last executing test programs: 16m10.949518358s ago: executing program 2 (id=203): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x380000c, &(0x7f0000000340)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@debug}, {@data_journal}]}, 0x1, 0x437, &(0x7f0000000900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x14b302, 0x8c) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x52142, 0x124) io_setup(0x20fe, &(0x7f0000000540)=0x0) io_submit(r2, 0x265, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xe6, r1, &(0x7f0000000000)='p', 0x8200, 0x600}]) 16m9.281783828s ago: executing program 2 (id=207): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000008400)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000008340)="ff08000000d9cb4608008cdd8af4", 0x0, 0x7, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 16m9.073149453s ago: executing program 2 (id=209): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xd, 0x1, 'connmark\x00'}, @NFTA_MATCH_INFO={0x10, 0x3, "a62a1a4094b2c56d78942e97"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x94}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x3, 0xb, 0x30, 0x67, 0x0, 0x9, 0x1, 0x0, @broadcast, @remote}, @dest_unreach={0x3, 0xe, 0x0, 0x0, 0x8, 0xc, {0x5, 0x4, 0x3, 0x2, 0x4, 0x68, 0x6475, 0x4, 0x88, 0x7, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}}}, 0x0) 16m8.916454737s ago: executing program 2 (id=212): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mysys/class/i2c-dev/i2c-0/device/new_device\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='typec_fusb302 0x22\n\x00', 0x13) 16m8.686206653s ago: executing program 2 (id=214): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) 16m7.93521986s ago: executing program 2 (id=217): syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002780)=ANY=[@ANYBLOB="640000000206010800000000000000000100000a16000300686173683a6e65742c706f72742c6e6574000000050001000700000005000500020000000900020073797a310000000005000400000000001400078008000840000000f108000640"], 0x64}, 0x1, 0x0, 0x0, 0x2006c0c4}, 0x0) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000090603000000000000000000050000000900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c000180080001400a0101010c00028008000140e00000020c00148008000140"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 15m52.868670521s ago: executing program 32 (id=217): syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002780)=ANY=[@ANYBLOB="640000000206010800000000000000000100000a16000300686173683a6e65742c706f72742c6e6574000000050001000700000005000500020000000900020073797a310000000005000400000000001400078008000840000000f108000640"], 0x64}, 0x1, 0x0, 0x0, 0x2006c0c4}, 0x0) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000090603000000000000000000050000000900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c000180080001400a0101010c00028008000140e00000020c00148008000140"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 6m56.161166579s ago: executing program 3 (id=2336): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ppoll(&(0x7f0000000140)=[{r3, 0x2082}], 0x1, &(0x7f0000000240), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000440)='B'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xf0ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 6m55.141832924s ago: executing program 3 (id=2340): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x58, 0x0, &(0x7f00000005c0)=[@reply={0x40406301, {0x7, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @acquire_done], 0xa1, 0x0, &(0x7f0000000840)="b828968b2eedcbc1feca7a588518e89ca3b6eec3cc581ad1ab5c58eec8ae9772c689a2d279582afaf202f26f5678b33849886651760eee6768a9706c65440bb759a21b7e0f2d4242b933b98639ebb5526e72baca54bfc5ce8d3c60212e0e7927185c3c177419f4e33da44413698990713f4ae044442ce17056cec44edc544c9cbc409f43122c6b2f1ee88c5d61446a509db0f00a634fd884b4ab44254e2e01a32a"}) 6m54.4906114s ago: executing program 3 (id=2341): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffff0180c200000e88a8000081000002"], 0x3a) 6m52.838079749s ago: executing program 3 (id=2344): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./control\x00', 0x210000, &(0x7f0000000940)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@bh}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 6m52.202941484s ago: executing program 3 (id=2349): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x0, 0xe8, 0x0, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@multicast1, @broadcast, 0xff000000, 0xff, 0x9, 0x12, {@empty, {[0x0, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}}, 0x0, 0x3, 0x3, 0xa90a, 0x6, 0x3ff, 'veth0_vlan\x00', 'wg2\x00', {0xff}, {0xff}, 0x0, 0x71}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@arp={@empty, @loopback, 0x0, 0xffffffff, 0xe, 0x2, {@mac=@local, {[0xff, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@random="8e932bc3db22", {[0x0, 0xff, 0x0, 0xff]}}, 0x0, 0x0, 0x400, 0x4fd9, 0x0, 0x98dc, 'team_slave_1\x00', 'macsec0\x00', {0xff}, {0xff}, 0x0, 0x280}, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @loopback, 0xf, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, @loopback, @multicast1, 0xf}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r0 = socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x60, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000001, 0x11, 0xffffffffffffffff, 0xc10c3000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d", 0x9e}], 0x2}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)="14", 0x2, 0x0, 0x4}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0xcc0, 0xdd7, &(0x7f0000000000)="5ae02efc441a80536af0d1d905c723fa", &(0x7f0000000040)=""/24}, 0x28) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x1, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x143da}, [@IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4, 0x3f}]}, @IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000880}, 0xc0d0) openat(0xffffffffffffffff, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x58) unshare(0x6a040000) 6m51.919435201s ago: executing program 4 (id=2351): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000780)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xeb0}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@errors_continue}, {@noload}, {@noquota}]}, 0x3, 0x440, &(0x7f0000000280)="$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") r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001011ff00000000000100070000000000000000ff0200000000000000000000000000014f194e20"], 0xfdef) 6m51.508620031s ago: executing program 3 (id=2353): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000140)='0x17b3\n\x00', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='0x0004', 0x6) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x1, 0x0) write(r2, &(0x7f0000000280)='ACME\n\x00', 0x5) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='ACMESynth\n\x00', 0xa) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi2.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000000680)='nonexistent_udc\n\x00', 0x10) close(r4) 6m51.012581123s ago: executing program 33 (id=2353): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000140)='0x17b3\n\x00', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='0x0004', 0x6) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x1, 0x0) write(r2, &(0x7f0000000280)='ACME\n\x00', 0x5) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='ACMESynth\n\x00', 0xa) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi2.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000000680)='nonexistent_udc\n\x00', 0x10) close(r4) 6m50.937228455s ago: executing program 4 (id=2355): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000140), 0xfc, 0x560, &(0x7f00000008c0)="$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") sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa000000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x14, &(0x7f0000001740)=@ringbuf={{0x18, 0x8}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x900, 0x0) ioctl$FBIO_WAITFORVSYNC(r4, 0x40044620, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0x37db, 0xf423b, 0xfffffffffffffffc, 0x0, 0x0, 0x9, 0xfffffffffffffffc, 0x1, 0x3, 0x80000, 0x7ff, 0x0, 0x0, 0xfffffffffffffffd, 0x2, 0xf11b, 0x1, 0x8, 0x0, 0x0, 0x2, 0xb17, 0xffffffffffffffff, 0x5c43, 0x1, 0x6}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r5, 0x400, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000140)="10", 0xfffff, r6) 6m49.86006502s ago: executing program 4 (id=2358): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x58, 0x0, &(0x7f00000005c0)=[@reply={0x40406301, {0x7, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @acquire_done], 0xa1, 0x0, &(0x7f0000000840)="b828968b2eedcbc1feca7a588518e89ca3b6eec3cc581ad1ab5c58eec8ae9772c689a2d279582afaf202f26f5678b33849886651760eee6768a9706c65440bb759a21b7e0f2d4242b933b98639ebb5526e72baca54bfc5ce8d3c60212e0e7927185c3c177419f4e33da44413698990713f4ae044442ce17056cec44edc544c9cbc409f43122c6b2f1ee88c5d61446a509db0f00a634fd884b4ab44254e2e01a32a"}) 6m49.597886107s ago: executing program 4 (id=2359): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./control\x00', 0x210000, &(0x7f0000000940)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@bh}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 6m49.01931079s ago: executing program 4 (id=2361): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000780)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xeb0}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@errors_continue}, {@noload}, {@noquota}]}, 0x3, 0x440, &(0x7f0000000280)="$eJzs28tvG8UfAPDv2kn66+uXUJVHH0CgIMoradJSeuACAokDSEhwKMeQpFWo26AmSLSKICBUjqgSJy6IIxJ/ASe4IOCExBXuqFKFcmnhZLT2bmI7thunTlzqz0dad2Z33Jmvd8ee2ckG0LdG05ckYk9E/B4Rw9VsfYHR6j83V5am/15Zmk6iXH7zr6RS7sbK0nReNH/f7jwzEFH4NIlDTepduHT53FSpNHsxy48vnn9vfOHS5Wfnzk+dnT07e2Hy1KkTxyeePzn5XFfiTOO6cfDD+cMHXn376uvTp6++8/O3SR5/QxxdMtru4OPlcper6629NelkoIcNoSPFajeNwUr/H45irJ284Xjlk542DthS5XK5fF/rw8tl4C6WRK9bAPRG/kOfzn/zbZuGHneE6y9WJ0Bp3DezrXpkIApZmcGG+W03jUbE6eV/vkq32Jr7EAAAdb5Pxz/PNBv/FaL2vtD/szWUkYi4JyL2RcTJiNgfEfdGVMreHxEPdFh/4yLJ+vFP4dqmAtugdPz3Qra2VT/+y0d/MVLMcnsr8Q8mZ+ZKs8eyz+RoDO5I8xNt6vjh5d8+b3WsdvyXbmn9+Vgwa8e1gR3175mZWpy6nZhrXf844uBAs/iT1ZWAJCIORMTBTdYx99Q3h1sdu3X8bXRhnan8dcQT1fO/HA3x55L265Pj/4vS7LHx/KpY75dfr7zRqv7bir8L0vO/q+n1vxr/SFK7XrvQyf/+5ZPp65U/Pms5p9ns9T+UvFW374OpxcWLExFDyWvVRtfun2woN7lWPo3/6JHm/X9frH0ShyIivYgfjIiHIuLhrO2PRMSjEXGkzafw00uPvbv5+LdWGv9MR+d/LTEUjXuaJ4rnfvyurtKRTuJPz/+JSupotmcj338baVenVzMAAAD8VxUiYk8khbHVdKEwNlb9G/79satQml9YfPrM/PsXZqrPCIzEYCG/0zVccz90IpvW5/nJhvzx7L7xF8WdlfzY9HxpptfBQ5/b3aL/p/4s9rp1wJbzvBb0L/0f+pf+D/1L/4f+1aT/7+xFO4Dt1+z3/6MetAPYfg3937If9BHzf+hfm+n/vjPg7tC2Lw9tXzuAbbWwM279kLyExLpEFO6IZkhsUaLX30wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADd8W8AAAD//58P56I=") r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001011ff00000000000100070000000000000000ff0200000000000000000000000000014f194e20"], 0xfdef) 6m47.857584618s ago: executing program 4 (id=2362): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffea}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0xfffffff7, 0xb47e, 0xb, 0x20000003, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0x2, 0xb}, {0xfff1, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x5, 0x7, 0xa, 0x40000003, 0xfffffffc, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000030}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 6m47.487493197s ago: executing program 34 (id=2362): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffea}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0xfffffff7, 0xb47e, 0xb, 0x20000003, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0x2, 0xb}, {0xfff1, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x5, 0x7, 0xa, 0x40000003, 0xfffffffc, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000030}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 6m46.282115466s ago: executing program 0 (id=2364): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000140), 0xfc, 0x560, &(0x7f00000008c0)="$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") sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa000000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x14, &(0x7f0000001740)=@ringbuf={{0x18, 0x8}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x900, 0x0) ioctl$FBIO_WAITFORVSYNC(r4, 0x40044620, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0x37db, 0xf423b, 0xfffffffffffffffc, 0x0, 0x0, 0x9, 0xfffffffffffffffc, 0x1, 0x3, 0x80000, 0x7ff, 0x0, 0x0, 0xfffffffffffffffd, 0x2, 0xf11b, 0x1, 0x8, 0x0, 0x0, 0x2, 0xb17, 0xffffffffffffffff, 0x5c43, 0x1, 0x6}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r5, 0x400, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000140)="10", 0xfffff, r6) 6m45.196435362s ago: executing program 0 (id=2365): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x58, 0x0, &(0x7f00000005c0)=[@reply={0x40406301, {0x7, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @acquire_done], 0xa1, 0x0, &(0x7f0000000840)="b828968b2eedcbc1feca7a588518e89ca3b6eec3cc581ad1ab5c58eec8ae9772c689a2d279582afaf202f26f5678b33849886651760eee6768a9706c65440bb759a21b7e0f2d4242b933b98639ebb5526e72baca54bfc5ce8d3c60212e0e7927185c3c177419f4e33da44413698990713f4ae044442ce17056cec44edc544c9cbc409f43122c6b2f1ee88c5d61446a509db0f00a634fd884b4ab44254e2e01a32a"}) 6m44.960875267s ago: executing program 0 (id=2366): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffff0180c200000e88a8000081000002"], 0x3a) 6m43.57650589s ago: executing program 0 (id=2367): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./control\x00', 0x210000, &(0x7f0000000940)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@bh}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 6m43.215911359s ago: executing program 0 (id=2368): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000780)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xeb0}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@errors_continue}, {@noload}, {@noquota}]}, 0x3, 0x440, &(0x7f0000000280)="$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") r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001011ff00000000000100070000000000000000ff0200000000000000000000000000014f194e20"], 0xfdef) 6m42.624660404s ago: executing program 0 (id=2369): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x0, 0xe8, 0x0, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@multicast1, @broadcast, 0xff000000, 0xff, 0x9, 0x12, {@empty, {[0x0, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}}, 0x0, 0x3, 0x3, 0xa90a, 0x6, 0x3ff, 'veth0_vlan\x00', 'wg2\x00', {0xff}, {0xff}, 0x0, 0x71}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@arp={@empty, @loopback, 0x0, 0xffffffff, 0xe, 0x2, {@mac=@local, {[0xff, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@random="8e932bc3db22", {[0x0, 0xff, 0x0, 0xff]}}, 0x0, 0x0, 0x400, 0x4fd9, 0x0, 0x98dc, 'team_slave_1\x00', 'macsec0\x00', {0xff}, {0xff}, 0x0, 0x280}, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @loopback, 0xf, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, @loopback, @multicast1, 0xf}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r0 = socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x60, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000001, 0x11, 0xffffffffffffffff, 0xc10c3000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d", 0x9e}], 0x2}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)="14", 0x2, 0x0, 0x4}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0xcc0, 0xdd7, &(0x7f0000000000)="5ae02efc441a80536af0d1d905c723fa", &(0x7f0000000040)=""/24}, 0x28) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x1, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x143da}, [@IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4, 0x3f}]}, @IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000880}, 0xc0d0) openat(0xffffffffffffffff, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x58) unshare(0x6a040000) 6m42.116179696s ago: executing program 35 (id=2369): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x0, 0xe8, 0x0, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@multicast1, @broadcast, 0xff000000, 0xff, 0x9, 0x12, {@empty, {[0x0, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}}, 0x0, 0x3, 0x3, 0xa90a, 0x6, 0x3ff, 'veth0_vlan\x00', 'wg2\x00', {0xff}, {0xff}, 0x0, 0x71}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@arp={@empty, @loopback, 0x0, 0xffffffff, 0xe, 0x2, {@mac=@local, {[0xff, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@random="8e932bc3db22", {[0x0, 0xff, 0x0, 0xff]}}, 0x0, 0x0, 0x400, 0x4fd9, 0x0, 0x98dc, 'team_slave_1\x00', 'macsec0\x00', {0xff}, {0xff}, 0x0, 0x280}, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @loopback, 0xf, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, @loopback, @multicast1, 0xf}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r0 = socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x60, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000001, 0x11, 0xffffffffffffffff, 0xc10c3000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d", 0x9e}], 0x2}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)="14", 0x2, 0x0, 0x4}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0xcc0, 0xdd7, &(0x7f0000000000)="5ae02efc441a80536af0d1d905c723fa", &(0x7f0000000040)=""/24}, 0x28) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x1, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x143da}, [@IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4, 0x3f}]}, @IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000880}, 0xc0d0) openat(0xffffffffffffffff, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x58) unshare(0x6a040000) 33.061701642s ago: executing program 5 (id=3576): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000014800)={0x0, 0x0, &(0x7f00000147c0)={&(0x7f0000002280)=@allocspi={0x104, 0x16, 0x1, 0x70bd25, 0x25dfdbff, {{{@in=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x21}, 0x4e23, 0xfffe, 0x4e20, 0xffff, 0x2, 0x20, 0x10, 0x29}, {@in=@loopback, 0x4d5, 0x33}, @in=@local, {0x1, 0x10, 0x4, 0x8001, 0x8, 0x7f7, 0x30a, 0x2}, {0x500001, 0x4, 0x4, 0x2}, {0xc908, 0xa1272682}, 0x70bd25, 0x3507, 0xa, 0x0, 0x0, 0x10}, 0xff, 0x80000006}, [@offload={0xc, 0x20}]}, 0x104}, 0x1, 0x0, 0x0, 0x8c0}, 0x48000) 32.620668283s ago: executing program 5 (id=3580): r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r3, r1, 0x25, 0x0, @val=@tcx={@void, @value=r3}}, 0x1c) syz_emit_ethernet(0xd86, &(0x7f0000001c40)={@local, @multicast, @val={@val={0x88a8, 0x1, 0x1, 0x1}, {0x8100, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "001900", 0xd48, 0x3a, 0x0, @local, @local, {[], @dest_unreach={0x1, 0x1, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x8, 0x0, 0x1, @private1, @mcast2, [@dstopts={0xff, 0xe, '\x00', [@calipso={0x7, 0x30, {0x1, 0xa, 0x5, 0x2, [0x2, 0x5ba, 0xffffffffffffffff, 0x5, 0x800]}}, @calipso={0x7, 0x38, {0x3, 0xc, 0x8, 0x6, [0x100, 0x0, 0x80000001, 0x6, 0x5, 0xfffffffffffff2ec]}}, @jumbo={0xc2, 0x4, 0x6}]}, @hopopts={0x29, 