last executing test programs: 1m37.904179102s ago: executing program 2 (id=102): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6d71b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r3, &(0x7f0000000080)=""/102330, 0x18fba, 0x82a) 1m35.835178224s ago: executing program 2 (id=104): socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) io_uring_setup(0x3fa5, &(0x7f0000000000)={0x0, 0x6cae, 0x100, 0x1, 0x5a}) epoll_create1(0x0) socket$kcm(0x10, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000040), 0x800) r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82, 0x0, 0x0}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0xb, 0x4004, @fd, 0xf8, 0x0, 0x0, 0x11, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 1m35.753878053s ago: executing program 2 (id=107): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x300}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0) 1m35.445150799s ago: executing program 2 (id=111): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0x2, 0x300) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r4, @ANYBLOB="40005200060010"], 0x24}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) 1m33.84937327s ago: executing program 2 (id=122): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80001) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x8922, 0x0) setpgid(r0, r0) setpgid(0x0, r0) mount$fuse(0x0, &(0x7f0000000200)='./file0/file0\x00', 0x0, 0x0, 0x0) 1m32.92393945s ago: executing program 2 (id=130): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002000)=ANY=[@ANYBLOB="28000000130a0103"], 0x28}}, 0x0) 1m17.427540873s ago: executing program 32 (id=130): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002000)=ANY=[@ANYBLOB="28000000130a0103"], 0x28}}, 0x0) 7.825122473s ago: executing program 4 (id=432): syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@noinit_itable}]}, 0x3, 0x583, &(0x7f0000000dc0)="$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") r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x2000884, &(0x7f0000000240)=ANY=[@ANYBLOB='codepage=1251,nonumtail=0,shortname=win95,shortname=win95,shortname=lower,utf8=0,shortname=winnt,uni_xlate=0,iocharset=macceltic,nonumtail=0,iocharset=iso8859-5,nonumtail=0,uid=', @ANYRESHEX=0x0, @ANYRES32=0x0], 0x1, 0x28d, &(0x7f0000000e40)="$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") madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000540)='./file1/file4/file7/file5\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) statx(r0, 0x0, 0x2000, 0x4, &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) chdir(&(0x7f0000000300)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000a00)='./file1\x00', 0x0) syz_open_procfs(r1, &(0x7f0000000380)='net/if_inet6\x00') socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x5, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000fee000)=0x1, 0x4) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @empty}, 0x1c) fchown(r5, 0xee01, 0x0) listen(r5, 0x54) socket$nl_netfilter(0x10, 0x3, 0xc) 6.678844585s ago: executing program 4 (id=438): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) futex(0x0, 0x85, 0x8, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) name_to_handle_at(r3, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)=@reiserfs_3={0xc, 0x3, {0x0, 0x401, 0x1}}, &(0x7f00000002c0), 0x200) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) ioctl$TIOCL_SETSEL(r4, 0x541c, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = syz_open_dev$video4linux(&(0x7f0000000380), 0x28, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x2, 0x4, 0x4, 0x8, 0x0, 0x1}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0xe, 0x4, &(0x7f00000000c0)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x80}]}, &(0x7f0000000100)='GPL\x00'}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0d0000002300000004000000020000004000", @ANYRES32=r7], 0x48) ioctl$VIDIOC_QUERY_EXT_CTRL(r6, 0xc0e85667, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0xf0f024}) 6.287259983s ago: executing program 1 (id=439): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000000c0)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f00000007c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x3) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x265, 0x26, r4, 0x0) fanotify_mark(r5, 0x441, 0x800000a, r4, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x6, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) r7 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$FICLONE(r0, 0x40049409, r7) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) 6.283326192s ago: executing program 5 (id=440): setns(0xc9, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r0, 0x400, 0x1) fremovexattr(r0, &(0x7f0000000040)=@known='system.posix_acl_default\x00') ioctl$IOMMU_VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x3) r1 = socket(0x1a, 0xa, 0x7) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000000)=0xfffffe01, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) r3 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$netlink(0x10, 0x3, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3d, &(0x7f00000000c0), 0x8) writev(r7, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c100000000000224e0000", 0x58}], 0x1) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000440)=ANY=[@ANYRES64], 0x210) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e22}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x4}]}}}]}, 0x44}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 5.784001328s ago: executing program 4 (id=442): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000009b40)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x2, 0x9, 0x10000001, 0x6}, 0x1, 0xfb, [{0x9, 0x5, 0x0, 0x3, 0x6, 0xfffffffa}]}, [{0x2, 0x9c, 0x81, 0x6, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x80000001, 0x8, 0x101, 0x3}, {0x3, 0x9, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x8}, {0x3, 0x4, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0x0, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x0, 0xffffffff}, {0x5, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x5}, {0xfffffffb, 0x3, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0xffff997c, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x5, 0x2, 0xc, 0x8, 0x9, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x9}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x81, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x29000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0x9}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001}, {0x0, 0x6, 0x8000, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x100002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0xad, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53ce, 0x3}, {0xffffff81, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x6, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x3fd, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x8000, 0x7, 0x9}, {0xff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x4, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x5, 0xfffffffc}, {0x7, 0x9, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x9, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x0, 0x0, 0x242}, {0xdc03, 0x7, 0x402c, 0xffff, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b5}, {0xa24b, 0x947d, 0x3, 0x4, 0x80000000, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x6}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x0, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0x7, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x7, 0x7}, {0x20000006, 0x2, 0x7ff, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x5, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x9, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x4, 0x7, 0x4, 0x78d, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x8, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x4}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {}, {0x5}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x5}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r4, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, 0x0, 0x10c}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="dab050", 0x14}], 0x1}, 0x4000880) 5.780838709s ago: executing program 3 (id=443): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0xd, &(0x7f0000000440)=ANY=[@ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESDEC=r0], 0x0, 0x1, 0x0, 0x0, 0x41100, 0x4d, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@link_local, @local, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x7}}}}}}}}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, 0x0, &(0x7f0000000100)=0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002a00)=ANY=[], &(0x7f00000001c0)='GPL\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xfffffffd, 0x59455247, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0x0, 0x11, 0x148, 0x0, 0x0, 0x190, 0x2a8, 0x2a8, 0x190, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x6, 0x6, 0xd04, 'netbios-ns\x00', {0x5}}}}, {{@ip={@multicast1, @private=0xa010102, 0xffffffff, 0xffffff00, 'nr0\x00', 'macsec0\x00', {0xff}, {}, 0x6, 0x2, 0x8}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000300)=@ethtool_link_settings={0x4d, 0x403, 0xf, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x80000000, 0x1], [0x3]}}) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) 5.636449993s ago: executing program 0 (id=445): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1, 0x26c, &(0x7f0000000840)="$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") r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$hidraw(0x0, 0x7, 0x8000) unshare(0x2c020400) r4 = msgget$private(0x0, 0x240) msgsnd(r4, &(0x7f0000000880)={0x2, "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"}, 0x807, 0x0) msgrcv(0x0, &(0x7f0000000000), 0xfffffcef, 0x0, 0x4800) r5 = dup(r0) write$UHID_INPUT(r5, &(0x7f0000001040)={0xe, {"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", 0xfffffffffffffd6f}}, 0x1006) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x193042, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x64, 0x6, 0x560, 0xd0, 0xd0, 0x1b8, 0x400, 0x0, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private1}}}, {{@ipv6={@mcast2, @mcast1, [], [0x0, 0x0, 0x0, 0xffffffff], 'veth0_to_team\x00', 'syzkaller0\x00', {0xff}}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x1, 0x6}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c0) pwrite64(r7, &(0x7f0000000140)='2', 0xfdef, 0x10c6b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) write$FUSE_INIT(r6, &(0x7f0000000000)={0x50}, 0x2000) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) truncate(&(0x7f0000000000)='./file1\x00', 0x3) 5.226575523s ago: executing program 5 (id=446): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) r3 = socket(0x2b, 0x1, 0x1) listen(r3, 0x5) accept4$vsock_stream(r3, 0x0, 0x0, 0x80800) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x24, 0x0) setuid(0xee00) writev(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x4fee, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r4, 0x400, 0x1) fremovexattr(r4, &(0x7f0000000040)=@known='system.posix_acl_default\x00') getxattr(&(0x7f0000002a80)='./file0\x00', &(0x7f0000002ac0)=@known='system.posix_acl_access\x00', 0x0, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) 5.212468215s ago: executing program 1 (id=447): syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[], 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb00143c, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000002c0)=0x4) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000140)) shutdown(0xffffffffffffffff, 0x1) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(r6, 0x5437, 0x2) sendto$inet6(r5, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r5, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x7}, 0x1c) 5.080336056s ago: executing program 4 (id=448): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file1\x00', 0x2000048, &(0x7f0000000000), 0x1, 0x753, &(0x7f00000017c0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000100), 0x10000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000180)=@nl=@proc, 0x80, &(0x7f0000000480)=[{&(0x7f0000000300)=""/253, 0xfd}, {0x0}], 0x2, &(0x7f00000004c0)=""/6, 0x6}, 0x40002041) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) io_setup(0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x10) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r3, 0x0, 0x0, 0x4001c00) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r4, 0xffffffffffffffff, 0x200000000000000) 4.767934257s ago: executing program 3 (id=449): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x6, &(0x7f0000000140)={[{@sysvgroups}, {@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x82f}}, {@grpquota}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@grpid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x80, 0x55d, &(0x7f0000000480)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) connect$802154_dgram(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) setresuid(0x0, 0xee01, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xe) ioctl$TIOCSLCKTRMIOS(r3, 0x5457, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1121200}, 0xc, &(0x7f0000000400)={&(0x7f0000000a00)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x48080) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7fe}, 0x1c) listen(r5, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e22, @local}, 0x10) 4.759018666s ago: executing program 0 (id=450): r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x1000000, &(0x7f0000000080)=ANY=[@ANYBLOB='iocharset=cp865,check=relaxed,rodir,nonumtail=0,check=stri\x00\x00,allow_utime=00000000000000000000014,nonumtail=0,uni_xlate=1,uni_xlate=1,\x00'], 0x1, 0x240, &(0x7f0000000740)="$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") r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)="8f7d64e5", 0x4}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket(0x28, 0x5, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c0004802800018008000100666962001c00028008000240000000030800034000000001080001400000001414000000"], 0xdc}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {{0x0, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) connect$vsock_stream(r6, &(0x7f0000000180)={0x28, 0x0, 0x2711, @local}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r1, 0x0, 0x0) file_setattr(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x88, 0xd9, 0x3, 0xb, 0x57519bea}, 0x71, 0x1000) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x1010008, &(0x7f0000003500)=ANY=[@ANYBLOB="757466383d312c726f6469722c756e695f786c6174653d302c636865636b3d7374726963742c757466383d302c756e695f786c6174653d302c726f6469722c636f6465706167653d3836362c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c73686f72746e616d653d77696e39352c696f636861727365743d6d616363726f617469616e2c73686f72746e616d653d6d697865642c756e695f786c6174653d302c646973636172642c0075446e262f25fd37e87bbc0d0e6b98643b75cbf0c79e5a1253c8a327b0b715742b9830d9e0056d2527dec0f0053916"], 0x1, 0x372, &(0x7f00000001c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1cb842, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 4.286968398s ago: executing program 5 (id=451): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000080)=@ethtool_coalesce={0x13, 0x0, 0xfffffffa, 0x871e, 0x5, 0x8, 0x9, 0x4, 0xffffff1b, 0x1, 0x8, 0x8, 0x4, 0xfffffff9, 0x0, 0x5, 0x1, 0x2, 0x7, 0x7, 0x2, 0x9, 0xc}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r1, 0xc040583f, &(0x7f0000000280)={{@align=0x3, {0x2, 0x0, 0x9, 0x9}}, {{[0xfffffff7, 0x0, 0x3, 0x4]}, 0x0, 0x1, 0xfffffff9, 0x0, &(0x7f00000001c0)=[{{@_ha_fsid={[0x8, 0x7]}, {0x1, 0x800, 0xffff, 0x52d0}}, 0x9b3, 0x0, '\xff\xff\xff\xff\xff\xff'}, {{@_ha_fsid={[0x44f6, 0x8]}, {0xa, 0x3, 0xfff, 0x9}}, 0x0, 0x0, '\x00'}, {{@_ha_fsid={[0x980, 0xffff2340]}, {0x5, 0x93b, 0x100000, 0x6}}, 0x10, 0x0, '-\x00'}]}}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/gser.usb0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000000380)='dummy_udc.0', 0xb) r6 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r6, &(0x7f0000000400)='\n', 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@mpls_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x12, {0xa, "f5d6a6c4b0639b11374230874419"}}]}, 0x30}}, 0x0) 3.686764772s ago: executing program 3 (id=452): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0xa, 0x4, &(0x7f0000001340)=ANY=[@ANYBLOB="660a0000090000006111ba0000000000850000008b00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2}, 0x94) 3.66787001s ago: executing program 1 (id=453): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$cgroup(0x0, 0x0, &(0x7f00000001c0), 0x2010042, 0x0) lremovexattr(0x0, 0x0) r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r4, &(0x7f0000000100)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r4, &(0x7f00000000c0), 0x2) sync() write$USERIO_CMD_SEND_INTERRUPT(r4, &(0x7f0000000000)={0x2, 0x40}, 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) mprotect(&(0x7f0000ff5000/0xa000)=nil, 0xa000, 0xc) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x12, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$sock(r0, &(0x7f00000002c0), 0x0, 0x0) 3.526198249s ago: executing program 3 (id=454): syz_open_dev$loop(&(0x7f0000000040), 0xb9, 0x505800) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002cbd6000000000000900020073797a30000000000800410073697700140033006c6f00"/56], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x200000c0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r4 