executing program 7 (id=2711): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xc}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1e7}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0xe6a7}, "91679c68"}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20048084}, 0x0) 4.421605728s ago: executing program 8 (id=2712): socket$tipc(0x1e, 0x2, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 4.137404651s ago: executing program 4 (id=2713): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0xda) unlinkat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', 0x200) 3.542824939s ago: executing program 4 (id=2714): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000580)='m'}) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000000)={0xc0002003}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) 3.477307433s ago: executing program 8 (id=2715): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_pressure(r0, &(0x7f0000000100)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x1000000100003}, 0x2f) r2 = syz_io_uring_setup(0xf04, &(0x7f0000000400)={0x0, 0x595f, 0x1000, 0x3, 0x10000051}, &(0x7f0000000200)=0x0, 0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, 0x0, r4, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x5}) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 3.425367956s ago: executing program 7 (id=2716): ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000400)) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000440)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x4004743a, &(0x7f0000000300)) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) sendmmsg(r0, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000007c0)="0281", 0x2}], 0x1}}], 0x1, 0x24005805) 3.081143035s ago: executing program 0 (id=2717): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001300050000000000feffff", @ANYRES32=r1, @ANYBLOB="003000000000000014001a80100004800c"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) 2.778230481s ago: executing program 7 (id=2718): r0 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/dev\x00') pread64(r0, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1"], 0xfdef) 2.685271602s ago: executing program 8 (id=2719): sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000073c0)={0x0, 0x0, &(0x7f0000007380)={&(0x7f0000000900)={0x218, 0xd, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x204, 0x3, 0x0, 0x1, [{0x200, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x128, 0xb, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x64, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x19}, @NFTA_MASQ_FLAGS={0x8}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x20}]}}}, {0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1e}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_DATA={0xb4, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa1, 0x1, "82cd342f6217437be9cc5c2de25429989e5a7c7b97883f1bd469c8a5ea2d2e3b97ada40e2c2898964d35f2e24ff0a747a9ef6c6545439630166b2f7435efb00338e28cb8d1013b8e38a85525d41ef08aace018a13ecc56cb6640ad64a8ff9edaa5202ca9af693e0fe964aeab7b9e5da6b871d0d737c4c5819f89d64b9cd27643deaf73dfcf6d43e6b04a66287da98bfba8fdd53a031e421e1b64bdf14d"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}]}]}]}, 0x218}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000008c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="3f0033008000e100ffffffffffff08021100"], 0x5c}, 0x1, 0x0, 0x0, 0x880}, 0x0) 2.60689484s ago: executing program 4 (id=2720): openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x482, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='schedstat\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 2.254288209s ago: executing program 9 (id=2721): syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b0000000000"], 0x48) r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82, 0x0, 0x0}, &(0x7f0000000180), &(0x7f0000000140), &(0x7f0000000100)) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x59b300) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 2.173419687s ago: executing program 0 (id=2722): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r3, 0x7}}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, r5, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r5, 0x7}}, 0x48) 2.133291336s ago: executing program 8 (id=2723): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x1c, 0x0, 0x4, 0xf0bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0xb6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000080}, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xf, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7", 0x9, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 1.975570574s ago: executing program 4 (id=2724): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0xda) unlinkat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', 0x200) 1.567881709s ago: executing program 7 (id=2725): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) sendmsg$nl_route_sched(r2, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x8003, 0xbffc, 0xe652, 0x5, 0x134, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e22, 0xeffffff9, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff18b6, 0x3, 0xc, 0xffffffb9, 0x1a}, 0x9c) 1.493023241s ago: executing program 9 (id=2726): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=@newqdisc={0x78, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r3, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x401, 0xfffffeff, 0x1, 0x7, 0x2}, 0x2, 0x0, 0x6, 0x5a86, 0x10001, 0xb, 0x15, 0x2, 0x6, 0x4de, {0x401, 0x4, 0x2, 0x1, 0x80, 0x7fffffff}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 1.455360384s ago: executing program 0 (id=2727): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0xffffffffffffffff) 1.381950999s ago: executing program 4 (id=2728): ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000400)) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000440)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x4004743a, &(0x7f0000000300)) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) sendmmsg(r0, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000007c0)="0281", 0x2}], 0x1}}], 0x1, 0x24005805) 945.460301ms ago: executing program 8 (id=2729): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_pressure(r0, &(0x7f0000000100)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x1000000100003}, 0x2f) r2 = syz_io_uring_setup(0xf04, &(0x7f0000000400)={0x0, 0x595f, 0x1000, 0x3, 0x10000051}, &(0x7f0000000200)=0x0, 0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, 0x0, r4, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x5}) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 579.523938ms ago: executing program 4 (id=2730): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000580)='m'}) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000000)={0xc0002003}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) 430.572237ms ago: executing program 7 (id=2731): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) syz_emit_ethernet(0x26, &(0x7f0000000040)={@local, @link_local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x18, 0x89, 0x0, 0x0, 0x89, 0x0, @dev, @local}, "5613e798"}}}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x40000) sendmsg$nl_route(r0, 0x0, 0x40000c0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="10000000000000000100000001"], 0x10, 0x6000}}], 0x1, 0x80) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x38}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, &(0x7f00000010c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000000c0)={0x21}, 0x10}, 0x1c) socket$inet(0x2, 0x3, 0x2) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r1) 427.263284ms ago: executing program 0 (id=2732): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001300050000000000feffff", @ANYRES32=r1, @ANYBLOB="003000000000000014001a80100004800c"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) 0s ago: executing program 9 (id=2733): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x80204705, &(0x7f0000000040)={0x1, 0x7, 0x0, 0x0, 0x0, "3eccd8f9d20000000000001000000200000500"}) kernel console output (not intermixed with test programs): 529.267968][T10053] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.303993][T10058] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 529.339540][T10045] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 529.350751][T10058] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 529.663039][T10045] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 529.977960][ T5590] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 530.091745][ T7483] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 532.656178][T10094] loop0: detected capacity change from 0 to 2048 [ 532.783501][T10094] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 532.935557][T10103] loop1: detected capacity change from 0 to 512 [ 532.951369][T10094] ext4 filesystem being mounted at /292/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 533.128619][T10103] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 533.212706][T10103] ext4 filesystem being mounted at /308/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 533.553106][T10094] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 533.960012][ T5590] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.136158][T10107] loop4: detected capacity change from 0 to 1024 [ 534.489199][T10107] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 534.546837][T10107] ext4 filesystem being mounted at /292/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 535.414522][ T5604] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 537.502870][T10141] loop1: detected capacity change from 0 to 512 [ 537.635936][T10141] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 537.739756][T10139] loop0: detected capacity change from 0 to 2048 [ 537.751714][T10141] ext4 filesystem being mounted at /312/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 537.847872][T10139] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 537.967639][T10139] ext4 filesystem being mounted at /296/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 538.502440][T10139] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.529415][ T5590] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.207503][T10154] loop0: detected capacity change from 0 to 1024 [ 539.361936][T10154] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 539.472574][T10154] ext4 filesystem being mounted at /297/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 539.914245][ T5586] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 540.452296][ T5591] Bluetooth: hci0: unexpected event for opcode 0x1408 [ 540.806772][T10175] loop1: detected capacity change from 0 to 2048 [ 540.912670][T10175] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 540.943600][T10175] ext4 filesystem being mounted at /315/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 541.089735][T10180] loop0: detected capacity change from 0 to 512 [ 541.257029][T10180] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 541.373321][T10180] ext4 filesystem being mounted at /299/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 541.602057][T10175] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 542.114015][ T5586] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 542.493818][ T5595] ------------[ cut here ]------------ [ 542.499455][ T5595] WARNING: net/bluetooth/hci_conn.c:634 at hci_conn_timeout+0xad/0x530, CPU#1: kworker/u9:4/5595 [ 542.510670][ T5595] Modules linked in: [ 542.514781][ T5595] CPU: 1 UID: 0 PID: 5595 Comm: kworker/u9:4 Tainted: G W L syzkaller #0 PREEMPT(lazy) [ 542.526472][ T5595] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 542.531950][ T5595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 542.542295][ T5595] Workqueue: hci0 hci_conn_timeout [ 542.547661][ T5595] RIP: 0010:hci_conn_timeout+0xad/0x530 [ 542.553684][ T5595] Code: 41 f7 d4 45 21 f4 74 27 45 85 f6 74 2f e8 0b f6 96 f2 e9 59 04 00 00 44 89 ff e8 6e 40 45 f3 45 85 f6 79 bc e8 f4 f5 96 f2 90 <0f> 0b 90 eb 12 44 89 ff e8 56 40 45 f3 45 85 f6 75 d1 e8 dc f5 96 [ 542.579125][ T5595] RSP: 0018:ffff888013747b90 EFLAGS: 00010293 [ 542.587212][ T5595] RAX: ffffffff8f69804c RBX: ffff8881179d0bd8 RCX: ffff8881179d0000 [ 542.595558][ T5595] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 542.603809][ T5595] RBP: ffff888013747bf0 R08: ffffea000000000f R09: 0000000000000000 [ 542.612083][ T5595] R10: ffff888237cb2028 R11: ffffffff8f697fa0 R12: 0000000000000000 [ 542.620242][ T5595] R13: ffff8880524299c0 R14: 00000000ffffffff R15: 0000000000000000 [ 542.628555][ T5595] FS: 0000000000000000(0000) GS:ffff8881aa710000(0000) knlGS:0000000000000000 [ 542.637862][ T5595] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 542.644779][ T5595] CR2: 00000000f53ccff4 CR3: 0000000051b46000 CR4: 00000000003526f0 [ 542.653065][ T5595] Call Trace: [ 542.656480][ T5595] [ 542.659541][ T5595] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 542.665759][ T5595] ? __pfx_hci_conn_timeout+0x10/0x10 [ 542.676303][ T5595] process_scheduled_works+0xb65/0x1e40 [ 542.683819][ T5595] worker_thread+0xee4/0x1590 [ 542.688807][ T5595] kthread+0x53a/0x5f0 [ 542.693411][ T5595] ? __pfx_worker_thread+0x10/0x10 [ 542.698765][ T5595] ? __pfx_kthread+0x10/0x10 [ 542.703731][ T5595] ret_from_fork+0x20f/0x8d0 [ 542.708559][ T5595] ? __switch_to+0x573/0x7a0 [ 542.713608][ T5595] ? __pfx_kthread+0x10/0x10 [ 542.718456][ T5595] ret_from_fork_asm+0x1a/0x30 [ 542.723598][ T5595] [ 542.726739][ T5595] ---[ end trace 0000000000000000 ]--- [ 543.119920][T10194] loop0: detected capacity change from 0 to 1024 [ 543.298583][T10194] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 543.382885][T10194] ext4 filesystem being mounted at /300/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 543.849016][ T5586] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 544.143676][ T5587] Bluetooth: hci1: unexpected event for opcode 0x1408 [ 544.811474][ T5587] Bluetooth: hci0: command 0x0406 tx timeout [ 545.126986][T10214] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1481'. [ 545.206435][T10212] loop1: detected capacity change from 0 to 2048 [ 545.243842][T10217] loop0: detected capacity change from 0 to 512 [ 545.385788][T10212] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 545.449836][T10212] ext4 filesystem being mounted at /319/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 545.476336][T10217] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 545.489483][T10217] ext4 filesystem being mounted at /302/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 546.022859][T10212] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.173756][ T5591] ------------[ cut here ]------------ [ 546.179571][ T5591] WARNING: net/bluetooth/hci_conn.c:634 at hci_conn_timeout+0xad/0x530, CPU#1: kworker/u9:3/5591 [ 546.190650][ T5591] Modules linked in: [ 546.194805][ T5591] CPU: 1 UID: 0 PID: 5591 Comm: kworker/u9:3 Tainted: G W L syzkaller #0 PREEMPT(lazy) [ 546.206297][ T5591] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 546.211744][ T5591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 546.222150][ T5591] Workqueue: hci1 hci_conn_timeout [ 546.227496][ T5591] RIP: 0010:hci_conn_timeout+0xad/0x530 [ 546.233343][ T5591] Code: 41 f7 d4 45 21 f4 74 27 45 85 f6 74 2f e8 0b f6 96 f2 e9 59 04 00 00 44 89 ff e8 6e 40 45 f3 45 85 f6 79 bc e8 f4 f5 96 f2 90 <0f> 0b 90 eb 12 44 89 ff e8 56 40 45 f3 45 85 f6 75 d1 e8 dc f5 96 [ 546.253550][ T5591] RSP: 0000:ffff88801373fb90 EFLAGS: 00010293 [ 546.264786][ T5591] RAX: ffffffff8f69804c RBX: ffff8881179b2d58 RCX: ffff8881179b2180 [ 546.274690][ T5591] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 546.283023][ T5591] RBP: ffff88801373fbf0 R08: ffffea000000000f R09: 0000000000000000 [ 546.291261][ T5591] R10: ffff888237cb2028 R11: ffffffff8f697fa0 R12: 0000000000000000 [ 546.299404][ T5591] R13: ffff888023e5e9c0 R14: 00000000ffffffff R15: 0000000000000000 [ 546.307733][ T5591] FS: 0000000000000000(0000) GS:ffff8881aa710000(0000) knlGS:0000000000000000 [ 546.317061][ T5591] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 546.323990][ T5591] CR2: 00000000800013c0 CR3: 0000000051b46000 CR4: 00000000003526f0 [ 546.332381][ T5591] Call Trace: [ 546.335839][ T5591] [ 546.338901][ T5591] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 546.345102][ T5591] ? __pfx_hci_conn_timeout+0x10/0x10 [ 546.350832][ T5591] process_scheduled_works+0xb65/0x1e40 [ 546.361603][ T5591] worker_thread+0xee4/0x1590 [ 546.366581][ T5591] kthread+0x53a/0x5f0 [ 546.372682][ T5591] ? __pfx_worker_thread+0x10/0x10 [ 546.378063][ T5591] ? __pfx_kthread+0x10/0x10 [ 546.383069][ T5591] ret_from_fork+0x20f/0x8d0 [ 546.387888][ T5591] ? __switch_to+0x573/0x7a0 [ 546.392824][ T5591] ? __pfx_kthread+0x10/0x10 [ 546.397662][ T5591] ret_from_fork_asm+0x1a/0x30 [ 546.402866][ T5591] [ 546.406011][ T5591] ---[ end trace 0000000000000000 ]--- [ 546.560553][ T5586] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.745076][T10230] loop4: detected capacity change from 0 to 512 [ 546.849136][T10230] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 547.052869][T10230] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 547.070389][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 547.077031][ C0] EXT4-fs (loop4): initial error at time 1781580043: ext4_mb_generate_buddy:1317 [ 547.086515][ C0] EXT4-fs (loop4): last error at time 1781580043: ext4_mb_generate_buddy:1317 [ 547.167461][T10230] EXT4-fs (loop4): 1 truncate cleaned up [ 547.220259][T10230] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 547.571259][ T5595] Bluetooth: hci1: unexpected event for opcode 0x1408 [ 548.020551][T10243] loop6: detected capacity change from 0 to 1024 [ 548.213387][ T5604] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 548.293701][T10243] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 548.440094][T10243] ext4 filesystem being mounted at /169/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 549.062772][T10258] loop1: detected capacity change from 0 to 512 [ 549.182797][T10253] loop0: detected capacity change from 0 to 2048 [ 549.206859][T10260] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1492'. [ 549.264949][T10258] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 549.353564][T10258] ext4 filesystem being mounted at /323/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 549.488510][T10253] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 549.592852][T10253] ext4 filesystem being mounted at /305/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 549.627081][ T7483] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 549.957167][ T5590] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 550.165495][T10253] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 551.013188][T10273] netlink: 'syz.6.1496': attribute type 1 has an invalid length. [ 551.258604][T10276] loop1: detected capacity change from 0 to 512 [ 551.319715][T10276] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 551.498986][T10276] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 551.519875][ T5591] Bluetooth: hci0: unexpected event for opcode 0x1408 [ 551.573361][T10276] ext4 filesystem being mounted at /325/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 551.764570][T10276] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz.1.1500: iget: bad i_size value: 2533274857506816 [ 551.839277][T10276] EXT4-fs (loop1): Remounting filesystem read-only [ 552.309856][ T5590] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 553.091891][T10292] loop0: detected capacity change from 0 to 1024 [ 553.216200][T10292] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 553.350965][T10292] ext4 filesystem being mounted at /309/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 553.392883][T10297] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1507'. [ 553.898504][T10301] loop1: detected capacity change from 0 to 2048 [ 553.946173][ T5586] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 554.042537][T10301] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 554.136003][T10301] ext4 filesystem being mounted at /327/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 554.356827][T10301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 555.096652][T10316] loop1: detected capacity change from 0 to 512 [ 555.149490][T10316] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 555.199782][ T5591] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 555.307689][T10316] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 555.358877][T10316] ext4 filesystem being mounted at /328/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 555.438649][T10316] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz.1.1515: iget: bad i_size value: 2533274857506816 [ 555.544123][T10316] EXT4-fs (loop1): Remounting filesystem read-only [ 556.004623][ T5590] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 556.573573][T10336] loop1: detected capacity change from 0 to 1024 [ 556.742744][T10338] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1522'. [ 556.762939][T10336] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 556.775630][T10336] ext4 filesystem being mounted at /329/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 557.289835][ T5590] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 557.412262][T10346] loop4: detected capacity change from 0 to 512 [ 557.791494][T10346] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 557.919467][T10346] ext4 filesystem being mounted at /305/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 558.061000][T10353] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 558.518758][ T5591] Bluetooth: hci1: unexpected event for opcode 0x1408 [ 558.864508][ T5604] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 559.104397][T10365] loop0: detected capacity change from 0 to 512 [ 559.181231][T10365] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 559.375193][T10365] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 559.441274][T10365] ext4 filesystem being mounted at /315/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 559.541814][T10365] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz.0.1531: iget: bad i_size value: 2533274857506816 [ 559.649166][T10365] EXT4-fs (loop0): Remounting filesystem read-only [ 560.105955][ T5586] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 561.139586][T10386] netlink: 'syz.6.1537': attribute type 1 has an invalid length. [ 561.324089][ T5591] Bluetooth: hci0: unexpected event for opcode 0x1408 [ 561.915519][T10398] loop0: detected capacity change from 0 to 512 [ 562.066237][T10398] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 562.114312][T10398] ext4 filesystem being mounted at /318/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 562.615051][T10403] loop4: detected capacity change from 0 to 1024 [ 562.717998][T10403] EXT4-fs (loop4): inodes count not valid: 0 vs 32 [ 562.778997][ T5586] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.600906][T10439] loop0: detected capacity change from 0 to 512 [ 565.804480][T10439] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 565.891235][T10439] ext4 filesystem being mounted at /321/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 566.589882][ T5586] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 566.796332][T10451] overlayfs: failed to resolve './file0': -2 [ 567.229770][T10455] netlink: 'syz.5.1559': attribute type 15 has an invalid length. [ 567.776195][T10459] loop6: detected capacity change from 0 to 512 [ 567.896672][T10459] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 568.129300][T10459] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 568.237574][T10459] ext4 filesystem being mounted at /179/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 568.469228][T10467] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1566'. [ 568.516988][T10468] EXT4-fs error (device loop6): ext4_lookup:1785: inode #12: comm syz.6.1561: iget: bad i_size value: 2533274857506816 [ 568.595846][T10468] EXT4-fs (loop6): Remounting filesystem read-only [ 569.011442][T10474] netlink: 'syz.4.1568': attribute type 1 has an invalid length. [ 569.248698][ T7483] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 569.267798][T10477] loop0: detected capacity change from 0 to 1024 [ 569.362810][T10480] loop1: detected capacity change from 0 to 512 [ 569.375566][T10477] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 569.393562][T10477] ext4 filesystem being mounted at /325/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 569.574342][ T5586] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 569.612877][T10480] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 569.733157][T10480] ext4 filesystem being mounted at /339/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 570.561305][ T5590] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.283735][T10503] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1577'. [ 572.028252][T10509] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1579'. [ 572.481879][T10514] loop6: detected capacity change from 0 to 512 [ 572.586613][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 572.593360][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 572.633694][T10514] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 572.814524][T10514] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 572.853581][T10514] ext4 filesystem being mounted at /181/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 572.907127][T10524] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1584'. [ 572.939591][T10519] loop0: detected capacity change from 0 to 1024 [ 572.946170][T10524] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1584'. [ 573.005958][T10514] EXT4-fs error (device loop6): ext4_lookup:1785: inode #12: comm syz.6.1581: iget: bad i_size value: 2533274857506816 [ 573.079254][T10519] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 573.151610][T10519] ext4 filesystem being mounted at /329/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 573.266238][T10514] EXT4-fs (loop6): Remounting filesystem read-only [ 573.535959][ T5586] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 573.959303][ T7483] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.488603][T10538] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1590'. [ 575.421708][T10551] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1594'. [ 576.168241][T10557] loop0: detected capacity change from 0 to 1024 [ 576.291707][T10557] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 576.416300][T10557] ext4 filesystem being mounted at /333/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 576.561368][T10563] loop4: detected capacity change from 0 to 512 [ 576.650920][T10563] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 576.767559][T10563] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 576.901581][T10563] ext4 filesystem being mounted at /323/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 577.064837][T10563] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.1598: iget: bad i_size value: 2533274857506816 [ 577.149918][T10563] EXT4-fs (loop4): Remounting filesystem read-only [ 577.159990][ T5586] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 577.372823][T10569] loop6: detected capacity change from 0 to 2048 [ 577.679647][T10569] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 577.727444][T10569] ext4 filesystem being mounted at /183/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 577.730184][ T5604] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 577.934379][T10575] EXT4-fs (loop6): shut down requested (2) [ 578.045218][T10577] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 578.089141][T10569] overlayfs: failed to set xattr on upper [ 578.211291][T10569] overlayfs: ...falling back to redirect_dir=nofollow. [ 578.296193][T10569] overlayfs: ...falling back to index=off. [ 578.364227][T10569] overlayfs: ...falling back to uuid=null. [ 578.418216][T10569] overlayfs: Failed to create volatile/dirty file. [ 578.675347][T10583] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1603'. [ 579.092336][ T7483] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.103510][ T7909] Quota error (device loop6): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 579.167985][ T7909] Quota error (device loop6): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 579.176848][T10591] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1607'. [ 580.079073][T10598] loop1: detected capacity change from 0 to 1024 [ 580.176624][T10598] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 580.210199][T10598] ext4 filesystem being mounted at /349/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 580.851271][ T5590] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 581.485600][T10617] netlink: 'syz.1.1617': attribute type 28 has an invalid length. [ 581.494645][T10616] fuse: Bad value for 'fd' [ 581.675488][T10623] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1620'. [ 582.142532][T10626] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1621'. [ 583.579413][T10641] loop4: detected capacity change from 0 to 1024 [ 583.747701][T10641] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 583.847865][T10641] ext4 filesystem being mounted at /330/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 584.421964][ T5604] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 584.898615][T10657] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1634'. [ 585.019635][T10662] fuse: Bad value for 'fd' [ 585.037821][T10660] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1632'. [ 586.964047][ T5690] kernel write not supported for file bpf-prog (pid: 5690 comm: kworker/1:6) [ 587.095533][T10685] loop4: detected capacity change from 0 to 1024 [ 587.243361][T10685] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 587.323438][T10691] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1646'. [ 587.344574][T10685] ext4 filesystem being mounted at /334/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 587.926682][ T5604] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 587.947058][T10696] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1649'. [ 