0x18e, '\x00', [@padn={0x1, 0x1, [0x0]}, @generic={0xc3, 0x8, "3b34b61845c528b2"}, @calipso={0x7, 0x20, {0x2, 0x6, 0x9, 0x4, [0x8, 0x401, 0x3ff]}}, @jumbo={0xc2, 0x4, 0x4}, @pad1, @hao={0xc9, 0x10, @mcast2}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x36}}, @generic={0x3, 0xc13, "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"}]}, @srh={0x2c, 0x0, 0x4, 0x0, 0xfb, 0x20, 0x59}, @fragment={0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x66}, @fragment={0x33, 0x0, 0x5, 0x1, 0x0, 0x1e, 0x65}]}}}}}}}, 0x0) 32.543095565s ago: executing program 5 (id=3581): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x2, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0x10000, 0x40, 0x6, 0x4, 0xffffffff}, 0x8, 0x75, [{0x200, 0xffffff19, 0x3, 0x2, 0x101, 0x5}]}, [{0xfffff960, 0x8, 0x9, 0x9, 0x5, 0x81}, {0x10001, 0x2, 0x1, 0x8, 0xffff5cdb, 0x3d}, {0xf, 0x1, 0x10001, 0x1, 0x3, 0x6}, {0x9, 0xff, 0x10001, 0x0, 0x4, 0x78f}, {0x2ec, 0x7fffffff, 0xc, 0xfffffffe, 0x3, 0x8}, {0x0, 0x80c44, 0x2, 0x7ff, 0x5, 0xc}, {0x7f, 0x7, 0x2, 0x9, 0x7, 0x6b}, {0xfe, 0x2, 0x7, 0x40, 0x0, 0x1}, {0x4, 0x6, 0x2, 0x0, 0x4, 0xfffffff7}, {0x80, 0x3, 0x7, 0x0, 0x2, 0x8}, {0x7ff, 0x8, 0x7fff, 0xa, 0x102a00, 0x1}, {0x2, 0x7, 0x9, 0x1, 0xaea6, 0x4}, {0x3, 0xf, 0xfffffff4, 0x4dd, 0x7, 0x9}, {0x1, 0x240, 0x7fff, 0x5, 0x2e7f, 0xed}, {0x7, 0x8, 0x401, 0x2, 0x4c, 0x3}, {0x7, 0x3, 0xae, 0x8, 0x1, 0xa}, {0x9, 0x4, 0x0, 0x0, 0x7, 0xfffffc00}, {0x200, 0xff, 0x7, 0x6, 0x0, 0xfffffffe}, {0x100, 0x7, 0x6, 0x8, 0x3}, {0x8001, 0x80, 0x6d9, 0x4, 0x5, 0x5}, {0xfffffffd, 0x7f, 0x5, 0x1, 0x4}, {0x24, 0xfffffff9, 0x0, 0x5, 0x6, 0xa}, {0x7, 0x3, 0x3, 0xfffffff9, 0xe40, 0xff}, {0x3, 0x40, 0xc3, 0x3, 0x6, 0x7}, {0x6f4, 0x5, 0x8, 0x4, 0x1, 0xff}, {0x0, 0x4, 0xff, 0x5971f7f6, 0x1, 0x7f}, {0xdbc, 0x9, 0x1cdb, 0x5, 0x429, 0x5}, {0xfffffffd, 0x6, 0x7, 0x9, 0x3, 0x7}, {0x8, 0x4, 0x9, 0xd, 0x0, 0x81}, {0x3, 0x1, 0xffff, 0x80000000, 0x3, 0xfffffff7}, {0x8, 0x0, 0xd, 0x1ff, 0x7ff, 0x5}, {0x2, 0x0, 0x2, 0x7fffffff, 0x7, 0x9}, {0x3, 0x9, 0xc, 0x2, 0x5, 0xae5}, {0x33992c94, 0x80, 0x0, 0x548c, 0x7, 0x2}, {0x7, 0xfffffff8, 0x9, 0x8000000, 0xf}, {0x401, 0x200, 0x4, 0x5, 0x800, 0xc62}, {0xd, 0x8001, 0x4e, 0x1, 0x7, 0x10001}, {0x0, 0x6, 0x2, 0xa530, 0x8, 0x1}, {0xf, 0xb, 0x2, 0xfffe, 0x1, 0x2}, {0x5, 0x8, 0x4, 0x4, 0x0, 0xf8c}, {0x7, 0x2, 0x7, 0x6, 0x3, 0x80}, {0x5, 0x38, 0x4, 0x2, 0x1a00000, 0x6}, {0x571, 0x3, 0xfffffff8, 0x9, 0x1000, 0x5}, {0x7, 0x0, 0x200, 0x0, 0x5, 0x10}, {0x40000004, 0xb0, 0x1, 0x4, 0x9, 0x1}, {0x8, 0x8, 0x101, 0x32, 0x3ff, 0x7}, {0x1, 0x4, 0x9c, 0x1, 0x7, 0x100}, {0x2, 0xfffffffc, 0x7, 0xfa1, 0x5, 0x1000}, {0x1, 0x40000000, 0xc, 0xdcc, 0x5, 0x9}, {0x7, 0x2, 0xffff, 0x8, 0x5, 0xa}, {0xb751, 0x10001, 0xffffff81, 0x7, 0x9, 0x3}, {0x5, 0x9, 0xe, 0xc, 0x0, 0x9}, {0x4, 0x2, 0x2, 0x7, 0xfffffff7}, {0xfffffffb, 0x4, 0x4, 0x4, 0x1, 0xf}, {0x8, 0x6, 0x4, 0x0, 0x4, 0x3}, {0xe, 0x5f67, 0x3, 0x8, 0x69, 0xdf}, {0x7f, 0x9, 0x2, 0x2a, 0x5, 0x9}, {0x0, 0x400, 0xa33d0a0d, 0x0, 0x8, 0x8}, {0x0, 0x3, 0x9, 0x9, 0x7, 0x6}, {0x9, 0x1, 0x6, 0x7fff, 0x0, 0xfffffff5}, {0x8, 0x8, 0x2, 0x7, 0x7, 0x4}, {0xff, 0x8, 0x23522536, 0x5, 0x7fe, 0x9}, {0x2, 0x0, 0xa, 0x0, 0x8, 0x1ff}, {0x4, 0x7ea6b718, 0x4, 0xa, 0x76c, 0x8001}, {0x9, 0x8, 0x6, 0x0, 0xd, 0xffffffff}, {0x7, 0x1, 0x9, 0xffffffff, 0x0, 0x4}, {0x2, 0x3, 0x1cb973da, 0x8, 0x5, 0x2}, {0x2, 0x1ff, 0x7, 0xf, 0x8, 0x8001}, {0x4, 0x897a, 0x6, 0x1, 0xf93a}, {0x8, 0xffffffff, 0x5, 0x3, 0xfffffff5, 0x1}, {0x6f, 0x5, 0x6, 0x9, 0xf, 0x8}, {0x4, 0xffffffff, 0x10001, 0x40, 0x708, 0xf}, {0xb4, 0x1, 0x1000, 0xd, 0x77, 0x3}, {0x3, 0xfffff800, 0x4, 0x9, 0x2, 0x5c}, {0x4, 0x2, 0x6, 0x6, 0x2, 0x5}, {0xb, 0x1, 0x40, 0x7ff, 0x9, 0x1}, {0x2, 0x1, 0xd7, 0x1, 0xffff, 0x8}, {0xdecf, 0x86ac, 0x9, 0x81, 0x3, 0x4}, {0x7, 0xbd1, 0xb0, 0x3, 0x8, 0x1}, {0x2, 0x42a6, 0x5, 0x7, 0x1, 0x5}, {0x9, 0xc, 0x5, 0x6958, 0x7ff, 0x9}, {0x12a, 0x401, 0x8001, 0x8264, 0x7a80, 0x56cc}, {0x0, 0x3ff, 0x1, 0x7, 0xcb, 0xffffff2c}, {0x7d, 0x200, 0x5, 0xdba, 0x3, 0xfffffffd}, {0x3ff, 0x2c446a4, 0x3, 0x3, 0x40, 0xc}, {0x7, 0x81, 0x5, 0x8, 0xf0000000, 0x9}, {0x3, 0x0, 0x6, 0x8000, 0x1000, 0x6}, {0x1, 0x8000, 0x8, 0xe, 0x6, 0x10000}, {0x0, 0x6, 0x3, 0x8, 0x3, 0x7}, {0x9, 0x0, 0xffffffff, 0xfffffffe, 0x1, 0x1}, {0x4011a031, 0x7, 0x6, 0x0, 0x5, 0xfffffffe}, {0x100, 0xffff, 0x2, 0x9, 0x6, 0x7f}, {0x0, 0x9, 0xa4, 0x2, 0x6, 0x8001}, {0x2, 0x9, 0x9f0, 0x9, 0x1, 0xc}, {0x3, 0x7, 0x101, 0x0, 0x0, 0xa8}, {0xffffffc2, 0x58b, 0x2, 0x4, 0x2}, {0x101, 0x4, 0xffffffff, 0x7, 0x1, 0x6}, {0x1, 0x7, 0x4, 0x1, 0x10000, 0x4}, {0x9, 0x1, 0x0, 0x7, 0x16a, 0x9}, {0xe8cb, 0x9, 0x5, 0x5, 0x1, 0x60000000}, {0x7, 0x400, 0xfffffffb, 0x1000, 0x9, 0xfffffff9}, {0xfffffffe, 0x401, 0x9, 0x12, 0x5, 0x80000000}, {0x8, 0xa570, 0x80, 0x3, 0x6, 0x5446}, {0x4, 0xfff, 0xec, 0xe1e, 0x8ee, 0x4}, {0xffffffff, 0x290, 0x6, 0xc, 0x401, 0x3}, {0x8, 0x4e5b, 0xfff, 0xfffffffe, 0x10000, 0xfffffffd}, {0x2, 0x6, 0x9, 0x5, 0x4, 0x9}, {0x3, 0x0, 0x400, 0x2, 0x1, 0x1}, {0x7, 0x6, 0x1, 0xf, 0x7, 0xb391}, {0x3, 0x1000, 0x6, 0x5, 0x80000000, 0x80000000}, {0xd, 0x6187, 0x7, 0xfffffffa, 0x1, 0x8}, {0x6, 0x2, 0x1000, 0x99, 0x8, 0x6}, {0x14e7, 0x9, 0x0, 0x1, 0x7fffffff}, {0x7, 0x4, 0x8, 0xa6, 0x2, 0x8}, {0x2, 0x3, 0xd, 0x9, 0x9, 0x39}, {0xfff, 0x4, 0x6, 0x9, 0x2, 0x9}, {0x0, 0x3abc0b25, 0x7f, 0xfffffffa, 0x57fd}, {0x6, 0x2, 0x3, 0x6, 0x5a87298a, 0x106}, {0x10000, 0x0, 0x8, 0x0, 0x0, 0x80000000}, {0x3c, 0x120000, 0x81, 0x2, 0x6}, {0xd, 0x10001, 0x6, 0x1, 0x3, 0x547}, {0x1, 0x8, 0x6, 0x1, 0x6, 0x200}, {0xa506, 0x3, 0x9, 0x3, 0x0, 0x5}, {0x7fff, 0x6, 0x1, 0x9, 0x1ff, 0x1}, {0x9, 0x407e135f, 0x0, 0x5, 0x6}, {0x0, 0x5, 0x272, 0x4, 0x0, 0xe}, {0xfffffffb, 0x1, 0x4, 0x7, 0x0, 0x3}, {0x8, 0xfffffff8, 0x8, 0x2, 0x1300000, 0x80000001}], [{0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x15b618ba19bd88fd}, {}, {0x2}, {0xdce5abc8a6e8d113}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x4}, {0x2}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0xe86eac2b022541d9}, {0x3}, {0x6, 0x1}, {0x1}, {0x1}, {0x3}, {0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x4}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x5}, {0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {}, {0x5}, {0x3, 0x1}, {0x2, 0x3}, {0x5, 0x1}, {0x3}, {0x1, 0x1}, {0x4}, {0x1}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x889f0d205037cd24}, {0x5}, {0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x4}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0xd122595bc897e202, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x1}, {0x7}, {0x5}, {0x5}, {0x3, 0x1}, {0x4}, {0x2, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r7, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r5, 0x17}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x1}], 0x1}, 0x4000880) 30.928770064s ago: executing program 5 (id=3587): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x4bc, &(0x7f0000000a40)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) 28.060403192s ago: executing program 5 (id=3593): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x14) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 23.656467027s ago: executing program 5 (id=3611): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0xec, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0xd8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x68, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x10}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @empty}}}]}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40010}, 0x4000010) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 22.70103585s ago: executing program 36 (id=3611): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0xec, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0xd8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x68, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x10}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @empty}}}]}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40010}, 0x4000010) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 8.140798137s ago: executing program 1 (id=3649): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2, 0x10270000}, @TCA_FQ_QUANTUM={0x2, 0x2, 0x1800}]}}]}, 0x48}}, 0x0) 6.961166555s ago: executing program 1 (id=3651): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x8}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e4624b701693389f7b986", 0x0, 0x4, 0xf0ffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.74886681s ago: executing program 1 (id=3654): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffdf, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x1}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, 0x0, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2a, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 6.472775067s ago: executing program 6 (id=3655): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2100, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) fchdir(r0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000480)='./bus\x00', 0x0, &(0x7f00000000c0)={[{@noload}, {@noload}, {@lazytime}, {@noload}, {@resgid}, {@auto_da_alloc}]}, 0xff, 0x451, &(0x7f0000000940)="$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") 5.731197964s ago: executing program 6 (id=3656): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x4e24, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}, @ip_retopts={{0x20, 0x0, 0x7, {[@generic={0x7, 0xf, "093288a6d5a96c15ef5b200dd6"}]}}}], 0x40}, 0x20002800) 5.527260529s ago: executing program 1 (id=3658): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xbc}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 5.419907341s ago: executing program 6 (id=3659): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x2}}]}, 0x38}}, 0x4890) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.564564402s ago: executing program 1 (id=3660): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd06, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xe}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r7) r8 = socket(0x10, 0x803, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xf, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x3, 0x4, 0x32, 0xfffffbff}, 0x80}}]}, {0x4}, {0x2c, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r9 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r1, 0x3c}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000540)='\'', 0x59}], 0x1}, 0x4011) 4.433920555s ago: executing program 7 (id=3661): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x8}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e4624b701693389f7b986", 0x0, 0x4, 0xf0ffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.21746035s ago: executing program 7 (id=3662): socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24040040) 4.21628333s ago: executing program 6 (id=3663): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") timer_create(0xfffffffd, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x1, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_settime(r0, 0x1, &(0x7f0000000140)={{}, {0x0, 0x3938700}}, &(0x7f00000001c0)) 3.964753966s ago: executing program 7 (id=3664): syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[], 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() syz_emit_ethernet(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x1) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000001680)='illinois', 0x8) setsockopt$inet_tcp_int(r6, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x220}, 0x0) ioctl$TIOCSETD(r5, 0x5423, 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x2) capset(0x0, 0x0) connect$inet6(r4, &(0x7f0000000280)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x28}, 0x7}, 0x1c) 3.618097374s ago: executing program 6 (id=3665): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffdf, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x1}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, 0x0, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2a, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 2.801908223s ago: executing program 7 (id=3666): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x4e24, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}, @ip_retopts={{0x20, 0x0, 0x7, {[@generic={0x7, 0xf, "093288a6d5a96c15ef5b200dd6"}]}}}], 0x40}, 0x20002800) 2.600747188s ago: executing program 7 (id=3667): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 9.91997ms ago: executing program 7 (id=3668): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000140), 0xfc, 0x560, &(0x7f00000008c0)="$eJzs3d9rW1UcAPDvTdut+6HtYAz1QQp7cDKXrq0/JvgwH0WHA33XkGRlNF1Gk461Dtwe3IsvMgQRB6Lvvvs4/Af8KwY6GDKKPuwlctObLluTNu3StVs+H7jtOffe9Jxv7v2enpubkAAG1kT6IxfxakR8l0SMtW0bjmzjxOp+Kw+uFdMliUbjs3+SSLJ1rf2T7PehrPJKRPzxTcTJ3Pp2a0vLc4VKpbyQ1Sfr85cna0vLpy7OF2bLs+VL0zMzZ96ZmX7/vXf7Fuub5//78dM7H5359vjKD7/dO3IribNxONvWHsdTuN5emYiJ7DkZibNP7DjVh8b2kmS3O8C2DGV5PhLpGDAWQ1nWd9QYe5ZdA3bY12laAwMqkf8woFrzgNa1fZ+ug58b9z9cvQBaH//w6msjMdq8Njq4kjx2ZZRe7473of20jd//vn0rXaJ/r0MAbOr6jYg4PTy8fvxLsvFv+073sM+TbRj/4Nm5k85/3uo0/8mtzX+iw/znUIfc3Y7N8z93rw/NdJXO/z7oOP9du2k1PpTVXmrO+UaSCxcr5XRsezkiTsTI/rS+wf2cL3MrdxvdNrbP/9Ilbb81F8z6cW94/+OPKRXqhacKus39GxGvdZz/JmvHP+lw/NPn43yPbRwr336927bN499ZjV8i3uh4/B/d0Uo2vj852TwfJltnxXr/3jz2Z7f2dzv+9Pgf3Dj+8aT9fm1t6238PPqw3G3bds//fcnnzfK+bN3VQr2+MBWxL/lk/frpR49t1Vv7p/GfOL7x+Nfp/D+QJnaP8d88erN919Gtxb+z0vhLWzr+Wy/c/firn7q139vxf7tZOpGt6WX867WDT/PcAQAAAAAAwF6Ti4jDkeTya+VcLp9ffX/H0TiYq1Rr9ZMXqouXStH8rOx4jORad7rH2t4PMZW9H7ZVn36iPhMRRyLi+6EDzXq+WK2Udjt4AAAAAAAAAAAAAAAAAAAA2CMORYx2+vx/6q+h3e4dsOM2+Mpv4AXXPf+zLf34pidgT/L/HwaX/IfBJf9hcMl/GFzyHwaX/IfBJf9hcG0l/389t4MdAQAAAAAAAAAAAAAAAAAAAAAAAAAAgBfD+XPn0qWx8uBaMa2XriwtzlWvnCqVa3P5+cVivlhduJyfrVZnK+V8sTq/2d+rVKuXp6Zj8epkvVyrT9aWlr+Yry5eethYVR55JlEBAAAAAAAAAAAAAAAAAADA86W2tDxXqFTKCwoK2yoM741uKPS5sNsjEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA88n8AAAD//75iP7A=") sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa000000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000140), &(0x7f0000000180)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x900, 0x0) ioctl$FBIO_WAITFORVSYNC(r4, 0x40044620, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0x37db, 0xf423b, 0xfffffffffffffffc, 0x0, 0x0, 0x9, 0xfffffffffffffffc, 0x1, 0x3, 0x80000, 0x7ff, 0x0, 0x0, 0xfffffffffffffffd, 0x2, 0xf11b, 0x1, 0x8, 0x0, 0x0, 0x2, 0xb17, 0xffffffffffffffff, 0x5c43, 0x1, 0x6}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r5, 0x400, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000140)="10", 0xfffff, r6) 5.30634ms ago: executing program 1 (id=3669): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x8}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e4624b701693389f7b986", 0x0, 0x4, 0xf0ffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 6 (id=3670): openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xb7}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$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") kernel console output (not intermixed with test programs): ode [ 708.628367][T13425] bridge_slave_1: entered promiscuous mode [ 708.887759][T13507] overlayfs: conflicting options: nfs_export=on,index=off [ 709.495320][T13425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 709.582060][T13425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 709.764572][T13425] team0: Port device team_slave_0 added [ 709.999106][T13425] team0: Port device team_slave_1 added [ 710.209243][T12183] Bluetooth: hci3: command tx timeout [ 710.561170][T13514] syzkaller0: entered promiscuous mode [ 710.616380][T13514] syzkaller0: entered allmulticast mode [ 710.884027][T13539] binder: 13538:13539 ioctl c0306201 0 returned -14 [ 710.970015][T13425] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 710.977058][T13425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 711.003610][T13425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 711.195010][T13425] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 711.202139][T13425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 711.264353][T13425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 711.349460][T13546] loop0: detected capacity change from 0 to 4096 [ 711.430841][T13549] binder: 13547:13549 ioctl 4018620d 0 returned -22 [ 711.437645][T13546] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 711.504178][T13552] loop4: detected capacity change from 0 to 512 [ 711.555190][T13552] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 711.586770][T13552] EXT4-fs (loop4): 1 truncate cleaned up [ 711.600891][T13552] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 711.637341][ T7720] hsr_slave_0: left promiscuous mode [ 711.662318][ T7720] hsr_slave_1: left promiscuous mode [ 711.686832][ T7720] bridge_slave_0: left allmulticast mode [ 711.693184][ T7720] bridge_slave_0: left promiscuous mode [ 711.711132][ T7720] bridge0: port 1(bridge_slave_0) entered disabled state [ 711.714321][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 711.839611][ T7720] veth1_macvtap: left promiscuous mode [ 711.850674][ T7720] veth0_macvtap: left promiscuous mode [ 711.867495][ T7720] veth1_vlan: left promiscuous mode [ 711.883056][ T7720] veth0_vlan: left promiscuous mode [ 712.207840][T12183] Bluetooth: hci3: command tx timeout [ 712.629250][T13565] binder: 13564:13565 ioctl c0306201 0 returned -14 [ 713.778082][ T7720] team0 (unregistering): Port device team_slave_1 removed [ 713.842996][ T7720] team0 (unregistering): Port device team_slave_0 removed [ 713.900728][ T7720] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 713.960807][ T7720] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 714.350214][ T7720] bond0 (unregistering): Released all slaves [ 714.454711][T13425] hsr_slave_0: entered promiscuous mode [ 714.462212][T13425] hsr_slave_1: entered promiscuous mode [ 714.469126][T13425] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 714.476891][T13425] Cannot create hsr debugfs directory [ 714.555163][ T6743] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 714.785960][T13592] loop3: detected capacity change from 0 to 1024 [ 714.817864][T13592] EXT4-fs: Ignoring removed bh option [ 714.823436][T13592] EXT4-fs: Ignoring removed bh option [ 714.879923][T13592] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 715.017240][T13592] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 715.244828][T13606] binder: BINDER_SET_CONTEXT_MGR already set [ 715.284752][ T5776] EXT4-fs error (device loop3): ext4_read_inline_dir:1591: inode #12: block 7: comm syz-executor: path /591/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 715.293472][T13606] binder: 13605:13606 ioctl 4018620d 2000000002c0 returned -16 [ 715.329932][ T5776] EXT4-fs (loop3): Remounting filesystem read-only [ 715.366287][ T7720] IPVS: stop unused estimator thread 0... [ 715.567585][ T5776] bond0: (slave syz_tun): Releasing backup interface [ 715.603132][T13615] loop4: detected capacity change from 0 to 512 [ 715.647933][T13615] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 715.700600][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 