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/doi\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000880)={0x3, 0x1, &(0x7f0000000500)=""/223, &(0x7f0000000700)=""/202, &(0x7f0000000800)=""/126, 0x2000}) write$smackfs_cipsonum(r4, &(0x7f0000000040)=0x1000, 0x14) syz_open_dev$vim2m(&(0x7f0000001580), 0x57, 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x9) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff, 0x6, 0x1, &(0x7f00000006c0)='>', 0x4, 0x1, 0x15c2, 0xa0e, 0x43, 0x1, 0x7, 'syz0\x00'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x4, 0x1, 0xd10c7053797fdc7d, 0x0, 0x0, {0xa, 0x0, 0x1009}}, 0x14}, 0x1, 0x0, 0x0, 0xad95ebfcb99305b6}, 0x4040000) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) 2.557486122s ago: executing program 0 (id=455): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004001000ffff00000b"], 0x50) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x2, 0x300) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) socket$nl_route(0x10, 0x3, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) socket$nl_route(0x10, 0x3, 0x0) socket$l2tp6(0xa, 0x2, 0x73) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) socket$vsock_stream(0x28, 0x1, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x0, @remote}, {0x2, 0x4e23, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xd) 2.340515276s ago: executing program 1 (id=456): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$binfmt_register(0xffffff9c, &(0x7f0000005480), 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000000280)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x100000002, 0x3a, 'Ui\xe7\xc7\x10\xd8t*Y\xed{ot\x1b\x1a\xde*\xb0d.', 0x3a, 'dont_appraise', 0x3a, './file0', 0x3a, [0x43, 0x4f, 0x4f, 0x43, 0x50, 0x43]}, 0x4e) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x80, 0x2, 0x301}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000980)=@IORING_OP_FUTEX_WAIT={0x33, 0x0, 0x0, 0x82, 0x57, 0x0, 0x0, 0x0, 0x3, {0x0, 0x0, 0x0, 0x10000}}) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x10) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) write$binfmt_register(r1, &(0x7f0000000100)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x4903, 0x3a, 'uid>', 0x3a, '*', 0x3a, './file0', 0x3a, [0x50, 0x46, 0x4f, 0x50, 0x43]}, 0x31) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x403, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x3, 0x0, 0x1020}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'geneve0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0xe0a0ffd997287dd5}, 0x40080) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000003b40), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r10, &(0x7f0000003c00)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x6}}, 0x10) r11 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r12 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r12, 0x6, 0x0, 0x0, 0x0) r13 = fsmount(r12, 0x0, 0xe) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000200)={@cgroup=r13, r11, 0x12, 0x6}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r13, 0x89e2, &(0x7f0000000140)={r0}) 2.326125844s ago: executing program 0 (id=457): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) setrlimit(0xe, &(0x7f0000000000)={0x4848, 0x8000000000004}) mlock2(&(0x7f0000007000/0x2000)=nil, 0x2000, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0xffffffff, 0xfffffffe, 0xb02e}) mlock2(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10042, 0x9) socket$kcm(0xa, 0x2, 0x0) pipe2$9p(&(0x7f0000000080), 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x41, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='oom_score_adj\x00') socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r1, 0x5453, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) 2.29622221s ago: executing program 4 (id=458): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000940)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0xe, 0xf}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x8001, 0x8, 0x7, 0xfffffffc}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x2004c011}, 0x4800) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$inet6(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) r4 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000500)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r5, 0x3f}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\r', 0x1}], 0x1}, 0x4) 2.132856727s ago: executing program 3 (id=459): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)='configfs\x00', 0xe, 0x0) io_setup(0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x10) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="e50002000000000071113d00000000008510000002000000850000007d00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000020000000000000400000000000002000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 1.821998537s ago: executing program 5 (id=460): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$eJzs3c9rHFUcAPDvbJKmSauJIGg9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQg4tIngRVDwIeunZH/Xm1R9X/S88SEvVtFjxIJHZH+222U03bXY3kM8HXva9mdm89903P97sDDsB7FkT6Z9MxKGI+DiJGKtPTyJiqJobjDhRW+72+lo+TUlsbLz9Z1Jd5tb6Wj6a3pM6UC88HRE/fRBxOLO53vLK6nyuWCws1ctTlYXzU+WV1SPnFnJzhbnC4rHpmZmjx186fmznYv3719WD1z954/lvT/z7/lNXP/o5iRNxsD6vOY6dMhET9c9kKP0I7/H6TlfWZ0m/G8BDSTfNgdpWHodiLAaquTZGetkyAKBbNgCAPSgxBgCAPabxPcCt9bV8I/X3G4neuvFaROyvxd+4vlmbM1i/Zre/eh109FZyz5WRJCLGd6D+iYj48vt3v05T1PvBtTSgFy5djogz4xOb9//JpnsWtuuFrWZuDFdfJu6bvNeOP9BPP6Tjn5dbjf8yd8Y/0WL8M9xi230YD97+M9d2oJq20vHfq033tt1uir9ufKBeeqw65htKzp4rFtJ92+MRMRlDw2l5urpo65Hb5M3/brarv3n899en732V1p++3l0ic21w+N73zOYquUeNu+HG5YhnBlvFn9zp/6TN+PdUh3W8+cqHX7Sbl8afxttIm+Pvro0rEc+17P+7fZlseX/iVHV1mGqsFC1899vno+3qb+7/NKX1N84FeiHt/9Gt4x9Pmu/XLG+/jl+ujP3Ybt6D42+9/u9L3qnm99WnXcxVKkvTEfuStzZPP3r3vY1yY/k0/slnW2//tWpbr//pOeGZDuMfvP7HNw8ff3el8c9uq/+3n7l6e36gXf2d9f9MNTdZn9LJ/q/TBj7KZwcAAAAAAAAAAAAAAAAAAAAAAAAAncpExMFIMtk7+Uwmm609w/vJGM0US+XK4bOl5cXZqD4rezyGMo2fuhxr+j3U6frv4TfKR+8rvxgRT0TEZ8Mj1XI2XyrO9jt4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKg70Ob5/6nfh/vdOgCga/b3uwEAQM85/gPA3rO94/9I19oBAPSO838A2Hs6Pv6f6W47AIDecf4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAl506eTJNG/+sr+XT8uyFleX50oUjs4XyfHZhOZ/Nl5bOZ+dKpbliIZsvLbT9R5dqL8VS6fxMLC5fnKoUypWp8srq6YXS8mLl9LmF3FzhdGGoZ5EBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQOfKK6vzuWKxsCSzZWZkdzRj12QGY1c0Q6Zrmea9xEj/dlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu9z/AQAA//+MoS4e") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x26, 0xe, 0x0, 0x0) ioprio_set$pid(0x1, r1, 0x2007) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) rt_tgsigqueueinfo(r1, 0x0, 0x15, &(0x7f0000003800)={0xf, 0x289, 0x1}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, 0x0, &(0x7f0000000000)=0x4d) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, 0x0) write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0x0, 0x9}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0x0, 0x5, 0x1, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x80008, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e3502c9], [0x0, 0x0, 0x8, 0xb16, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x1, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffd, 0x0, 0xfffffff9, 0x0, 0x80000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xe], [0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xddc, 0x0, 0x0, 0xfffffffc, 0xff, 0x0, 0xda4a, 0x0, 0x0, 0x0, 0x0, 0x7683, 0x0, 0x2, 0xe, 0x8000001, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x7ffffff, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x7, 0x4], [0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc045, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$XFS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x42, 0x0) ioctl$OCFS2_IOC_RESVSP64(r5, 0x4030582a, &(0x7f0000000000)={0x1, 0x2, 0xfffffffffffffff9, 0x444, 0x6, 0x4}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r5, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, r6, 0x200, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4008004}, 0x44008) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000a40)={'syz1\x00', {0xfffd, 0xd}, 0x4d, [0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0xffff, 0x0, 0x0, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x2], [0xffffffff, 0x3, 0x3, 0x0, 0x0, 0x6, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xffffffff, 0x400000, 0x1, 0x0, 0xfffffffc, 0xfffffffe, 0x0, 0x4, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd5], [0x0, 0x80000000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7ff, 0x3, 0x7fffffc, 0x0, 0x0, 0x7fff, 0x0, 0xd8000000, 0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffe, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x6, 0x2], [0x8, 0x0, 0x5d30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfc2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xe58b, 0xe, 0x0, 0x10000003, 0x0, 0x1, 0x1ff]}, 0x45c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 972.885618ms ago: executing program 1 (id=461): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r5 = epoll_create1(0x0) ioctl$AUTOFS_IOC_FAIL(r5, 0x80088a02, 0xfffffffffffff29a) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r6, 0x6, 0x9, &(0x7f0000001080)={{0x1, @multicast2, 0xffff, 0x0, 'sh\x00', 0x8, 0x5, 0x1fffffe}, {@multicast1, 0x2, 0x3, 0x7ffffff, 0x0, 0x20100}}, 0x44) getsockopt$inet_tcp_int(r6, 0x6, 0x9, 0x0, &(0x7f0000000040)) r7 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r7) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000900)=@mangle={'mangle\x00', 0x2, 0x6, 0x590, 0xe0, 0x0, 0x1c0, 0xe0, 0xe0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x6, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @private=0xa010101}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], [0xff, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x2b, 0x8, 0x1, 0x18}, 0x0, 0xa8, 0xe0, 0x0, {0x7a00000010000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x5}, {0xffffffffffffffff, 0x7, 0x1}, {0xffffffffffffffff, 0x23}, 0x6}}}, {{@ipv6={@remote, @mcast2, [0x0, 0x0, 0x0, 0xffffff00], [0xffffff00, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'veth1_vlan\x00', {}, {}, 0x6, 0x1}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffff}, {}, {0x87, 0x2, 0x1}}}}, {{@uncond, 0x0, 0xa8, 0xf0, 0x48000000}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x14, 0x22, 0x40}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@ipv6header={{0x28}, {0x0, 0x15}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@rand_addr=0x64010100, @ipv4=@loopback, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f0) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000200)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth1_macvtap\x00', &(0x7f0000000080)=@ethtool_sfeatures={0x15}}) keyctl$read(0xb, r7, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, 0x0, 0x24044884) 845.407763ms ago: executing program 0 (id=462): r0 = socket$igmp(0x2, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) r2 = socket$inet_icmp(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet_sctp(0x2, 0x1, 0x84) socket$rds(0x15, 0x5, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0xd, 0x81, 0x2e}, {@rand_addr=0xac1414aa, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d59}}, 0x44) ioctl$sock_inet_SIOCGARP(r2, 0x8954, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rf', @ANYRESHEX=r7]) ioctl$vim2m_VIDIOC_G_FMT(r7, 0xc0d05604, &(0x7f0000000440)={0x2, @sliced={0x2, [0x2, 0xb, 0x8, 0x8, 0x2, 0x4, 0x6, 0x1, 0x7, 0x7, 0xb84, 0x7, 0x200, 0x2, 0x6, 0x8fee, 0x8, 0x6, 0x1, 0x8000, 0x1, 0x78e5, 0x3, 0x8, 0xae4, 0x300, 0x4, 0x9, 0x7fff, 0x401, 0xd874, 0x100, 0x9, 0x9, 0x4, 0x67, 0x1, 0xfff8, 0x58f, 0x3a4, 0xfff, 0x4, 0x7, 0x7, 0xbdcf, 0x9, 0x0, 0x93], 0xfffffa6a}}) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000000c0)={0x5c, @dev={0xac, 0x14, 0x14, 0x27}, 0x4e22, 0x1, 'sed\x00', 0x12, 0x0, 0x26}, 0x2c) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r8, 0x6, 0x19, &(0x7f00000001c0)=0x8, 0x4) sendmmsg$inet(r8, &(0x7f0000000240)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) shutdown(r8, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000004f37ea30f5e6dc290c54acf7c91d450702777fb6650f7da88f07755b5738e49186f1490de575054f77aaa828ba3b4dbd67549a9fa1b608b089"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) 553.790718ms ago: executing program 4 (id=463): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000080), 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x62c40, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x2, 0x80, 0x1, 0x101}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) memfd_create(0x0, 0x2) mmap$xdp(&(0x7f0000677000/0x1000)=nil, 0x1000, 0x2, 0x11, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000009060102000000009d000000000000000900020073797a31000000000500010007000000180007800c00018008000140fffffffe050003000800000091f46cc3b2a7aa94eb9619485548765c2561354a067bfce3f64a699ad37bec28bac35a15d0998a545c1be636fa51a86bd54880a30ad814fa06e01afbf4fe60bacf"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) setxattr$smack_xattr_label(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='security.SMACK64\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="6c6f00017264697200"], 0x9, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) statx(r5, 0x0, 0x1000, 0x6000, 0x0) syz_usb_connect(0x5, 0x46, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) 502.749472ms ago: executing program 5 (id=464): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0xa, 0x4, &(0x7f0000001340)=ANY=[@ANYBLOB="660a0000090000006111ba0000000000850000008b00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2}, 0x94) 369.755933ms ago: executing program 5 (id=465): syz_open_dev$dri(0x0, 0x7, 0x44000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000004c0)={0x2c}, 0x8) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r2, 0x118, 0x1, &(0x7f0000000040)=0x2d8, 0x4) r3 = open$dir(&(0x7f0000000040)='./file0\x00', 0x840, 0xe2) fanotify_mark(0xffffffffffffffff, 0x0, 0x800000b, r3, &(0x7f0000000080)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x81}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r4 = getpid() socket$inet(0x2, 0x2, 0x1) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x2) dup(r7) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x4, 0x14a}}) ioctl$TIOCL_PASTESEL(r7, 0x541c, &(0x7f0000000000)) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r8, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800093b00000000000000000a"], 0x24}}, 0x0) sendmmsg$inet6(r1, &(0x7f0000000a00)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @rand_addr=' \x01\x00', 0x9}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1, 0x0, 0x0, 0xa00}}, {{&(0x7f0000000040)={0xa, 0x4e21, 0x2, @private2, 0x9}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000080)="b7a1", 0x2}], 0x1}}], 0x2, 0x0) 54.043372ms ago: executing program 1 (id=466): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80, r2}) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000140)={@loopback, 0x80, r2}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/gser.usb0\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r6, &(0x7f0000000380)='dummy_udc.0', 0xb) r7 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r7, &(0x7f0000000400)='\n', 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@mpls_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x12, {0xa, "f5d6a6c4b0639b11374230874419"}}]}, 0x30}}, 0x0) 714.871µs ago: executing program 0 (id=467): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004001000ffff00000b"], 0x50) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x2, 0x300) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) socket$nl_route(0x10, 0x3, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) socket$nl_route(0x10, 0x3, 0x0) socket$l2tp6(0xa, 0x2, 0x73) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) socket$vsock_stream(0x28, 0x1, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x0, @remote}, {0x2, 0x4e23, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xd) 0s ago: executing program 3 (id=468): sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x20004056) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8000000000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(0x0, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES8=r1, @ANYRES64=0x0, @ANYBLOB="0000000058f59c7ec4f9decad006bbd9bb5bd0fcd2f4733c57415478e484000000"], 0x48}, 0x300}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000005900)=ANY=[@ANYBLOB="050000000100"/16, @ANYRES8=r0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000002190000de00000001000000f21a810183bdfbff"], 0x48}, 0x300, 0x0, 0x0, 0x8800}, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) tee(r5, r5, 0xcfce, 0x3) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x91}, 0x24044884) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000008c0), &(0x7f0000000900), 0x0, 0x0, 0x0, 0x0, r8}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r9 = syz_open_dev$loop(&(0x7f0000000180), 0xc513, 0x305200) ioctl$IOC_PR_CLEAR(r9, 0x401070cd, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.146' (ED25519) to the list of known hosts. [ 23.190330][ T4699] cgroup: Unknown subsys name 'net' [ 23.281229][ T4699] cgroup: Unknown subsys name 'cpuset' [ 23.283218][ T4699] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 23.403774][ T4699] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 24.470162][ T4718] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 