last executing test programs: 11m58.800374641s ago: executing program 32 (id=43): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000300)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff886411004048633321fbac14142c88a8000162079f4b4d2f87e56dca6aab845013f286dd1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfb, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) sendmmsg(r0, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)}], 0x1}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000200)}], 0x1, 0x0, 0x7}}], 0x2, 0x4044044) 10m49.013119727s ago: executing program 33 (id=188): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) timer_create(0x4, &(0x7f0000001440)={0x0, 0x37, 0x0, @thr={0x0, &(0x7f0000000440)}}, &(0x7f0000001480)=0x0) timer_settime(r3, 0x0, &(0x7f00000014c0), &(0x7f0000001500)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file7/file0\x00', 0x0) r4 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000180)=0x10) connect$inet(r4, &(0x7f0000000280)={0x2, 0x4e20, @private=0xa010102}, 0x10) 10m24.066902757s ago: executing program 34 (id=270): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0xf0}, 0x1}, 0x18) 10m24.061327607s ago: executing program 35 (id=268): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r4, 0x29, 0x4c, 0x0, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r5, 0x0, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r6, 0x107, 0x1, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4008, &(0x7f0000001500)={[{@uni_xlateno}, {@uni_xlateno}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@shortname_win95}, {@shortname_win95}, {@fat=@nfs_stale_rw}, {@uni_xlate}, {@shortname_win95}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@utf8no}, {@utf8no}]}, 0x81, 0x2c7, &(0x7f0000001200)="$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") write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e, 0x0, 0xe}, 0x10) 9m12.460783942s ago: executing program 36 (id=364): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 7m44.674350945s ago: executing program 6 (id=644): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000004740)={0x44, 0x0, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x7f, 0x4, 0x6, 0x1, 0x4, 0x4, 0xb6]}}]}]}]}, 0x44}}, 0x0) 7m43.754068255s ago: executing program 6 (id=646): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) 7m43.552277421s ago: executing program 6 (id=647): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x40012}, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x248001, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, &(0x7f00000000c0), 0x111, 0x3}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r2, 0x26}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x1}}, 0x20) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 7m43.333752588s ago: executing program 6 (id=651): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32], 0x0, 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r3, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x4c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88c7}, @NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type10={{}, {}, @from_mac=@broadcast, @device_b}}}]}, 0x4c}}, 0x800) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) sched_setparam(r0, &(0x7f0000000000)=0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_create_resource$binfmt(&(0x7f0000000180)='./file1\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, 0x8000}, 0x28) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80785659, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) 7m39.562091979s ago: executing program 6 (id=657): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, 0x0, 0x0) 7m39.207090511s ago: executing program 6 (id=658): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0xfc, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xa8, 0x1, 0x0, 0x3}, 0xe) shutdown(r2, 0x1) recvmmsg(r2, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) 7m33.429363355s ago: executing program 37 (id=629): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32], 0x0, 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r3, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x4c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88c7}, @NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type10={{}, {}, @from_mac=@broadcast, @device_b}}}]}, 0x4c}}, 0x800) socket$netlink(0x10, 0x3, 0x14) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80785659, 0x0) 7m23.726200486s ago: executing program 38 (id=658): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0xfc, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xa8, 0x1, 0x0, 0x3}, 0xe) shutdown(r2, 0x1) recvmmsg(r2, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) 7m13.094183967s ago: executing program 7 (id=707): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x88581, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x903, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x6, 0x7}, {0x7, 0xfff1}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 7m12.417063019s ago: executing program 7 (id=710): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000021000000000000004675554246dbbf7d629b07f8f720ac0a0101000000005e1affd50200fdff0800010073797a3000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x40012}, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x248001, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, &(0x7f00000000c0), 0x111, 0x3}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r2, 0x26}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x1}}, 0x20) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 7m12.186108336s ago: executing program 7 (id=711): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) 7m11.244124376s ago: executing program 7 (id=712): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)={0x90, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x74, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x58, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}]}, 0x90}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 7m9.029788897s ago: executing program 7 (id=716): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuseblk(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, 0x488, &(0x7f0000000bc0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') read$FUSE(r1, &(0x7f00000044c0)={0x2020}, 0x2020) 7m8.220128983s ago: executing program 7 (id=717): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32], 0x0, 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r3, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x4c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88c7}, @NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type10={{}, {}, @from_mac=@broadcast, @device_b}}}]}, 0x4c}}, 0x800) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) sched_setparam(r0, &(0x7f0000000000)=0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_create_resource$binfmt(&(0x7f0000000180)='./file1\x00') 6m52.602752314s ago: executing program 39 (id=717): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32], 0x0, 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r3, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x4c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88c7}, @NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type10={{}, {}, @from_mac=@broadcast, @device_b}}}]}, 0x4c}}, 0x800) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) sched_setparam(r0, &(0x7f0000000000)=0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_create_resource$binfmt(&(0x7f0000000180)='./file1\x00') 6m14.377735068s ago: executing program 5 (id=824): syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x2, 0x9, 0x0, 0x4b}}, @l2cap_conf_rsp={{0x5, 0x2, 0x6}, {0x3, 0x5, 0x5}}]}}, 0x1f) 6m14.098009568s ago: executing program 5 (id=826): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x280801f, &(0x7f00000002c0), 0xfe, 0x506, &(0x7f0000000400)="$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") r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x3ff, @any, 0x7, 0x1}, 0xe) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 6m12.862133277s ago: executing program 5 (id=835): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, r2, 0x0, &(0x7f0000000980)=@IORING_OP_RECVMSG={0xa, 0x48, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000600)=[{0x0}, {0x0}], 0x2}, 0x0, 0x2002, 0x1, {0x3}}) r3 = socket(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) syz_ublk_add_dev(r0, r1, r2, 0x0, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) 6m12.409934132s ago: executing program 5 (id=836): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@nombcache}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x90}}, {@user_xattr}, {@noinit_itable}]}, 0x3, 0x583, &(0x7f0000000800)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x15) mremap(&(0x7f000016c000/0x4000)=nil, 0x4000, 0x40000000, 0x3, &(0x7f000063c000/0x3000)=nil) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$unix(r0, &(0x7f0000011a80)=[{{&(0x7f0000000180)=@file={0x0, './file1\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x38, 0x40811}}], 0x1, 