715.781089][T13615] EXT4-fs (loop4): 1 truncate cleaned up [ 715.812614][T13615] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 716.189399][ T7720] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.220612][ T6743] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 716.290205][T13623] syzkaller0: entered promiscuous mode [ 716.295812][T13623] syzkaller0: entered allmulticast mode [ 716.445164][ T7720] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.684988][ T7720] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.701572][T13641] loop4: detected capacity change from 0 to 1024 [ 716.811397][T13641] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 716.855915][ T7720] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.032994][ T5780] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 717.042943][ T5780] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 717.051373][ T5780] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 717.060978][ T5780] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 717.068967][ T5780] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 717.076691][ T5780] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 717.246075][T13425] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 717.258634][T13650] binder: BINDER_SET_CONTEXT_MGR already set [ 717.279188][T13650] binder: 13648:13650 ioctl 4018620d 2000000002c0 returned -16 [ 717.305538][T13425] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 717.312565][T13646] wlan0 speed is unknown, defaulting to 1000 [ 717.325753][T13425] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 717.348045][T13425] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 717.580214][ T6743] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 717.940214][ T7720] tipc: Left network mode [ 717.971771][T13669] loop4: detected capacity change from 0 to 1024 [ 717.985314][T13669] EXT4-fs: Ignoring removed bh option [ 718.040779][T13669] EXT4-fs: Ignoring removed bh option [ 718.057466][T13646] chnl_net:caif_netlink_parms(): no params data found [ 718.094846][T13669] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 718.186553][T13669] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 718.431687][ T6743] EXT4-fs error (device loop4): ext4_read_inline_dir:1591: inode #12: block 7: comm syz-executor: path /497/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 718.515637][ T6743] EXT4-fs (loop4): Remounting filesystem read-only [ 719.189855][ T5780] Bluetooth: hci0: command tx timeout [ 719.266420][T13425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 719.347011][ T6743] bond1: (slave syz_tun): Removing an active aggregator [ 719.357127][ T6743] bond1: (slave syz_tun): Releasing backup interface [ 719.380450][T13679] wlan0 speed is unknown, defaulting to 1000 [ 719.510659][ T6743] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 719.870104][T13425] 8021q: adding VLAN 0 to HW filter on device team0 [ 719.981296][ T2998] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.988642][ T2998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 720.020927][T13646] bridge0: port 1(bridge_slave_0) entered blocking state [ 720.030928][T13646] bridge0: port 1(bridge_slave_0) entered disabled state [ 720.043946][T13646] bridge_slave_0: entered allmulticast mode [ 720.059344][T13646] bridge_slave_0: entered promiscuous mode [ 720.146048][T13646] bridge0: port 2(bridge_slave_1) entered blocking state [ 720.167982][T13646] bridge0: port 2(bridge_slave_1) entered disabled state [ 720.185358][T13646] bridge_slave_1: entered allmulticast mode [ 720.196718][T13646] bridge_slave_1: entered promiscuous mode [ 720.328782][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 720.336068][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 720.473262][T13646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 720.569555][T13646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 720.599988][T12183] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 720.611876][T12183] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 720.630478][T12183] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 720.641753][T12183] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 720.652452][T12183] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 720.661100][T12183] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 720.905417][T13646] team0: Port device team_slave_0 added [ 721.066380][T13646] team0: Port device team_slave_1 added [ 721.152094][T12183] Bluetooth: hci0: command tx timeout [ 721.241716][T13646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 721.248740][T13646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 721.274709][ C0] vkms_vblank_simulate: vblank timer overrun [ 721.303643][T13717] loop0: detected capacity change from 0 to 1024 [ 721.303817][T13646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 721.372461][T13646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 721.399097][T13646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 721.425082][ C0] vkms_vblank_simulate: vblank timer overrun [ 721.443320][T13717] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 721.461321][T13646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 721.527922][ T7720] hsr_slave_0: left promiscuous mode [ 721.545146][ T7720] hsr_slave_1: left promiscuous mode [ 721.634124][ T7720] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 721.656890][ T7720] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 721.670235][ T7720] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 721.677726][ T7720] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 721.692592][ T7720] bridge_slave_1: left allmulticast mode [ 721.713833][ T7720] bridge_slave_1: left promiscuous mode [ 721.728874][ T7720] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.763663][ T7720] bridge_slave_0: left allmulticast mode [ 721.780618][ T7720] bridge_slave_0: left promiscuous mode [ 721.797981][ T7720] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.852523][ T7720] veth1_macvtap: left promiscuous mode [ 721.858855][ T7720] veth0_macvtap: left promiscuous mode [ 721.872675][ T7720] veth1_vlan: left promiscuous mode [ 722.237983][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 722.734726][T12183] Bluetooth: hci2: command tx timeout [ 722.996948][ T7720] team0 (unregistering): Port device team_slave_1 removed [ 723.057283][ T7720] team0 (unregistering): Port device team_slave_0 removed [ 723.115868][ T7720] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 723.174010][ T7720] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 723.199239][T12183] Bluetooth: hci0: command tx timeout [ 723.596572][ T7720] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 723.605988][ T7720] bond0 (unregistering): Released all slaves [ 723.767602][T13425] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 723.870705][T13747] loop0: detected capacity change from 0 to 1024 [ 723.877942][T13646] hsr_slave_0: entered promiscuous mode [ 723.885333][T13747] EXT4-fs: Ignoring removed bh option [ 723.894785][T13747] EXT4-fs: Ignoring removed bh option [ 723.900701][T13646] hsr_slave_1: entered promiscuous mode [ 723.908073][T13747] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 723.980379][T13747] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 724.247747][ T5775] EXT4-fs error (device loop0): ext4_read_inline_dir:1591: inode #12: block 7: comm syz-executor: path /600/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 724.304020][ T5775] EXT4-fs (loop0): Remounting filesystem read-only [ 724.463997][ T7720] IPVS: stop unused estimator thread 0... [ 724.574921][T13425] veth0_vlan: entered promiscuous mode [ 724.602703][T13425] veth1_vlan: entered promiscuous mode [ 724.616207][T13703] chnl_net:caif_netlink_parms(): no params data found [ 724.696248][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 724.743948][T12183] Bluetooth: hci2: command tx timeout [ 724.827051][ T7720] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.999750][T13646] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 725.039016][T13646] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 725.104483][ T7720] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.139457][T13646] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 725.185944][T13425] veth0_macvtap: entered promiscuous mode [ 725.218043][T12183] Bluetooth: hci0: command tx timeout [ 725.251958][T13646] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 725.289533][T13425] veth1_macvtap: entered promiscuous mode [ 725.347224][ T7720] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.370748][T13703] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.388050][T13703] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.397490][T13703] bridge_slave_0: entered allmulticast mode [ 725.410980][T13703] bridge_slave_0: entered promiscuous mode [ 725.490368][ T7720] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.523384][T13703] bridge0: port 2(bridge_slave_1) entered blocking state [ 725.533184][T13703] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.547143][T13703] bridge_slave_1: entered allmulticast mode [ 725.557167][T13703] bridge_slave_1: entered promiscuous mode [ 725.592497][T13425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 725.603761][T13425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 725.613749][T13425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 725.624948][T13425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 725.637058][T13425] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 725.709955][T13703] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 725.750681][T13425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 725.787207][T13425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 725.801003][T13425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 725.822618][T13425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 725.839130][T13425] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 725.855511][T13703] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 725.905743][T13425] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.923438][T13425] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.937297][T13425] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.952537][ T5780] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 725.963151][ T5780] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 725.972018][ T5780] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 725.976934][T13425] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.002294][ T5780] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 726.022698][ T5780] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 726.035500][ T5780] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 726.120356][T13703] team0: Port device team_slave_0 added [ 726.136759][T13703] team0: Port device team_slave_1 added [ 726.350882][ T7720] tipc: Left network mode [ 726.374896][T13703] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 726.388310][T13703] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 726.449143][T13703] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 726.473058][T13703] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 726.493169][T13703] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 726.519191][ C0] vkms_vblank_simulate: vblank timer overrun [ 726.539081][T13703] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 726.767639][T12183] Bluetooth: hci2: command tx timeout [ 726.809790][T13703] hsr_slave_0: entered promiscuous mode [ 726.816826][T13703] hsr_slave_1: entered promiscuous mode [ 726.824008][T13703] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 726.832011][T13703] Cannot create hsr debugfs directory [ 726.955992][ T1080] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 726.975299][ T1080] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 727.092697][T13646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 727.128517][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 727.136431][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 727.280831][T13646] 8021q: adding VLAN 0 to HW filter on device team0 [ 727.454346][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 727.461595][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 727.598426][T13646] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 727.633803][T13646] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 727.798613][T13801] 9pnet_fd: Insufficient options for proto=fd [ 727.808735][T13801] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 727.829055][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.836333][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 727.928393][T13773] chnl_net:caif_netlink_parms(): no params data found [ 728.085980][T13703] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 728.100758][T12183] Bluetooth: hci1: command tx timeout [ 728.113280][T13703] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 728.220089][T13703] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 728.284713][T13703] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 728.511928][T13646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 728.615325][T13817] binder: 13816:13817 ioctl 4018620d 0 returned -22 [ 728.735154][ T7720] hsr_slave_0: left promiscuous mode [ 728.754958][ T7720] hsr_slave_1: left promiscuous mode [ 728.791124][ T7720] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 728.798869][ T7720] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 728.807722][T12183] Bluetooth: hci2: command tx timeout [ 728.830641][ T7720] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 728.838153][ T7720] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 728.849619][ T7720] bridge_slave_1: left allmulticast mode [ 728.855338][ T7720] bridge_slave_1: left promiscuous mode [ 728.864861][ T7720] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.876198][T13824] loop1: detected capacity change from 0 to 512 [ 728.894256][ T7720] bridge_slave_0: left allmulticast mode [ 728.903921][ T7720] bridge_slave_0: left promiscuous mode [ 728.908149][T13824] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 728.919768][ T7720] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.968281][ T7720] veth1_macvtap: left promiscuous mode [ 728.973947][ T7720] veth0_macvtap: left promiscuous mode [ 728.976634][T13824] EXT4-fs (loop1): 1 truncate cleaned up [ 728.980339][ T7720] veth1_vlan: left promiscuous mode [ 728.992107][ T7720] veth0_vlan: left promiscuous mode [ 728.992383][T13824] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 729.328735][ T7720] bond2 (unregistering): (slave dummy0): Releasing active interface [ 729.336815][ T7720] dummy0 (unregistering): left promiscuous mode [ 729.343494][ T7720] dummy0 (unregistering): left allmulticast mode [ 729.351538][ T7720] bond2 (unregistering): Released all slaves [ 729.494098][ T7720] bond1 (unregistering): Released all slaves [ 730.081662][ T7720] team0 (unregistering): Port device team_slave_1 removed [ 730.133212][T12183] Bluetooth: hci1: command tx timeout [ 730.147013][ T7720] team0 (unregistering): Port device team_slave_0 removed [ 730.195838][ T7720] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 730.253812][ T7720] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 730.641136][ T7720] bond0 (unregistering): Released all slaves [ 730.765485][T13773] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.782873][T13773] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.806328][T13773] bridge_slave_0: entered allmulticast mode [ 730.817352][T13773] bridge_slave_0: entered promiscuous mode [ 730.847886][T13773] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.863757][T13773] bridge0: port 2(bridge_slave_1) entered disabled state [ 730.873748][T13773] bridge_slave_1: entered allmulticast mode [ 730.889338][T13773] bridge_slave_1: entered promiscuous mode [ 731.023126][T13773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 731.070168][T13773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 731.101572][T13425] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 731.306979][T13703] 8021q: adding VLAN 0 to HW filter on device bond0 [ 731.337447][T13773] team0: Port device team_slave_0 added [ 731.372763][T13773] team0: Port device team_slave_1 added [ 731.492955][T13703] 8021q: adding VLAN 0 to HW filter on device team0 [ 731.716162][T13773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 731.737304][T13773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 731.801653][T13773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 731.835969][ T1080] bridge0: port 1(bridge_slave_0) entered blocking state [ 731.843212][ T1080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 731.861392][ T1080] bridge0: port 2(bridge_slave_1) entered blocking state [ 731.868719][ T1080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 731.879060][T13773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 731.888948][T13846] 9pnet_fd: Insufficient options for proto=fd [ 731.896075][T13846] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 731.912963][T13773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 731.945034][T13773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 732.024914][ T7720] IPVS: stop unused estimator thread 0... [ 732.065358][T13646] veth0_vlan: entered promiscuous mode [ 732.087674][T13773] hsr_slave_0: entered promiscuous mode [ 732.094804][T13773] hsr_slave_1: entered promiscuous mode [ 732.109209][T13773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 732.125028][T13773] Cannot create hsr debugfs directory [ 732.185492][T12183] Bluetooth: hci1: command tx timeout [ 732.214386][T13646] veth1_vlan: entered promiscuous mode [ 732.420181][T13646] veth0_macvtap: entered promiscuous mode [ 732.432947][T13646] veth1_macvtap: entered promiscuous mode [ 732.456380][T13646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 732.478285][T13646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.498254][T13646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 732.519088][T13646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.540676][T13646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 732.639460][ T7720] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.757590][ T7720] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.822362][T13646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 732.835767][T13646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.855802][T13646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 732.870346][T13646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.885237][T13646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 732.994012][ T7720] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.065408][T13859] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[13425] was attempted by ""[13859] [ 