24.472345][ T4718] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 24.473734][ T4718] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 24.475700][ T4718] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 24.477134][ T4718] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 24.477209][ T4718] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 24.480885][ T4723] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 24.481596][ T4723] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 24.481808][ T4723] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 24.484685][ T4713] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 24.484918][ T4713] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 24.487894][ T4720] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 24.488076][ T4720] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 24.488168][ T4720] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 24.493026][ T4713] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 24.493230][ T4713] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 24.496201][ T4725] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 24.499583][ T4725] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 24.500154][ T4725] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 24.501153][ T4725] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 24.501276][ T4725] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 24.506814][ T4725] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 24.506955][ T4725] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 24.507200][ T4725] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 24.517710][ T4716] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 24.885954][ T4719] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.886467][ T4719] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.886621][ T4719] bridge_slave_0: entered allmulticast mode [ 24.887102][ T4719] bridge_slave_0: entered promiscuous mode [ 24.895593][ T4719] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.895779][ T4719] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.895869][ T4719] bridge_slave_1: entered allmulticast mode [ 24.896300][ T4719] bridge_slave_1: entered promiscuous mode [ 24.916111][ T4719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.920467][ T4722] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.920554][ T4722] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.920624][ T4722] bridge_slave_0: entered allmulticast mode [ 24.921054][ T4722] bridge_slave_0: entered promiscuous mode [ 24.922998][ T4719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.925955][ T4722] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.926128][ T4722] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.926193][ T4722] bridge_slave_1: entered allmulticast mode [ 24.926649][ T4722] bridge_slave_1: entered promiscuous mode [ 24.946460][ T4722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.962423][ T4722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.966873][ T4719] team0: Port device team_slave_0 added [ 24.967787][ T4719] team0: Port device team_slave_1 added [ 24.988959][ T4717] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.990249][ T4717] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.991771][ T4717] bridge_slave_0: entered allmulticast mode [ 24.993394][ T4717] bridge_slave_0: entered promiscuous mode [ 24.998044][ T4717] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.998776][ T4717] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.998855][ T4717] bridge_slave_1: entered allmulticast mode [ 24.999269][ T4717] bridge_slave_1: entered promiscuous mode [ 25.006117][ T4719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.006144][ T4719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.006161][ T4719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.014089][ T4722] team0: Port device team_slave_0 added [ 25.020807][ T4711] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.020910][ T4711] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.020964][ T4711] bridge_slave_0: entered allmulticast mode [ 25.021430][ T4711] bridge_slave_0: entered promiscuous mode [ 25.022227][ T4719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.022237][ T4719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.022250][ T4719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.032255][ T4722] team0: Port device team_slave_1 added [ 25.032309][ T4712] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.032342][ T4712] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.032435][ T4712] bridge_slave_0: entered allmulticast mode [ 25.032882][ T4712] bridge_slave_0: entered promiscuous mode [ 25.034080][ T4712] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.034101][ T4712] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.034149][ T4712] bridge_slave_1: entered allmulticast mode [ 25.034581][ T4712] bridge_slave_1: entered promiscuous mode [ 25.045928][ T4717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.047840][ T4711] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.047900][ T4711] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.047994][ T4711] bridge_slave_1: entered allmulticast mode [ 25.048444][ T4711] bridge_slave_1: entered promiscuous mode [ 25.059659][ T4712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.060659][ T4712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.064665][ T4717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.073459][ T4711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.078310][ T4719] hsr_slave_0: entered promiscuous mode [ 25.079556][ T4719] hsr_slave_1: entered promiscuous mode [ 25.086016][ T4722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.086248][ T4722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.086267][ T4722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.086930][ T4722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.086940][ T4722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.086951][ T4722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.088071][ T4711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.094096][ T4712] team0: Port device team_slave_0 added [ 25.106668][ T4712] team0: Port device team_slave_1 added [ 25.111543][ T4717] team0: Port device team_slave_0 added [ 25.112919][ T4717] team0: Port device team_slave_1 added [ 25.113895][ T4711] team0: Port device team_slave_0 added [ 25.128093][ T4712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.128132][ T4712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.128152][ T4712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.129826][ T4711] team0: Port device team_slave_1 added [ 25.133293][ T4717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.133302][ T4717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.133313][ T4717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.141876][ T4722] hsr_slave_0: entered promiscuous mode [ 25.142525][ T4722] hsr_slave_1: entered promiscuous mode [ 25.142765][ T4722] debugfs: 'hsr0' already exists in 'hsr' [ 25.142814][ T4722] Cannot create hsr debugfs directory [ 25.147623][ T4712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.147898][ T4712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.147916][ T4712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.153834][ T4717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.153844][ T4717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.153858][ T4717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.173732][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.173757][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.173789][ T4711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.175870][ T4712] hsr_slave_0: entered promiscuous mode [ 25.176205][ T4712] hsr_slave_1: entered promiscuous mode [ 25.176416][ T4712] debugfs: 'hsr0' already exists in 'hsr' [ 25.176427][ T4712] Cannot create hsr debugfs directory [ 25.189729][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.190815][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.195085][ T4711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.223769][ T4717] hsr_slave_0: entered promiscuous mode [ 25.224249][ T4717] hsr_slave_1: entered promiscuous mode [ 25.224461][ T4717] debugfs: 'hsr0' already exists in 'hsr' [ 25.224473][ T4717] Cannot create hsr debugfs directory [ 25.251778][ T4711] hsr_slave_0: entered promiscuous mode [ 25.252128][ T4711] hsr_slave_1: entered promiscuous mode [ 25.252362][ T4711] debugfs: 'hsr0' already exists in 'hsr' [ 25.252373][ T4711] Cannot create hsr debugfs directory [ 25.331321][ T4719] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 25.335606][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 25.337466][ T4719] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 25.339879][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 25.342045][ T4719] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 25.344111][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 25.347198][ T4719] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 25.349335][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 25.379799][ T4719] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.379855][ T4719] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.380018][ T4719] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.380067][ T4719] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.404873][ T4719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.406329][ T4712] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 25.409706][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 25.410077][ T4712] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 25.411772][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 25.416482][ T4712] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 25.417586][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 25.417957][ T4712] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 25.419994][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 25.430878][ T15] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.432079][ T15] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.446288][ T4719] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.451791][ T4717] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 25.454882][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 25.456903][ T4717] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 25.459037][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 25.462486][ T913] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.462556][ T913] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.470246][ T4717] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 25.472661][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 25.474260][ T4717] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 25.476247][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 25.486869][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.486913][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.497788][ T4711] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 25.500645][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 25.524753][ T4711] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 25.527960][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 25.530573][ T4711] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 25.532770][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 25.534924][ T4711] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 25.537520][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 25.563345][ T4712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.576544][ T4712] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.582099][ T4722] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 25.585484][ T4722] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 25.587840][ T4722] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 25.593171][ T4722] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 25.596650][ T4717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.601364][ T15] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.601406][ T15] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.601914][ T4722] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 25.603652][ T4722] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 25.603985][ T4722] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 25.605909][ T4722] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 25.618247][ T4717] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.620972][ T1781] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.621014][ T1781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.629147][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.629197][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.629579][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.629606][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.693865][ T4719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.726989][ T4719] veth0_vlan: entered promiscuous mode [ 25.733958][ T4722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.736095][ T4719] veth1_vlan: entered promiscuous mode [ 25.756109][ T4719] veth0_macvtap: entered promiscuous mode [ 25.761712][ T4722] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.772557][ T4711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.775518][ T4711] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.789474][ T1781] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.789530][ T1781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.790085][ T1781] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.790112][ T1781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.790751][ T1781] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.790782][ T1781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.791296][ T1781] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.791324][ T1781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.793573][ T4719] veth1_macvtap: entered promiscuous mode [ 25.804087][ T4722] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 25.810668][ T4719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.813134][ T4719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.816516][ T40] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.816609][ T40] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.816637][ T40] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.816660][ T40] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.844877][ T4717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.878354][ T4711] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 25.878393][ T4711] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 25.898109][ T1781] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 25.898143][ T1781] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 25.929673][ T94] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 25.931112][ T94] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 25.950700][ T4712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.967330][ T4717] veth0_vlan: entered promiscuous mode [ 25.972962][ T4717] veth1_vlan: entered promiscuous mode [ 25.983441][ T4717] veth0_macvtap: entered promiscuous mode [ 25.987226][ T4719] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 26.018133][ T4717] veth1_macvtap: entered promiscuous mode [ 26.021220][ T4712] veth0_vlan: entered promiscuous mode [ 26.035203][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.036798][ T4712] veth1_vlan: entered promiscuous mode [ 26.044642][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.049660][ T4712] veth0_macvtap: entered promiscuous mode [ 26.065130][ T40] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.071332][ T4712] veth1_macvtap: entered promiscuous mode [ 26.080865][ T40] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.083306][ T94] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.098145][ T4722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.109688][ T1884] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.131637][ T4712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.135049][ T4722] veth0_vlan: entered promiscuous mode [ 26.145331][ T15] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 26.145365][ T15] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 26.147051][ T4712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.393709][ T4711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.398934][ T40] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.400941][ T40] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.403996][ T40] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.412300][ T40] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.413113][ T4722] veth1_vlan: entered promiscuous mode [ 26.413854][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 26.413865][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 26.436004][ T4722] veth0_macvtap: entered promiscuous mode [ 26.440043][ T4722] veth1_macvtap: entered promiscuous mode [ 26.465789][ T4722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.471984][ T1884] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 26.473760][ T1884] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 26.483130][ T4722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.492182][ T4720] Bluetooth: hci1: command tx timeout [ 26.495406][ T40] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.495459][ T40] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.495494][ T40] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.495523][ T40] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.505261][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 26.505295][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 26.570982][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 26.571009][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 26.579917][ T4720] Bluetooth: hci4: command tx timeout [ 26.580158][ T4720] Bluetooth: hci3: command tx timeout [ 26.580227][ T4720] Bluetooth: hci0: command tx timeout [ 26.580287][ T4720] Bluetooth: hci2: command tx timeout [ 26.592081][ T4711] veth0_vlan: entered promiscuous mode [ 26.600768][ T4711] veth1_vlan: entered promiscuous mode [ 26.602947][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 26.604590][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 26.626154][ T4711] veth0_macvtap: entered promiscuous mode [ 26.631255][ T4711] veth1_macvtap: entered promiscuous mode [ 26.907453][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.918951][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.944630][ T1781] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.944693][ T1781] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.944732][ T1781] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.944755][ T1781] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.026789][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 27.026822][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 27.050883][ T1781] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 27.050916][ T1781] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 27.188083][ T4922] loop3: detected capacity change from 0 to 8 [ 27.201212][ T4922] Bluetooth: MGMT ver 1.23 [ 27.444777][ T4924] loop1: detected capacity change from 0 to 8 [ 27.506925][ T4925] Set syz1 is full, maxelem 256 reached [ 27.517783][ T4924] SQUASHFS error: Failed to read block 0x4de: -5 [ 27.517854][ T4924] SQUASHFS error: Failed to read block 0x4de: -5 [ 27.517892][ T4924] SQUASHFS error: Failed to read block 0x4de: -5 [ 27.517923][ T4924] SQUASHFS error: Failed to read block 0x4de: -5 [ 27.517947][ T4924] SQUASHFS error: Failed to read block 0x4de: -5 [ 27.517980][ T4924] SQUASHFS error: Failed to read block 0x4de: -5 [ 27.520580][ T4925] Set syz1 is full, maxelem 256 reached [ 27.528111][ T4924] SQUASHFS error: Failed to read block 0x4de: -5 [ 27.528162][ T4924] SQUASHFS error: Failed to read block 0x4de: -5 [ 27.528209][ T4924] SQUASHFS error: Failed to read block 0x4de: -5 [ 27.528241][ T4924] SQUASHFS error: Failed to read block 0x4de: -5 [ 27.528269][ T4924] SQUASHFS error: Failed to read block 0x4de: -5 [ 27.528297][ T4924] SQUASHFS error: Failed to read block 0x4de: -5 [ 27.528322][ T4924] SQUASHFS error: Failed to read block 0x4de: -5 [ 27.528350][ T4924] SQUASHFS error: Failed to read block 0x4de: -5 [ 27.528375][ T4924] SQUASHFS error: Failed to read block 0x4de: -5 [ 27.528402][ T4924] SQUASHFS error: Failed to read block 0x4de: -5 [ 27.528426][ T4924] SQUASHFS error: Failed to read block 0x4de: -5 [ 27.528453][ T4924] SQUASHFS error: Failed to read block 0x4de: -5 [ 27.528478][ T4924] SQUASHFS error: Failed to read block 0x4de: -5 [ 27.534486][ T4924] SQUASHFS error: Failed to read block 0x4de: -5 [ 27.534521][ T4924] SQUASHFS error: Failed to read block 0x4de: -5 [ 27.534549][ T4924] SQUASHFS error: Failed to read block 0x4de: -5 [ 27.534572][ T4924] SQUASHFS error: Failed to read block 0x4de: -5 [ 27.534599][ T4924] SQUASHFS error: Failed to read block 0x4de: -5 [ 27.534620][ T4924] SQUASHFS error: Failed to read block 0x4de: -5 [ 27.534645][ T4924] SQUASHFS error: Failed to read block 0x4de: -5 [ 27.534666][ T4924] SQUASHFS error: Failed to read block 0x4de: -5 [ 27.534691][ T4924] SQUASHFS error: Failed to read block 0x4de: -5 [ 27.534712][ T4924] SQUASHFS error: Failed to read block 0x4de: -5 [ 27.534736][ T4924] SQUASHFS error: Failed to read block 0x4de: -5 [ 27.534759][ T4924] SQUASHFS error: Failed to read block 0x4de: -5 [ 27.534784][ T4924] SQUASHFS error: Failed to read block 0x4de: -5 [ 27.534805][ T4924] SQUASHFS error: Failed to read block 0x4de: -5 [ 27.581476][ T4931] binder: 4930:4931 tried to acquire reference to desc 0, got 1 instead [ 27.590700][ T4833] binder: release 4930:4931 transaction 5 out, still active [ 27.590743][ T4833] binder: undelivered TRANSACTION_COMPLETE [ 27.620768][ T4938] loop4: detected capacity change from 0 to 8 [ 27.624033][ T4938] SQUASHFS error: Failed to read block 0x62: -5 [ 27.625366][ T4938] squashfs image failed sanity check [ 27.627207][ T4833] binder: send failed reply for transaction 5, target dead [ 27.706023][ T4940] netlink: 'syz.0.12': attribute type 1 has an invalid length. [ 28.569364][ T4716] Bluetooth: hci1: command tx timeout [ 28.650611][ T4716] Bluetooth: hci2: command tx timeout [ 28.652004][ T4720] Bluetooth: hci3: command tx timeout [ 28.652025][ T4728] Bluetooth: hci4: command tx timeout [ 28.903389][ T4992] syzkaller0: entered promiscuous mode [ 28.903434][ T4992] syzkaller0: entered allmulticast mode [ 28.973770][ T4997] bridge_slave_0: left allmulticast mode [ 28.973812][ T4997] bridge_slave_0: left promiscuous mode [ 28.973894][ T4997] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.145846][ T4997] bridge_slave_1: left allmulticast mode [ 29.145888][ T4997] bridge_slave_1: left promiscuous mode [ 29.145973][ T4997] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.277771][ T4997] bond0: (slave bond_slave_0): Releasing backup interface [ 29.301175][ T4997] bond0: (slave bond_slave_1): Releasing backup interface [ 29.322068][ T4997] team0: Port device team_slave_0 removed [ 29.324369][ T4997] team0: Port device team_slave_1 removed [ 29.324730][ T4997] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 29.324741][ T4997] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 29.326241][ T4997] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 29.326255][ T4997] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 29.327665][ T4997] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 29.345307][ T5000] team0: Mode changed to "loadbalance" [ 29.360493][ T5013] team0: Port device xfrm0 added [ 29.380240][ T4956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 29.517835][ T5038] xt_TCPMSS: Only works on TCP SYN packets [ 29.521312][ T5038] Injecting memory failure for pfn 0x1061c7 at process virtual address 0x20000000 [ 29.532720][ T5038] Memory failure: 0x1061c7: failed to unmap page (folio mapcount=1) [ 29.532756][ T5038] Memory failure: 0x1061c7: recovery action for unmapping failed page: Failed [ 29.545920][ T5040] syzkaller0: entered promiscuous mode [ 29.545963][ T5040] syzkaller0: entered allmulticast mode [ 30.222657][ T5047] bridge_slave_0: left allmulticast mode [ 30.223829][ T5047] bridge_slave_0: left promiscuous mode [ 30.225011][ T5047] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.238722][ T5047] bridge_slave_1: left allmulticast mode [ 30.238756][ T5047] bridge_slave_1: left promiscuous mode [ 30.238850][ T5047] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.244835][ T5047] bond0: (slave bond_slave_0): Releasing backup interface [ 30.274833][ T5047] bond0: (slave bond_slave_1): Releasing backup interface [ 30.326494][ T5047] team0: Port device team_slave_0 removed [ 30.331884][ T5047] team0: Port device team_slave_1 removed [ 30.333402][ T5047] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 30.335061][ T5047] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 30.337221][ T5047] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 30.339161][ T5047] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 30.341421][ T5047] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 30.356406][ T5047] tipc: Started in network mode [ 30.357232][ T5047] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 30.359642][ T5047] tipc: Enabled bearer , priority 0 [ 30.390101][ T913] tipc: Resetting bearer [ 30.399913][ T5051] team0: Port device xfrm0 added [ 30.495997][ T5060] cgroup: Invalid name [ 30.649574][ T4716] Bluetooth: hci1: command tx timeout [ 30.729011][ T4716] Bluetooth: hci2: command tx timeout [ 30.729281][ T4716] Bluetooth: hci3: command tx timeout [ 30.729306][ T4716] Bluetooth: hci4: command tx timeout [ 30.742980][ T5062] netlink: 14 bytes leftover after parsing attributes in process `syz.0.33'. [ 31.399277][ T4798] tipc: Node number set to 11578026 [ 31.468162][ T5069] syzkaller0: entered promiscuous mode [ 31.468193][ T5069] syzkaller0: entered allmulticast mode [ 31.526771][ T5071] loop3: detected capacity change from 0 to 512 [ 31.529756][ T5071] EXT4-fs: inline encryption not supported [ 31.531719][ T5071] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 31.536755][ T5071] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.37: corrupted in-inode xattr: e_value size too large [ 31.536837][ T5071] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 31.538586][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 31.538600][ C0] EXT4-fs (loop3): initial error at time 31: ext4_iget_extra_inode:5180: inode 15 [ 31.538615][ C0] EXT4-fs (loop3): last error at time 31: ext4_iget_extra_inode:5180: inode 15 [ 31.542402][ T5071] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.37: couldn't read orphan inode 15 (err -117) [ 31.542476][ T5071] loop3: lost filesystem error report for type 5 error -117 [ 31.543469][ T5071] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.599987][ T4719] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.930364][ T5077] syzkaller0: entered promiscuous mode [ 31.930406][ T5077] syzkaller0: entered allmulticast mode [ 32.067142][ T5093] netlink: 'syz.2.44': attribute type 1 has an invalid length. [ 32.074950][ T5093] vlan2: entered allmulticast mode [ 32.074979][ T5093] team_slave_0: entered allmulticast mode [ 32.397098][ T5100] ======================================================= [ 32.397098][ T5100] WARNING: The mand mount option has been deprecated and [ 32.397098][ T5100] and is ignored by this kernel. Remove the mand [ 32.397098][ T5100] option from the mount to silence this warning. [ 32.397098][ T5100] ======================================================= [ 32.500332][ T5103] binder: 5102:5103 tried to acquire reference to desc 0, got 1 instead [ 32.501768][ T5103] binder: 5102:5103 unknown command 0 [ 32.501806][ T5103] binder: 5102:5103 ioctl c0306201 200001c0 returned -22 [ 32.502982][ T5103] binder_alloc: 5102: binder_alloc_buf size 5376 failed, no address space [ 32.503015][ T5103] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) [ 32.503059][ T5103] binder: cannot allocate buffer: no space left [ 32.503081][ T5103] binder: 5102:5103 transaction call to 5102:0 failed 21/29201/-28, code 0 size 0-5376 line 3408 [ 32.521185][ T4801] binder: release 5102:5103 transaction 14 out, still active [ 32.521687][ T4801] binder: undelivered TRANSACTION_COMPLETE [ 32.521783][ T4801] binder: undelivered TRANSACTION_ERROR: 29201 [ 32.521831][ T4801] binder: send failed reply for transaction 14, target dead [ 32.582652][ T5107] syzkaller0: entered promiscuous mode [ 32.582690][ T5107] syzkaller0: entered allmulticast mode [ 32.601406][ T5110] Zero length message leads to an empty skb [ 32.729037][ T4720] Bluetooth: hci1: command tx timeout [ 32.736559][ T5116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.51'. [ 32.809058][ T4720] Bluetooth: hci4: command tx timeout [ 32.809997][ T4728] Bluetooth: hci2: command tx timeout [ 32.810030][ T4716] Bluetooth: hci3: command tx timeout [ 32.902538][ T5133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.902799][ T5133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.921878][ T5131] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 32.921913][ T5131] overlayfs: failed to set xattr on upper [ 32.922173][ T5128] syzkaller0: entered promiscuous mode [ 32.922197][ T5128] syzkaller0: entered allmulticast mode [ 32.922493][ T5131] overlayfs: ...falling back to redirect_dir=nofollow. [ 32.924366][ T5131] overlayfs: ...falling back to uuid=null. [ 32.981285][ T5138] binder: 5137:5138 tried to acquire reference to desc 0, got 1 instead [ 32.983945][ T4801] binder: release 5137:5138 transaction 26 out, still active [ 32.983977][ T4801] binder: undelivered TRANSACTION_COMPLETE [ 32.991196][ T868] binder: send failed reply for transaction 26, target dead [ 33.063709][ T5144] loop2: detected capacity change from 0 to 1024 [ 33.071835][ T5144] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 33.079892][ T5144] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 2: comm syz.2.62: lblock 2 mapped to illegal pblock 2 (length 1) [ 33.079935][ T5144] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 33.080383][ T5144] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 33.080413][ T5144] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 48: comm syz.2.62: lblock 0 mapped to illegal pblock 48 (length 1) [ 33.080429][ T5144] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 33.080523][ T5144] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 33.080532][ T5144] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.62: Failed to acquire dquot type 0 [ 33.080544][ T5144] loop2: lost filesystem error report for type 5 error -117 [ 33.080656][ T5144] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 33.080666][ T5144] loop2: lost filesystem error report for type 5 error -117 [ 33.080890][ T5144] EXT4-fs error (device loop2): ext4_evict_inode:267: inode #11: comm syz.2.62: mark_inode_dirty error [ 33.080903][ T5144] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 33.080969][ T5144] EXT4-fs warning (device loop2): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 33.081058][ T5144] EXT4-fs (loop2): 1 orphan inode deleted [ 33.081537][ T5144] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.114498][ T5148] syzkaller0: entered promiscuous mode [ 33.114537][ T5148] syzkaller0: entered allmulticast mode [ 33.138714][ T15] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 33.140922][ T15] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 33.140945][ T15] EXT4-fs error (device loop2): ext4_release_dquot:7077: comm kworker/u8:1: Failed to release dquot type 0 [ 33.144103][ T5144] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.144713][ T5144] EXT4-fs error (device loop2): __ext4_get_inode_loc:4886: comm syz.2.62: Invalid inode table block 1 in block_group 0 [ 33.144730][ T5144] loop2: lost filesystem error report for type 5 error -117 [ 33.145128][ T5144] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 33.145141][ T5144] loop2: lost filesystem error report for type 5 error -117 [ 33.145218][ T5144] EXT4-fs error (device loop2): ext4_quota_off:7325: inode #3: comm syz.2.62: mark_inode_dirty error [ 33.145230][ T5144] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 33.175310][ T5144] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.62'. [ 33.195938][ T5152] loop2: detected capacity change from 0 to 512 [ 33.217407][ T5152] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #2: block 3: comm syz.2.65: lblock 0 mapped to illegal pblock 3 (length 1) [ 33.217451][ T5152] loop2: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 33.219264][ T5152] EXT4-fs warning (device loop2): dx_probe:791: inode #2: lblock 0: comm syz.2.65: error -EUCLEAN reading directory block [ 33.219416][ T5152] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 33.219919][ T5152] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.229862][ T5152] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #2: block 3: comm syz.2.65: lblock 0 mapped to illegal pblock 3 (length 1) [ 33.233482][ T5152] EXT4-fs warning (device loop2): dx_probe:791: inode #2: lblock 0: comm syz.2.65: error -EUCLEAN reading directory block [ 33.235093][ T5152] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #2: block 3: comm syz.2.65: lblock 0 mapped to illegal pblock 3 (length 1) [ 33.237284][ T5152] EXT4-fs warning (device loop2): dx_probe:791: inode #2: lblock 0: comm syz.2.65: error -EUCLEAN reading directory block [ 33.237864][ T5152] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #2: block 3: comm syz.2.65: lblock 0 mapped to illegal pblock 3 (length 1) [ 33.238058][ T5152] EXT4-fs warning (device loop2): dx_probe:791: inode #2: lblock 0: comm syz.2.65: error -EUCLEAN reading directory block [ 33.239132][ T5152] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #2: block 3: comm syz.2.65: lblock 0 mapped to illegal pblock 3 (length 1) [ 33.241058][ T5152] EXT4-fs warning (device loop2): dx_probe:791: inode #2: lblock 0: comm syz.2.65: error -EUCLEAN reading directory block [ 33.241402][ T5152] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #2: block 3: comm syz.2.65: lblock 0 mapped to illegal pblock 3 (length 1) [ 33.241578][ T5152] EXT4-fs warning (device loop2): dx_probe:791: inode #2: lblock 0: comm syz.2.65: error -EUCLEAN reading directory block [ 33.241831][ T5152] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #2: block 3: comm syz.2.65: lblock 0 mapped to illegal pblock 3 (length 1) [ 33.242043][ T5152] EXT4-fs warning (device loop2): dx_probe:791: inode #2: lblock 0: comm syz.2.65: error -EUCLEAN reading directory block [ 33.243149][ T5152] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #2: block 3: comm syz.2.65: lblock 0 mapped to illegal pblock 3 (length 1) [ 33.243465][ T5152] EXT4-fs warning (device loop2): dx_probe:791: inode #2: lblock 0: comm syz.2.65: error -EUCLEAN reading directory block [ 33.243780][ T5152] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #2: block 3: comm syz.2.65: lblock 0 mapped to illegal pblock 3 (length 1) [ 33.243947][ T5152] EXT4-fs warning (device loop2): dx_probe:791: inode #2: lblock 0: comm syz.2.65: error -EUCLEAN reading directory block [ 33.245343][ T5152] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #2: block 3: comm syz.2.65: lblock 0 mapped to illegal pblock 3 (length 1) [ 33.245591][ T5152] EXT4-fs warning (device loop2): dx_probe:791: inode #2: lblock 0: comm syz.2.65: error -EUCLEAN reading directory block [ 33.245905][ T5152] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #2: block 3: comm syz.2.65: lblock 0 mapped to illegal pblock 3 (length 1) [ 33.246076][ T5152] EXT4-fs warning (device loop2): dx_probe:791: inode #2: lblock 0: comm syz.2.65: error -EUCLEAN reading directory block [ 33.264806][ T4722] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.457875][ T5166] loop4: detected capacity change from 0 to 1024 [ 33.458451][ T5166] EXT4-fs: Ignoring removed orlov option [ 33.471271][ T5166] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.510783][ T4711] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.526788][ T5170] binder: 5169:5170 tried to acquire reference to desc 0, got 1 instead [ 33.527236][ T5170] binder: 5169:5170 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 33.527248][ T5170] binder: 5170 RLIMIT_NICE not set [ 33.527325][ T5170] binder: 5170 RLIMIT_NICE not set [ 33.527904][ T5170] binder: 5169:5170 got new transaction with bad transaction stack, transaction 31 has target 5169:5170 [ 33.527927][ T5170] binder: 5169:5170 transaction call to 5169:0 failed 32/29201/-71, code 0 size 0-0 line 3312 [ 33.533941][ T9] binder: release 5169:5170 transaction 31 out, still active [ 33.533958][ T9] binder: undelivered TRANSACTION_COMPLETE [ 33.533970][ T9] binder: undelivered TRANSACTION_ERROR: 29201 [ 33.540488][ T4801] binder: release 5169:5170 transaction 31 in, still active [ 33.540521][ T4801] binder: send failed reply for transaction 31, target dead [ 33.898018][ T5179] binder: 5177:5179 tried to acquire reference to desc 0, got 1 instead [ 33.898754][ T5179] binder: 5177:5179 BC_FREE_BUFFER matched unreturned or currently freeing buffer at offset 0 [ 33.899086][ T9] binder: release 5177:5179 transaction 37 out, still active [ 34.610726][ T5196] vlan2: entered promiscuous mode [ 34.611729][ T5196] hsr0: entered promiscuous mode [ 34.613004][ T5196] vlan2: entered allmulticast mode [ 34.614803][ T5196] hsr0: entered allmulticast mode [ 34.615835][ T5196] hsr_slave_0: entered allmulticast mode [ 34.615855][ T5196] hsr_slave_1: entered allmulticast mode [ 34.623377][ T5196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.80'. [ 34.655255][ T5198] smc: net device lo applied user defined pnetid SYZ0 [ 34.722472][ T5202] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality. [ 34.799685][ T5202] socket: no more sockets [ 34.809280][ T4716] Bluetooth: hci1: hardware error 0x6c [ 35.132482][ T5220] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 35.134073][ T5220] batadv_slave_1: entered promiscuous mode [ 36.969648][ T4716] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 37.140469][ T5243] loop3: detected capacity change from 0 to 512 [ 37.248541][ T5243] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 37.248567][ T5243] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 37.506328][ T5243] EXT4-fs error (device loop3): __ext4_iget:5533: inode #11: block 2: comm syz.3.94: invalid block [ 37.506414][ T5243] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 37.509181][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 37.509195][ C0] EXT4-fs (loop3): initial error at time 37: __ext4_iget:5533: inode 11: block 2 [ 37.509220][ C0] EXT4-fs (loop3): last error at time 37: __ext4_iget:5533: inode 11: block 2 [ 37.521531][ T5243] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.94: couldn't read orphan inode 11 (err -117) [ 37.521595][ T5243] loop3: lost filesystem error report for type 5 error -117 [ 37.535090][ T5243] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.997564][ T5250] loop1: detected capacity change from 0 to 1024 [ 38.072423][ T5250] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 38.072481][ T5250] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (52584!=20869) [ 38.074342][ T5250] JBD2: no valid journal superblock found [ 38.084213][ T5250] EXT4-fs (loop1): Could not load journal inode [ 38.091387][ T4719] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.112307][ T5250] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 38.112401][ T5250] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 39.097970][ T5263] loop1: detected capacity change from 0 to 512 [ 39.170883][ T5263] ext2: Unknown parameter 'defcontext' [ 39.182135][ T5259] syzkaller0: entered promiscuous mode [ 39.268358][ T5259] syzkaller0: entered allmulticast mode [ 39.445394][ T5271] loop1: detected capacity change from 0 to 512 [ 41.055384][ T5271] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.378045][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.387438][ T5281] netlink: 4 bytes leftover after parsing attributes in process `syz.4.105'. [ 41.430323][ T5286] netlink: 12 bytes leftover after parsing attributes in process `syz.2.107'. [ 41.682273][ T5288] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 41.682308][ T5288] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 41.690313][ T5288] team0: Port device wlan0 added [ 41.711268][ T5293] syzkaller0: entered promiscuous mode [ 41.712287][ T5293] syzkaller0: entered allmulticast mode [ 41.716240][ T5293] tipc: Enabled bearer , priority 0 [ 41.720081][ T5291] tipc: Resetting bearer [ 41.749344][ T5291] tipc: Disabling bearer [ 41.834809][ T5303] syzkaller0: entered promiscuous mode [ 41.834842][ T5303] syzkaller0: entered allmulticast mode [ 42.115618][ T5310] syzkaller0: entered promiscuous mode [ 42.116804][ T5310] syzkaller0: entered allmulticast mode [ 42.135853][ T5313] loop1: detected capacity change from 0 to 128 [ 42.145199][ T5313] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 42.167747][ T5313] fscrypt (loop1, inode 12): Unsupported encryption flags (0x08) [ 42.181531][ T4712] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 42.215899][ T5316] binder: 5315:5316 tried to acquire reference to desc 0, got 1 instead [ 42.216264][ T5316] binder: 5315:5316 unknown command 0 [ 42.216273][ T5316] binder: 5315:5316 ioctl c0306201 200001c0 returned -22 [ 42.216528][ T5316] binder: tried to use weak ref as strong ref [ 42.216537][ T5316] binder: 5315:5316 Acquire 1 refcount change on invalid ref 1 ret -22 [ 42.222847][ T4801] binder_debug: 2 callbacks suppressed [ 42.222859][ T4801] binder: send failed reply for transaction 42 to 5315:5316 [ 42.223054][ T4801] binder: undelivered TRANSACTION_COMPLETE [ 42.223064][ T4801] binder: undelivered TRANSACTION_ERROR: 29189 [ 42.248238][ T5320] netlink: 12 bytes leftover after parsing attributes in process `syz.1.119'. [ 42.254656][ T5320] vlan2: entered allmulticast mode [ 42.254690][ T5320] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 42.436682][ T5324] loop3: detected capacity change from 0 to 512 [ 43.329119][ T5324] EXT4-fs (loop3): too many log groups per flexible block group [ 43.329261][ T5324] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 43.329371][ T5324] EXT4-fs (loop3): mount failed [ 44.274426][ T5349] syzkaller0: entered promiscuous mode [ 44.279499][ T5349] syzkaller0: entered allmulticast mode [ 44.316564][ T5360] syzkaller0: entered promiscuous mode [ 44.317821][ T5360] syzkaller0: entered allmulticast mode [ 44.967893][ T5372] binder: 5370:5372 tried to acquire reference to desc 0, got 1 instead [ 44.970437][ T5372] binder: 5370:5372 got transaction with invalid data ptr [ 44.973511][ T5372] binder: 5370:5372 transaction async to 5370:0 failed 53/29201/-14, code 0 size 0-24 line 3511 [ 44.976563][ T4384] binder: undelivered TRANSACTION_COMPLETE [ 44.983569][ T4384] binder: undelivered transaction 54, process died. [ 45.391060][ T5380] binder: 5379:5380 tried to acquire reference to desc 0, got 1 instead [ 45.393804][ T5380] binder: 5379:5380 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 45.396388][ T5380] binder: 5380 RLIMIT_NICE not set [ 45.397617][ T5380] binder: undelivered transaction 59, fd fixups failed [ 45.399270][ T5380] binder: 5379:5380 async transaction 59 fd fixups failed 29201/-12, line 5098 [ 45.401260][ T5380] binder: undelivered transaction 60, fd fixups failed [ 45.402696][ T5380] binder: 5379:5380 async transaction 60 fd fixups failed 29201/-12, line 5098 [ 45.452925][ T5382] syzkaller0: entered promiscuous mode [ 45.452965][ T5382] syzkaller0: entered allmulticast mode [ 45.728178][ T5389] kernel profiling enabled (shift: 6) [ 46.651253][ T5393] syzkaller0: entered promiscuous mode [ 46.651290][ T5393] syzkaller0: entered allmulticast mode [ 46.657662][ T5393] 0: reclassify loop, rule prio 0, protocol 800 [ 48.936524][ T5423] binder: 5422:5423 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 48.937888][ T5423] binder: 5422:5423 got transaction to invalid handle, 1 [ 48.937916][ T5423] binder_debug: 2 callbacks suppressed [ 48.937928][ T5423] binder: 5422:5423 cannot find target node [ 48.937950][ T5423] binder: 5422:5423 transaction call to 0:0 failed 64/29201/-22, code 0 size 72-0 line 3252 [ 48.973115][ T869] binder: undelivered TRANSACTION_ERROR: 29201 [ 49.269355][ T4716] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 49.269416][ T4716] Bluetooth: hci3: Injecting HCI hardware error event [ 49.269975][ T4720] Bluetooth: hci3: hardware error 0x00 [ 49.524791][ T5435] binder: 5434:5435 tried to acquire reference to desc 0, got 1 instead [ 49.526698][ T5435] binder: 5434:5435 got transaction with invalid data ptr [ 49.526991][ T5435] binder: 5434:5435 transaction call to 5434:0 failed 69/29201/-14, code 0 size 0-24 line 3511 [ 49.873699][ T5435] syz.0.157 (5435): drop_caches: 2 [ 49.885236][ T9] binder: undelivered TRANSACTION_ERROR: 29201 [ 49.885278][ T9] binder: release 5434:5436 transaction 70 out, still active [ 49.885296][ T9] binder: undelivered TRANSACTION_COMPLETE [ 49.896816][ T9] binder: send failed reply for transaction 70, target dead [ 50.692068][ T5458] syzkaller0: entered promiscuous mode [ 50.693183][ T5458] syzkaller0: entered allmulticast mode [ 50.788277][ T5462] netlink: 20 bytes leftover after parsing attributes in process `syz.4.166'. [ 50.790833][ T5462] netlink: 144 bytes leftover after parsing attributes in process `syz.4.166'. [ 50.791367][ T5462] netlink: 144 bytes leftover after parsing attributes in process `syz.4.166'. [ 50.792295][ T5462] syzkaller0: entered promiscuous mode [ 50.792307][ T5462] syzkaller0: entered allmulticast mode [ 50.893866][ T5466] syzkaller0: entered promiscuous mode [ 50.894974][ T5466] syzkaller0: entered allmulticast mode [ 51.449123][ T4720] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 51.944438][ T5475] pci 0000:00:01.0: [1af4:1005] type 00 class 0x00ff00 conventional PCI endpoint [ 51.976604][ T5475] pci 0000:00:01.0: BAR 0 [io 0x1000-0x101f] [ 51.994703][ T5475] pci 0000:00:01.0: BAR 1 [mem 0x10110080-0x101100bf] [ 52.008255][ T5475] pci 0000:00:01.0: BAR 1 [mem 0x10110080-0x101100bf]: assigned [ 52.010604][ T5475] pci 0000:00:01.0: BAR 0 [io 0x1000-0x101f]: assigned [ 52.025718][ T5475] virtio-pci 0000:00:01.0: virtio_pci: leaving for legacy driver [ 52.506920][ T5487] syzkaller0: entered promiscuous mode [ 52.506961][ T5487] syzkaller0: entered allmulticast mode [ 52.531056][ T5456] Set syz1 is full, maxelem 65536 reached [ 53.808110][ T5501] syzkaller0: entered promiscuous mode [ 53.809561][ T5501] syzkaller0: entered allmulticast mode [ 53.819336][ T5503] binder: 5502:5503 tried to acquire reference to desc 0, got 1 instead [ 53.833518][ T869] binder: release 5502:5503 transaction 75 out, still active [ 53.833560][ T869] binder: undelivered TRANSACTION_COMPLETE [ 53.867259][ T5505] syzkaller0: entered promiscuous mode [ 53.867300][ T5505] syzkaller0: entered allmulticast mode [ 56.221041][ T5532] loop3: detected capacity change from 0 to 128 [ 56.529907][ T5534] syzkaller0: entered promiscuous mode [ 56.531401][ T5534] syzkaller0: entered allmulticast mode [ 57.555089][ T5560] loop1: detected capacity change from 0 to 8 [ 57.558660][ T5560] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 57.560260][ T5560] unable to read xattr id index table [ 57.575068][ T5560] SQUASHFS error: zlib decompression failed, data probably corrupt [ 57.580641][ T5560] SQUASHFS error: Failed to read block 0x9b: -5 [ 57.580655][ T5560] SQUASHFS error: Unable to read metadata cache entry [99] [ 57.580664][ T5560] SQUASHFS error: Unable to read inode 0x127 [ 57.833676][ T5567] loop0: detected capacity change from 0 to 512 [ 57.964659][ T5567] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 58.404135][ T5567] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c840e018, mo2=0002] [ 58.404349][ T5567] EXT4-fs (loop0): orphan cleanup on readonly fs [ 58.406981][ T5567] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.198: bg 0: block 361: padding at end of block bitmap is not set [ 58.406999][ T5567] loop0: lost filesystem error report for type 5 error -117 [ 58.408639][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 58.408655][ C0] EXT4-fs (loop0): initial error at time 58: ext4_validate_block_bitmap:441 [ 58.408670][ C0] EXT4-fs (loop0): last error at time 58: ext4_validate_block_bitmap:441 [ 58.412948][ T5567] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 58.412972][ T5567] loop0: lost filesystem error report for type 5 error -117 [ 58.413092][ T5567] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #11: comm syz.0.198: attempt to clear invalid blocks 33619980 len 1 [ 58.413107][ T5567] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 58.413847][ T5567] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.198: invalid indirect mapped block 1811939328 (level 0) [ 58.413870][ T5567] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 58.413957][ T5567] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.198: invalid indirect mapped block 2185560079 (level 1) [ 58.413970][ T5567] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 58.414283][ T5567] EXT4-fs (loop0): 1 truncate cleaned up [ 58.414899][ T5567] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 58.800783][ T4717] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 59.233186][ T5589] loop0: detected capacity change from 0 to 512 [ 59.237501][ T5589] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 59.278958][ T5589] EXT4-fs error (device loop0): __ext4_iget:5533: inode #11: block 2: comm syz.0.203: invalid block [ 59.278996][ T5589] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 59.280458][ T5589] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.203: couldn't read orphan inode 11 (err -117) [ 59.280526][ T5589] loop0: lost filesystem error report for type 5 error -117 [ 59.288287][ T5589] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.726766][ T5586] loop4: detected capacity change from 0 to 4096 [ 59.727071][ T5586] EXT4-fs: Ignoring removed nobh option [ 59.742701][ T5586] EXT4-fs (loop4): Test dummy encryption mode enabled [ 59.835471][ T5586] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.235837][ T4716] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 60.240076][ T4716] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 60.242236][ T4716] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 60.247832][ T4716] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 60.250672][ T4716] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 60.266755][ T4711] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.367634][ T5607] syzkaller0: entered promiscuous mode [ 60.367673][ T5607] syzkaller0: entered allmulticast mode [ 60.450777][ T4717] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.995596][ T750] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.225240][ T5625] loop4: detected capacity change from 0 to 512 [ 61.307471][ T5625] EXT4-fs error (device loop4): __ext4_fill_super:5600: inode #2: comm syz.4.210: inode has both inline data and extents flags [ 61.307567][ T5625] loop4: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 61.310322][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 61.310336][ C0] EXT4-fs (loop4): initial error at time 61: __ext4_fill_super:5600: inode 2 [ 61.310354][ C0] EXT4-fs (loop4): last error at time 61: __ext4_fill_super:5600: inode 2 [ 61.321985][ T5625] EXT4-fs (loop4): get root inode failed [ 61.322032][ T5625] EXT4-fs (loop4): mount failed [ 62.529783][ T4716] Bluetooth: hci5: command tx timeout [ 62.926167][ T5602] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.926265][ T5602] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.926638][ T5602] bridge_slave_0: entered allmulticast mode [ 62.927285][ T5602] bridge_slave_0: entered promiscuous mode [ 62.928450][ T5602] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.928756][ T5602] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.929072][ T5602] bridge_slave_1: entered allmulticast mode [ 62.929722][ T5602] bridge_slave_1: entered promiscuous mode [ 63.046055][ T5602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.046957][ T5602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.054616][ T5602] team0: Port device team_slave_0 added [ 63.055347][ T5602] team0: Port device