588.235174][ T5591] Bluetooth: hci0: unexpected event for opcode 0x1408 [ 588.525791][T10703] fuse: Bad value for 'fd' [ 589.904799][T10723] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1659'. [ 590.366511][T10725] loop1: detected capacity change from 0 to 1024 [ 590.496278][T10725] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 590.541910][T10725] ext4 filesystem being mounted at /361/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 590.577504][ T5591] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 590.816468][ T5590] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 591.007336][T10738] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1663'. [ 591.357577][T10746] loop6: detected capacity change from 0 to 512 [ 591.439934][T10746] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 591.542385][T10746] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 591.572318][T10746] ext4 filesystem being mounted at /193/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 591.664621][T10746] EXT4-fs error (device loop6): ext4_get_first_dir_block:3537: inode #12: comm syz.6.1668: Attempting to read directory block (0) that is past i_size (3) [ 592.015325][ T7483] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 592.156999][T10751] fuse: Bad value for 'fd' [ 592.364914][T10753] loop1: detected capacity change from 0 to 512 [ 592.424836][T10753] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 592.493477][T10753] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 592.520408][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 592.527321][ C0] EXT4-fs (loop1): initial error at time 1781580088: ext4_mb_generate_buddy:1317 [ 592.536828][ C0] EXT4-fs (loop1): last error at time 1781580088: ext4_mb_generate_buddy:1317 [ 592.564715][T10753] EXT4-fs (loop1): 1 truncate cleaned up [ 592.629615][T10753] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 593.107391][ T5590] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 593.733227][T10773] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1674'. [ 594.597783][ T5591] Bluetooth: hci5: unexpected event for opcode 0x1408 [ 594.906389][T10785] loop4: detected capacity change from 0 to 512 [ 595.058094][T10785] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 595.105654][T10790] tipc: Started in network mode [ 595.111376][T10790] tipc: Node identity 5, cluster identity 4 [ 595.117804][T10790] tipc: Node number set to 5 [ 595.125159][T10790] tipc: Cannot configure node identity twice [ 595.172766][T10785] ext4 filesystem being mounted at /342/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 595.843344][ T5604] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 595.947882][T10796] fuse: Bad value for 'fd' [ 596.223787][T10801] overlayfs: missing 'lowerdir' [ 597.028265][T10807] overlayfs: missing 'lowerdir' [ 598.849757][T10828] loop4: detected capacity change from 0 to 512 [ 598.914174][T10829] fuse: fd is not a fuse device [ 599.006073][T10828] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 599.124295][T10828] ext4 filesystem being mounted at /346/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 599.692531][ T5604] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 600.066144][T10841] overlayfs: missing 'lowerdir' [ 600.177524][T10844] overlayfs: missing 'lowerdir' [ 600.258860][T10845] fuse: fd is not a fuse device [ 603.577639][T10874] overlayfs: missing 'lowerdir' [ 604.693606][T10878] overlayfs: failed to get inode (-116) [ 604.701283][T10880] fuse: Invalid rootmode [ 604.729987][T10878] overlayfs: failed to get inode (-116) [ 607.378608][T10910] overlayfs: missing 'lowerdir' [ 608.353722][T10920] loop0: detected capacity change from 0 to 512 [ 608.364597][T10922] 9p: Bad value for 'rfdno' [ 608.365751][T10916] loop4: detected capacity change from 0 to 4096 [ 608.474640][T10916] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 608.499204][T10921] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 608.643630][T10916] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 608.670618][T10920] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 608.790072][T10920] ext4 filesystem being mounted at /363/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 609.108623][ T5604] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 609.475157][T10930] fuse: Invalid rootmode [ 609.736983][ T5586] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 610.599919][T10937] bridge_slave_0: left allmulticast mode [ 610.646169][T10937] bridge_slave_0: left promiscuous mode [ 610.689910][T10937] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.866068][T10937] bridge_slave_1: left allmulticast mode [ 610.968704][T10937] bridge_slave_1: left promiscuous mode [ 611.021496][T10937] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.398670][T10937] bond0: (slave bond_slave_0): Releasing backup interface [ 611.616384][T10957] overlayfs: missing 'lowerdir' [ 611.646452][T10937] bond0: (slave bond_slave_1): Releasing backup interface [ 611.976599][ T5690] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 612.049879][T10937] team0: Port device team_slave_0 removed [ 612.051617][ T5690] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 612.309651][T10937] team0: Port device team_slave_1 removed [ 612.414014][T10937] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 612.461831][T10937] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 612.547010][T10937] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 612.629870][T10937] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 612.775096][T10937] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 614.023493][T10973] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 614.041932][T10973] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 614.917466][T10980] loop4: detected capacity change from 0 to 512 [ 615.039970][T10980] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 615.101664][T10980] ext4 filesystem being mounted at /362/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 615.298700][T10988] fuse: fd is not a fuse device [ 615.693320][ T5604] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 616.437323][T10993] Bluetooth: MGMT ver 1.23 [ 616.626802][T10996] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 616.710624][T10996] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 617.866236][T11010] loop0: detected capacity change from 0 to 512 [ 617.910158][T11014] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 617.971232][T11014] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 618.009866][T11010] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 618.227887][T11010] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.1755: bad orphan inode 13 [ 618.263600][T11010] loop0: lost filesystem error report for type 5 error -117 [ 618.270502][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 618.284733][ C1] EXT4-fs (loop0): last error at time 1781580114: ext4_orphan_get:1423 [ 618.392450][T11010] ext4_test_bit(bit=12, block=18) = 1 [ 618.469001][T11010] is_bad_inode(inode)=0 [ 618.492410][T11010] NEXT_ORPHAN(inode)=0 [ 618.530841][T11010] max_ino=32 [ 618.561855][T11010] i_nlink=1 [ 618.606568][T11010] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 619.655421][T11030] loop4: detected capacity change from 0 to 512 [ 620.011711][T11030] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 620.159236][T11030] ext4 filesystem being mounted at /366/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 620.591909][T11035] fuse: Bad value for 'rootmode' [ 620.874057][ T5604] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 621.781050][T10983] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 248: padding at end of block bitmap is not set [ 621.942650][ T5586] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 622.928764][ T5595] Bluetooth: hci0: unexpected event for opcode 0x1408 [ 622.973666][T11045] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 623.051305][T11045] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 625.360792][T11064] loop1: detected capacity change from 0 to 512 [ 625.506574][T11064] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 625.619229][T11064] ext4 filesystem being mounted at /378/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 625.633354][T11068] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 626.116413][ T5590] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 626.681816][T11077] fuse: Bad value for 'rootmode' [ 626.971937][ T5595] Bluetooth: hci0: command 0x0406 tx timeout [ 627.645389][ T5595] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 628.055825][T11091] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 628.117756][T11091] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 629.292783][T11099] syzkaller0: entered promiscuous mode [ 629.322780][T11099] syzkaller0: entered allmulticast mode [ 631.087621][T11105] loop1: detected capacity change from 0 to 512 [ 631.227362][T11105] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 631.372699][T11105] ext4 filesystem being mounted at /382/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 631.619764][ T5595] Bluetooth: hci2: command 0x0406 tx timeout [ 631.951785][ T5590] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 633.179358][T11125] fuse: Unknown parameter 'use00000000000000000000' [ 634.025498][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 634.036191][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 634.473627][T11137] syzkaller0: entered promiscuous mode [ 634.548741][T11137] syzkaller0: entered allmulticast mode [ 635.203461][T11141] overlayfs: missing 'lowerdir' [ 635.308634][ T5595] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 635.326307][ T5595] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 635.338185][ T5595] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 635.374275][ T5595] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 635.391131][ T5595] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 635.781212][T11147] loop1: detected capacity change from 0 to 512 [ 636.109545][T11147] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 636.247947][T11147] ext4 filesystem being mounted at /385/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 637.240060][T11162] loop4: detected capacity change from 0 to 512 [ 637.352793][ T5590] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 637.421677][T11162] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 637.451642][ T5591] Bluetooth: hci3: command tx timeout [ 637.645354][T11162] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 637.670368][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 637.677053][ C1] EXT4-fs (loop4): initial error at time 1781580133: ext4_mb_generate_buddy:1317 [ 637.686548][ C1] EXT4-fs (loop4): last error at time 1781580133: ext4_mb_generate_buddy:1317 [ 637.823041][T11162] EXT4-fs (loop4): 1 truncate cleaned up [ 637.926757][T11162] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 638.226015][T11162] overlayfs: missing 'lowerdir' [ 638.804855][ T5604] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 639.530981][ T5591] Bluetooth: hci3: command tx timeout [ 640.083997][T11181] fuse: Unknown parameter 'use00000000000000000000' [ 640.641540][T11189] overlayfs: missing 'lowerdir' [ 641.611325][ T5591] Bluetooth: hci3: command tx timeout [ 642.337894][T11201] loop1: detected capacity change from 0 to 512 [ 642.633935][T11201] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 642.827230][T11201] ext4 filesystem being mounted at /388/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 643.061917][T11142] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.088486][T11142] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.118118][T11142] bridge_slave_0: entered allmulticast mode [ 643.168607][T11142] bridge_slave_0: entered promiscuous mode [ 643.239412][T11142] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.278495][T11142] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.301054][T11210] loop6: detected capacity change from 0 to 512 [ 643.323265][T11142] bridge_slave_1: entered allmulticast mode [ 643.356080][T11142] bridge_slave_1: entered promiscuous mode [ 643.436894][T11210] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 643.603638][T11210] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 643.620348][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 643.627009][ C1] EXT4-fs (loop6): initial error at time 1781580139: ext4_mb_generate_buddy:1317 [ 643.636665][ C1] EXT4-fs (loop6): last error at time 1781580139: ext4_mb_generate_buddy:1317 [ 643.658198][T11210] EXT4-fs (loop6): 1 truncate cleaned up [ 643.692371][ T5591] Bluetooth: hci3: command tx timeout [ 643.726946][T11210] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 643.932148][T11205] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 643.996631][T11142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 644.175376][ T5590] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 644.194277][T11210] overlayfs: missing 'lowerdir' [ 644.238108][T11142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 644.701930][T11142] team0: Port device team_slave_0 added [ 644.797119][T11142] team0: Port device team_slave_1 added [ 645.132836][ T7483] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 645.134195][T11142] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 645.194955][T11142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 645.312276][T11142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 645.426888][T11142] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 645.460781][T11142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 645.575719][T11142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 646.285962][T11142] hsr_slave_0: entered promiscuous mode [ 646.322938][T11142] hsr_slave_1: entered promiscuous mode [ 646.354625][T11142] debugfs: 'hsr0' already exists in 'hsr' [ 646.386445][T11142] Cannot create hsr debugfs directory [ 646.920654][T11225] fuse: Unknown parameter 'use00000000000000000000' [ 647.002044][T11227] overlayfs: missing 'lowerdir' [ 648.297719][T11142] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 648.404335][T11142] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 648.441912][T11142] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 648.543218][T11142] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 648.601778][T11142] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 648.719068][T11142] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 648.831757][T11142] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 648.934708][T11142] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 649.081340][ T5690] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 649.274101][ T5690] usb 7-1: Using ep0 maxpacket: 8 [ 649.430205][ T5690] usb 7-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 649.455173][ T5690] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.497722][ T5690] usb 7-1: Product: syz [ 649.508716][ T5690] usb 7-1: Manufacturer: syz [ 649.528069][ T5690] usb 7-1: SerialNumber: syz [ 649.732116][T11245] loop4: detected capacity change