0x40) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 6m10.311481959s ago: executing program 5 (id=841): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x30}}, 0x0) 6m9.144621236s ago: executing program 5 (id=845): sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000007c0)=[{0x0}], 0x1}, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file2\x00', 0x10, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pwritev2(r0, &(0x7f00000005c0)=[{&(0x7f0000000180)="c897", 0x2}], 0x1, 0x2e, 0x4, 0x11) ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000000680)={0x0, 0x0, 0x2, 0x7, 0x3}) 6m8.540260015s ago: executing program 40 (id=845): sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000007c0)=[{0x0}], 0x1}, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file2\x00', 0x10, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pwritev2(r0, &(0x7f00000005c0)=[{&(0x7f0000000180)="c897", 0x2}], 0x1, 0x2e, 0x4, 0x11) ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000000680)={0x0, 0x0, 0x2, 0x7, 0x3}) 4m47.141551644s ago: executing program 3 (id=1018): socket$netlink(0x10, 0x3, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x18d6, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r3 = syz_io_uring_setup(0x2b06, &(0x7f0000000040), &(0x7f0000ffd000), &(0x7f0000ffe000), 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000380)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x3, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x90) io_uring_register$IORING_REGISTER_FILES(r3, 0x14, &(0x7f00000003c0), 0x2) prctl$PR_SET_SECUREBITS(0x1c, 0x4) setuid(0xee01) 4m46.190240485s ago: executing program 3 (id=1020): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, 0x0) 4m44.898600946s ago: executing program 3 (id=1023): syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xe}, @l2cap_cid_signaling={{0xa}, [@l2cap_conf_rsp={{0x5, 0x2, 0x6}, {0x3, 0x5, 0x5}}]}}, 0x13) 4m44.639436845s ago: executing program 3 (id=1025): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) umount2(0x0, 0x9) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 4m43.588549978s ago: executing program 3 (id=1027): r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setgroups(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) 4m42.317971639s ago: executing program 3 (id=1032): r0 = socket(0x10, 0x3, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20081e, &(0x7f0000000140), 0x1, 0x4ef, &(0x7f00000003c0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000700)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000480), 0x400034f, 0x2, 0x0) sendfile(r3, r3, 0x0, 0x1000000000007) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2, 0x0, 0x4}}, 0x2e) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000c0010"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x820) syz_emit_ethernet(0x56, &(0x7f0000000040)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "910100", 0x1c, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x1c, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, '\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00@'}}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x4}]}}}]}, 0x3c}}, 0x0) 4m26.871566114s ago: executing program 41 (id=1032): r0 = socket(0x10, 0x3, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20081e, &(0x7f0000000140), 0x1, 0x4ef, &(0x7f00000003c0)="$eJzs3U1vW1kZAODXzpeTyUwywywAAVOGgYKqOonbRlUXUFYIoUqILkFqQ+JGUew4ip3ShC7S/4BEJVaw5Aew7oo9GwQ7NmWBxEcEaiqxMLrXN6mb2k1oEjuKn0e6uvfcY/s9J849x36d+AQwsC5FxE5EjEbE/YiYys7nsi1ut7bkdi92Hy/u7T5ezEWzefefubQ+ORdt90m8lz1mISJ+9L2In+bejFvf2l5dqFTKG63i+Eyjuj5T39q+ulJdWC4vl9dKpfm5+dmb126UTq2vn1RHs6MvP//Dzrd+njRrMjvT3o/T1Or6yEGcxHBE/OAsgvXBUNaf0X43hHeSj4iPIuLT9PqfiqH02QQALrJmcyqaU+1lAOCiy6c5sFy+mOUCJiOfLxZbObyPYyJfqdUbVx7UNteWWrmy6RjJP1iplGezXOF0jOSS8lx6/KpcOlS+FhEfRsQvxsbTcnGxVlnq5wsfABhg7x2a//8z1pr/AYALrtDvBgAAPWf+B4DBY/4HgMFj/geAwWP+B4DBY/4HgMFj/geAgfLDO3eSrbmXff/10sOtzdXaw6tL5fpqsbq5WFysbawXl2u15fQ7e6pHPV6lVlufux6bj6a/vV5vzNS3tu9Va5trjXvp93rfK4/0pFcAwNt8+MmzP+ciYufWeLpF21oO5mq42PL9bgDQN0P9bgDQN1b7gsF1gvf40gNwQXRYovc1hYgYP3yy2Ww2z65JwBm7/AX5fxhUbfl/fwUMA0b+HwaX/D8MrmYzd9w1/+O4NwQAzjc5fqDL5/8fZfvfZh8O/GTp8C2enmWrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4HzbX/+3mK0FPhn5fLEY8X5ETMdI7sFKpTwbER9ExJ/GRsaS8lyf2wwAnFT+b7ls/a/LU59NHq4dzb0cS/cR8bNf3f3lo4VGY+OPyfl/HZxvPM3Ol/rRfgDgKPvzdLpveyP/Yvfx4v7Wy/b8/bsRUWjF39sdjb2D+MMxnO4LMRIRE//OZeWWXFvu4iR2nkTE5zv1PxeTaQ6ktfLp4fhJ7Pd7Gj//Wvx8WtfaJz+Lz51CW2DQPEvGn9udrr98XEr3na//QjpCnVw2/iUPtbiXjoGv4u+Pf0Ndxr9Lx41x/fffbx2Nv1n3JOKLwxH7sffaxp/9+Lku8T87Zvy/fOkrn3ara/464nJ0jt8ea6ZRXZ+pb21fXakuLJeXy2ul0vzc/OzNazdKM2mOeqb7bPCPW1c+6FaX9H+iS/zCEf3/+jH7/5v/3v/xV98S/5tf6xQ/Hx+/JX4yJ37jmPEXJn5X6FaXxF/q0v+jnv8rx4z//K/bbywbDgD0T31re3WhUilv9PJg/4VET4M6uAAHyW/NOWhGx4Pv9CrWaPxf92o23ylWtxHjNLJuwHlwcNFHxMt+NwYAAAAAAAAAAAAAAOioF/+x1O8+AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcHH9LwAA//89fM7W") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000700)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000480), 