team_slave_1 added [ 63.580586][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.580618][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.580650][ T5602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.582146][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.582166][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.582188][ T5602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.954138][ T5653] loop4: detected capacity change from 0 to 1024 [ 63.964884][ T750] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.992629][ T5653] journal_path: Lookup failure for './file0' [ 63.994124][ T5653] EXT4-fs: error: could not find journal device path [ 64.092767][ T5602] hsr_slave_0: entered promiscuous mode [ 64.093099][ T5602] hsr_slave_1: entered promiscuous mode [ 64.093399][ T5602] debugfs: 'hsr0' already exists in 'hsr' [ 64.093415][ T5602] Cannot create hsr debugfs directory [ 64.109235][ T750] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.179779][ T5602] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 64.182541][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 64.184320][ T5602] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 64.188099][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 64.188449][ T5602] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 64.193056][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 64.200010][ T750] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.202222][ T5602] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 64.205258][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 64.494351][ T1535] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.495503][ T1535] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.498367][ T11] cfg80211: failed to load regulatory.db [ 64.515443][ T5671] loop1: detected capacity change from 0 to 512 [ 64.517174][ T5671] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 64.556478][ T5602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.566462][ T5671] EXT4-fs error (device loop1): __ext4_iget:5533: inode #11: block 2: comm syz.1.219: invalid block [ 64.566511][ T5671] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 64.568619][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 64.568634][ C1] EXT4-fs (loop1): initial error at time 64: __ext4_iget:5533: inode 11: block 2 [ 64.568656][ C1] EXT4-fs (loop1): last error at time 64: __ext4_iget:5533: inode 11: block 2 [ 64.568893][ T4716] Bluetooth: hci5: command tx timeout [ 64.577543][ T5671] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.219: couldn't read orphan inode 11 (err -117) [ 64.577565][ T5671] loop1: lost filesystem error report for type 5 error -117 [ 64.584292][ T5671] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.597821][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.624021][ T5677] syzkaller0: entered promiscuous mode [ 64.624062][ T5677] syzkaller0: entered allmulticast mode [ 64.628768][ T5602] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.638803][ T94] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.638862][ T94] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.645874][ T94] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.645939][ T94] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.652458][ T750] bridge_slave_1: left allmulticast mode [ 64.652510][ T750] bridge_slave_1: left promiscuous mode [ 64.653096][ T750] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.659974][ T750] bridge_slave_0: left allmulticast mode [ 64.661400][ T750] bridge_slave_0: left promiscuous mode [ 64.662518][ T750] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.748706][ T750] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 64.771631][ T750] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 64.809754][ T750] bond0 (unregistering): Released all slaves [ 64.825318][ T5685] tipc: Started in network mode [ 64.825359][ T5685] tipc: Node identity 7a86cb70a96a, cluster identity 4711 [ 64.825456][ T5685] tipc: Enabled bearer , priority 0 [ 64.831891][ T5681] syzkaller0: entered promiscuous mode [ 64.832998][ T5681] syzkaller0: entered allmulticast mode [ 64.850908][ T5681] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 64.881556][ T5602] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.916311][ T5692] loop3: detected capacity change from 0 to 1024 [ 64.916642][ T5692] ext4: Unknown parameter 'uid<00000000000000000000' [ 65.039128][ T4798] IPVS: starting estimator thread 0... [ 65.209911][ T5683] tipc: Resetting bearer [ 65.257488][ T5680] tipc: Resetting bearer [ 65.263436][ T5698] IPVS: using max 60 ests per chain, 144000 per kthread [ 65.271860][ T5680] tipc: Disabling bearer [ 65.302891][ T750] team0: Port device wlan0 removed [ 65.325399][ T4401] 8021q: adding VLAN 0 to HW filter on device eth0 [ 65.329811][ T5699] tc action pedit 'at' offset 5 out of bounds [ 65.329845][ T5699] tc action pedit 'at' offset 5 out of bounds [ 65.329865][ T5699] tc action pedit 'at' offset 5 out of bounds [ 65.329872][ T5699] tc action pedit 'at' offset 5 out of bounds [ 65.329878][ T5699] tc action pedit 'at' offset 5 out of bounds [ 65.329884][ T5699] tc action pedit 'at' offset 5 out of bounds [ 65.329889][ T5699] tc action pedit 'at' offset 5 out of bounds [ 65.329894][ T5699] tc action pedit 'at' offset 5 out of bounds [ 65.329900][ T5699] tc action pedit 'at' offset 5 out of bounds [ 65.329905][ T5699] tc action pedit 'at' offset 5 out of bounds [ 65.329919][ T5699] 0: reclassify loop, rule prio 0, protocol 800 [ 65.390360][ T750] hsr_slave_0: left promiscuous mode [ 65.392936][ T750] hsr_slave_1: left promiscuous mode [ 65.393287][ T750] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.393315][ T750] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.397323][ T750] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.397335][ T750] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.407785][ T750] veth1_macvtap: left promiscuous mode [ 65.409302][ T750] veth0_macvtap: left promiscuous mode [ 65.410522][ T750] veth1_vlan: left promiscuous mode [ 65.411905][ T750] veth0_vlan: left promiscuous mode [ 65.488924][ T5729] loop0: detected capacity change from 0 to 512 [ 65.502866][ T5729] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.549825][ T4717] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.597313][ T750] team0 (unregistering): Port device team_slave_1 removed [ 65.603583][ T750] team0 (unregistering): Port device team_slave_0 removed [ 65.677142][ T5748] loop1: detected capacity change from 0 to 256 [ 65.788875][ T4401] 8021q: adding VLAN 0 to HW filter on device eth1 [ 65.809344][ T5602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.838616][ T4716] Bluetooth: hci5: command tx timeout [ 68.554952][ T4401] 8021q: adding VLAN 0 to HW filter on device eth2 [ 68.571932][ T5791] syz_tun: entered allmulticast mode [ 68.900771][ T4716] Bluetooth: hci5: command tx timeout [ 68.949668][ T5602] veth0_vlan: entered promiscuous mode [ 68.964479][ T5602] veth1_vlan: entered promiscuous mode [ 69.002622][ T5602] veth0_macvtap: entered promiscuous mode [ 69.005812][ T5602] veth1_macvtap: entered promiscuous mode [ 69.015187][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.024876][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.038884][ T5236] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.038990][ T5236] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.039018][ T5236] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.039034][ T5236] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.093198][ T5783] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.093234][ T5783] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.114022][ T5783] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.114058][ T5783] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.177548][ T4401] 8021q: adding VLAN 0 to HW filter on device eth3 [ 69.267572][ T5838] netlink: 4 bytes leftover after parsing attributes in process `syz.1.241'. [ 70.666538][ T5847] warning: `syz.0.242' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 71.735509][ T5867] loop5: detected capacity change from 0 to 512 [ 71.748248][ T5871] loop0: detected capacity change from 0 to 512 [ 71.761478][ T5871] EXT4-fs: Ignoring removed orlov option [ 72.131072][ T5882] loop3: detected capacity change from 0 to 512 [ 72.138791][ T5882] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 72.158785][ T5882] EXT4-fs error (device loop3): __ext4_iget:5533: inode #11: block 2: comm syz.3.251: invalid block [ 72.158821][ T5882] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 72.159035][ T5882] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.251: couldn't read orphan inode 11 (err -117) [ 72.159056][ T5882] loop3: lost filesystem error report for type 5 error -117 [ 72.159635][ T5882] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.169977][ T5871] EXT4-fs (loop0): corrupt root inode, run e2fsck [ 72.170053][ T5871] EXT4-fs (loop0): mount failed [ 72.507753][ T5894] netlink: 4 bytes leftover after parsing attributes in process `syz.1.252'. [ 72.507824][ T5894] netlink: set zone limit has 8 unknown bytes [ 72.554087][ T5896] loop4: detected capacity change from 0 to 512 [ 72.556010][ T5896] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 72.568076][ T5896] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 72.660513][ T4719] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.153380][ T5909] loop1: detected capacity change from 0 to 8 [ 73.193902][ T5911] loop3: detected capacity change from 0 to 512 [ 73.194227][ T5911] EXT4-fs: Ignoring removed mblk_io_submit option [ 73.364531][ T5911] EXT4-fs: Mount option(s) incompatible with ext2 [ 74.004389][ T4711] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 74.022313][ T5913] loop1: detected capacity change from 0 to 128 [ 74.159966][ T5913] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 74.487674][ T5920] configfs-gadget.g1 gadget.0: HOST MAC 0e:32:3a:8a:0b:5f [ 74.489458][ T5920] configfs-gadget.g1 gadget.0: MAC 82:69:35:9a:71:ff [ 74.491607][ T5920] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 74.494036][ T5920] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 74.496434][ T5920] udc dummy_udc.0: failed to start g1: -22 [ 74.498431][ T5920] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 74.503376][ T5920] UDC core: g1: couldn't find an available UDC or it's busy [ 74.554823][ T4712] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 74.654244][ T5930] process 'syz.3.261' launched './file0' with NULL argv: empty string added [ 74.687407][ T5930] usb3503 0-0008: unknown mode is requested [ 74.687596][ T5930] usb3503 0-0008: usb3503_probe: probed in standby mode [ 74.689982][ T5930] i2c i2c-0: new_device: Instantiated device usb3503 at 0x08 [ 74.702219][ T5930] i2c i2c-0: delete_device: Deleting device usb3503 at 0x08 [ 74.764046][ T5927] 0: reclassify loop, rule prio 0, protocol 700 [ 75.235554][ T5948] loop1: detected capacity change from 0 to 512 [ 75.239092][ T5948] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 75.245404][ T5948] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 75.246911][ T5948] EXT4-fs (loop1): 1 truncate cleaned up [ 75.247379][ T5948] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.870879][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.955629][ T5980] syz.4.268 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 76.201040][ T5987] syzkaller0: entered promiscuous mode [ 76.202472][ T5987] syzkaller0: entered allmulticast mode [ 76.212798][ T5987] simple: basic_1 [ 76.212832][ T5987] simple: basic_2 [ 76.212854][ T5987] simple: basic_3 [ 76.212860][ T5987] simple: basic_4 [ 76.212865][ T5987] simple: basic_5 [ 76.212870][ T5987] simple: basic_6 [ 76.212874][ T5987] simple: basic_7 [ 76.212879][ T5987] simple: basic_8 [ 76.212883][ T5987] simple: basic_9 [ 76.212887][ T5987] simple: basic_10 [ 76.212891][ T5987] simple: basic_11 [ 76.212896][ T5987] simple: basic_12 [ 76.212900][ T5987] simple: basic_13 [ 76.212904][ T5987] simple: basic_14 [ 76.212908][ T5987] simple: basic_15 [ 76.212912][ T5987] simple: basic_16 [ 76.212916][ T5987] simple: basic_17 [ 76.212922][ T5987] 0: reclassify loop, rule prio 0, protocol 800 [ 76.599972][ T6001] syz.0.272 (6001): drop_caches: 2 [ 76.783454][ T6005] loop4: detected capacity change from 0 to 128 [ 76.804801][ T6005] EXT4-fs (loop4): Test dummy encryption mode enabled [ 77.549147][ T6005] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 77.554690][ T6005] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 78.392821][ T6028] netlink: 20 bytes leftover after parsing attributes in process `syz.0.278'. [ 78.772702][ T4711] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 79.529779][ T6046] ucsi_ccg 0-0008: ucsi_ccg_init failed - -110 [ 79.531190][ T6046] ucsi_ccg 0-0008: probe with driver ucsi_ccg failed with error -110 [ 79.534393][ T6046] i2c i2c-0: new_device: Instantiated device ccgx-ucsi at 0x08 [ 79.562234][ T6049] loop0: detected capacity change from 0 to 8 [ 79.752705][ T6053] SQUASHFS error: Failed to read block 0x4de: -5 [ 79.753218][ T6053] SQUASHFS error: Failed to read block 0x4de: -5 [ 79.753416][ T6053] SQUASHFS error: Failed to read block 0x4de: -5 [ 79.753624][ T6053] SQUASHFS error: Failed to read block 0x4de: -5 [ 79.753774][ T6053] SQUASHFS error: Failed to read block 0x4de: -5 [ 79.754076][ T6053] SQUASHFS error: Failed to read block 0x4de: -5 [ 79.754276][ T6053] SQUASHFS error: Failed to read block 0x4de: -5 [ 79.754451][ T6053] SQUASHFS error: Failed to read block 0x4de: -5 [ 79.754594][ T6053] SQUASHFS error: Failed to read block 0x4de: -5 [ 79.754806][ T6053] SQUASHFS error: Failed to read block 0x4de: -5 [ 79.754972][ T6053] SQUASHFS error: Failed to read block 0x4de: -5 [ 79.755302][ T6053] SQUASHFS error: Failed to read block 0x4de: -5 [ 79.755456][ T6053] SQUASHFS error: Failed to read block 0x4de: -5 [ 79.755600][ T6053] SQUASHFS error: Failed to read block 0x4de: -5 [ 79.755737][ T6053] SQUASHFS error: Failed to read block 0x4de: -5 [ 79.755897][ T6053] SQUASHFS error: Failed to read block 0x4de: -5 [ 79.756216][ T6053] SQUASHFS error: Failed to read block 0x4de: -5 [ 79.756463][ T6053] SQUASHFS error: Failed to read block 0x4de: -5 [ 79.756628][ T6053] SQUASHFS error: Failed to read block 0x4de: -5 [ 79.756832][ T6053] SQUASHFS error: Failed to read block 0x4de: -5 [ 79.756980][ T6053] SQUASHFS error: Failed to read block 0x4de: -5 [ 79.757344][ T6053] SQUASHFS error: Failed to read block 0x4de: -5 [ 79.757521][ T6053] SQUASHFS error: Failed to read block 0x4de: -5 [ 79.757712][ T6053] SQUASHFS error: Failed to read block 0x4de: -5 [ 79.757852][ T6053] SQUASHFS error: Failed to read block 0x4de: -5 [ 79.758052][ T6053] SQUASHFS error: Failed to read block 0x4de: -5 [ 79.758390][ T6053] SQUASHFS error: Failed to read block 0x4de: -5 [ 79.758701][ T6053] SQUASHFS error: Failed to read block 0x4de: -5 [ 79.758867][ T6053] SQUASHFS error: Failed to read block 0x4de: -5 [ 79.759055][ T6053] SQUASHFS error: Failed to read block 0x4de: -5 [ 79.759357][ T6053] SQUASHFS error: Failed to read block 0x4de: -5 [ 79.759581][ T6053] SQUASHFS error: Failed to read block 0x4de: -5 [ 79.759730][ T6053] SQUASHFS error: Failed to read block 0x4de: -5 [ 80.221936][ T6073] loop3: detected capacity change from 0 to 8 [ 80.605543][ T6078] loop5: detected capacity change from 0 to 1024 [ 80.605841][ T6078] EXT4-fs: Ignoring removed bh option [ 81.170689][ T6078] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 81.450041][ T6076] loop1: detected capacity change from 0 to 8192 [ 82.095282][ T6078] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce028, mo2=0000] [ 82.095351][ T6078] System zones: 0-1, 3-12 [ 82.413814][ T6091] capability: warning: `syz.0.291' uses deprecated v2 capabilities in a way that may be insecure [ 82.414265][ T6091] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 82.516793][ T6076] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 83.167607][ T6078] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #3: block 1: comm syz.5.287: lblock 1 mapped to illegal pblock 1 (length 1) [ 83.167654][ T6078] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 83.168524][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 83.168550][ C0] EXT4-fs (loop5): initial error at time 83: ext4_map_blocks:833: inode 3: block 1 [ 83.168595][ C0] EXT4-fs (loop5): last error at time 83: ext4_map_blocks:833: inode 3: block 1 [ 83.168800][ T6078] EXT4-fs (loop5): Remounting filesystem read-only [ 83.170340][ T6078] Quota error (device loop5): write_blk: dquota write failed [ 83.170782][ T6078] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 83.170831][ T6078] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 83.170905][ T6078] EXT4-fs (loop5): 1 orphan inode deleted [ 83.171361][ T6078] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.655743][ T5602] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.761102][ T6106] SQUASHFS error: Failed to read block 0x6e6: -5 [ 83.761135][ T6106] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 83.761148][ T6106] SQUASHFS error: Unable to read directory block [6e4:0] [ 84.222118][ T6124] loop5: detected capacity change from 0 to 4096 [ 84.223661][ T6124] EXT4-fs: inline encryption not supported [ 84.225160][ T6124] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 84.226895][ T6124] EXT4-fs (loop5): Test dummy encryption mode enabled [ 84.230401][ T6124] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 84.230466][ T6124] System zones: 