from 0 to 512 [ 649.807216][T11245] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 649.951184][T11245] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 649.960441][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 649.960534][ C0] EXT4-fs (loop4): initial error at time 1781580146: ext4_mb_generate_buddy:1317 [ 649.960653][ C0] EXT4-fs (loop4): last error at time 1781580146: ext4_mb_generate_buddy:1317 [ 649.965950][T11245] EXT4-fs (loop4): 1 truncate cleaned up [ 650.082425][T11245] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 650.278177][T11245] overlayfs: missing 'lowerdir' [ 650.308492][T11240] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1826'. [ 650.467278][ T5690] usb 7-1: Audio class v2/v3 interfaces need an interface association [ 650.858093][T11142] 8021q: adding VLAN 0 to HW filter on device bond0 [ 650.976667][ T5604] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 651.146505][T11142] 8021q: adding VLAN 0 to HW filter on device team0 [ 651.165669][ T5690] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 651.351198][ T5690] usb 7-1: USB disconnect, device number 2 [ 651.355376][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.364678][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 651.539155][ T7909] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.546827][ T7909] bridge0: port 2(bridge_slave_1) entered forwarding state [ 651.686379][ T5859] udevd[5859]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 653.024267][T11263] fuse: Unknown parameter 'user_i00000000000000000000' [ 653.133097][T11265] overlayfs: missing 'workdir' [ 656.187123][T11287] loop6: detected capacity change from 0 to 512 [ 656.313723][T11287] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 656.504413][T11142] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 656.533024][T11287] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 656.560404][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 656.567029][ C0] EXT4-fs (loop6): initial error at time 1781580152: ext4_mb_generate_buddy:1317 [ 656.576507][ C0] EXT4-fs (loop6): last error at time 1781580152: ext4_mb_generate_buddy:1317 [ 656.695640][T11287] EXT4-fs (loop6): 1 truncate cleaned up [ 656.780101][T11287] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 656.990827][T11287] overlayfs: missing 'lowerdir' [ 657.596797][ T7483] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 658.625224][T11309] overlayfs: missing 'workdir' [ 659.476326][T11142] veth0_vlan: entered promiscuous mode [ 659.610176][T11142] veth1_vlan: entered promiscuous mode [ 659.663835][T11315] fuse: Unknown parameter 'user_i00000000000000000000' [ 660.151079][T11142] veth0_macvtap: entered promiscuous mode [ 660.289762][T11142] veth1_macvtap: entered promiscuous mode [ 660.542712][T11142] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 660.657075][T11142] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 660.859112][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.876054][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.906253][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.940115][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.501841][T11333] loop0: detected capacity change from 0 to 1024 [ 662.942860][T11333] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 663.426697][T11342] loop4: detected capacity change from 0 to 512 [ 663.535491][T11342] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 663.746908][T11342] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 663.772460][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 663.779276][ C0] EXT4-fs (loop4): initial error at time 1781580159: ext4_mb_generate_buddy:1317 [ 663.788816][ C0] EXT4-fs (loop4): last error at time 1781580159: ext4_mb_generate_buddy:1317 [ 663.983438][T11342] EXT4-fs (loop4): 1 truncate cleaned up [ 664.073510][T11342] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 664.309373][T11342] overlayfs: missing 'lowerdir' [ 665.086224][ T5604] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 665.411182][T11357] overlayfs: missing 'workdir' [ 665.498711][ T5586] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 666.866306][T11370] fuse: Unknown parameter 'user_i00000000000000000000' [ 667.712145][ T5687] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 667.904149][ T5687] usb 1-1: Using ep0 maxpacket: 8 [ 668.012131][ T5687] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 668.034812][ T5687] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.069445][ T5687] usb 1-1: Product: syz [ 668.119418][ T5687] usb 1-1: Manufacturer: syz [ 668.144140][ T5687] usb 1-1: SerialNumber: syz [ 668.618228][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 668.704118][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 669.154062][ T5687] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 669.270554][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 669.317741][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 669.745851][ T5687] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 669.968965][ T5687] usb 1-1: USB disconnect, device number 4 [ 670.273737][ T5859] udevd[5859]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 672.149855][T11395] loop6: detected capacity change from 0 to 1024 [ 672.186520][T11400] loop7: detected capacity change from 0 to 512 [ 672.265771][T11400] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 672.381438][T11400] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 672.410358][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 672.417002][ C1] EXT4-fs (loop7): initial error at time 1781580168: ext4_mb_generate_buddy:1317 [ 672.426503][ C1] EXT4-fs (loop7): last error at time 1781580168: ext4_mb_generate_buddy:1317 [ 672.445952][T11395] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 672.489207][T11400] EXT4-fs (loop7): 1 truncate cleaned up [ 672.572325][T11400] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 672.766503][T11400] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 672.834853][T11400] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 673.388131][T11142] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 673.958782][ T7483] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 678.006305][T11441] loop1: detected capacity change from 0 to 512 [ 678.035119][ T5595] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 678.165691][T11441] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 678.367695][T11441] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 678.390342][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 678.396958][ C0] EXT4-fs (loop1): initial error at time 1781580174: ext4_mb_generate_buddy:1317 [ 678.406408][ C0] EXT4-fs (loop1): last error at time 1781580174: ext4_mb_generate_buddy:1317 [ 678.476240][T11441] EXT4-fs (loop1): 1 truncate cleaned up [ 678.525242][T11441] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 678.861563][T11441] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 679.003561][T11441] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 679.715803][ T5590] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 682.092450][ T5595] Bluetooth: hci2: command 0x0406 tx timeout [ 683.149666][ T1163] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.493165][ T1163] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.708259][T11483] syzkaller0: entered promiscuous mode [ 683.746726][T11483] syzkaller0: entered allmulticast mode [ 683.968322][ T1163] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.475515][ T1163] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.618130][T11488] loop6: detected capacity change from 0 to 512 [ 684.687872][ T5595] Bluetooth: hci1: unexpected event for opcode 0x1408 [ 684.761708][T11488] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 684.975780][T11488] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 685.011490][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 685.018212][ C0] EXT4-fs (loop6): initial error at time 1781580181: ext4_mb_generate_buddy:1317 [ 685.027673][ C0] EXT4-fs (loop6): last error at time 1781580181: ext4_mb_generate_buddy:1317 [ 685.180991][T11488] EXT4-fs (loop6): 1 truncate cleaned up [ 685.262432][T11488] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 685.599532][T11488] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 685.634836][T11488] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 686.288431][ T7483] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 687.106679][ T1163] bond0 (unregistering): Released all slaves [ 688.730656][ T5595] Bluetooth: hci1: command 0x0406 tx timeout [ 688.938677][ T1163] hsr_slave_0: left promiscuous mode [ 689.023367][ T1163] hsr_slave_1: left promiscuous mode [ 689.179548][ T1163] veth1_macvtap: left promiscuous mode [ 689.244065][ T1163] veth0_macvtap: left promiscuous mode [ 689.267532][ T1163] veth1_vlan: left promiscuous mode [ 689.314863][ T1163] veth0_vlan: left promiscuous mode [ 691.319569][ T5595] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 692.606377][T11561] loop7: detected capacity change from 0 to 512 [ 692.763796][T11561] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 692.982124][T11561] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 693.010365][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 693.016973][ C0] EXT4-fs (loop7): initial error at time 1781580189: ext4_mb_generate_buddy:1317 [ 693.026399][ C0] EXT4-fs (loop7): last error at time 1781580189: ext4_mb_generate_buddy:1317 [ 693.183410][T11561] EXT4-fs (loop7): 1 truncate cleaned up [ 693.271339][T11561] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 693.556551][T11561] overlayfs: missing 'lowerdir' [ 694.219897][T11142] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 694.586182][ T5233] 8021q: adding VLAN 0 to HW filter on device eth9 [ 695.290883][ T5595] Bluetooth: hci2: command 0x0406 tx timeout [ 695.470015][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 695.479241][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 695.638748][T11581] loop1: detected capacity change from 0 to 512 [ 695.858297][T11581] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1920: bg 0: block 393: padding at end of block bitmap is not set [ 695.989901][T11581] loop1: lost filesystem error report for type 5 error -117 [ 695.990490][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 696.004683][ C0] EXT4-fs (loop1): initial error at time 1781580192: ext4_validate_block_bitmap:441 [ 696.014403][ C0] EXT4-fs (loop1): last error at time 1781580192: ext4_validate_block_bitmap:441 [ 696.031697][T11581] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 696.070946][T11581] loop1: lost filesystem error report for type 5 error -117 [ 696.078227][T11581] EXT4-fs (loop1): 2 truncates cleaned up [ 696.207364][T11581] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 696.926664][ T5590] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 697.367345][ T5595] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 698.249557][T11610] loop6: detected capacity change from 0 to 512 [ 698.315730][T11610] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 698.433607][T11610] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 698.450314][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 698.456971][ C0] EXT4-fs (loop6): initial error at time 1781580194: ext4_mb_generate_buddy:1317 [ 698.466438][ C0] EXT4-fs (loop6): last error at time 1781580194: ext4_mb_generate_buddy:1317 [ 698.569287][T11610] EXT4-fs (loop6): 1 truncate cleaned up [ 698.632748][T11610] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 698.781348][T11610] overlayfs: missing 'lowerdir' [ 699.133766][ T7483] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 699.660634][T11625] syzkaller0: entered promiscuous mode [ 699.694772][T11625] syzkaller0: entered allmulticast mode [ 700.445977][ T5233] 8021q: adding VLAN 0 to HW filter on device eth10 [ 701.381070][ T5587] Bluetooth: hci2: command 0x0406 tx timeout [ 701.963163][T11652] loop1: detected capacity change from 0 to 1024 [ 702.035202][T11652] EXT4-fs: Ignoring removed nomblk_io_submit option [ 702.153935][T11652] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 702.266314][T11652] ext4 filesystem being mounted at /419/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 702.989037][ T5590] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 703.105370][T11673] loop6: detected capacity change from 0 to 512 [ 703.195054][T11673] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 703.358798][T11673] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 703.380317][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 703.386977][ C1] EXT4-fs (loop6): initial error at time 1781580199: ext4_mb_generate_buddy:1317 [ 703.396465][ C1] EXT4-fs (loop6): last error at time 1781580199: ext4_mb_generate_buddy:1317 [ 703.488403][T11673] EXT4-fs (loop6): 1 truncate cleaned up [ 703.509417][T11673] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 703.674743][T11673] overlayfs: missing 'lowerdir' [ 704.091736][ T5587] Bluetooth: hci0: command 0x0406 tx timeout [ 704.194492][ T7483] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 704.984195][T11691] syzkaller0: entered promiscuous mode [ 705.013128][T11691] syzkaller0: entered allmulticast mode [ 705.498069][ T5233] 8021q: adding VLAN 0 to HW filter on device eth11 [ 706.170694][ T5587] Bluetooth: hci0: command 0x0406 tx timeout [ 708.892475][ T5587] Bluetooth: hci2: command 0x0406 tx timeout [ 708.999746][T11736] loop7: detected capacity change from 0 to 512 [ 709.127878][T11736] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 709.467179][T11736] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 709.500357][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 709.507017][ C0] EXT4-fs (loop7): initial error at time 1781580205: ext4_mb_generate_buddy:1317 [ 709.516568][ C0] EXT4-fs (loop7): last error at time 1781580205: ext4_mb_generate_buddy:1317 [ 709.701789][T11736] EXT4-fs (loop7): 1 truncate cleaned up [ 709.807754][T11736] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 710.055958][T11752] syzkaller0: entered promiscuous mode [ 710.075745][T11752] syzkaller0: entered allmulticast mode [ 710.101892][T11736] overlayfs: missing 'workdir' [ 710.971619][ T5587] Bluetooth: hci2: command 0x0406 tx timeout [ 710.992096][T11142] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 711.218865][T11760] overlayfs: failed to resolve './bus': -2 [ 711.652243][ T5233] 8021q: adding VLAN 0 to HW filter on device eth12 [ 713.085911][T11782] syzkaller0: entered promiscuous mode [ 713.127830][T11782] syzkaller0: entered allmulticast mode [ 713.691448][ T5587] Bluetooth: hci0: command 0x0406 tx timeout [ 714.173138][T11793] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1973'. [ 715.770905][ T5587] Bluetooth: hci0: command 0x0406 tx timeout [ 717.665661][T11827] overlayfs: failed to resolve './bus': -2 [ 718.972309][ T5587] Bluetooth: hci2: command 0x0406 tx timeout [ 721.060735][ T5587] Bluetooth: hci2: command 0x0406 tx timeout [ 724.009708][T11878] loop0: detected capacity change from 0 to 512 [ 724.171172][ T5591] Bluetooth: hci3: command 0x2016 tx timeout [ 724.470364][T11878] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1998: bg 0: block 393: padding at end of block bitmap is not set [ 724.702714][T11878] loop0: lost filesystem error report for type 5 error -117 [ 724.710359][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 724.724620][ C1] EXT4-fs (loop0): initial error at time 1781580220: ext4_validate_block_bitmap:441 [ 724.734432][ C1] EXT4-fs (loop0): last error at time 1781580220: ext4_validate_block_bitmap:441 [ 724.763862][T11878] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 724.860777][T11878] loop0: lost filesystem error report for type 5 error -117 [ 724.896949][T11878] EXT4-fs (loop0): 2 truncates cleaned up [ 725.174493][T11878] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 726.253120][ T5587] Bluetooth: hci3: command 0x2016 tx timeout [ 726.418138][ T5586] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 727.431054][T11909] syzkaller0: entered promiscuous mode [ 727.477575][T11909] syzkaller0: entered allmulticast mode [ 733.255095][T11963] loop6: detected capacity change from 0 to 512 [ 733.370819][ T5591] Bluetooth: hci0: command 0x0406 tx timeout [ 733.414401][T11963] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2013: bg 0: block 393: padding at end of block bitmap is not set [ 733.598517][T11963] loop6: lost filesystem error report for type 5 error -117 [ 733.600409][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 733.614798][ C0] EXT4-fs (loop6): initial error at time 1781580229: ext4_validate_block_bitmap:441 [ 733.624546][ C0] EXT4-fs (loop6): last error at time 1781580229: ext4_validate_block_bitmap:441 [ 733.664768][T11963] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 733.778682][T11963] loop6: lost filesystem error report for type 5 error -117 [ 733.783676][T11963] EXT4-fs (loop6): 2 truncates cleaned up [ 733.897074][T11963] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 734.756554][ T7483] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 735.450847][ T5587] Bluetooth: hci0: command 0x0406 tx timeout [ 736.819810][ T5587] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 736.839159][ T5587] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 736.849880][ T5587] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 736.879307][ T5587] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 736.897427][ T5587] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 738.977239][ T5591] Bluetooth: hci5: command tx timeout [ 740.811685][ T5591] Bluetooth: hci4: command 0x2016 tx timeout [ 741.050640][ T5591] Bluetooth: hci5: command tx timeout [ 741.439837][ T1163] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.366992][ T1163] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.890786][ T5591] Bluetooth: hci4: command 0x2016 tx timeout [ 743.141565][ T5587] Bluetooth: hci5: command tx timeout [ 743.339550][ T1163] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.891932][ T1163] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.211075][ T5587] Bluetooth: hci5: command tx timeout [ 745.287323][ T1163] bridge_slave_1: left allmulticast mode [ 745.348194][ T1163] bridge_slave_1: left promiscuous mode [ 745.384685][ T1163] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.543894][ T1163] bridge_slave_0: left allmulticast mode [ 745.579589][ T1163] bridge_slave_0: left promiscuous mode [ 745.600064][ T1163] bridge0: port 1(bridge_slave_0) entered disabled state [ 745.907910][T12091] loop7: detected capacity change from 0 to 512 [ 746.098157][T12091] EXT4-fs: Ignoring removed i_version option [ 746.222009][T12091] EXT4-fs: Ignoring removed bh option [ 746.498405][T12091] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.2035: inode #13: comm syz.7.2035: iget: illegal inode # [ 746.660835][T12091] loop7: lost filesystem error report for type 5 error -117 [ 746.662237][T12091] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.2035: couldn't read orphan inode 13 (err -117) [ 746.681919][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 746.682008][ C0] EXT4-fs (loop7): initial error at time 1781580242: ext4_orphan_get:1397 [ 746.682121][ C0] EXT4-fs (loop7): last error at time 1781580242: ext4_orphan_get:1397 [ 746.746160][T12091] loop7: lost filesystem error report for type 5 error -117 [ 746.800363][T12091] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 747.293798][ T5591] Bluetooth: hci0: command 0x0406 tx timeout [ 747.577170][ T1163] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 747.705239][ T1163] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 747.768642][ T1163] bond0 (unregistering): Released all slaves [ 747.889047][T11142] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 749.133724][ T1163] hsr_slave_0: left promiscuous mode [ 749.182151][ T1163] hsr_slave_1: left promiscuous mode [ 749.219683][ T1163] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 749.254141][ T1163] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 749.302612][ T1163] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 749.337183][ T1163] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 749.372352][ T5591] Bluetooth: hci0: command 0x0406 tx timeout [ 749.503691][ T1163] veth1_macvtap: left promiscuous mode [ 749.544863][ T1163] veth0_macvtap: left promiscuous mode [ 749.560804][ T1163] veth1_vlan: left promiscuous mode [ 749.568221][ T1163] veth0_vlan: left promiscuous mode [ 751.449014][ T1163] team0 (unregistering): Port device team_slave_1 removed [ 751.530144][ T1163] team0 (unregistering): Port device team_slave_0 removed [ 752.673715][T11993] bridge0: port 1(bridge_slave_0) entered blocking state [ 752.700689][T11993] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.708535][T11993] bridge_slave_0: entered allmulticast mode [ 752.724756][T11993] bridge_slave_0: entered promiscuous mode [ 752.817623][T11993] bridge0: port 2(bridge_slave_1) entered blocking state [ 752.830132][T11993] bridge0: port 2(bridge_slave_1) entered disabled state [ 752.861256][T11993] bridge_slave_1: entered allmulticast mode [ 752.906279][T11993] bridge_slave_1: entered promiscuous mode [ 753.091605][ T5233] 8021q: adding VLAN 0 to HW filter on device eth13 [ 753.359560][T11993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 753.478174][T11993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 753.964034][T11993] team0: Port device team_slave_0 added [ 754.048053][T11993] team0: Port device team_slave_1 added [ 754.365400][T11993] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 754.377789][T11993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 754.420662][T11993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 754.455802][T11993] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 754.484767][T11993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 754.559160][T11993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 755.032967][T11993] hsr_slave_0: entered promiscuous mode [ 755.095364][T11993] hsr_slave_1: entered promiscuous mode [ 756.410594][ T5591] Bluetooth: hci3: command 0x2016 tx timeout [ 756.912267][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 756.919071][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 757.856582][T11993] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 757.960950][T11993] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 758.007564][T11993] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 758.104707][T11993] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 758.146433][T11993] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 758.269580][T11993] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 758.355245][T11993] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 758.452305][T11993] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 758.499173][ T5587] Bluetooth: hci3: command 0x2016 tx timeout [ 759.513489][ T5233] 8021q: adding VLAN 0 to HW filter on device eth14 [ 760.256419][ T5587] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 760.573045][ T5587] Bluetooth: hci3: command 0x2016 tx timeout [ 760.753731][T11993] 8021q: adding VLAN 0 to HW filter on device bond0 [ 761.054011][T11993] 8021q: adding VLAN 0 to HW filter on device team0 [ 761.328280][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 761.335964][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 761.526454][ T164] bridge0: port 2(bridge_slave_1) entered blocking state [ 761.534135][ T164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 762.337788][T12262] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 762.359104][T12262] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 762.374567][T12262] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 762.404347][T12262] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 762.433371][T12262] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 764.332199][ T5587] Bluetooth: hci0: command 0x0406 tx timeout [ 764.494106][ T5591] Bluetooth: hci1: command tx timeout [ 765.132150][ T5587] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 765.725591][ T5233] 8021q: adding VLAN 0 to HW filter on device eth15 [ 766.101020][T12304] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 766.581399][ T5587] Bluetooth: hci1: command tx timeout [ 767.024132][T12322] loop4: detected capacity change from 0 to 512 [ 767.117340][T12322] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 767.278507][T12322] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 767.346927][T12322] ext4 filesystem being mounted at /436/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 767.882203][ T5604] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 768.418892][T11993] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 768.651027][ T5587] Bluetooth: hci1: command tx timeout [ 769.130604][ T5587] Bluetooth: hci0: command 0x0406 tx timeout [ 769.571419][ T5587] Bluetooth: hci4: unexpected event for opcode 0x0000 [ 770.730706][ T5587] Bluetooth: hci1: command tx timeout [ 771.370944][T12380] 9p: Bad value for 'rfdno' [ 771.387745][T12261] bridge0: port 1(bridge_slave_0) entered blocking state [ 771.411127][ T5587] Bluetooth: hci0: unexpected event for opcode 0x1408 [ 771.438735][T12261] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.451945][T12261] bridge_slave_0: entered allmulticast mode [ 771.462435][T12261] bridge_slave_0: entered promiscuous mode [ 771.479439][T12261] bridge0: port 2(bridge_slave_1) entered blocking state [ 771.509925][T12261] bridge0: port 2(bridge_slave_1) entered disabled state [ 771.528142][T12261] bridge_slave_1: entered allmulticast mode [ 771.626325][T12261] bridge_slave_1: entered promiscuous mode [ 772.444165][ T5233] 8021q: adding VLAN 0 to HW filter on device eth16 [ 772.523669][T12261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 772.684144][ T1119] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.791380][T12261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 773.167640][ T1119] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.496147][T12261] team0: Port device team_slave_0 added [ 773.538233][T12261] team0: Port device team_slave_1 added [ 773.610789][ T5587] Bluetooth: hci4: command 0x2016 tx timeout [ 773.637297][ T1119] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.153386][ T1119] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.263288][T12261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 774.295454][T12261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 774.429258][T12261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 774.517661][T12261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 774.554781][T12261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 774.700802][T12261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 774.932125][T11993] veth0_vlan: entered promiscuous mode [ 775.694780][T12261] hsr_slave_0: entered promiscuous mode [ 775.744573][T12261] hsr_slave_1: entered promiscuous mode [ 775.768676][T12261] debugfs: 'hsr0' already exists in 'hsr' [ 775.799483][T12261] Cannot create hsr debugfs directory [ 776.069558][T11993] veth1_vlan: entered promiscuous mode [ 776.586527][ T1119] bridge_slave_1: left allmulticast mode [ 776.620015][ T1119] bridge_slave_1: left promiscuous mode [ 776.639832][ T1119] bridge0: port 2(bridge_slave_1) entered disabled state [ 776.722190][ T1119] bridge_slave_0: left allmulticast mode [ 776.744567][ T1119] bridge_slave_0: left promiscuous mode [ 776.779560][ T1119] bridge0: port 1(bridge_slave_0) entered disabled state [ 778.019064][ T1119] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 778.113173][ T1119] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 778.208834][ T1119] bond0 (unregistering): Released all slaves [ 779.714274][ T1119] hsr_slave_0: left promiscuous mode [ 779.741660][ T1119] hsr_slave_1: left promiscuous mode [ 779.777334][ T1119] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 779.791651][ T1119] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 779.833737][ T1119] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 779.859618][ T1119] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 779.951605][ T1119] veth1_macvtap: left promiscuous mode [ 779.957326][ T1119] veth0_macvtap: left promiscuous mode [ 779.963337][ T1119] veth1_vlan: left promiscuous mode [ 779.968832][ T1119] veth0_vlan: left promiscuous mode [ 780.811854][ T1163] smbdirect: ib_dev[syz2] removed [ 781.298689][ T1119] team0 (unregistering): Port device team_slave_1 removed [ 781.357203][ T1119] team0 (unregistering): Port device team_slave_0 removed [ 782.195360][T11993] veth0_macvtap: entered promiscuous mode [ 782.311720][T11993] veth1_macvtap: entered promiscuous mode [ 782.518372][T12261] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 782.605090][T12261] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 782.654963][T12261] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 782.769913][T12261] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 782.807362][T12261] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 782.893403][T12261] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 782.977899][T12261] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 783.072090][T12261] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 783.206675][T11993] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 783.343087][T11993] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 783.497013][ T56] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.525471][ T56] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.577289][ T56] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.608370][ T56] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.992970][T12261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 785.213971][T12261] 8021q: adding VLAN 0 to HW filter on device team0 [ 785.328643][ T1119] bridge0: port 1(bridge_slave_0) entered blocking state [ 785.336207][ T1119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 785.517327][ T164] bridge0: port 2(bridge_slave_1) entered blocking state [ 785.524892][ T164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 786.521340][T12533] loop0: detected capacity