733.331197][T13646] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.399641][T13646] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.451815][T13646] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.501593][T13646] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.590659][ T7720] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.853373][T13773] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 733.896225][T13773] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 733.966085][T13773] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 734.033042][T13773] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 734.091121][T13867] loop1: detected capacity change from 0 to 512 [ 734.194467][T13867] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 734.235671][T12183] Bluetooth: hci1: command tx timeout [ 734.260592][T12208] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 734.297312][T13867] EXT4-fs (loop1): 1 truncate cleaned up [ 734.307039][T12208] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 734.329469][T13867] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 734.445792][ T7720] tipc: Left network mode [ 734.478188][T13703] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 734.493695][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 734.530793][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 734.716327][T13425] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 735.246639][T13892] overlayfs: missing 'lowerdir' [ 735.304471][T13893] overlayfs: conflicting options: nfs_export=on,index=off [ 735.807287][T13773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 735.946333][T13773] 8021q: adding VLAN 0 to HW filter on device team0 [ 736.009951][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 736.017554][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 736.024531][T13896] read descriptors [ 736.087611][T13646] ffs_data_put(): freeing [ 736.140167][ T2998] bridge0: port 2(bridge_slave_1) entered blocking state [ 736.147506][ T2998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 736.810178][T13703] veth0_vlan: entered promiscuous mode [ 736.872934][T13898] syz.1.2382 (13898) used greatest stack depth: 17448 bytes left [ 736.934816][T13703] veth1_vlan: entered promiscuous mode [ 737.179534][T13703] veth0_macvtap: entered promiscuous mode [ 737.290711][T13703] veth1_macvtap: entered promiscuous mode [ 737.333527][T13703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 737.397994][T13923] loop1: detected capacity change from 0 to 512 [ 737.411997][T13703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.422624][T13703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 737.434627][T13923] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 737.444820][T13703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.455148][T13703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 737.468489][T13703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.485075][T13923] EXT4-fs (loop1): 1 truncate cleaned up [ 737.498519][T13703] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 737.533927][T13923] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 737.728742][T13703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 737.783135][T13703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.822527][T13703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 737.891624][T13703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.911406][T13703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 737.926328][T13703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 738.272146][T13703] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 738.543532][T13703] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.601240][T13703] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.637361][T13703] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.669075][T13703] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.738510][T13940] (null): rxe_set_mtu: Set mtu to 1024 [ 738.800519][T13773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 738.875076][T13425] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 738.985772][ T7720] hsr_slave_0: left promiscuous mode [ 739.061042][ T7720] hsr_slave_1: left promiscuous mode [ 739.077390][ T7720] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 739.162488][ T7720] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 739.184945][ T7720] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 739.206527][ T7720] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 739.230887][ T7720] bridge_slave_1: left allmulticast mode [ 739.248859][ T7720] bridge_slave_1: left promiscuous mode [ 739.254730][ T7720] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.297687][ T7720] bridge_slave_0: left allmulticast mode [ 739.317814][ T7720] bridge_slave_0: left promiscuous mode [ 739.323744][ T7720] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.449801][ T7720] veth1_macvtap: left promiscuous mode [ 739.464065][ T7720] veth0_macvtap: left promiscuous mode [ 739.469879][ T7720] veth1_vlan: left promiscuous mode [ 739.490920][ T7720] veth0_vlan: left promiscuous mode [ 739.520951][T13940] infiniband syz1: set active [ 739.544990][T13940] infiniband syz1: added syz_tun [ 739.735055][T13940] RDS/IB: syz1: added [ 739.742911][T13940] smc: adding ib device syz1 with port count 1 [ 739.749453][T13940] smc: ib device syz1 port 1 has pnetid [ 739.948799][ T7720] bond1 (unregistering): (slave veth3): Releasing active interface [ 740.142853][T13425] ffs_data_put(): freeing [ 740.161950][ T7720] bond1 (unregistering): Released all slaves [ 740.854956][T13963] loop1: detected capacity change from 0 to 512 [ 740.882914][T13963] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 740.923154][T13963] EXT4-fs (loop1): 1 truncate cleaned up [ 740.939624][T13963] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 741.218669][ T7720] team0 (unregistering): Port device team_slave_1 removed [ 741.273350][ T7720] team0 (unregistering): Port device team_slave_0 removed [ 741.327446][ T7720] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 741.388311][ T7720] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 741.793159][ T7720] bond0 (unregistering): Released all slaves [ 742.149372][T13425] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 742.217498][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 742.251569][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 742.425373][ T2998] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 742.433286][ T2998] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 742.782393][T13980] overlayfs: missing 'lowerdir' [ 742.825373][T13980] overlayfs: conflicting options: nfs_export=on,index=off [ 743.321559][ T7720] IPVS: stop unused estimator thread 0... [ 743.556914][T13773] veth0_vlan: entered promiscuous mode [ 743.611378][T13773] veth1_vlan: entered promiscuous mode [ 743.723404][T13773] veth0_macvtap: entered promiscuous mode [ 743.754217][T13773] veth1_macvtap: entered promiscuous mode [ 743.818983][T13773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 743.844500][T13773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 743.879036][T13773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 743.923385][T13773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 743.983810][T13773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 744.035493][T13773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 744.091098][T13773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 744.148592][T13773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 744.164947][T13773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 744.177125][T13773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 744.193651][T13773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 744.204122][T13773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 744.226644][T13773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 744.259925][T13773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 744.287019][T13773] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.339451][T13773] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.387154][T13773] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.426609][T13773] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.589496][T14002] binder_alloc: 13997: binder_alloc_buf, no vma [ 745.020146][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 745.026740][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.595534][ T7720] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 746.642586][ T7720] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 746.716295][T14019] loop1: detected capacity change from 0 to 512 [ 746.760539][T14019] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 746.761040][ T7720] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 746.822358][ T7720] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 746.836589][T14019] EXT4-fs (loop1): 1 truncate cleaned up [ 746.846276][T14019] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 747.170454][T14032] loop7: detected capacity change from 0 to 1024 [ 747.238336][T13425] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 747.273284][T14032] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 748.779961][T14055] binder_alloc: 14051: binder_alloc_buf, no vma [ 750.402742][T13773] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 750.510142][T14056] loop1: detected capacity change from 0 to 256 [ 750.559980][T14056] FAT-fs (loop1): Unrecognized mount option "rodir=utf8=1" or missing value [ 751.733372][T14068] loop7: detected capacity change from 0 to 512 [ 751.757839][T14065] loop5: detected capacity change from 0 to 512 [ 751.817021][T14068] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 751.830605][T14068] ext4 filesystem being mounted at /1/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 751.878448][T14065] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 751.929717][T14065] EXT4-fs (loop5): 1 truncate cleaned up [ 751.963587][T14065] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 751.981146][T14068] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 752.712877][T14090] overlayfs: missing 'lowerdir' [ 752.770259][T14091] overlayfs: conflicting options: nfs_export=on,index=off [ 753.525147][T13646] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 754.003926][T14099] loop5: detected capacity change from 0 to 1024 [ 754.679329][T14099] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 755.837813][T13646] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 756.453797][T12183] Bluetooth: hci1: unknown advertising packet type: 0xe3 [ 756.453912][T12183] Bluetooth: hci1: unknown advertising packet type: 0x38 [ 756.461629][T12183] Bluetooth: hci1: unknown advertising packet type: 0x38 [ 756.470667][T12183] Bluetooth: hci1: unknown advertising packet type: 0x95 [ 756.478681][T12183] Bluetooth: hci1: unknown advertising packet type: 0x30 [ 756.486990][T12183] Bluetooth: hci1: unknown advertising packet type: 0x2f [ 756.985084][T14126] UBIFS error (pid: 14126): cannot open "ubifs", error -22 [ 758.976247][T14146] loop5: detected capacity change from 0 to 1024 [ 759.058917][T14148] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 759.186205][T14146] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 762.032289][T13646] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 764.063742][T14200] bridge_slave_0: left allmulticast mode [ 764.184323][T14200] bridge_slave_0: left promiscuous mode [ 764.190218][T14200] bridge0: port 1(bridge_slave_0) entered disabled state [ 764.260982][T14200] bridge_slave_1: left allmulticast mode [ 764.300763][T14200] bridge_slave_1: left promiscuous mode [ 764.326895][T14200] bridge0: port 2(bridge_slave_1) entered disabled state [ 766.143785][T14200] bond0: (slave bond_slave_0): Releasing backup interface [ 766.270314][T14200] bond0: (slave bond_slave_1): Releasing backup interface [ 766.646203][T14200] team0: Port device team_slave_0 removed [ 766.705575][T14200] team0: Port device team_slave_1 removed [ 766.712521][T14200] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 766.726525][T14200] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 766.737235][T14200] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 766.744867][T14200] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 766.827818][T14202] team0: Mode changed to "loadbalance" [ 767.150949][T14213] team0: Port device xfrm0 added [ 767.255476][T14220] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 767.524209][T14225] loop5: detected capacity change from 0 to 1024 [ 767.642228][T14225] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 768.262731][T14229] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 768.588615][T14241] binder: 14240:14241 ioctl 4018620d 0 returned -22 [ 768.604749][T13646] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 769.288582][T14260] i2c i2c-0: new_device: Missing parameters [ 769.315684][T14260] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 769.721413][T14273] loop1: detected capacity change from 0 to 1024 [ 769.786834][T14273] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 770.471306][T13425] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 770.747243][T14290] binder: 14289:14290 ioctl 4018620d 0 returned -22 [ 772.163641][T14318] i2c i2c-0: new_device: Missing parameters [ 772.174495][T14318] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 772.433848][T14325] binder: 14324:14325 ioctl 4018620d 0 returned -22 [ 773.892275][T14365] loop5: detected capacity change from 0 to 1024 [ 773.908277][T14363] binder: 14362:14363 ioctl c0306201 0 returned -14 [ 773.957201][T14365] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 774.446006][T13646] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 776.497420][T14402] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2484'. [ 776.614315][T14402] syzkaller0: entered promiscuous mode [ 776.619920][T14402] syzkaller0: entered allmulticast mode [ 777.851827][T14426] binder: 14425:14426 ioctl c0306201 0 returned -14 [ 778.100560][T14432] loop6: detected capacity change from 0 to 1024 [ 778.282776][T14432] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 778.448208][T13703] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 778.669884][T14440] i2c i2c-0: new_device: Extra parameters [ 778.689414][T14440] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 781.017906][T14447] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 781.049201][T14447] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 781.076784][T14447] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 782.929197][T14486] i2c i2c-0: new_device: Extra parameters [ 782.947495][T14486] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 784.331595][T14522] overlayfs: missing 'lowerdir' [ 784.387501][T14523] overlayfs: conflicting options: nfs_export=on,index=off [ 786.405593][T14539] loop5: detected capacity change from 0 to 512 [ 786.519041][T14543] i2c i2c-0: new_device: Extra parameters [ 786.545573][T14543] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 786.607358][T14539] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2805: inode #11: comm syz.5.2508: corrupted xattr block 95: invalid header [ 786.986067][T14539] EXT4-fs error (device loop5): ext4_validate_block_bitmap:430: comm syz.5.2508: bg 0: block 7: invalid block bitmap [ 787.038406][T14539] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 787.091420][T14539] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2971: inode #11: comm syz.5.2508: corrupted xattr block 95: invalid header [ 787.150219][T12183] Bluetooth: hci1: link tx timeout [ 787.156443][T12183] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 787.254104][T14539] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117) [ 787.359593][T14539] EXT4-fs (loop5): 1 orphan inode deleted [ 787.389920][T14539] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 787.490348][T14566] loop6: detected capacity change from 0 to 1024 [ 787.508996][T14566] EXT4-fs: Ignoring removed bh option [ 787.549693][T14566] EXT4-fs: Ignoring removed bh option [ 787.598994][T14566] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 787.717432][T14566] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 787.790346][T14566] overlayfs: missing 'lowerdir' [ 787.862552][T14566] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 787.950385][T13646] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 788.020239][T13703] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 788.280729][T14579] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 788.299858][T14579] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 789.156751][ T5780] Bluetooth: hci1: command 0x0406 tx timeout [ 790.684546][T14614] loop5: detected capacity change from 0 to 1024 [ 790.725338][T14614] EXT4-fs: Ignoring removed bh option [ 790.787141][T14614] EXT4-fs: Ignoring removed bh option [ 790.915047][T14614] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 791.093618][T14614] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 791.135870][T14623] loop6: detected capacity change from 0 to 2048 [ 791.202547][T14623] EXT4-fs (loop6): Cannot use DAX on a filesystem that may contain inline data [ 791.272465][T14614] overlayfs: missing 'lowerdir' [ 791.353824][T14623] loop6: detected capacity change from 0 to 1024 [ 791.457353][T14614] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 791.472950][T14623] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 791.717803][T13646] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 793.474791][T14653] overlayfs: missing 'workdir' [ 793.532013][T14655] overlayfs: conflicting options: nfs_export=on,index=off [ 794.691293][T14665] loop6: detected capacity change from 0 to 1024 [ 794.740623][T14665] EXT4-fs: Ignoring removed bh option [ 794.746184][T14665] EXT4-fs: Ignoring removed bh option [ 794.816211][T14665] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 794.880409][T14665] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 794.967221][T14665] overlayfs: missing 'lowerdir' [ 795.152401][T14675] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 796.197119][T13703] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 796.656955][T14686] i2c i2c-0: new_device: Extra parameters [ 796.691120][T14695] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2544'. [ 796.721952][T14686] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 796.807825][T14689] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 798.289953][T14708] syzkaller0: entered promiscuous mode [ 798.355353][T14708] syzkaller0: entered allmulticast mode [ 798.574284][T14708] tipc: Started in network mode [ 798.775662][T14708] tipc: Node identity 86db2bb58413, cluster identity 4711 [ 798.967635][T14708] tipc: Enabled bearer , priority 0 [ 799.169931][T14718] tipc: Resetting bearer [ 799.225689][T14707] tipc: Resetting bearer [ 799.443738][T14707] tipc: Disabling bearer [ 799.792802][T14724] tipc: Enabling of bearer rejected, failed to enable media [ 