0-5 [ 84.237794][ T6124] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.400465][ T6129] syzkaller0: entered promiscuous mode [ 84.401653][ T6129] syzkaller0: entered allmulticast mode [ 84.500328][ T5602] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.840242][ T6149] syzkaller0: entered promiscuous mode [ 84.840281][ T6149] syzkaller0: entered allmulticast mode [ 85.158650][ T6162] loop0: detected capacity change from 0 to 4096 [ 85.167549][ T6162] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 85.167586][ T6162] EXT4-fs (loop0): Test dummy encryption mode enabled [ 85.181357][ T9] hid-generic 03FF:FFFFFFFD:FFFFFFF7.0001: unknown main item tag 0x1 [ 85.187008][ T6162] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.195478][ T6162] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 85.224159][ T9] hid-generic 03FF:FFFFFFFD:FFFFFFF7.0001: reserved main item tag 0xd [ 85.224201][ T9] hid-generic 03FF:FFFFFFFD:FFFFFFF7.0001: item fetching failed at offset 23/30 [ 85.247987][ T9] hid-generic 03FF:FFFFFFFD:FFFFFFF7.0001: probe with driver hid-generic failed with error -22 [ 85.362184][ T6171] loop3: detected capacity change from 0 to 128 [ 85.372314][ T6171] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 85.876711][ T4717] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.795791][ T4719] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 87.602117][ T6223] syzkaller0: entered promiscuous mode [ 87.603374][ T6223] syzkaller0: entered allmulticast mode [ 87.687890][ T6228] netlink: 'syz.1.317': attribute type 34 has an invalid length. [ 87.690167][ T6228] netlink: 8 bytes leftover after parsing attributes in process `syz.1.317'. [ 87.692002][ T6228] bond0: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 88.415699][ T6250] Bluetooth: MGMT ver 1.23 [ 89.672207][ T6261] loop3: detected capacity change from 0 to 8 [ 90.170596][ T6267] SQUASHFS error: Failed to read block 0x4de: -5 [ 90.170664][ T6267] SQUASHFS error: Failed to read block 0x4de: -5 [ 90.170708][ T6267] SQUASHFS error: Failed to read block 0x4de: -5 [ 90.170779][ T6267] SQUASHFS error: Failed to read block 0x4de: -5 [ 90.170806][ T6267] SQUASHFS error: Failed to read block 0x4de: -5 [ 90.170839][ T6267] SQUASHFS error: Failed to read block 0x4de: -5 [ 90.170864][ T6267] SQUASHFS error: Failed to read block 0x4de: -5 [ 90.170895][ T6267] SQUASHFS error: Failed to read block 0x4de: -5 [ 90.170921][ T6267] SQUASHFS error: Failed to read block 0x4de: -5 [ 90.170952][ T6267] SQUASHFS error: Failed to read block 0x4de: -5 [ 90.170976][ T6267] SQUASHFS error: Failed to read block 0x4de: -5 [ 90.171006][ T6267] SQUASHFS error: Failed to read block 0x4de: -5 [ 90.171031][ T6267] SQUASHFS error: Failed to read block 0x4de: -5 [ 90.171061][ T6267] SQUASHFS error: Failed to read block 0x4de: -5 [ 90.171086][ T6267] SQUASHFS error: Failed to read block 0x4de: -5 [ 90.171116][ T6267] SQUASHFS error: Failed to read block 0x4de: -5 [ 90.171141][ T6267] SQUASHFS error: Failed to read block 0x4de: -5 [ 90.171176][ T6267] SQUASHFS error: Failed to read block 0x4de: -5 [ 90.171201][ T6267] SQUASHFS error: Failed to read block 0x4de: -5 [ 90.171232][ T6267] SQUASHFS error: Failed to read block 0x4de: -5 [ 90.171257][ T6267] SQUASHFS error: Failed to read block 0x4de: -5 [ 90.171288][ T6267] SQUASHFS error: Failed to read block 0x4de: -5 [ 90.171312][ T6267] SQUASHFS error: Failed to read block 0x4de: -5 [ 90.171343][ T6267] SQUASHFS error: Failed to read block 0x4de: -5 [ 90.171368][ T6267] SQUASHFS error: Failed to read block 0x4de: -5 [ 90.171398][ T6267] SQUASHFS error: Failed to read block 0x4de: -5 [ 90.171422][ T6267] SQUASHFS error: Failed to read block 0x4de: -5 [ 90.171452][ T6267] SQUASHFS error: Failed to read block 0x4de: -5 [ 90.171478][ T6267] SQUASHFS error: Failed to read block 0x4de: -5 [ 90.171514][ T6267] SQUASHFS error: Failed to read block 0x4de: -5 [ 90.171538][ T6267] SQUASHFS error: Failed to read block 0x4de: -5 [ 90.171572][ T6267] SQUASHFS error: Failed to read block 0x4de: -5 [ 90.171596][ T6267] SQUASHFS error: Failed to read block 0x4de: -5 [ 90.677128][ T6272] syzkaller0: entered promiscuous mode [ 90.677169][ T6272] syzkaller0: entered allmulticast mode [ 91.080568][ T6269] loop4: detected capacity change from 0 to 512 [ 91.343431][ T6269] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.455386][ T6280] loop5: detected capacity change from 0 to 8192 [ 91.525229][ T6280] loop5: p2 p3 p4 [ 91.526990][ T6280] loop5: p2 size 64053 extends beyond EOD, truncated [ 91.532686][ T6280] loop5: p3 start 65280 is beyond EOD, truncated [ 91.532763][ T6280] loop5: p4 size 50331904 extends beyond EOD, truncated [ 91.817709][ T4711] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.242049][ T4704] udevd[4704]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 92.244008][ T4703] udevd[4703]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 92.920939][ T26] IPVS: starting estimator thread 0... [ 93.284287][ T6305] IPVS: using max 44 ests per chain, 105600 per kthread [ 93.966181][ T6321] loop5: detected capacity change from 0 to 128 [ 94.064624][ T6321] FAT-fs (loop5): data area starts beyond volume (36 > 6) [ 94.064661][ T6321] FAT-fs (loop5): Can't find a valid FAT filesystem [ 95.055218][ T6316] syzkaller0: entered promiscuous mode [ 95.055269][ T6316] syzkaller0: entered allmulticast mode [ 95.064274][ T6316] tipc: Enabled bearer , priority 0 [ 95.243452][ T6316] tipc: Resetting bearer [ 95.256683][ T6315] tipc: Resetting bearer [ 95.289053][ T6315] tipc: Disabling bearer [ 95.717319][ T6337] loop4: detected capacity change from 0 to 512 [ 95.731450][ T6337] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 95.731587][ T6337] EXT4-fs (loop4): orphan cleanup on readonly fs [ 95.734496][ T6337] EXT4-fs warning (device loop4): ext4_enable_quotas:7276: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 95.738964][ T6337] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 95.740312][ T6337] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #13: comm syz.4.340: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 95.740369][ T6337] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 95.744563][ T6337] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.340: couldn't read orphan inode 13 (err -117) [ 95.744599][ T6337] loop4: lost filesystem error report for type 5 error -117 [ 95.748530][ C1] EXT4-fs (loop4): error count since last fsck: 2 [ 95.748548][ C1] EXT4-fs (loop4): last error at time 95: ext4_orphan_get:1404 [ 96.100223][ T6337] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 96.113430][ T6341] loop3: detected capacity change from 0 to 512 [ 96.119182][ T6341] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 96.120924][ T6341] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 96.123062][ T6341] EXT4-fs (loop3): blocks per group (42) and clusters per group (32768) inconsistent [ 96.419088][ T6342] EXT4-fs error (device loop4): ext4_lookup:1785: comm syz.4.340: inode #15: comm syz.4.340: iget: illegal inode # [ 96.475541][ T6347] loop1: detected capacity change from 0 to 1024 [ 96.588190][ T6347] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.602983][ T6346] EXT4-fs error (device loop1): ext4_free_blocks:6718: comm syz.1.342: Freeing blocks not in datazone - block = 0, count = 16 [ 96.607882][ T6346] EXT4-fs (loop1): Remounting filesystem read-only [ 96.616658][ T4711] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.704078][ T6341] netlink: 'syz.3.341': attribute type 142 has an invalid length. [ 96.817023][ T6360] Invalid ELF header type: 2 != 1 [ 97.053050][ C0] vcan0: j1939_tp_rxtimer: 0x00000000404341c0: rx timeout, send abort [ 97.054191][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000404341c0: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 97.365407][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 98.042374][ T6376] syzkaller0: entered promiscuous mode [ 98.042410][ T6376] syzkaller0: entered allmulticast mode [ 98.571137][ T6384] syzkaller0: entered promiscuous mode [ 98.572295][ T6384] syzkaller0: entered allmulticast mode [ 98.577207][ T6384] tipc: Enabled bearer , priority 0 [ 98.584611][ T6384] tipc: Resetting bearer [ 98.590142][ T6381] tipc: Resetting bearer [ 98.780111][ T4720] Bluetooth: hci5: command 0x0405 tx timeout [ 99.545376][ T6381] tipc: Disabling bearer [ 99.711643][ T6399] Injecting memory failure for pfn 0x13cd0a at process virtual address 0x2050a000 [ 99.922535][ T6399] Memory failure: 0x13cd0a: recovery action for clean LRU page: Recovered [ 100.006252][ T6405] loop5: detected capacity change from 0 to 4096 [ 100.013671][ T6405] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.614810][ T6423] loop4: detected capacity change from 0 to 256 [ 100.669302][ T6424] devpts: Bad value for 'gid' [ 100.669378][ T6424] devpts: Bad value for 'gid' [ 101.469805][ T6432] netlink: 36 bytes leftover after parsing attributes in process `syz.3.363'. [ 101.470996][ T6435] netlink: 8 bytes leftover after parsing attributes in process `syz.4.362'. [ 101.471656][ T6435] netlink: 8 bytes leftover after parsing attributes in process `syz.4.362'. [ 101.471783][ T6435] netlink: 8 bytes leftover after parsing attributes in process `syz.4.362'. [ 101.472134][ T6435] netlink: 8 bytes leftover after parsing attributes in process `syz.4.362'. [ 101.472208][ T6435] netlink: 8 bytes leftover after parsing attributes in process `syz.4.362'. [ 101.743894][ T6427] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.230675][ T5602] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.990586][ T6459] netlink: 'syz.0.370': attribute type 4 has an invalid length. [ 102.990676][ T6459] netlink: 17 bytes leftover after parsing attributes in process `syz.0.370'. [ 103.292915][ T6462] Injecting memory failure for pfn 0x13c70a at process virtual address 0x2050a000 [ 103.789763][ T6462] Memory failure: 0x13c70a: recovery action for clean LRU page: Recovered [ 104.860368][ T6471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.860682][ T6471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.464078][ T6482] loop3: detected capacity change from 0 to 512 [ 105.466727][ T6482] EXT4-fs: Mount option(s) incompatible with ext2 [ 106.691924][ T6509] loop3: detected capacity change from 0 to 2048 [ 106.704233][ T6509] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.898109][ T6518] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 106.898701][ T6518] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 106.899164][ T6518] EXT4-fs (loop3): This should not happen!! Data will be lost [ 106.899164][ T6518] [ 106.899224][ T6518] EXT4-fs (loop3): Total free blocks count 0 [ 106.899264][ T6518] EXT4-fs (loop3): Free/Dirty block details [ 106.899324][ T6518] EXT4-fs (loop3): free_blocks=2415919504 [ 106.899380][ T6518] EXT4-fs (loop3): dirty_blocks=48 [ 106.899413][ T6518] EXT4-fs (loop3): Block reservation details [ 106.899446][ T6518] EXT4-fs (loop3): i_reserved_data_blocks=3 [ 106.920596][ T6518] input: syz0 as /devices/virtual/input/input4 [ 107.952226][ T4719] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 107.953004][ T4719] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.461580][ T6531] loop5: detected capacity change from 0 to 512 [ 108.467101][ T6531] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 108.636239][ T6531] EXT4-fs error (device loop5): __ext4_iget:5533: inode #11: block 2: comm syz.5.385: invalid block [ 108.636322][ T6531] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 108.637446][ T6531] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.385: couldn't read orphan inode 11 (err -117) [ 108.637509][ T6531] loop5: lost filesystem error report for type 5 error -117 [ 108.643194][ T6531] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.350389][ T6546] loop0: detected capacity change from 0 to 256 [ 109.357973][ T6547] syzkaller0: entered promiscuous mode [ 109.358014][ T6547] syzkaller0: entered allmulticast mode [ 109.375219][ T6547] tipc: Started in network mode [ 109.435702][ T6547] tipc: Node identity d2023f080bb, cluster identity 4711 [ 109.437580][ T6547] tipc: Enabled bearer , priority 0 [ 109.446155][ T6547] tipc: Resetting bearer [ 109.449214][ T6545] tipc: Resetting bearer [ 109.455353][ T6545] tipc: Disabling bearer [ 109.540275][ T6550] FAT-fs (loop0): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 109.541115][ T6550] FAT-fs (loop0): Filesystem has been set read-only [ 109.789039][ T5602] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.803118][ T6552] loop3: detected capacity change from 0 to 1024 [ 109.823757][ T6552] EXT4-fs: Ignoring removed bh option [ 109.827265][ T6552] EXT4-fs: Invalid want_extra_isize 10320 [ 109.869784][ T6556] loop5: detected capacity change from 0 to 512 [ 109.871407][ T6556] EXT4-fs: Ignoring removed oldalloc option [ 109.874857][ T6557] syz.4.395 uses obsolete (PF_INET,SOCK_PACKET) [ 109.895544][ T6556] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 109.896852][ T6556] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 109.896880][ T6556] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 109.896998][ T6556] EXT4-fs (loop5): orphan cleanup on readonly fs [ 109.897035][ T6556] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 109.897076][ T6556] EXT4-fs warning (device loop5): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 109.897093][ T6556] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 109.898311][ T6556] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.394: bg 0: block 40: padding at end of block bitmap is not set [ 109.898341][ T6556] loop5: lost filesystem error report for type 5 error -117 [ 109.898887][ C0] EXT4-fs (loop5): initial error at time 109: ext4_validate_block_bitmap:441 [ 109.898918][ C0] EXT4-fs (loop5): last error at time 109: ext4_validate_block_bitmap:441 [ 109.902437][ T6556] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 109.902457][ T6556] loop5: lost filesystem error report for type 5 error -117 [ 109.902870][ T6556] EXT4-fs (loop5): 1 truncate cleaned up [ 109.903332][ T6556] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 113.356523][ T5602] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.383825][ T4728] Bluetooth: hci2: unexpected event for opcode 0x201c [ 113.589880][ T6575] loop5: detected capacity change from 0 to 128 [ 115.409437][ T6589] loop1: detected capacity change from 0 to 128 [ 115.884510][ T6589] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 117.852309][ T4712] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 118.440406][ T6597] ip6erspan0: entered promiscuous mode [ 118.652314][ T6608] input: syz0 as /devices/virtual/input/input5 [ 119.055825][ T6608] loop4: detected capacity change from 0 to 512 [ 119.091671][ T6608] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 119.764682][ T6608] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c840e018, mo2=0002] [ 119.764831][ T6608] EXT4-fs (loop4): orphan cleanup on readonly fs [ 120.752208][ T6624] sock: sock_timestamping_bind_phc: sock not bind to device [ 120.757725][ T6624] zram0: detected capacity change from 0 to 8 [ 120.778763][ T6608] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.407: bg 0: block 361: padding at end of block bitmap is not set [ 120.782110][ T6608] loop4: lost filesystem error report for type 5 error -117 [ 120.798521][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 120.798567][ C1] EXT4-fs (loop4): initial error at time 120: ext4_validate_block_bitmap:441 [ 120.798599][ C1] EXT4-fs (loop4): last error at time 120: ext4_validate_block_bitmap:441 [ 120.931118][ T6608] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 120.932759][ T6608] loop4: lost filesystem error report for type 5 error -117 [ 121.067080][ T6608] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #11: comm syz.4.407: attempt to clear invalid blocks 33619980 len 1 [ 121.067204][ T6608] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 121.533257][ T6608] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.407: invalid indirect mapped block 1811939328 (level 0) [ 121.533314][ T6608] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 121.537795][ T6608] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.407: invalid indirect mapped block 2185560079 (level 1) [ 121.537837][ T6608] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 121.538239][ T6608] EXT4-fs (loop4): 1 truncate cleaned up [ 121.538816][ T6608] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 121.857593][ T4711] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 122.626442][ T6636] 9p: Bad value for 'rfdno' [ 122.735917][ T6623] Driver unsupported XDP return value 0 on prog (id 26) dev N/A, expect packet loss! [ 122.759267][ T6635] bridge0: port 1(netdevsim1) entered blocking state [ 122.759330][ T6635] bridge0: port 1(netdevsim1) entered disabled state [ 122.759579][ T6635] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 122.760966][ T6635] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 122.761285][ T6635] bridge0: port 1(netdevsim1) entered blocking state [ 122.761327][ T6635] bridge0: port 1(netdevsim1) entered forwarding state [ 123.204357][ T6645] loop0: detected capacity change from 0 to 512 [ 123.490560][ T6648] i2c i2c-0: Failed to register i2c client usb3503 at 0x08 (-16) [ 123.491207][ T6648] i2c i2c-0: delete_device: Deleting device ccgx-ucsi at 0x08 [ 123.971928][ T6645] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.362018][ T4717] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.550996][ T6667] Soft offlining