change from 0 to 512 [ 786.715998][T12533] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 786.754883][T12533] ext4 filesystem being mounted at /460/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 787.341366][ T5233] 8021q: adding VLAN 0 to HW filter on device eth17 [ 787.502939][ T5586] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 790.651955][T12597] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 790.651955][T12597] Please contact the netfilter-devel mailing list or update your nftables rules. [ 790.953108][T12261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 791.308146][ T164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 791.337186][ T164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 791.667967][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 791.732990][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 792.572381][T12624] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2145'. [ 792.643422][T12624] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2145'. [ 792.729183][T12624] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2145'. [ 792.953267][ T5233] 8021q: adding VLAN 0 to HW filter on device eth18 [ 793.086821][T12629] tipc: Started in network mode [ 793.118621][T12629] tipc: Node identity 4, cluster identity 4711 [ 793.165355][T12629] tipc: Node number set to 4 [ 794.400043][T12261] veth0_vlan: entered promiscuous mode [ 794.595513][T12261] veth1_vlan: entered promiscuous mode [ 794.657930][ T29] audit: type=1326 audit(1781580290.812:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12647 comm="syz.0.2151" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f01c code=0x7ffc0000 [ 794.827617][ T29] audit: type=1326 audit(1781580290.892:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12647 comm="syz.0.2151" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f01c code=0x7ffc0000 [ 794.974742][ T29] audit: type=1326 audit(1781580290.912:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12647 comm="syz.0.2151" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f01c code=0x7ffc0000 [ 795.129239][ T29] audit: type=1326 audit(1781580290.922:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12647 comm="syz.0.2151" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf709f01c code=0x7ffc0000 [ 795.223724][T12261] veth0_macvtap: entered promiscuous mode [ 795.294041][ T29] audit: type=1326 audit(1781580290.922:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12647 comm="syz.0.2151" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f01c code=0x7ffc0000 [ 795.355940][T12261] veth1_macvtap: entered promiscuous mode [ 795.438640][ T29] audit: type=1326 audit(1781580290.922:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12647 comm="syz.0.2151" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f01c code=0x7ffc0000 [ 795.601733][ T29] audit: type=1326 audit(1781580290.922:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12647 comm="syz.0.2151" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f01c code=0x7ffc0000 [ 795.697976][T12261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 795.727626][ T29] audit: type=1326 audit(1781580290.922:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12647 comm="syz.0.2151" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf709f01c code=0x7ffc0000 [ 795.882942][ T29] audit: type=1326 audit(1781580290.942:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12647 comm="syz.0.2151" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf709f01c code=0x7ffc0000 [ 795.940898][T12261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 796.164233][ T1119] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.207766][ T1119] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.403535][ T1119] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.460944][ T1119] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.662161][ T5233] 8021q: adding VLAN 0 to HW filter on device eth19 [ 801.040443][T12733] loop4: detected capacity change from 0 to 512 [ 801.100928][T12733] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 801.198749][T12733] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 801.342115][T12733] ext4 filesystem being mounted at /467/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 801.763352][ T5604] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 803.859197][ T164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 803.896647][ T164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 804.021065][T12777] loop4: detected capacity change from 0 to 256 [ 804.173367][T12774] syzkaller0: entered promiscuous mode [ 804.191374][T12774] syzkaller0: entered allmulticast mode [ 804.273241][T12777] FAT-fs (loop4): Directory bread(block 64) failed [ 804.286620][T12777] FAT-fs (loop4): Directory bread(block 65) failed [ 804.327893][T12777] FAT-fs (loop4): Directory bread(block 66) failed [ 804.366181][T12777] FAT-fs (loop4): Directory bread(block 67) failed [ 804.392401][T12777] FAT-fs (loop4): Directory bread(block 68) failed [ 804.434377][T12777] FAT-fs (loop4): Directory bread(block 69) failed [ 804.468110][T12777] FAT-fs (loop4): Directory bread(block 70) failed [ 804.523580][T12777] FAT-fs (loop4): Directory bread(block 71) failed [ 804.556953][T12777] FAT-fs (loop4): Directory bread(block 72) failed [ 804.594953][T12777] FAT-fs (loop4): Directory bread(block 73) failed [ 804.643283][ T5233] 8021q: adding VLAN 0 to HW filter on device eth20 [ 804.708526][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 804.765791][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 808.227221][T12826] loop9: detected capacity change from 0 to 256 [ 808.602227][T12826] FAT-fs (loop9): Directory bread(block 64) failed [ 808.682732][T12826] FAT-fs (loop9): Directory bread(block 65) failed [ 808.729073][T12826] FAT-fs (loop9): Directory bread(block 66) failed [ 808.769962][T12826] FAT-fs (loop9): Directory bread(block 67) failed [ 808.802918][T12826] FAT-fs (loop9): Directory bread(block 68) failed [ 808.869296][T12826] FAT-fs (loop9): Directory bread(block 69) failed [ 808.919252][T12826] FAT-fs (loop9): Directory bread(block 70) failed [ 808.947371][T12826] FAT-fs (loop9): Directory bread(block 71) failed [ 808.990911][T12826] FAT-fs (loop9): Directory bread(block 72) failed [ 809.075466][T12826] FAT-fs (loop9): Directory bread(block 73) failed [ 811.225882][T12861] trusted_key: encrypted_key: insufficient parameters specified [ 812.976387][T12884] syzkaller0: entered promiscuous mode [ 813.020398][T12884] syzkaller0: entered allmulticast mode [ 814.258348][T12899] loop9: detected capacity change from 0 to 512 [ 814.383256][T12899] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.2223: bg 0: block 393: padding at end of block bitmap is not set [ 814.416945][T12901] loop4: detected capacity change from 0 to 512 [ 814.428936][T12899] loop9: lost filesystem error report for type 5 error -117 [ 814.437967][T12899] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 814.445661][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 814.445939][ C1] EXT4-fs (loop9): initial error at time 1781580310: ext4_validate_block_bitmap:441 [ 814.446066][ C1] EXT4-fs (loop9): last error at time 1781580310: ext4_validate_block_bitmap:441 [ 814.484696][T12899] loop9: lost filesystem error report for type 5 error -117 [ 814.526922][T12899] EXT4-fs (loop9): 2 truncates cleaned up [ 814.546316][T12899] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 814.642171][T12901] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.2224: iget: bad extra_isize 90 (inode size 256) [ 814.757474][T12901] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 814.760353][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 814.776310][ C0] EXT4-fs (loop4): initial error at time 1781580310: ext4_xattr_inode_iget:441: inode 11 [ 814.786531][ C0] EXT4-fs (loop4): last error at time 1781580310: ext4_xattr_inode_iget:441: inode 11 [ 814.803914][T12901] EXT4-fs (loop4): Remounting filesystem read-only [ 814.874809][T12901] EXT4-fs warning (device loop4): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 814.878610][T12261] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 814.906128][T12901] EXT4-fs (loop4): 1 orphan inode deleted [ 815.000680][T12901] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 815.562019][ T5604] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 816.328142][T12921] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0000 with DS=0xf [ 816.802919][T12928] 9p: Bad value for 'wfdno' [ 817.549410][T12941] loop0: detected capacity change from 0 to 256 [ 817.872602][T12943] loop4: detected capacity change from 0 to 256 [ 817.912427][T12941] FAT-fs (loop0): Directory bread(block 64) failed [ 817.949689][T12941] FAT-fs (loop0): Directory bread(block 65) failed [ 817.985971][T12941] FAT-fs (loop0): Directory bread(block 66) failed [ 818.009997][T12941] FAT-fs (loop0): Directory bread(block 67) failed [ 818.042932][T12941] FAT-fs (loop0): Directory bread(block 68) failed [ 818.101125][T12941] FAT-fs (loop0): Directory bread(block 69) failed [ 818.142781][T12941] FAT-fs (loop0): Directory bread(block 70) failed [ 818.179999][T12941] FAT-fs (loop0): Directory bread(block 71) failed [ 818.222458][T12941] FAT-fs (loop0): Directory bread(block 72) failed [ 818.277332][T12941] FAT-fs (loop0): Directory bread(block 73) failed [ 818.348816][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 818.355590][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 821.113961][ T5591] Bluetooth: hci1: hcon ffff8880167e1000 sent 1 < count 663 [ 821.122399][ T5591] Bluetooth: hci1: hcon ffff8880167e2000 sent 1 < count 3 [ 821.141711][T12978] loop7: detected capacity change from 0 to 1024 [ 821.275704][T12978] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 821.794872][T11142] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 823.218906][T13010] loop7: detected capacity change from 0 to 1024 [ 823.263594][T13015] loop9: detected capacity change from 0 to 512 [ 823.376060][T13010] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 823.470899][T13010] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 823.514119][T13015] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 823.627707][T13015] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 824.225647][T12261] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 824.356229][T11142] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 826.699000][T13065] loop7: detected capacity change from 0 to 512 [ 826.953159][T13067] loop0: detected capacity change from 0 to 1024 [ 827.076375][T13065] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 827.214023][T13067] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 827.233860][T13065] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 827.265693][T13067] ext4 filesystem being mounted at /494/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 827.727673][ T5586] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 828.016639][T11142] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 828.713677][ T5591] Bluetooth: hci3: Malformed LE Event: 0x0b [ 830.057315][T13105] loop0: detected capacity change from 0 to 512 [ 830.126559][T13105] EXT4-fs: Ignoring removed mblk_io_submit option [ 830.159750][T13105] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 830.266022][T13105] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 830.299306][T13105] EXT4-fs (loop0): orphan cleanup on readonly fs [ 830.401738][T13105] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2290: bg 0: block 361: padding at end of block bitmap is not set [ 830.551635][T13105] loop0: lost filesystem error report for type 5 error -117 [ 830.560349][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 830.574680][ C0] EXT4-fs (loop0): initial error at time 1781580326: ext4_validate_block_bitmap:441 [ 830.584389][ C0] EXT4-fs (loop0): last error at time 1781580326: ext4_validate_block_bitmap:441 [ 830.594851][T13105] EXT4-fs (loop0): Remounting filesystem read-only [ 830.624084][T13105] EXT4-fs (loop0): 1 truncate cleaned up [ 830.656332][T13115] loop4: detected capacity change from 0 to 1024 [ 830.715388][T13105] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 830.872726][T13115] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 830.893220][T13115] ext4 filesystem being mounted at /495/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 831.179942][T13122] loop7: detected capacity change from 0 to 512 [ 831.304120][T13122] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 831.355403][T13122] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 831.479676][ T5604] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 831.899923][T11142] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 832.495186][ T5306] hid (null): unknown global tag 0xb4 [ 832.539861][ T5306] hid (null): unknown global tag 0xd [ 832.637742][ T5306] hid-generic 0005:0B57:0040.0003: unexpected long global item [ 832.706847][ T5306] hid-generic 0005:0B57:0040.0003: probe with driver hid-generic failed with error -22 [ 834.269521][ T5586] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 834.775584][T13159] loop7: detected capacity change from 0 to 512 [ 834.942664][T13161] loop0: detected capacity change from 0 to 1024 [ 835.017233][T13159] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 835.106651][T13159] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 835.178078][T13161] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 835.248057][T13161] ext4 filesystem being mounted at /498/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 835.772090][T11142] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 835.855483][T13177] fuse: Bad value for 'fd' [ 835.866003][ T5586] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 837.796308][T13206] loop7: detected capacity change from 0 to 512 [ 838.026934][T13206] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 838.122493][T13206] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 838.774634][T11142] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 838.877134][T13218] fuse: Bad value for 'fd' [ 842.393642][T13271] loop7: detected capacity change from 0 to 512 [ 842.687730][T13271] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 842.774652][T13271] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 843.030821][T13166] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 843.587260][T11142] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 846.872358][T13332] loop8: detected capacity change from 0 to 512 [ 847.062697][T13332] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 847.161168][T13332] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 847.708824][T13349] loop9: detected capacity change from 0 to 128 [ 847.853020][T11993] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 847.941986][T13349] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 848.024726][T13349] ext4 filesystem being mounted at /31/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 848.918045][T13363] loop0: detected capacity change from 0 to 512 [ 849.074724][T13363] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2362: bg 0: block 393: padding at end of block bitmap is not set [ 849.125771][T12261] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 849.168696][T13363] loop0: lost filesystem error report for type 5 error -117 [ 849.170309][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 849.184544][ C0] EXT4-fs (loop0): initial error at time 1781580345: ext4_validate_block_bitmap:441 [ 849.194288][ C0] EXT4-fs (loop0): last error at time 1781580345: ext4_validate_block_bitmap:441 [ 849.204670][T13363] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 849.263011][T13363] loop0: lost filesystem error report for type 5 error -117 [ 849.277102][T13363] EXT4-fs (loop0): 2 truncates cleaned up [ 849.319744][T13363] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 850.034841][ T5586] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 851.380298][T13399] loop7: detected capacity change from 0 to 512 [ 851.530043][T13399] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 851.598247][T13399] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 852.222531][T11142] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 852.834069][T13415] loop0: detected capacity change from 0 to 512 [ 853.011302][T13415] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2376: bg 0: block 393: padding at end of block bitmap is not set [ 853.135520][T13415] loop0: lost filesystem error report for type 5 error -117 [ 853.140313][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 853.154578][ C0] EXT4-fs (loop0): initial error at time 1781580349: ext4_validate_block_bitmap:441 [ 853.164447][ C0] EXT4-fs (loop0): last error at time 1781580349: ext4_validate_block_bitmap:441 [ 853.206908][T13415] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 853.302814][T13415] loop0: lost filesystem error report for type 5 error -117 [ 853.315633][T13415] EXT4-fs (loop0): 2 truncates cleaned up [ 853.426462][T13415] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 853.862520][T13432] tipc: Started in network mode [ 853.917487][T13435] overlayfs: missing 'workdir' [ 853.922653][T13432] tipc: Node identity 4, cluster identity 4711 [ 853.922725][T13432] tipc: Node number set to 4 [ 853.950384][ T5586] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 855.263001][T13453] loop9: detected capacity change from 0 to 512 [ 855.493973][T13453] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 855.627893][T13453] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 856.330882][T13459] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 856.498212][T12261] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 857.167740][T13484] loop9: detected capacity change from 0 to 512 [ 857.318050][T13484] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.2392: bg 0: block 393: padding at end of block bitmap is not set [ 857.409428][T13484] loop9: lost filesystem error report for type 5 error -117 [ 857.410344][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 857.424637][ C0] EXT4-fs (loop9): initial error at time 1781580353: ext4_validate_block_bitmap:441 [ 857.434343][ C0] EXT4-fs (loop9): last error at time 1781580353: ext4_validate_block_bitmap:441 [ 857.447206][T13484] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 857.467783][T13484] loop9: lost filesystem error report for type 5 error -117 [ 857.472052][T13484] EXT4-fs (loop9): 2 truncates cleaned up [ 857.488205][T13484] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 858.026131][T12261] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 858.733747][T13505] loop8: detected capacity change from 0 to 1024 [ 858.933869][T13505] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 859.063649][T13505] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 859.385230][T13505] EXT4-fs error (device loop8): ext4_map_blocks:833: inode #15: block 3: comm syz.8.2398: lblock 3 mapped to illegal pblock 3 (length 3) [ 859.491109][T13505] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 859.574476][T13505] EXT4-fs (loop8): This should not happen!! Data will be lost [ 859.574476][T13505] [ 859.681920][T13519] EXT4-fs error (device loop8): ext4_ext_remove_space:2969: inode #15: comm syz.8.2398: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 859.758194][T13519] EXT4-fs error (device loop8) in ext4_setattr:6120: Corrupt filesystem [ 860.128635][T13523] loop4: detected capacity change from 0 to 512 [ 860.189774][T11993] EXT4-fs warning (device loop8): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 860.264562][T11993] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 860.383621][T13523] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 860.508213][T13523] ext4 filesystem being mounted at /515/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 861.274894][ T5604] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 861.286313][T13542] loop0: detected capacity change from 0 to 512 [ 861.371955][ T5587] Bluetooth: hci5: command 0x0406 tx timeout [ 861.379338][T13542] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2409: bg 0: block 393: padding at end of block bitmap is not set [ 861.438511][T13542] loop0: lost filesystem error report for type 5 error -117 [ 861.440337][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 861.454652][ C0] EXT4-fs (loop0): initial error at time 1781580357: ext4_validate_block_bitmap:441 [ 861.464351][ C0] EXT4-fs (loop0): last error at time 1781580357: ext4_validate_block_bitmap:441 [ 861.531251][T13542] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 861.577736][T13542] loop0: lost filesystem error report for type 5 error -117 [ 861.589700][T13542] EXT4-fs (loop0): 2 truncates cleaned up [ 861.665329][T13542] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 862.219920][ T5586] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 864.078643][T13579] loop8: detected capacity change from 0 to 512 [ 864.222727][T13579] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 864.245707][T13579] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 864.865483][T11993] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 867.022792][T13623] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2437'. [ 867.183671][T13623] bridge0: port 2(bridge_slave_1) entered disabled state [ 867.193508][T13623] bridge0: port 1(bridge_slave_0) entered disabled state [ 867.654014][T13630] 9p: Bad value for 'wfdno' [ 867.755657][T13631] loop8: detected capacity change from 0 to 512 [ 867.917503][T13631] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.2439: bg 0: block 393: padding at end of block bitmap is not set [ 867.951509][T13631] loop8: lost filesystem error report for type 5 error -117 [ 867.960287][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 867.974628][ C1] EXT4-fs (loop8): initial error at time 1781580364: ext4_validate_block_bitmap:441 [ 867.984308][ C1] EXT4-fs (loop8): last error at time 1781580364: ext4_validate_block_bitmap:441 [ 868.032368][T13631] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 868.112593][T13631] loop8: lost filesystem error report for type 5 error -117 [ 868.116167][T13631] EXT4-fs (loop8): 2 truncates cleaned up [ 868.218091][T13631] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 868.638589][T11993] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 869.680805][T13664] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2450'. [ 869.934999][T13668] loop7: detected capacity change from 0 to 512 [ 870.007387][T13668] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 870.223672][T13668] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 870.283189][T13668] ext4 filesystem being mounted at /125/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 870.808130][T13680] 9p: Bad value for 'wfdno' [ 870.942274][T11142] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 871.508870][T13686] loop7: detected capacity change from 0 to 512 [ 871.639944][T13686] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.2456: bg 0: block 393: padding at end of block bitmap is not set [ 871.773882][T13686] loop7: lost filesystem error report for type 5 error -117 [ 871.780402][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 871.794667][ C0] EXT4-fs (loop7): initial error at time 1781580367: ext4_validate_block_bitmap:441 [ 871.804378][ C0] EXT4-fs (loop7): last error at time 1781580367: ext4_validate_block_bitmap:441 [ 871.829503][T13686] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 871.919449][T13686] loop7: lost filesystem error report for type 5 error -117 [ 871.934676][T13686] EXT4-fs (loop7): 2 truncates cleaned up [ 872.048933][T13686] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 872.729712][T13700] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2463'. [ 872.740088][T11142] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 873.598643][T13714] 9p: Bad value for 'wfdno' [ 874.628142][T13727] loop0: detected capacity change from 0 to 512 [ 874.765024][T13727] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2471: invalid indirect mapped block 4294967295 (level 1) [ 874.812788][T13727] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 874.820303][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 874.836361][ C0] EXT4-fs (loop0): initial error at time 1781580370: ext4_free_branches:1023: inode 11 [ 874.846479][ C0] EXT4-fs (loop0): last error at time 1781580370: ext4_free_branches:1023: inode 11 [ 874.863329][T13727] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2471: invalid indirect mapped block 4294967295 (level 1) [ 874.877806][T13727] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 874.889397][T13727] EXT4-fs (loop0): 2 truncates cleaned up [ 874.906830][T13727] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 875.472766][ T5586] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 875.832709][T13741] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2477'. [ 875.871354][T13740] loop8: detected capacity change from 0 to 512 [ 875.957794][T13740] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.2475: bg 0: block 393: padding at end of block bitmap is not set [ 875.974984][T13740] loop8: lost filesystem error report for type 5 error -117 [ 875.976287][T13740] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 875.983960][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 875.984048][ C1] EXT4-fs (loop8): initial error at time 1781580372: ext4_validate_block_bitmap:441 [ 875.984167][ C1] EXT4-fs (loop8): last error at time 1781580372: ext4_validate_block_bitmap:441 [ 876.026150][T13740] loop8: lost filesystem error report for type 5 error -117 [ 876.046664][T13740] EXT4-fs (loop8): 2 truncates cleaned up [ 876.088641][T13740] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 876.630058][T11993] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 877.296540][T13757] loop9: detected capacity change from 0 to 512 [ 877.434355][T13757] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 877.591168][T13757] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 877.663050][T13757] ext4 filesystem being mounted at /56/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 877.735305][T13771] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2485'. [ 878.161198][T12261] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 878.618802][T13780] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2491'. [ 878.831099][T12483] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 879.031162][T12483] usb 8-1: Using ep0 maxpacket: 8 [ 879.104164][T12483] usb 8-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 879.141150][T12483] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.182643][T12483] usb 8-1: Product: syz [ 879.204294][T12483] usb 8-1: Manufacturer: syz [ 879.225933][T12483] usb 8-1: SerialNumber: syz [ 879.641591][T12483] usb 8-1: Audio class v2/v3 interfaces need an interface association [ 879.790768][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 879.797894][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 880.206213][T12483] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 880.397689][T12483] usb 8-1: USB disconnect, device number 2 [ 880.791017][T13807] loop8: detected capacity change from 0 to 512 [ 880.854926][T13807] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 880.959490][T13807] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 881.020772][T13807] ext4 filesystem being mounted at /74/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 881.098183][ T5859] udevd[5859]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 881.748839][T11993] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 883.898446][T13853] binder: 13849:13853 ioctl 4018620d 0 returned -22 [ 883.974450][T12432] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 884.170578][T12432] usb 5-1: Using ep0 maxpacket: 8 [ 884.224410][T12432] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 884.267841][T12432] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.292709][T12432] usb 5-1: Product: syz [ 884.303371][T12432] usb 5-1: Manufacturer: syz [ 884.318580][T12432] usb 5-1: SerialNumber: syz [ 884.660524][T13861] loop8: detected capacity change from 0 to 512 [ 884.737713][T13861] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 884.766082][T12432] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 884.846996][T13861] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 884.962152][T13861] ext4 filesystem being mounted at /77/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 885.370488][T12432] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 885.556461][T11993] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 885.591146][T12432] usb 5-1: USB disconnect, device number 5 [ 886.214697][ T5859] udevd[5859]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 886.349006][T13881] binder_alloc: 13879: binder_alloc_buf, no vma [ 887.508075][T13898] binder: 13896:13898 ioctl 4018620d 0 returned -22 [ 888.098829][T13909] loop8: detected capacity change from 0 to 512 [ 888.203131][T13909] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 888.325735][T13909] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 888.403256][T12432] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 888.448144][T13909] ext4 filesystem being mounted at /80/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 888.611635][T12432] usb 10-1: Using ep0 maxpacket: 8 [ 888.687729][T12432] usb 10-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 888.733565][T12432] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.784586][T12432] usb 10-1: Product: syz [ 888.805394][T12432] usb 10-1: Manufacturer: syz [ 888.827453][T12432] usb 10-1: SerialNumber: syz [ 888.968492][T11993] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 889.236304][T12432] usb 10-1: Audio class v2/v3 interfaces need an interface association [ 889.872853][T12432] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 890.076116][T12432] usb 10-1: USB disconnect, device number 2 [ 890.505599][T13940] binder: 13938:13940 ioctl 4018620d 0 returned -22 [ 890.545179][ T5859] udevd[5859]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 892.750747][T12432] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 