800.250256][T14732] loop5: detected capacity change from 0 to 1024 [ 800.281228][T14731] loop6: detected capacity change from 0 to 2048 [ 800.289183][T14732] EXT4-fs: Ignoring removed bh option [ 800.294762][T14732] EXT4-fs: Ignoring removed bh option [ 800.332336][T14731] EXT4-fs (loop6): Cannot use DAX on a filesystem that may contain inline data [ 800.382252][T14732] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 800.582238][T14732] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 800.772029][T14732] overlayfs: missing 'lowerdir' [ 801.248722][T14742] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 801.444686][T14750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2553'. [ 801.568763][T13646] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 801.836680][T14764] i2c i2c-0: new_device: Extra parameters [ 801.864406][T14764] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 801.917222][T14764] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 802.634593][ T28] audit: type=1326 audit(1796475000.923:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14775 comm="syz.7.2558" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcec639de99 code=0x0 [ 804.908892][T14801] loop1: detected capacity change from 0 to 1024 [ 805.000677][T14801] EXT4-fs: Ignoring removed bh option [ 805.057430][T14801] EXT4-fs: Ignoring removed bh option [ 805.158446][T14801] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 805.176188][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 805.190974][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 805.480543][T14801] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 805.741688][T14801] overlayfs: missing 'lowerdir' [ 805.860314][T14822] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 806.095551][T13425] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 806.271814][ T28] audit: type=1326 audit(1796475004.614:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14827 comm="syz.6.2569" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd817d9de99 code=0x0 [ 808.864907][T14854] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 809.092553][T14857] loop1: detected capacity change from 0 to 2048 [ 809.206835][T14862] loop5: detected capacity change from 0 to 1024 [ 809.260158][T14857] EXT4-fs (loop1): Cannot use DAX on a filesystem that may contain inline data [ 809.276365][T14862] EXT4-fs: Ignoring removed bh option [ 809.354851][T14862] EXT4-fs: Ignoring removed bh option [ 809.409884][T14862] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 809.564078][T14862] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 809.621165][T11888] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 809.687272][T14862] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 809.718776][T14862] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 809.757477][T14857] loop1: detected capacity change from 0 to 256 [ 809.820910][T14872] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 809.973264][T13646] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 810.323729][T14879] infiniband syz1: set active [ 810.397987][T14879] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 810.417005][ C0] Illegal XDP return value 16128 on prog (id 174) dev veth0, expect packet loss! [ 810.483197][T14882] infiniband syz1: set active [ 810.550261][T14882] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 810.983874][T14889] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 811.025734][T14889] i2c i2c-0: new_device: Missing parameters [ 812.438890][T14908] i2c i2c-0: Failed to register i2c client stusb160x at 0x48 (-16) [ 812.543047][T14919] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 812.603518][T14908] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 812.961463][T14930] loop5: detected capacity change from 0 to 1024 [ 812.986417][T14930] EXT4-fs: Ignoring removed bh option [ 813.023107][T14930] EXT4-fs: Ignoring removed bh option [ 813.067886][T14930] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 813.280657][T14930] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 813.410949][T14930] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 813.460899][T14930] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 813.591024][T14944] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 813.849925][T13646] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 813.986370][T14953] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2595'. [ 814.025495][T14953] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2595'. [ 814.145349][T14956] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 814.179675][T14956] i2c i2c-0: new_device: Missing parameters [ 814.648906][T14965] i2c i2c-0: Failed to register i2c client stusb160x at 0x48 (-16) [ 814.657777][T14965] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 814.668727][T14965] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 816.302692][T14997] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 816.345307][T14997] i2c i2c-0: new_device: Missing parameters [ 817.299106][T15010] loop1: detected capacity change from 0 to 2048 [ 817.318996][T15010] EXT4-fs (loop1): Cannot use DAX on a filesystem that may contain inline data [ 817.537784][T15010] loop1: detected capacity change from 0 to 1024 [ 817.607909][T15010] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 817.703078][T15024] loop5: detected capacity change from 0 to 1024 [ 817.723526][T15024] EXT4-fs: Ignoring removed bh option [ 817.748202][T15024] EXT4-fs: Ignoring removed bh option [ 817.969825][T15024] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 818.212065][T15024] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 818.390296][T15024] overlayfs: missing 'lowerdir' [ 818.503108][T15024] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 818.672132][T13646] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 818.703462][T15046] loop6: detected capacity change from 0 to 2048 [ 818.772564][T15046] EXT4-fs (loop6): Cannot use DAX on a filesystem that may contain inline data [ 820.031962][T15081] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 820.055870][T15081] i2c i2c-0: new_device: Extra parameters [ 821.527581][T15105] loop5: detected capacity change from 0 to 2048 [ 821.551583][T15105] EXT4-fs (loop5): Cannot use DAX on a filesystem that may contain inline data [ 821.786616][T15108] loop6: detected capacity change from 0 to 1024 [ 821.794198][T15108] EXT4-fs: Ignoring removed bh option [ 821.915367][T15108] EXT4-fs: Ignoring removed bh option [ 821.979414][T15108] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 822.205941][T15108] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 822.279068][T15108] overlayfs: missing 'lowerdir' [ 822.459765][T15128] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 822.625084][T13703] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 823.011605][T15140] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 823.064026][T15140] i2c i2c-0: new_device: Extra parameters [ 823.878774][T15164] loop1: detected capacity change from 0 to 2048 [ 824.532880][T15164] EXT4-fs (loop1): Cannot use DAX on a filesystem that may contain inline data [ 825.367083][T15164] loop1: detected capacity change from 0 to 1024 [ 825.720539][T15173] loop6: detected capacity change from 0 to 1024 [ 825.733437][T15164] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 825.760006][T15173] EXT4-fs: Ignoring removed bh option [ 825.812425][T15173] EXT4-fs: Ignoring removed bh option [ 825.860669][T15173] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 826.096090][T15173] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 826.491676][T15173] overlayfs: missing 'lowerdir' [ 826.801476][T15198] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 826.944674][T13703] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 826.961969][T15204] syzkaller0: entered promiscuous mode [ 826.970545][T15204] syzkaller0: entered allmulticast mode [ 827.170082][T15207] tipc: Started in network mode [ 827.192851][T15207] tipc: Node identity 8eedf2c42ea8, cluster identity 4711 [ 827.291778][T15207] tipc: Enabled bearer , priority 0 [ 827.725043][ T5780] Bluetooth: hci3: command 0x0406 tx timeout [ 828.179272][T15201] tipc: Resetting bearer [ 828.320885][T15201] tipc: Disabling bearer [ 828.341257][T15222] loop6: detected capacity change from 0 to 2048 [ 828.391389][T15222] EXT4-fs (loop6): Cannot use DAX on a filesystem that may contain inline data [ 828.438297][T13879] tipc: Node number set to 2688938692 [ 829.323018][T15222] loop6: detected capacity change from 0 to 256 [ 829.500706][T15232] loop5: detected capacity change from 0 to 2048 [ 829.829813][T15232] EXT4-fs (loop5): Cannot use DAX on a filesystem that may contain inline data [ 830.944547][T15247] loop6: detected capacity change from 0 to 1024 [ 830.991336][T15247] EXT4-fs: Ignoring removed bh option [ 831.027337][T15247] EXT4-fs: Ignoring removed bh option [ 831.047337][T15257] loop1: detected capacity change from 0 to 256 [ 831.071252][T15247] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 831.085398][T15257] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 831.168758][T15257] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 831.185658][T15247] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 831.331158][T15247] overlayfs: missing 'workdir' [ 831.389970][T15247] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 831.548463][T13703] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 832.063240][T15288] tipc: Enabling of bearer rejected, failed to enable media [ 832.801067][T15297] syzkaller0: entered promiscuous mode [ 832.825646][T15297] syzkaller0: entered allmulticast mode [ 832.883143][T15299] loop6: detected capacity change from 0 to 2048 [ 832.939834][T15299] EXT4-fs (loop6): Cannot use DAX on a filesystem that may contain inline data [ 835.520607][T15323] loop6: detected capacity change from 0 to 2048 [ 835.632812][T15328] loop5: detected capacity change from 0 to 1024 [ 835.647158][T15328] EXT4-fs: Ignoring removed bh option [ 835.689377][T15328] EXT4-fs: Ignoring removed bh option [ 835.724417][T15323] EXT4-fs (loop6): Cannot use DAX on a filesystem that may contain inline data [ 835.766606][T15328] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 835.871812][T15333] overlayfs: failed to clone upperpath [ 835.898878][T15333] overlayfs: missing 'lowerdir' [ 836.348584][T15328] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 836.593744][T15328] overlayfs: missing 'workdir' [ 836.724558][T15328] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 836.909170][T13646] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 837.238385][T15349] capability: warning: `syz.1.2673' uses 32-bit capabilities (legacy support in use) [ 837.322221][T15349] ucma_write: process 264 (syz.1.2673) changed security contexts after opening file descriptor, this is not allowed. [ 837.536075][T15358] loop1: detected capacity change from 0 to 2048 [ 837.584814][T15358] EXT4-fs (loop1): Cannot use DAX on a filesystem that may contain inline data [ 839.010264][T12183] Bluetooth: hci0: command 0x0406 tx timeout [ 839.941185][T15374] overlayfs: missing 'lowerdir' [ 840.546041][T15379] loop6: detected capacity change from 0 to 2048 [ 840.610348][T15379] EXT4-fs (loop6): Cannot use DAX on a filesystem that may contain inline data [ 842.413435][T15402] loop5: detected capacity change from 0 to 512 [ 842.423754][T15402] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 842.473565][T15402] EXT4-fs error (device loop5): ext4_orphan_get:1430: comm syz.5.2688: bad orphan inode 131083 [ 842.504494][T15402] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 842.592513][ T28] audit: type=1800 audit(1796475041.050:26): pid=15402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2688" name="bus" dev="loop5" ino=18 res=0 errno=0 [ 842.629700][T15402] EXT4-fs error (device loop5): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.5.2688: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 842.730621][T13646] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 842.883625][T15406] loop5: detected capacity change from 0 to 2048 [ 842.902413][T15406] EXT4-fs (loop5): Cannot use DAX on a filesystem that may contain inline data [ 842.968477][ T5780] Bluetooth: hci2: command 0x0406 tx timeout [ 843.020883][T15406] loop5: detected capacity change from 0 to 1024 [ 843.044426][T15406] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 844.897734][T15386] batadv_slave_1: entered promiscuous mode [ 844.904540][T15388] batadv_slave_1: left promiscuous mode [ 845.079510][T15411] loop6: detected capacity change from 0 to 1024 [ 845.087621][T15411] EXT4-fs: Ignoring removed bh option [ 845.103713][T15411] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 845.359397][T15411] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 845.702946][T15425] overlayfs: missing 'lowerdir' [ 845.879882][T15427] UBIFS error (pid: 15427): cannot open "ubifs", error -22 [ 847.661742][T13703] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 848.636819][T15451] loop1: detected capacity change from 0 to 2048 [ 848.683886][T15451] EXT4-fs (loop1): Cannot use DAX on a filesystem that may contain inline data [ 850.059108][T15469] mac80211_hwsim hwsim18 wlan0: entered promiscuous mode [ 850.066251][T15469] mac80211_hwsim hwsim18 wlan0: entered allmulticast mode [ 850.109267][T15463] tipc: Started in network mode [ 850.114277][T15463] tipc: Node identity , cluster identity 4711 [ 850.137336][T15463] tipc: Failed to obtain node identity [ 850.165751][T15463] tipc: Enabling of bearer rejected, failed to enable media [ 850.255163][T15476] loop5: detected capacity change from 0 to 512 [ 850.574698][T15476] EXT4-fs error (device loop5): ext4_orphan_get:1404: inode #15: comm syz.5.2706: iget: bad i_size value: 38620345925642 [ 850.690732][T15476] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.2706: couldn't read orphan inode 15 (err -117) [ 850.783451][T15476] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 850.827145][T15476] EXT4-fs (loop5): shut down requested (1) [ 851.020480][T13646] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 853.926154][T15521] syzkaller1: entered promiscuous mode [ 853.931740][T15521] syzkaller1: entered allmulticast mode [ 854.478064][T15527] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[13425] was attempted by ""[15527] [ 855.010849][T13425] ffs_data_put(): freeing [ 856.079273][T15549] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode [ 856.086631][T15549] mac80211_hwsim hwsim14 wlan0: entered allmulticast mode [ 858.596973][T15569] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[13425] was attempted by ""[15569] [ 859.505311][T13646] ffs_data_put(): freeing [ 859.763051][T15603] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2733'. [ 860.018777][T15608] loop6: detected capacity change from 0 to 2048 [ 860.057313][T15608] EXT4-fs (loop6): Cannot use DAX on a filesystem that may contain inline data [ 860.194142][T15608] loop6: detected capacity change from 0 to 1024 [ 860.250215][T15608] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 860.505143][T15615] loop6: detected capacity change from 0 to 2048 [ 860.557985][T15615] EXT4-fs (loop6): Cannot use DAX on a filesystem that may contain inline data [ 860.678273][T15615] loop6: detected capacity change from 0 to 256 [ 864.322298][T15628] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[13773] was attempted by ""[15628] [ 864.333864][T15628] overlayfs: missing 'lowerdir' [ 865.056380][T15643] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 865.471793][T15641] 9pnet: Could not find request transport: 0xffffffffffffffff [ 865.520129][T15646] ffs_data_put(): freeing [ 865.919780][T15657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2742'. [ 866.297348][T15665] syzkaller0: entered promiscuous mode [ 866.302925][T15665] syzkaller0: entered allmulticast mode [ 866.366214][T15665] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2745'. [ 866.398495][T15665] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2745'. [ 866.497390][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 866.503825][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 866.907382][T15685] read descriptors [ 866.995039][T13425] ffs_data_put(): freeing [ 868.152913][T15701] loop1: detected capacity change from 0 to 2048 [ 868.264556][T15701] EXT4-fs (loop1): Cannot use DAX on a filesystem that may contain inline data [ 869.578955][T15734] read descriptors [ 869.717591][T13703] ffs_data_put(): freeing [ 871.414370][T15773] binder: BINDER_SET_CONTEXT_MGR already set [ 871.420539][T15773] binder: 15772:15773 ioctl 4018620d 200000000040 returned -16 [ 871.454557][T15775] ffs_data_put(): freeing [ 871.717784][T15785] No source specified [ 872.567614][T15814] binder: BINDER_SET_CONTEXT_MGR already set [ 872.616491][T15816] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2783'. [ 872.620738][T15814] binder: 15813:15814 ioctl 4018620d 200000000040 returned -16 [ 872.725994][T15821] i2c i2c-0: Failed to register i2c client stusb160x at 0x48 (-16) [ 872.746224][T15821] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 873.005686][T15827] tipc: Enabled bearer , priority 0 [ 873.037891][T15826] tipc: Disabling bearer [ 873.789598][T15851] binder: BINDER_SET_CONTEXT_MGR already set [ 873.811208][T15851] binder: 15850:15851 ioctl 4018620d 200000000040 returned -16 [ 873.969013][T15855] i2c i2c-0: Failed to register i2c client stusb160x at 0x48 (-16) [ 874.007615][T15855] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 874.035119][T15855] i2c i2c-0: new_device: Missing parameters [ 874.110667][T15861] loop5: detected capacity change from 0 to 512 [ 874.189060][T15861] EXT4-fs (loop5): 1 truncate cleaned up [ 874.254219][T15861] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 874.363747][T15869] tipc: Enabled bearer , priority 0 [ 874.442551][T15868] tipc: Disabling bearer [ 874.604311][T13646] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 875.401369][T15884] loop1: detected capacity change from 0 to 4096 [ 875.880577][T15884] EXT4-fs error (device loop1): ext4_init_orphan_info:584: comm syz.1.2802: inode #0: comm syz.1.2802: iget: illegal inode # [ 875.960279][T15884] EXT4-fs (loop1): get orphan inode failed [ 875.991115][T15884] EXT4-fs (loop1): mount failed [ 876.054479][T15904] i2c i2c-0: Failed to register i2c client stusb160x at 0x48 (-16) [ 876.083194][T15904] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 876.140401][T15904] i2c i2c-0: new_device: Missing parameters [ 876.184478][T15909] loop5: detected capacity change from 0 to 128 [ 876.688412][T15923] tipc: Enabled bearer , priority 0 [ 876.788505][T15922] tipc: Disabling bearer [ 877.093893][T15937] loop6: detected capacity change from 0 to 512 [ 877.133301][T15937] EXT4-fs: Ignoring removed orlov option [ 877.175767][T15937] EXT4-fs: Ignoring removed mblk_io_submit option [ 877.249731][T15937] EXT4-fs error (device