pfn 0x138135 at process virtual address 0x20000000 [ 124.870119][ T6669] hub 8-0:1.0: USB hub found [ 124.871983][ T6669] hub 8-0:1.0: 8 ports detected [ 125.588550][ T6679] loop4: detected capacity change from 0 to 128 [ 125.604694][ T6680] loop5: detected capacity change from 0 to 512 [ 125.939614][ T1535] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.939672][ T1535] ieee802154 phy1 wpan1: encryption failed: -22 [ 125.977710][ T6675] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 125.977764][ T6675] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 125.977924][ T6675] udc dummy_udc.0: failed to start g1: -22 [ 125.977934][ T6675] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 125.978202][ T6675] UDC core: g1: couldn't find an available UDC or it's busy [ 126.965553][ T6693] loop0: detected capacity change from 0 to 1024 [ 128.060260][ T6693] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.065293][ T6679] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 128.298896][ T6680] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.422: inode has both inline data and extents flags [ 128.299033][ T6680] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 128.308521][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 128.308540][ C0] EXT4-fs (loop5): initial error at time 128: ext4_orphan_get:1399: inode 15 [ 128.308571][ C0] EXT4-fs (loop5): last error at time 128: ext4_orphan_get:1399: inode 15 [ 128.679970][ T6680] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.422: couldn't read orphan inode 15 (err -117) [ 128.680017][ T6680] loop5: lost filesystem error report for type 5 error -117 [ 128.684094][ T6680] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.721561][ T5602] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.795392][ T4711] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 128.931585][ T6711] syzkaller0: entered promiscuous mode [ 128.933157][ T6711] syzkaller0: entered allmulticast mode [ 128.940780][ T6711] tipc: Started in network mode [ 128.942272][ T6711] tipc: Node identity d22ab37cf721, cluster identity 4711 [ 128.944129][ T6711] tipc: Enabled bearer , priority 0 [ 128.953622][ T6711] tipc: Resetting bearer [ 128.970403][ T6708] tipc: Resetting bearer [ 129.234372][ T6708] tipc: Disabling bearer [ 129.259199][ T6710] syzkaller0: entered promiscuous mode [ 129.260450][ T6710] syzkaller0: entered allmulticast mode [ 129.382155][ T6727] loop4: detected capacity change from 0 to 1024 [ 129.388090][ T6727] EXT4-fs: Mount option(s) incompatible with ext3 [ 129.462642][ T4717] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.810929][ T6734] loop1: detected capacity change from 0 to 512 [ 129.821408][ T6734] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 129.821529][ T6734] EXT4-fs (loop1): orphan cleanup on readonly fs [ 129.825683][ T6734] EXT4-fs warning (device loop1): ext4_enable_quotas:7276: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 129.830220][ T6734] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 129.832010][ T6734] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #13: comm syz.1.434: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 129.832045][ T6734] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 129.835373][ T6734] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.434: couldn't read orphan inode 13 (err -117) [ 129.835409][ T6734] loop1: lost filesystem error report for type 5 error -117 [ 129.839126][ C0] EXT4-fs (loop1): error count since last fsck: 2 [ 129.839140][ C0] EXT4-fs (loop1): last error at time 129: ext4_orphan_get:1404 [ 129.845504][ T6734] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 130.438162][ T6742] syz_tun: entered allmulticast mode [ 130.451704][ T6738] netlink: 'syz.0.435': attribute type 4 has an invalid length. [ 130.451734][ T6738] netlink: 152 bytes leftover after parsing attributes in process `syz.0.435'. [ 130.453586][ T6738] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 130.636846][ T6733] syz_tun: left allmulticast mode [ 130.825187][ T6753] netlink: 4 bytes leftover after parsing attributes in process `syz.3.437'. [ 130.885661][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.962031][ T6761] configfs-gadget.g1 gadget.1: uvc: uvc_function_bind() [ 130.972089][ T6759] loop1: detected capacity change from 0 to 128 [ 131.016838][ T6759] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 131.331747][ T750] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20002 - 0 [ 131.332041][ T5236] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20002 - 0 [ 131.332067][ T5236] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20002 - 0 [ 131.332081][ T5236] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20002 - 0 [ 131.449574][ T6773] sctp: [Deprecated]: syz.3.443 (pid 6773) Use of struct sctp_assoc_value in delayed_ack socket option. [ 131.449574][ T6773] Use struct sctp_sack_info instead [ 131.498582][ T6775] syzkaller0: entered promiscuous mode [ 131.499725][ T6775] syzkaller0: entered allmulticast mode [ 131.552155][ T6781] loop0: detected capacity change from 0 to 256 [ 131.641787][ T6782] No such timeout policy "syz1" [ 131.969910][ T4712] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 132.106337][ T12] wlan1: Trigger new scan to find an IBSS to join [ 132.446868][ T6810] loop3: detected capacity change from 0 to 512 [ 132.650991][ T6812] can0: slcan on ttyS3. [ 132.722591][ T6808] loop4: detected capacity change from 0 to 2048 [ 132.745610][ T6810] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 132.745745][ T6810] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #4: comm syz.3.449: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 132.745779][ T6810] loop3: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 132.750164][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 132.750180][ C0] EXT4-fs (loop3): last error at time 132: ext4_ext_check_inode:521: inode 4 [ 132.755233][ T6810] EXT4-fs error (device loop3): ext4_quota_enable:7235: comm syz.3.449: Bad quota inode: 4, type: 1 [ 132.755269][ T6810] loop3: lost filesystem error report for type 5 error -117 [ 132.758430][ T6810] EXT4-fs warning (device loop3): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 132.760223][ T6810] EXT4-fs (loop3): mount failed [ 132.775804][ T6818] loop0: detected capacity change from 0 to 128 [ 132.776141][ T6818] vfat: Bad value for 'check' [ 132.779109][ T6808] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.782427][ T6818] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.227112][ T6811] can0 (unregistered): slcan off ttyS3. [ 133.493799][ T6827] loop0: detected capacity change from 0 to 256 [ 133.501225][ T6827] FAT-fs (loop0): data area starts beyond volume (274 > 64) [ 133.501266][ T6827] FAT-fs (loop0): Can't find a valid FAT filesystem [ 134.617912][ T6841] configfs-gadget.g1 gadget.1: uvc: uvc_function_unbind() [ 134.642534][ T6819] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.773883][ T6849] lo speed is unknown, defaulting to 1000 [ 134.773944][ T6849] lo speed is unknown, defaulting to 1000 [ 134.774697][ T6849] lo speed is unknown, defaulting to 1000 [ 134.776456][ T6849] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 134.778546][ T6849] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 134.786653][ T6849] lo speed is unknown, defaulting to 1000 [ 134.787489][ T6849] lo speed is unknown, defaulting to 1000 [ 134.787847][ T6849] lo speed is unknown, defaulting to 1000 [ 134.788188][ T6849] lo speed is unknown, defaulting to 1000 [ 134.788575][ T6849] lo speed is unknown, defaulting to 1000 [ 135.402068][ T6865] loop5: detected capacity change from 0 to 2048 [ 135.412539][ T6865] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.593375][ T6872] input: syz0 as /devices/virtual/input/input6 [ 136.522687][ T6883] 9pnet_fd: Insufficient options for proto=fd [ 136.524309][ T6883] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 136.667205][ T868] IPVS: starting estimator thread 0... [ 136.677569][ T5602] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.062938][ T30] audit: type=1400 audit(136.840:2): lsm=SMACK fn=smack_inode_getattr action=denied subject="_" object="lo" requested=r pid=6885 comm="syz.4.463" path="/104/file1" dev="tmpfs" ino=587 [ 137.063097][ T6884] IPVS: using max 58 ests per chain, 139200 per kthread [ 137.502001][ T6901] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 137.502043][ T6901] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 137.502070][ T6901] ================================================================== [ 137.502077][ T6901] BUG: KASAN: slab-out-of-bounds in dummy_free_request+0x44/0x84 [ 137.502096][ T6901] Read of size 8 at addr ffff0000ccef48f0 by task syz.1.466/6901 [ 137.502103][ T6901] [ 137.502110][ T6901] CPU: 1 UID: 0 PID: 6901 Comm: syz.1.466 Tainted: G L syzkaller #0 PREEMPT [ 137.502122][ T6901] Tainted: [L]=SOFTLOCKUP [ 137.502125][ T6901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 137.502130][ T6901] Call trace: [ 137.502133][ T6901] show_stack+0x2c/0x3c (C) [ 137.502148][ T6901] __dump_stack+0x30/0x40 [ 137.502159][ T6901] dump_stack_lvl+0xd8/0x12c [ 137.502171][ T6901] print_address_description+0xb0/0x238 [ 137.502180][ T6901] print_report+0x68/0x84 [ 137.502188][ T6901] kasan_report+0x8c/0xc4 [ 137.502199][ T6901] __asan_report_load8_noabort+0x20/0x2c [ 137.502211][ T6901] dummy_free_request+0x44/0x84 [ 137.502220][ T6901] usb_ep_free_request+0x108/0x3fc [ 137.502232][ T6901] uvc_function_bind+0xbb0/0x1230 [ 137.502243][ T6901] usb_add_function+0x1d0/0x6bc [ 137.502252][ T6901] configfs_composite_bind+0xb4c/0x10b8 [ 137.502264][ T6901] gadget_bind_driver+0x274/0x834 [ 137.502271][ T6901] really_probe+0x29c/0x800 [ 137.502283][ T6901] __driver_probe_device+0x1e0/0x350 [ 137.502294][ T6901] driver_probe_device+0x6c/0x19c [ 137.502305][ T6901] __driver_attach+0x168/0x384 [ 137.502315][ T6901] bus_for_each_dev+0x128/0x1b4 [ 137.502325][ T6901] driver_attach+0x50/0x60 [ 137.502335][ T6901] bus_add_driver+0x208/0x500 [ 137.502344][ T6901] driver_register+0x220/0x310 [ 137.502356][ T6901] usb_gadget_register_driver_owner+0xf0/0x25c [ 137.502369][ T6901] gadget_dev_desc_UDC_store+0x164/0x22c [ 137.502379][ T6901] configfs_write_iter+0x27c/0x354 [ 137.502392][ T6901] vfs_write+0x51c/0xa0c [ 137.502400][ T6901] ksys_write+0x12c/0x228 [ 137.502407][ T6901] __arm64_sys_write+0x84/0x98 [ 137.502415][ T6901] invoke_syscall+0x98/0x244 [ 137.502427][ T6901] el0_svc_common+0xec/0x23c [ 137.502438][ T6901] do_el0_svc+0x4c/0x5c [ 137.502450][ T6901] el0_svc+0x64/0x260 [ 137.502462][ T6901] el0t_64_sync_handler+0x48/0x148 [ 137.502473][ T6901] el0t_64_sync+0x198/0x19c [ 137.502482][ T6901] [ 137.502484][ T6901] Allocated by task 6761: [ 137.502489][ T6901] kasan_save_track+0x40/0x78 [ 137.502504][ T6901] kasan_save_alloc_info+0x44/0x54 [ 137.502514][ T6901] __kasan_kmalloc+0x9c/0xb4 [ 137.502522][ T6901] __kmalloc_cache_noprof+0x2e8/0x5ec [ 137.502531][ T6901] kthread_create_worker_on_node+0x104/0x20c [ 137.502540][ T6901] uvcg_video_init+0x210/0x598 [ 137.502547][ T6901] uvc_function_bind+0xd9c/0x1230 [ 137.502556][ T6901] usb_add_function+0x1d0/0x6bc [ 137.502563][ T6901] configfs_composite_bind+0xb4c/0x10b8 [ 137.502573][ T6901] gadget_bind_driver+0x274/0x834 [ 137.502579][ T6901] really_probe+0x29c/0x800 [ 137.502589][ T6901] __driver_probe_device+0x1e0/0x350 [ 137.502598][ T6901] driver_probe_device+0x6c/0x19c [ 137.502607][ T6901] __driver_attach+0x168/0x384 [ 137.502616][ T6901] bus_for_each_dev+0x128/0x1b4 [ 137.502624][ T6901] driver_attach+0x50/0x60 [ 137.502633][ T6901] bus_add_driver+0x208/0x500 [ 137.502640][ T6901] driver_register+0x220/0x310 [ 137.502650][ T6901] usb_gadget_register_driver_owner+0xf0/0x25c [ 137.502661][ T6901] gadget_dev_desc_UDC_store+0x164/0x22c [ 137.502670][ T6901] configfs_write_iter+0x27c/0x354 [ 137.502681][ T6901] vfs_write+0x51c/0xa0c [ 137.502687][ T6901] ksys_write+0x12c/0x228 [ 137.502692][ T6901] __arm64_sys_write+0x84/0x98 [ 137.502698][ T6901] invoke_syscall+0x98/0x244 [ 137.502710][ T6901] el0_svc_common+0xec/0x23c [ 137.502720][ T6901] do_el0_svc+0x4c/0x5c [ 137.502730][ T6901] el0_svc+0x64/0x260 [ 137.502740][ T6901] el0t_64_sync_handler+0x48/0x148 [ 137.502749][ T6901] el0t_64_sync+0x198/0x19c [ 137.502756][ T6901] [ 137.502758][ T6901] The buggy address belongs to the object at ffff0000ccef4800 [ 137.502758][ T6901] which belongs to the cache kmalloc-128 of size 128 [ 137.502764][ T6901] The buggy address is located 120 bytes to the right of [ 137.502764][ T6901] allocated 120-byte region [ffff0000ccef4800, ffff0000ccef4878) [ 137.502773][ T6901] [ 137.502775][ T6901] The buggy address belongs to the physical page: [ 137.502779][ T6901] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10cef4 [ 137.502787][ T6901] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) [ 137.502794][ T6901] page_type: f5(slab) [ 137.502802][ T6901] raw: 05ffc00000000000 ffff0000c0001a00 dead000000000100 dead000000000122 [ 137.502809][ T6901] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 137.502814][ T6901] page dumped because: kasan: bad access detected [ 137.502817][ T6901] [ 137.502818][ T6901] Memory state around the buggy address: [ 137.502823][ T6901] ffff0000ccef4780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 137.502828][ T6901] ffff0000ccef4800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc [ 137.502833][ T6901] >ffff0000ccef4880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 137.502837][ T6901] ^ [ 137.502842][ T6901] ffff0000ccef4900: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 137.502847][ T6901] ffff0000ccef4980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 137.502851][ T6901] ================================================================== [ 137.502908][ T6901] Disabling lock debugging due to kernel taint [ 137.503165][ T6901] ------------[ cut here ]------------ [ 137.503171][ T6901] WARNING: drivers/usb/gadget/udc/dummy_hcd.c:710 at dummy_free_request+0x7c/0x84, CPU#1: syz.1.466/6901 [ 137.582412][ T6901] Modules linked in: [ 137.582960][ T6901] CPU: 1 UID: 0 PID: 6901 Comm: syz.1.466 Tainted: G B L syzkaller #0 PREEMPT [ 137.584363][ T6901] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 137.585133][ T6901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 137.586577][ T6901] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 137.587715][ T6901] pc : dummy_free_request+0x7c/0x84 [ 137.588480][ T6901] lr : dummy_free_request+0x7c/0x84 [ 137.589243][ T6901] sp : ffff800092e874e0 [ 137.589893][ T6901] x29: ffff800092e874e0 x28: 0000000000000000 x27: ffff0000d6cda528 [ 137.591134][ T6901] x26: ffff0000c9406800 x25: 1fffe0001ad9b4a5 x24: dfff800000000000 [ 137.592300][ T6901] x23: dfff800000000000 x22: ffff800088b07eb8 x21: ffff800087332280 [ 137.593476][ T6901] x20: ffff0000ca2b4068 x19: ffff0000ccef48f0 x18: 1fffe00035bc9e28 [ 137.594651][ T6901] x17: 0000000000000003 x16: ffff800088b07000 x15: 0000000000000000 [ 137.595844][ T6901] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 137.597091][ T6901] x11: 0000000000000000 x10: 0000000000080000 x9 : 000000000001df72 [ 137.598324][ T6901] x8 : ffff80009ff9d000 x7 : 0000000000000000 x6 : ffff8000803b8a6c [ 137.599554][ T6901] x5 : 0000000000000000 x4 : 0000000000000008 x3 : ffff8000802f7b34 [ 137.600720][ T6901] x2 : 0000000000000000 x1 : ffff0000ca33ba80 x0 : 0000000000000001 [ 137.601962][ T6901] Call trace: [ 137.602433][ T6901] dummy_free_request+0x7c/0x84 (P) [ 137.603335][ T6901] usb_ep_free_request+0x108/0x3fc [ 137.604194][ T6901] uvc_function_bind+0xbb0/0x1230 [ 137.605048][ T6901] usb_add_function+0x1d0/0x6bc [ 137.605841][ T6901] configfs_composite_bind+0xb4c/0x10b8 [ 137.606702][ T6901] gadget_bind_driver+0x274/0x834 [ 137.607630][ T6901] really_probe+0x29c/0x800 [ 137.608375][ T6901] __driver_probe_device+0x1e0/0x350 [ 137.609246][ T6901] driver_probe_device+0x6c/0x19c [ 137.609969][ T6901] __driver_attach+0x168/0x384 [ 137.610708][ T6901] bus_for_each_dev+0x128/0x1b4 [ 137.611422][ T6901] driver_attach+0x50/0x60 [ 137.612098][ T6901] bus_add_driver+0x208/0x500 [ 137.612785][ T6901] driver_register+0x220/0x310 [ 137.613473][ T6901] usb_gadget_register_driver_owner+0xf0/0x25c [ 137.614391][ T6901] gadget_dev_desc_UDC_store+0x164/0x22c [ 137.615226][ T6901] configfs_write_iter+0x27c/0x354 [ 137.615973][ T6901] vfs_write+0x51c/0xa0c [ 137.616576][ T6901] ksys_write+0x12c/0x228 [ 137.617200][ T6901] __arm64_sys_write+0x84/0x98 [ 137.617857][ T6901] invoke_syscall+0x98/0x244 [ 137.618509][ T6901] el0_svc_common+0xec/0x23c [ 137.619127][ T6901] do_el0_svc+0x4c/0x5c [ 137.619739][ T6901] el0_svc+0x64/0x260 [ 137.620286][ T6901] el0t_64_sync_handler+0x48/0x148 [ 137.621004][ T6901] el0t_64_sync+0x198/0x19c [ 137.621666][ T6901] irq event stamp: 1271 [ 137.622222][ T6901] hardirqs last enabled at (1271): [] finish_task_switch+0x234/0x858 [ 137.623542][ T6901] hardirqs last disabled at (1270): [] __schedule+0x2f8/0x2d80 [ 137.624892][ T6901] softirqs last enabled at (1210): [] __alloc_skb+0x1c0/0x610 [ 137.626302][ T6901] softirqs last disabled at (1208): [] __alloc_skb+0x1a8/0x610 [ 137.627591][ T6901] ---[ end trace 0000000000000000 ]--- [ 137.629661][ T6901] udc dummy_udc.0: failed to start g1: -22 [ 137.629722][ T6901] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 137.630630][ T6901] UDC core: g1: couldn't find an available UDC or it's busy [ 138.099749][ T40] wlan1: Trigger new scan to find an IBSS to join [ 139.118668][ T94] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50