892.944452][T12432] usb 5-1: Using ep0 maxpacket: 8 [ 893.024327][T12432] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 893.066691][T12432] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.099056][T12432] usb 5-1: Product: syz [ 893.114625][T12432] usb 5-1: Manufacturer: syz [ 893.143766][T12432] usb 5-1: SerialNumber: syz [ 893.504797][T13985] binder: 13984:13985 ioctl c0306201 0 returned -14 [ 893.547860][T12432] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 894.204669][T12432] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 894.432932][T12432] usb 5-1: USB disconnect, device number 6 [ 895.008148][ T5859] udevd[5859]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 895.474444][T14016] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2566'. [ 895.778396][T14020] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2567'. [ 896.317709][T14026] binder: 14024:14026 ioctl c0306201 0 returned -14 [ 896.736101][T12483] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 896.922754][T12483] usb 5-1: Using ep0 maxpacket: 8 [ 897.006556][T12483] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 897.045892][T12483] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.089893][T12483] usb 5-1: Product: syz [ 897.116237][T12483] usb 5-1: Manufacturer: syz [ 897.137835][T12483] usb 5-1: SerialNumber: syz [ 897.551895][T12483] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 897.978940][T14046] netlink: 64 bytes leftover after parsing attributes in process `syz.9.2580'. [ 898.135213][T12483] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 898.341231][T14051] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2582'. [ 898.380006][T12483] usb 5-1: USB disconnect, device number 7 [ 898.861556][T14056] binder: 14054:14056 ioctl c0306201 0 returned -14 [ 899.117842][ T5859] udevd[5859]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 899.487928][T14065] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2588'. [ 901.092582][T11251] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 901.302867][T11251] usb 10-1: Using ep0 maxpacket: 8 [ 901.354037][T11251] usb 10-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 901.392801][T11251] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.448483][T11251] usb 10-1: Product: syz [ 901.466673][T11251] usb 10-1: Manufacturer: syz [ 901.478626][T11251] usb 10-1: SerialNumber: syz [ 901.932970][T11251] usb 10-1: Audio class v2/v3 interfaces need an interface association [ 902.462804][T11251] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 902.618964][T11251] usb 10-1: USB disconnect, device number 3 [ 903.501521][ T5859] udevd[5859]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 903.753787][T14121] loop4: detected capacity change from 0 to 512 [ 903.903829][T14121] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 903.929656][T14121] ext4 filesystem being mounted at /556/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 904.299141][ T5604] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 904.362471][T14134] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2610'. [ 904.407077][T14134] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2610'. [ 905.074219][T12483] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 905.286628][T12483] usb 10-1: Using ep0 maxpacket: 8 [ 905.383328][T12483] usb 10-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 905.413833][T12483] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.432916][T12483] usb 10-1: Product: syz [ 905.437382][T12483] usb 10-1: Manufacturer: syz [ 905.447491][T12483] usb 10-1: SerialNumber: syz [ 905.867838][T12483] usb 10-1: Audio class v2/v3 interfaces need an interface association [ 906.428853][T12483] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 906.626378][T12483] usb 10-1: USB disconnect, device number 4 [ 906.934179][T14162] loop0: detected capacity change from 0 to 512 [ 906.960090][T14161] loop4: detected capacity change from 0 to 512 [ 906.975824][T14162] EXT4-fs: Ignoring removed bh option [ 907.015377][T14162] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 907.097879][T14162] EXT4-fs (loop0): 1 truncate cleaned up [ 907.138604][T14161] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 907.165755][T14162] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 907.209217][T14161] ext4 filesystem being mounted at /559/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 907.771089][ T5586] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 907.779230][ T5859] udevd[5859]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 907.902742][ T5604] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 909.621699][ T807] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 909.840925][ T807] usb 9-1: Using ep0 maxpacket: 8 [ 909.903869][ T807] usb 9-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 909.957078][ T807] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.001215][ T807] usb 9-1: Product: syz [ 910.019615][ T807] usb 9-1: Manufacturer: syz [ 910.032297][ T807] usb 9-1: SerialNumber: syz [ 910.328970][T14208] loop7: detected capacity change from 0 to 512 [ 910.330707][T14211] loop9: detected capacity change from 0 to 512 [ 910.409919][T14211] EXT4-fs: Ignoring removed bh option [ 910.446604][T14211] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 910.456085][ T807] usb 9-1: Audio class v2/v3 interfaces need an interface association [ 910.568285][T14208] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 910.619963][T14211] EXT4-fs (loop9): 1 truncate cleaned up [ 910.684538][T14208] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 910.737930][T14211] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 910.870312][ T807] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 911.058113][ T807] usb 9-1: USB disconnect, device number 2 [ 911.288120][T11142] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 911.509715][T12261] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 911.836949][ T5859] udevd[5859]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 912.715057][T14235] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2647'. [ 913.485873][T14247] loop9: detected capacity change from 0 to 512 [ 913.697760][T14247] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 913.815183][T14247] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 914.397899][T12261] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 915.012464][T14269] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2663'. [ 915.923951][T14281] MPI: mpi too large (32776 bits) [ 916.632794][T14289] loop4: detected capacity change from 0 to 512 [ 916.799801][T14289] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 916.898139][T14289] ext4 filesystem being mounted at /569/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 917.237976][ T5604] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 917.388190][T14302] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2675'. [ 917.481256][T14301] syzkaller0: entered promiscuous mode [ 917.525435][T14301] syzkaller0: entered allmulticast mode [ 917.747280][T14308] 9p: Bad value for 'rfdno' [ 919.356935][T14328] binder: 14327:14328 ioctl c0306201 0 returned -14 [ 919.628888][T14339] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2690'. [ 920.311357][T14345] 9p: Bad value for 'rfdno' [ 920.421334][T14347] syzkaller0: entered promiscuous mode [ 920.453073][T14347] syzkaller0: entered allmulticast mode [ 921.790351][T14364] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2700'. [ 921.854409][T14365] binder: 14363:14365 ioctl c0306201 0 returned -14 [ 922.564527][T14374] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2704'. [ 923.812145][T14385] syzkaller0: entered promiscuous mode [ 923.826372][T14385] syzkaller0: entered allmulticast mode [ 925.486552][T14402] binder: 14401:14402 ioctl c0306201 0 returned -14 [ 925.959499][T14410] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2717'. [ 926.828208][T14426] syzkaller0: entered promiscuous mode [ 926.853987][T14426] syzkaller0: entered allmulticast mode [ 928.549597][ C1] ===================================================== [ 928.557099][ C1] BUG: KMSAN: uninit-value in bpf_prog_run_generic_xdp+0x11c2/0x20d0 [ 928.565581][ C1] bpf_prog_run_generic_xdp+0x11c2/0x20d0 [ 928.571584][ C1] do_xdp_generic+0xe07/0x17b0 [ 928.576562][ C1] __netif_receive_skb_core+0x1a46/0x4d90 [ 928.582643][ C1] process_backlog+0x514/0x1500 [ 928.587650][ C1] __napi_poll+0xdc/0x910 [ 928.592199][ C1] net_rx_action+0xa5b/0x1c70 [ 928.597045][ C1] handle_softirqs+0x171/0x7b0 [ 928.602141][ C1] __do_softirq+0x14/0x1b [ 928.606799][ C1] do_softirq+0x58/0x90 [ 928.611226][ C1] __local_bh_enable_ip+0xa1/0xb0 [ 928.616447][ C1] tun_rx_batched+0x887/0x980 [ 928.621479][ C1] tun_get_user+0x5e32/0x6fe0 [ 928.626318][ C1] tun_chr_write_iter+0x3e9/0x5c0 [ 928.631570][ C1] vfs_write+0xbe1/0x15c0 [ 928.636111][ C1] ksys_write+0x1d9/0x470 [ 928.640676][ C1] __ia32_sys_write+0x9a/0xf0 [ 928.645525][ C1] ia32_sys_call+0x37a7/0x4360 [ 928.650566][ C1] do_int80_emulation+0x177/0x380 [ 928.655847][ C1] asm_int80_emulation+0x1f/0x30 [ 928.661003][ C1] [ 928.663391][ C1] Uninit was created at: [ 928.667870][ C1] __alloc_frozen_pages_noprof+0x6fa/0x1000 [ 928.673995][ C1] alloc_pages_mpol+0x328/0x860 [ 928.679081][ C1] alloc_pages_noprof+0x101/0x290 [ 928.684386][ C1] skb_page_frag_refill+0x141/0x5e0 [ 928.689824][ C1] tun_get_user+0x12b0/0x6fe0 [ 928.694803][ C1] tun_chr_write_iter+0x3e9/0x5c0 [ 928.700010][ C1] vfs_write+0xbe1/0x15c0 [ 928.704653][ C1] ksys_write+0x1d9/0x470 [ 928.709155][ C1] __ia32_sys_write+0x9a/0xf0 [ 928.714146][ C1] ia32_sys_call+0x37a7/0x4360 [ 928.719100][ C1] do_int80_emulation+0x177/0x380 [ 928.724348][ C1] asm_int80_emulation+0x1f/0x30 [ 928.729490][ C1] [ 928.732004][ C1] CPU: 1 UID: 0 PID: 14453 Comm: syz.7.2731 Tainted: G W L syzkaller #0 PREEMPT(lazy) [ 928.743226][ C1] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 928.748512][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 928.758862][ C1] ===================================================== [ 928.765990][ C1] Disabling lock debugging due to kernel taint [ 928.772411][ C1] Kernel panic - not syncing: kmsan.panic set ... [ 928.778946][ C1] CPU: 1 UID: 0 PID: 14453 Comm: syz.7.2731 Tainted: G B W L syzkaller #0 PREEMPT(lazy) [ 928.790079][ C1] Tainted: [B]=BAD_PAGE, [W]=WARN, [L]=SOFTLOCKUP [ 928.796577][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 928.806725][ C1] Call Trace: [ 928.810069][ C1] [ 928.812989][ C1] __dump_stack+0x26/0x30 [ 928.817455][ C1] dump_stack_lvl+0x50/0x1c0 [ 928.822213][ C1] ? dump_stack+0x12/0x25 [ 928.826714][ C1] dump_stack+0x1e/0x25 [ 928.831016][ C1] vpanic+0x7b4/0x1430 [ 928.835258][ C1] panic+0x15d/0x160 [ 928.839774][ C1] kmsan_report+0x31a/0x320 [ 928.844438][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 928.850411][ C1] ? __msan_warning+0x1b/0x30 [ 928.855227][ C1] ? bpf_prog_run_generic_xdp+0x11c2/0x20d0 [ 928.861288][ C1] ? do_xdp_generic+0xe07/0x17b0 [ 928.866380][ C1] ? __netif_receive_skb_core+0x1a46/0x4d90 [ 928.872450][ C1] ? process_backlog+0x514/0x1500 [ 928.877594][ C1] ? __napi_poll+0xdc/0x910 [ 928.882210][ C1] ? net_rx_action+0xa5b/0x1c70 [ 928.887183][ C1] ? handle_softirqs+0x171/0x7b0 [ 928.892270][ C1] ? __do_softirq+0x14/0x1b [ 928.896927][ C1] ? do_softirq+0x58/0x90 [ 928.901395][ C1] ? __local_bh_enable_ip+0xa1/0xb0 [ 928.906744][ C1] ? tun_rx_batched+0x887/0x980 [ 928.911743][ C1] ? tun_get_user+0x5e32/0x6fe0 [ 928.916731][ C1] ? tun_chr_write_iter+0x3e9/0x5c0 [ 928.922073][ C1] ? vfs_write+0xbe1/0x15c0 [ 928.926727][ C1] ? ksys_write+0x1d9/0x470 [ 928.931390][ C1] ? __ia32_sys_write+0x9a/0xf0 [ 928.936394][ C1] ? ia32_sys_call+0x37a7/0x4360 [ 928.941497][ C1] ? do_int80_emulation+0x177/0x380 [ 928.946826][ C1] ? asm_int80_emulation+0x1f/0x30 [ 928.952078][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 928.957362][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 928.962648][ C1] ? __bpf_prog_run32+0xc2/0xf0 [ 928.967690][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 928.972977][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 928.978265][ C1] __msan_warning+0x1b/0x30 [ 928.982912][ C1] bpf_prog_run_generic_xdp+0x11c2/0x20d0 [ 928.988809][ C1] ? generic_xdp_tx+0x701/0x770 [ 928.993874][ C1] do_xdp_generic+0xe07/0x17b0 [ 928.998808][ C1] ? qdisc_bstats_update+0x1c1/0x250 [ 929.004266][ C1] ? filter_irq_stacks+0x49/0x190 [ 929.009499][ C1] __netif_receive_skb_core+0x1a46/0x4d90 [ 929.015403][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 929.020677][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 929.026657][ C1] ? process_backlog+0x4c1/0x1500 [ 929.031835][ C1] ? stack_depot_save_flags+0x35/0x790 [ 929.037525][ C1] process_backlog+0x514/0x1500 [ 929.042512][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 929.048501][ C1] ? filter_irq_stacks+0x49/0x190 [ 929.053686][ C1] ? __pfx_process_backlog+0x10/0x10 [ 929.059104][ C1] __napi_poll+0xdc/0x910 [ 929.063582][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 929.069569][ C1] net_rx_action+0xa5b/0x1c70 [ 929.074375][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 929.080361][ C1] ? sched_clock_cpu+0x59/0xa70 [ 929.087105][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 929.092361][ C1] handle_softirqs+0x171/0x7b0 [ 929.097310][ C1] __do_softirq+0x14/0x1b [ 929.101798][ C1] do_softirq+0x58/0x90 [ 929.106100][ C1] [ 929.109100][ C1] [ 929.112098][ C1] __local_bh_enable_ip+0xa1/0xb0 [ 929.117280][ C1] ? tun_rx_batched+0x167/0x980 [ 929.122278][ C1] tun_rx_batched+0x887/0x980 [ 929.127096][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 929.132381][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 929.137705][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 929.143694][ C1] tun_get_user+0x5e32/0x6fe0 [ 929.148538][ C1] ? stack_depot_save_flags+0x35/0x790 [ 929.154134][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 929.159466][ C1] ? tun_get_user+0x1533/0x6fe0 [ 929.164503][ C1] tun_chr_write_iter+0x3e9/0x5c0 [ 929.169699][ C1] vfs_write+0xbe1/0x15c0 [ 929.174200][ C1] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 929.179913][ C1] ksys_write+0x1d9/0x470 [ 929.184417][ C1] __ia32_sys_write+0x9a/0xf0 [ 929.189260][ C1] ia32_sys_call+0x37a7/0x4360 [ 929.194192][ C1] do_int80_emulation+0x177/0x380 [ 929.199345][ C1] ? clear_bhb_loop+0x50/0xa0 [ 929.204152][ C1] ? clear_bhb_loop+0x50/0xa0 [ 929.208958][ C1] asm_int80_emulation+0x1f/0x30 [ 929.214021][ C1] RIP: 0023:0xf71061ab [ 929.218202][ C1] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 929.237942][ C1] RSP: 002b:00000000f53bd44c EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 929.246491][ C1] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000040 [ 929.254565][ C1] RDX: 0000000000000026 RSI: 0000000000000000 RDI: 0000000000000000 [ 929.262627][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 929.270730][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 929.278787][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 929.286886][ C1] [ 929.290336][ C1] Kernel Offset: disabled [ 929.294742][ C1] Rebooting in 86400 seconds..