loop6): ext4_iget_extra_inode:4739: inode #15: comm syz.6.2811: corrupted in-inode xattr: e_value size too large [ 877.352494][T15937] EXT4-fs error (device loop6): ext4_orphan_get:1409: comm syz.6.2811: couldn't read orphan inode 15 (err -117) [ 877.403183][T15937] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 877.532964][T13703] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 878.158116][T15960] i2c i2c-0: Failed to register i2c client stusb160x at 0x48 (-16) [ 878.206201][T15960] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 878.250246][T15960] i2c i2c-0: new_device: Missing parameters [ 878.383694][T15962] 9pnet_fd: Insufficient options for proto=fd [ 878.391703][T15962] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 879.542205][T15979] tipc: Enabling of bearer rejected, failed to enable media [ 879.627430][T15983] loop6: detected capacity change from 0 to 512 [ 879.646979][T15980] syzkaller0: entered promiscuous mode [ 879.659824][T15983] EXT4-fs: Ignoring removed orlov option [ 879.665566][T15983] EXT4-fs: Ignoring removed mblk_io_submit option [ 879.680308][T15980] syzkaller0: entered allmulticast mode [ 879.719388][T15980] tipc: Enabled bearer , priority 0 [ 879.768640][T15980] tipc: Resetting bearer [ 879.855559][T15978] tipc: Resetting bearer [ 879.873994][T15983] EXT4-fs error (device loop6): ext4_iget_extra_inode:4739: inode #15: comm syz.6.2822: corrupted in-inode xattr: e_value size too large [ 879.946029][T15983] EXT4-fs error (device loop6): ext4_orphan_get:1409: comm syz.6.2822: couldn't read orphan inode 15 (err -117) [ 879.970214][T15983] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 880.038788][T15978] tipc: Disabling bearer [ 880.253298][T13703] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 880.348904][T16007] i2c i2c-0: Failed to register i2c client stusb160x at 0x48 (-16) [ 880.400487][T16010] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 880.425073][T16007] i2c i2c-0: new_device: Extra parameters [ 880.789422][T16016] loop5: detected capacity change from 0 to 2048 [ 880.884417][T16019] 9pnet_fd: Insufficient options for proto=fd [ 880.892321][T16019] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 881.013280][T16016] EXT4-fs (loop5): Cannot use DAX on a filesystem that may contain inline data [ 881.673746][T16016] loop5: detected capacity change from 0 to 1024 [ 881.702040][T16016] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 881.741750][T16027] tipc: Enabling of bearer rejected, failed to enable media [ 882.727715][T16046] loop6: detected capacity change from 0 to 1024 [ 882.814138][T16046] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 883.854986][T13703] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 885.361334][T16074] 9pnet_fd: Insufficient options for proto=fd [ 885.369260][T16074] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 886.374972][T16088] tipc: Enabling of bearer rejected, failed to enable media [ 886.691973][T16099] loop5: detected capacity change from 0 to 2048 [ 886.736083][T16099] EXT4-fs (loop5): Cannot use DAX on a filesystem that may contain inline data [ 887.497653][T16099] loop5: detected capacity change from 0 to 1024 [ 887.599600][T16099] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 888.197552][T16119] 9pnet_fd: Insufficient options for proto=fd [ 888.205428][T16119] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 890.654365][T16147] tipc: Enabled bearer , priority 0 [ 890.753189][T16146] tipc: Disabling bearer [ 891.522933][T16169] 9pnet_fd: Insufficient options for proto=fd [ 892.756705][T16184] overlayfs: failed to clone upperpath [ 892.814544][T16185] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 892.823401][T16185] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 892.835085][T16185] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 893.746624][T16193] tipc: Enabling of bearer rejected, failed to enable media [ 894.263108][T16209] loop6: detected capacity change from 0 to 1024 [ 894.352272][T16211] 9pnet_fd: Insufficient options for proto=fd [ 894.820122][T16209] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 895.465948][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 895.503949][ T8] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 896.061519][T16247] overlayfs: failed to clone upperpath [ 896.117015][T16248] overlayfs: conflicting options: nfs_export=on,index=off [ 896.808933][T16253] tipc: Enabling of bearer rejected, failed to enable media [ 897.062014][T13879] IPVS: starting estimator thread 0... [ 897.330066][T16257] IPVS: using max 18 ests per chain, 43200 per kthread [ 897.864211][T16215] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 898.181248][T16269] syzkaller0: entered promiscuous mode [ 898.196611][T16269] syzkaller0: entered allmulticast mode [ 898.228958][T16269] tipc: Enabled bearer , priority 0 [ 898.276756][T16269] tipc: Resetting bearer [ 898.343018][T16268] tipc: Resetting bearer [ 898.471500][T16276] 9pnet_fd: Insufficient options for proto=fd [ 898.824049][T16268] tipc: Disabling bearer [ 899.709307][T13703] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 899.900967][T16295] tipc: Enabled bearer , priority 0 [ 899.932811][T16293] tipc: Disabling bearer [ 901.473200][T16321] 9pnet_fd: Insufficient options for proto=fd [ 901.481813][T16321] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 902.375758][T16327] loop1: detected capacity change from 0 to 1024 [ 902.482749][T16327] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 904.644973][T16378] 9pnet_fd: Insufficient options for proto=fd [ 904.653121][T16378] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 905.169838][T16339] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 905.311590][T16380] syzkaller0: entered promiscuous mode [ 905.366923][T16380] syzkaller0: entered allmulticast mode [ 905.411248][T16380] tipc: Enabled bearer , priority 0 [ 905.438562][T16380] tipc: Resetting bearer [ 905.467809][T16379] tipc: Resetting bearer [ 905.552549][T16379] tipc: Disabling bearer [ 905.647979][T13425] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 909.398029][T16420] loop1: detected capacity change from 0 to 1024 [ 909.685414][T16426] 9pnet_fd: Insufficient options for proto=fd [ 909.694070][T16426] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 910.067541][T16420] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 910.438128][T16431] UBIFS error (pid: 16431): cannot open "ubifs", error -22 [ 911.978641][T16472] 9pnet_fd: Insufficient options for proto=fd [ 911.993764][T16472] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 913.282651][T16493] UBIFS error (pid: 16493): cannot open "ubifs", error -22 [ 913.747930][T13425] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 914.213952][T16511] loop6: detected capacity change from 0 to 1024 [ 914.234951][T16511] EXT4-fs: Ignoring removed orlov option [ 914.287574][T16511] EXT4-fs (loop6): stripe (7) is not aligned with cluster size (4096), stripe is disabled [ 914.329184][T16511] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 914.352083][T16511] EXT4-fs (loop6): orphan cleanup on readonly fs [ 914.403254][T16511] EXT4-fs error (device loop6): __ext4_get_inode_loc:4496: comm syz.6.2934: Invalid inode table block 0 in block_group 0 [ 914.454561][T16509] loop1: detected capacity change from 0 to 8192 [ 914.481180][T16511] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 914.510014][T16509] loop1: p3 p4[EZD] [ 914.516617][T16509] loop1: partition table partially beyond EOD, truncated [ 914.535269][T16509] loop1: p3 start 458783 is beyond EOD, truncated [ 914.548899][T16509] loop1: p4 size 100663296 extends beyond EOD, truncated [ 914.629444][T16511] EXT4-fs error (device loop6): ext4_quota_write:7342: inode #3: comm syz.6.2934: mark_inode_dirty error [ 914.678021][T16511] Quota error (device loop6): write_blk: dquota write failed [ 914.734750][T16511] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 914.793186][T16511] EXT4-fs error (device loop6): ext4_acquire_dquot:6953: comm syz.6.2934: Failed to acquire dquot type 0 [ 914.877433][T16511] EXT4-fs error (device loop6): __ext4_get_inode_loc:4496: comm syz.6.2934: Invalid inode table block 0 in block_group 0 [ 914.974159][T16511] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 914.987642][T16511] EXT4-fs error (device loop6): ext4_ext_truncate:4534: inode #15: comm syz.6.2934: mark_inode_dirty error [ 915.064312][T16523] 9pnet_fd: Insufficient options for proto=fd [ 915.072266][T16523] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 915.200946][T16511] EXT4-fs error (device loop6): __ext4_get_inode_loc:4496: comm syz.6.2934: Invalid inode table block 0 in block_group 0 [ 915.535069][T16511] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 915.611980][T16511] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 915.706976][T16511] EXT4-fs error (device loop6): __ext4_get_inode_loc:4496: comm syz.6.2934: Invalid inode table block 0 in block_group 0 [ 915.747551][T11888] udevd[11888]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 915.796693][T16511] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 915.881899][T16511] EXT4-fs error (device loop6): ext4_truncate:4301: inode #15: comm syz.6.2934: mark_inode_dirty error [ 915.943209][T16511] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 915.990142][T16511] EXT4-fs (loop6): 1 truncate cleaned up [ 916.050831][T16511] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 916.117555][T16511] EXT4-fs (loop6): shut down requested (2) [ 916.204861][T13703] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 916.229562][T16535] loop5: detected capacity change from 0 to 1024 [ 916.349782][T16535] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 916.647700][T16543] syzkaller0: entered promiscuous mode [ 916.653283][T16543] syzkaller0: entered allmulticast mode [ 917.815227][T13646] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 918.321299][T16565] 9pnet_fd: Insufficient options for proto=fd [ 918.329192][T16565] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 920.950176][T16568] syzkaller1: entered promiscuous mode [ 920.966508][T16568] syzkaller1: entered allmulticast mode [ 923.011435][T16603] 9pnet_fd: Insufficient options for proto=fd [ 923.018817][T16603] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 924.069722][T16609] syzkaller0: entered promiscuous mode [ 924.089079][T16609] syzkaller0: entered allmulticast mode [ 927.075126][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 927.081877][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 927.503572][T16645] 9pnet_fd: Insufficient options for proto=fd [ 927.511368][T16645] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 929.707965][T16647] tipc: Enabling of bearer rejected, failed to enable media [ 929.886647][T16658] loop5: detected capacity change from 0 to 1024 [ 930.041754][T16658] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 930.779500][T16685] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2977'. [ 931.124542][T16690] 9pnet_fd: Insufficient options for proto=fd [ 931.132416][T16690] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 932.425961][T16700] syzkaller0: entered promiscuous mode [ 932.634130][T16700] syzkaller0: entered allmulticast mode [ 932.699303][T16703] tipc: Started in network mode [ 932.774440][T16703] tipc: Node identity bafe04b95e45, cluster identity 4711 [ 932.815158][T16703] tipc: Enabled bearer , priority 0 [ 932.903438][T16669] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 932.986171][T16698] tipc: Resetting bearer [ 933.180661][T16698] tipc: Disabling bearer [ 933.477314][T16726] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2986'. [ 933.619436][T13646] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 935.261738][T16741] syzkaller0: entered promiscuous mode [ 935.281107][T16741] syzkaller0: entered allmulticast mode [ 935.663511][T16768] loop5: detected capacity change from 0 to 256 [ 935.708921][T16768] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 935.763358][T16768] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 935.850234][T16771] loop1: detected capacity change from 0 to 1024 [ 935.930021][T16771] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 936.914424][T13425] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 939.737881][T16761] tipc: Enabling of bearer rejected, failed to enable media [ 939.747868][T16780] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2998'. [ 940.968955][T16810] loop6: detected capacity change from 0 to 1024 [ 941.092379][T16810] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 941.245046][T16818] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 941.532918][T16828] syzkaller0: entered promiscuous mode [ 941.545434][T16828] syzkaller0: entered allmulticast mode [ 941.566086][T16828] tipc: Enabled bearer , priority 0 [ 941.582917][T16826] tipc: Resetting bearer [ 941.665999][T16826] tipc: Disabling bearer [ 942.263925][T16845] tipc: Enabling of bearer rejected, failed to enable media [ 942.397318][T16849] loop1: detected capacity change from 0 to 512 [ 942.550715][T16849] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm syz.1.3016: bg 0: block 5: invalid block bitmap [ 942.634393][T16849] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 942.723902][T16849] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.3016: invalid indirect mapped block 3 (level 2) [ 942.822977][T16849] EXT4-fs (loop1): 1 orphan inode deleted [ 942.886551][T16849] EXT4-fs (loop1): 1 truncate cleaned up [ 942.898145][T13703] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 942.946267][T16849] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 943.175020][T16863] syzkaller0: entered promiscuous mode [ 943.187377][T16863] syzkaller0: entered allmulticast mode [ 943.299098][T13425] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 943.425545][T16870] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3019'. [ 944.148383][T16881] tipc: Enabled bearer , priority 0 [ 944.210944][T16880] tipc: Disabling bearer [ 944.502479][T16890] loop6: detected capacity change from 0 to 2048 [ 944.705063][T16890] loop6: p1 < > p4 [ 944.807373][T16890] loop6: p4 size 8388608 extends beyond EOD, truncated [ 945.073228][T16886] loop5: detected capacity change from 0 to 1024 [ 945.346660][T16886] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 946.559951][T16914] syzkaller0: entered promiscuous mode [ 946.601389][T16914] syzkaller0: entered allmulticast mode [ 946.669677][T16903] udevd[16903]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 946.676745][T16655] udevd[16655]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 946.855710][T16918] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3033'. [ 947.631441][T13646] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 947.931463][T16936] program syz.6.3038 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 947.976735][T16934] tipc: Enabled bearer , priority 0 [ 948.021409][T16932] tipc: Disabling bearer [ 948.312470][T16946] loop1: detected capacity change from 0 to 1024 [ 948.348854][T16946] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 948.370718][T16951] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3043'. [ 948.418874][T16946] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 948.488334][T16952] loop6: detected capacity change from 0 to 1024 [ 948.629936][T16952] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 949.046859][T13703] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 949.251775][T16974] netlink: 'syz.6.3048': attribute type 55 has an invalid length. [ 950.143986][T17004] tipc: Enabling of bearer rejected, failed to enable media [ 950.482683][T17013] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3054'. [ 951.601266][T13425] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 951.838014][T17040] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3063'. [ 951.885693][T17044] tipc: Enabling of bearer rejected, failed to enable media [ 952.104520][T17050] loop6: detected capacity change from 0 to 1024 [ 952.176248][T17050] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 952.635596][T13703] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 952.893538][T17066] xt_NFQUEUE: number of total queues is 0 [ 953.305177][T17069] Bluetooth: MGMT ver 1.22 [ 953.423169][T17074] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3074'. [ 953.829325][T17088] tipc: Enabling of bearer rejected, failed to enable media [ 953.904299][T17090] loop5: detected capacity change from 0 to 1024 [ 954.017314][T17090] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 954.959533][T13646] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 954.985454][T17112] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3084'. [ 955.218713][T17119] autofs4:pid:17119:autofs_fill_super: called with bogus options [ 955.702087][T17125] 9pnet_fd: Insufficient options for proto=fd [ 955.718917][T17126] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 956.443770][T17138] tipc: Enabling of bearer rejected, failed to enable media [ 956.706686][T17147] loop1: detected capacity change from 0 to 1024 [ 956.753038][T17147] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 957.685160][T17170] 9pnet_fd: Insufficient options for proto=fd [ 957.692994][T17170] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 958.015198][T13425] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 958.838490][T17192] tipc: Enabling of bearer rejected, failed to enable media [ 958.899712][T17193] loop1: detected capacity change from 0 to 1024 [ 958.999425][T17193] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 959.953001][T13425] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 960.547882][T17214] 9pnet_fd: Insufficient options for proto=fd [ 960.555870][T17214] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 961.736816][T17234] tipc: Enabling of bearer rejected, failed to enable media [ 961.937375][T17240] loop1: detected capacity change from 0 to 1024 [ 962.019500][T12183] Bluetooth: hci1: link tx timeout [ 962.019490][T17240] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 962.171291][T12183] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 962.793059][T17256] 9pnet_fd: Insufficient options for proto=fd [ 962.801264][T17256] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 962.972402][T13425] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 963.927795][T17274] loop1: detected capacity change from 0 to 1024 [ 964.117969][T17274] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 964.188638][T17283] tipc: Enabling of bearer rejected, failed to enable media [ 964.234105][T12183] Bluetooth: hci1: command 0x0406 tx timeout [ 964.837803][T13425] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 964.961643][T17298] 9pnet_fd: Insufficient options for proto=fd [ 964.969411][T17298] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 967.148658][T17321] loop1: detected capacity change from 0 to 1024 [ 967.203144][T17325] tipc: Enabling of bearer rejected, failed to enable media [ 967.285478][T17321] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 967.727879][T17334] 9pnet_fd: Insufficient options for proto=fd [ 967.736076][T17334] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 968.374439][T13425] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 968.490179][T17339] syzkaller0: entered promiscuous mode [ 968.495927][T17339] syzkaller0: entered allmulticast mode [ 970.094102][T17358] loop1: detected capacity change from 0 to 2048 [ 970.126515][T17364] tipc: Enabling of bearer rejected, failed to enable media [ 970.383930][T17358] EXT4-fs (loop1): Cannot use DAX on a filesystem that may contain inline data [ 970.540437][T17372] 9pnet_fd: Insufficient options for proto=fd [ 970.548195][T17372] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 972.053415][T17382] syzkaller0: entered promiscuous mode [ 972.068399][T17382] syzkaller0: entered allmulticast mode [ 972.949984][T17400] 9pnet_fd: Insufficient options for proto=fd [ 972.956960][T17400] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 973.925608][T17408] tipc: Enabling of bearer rejected, failed to enable media [ 973.937031][T17404] loop6: detected capacity change from 0 to 2048 [ 974.028326][T17404] EXT4-fs (loop6): Cannot use DAX on a filesystem that may contain inline data [ 976.145055][T17449] 9pnet_fd: Insufficient options for proto=fd [ 976.152169][T17449] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 976.794472][T17463] tipc: Enabling of bearer rejected, failed to enable media [ 976.898252][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058676400: rx timeout, send abort [ 976.920390][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888058676400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 977.308243][T17248] Bluetooth: hci1: command 0x0406 tx timeout [ 978.340746][T17487] 9pnet_fd: Insufficient options for proto=fd [ 978.348658][T17487] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 980.182894][T17509] tipc: Enabling of bearer rejected, failed to enable media [ 980.216582][T17511] loop1: detected capacity change from 0 to 2048 [ 980.266362][T17511] EXT4-fs (loop1): Cannot use DAX on a filesystem that may contain inline data [ 980.365984][T17511] loop1: detected capacity change from 0 to 1024 [ 980.440741][T17511] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 980.520722][T16903] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 982.890517][T17552] program syz.6.3200 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 984.071590][T17567] tipc: Enabling of bearer rejected, failed to enable media [ 984.592148][T17586] program syz.6.3209 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 986.036209][T17603] tipc: Enabled bearer , priority 0 [ 986.070747][T17603] tipc: Resetting bearer [ 986.125433][T17602] tipc: Disabling bearer [ 986.366689][T17608] tipc: Enabled bearer , priority 0 [ 986.418353][T17606] tipc: Disabling bearer [ 986.940347][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 986.947092][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 988.621427][T17648] program syz.6.3229 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 988.684766][T17650] tipc: Enabling of bearer rejected, failed to enable media [ 988.945944][T17666] tipc: Enabling of bearer rejected, failed to enable media [ 989.573561][T17689] program syz.6.3241 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 989.582175][T17687] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 990.006568][T17701] syzkaller0: entered promiscuous mode [ 990.019405][T17701] syzkaller0: entered allmulticast mode [ 990.051902][T17701] tipc: Enabled bearer , priority 0 [ 990.101591][T17701] tipc: Resetting bearer [ 990.129302][T17699] tipc: Resetting bearer [ 990.254067][T17699] tipc: Disabling bearer [ 990.483803][T17716] loop1: detected capacity change from 0 to 512 [ 990.504002][T17718] program syz.5.3251 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 991.254447][T17737] syzkaller0: entered promiscuous mode [ 991.274232][T17737] syzkaller0: entered allmulticast mode [ 991.319809][T17737] tipc: Enabled bearer , priority 0 [ 991.381480][T17737] tipc: Resetting bearer [ 991.418288][T17736] tipc: Resetting bearer [ 991.526094][T17736] tipc: Disabling bearer [ 992.422067][T17759] random: crng reseeded on system resumption [ 993.125523][T17783] tipc: Enabling of bearer rejected, failed to enable media [ 993.634827][ T28] audit: type=1326 audit(1808009530.633:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17803 comm="syz.5.3274" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec40d9de99 code=0x7ffc0000 [ 993.693203][T17804] loop5: detected capacity change from 0 to 1024 [ 993.713026][T17804] EXT4-fs: Ignoring removed bh option [ 993.734336][ T28] audit: type=1326 audit(1808009530.633:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17803 comm="syz.5.3274" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec40d9de99 code=0x7ffc0000 [ 993.737571][T17804] EXT4-fs: Ignoring removed bh option [ 993.817293][T17804] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 993.843769][ T28] audit: type=1326 audit(1808009530.664:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17803 comm="syz.5.3274" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec40d9de99 code=0x7ffc0000 [ 993.844996][T17807] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 993.898429][ T28] audit: type=1326 audit(1808009530.664:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17803 comm="syz.5.3274" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fec40d9de99 code=0x7ffc0000 [ 993.958469][T17804] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 993.973595][ T28] audit: type=1326 audit(1808009530.664:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17803 comm="syz.5.3274" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fec40d9dc02 code=0x7ffc0000 [ 993.999241][ T28] audit: type=1326 audit(1808009530.675:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17803 comm="syz.5.3274" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec40d9de99 code=0x7ffc0000 [ 994.023713][ T28] audit: type=1326 audit(1808009530.675:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17803 comm="syz.5.3274" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fec40d5e6ce code=0x7ffc0000 [ 994.048155][ T28] audit: type=1326 audit(1808009530.695:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17803 comm="syz.5.3274" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fec40d9dcc7 code=0x7ffc0000 [ 994.072814][ T28] audit: type=1326 audit(1808009530.695:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17803 comm="syz.5.3274" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fec40d5e6ce code=0x7ffc0000 [ 994.097374][ T28] audit: type=1326 audit(1808009530.695:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17803 comm="syz.5.3274" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fec40d9db2b code=0x7ffc0000 [ 994.244232][T13646] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 994.917986][T17838] syzkaller0: entered promiscuous mode [ 994.935423][T17838] syzkaller0: entered allmulticast mode [ 994.965103][T17838] tipc: Enabled bearer , priority 0 [ 994.997333][T17838] tipc: Resetting bearer [ 995.029259][T17835] tipc: Resetting bearer [ 995.075480][T17835] tipc: Disabling bearer [ 995.330652][T17843] syzkaller0: entered promiscuous mode [ 995.336314][T17843] syzkaller0: entered allmulticast mode [ 998.555992][T17882] syzkaller0: entered promiscuous mode [ 998.582206][T17882] syzkaller0: entered allmulticast mode [ 998.612988][T17882] tipc: Enabled bearer , priority 0 [ 998.666476][T17882] tipc: Resetting bearer [ 998.685039][T17881] tipc: Resetting bearer [ 998.776694][T17881] tipc: Disabling bearer [ 999.016679][T17896] syzkaller0: entered promiscuous mode [ 999.036577][T17896] syzkaller0: entered allmulticast mode [ 1003.362741][T17969] syzkaller0: entered promiscuous mode [ 1003.373957][T17969] syzkaller0: entered allmulticast mode [ 1006.263900][T17990] tipc: Enabled bearer , priority 0 [ 1006.277873][T17990] tipc: Resetting bearer [ 1006.290578][T17988] tipc: Disabling bearer [ 1007.420072][T18031] loop5: detected capacity change from 0 to 512 [ 1007.577882][T18031] EXT4-fs (loop5): 1 orphan inode deleted [ 1007.618447][ T12] __quota_error: 23 callbacks suppressed [ 1007.618467][ T12] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1007.646095][T18031] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1007.694290][ T12] EXT4-fs error (device loop5): ext4_release_dquot:6989: comm kworker/u4:1: Failed to release dquot type 1 [ 1007.724054][T18031] ext4 filesystem being mounted at /230/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1007.999591][T13646] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1011.685185][T18060] syzkaller0: entered promiscuous mode [ 1011.690854][T18060] syzkaller0: entered allmulticast mode [ 1019.733374][T18198] xt_CT: No such helper "netbios-ns" [ 1020.509827][T18205] tipc: Enabled bearer , priority 0 [ 1020.536687][T18203] tipc: Disabling bearer [ 1024.899087][T18260] tipc: Enabling of bearer rejected, failed to enable media [ 1025.153881][T18279] loop6: detected capacity change from 0 to 256 [ 1025.243972][T18279] FAT-fs (loop6): Directory bread(block 64) failed [ 1025.268510][T18279] FAT-fs (loop6): Directory bread(block 65) failed [ 1025.291643][T18279] FAT-fs (loop6): Directory bread(block 66) failed [ 1025.325288][T18279] FAT-fs (loop6): Directory bread(block 67) failed [ 1025.352390][T18279] FAT-fs (loop6): Directory bread(block 68) failed [ 1025.378785][T18279] FAT-fs (loop6): Directory bread(block 69) failed [ 1025.401523][T18279] FAT-fs (loop6): Directory bread(block 70) failed [ 1025.513702][T18279] FAT-fs (loop6): Directory bread(block 71) failed [ 1025.520817][T18279] FAT-fs (loop6): Directory bread(block 72) failed [ 1025.697411][T18279] FAT-fs (loop6): Directory bread(block 73) failed [ 1026.481531][T18299] syzkaller0: entered promiscuous mode [ 1026.487105][T18299] syzkaller0: entered allmulticast mode [ 1026.560069][T18299] tipc: Enabled bearer , priority 0 [ 1026.603619][T18299] tipc: Resetting bearer [ 1026.748874][T18298] tipc: Resetting bearer [ 1026.955935][T18298] tipc: Disabling bearer [ 1026.984594][T18302] tipc: Enabled bearer , priority 0 [ 1027.002919][T18306] tipc: Resetting bearer [ 1027.016984][T18300] tipc: Disabling bearer [ 1027.375517][T18318] loop1: detected capacity change from 0 to 1024 [ 1027.405600][T18318] EXT4-fs: Ignoring removed orlov option [ 1027.462235][T18318] EXT4-fs: Ignoring removed mblk_io_submit option [ 1027.484908][T18318] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1027.575179][T18318] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1027.650333][ T28] audit: type=1800 audit(1808009565.066:60): pid=18318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3408" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 1027.818691][ T28] audit: type=1800 audit(1808009565.236:61): pid=18326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3408" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 1028.658794][T13425] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1031.484923][T18346] UBIFS error (pid: 18346): cannot open "ubifs", error -22 [ 1032.779133][T18352] tipc: Enabled bearer , priority 0 [ 1032.857380][T18354] syzkaller0: entered promiscuous mode [ 1032.876063][T18354] syzkaller0: entered allmulticast mode [ 1033.035136][T18359] tipc: Resetting bearer [ 1033.207071][T18349] tipc: Resetting bearer [ 1033.585293][T18349] tipc: Disabling bearer [ 1034.699733][T18387] UBIFS error (pid: 18387): cannot open "ubifs", error -22 [ 1038.264910][T18422] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1038.443936][T18422] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1038.485485][T18422] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1039.079136][T18435] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode [ 1039.086916][T18435] mac80211_hwsim hwsim12 wlan0: entered allmulticast mode [ 1040.929165][T18428] UBIFS error (pid: 18428): cannot open "ubifs", error -22 [ 1041.996679][T18471] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (66) [ 1042.420787][T18478] loop1: detected capacity change from 0 to 2048 [ 1042.539153][T18478] loop1: p1 < > p4 [ 1042.601128][T18478] loop1: p4 size 8388608 extends beyond EOD, truncated [ 1043.193117][ T5138] loop1: p1 < > p4 [ 1044.424956][ T5138] loop1: p4 size 8388608 extends beyond EOD, truncated [ 1045.181389][T16899] udevd[16899]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 1045.198632][T16903] udevd[16903]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 1046.218310][T16899] udevd[16899]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 1046.258008][T16903] udevd[16903]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 1047.311652][T18539] loop6: detected capacity change from 0 to 2048 [ 1047.397183][T18538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3461'. [ 1047.559654][T18539] loop6: p1 < > p4 [ 1047.576675][T18539] loop6: p4 size 8388608 extends beyond EOD, truncated [ 1047.840732][ T5138] loop6: p1 < > p4 [ 1047.880119][ T5138] loop6: p4 size 8388608 extends beyond EOD, truncated [ 1047.891495][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1047.900417][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1049.548245][T18546] UBIFS error (pid: 18546): cannot open "ubifs", error -22 [ 1050.263423][T16899] udevd[16899]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 1050.728122][T16903] udevd[16903]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 1053.083462][T12183] Bluetooth: hci1: command 0x0406 tx timeout [ 1053.435591][T18579] loop1: detected capacity change from 0 to 2048 [ 1053.508395][T18579] loop1: p1 < > p4 [ 1053.521138][T18579] loop1: p4 size 8388608 extends beyond EOD, truncated [ 1056.045371][T18566] tipc: Enabling of bearer rejected, failed to enable media [ 1056.363327][T18583] loop5: detected capacity change from 0 to 512 [ 1056.937617][T18583] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1057.168133][T18583] ext4 filesystem being mounted at /262/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1059.083823][T13646] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1059.592001][T18615] tipc: Enabling of bearer rejected, failed to enable media [ 1059.625629][T18614] syzkaller0: entered promiscuous mode [ 1059.662695][T18614] syzkaller0: entered allmulticast mode [ 1066.552164][T18647] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1066.561877][T18647] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1066.572288][T18647] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1066.915945][T18657] tipc: Enabling of bearer rejected, failed to enable media [ 1066.953544][T18655] syzkaller0: entered promiscuous mode [ 1066.959237][T18655] syzkaller0: entered allmulticast mode [ 1068.356344][T18670] netlink: 'syz.6.3496': attribute type 10 has an invalid length. [ 1068.377041][T18670] team0: Port device netdevsim0 added [ 1070.096979][T18686] tipc: Enabling of bearer rejected, failed to enable media [ 1075.282021][T18721] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1075.291700][T18721] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1075.309800][T18721] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1076.626029][T18736] loop5: detected capacity change from 0 to 512 [ 1076.657324][T18733] tipc: Enabled bearer , priority 0 [ 1076.678328][T18733] tipc: Resetting bearer [ 1076.825309][T18732] tipc: Disabling bearer [ 1076.858294][T18736] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1076.883182][T18736] ext4 filesystem being mounted at /268/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1076.976809][T13646] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1079.703517][T18772] syzkaller0: entered promiscuous mode [ 1079.709423][T18772] syzkaller0: entered allmulticast mode [ 1080.534269][T18793] loop1: detected capacity change from 0 to 512 [ 1080.720577][T18793] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1080.806879][T18793] ext4 filesystem being mounted at /287/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1080.985565][T13425] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1082.273473][T18812] mac80211_hwsim hwsim16 wlan0: entered promiscuous mode [ 1082.280752][T18812] mac80211_hwsim hwsim16 wlan0: entered allmulticast mode [ 1083.393586][T18845] loop1: detected capacity change from 0 to 2048 [ 1083.476079][T18845] loop1: p1 < > p4 [ 1083.568196][T18845] loop1: p4 size 8388608 extends beyond EOD, truncated [ 1083.950021][ T5138] loop1: p1 < > p4 [ 1083.971499][ T5138] loop1: p4 size 8388608 extends beyond EOD, truncated [ 1084.236015][T18851] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3537'. [ 1084.411471][T18851] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3537'. [ 1085.468132][T16903] udevd[16903]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 1085.580056][T18867] syzkaller0: entered promiscuous mode [ 1085.594581][T18867] syzkaller0: entered allmulticast mode [ 1085.736909][T18870] netlink: 'syz.5.3545': attribute type 10 has an invalid length. [ 1085.769959][T18870] team0: Port device netdevsim0 added [ 1087.423258][T18885] loop6: detected capacity change from 0 to 1024 [ 1087.530002][T18885] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1087.755299][T18893] loop5: detected capacity change from 0 to 2048 [ 1088.079780][T18893] loop5: p1 < > p4 [ 1088.094873][T18893] loop5: p4 size 8388608 extends beyond EOD, truncated [ 1088.484017][T13703] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1088.913471][T18902] syzkaller0: entered promiscuous mode [ 1088.937778][T18902] syzkaller0: entered allmulticast mode [ 1089.452506][T18907] netlink: 'syz.7.3557': attribute type 10 has an invalid length. [ 1089.672276][T18907] team0: Device netdevsim0 is of different type [ 1090.942795][T18925] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3562'. [ 1091.231401][T18934] syzkaller0: entered promiscuous mode [ 1091.260823][T18934] syzkaller0: entered allmulticast mode [ 1092.713671][T18946] netlink: 'syz.1.3569': attribute type 10 has an invalid length. [ 1092.824152][T18946] team0: Port device netdevsim0 added [ 1092.908268][T18951] bridge0: port 2(bridge_slave_1) entered disabled state [ 1093.086170][T18955] loop6: detected capacity change from 0 to 2048 [ 1093.148344][T18955] loop6: p1 < > p4 [ 1093.175016][T18955] loop6: p4 size 8388608 extends beyond EOD, truncated [ 1094.611549][T18968] netlink: 'syz.5.3576': attribute type 32 has an invalid length. [ 1094.950004][T18977] tc action pedit 'at' offset 2 out of bounds [ 1094.956813][T18977] tc action pedit 'at' offset 2 out of bounds [ 1094.962996][T18977] tc action pedit 'at' offset 2 out of bounds [ 1094.969232][T18977] tc action pedit 'at' offset 2 out of bounds [ 1094.975468][T18977] tc action pedit 'at' offset 2 out of bounds [ 1094.981598][T18977] tc action pedit 'at' offset 2 out of bounds [ 1094.987772][T18977] tc action pedit 'at' offset 2 out of bounds [ 1094.993974][T18977] tc action pedit 'at' offset 2 out of bounds [ 1095.000134][T18977] tc action pedit 'at' offset 2 out of bounds [ 1095.006306][T18977] tc action pedit 'at' offset 2 out of bounds [ 1095.012466][T18977] TC_ACT_REPEAT abuse ? [ 1095.035187][T18972] syzkaller0: entered promiscuous mode [ 1095.040747][T18972] syzkaller0: entered allmulticast mode [ 1096.955940][T18998] loop5: detected capacity change from 0 to 512 [ 1097.057676][T18998] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1097.115667][T18998] ext4 filesystem being mounted at /289/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1097.454306][T18998] loop5: detected capacity change from 512 to 64 [ 1098.146261][T18998] loop5: unable to read partition table [ 1098.243028][T19004] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5939: Out of memory [ 1098.315630][T18998] loop_reread_partitions: partition scan of loop5 (ï5ŸA;¹8o÷Ö¤®mÝûÑÎ])Âî^\©) failed (rc=-5) [ 1098.422707][T19004] EXT4-fs error (device loop5): ext4_ext_tree_init:889: inode #19: comm syz.5.3587: mark_inode_dirty error [ 1098.509624][T19004] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5939: Out of memory [ 1098.560100][T19004] EXT4-fs error (device loop5): __ext4_new_inode:1354: inode #19: comm syz.5.3587: mark_inode_dirty error [ 1098.640040][T19004] EXT4-fs error (device loop5) in __ext4_new_inode:1356: Out of memory [ 1098.680966][T19004] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5939: Out of memory [ 1098.701094][T19004] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #19: comm syz.5.3587: mark_inode_dirty error [ 1099.050617][T19015] loop1: detected capacity change from 0 to 512 [ 1099.060377][T19004] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -12) [ 1099.286547][T19015] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1099.315174][T13646] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5939: Out of memory [ 1099.385717][T19015] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 1099.424591][T19015] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1099.439284][T13646] EXT4-fs error (device loop5): ext4_dirty_inode:6143: inode #2: comm syz-executor: mark_inode_dirty error [ 1099.479642][T19015] EXT4-fs error (device loop1): ext4_orphan_get:1430: comm syz.1.3591: bad orphan inode 3 [ 1099.549490][T19015] EXT4-fs (loop1): Remounting filesystem read-only [ 1099.572860][T19015] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 1099.766165][T13646] infiniband syz1: set down [ 1099.801204][T13425] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 1099.845335][T15987] syz1: rxe_query_port: returned err = -19 [ 1099.851566][ T5845] syz1: rxe_query_port: returned err = -19 [ 1099.869627][T15987] infiniband syz1: ib_query_port failed (-19) [ 1099.896375][ T2946] smc: removing ib device syz1 [ 1100.140247][T19026] ip6gretap0: entered promiscuous mode [ 1101.614616][T19044] loop6: detected capacity change from 0 to 2048 [ 1101.724630][T19044] loop6: p1 < > p4 [ 1101.751252][T19044] loop6: p4 size 8388608 extends beyond EOD, truncated [ 1102.845992][T19059] ip6gretap0: entered promiscuous mode [ 1103.151923][T13646] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1103.401945][ T7720] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1104.212302][T19068] netlink: 'syz.1.3610': attribute type 5 has an invalid length. [ 1104.297929][ T7720] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1104.537418][ T7720] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1104.680930][ T7720] team0: Port device netdevsim0 removed [ 1104.696379][ T7720] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1105.092892][ T7720] tipc: Left network mode [ 1105.637333][T19088] loop1: detected capacity change from 0 to 2048 [ 1105.825074][T19088] loop1: p1 < > p4 [ 1105.920479][T19088] loop1: p4 size 8388608 extends beyond EOD, truncated [ 1106.181739][ T5138] loop1: p1 < > p4 [ 1106.238289][ T5138] loop1: p4 size 8388608 extends beyond EOD, truncated [ 1106.917627][T12183] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1106.931130][T12183] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1106.941173][T12183] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1106.949898][T12183] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1106.964367][T12183] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1106.974856][T12183] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1108.298524][T16903] udevd[16903]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 1108.339678][T16899] udevd[16899]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 1108.359867][T19109] netlink: 'syz.1.3621': attribute type 10 has an invalid length. [ 1109.004111][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1109.011475][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1109.085116][T12183] Bluetooth: hci0: command tx timeout [ 1109.516085][T19136] loop1: detected capacity change from 0 to 2048 [ 1114.238971][T12183] Bluetooth: hci0: command tx timeout [ 1115.121701][T19162] loop1: detected capacity change from 0 to 128 [ 1115.137145][T19162] EXT4-fs: Ignoring removed orlov option [ 1115.189879][T19162] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1115.265170][T19162] ext4 filesystem being mounted at /319/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1115.438799][ T7720] hsr_slave_0: left promiscuous mode [ 1115.498301][ T7720] hsr_slave_1: left promiscuous mode [ 1115.511141][ T7720] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1115.533477][ T7720] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1115.563726][ T7720] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1115.573768][ T7720] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1115.609241][ T7720] bridge_slave_1: left allmulticast mode [ 1115.624447][ T7720] bridge_slave_1: left promiscuous mode [ 1115.656404][ T7720] bridge0: port 2(bridge_slave_1) entered disabled state [ 1115.706333][ T7720] bridge_slave_0: left allmulticast mode [ 1115.726737][ T7720] bridge_slave_0: left promiscuous mode [ 1115.753068][ T7720] bridge0: port 1(bridge_slave_0) entered disabled state [ 1115.898742][ T7720] veth1_macvtap: left promiscuous mode [ 1115.930543][ T7720] veth0_macvtap: left promiscuous mode [ 1115.942458][ T7720] veth1_vlan: left promiscuous mode [ 1115.948029][ T7720] veth0_vlan: left promiscuous mode [ 1116.112572][T13425] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1116.264702][T17248] Bluetooth: hci0: command tx timeout [ 1118.306449][T17248] Bluetooth: hci0: command tx timeout [ 1119.473288][ T7720] team0 (unregistering): Port device team_slave_1 removed [ 1119.576257][ T7720] team0 (unregistering): Port device team_slave_0 removed [ 1119.651717][ T7720] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1119.740784][ T7720] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1120.207647][ T7720] bond0 (unregistering): Released all slaves [ 1120.344121][T19230] tipc: Enabling of bearer rejected, failed to enable media [ 1120.385374][T19098] chnl_net:caif_netlink_parms(): no params data found [ 1120.732429][T19098] bridge0: port 1(bridge_slave_0) entered blocking state [ 1120.803634][T19098] bridge0: port 1(bridge_slave_0) entered disabled state [ 1120.830248][T19098] bridge_slave_0: entered allmulticast mode [ 1120.903025][T19098] bridge_slave_0: entered promiscuous mode [ 1120.956145][T19254] loop6: detected capacity change from 0 to 512 [ 1121.737645][T19098] bridge0: port 2(bridge_slave_1) entered blocking state [ 1121.794997][T19098] bridge0: port 2(bridge_slave_1) entered disabled state [ 1121.802337][T19098] bridge_slave_1: entered allmulticast mode [ 1121.833604][T19098] bridge_slave_1: entered promiscuous mode [ 1122.032022][T19098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1122.078167][T19098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1122.743113][T19098] team0: Port device team_slave_0 added [ 1122.767223][T19271] tipc: Enabled bearer , priority 0 [ 1122.937177][T19266] tipc: Disabling bearer [ 1122.995030][T19098] team0: Port device team_slave_1 added [ 1123.306819][T19277] syzkaller0: entered promiscuous mode [ 1123.322929][T19277] syzkaller0: entered allmulticast mode [ 1123.353574][T19098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1123.377082][T19098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1123.427703][T19098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1123.451018][T19098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1123.484204][T19098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1123.537841][T19098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1123.577591][T19291] loop6: detected capacity change from 0 to 8192 [ 1127.435923][T19098] hsr_slave_0: entered promiscuous mode [ 1127.459197][T19098] hsr_slave_1: entered promiscuous mode [ 1127.475833][T19318] loop6: detected capacity change from 0 to 512 [ 1127.562934][T19318] ------------[ cut here ]------------ [ 1127.569067][T19318] EA inode 11 i_nlink=2 [ 1127.570372][T19318] WARNING: CPU: 1 PID: 19318 at fs/ext4/xattr.c:1059 ext4_xattr_inode_update_ref+0x572/0x5d0 [ 1127.585313][T19318] Modules linked in: [ 1127.589380][T19318] CPU: 1 PID: 19318 Comm: syz.6.3670 Not tainted syzkaller #0 [ 1127.596937][T19318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1127.607248][T19318] RIP: 0010:ext4_xattr_inode_update_ref+0x572/0x5d0 [ 1127.613967][T19318] Code: 50 4c 89 e0 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 e7 e8 81 f2 98 ff 49 8b 34 24 48 c7 c7 20 db de 8a 44 89 fa e8 8e 53 0a ff <0f> 0b 4c 8b 64 24 10 4c 8d 6c 24 60 e9 8e fe ff ff e8 48 5c 45 08 [ 1127.634030][T19318] RSP: 0018:ffffc90004097360 EFLAGS: 00010246 [ 1127.640555][T19318] RAX: e61f6ed0bdda8700 RBX: ffff88805b4336a8 RCX: 0000000000080000 [ 1127.648641][T19318] RDX: ffffc9000d441000 RSI: 00000000000304ae RDI: 00000000000304af [ 1127.656730][T19318] RBP: ffffc90004097450 R08: ffff8880b8f28c53 R09: 1ffff110171e518a [ 1127.664943][T19318] R10: dffffc0000000000 R11: ffffed10171e518b R12: ffff88805b433500 [ 1127.673469][T19318] R13: ffffc900040973c0 R14: dffffc0000000000 R15: 0000000000000002 [ 1127.681601][T19318] FS: 00007fd818d496c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1127.690746][T19318] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1127.697473][T19318] CR2: 00007fcebc276000 CR3: 000000005e2fd000 CR4: 00000000003506e0 [ 1127.705568][T19318] Call Trace: [ 1127.708896][T19318] [ 1127.711891][T19318] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 1127.717714][T19318] ? __ext4_journal_ensure_credits+0x30/0x450 [ 1127.723871][T19318] ext4_xattr_inode_dec_ref_all+0x9bb/0x1030 [ 1127.729999][T19318] ? ext4_xattr_delete_inode+0xd00/0xd00 [ 1127.735791][T19318] ? __ext4_journal_ensure_credits+0x450/0x450 [ 1127.742026][T19318] ext4_xattr_delete_inode+0xb3b/0xd00 [ 1127.747650][T19318] ? ext4_truncate+0xcc0/0x1140 [ 1127.752576][T19318] ? ext4_expand_extra_isize_ea+0x1e70/0x1e70 [ 1127.758783][T19318] ? __ext4_mark_inode_dirty+0x4c4/0x6d0 [ 1127.764568][T19318] ext4_evict_inode+0xa88/0xe70 [ 1127.769490][T19318] ? evict+0x482/0x8a0 [ 1127.773983][T19318] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 1127.779964][T19318] ? do_raw_spin_unlock+0x121/0x230 [ 1127.785299][T19318] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 1127.791305][T19318] evict+0x4b7/0x8a0 [ 1127.795323][T19318] ? __lock_acquire+0x7d80/0x7d80 [ 1127.800419][T19318] ? proc_nr_inodes+0x230/0x230 [ 1127.805463][T19318] ? do_raw_spin_unlock+0x121/0x230 [ 1127.810744][T19318] ? _raw_spin_unlock+0x28/0x40 [ 1127.815718][T19318] ext4_orphan_cleanup+0xc33/0x1470 [ 1127.821001][T19318] ? ext4_orphan_del+0xc90/0xc90 [ 1127.826235][T19318] ? ext4_register_li_request+0x182/0x930 [ 1127.832070][T19318] ? errseq_check_and_advance+0x66/0x120 [ 1127.837777][T19318] ext4_fill_super+0x5fb5/0x6870 [ 1127.842871][T19318] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 1127.849279][T19318] ? __might_sleep+0xe0/0xe0 [ 1127.853983][T19318] ? read_lock_is_recursive+0x20/0x20 [ 1127.859446][T19318] ? snprintf+0xe9/0x140 [ 1127.863853][T19318] ? down_read_killable+0x340/0x340 [ 1127.869135][T19318] ? setup_bdev_super+0x56b/0x660 [ 1127.874605][T19318] get_tree_bdev+0x3e5/0x520 [ 1127.879278][T19318] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 1127.885760][T19318] ? setup_bdev_super+0x660/0x660 [ 1127.890940][T19318] ? apparmor_capable+0x137/0x1a0 [ 1127.896058][T19318] ? bpf_lsm_capable+0x9/0x10 [ 1127.900948][T19318] ? security_capable+0x89/0xb0 [ 1127.905875][T19318] vfs_get_tree+0x8c/0x280 [ 1127.910423][T19318] do_new_mount+0x24a/0xa40 [ 1127.915021][T19318] __se_sys_mount+0x2e7/0x3d0 [ 1127.919784][T19318] ? __x64_sys_mount+0xc0/0xc0 [ 1127.924763][T19318] ? lockdep_hardirqs_on+0x98/0x150 [ 1127.930096][T19318] ? __x64_sys_mount+0x20/0xc0 [ 1127.934938][T19318] do_syscall_64+0x55/0xb0 [ 1127.939721][T19318] ? clear_bhb_loop+0x40/0x90 [ 1127.944469][T19318] ? clear_bhb_loop+0x40/0x90 [ 1127.949210][T19318] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1127.955366][T19318] RIP: 0033:0x7fd817d9f10a [ 1127.959919][T19318] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1127.980093][T19318] RSP: 002b:00007fd818d48e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1127.988638][T19318] RAX: ffffffffffffffda RBX: 00007fd818d48ee0 RCX: 00007fd817d9f10a [ 1127.997290][T19318] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007fd818d48ea0 [ 1128.005391][T19318] RBP: 00002000000009c0 R08: 00007fd818d48ee0 R09: 0000000000800718 [ 1128.013570][T19318] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 1128.021704][T19318] R13: 00007fd818d48ea0 R14: 000000000000048d R15: 0000200000000200 [ 1128.029827][T19318] [ 1128.032904][T19318] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1128.040229][T19318] CPU: 1 PID: 19318 Comm: syz.6.3670 Not tainted syzkaller #0 [ 1128.047790][T19318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1128.057903][T19318] Call Trace: [ 1128.061233][T19318] [ 1128.064199][T19318] dump_stack_lvl+0x18c/0x250 [ 1128.068919][T19318] ? show_regs_print_info+0x20/0x20 [ 1128.074157][T19318] ? load_image+0x420/0x420 [ 1128.078712][T19318] panic+0x2ca/0x720 [ 1128.082661][T19318] ? bpf_jit_dump+0xd0/0xd0 [ 1128.087255][T19318] __warn+0x2e0/0x470 [ 1128.091269][T19318] ? ext4_xattr_inode_update_ref+0x572/0x5d0 [ 1128.097290][T19318] ? ext4_xattr_inode_update_ref+0x572/0x5d0 [ 1128.103336][T19318] report_bug+0x2be/0x4f0 [ 1128.107699][T19318] ? ext4_xattr_inode_update_ref+0x572/0x5d0 [ 1128.113721][T19318] ? ext4_xattr_inode_update_ref+0x572/0x5d0 [ 1128.119737][T19318] ? ext4_xattr_inode_update_ref+0x574/0x5d0 [ 1128.125791][T19318] handle_bug+0xcf/0x120 [ 1128.130067][T19318] exc_invalid_op+0x1a/0x50 [ 1128.134603][T19318] asm_exc_invalid_op+0x1a/0x20 [ 1128.139492][T19318] RIP: 0010:ext4_xattr_inode_update_ref+0x572/0x5d0 [ 1128.146131][T19318] Code: 50 4c 89 e0 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 e7 e8 81 f2 98 ff 49 8b 34 24 48 c7 c7 20 db de 8a 44 89 fa e8 8e 53 0a ff <0f> 0b 4c 8b 64 24 10 4c 8d 6c 24 60 e9 8e fe ff ff e8 48 5c 45 08 [ 1128.165888][T19318] RSP: 0018:ffffc90004097360 EFLAGS: 00010246 [ 1128.171992][T19318] RAX: e61f6ed0bdda8700 RBX: ffff88805b4336a8 RCX: 0000000000080000 [ 1128.180017][T19318] RDX: ffffc9000d441000 RSI: 00000000000304ae RDI: 00000000000304af [ 1128.188021][T19318] RBP: ffffc90004097450 R08: ffff8880b8f28c53 R09: 1ffff110171e518a [ 1128.196025][T19318] R10: dffffc0000000000 R11: ffffed10171e518b R12: ffff88805b433500 [ 1128.204050][T19318] R13: ffffc900040973c0 R14: dffffc0000000000 R15: 0000000000000002 [ 1128.212091][T19318] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 1128.217794][T19318] ? __ext4_journal_ensure_credits+0x30/0x450 [ 1128.223914][T19318] ext4_xattr_inode_dec_ref_all+0x9bb/0x1030 [ 1128.230021][T19318] ? ext4_xattr_delete_inode+0xd00/0xd00 [ 1128.235722][T19318] ? __ext4_journal_ensure_credits+0x450/0x450 [ 1128.241950][T19318] ext4_xattr_delete_inode+0xb3b/0xd00 [ 1128.247483][T19318] ? ext4_truncate+0xcc0/0x1140 [ 1128.252377][T19318] ? ext4_expand_extra_isize_ea+0x1e70/0x1e70 [ 1128.258487][T19318] ? __ext4_mark_inode_dirty+0x4c4/0x6d0 [ 1128.264158][T19318] ext4_evict_inode+0xa88/0xe70 [ 1128.269054][T19318] ? evict+0x482/0x8a0 [ 1128.273160][T19318] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 1128.279095][T19318] ? do_raw_spin_unlock+0x121/0x230 [ 1128.284335][T19318] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 1128.290266][T19318] evict+0x4b7/0x8a0 [ 1128.294194][T19318] ? __lock_acquire+0x7d80/0x7d80 [ 1128.299260][T19318] ? proc_nr_inodes+0x230/0x230 [ 1128.304147][T19318] ? do_raw_spin_unlock+0x121/0x230 [ 1128.309383][T19318] ? _raw_spin_unlock+0x28/0x40 [ 1128.314277][T19318] ext4_orphan_cleanup+0xc33/0x1470 [ 1128.319540][T19318] ? ext4_orphan_del+0xc90/0xc90 [ 1128.324517][T19318] ? ext4_register_li_request+0x182/0x930 [ 1128.330266][T19318] ? errseq_check_and_advance+0x66/0x120 [ 1128.335933][T19318] ext4_fill_super+0x5fb5/0x6870 [ 1128.340926][T19318] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 1128.347204][T19318] ? __might_sleep+0xe0/0xe0 [ 1128.351836][T19318] ? read_lock_is_recursive+0x20/0x20 [ 1128.357239][T19318] ? snprintf+0xe9/0x140 [ 1128.361528][T19318] ? down_read_killable+0x340/0x340 [ 1128.366765][T19318] ? setup_bdev_super+0x56b/0x660 [ 1128.371823][T19318] get_tree_bdev+0x3e5/0x520 [ 1128.376450][T19318] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 1128.382726][T19318] ? setup_bdev_super+0x660/0x660 [ 1128.387777][T19318] ? apparmor_capable+0x137/0x1a0 [ 1128.392845][T19318] ? bpf_lsm_capable+0x9/0x10 [ 1128.397558][T19318] ? security_capable+0x89/0xb0 [ 1128.402471][T19318] vfs_get_tree+0x8c/0x280 [ 1128.406946][T19318] do_new_mount+0x24a/0xa40 [ 1128.411514][T19318] __se_sys_mount+0x2e7/0x3d0 [ 1128.416227][T19318] ? __x64_sys_mount+0xc0/0xc0 [ 1128.421055][T19318] ? lockdep_hardirqs_on+0x98/0x150 [ 1128.426291][T19318] ? __x64_sys_mount+0x20/0xc0 [ 1128.431083][T19318] do_syscall_64+0x55/0xb0 [ 1128.435538][T19318] ? clear_bhb_loop+0x40/0x90 [ 1128.440247][T19318] ? clear_bhb_loop+0x40/0x90 [ 1128.444983][T19318] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1128.450945][T19318] RIP: 0033:0x7fd817d9f10a [ 1128.455391][T19318] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1128.475031][T19318] RSP: 002b:00007fd818d48e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1128.483477][T19318] RAX: ffffffffffffffda RBX: 00007fd818d48ee0 RCX: 00007fd817d9f10a [ 1128.491485][T19318] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007fd818d48ea0 [ 1128.499492][T19318] RBP: 00002000000009c0 R08: 00007fd818d48ee0 R09: 0000000000800718 [ 1128.507492][T19318] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 1128.515489][T19318] R13: 00007fd818d48ea0 R14: 000000000000048d R15: 0000200000000200 [ 1128.523509][T19318] [ 1128.526702][T19318] Kernel Offset: disabled [ 1128.531161][T19318] Rebooting in 86400 seconds..