0x400034f, 0x2, 0x0) sendfile(r3, r3, 0x0, 0x1000000000007) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2, 0x0, 0x4}}, 0x2e) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000c0010"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x820) syz_emit_ethernet(0x56, &(0x7f0000000040)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "910100", 0x1c, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x1c, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, '\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00@'}}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x4}]}}}]}, 0x3c}}, 0x0) 3m8.562682883s ago: executing program 0 (id=1277): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x24040000) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70fd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r2, {0xc}, {}, {0xa, 0x300}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xa2}, @TCA_ROUTE4_IIF={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20045080}, 0x140c0) 3m8.236119734s ago: executing program 0 (id=1279): mmap(&(0x7f000000c000/0x4000)=nil, 0x4000, 0xa, 0x31, 0xffffffffffffffff, 0x0) r0 = socket(0xf, 0x3, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$key(r0, &(0x7f0000000780)={0x40000000, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffff8, 0x0, 0x6}, {0x0, 0x0, 0x400000003, 0xfffffffffffffffc}, 0xfffffffc, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x4, 0x32}, 0x0, @in6=@remote, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 3m6.257546257s ago: executing program 0 (id=1280): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x484, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x458, 0x2, [@TCA_BPF_FD={0x8, 0x6, r0}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x4, 0x4c0a, 0x7ff, 0x9, 0x5, 0x661f, 0xce4, 0x5, 0xd1, 0x5, 0x2, 0x7, 0x0, 0x0, 0x8001, 0x9098, 0x8, 0xa, 0x0, 0x2, 0x34f, 0x3d7ed312, 0x3, 0x5, 0x5, 0x2, 0x7ff, 0xe7, 0x7, 0x7, 0x8, 0x5, 0xfffff47b, 0x998, 0x5, 0xfffffff7, 0xb, 0x7ff, 0xff, 0x1, 0x8, 0x5, 0x2b2, 0x7, 0x4, 0x6, 0x10, 0x3, 0x121, 0x8, 0x7, 0x8000, 0x80000000, 0x0, 0x4, 0x4000000, 0x200, 0x100, 0x7ff, 0x8, 0x8001, 0x9ef8, 0xfffffffe, 0x6, 0x7ff, 0xd, 0x401, 0x6, 0x8000, 0x13, 0x2, 0x5, 0x9, 0x3, 0xfffffff4, 0x7, 0x4, 0x0, 0x9, 0x5, 0xffffffff, 0x0, 0xffff, 0x9, 0x2e, 0x90000000, 0x0, 0x3, 0x40000002, 0x1, 0x0, 0x0, 0x7f, 0x7, 0x7, 0xfffffffb, 0x1, 0x8, 0x5983, 0x4, 0x0, 0x1, 0xa, 0x2, 0x33b7, 0x5, 0x5, 0xa, 0x3, 0x35, 0x6, 0x0, 0xdf, 0x9, 0x3, 0x5, 0x5, 0x7, 0x3, 0xfffffff7, 0x3ce, 0x7, 0x7, 0x6, 0x10000, 0x9, 0xb, 0x0, 0x7, 0x3, 0x200, 0x5, 0x2f, 0xfffffffb, 0x9c7e, 0x6, 0x0, 0x4, 0x1, 0x6, 0x2, 0x0, 0x95, 0x4, 0x1, 0x3, 0x8, 0x0, 0x5e7c14df, 0x1, 0x4, 0x13c0, 0x3, 0xe, 0xddd3000, 0x40, 0x7, 0x80, 0x8, 0x80000000, 0x3f, 0x3, 0x2, 0xb4a9, 0x400, 0x60f, 0x8, 0x3, 0x3, 0xcba9, 0x7, 0x1, 0x9, 0xa3f0, 0x0, 0x5, 0x4, 0xfffffff8, 0x10001, 0x7, 0x1, 0x4f0a, 0xe, 0x81, 0x5, 0xffff, 0x1000001, 0x32c, 0x5, 0x5c, 0x6, 0x7, 0xa3, 0x0, 0x8001, 0xfffff255, 0x1, 0x5, 0x80000001, 0xa, 0x4, 0x78962c2e, 0xffff, 0x9, 0x8, 0x6, 0xff, 0x1, 0x10000, 0x5, 0x5, 0x6, 0x0, 0x1, 0x32, 0x8, 0x0, 0x5, 0x8, 0x2246, 0x10000, 0x8, 0x3, 0xfffffff6, 0x9, 0x6, 0x7, 0x9, 0x2, 0x3ef, 0x1, 0xadc2, 0x6, 0x0, 0x3, 0x5, 0x1, 0xb6, 0x7, 0x3, 0xfffffffc, 0x6, 0x3, 0x3ff, 0xd, 0x4, 0x6, 0xa2, 0x5fd751c9, 0xfffffff3, 0x3, 0x9, 0x9, 0x7fffffff, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x2, 0x5, 0x4, 0xfffffffa, {0x3, 0x0, 0x5, 0xb, 0x2, 0x100}, {0x4, 0x2, 0xd, 0xb, 0x7}, 0x10, 0x2, 0x7}}]}]}}]}, 0x484}}, 0x0) 3m5.423187444s ago: executing program 0 (id=1283): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x1d, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x20}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 3m0.153887523s ago: executing program 0 (id=1294): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x484, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x458, 0x2, [@TCA_BPF_FD={0x8, 0x6, r0}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x4, 0x4c0a, 0x7ff, 0x9, 0x5, 0x661f, 0xce4, 0x5, 0xd1, 0x5, 0x2, 0x7, 0x0, 0x0, 0x8001, 0x9098, 0x8, 0xa, 0x0, 0x2, 0x34f, 0x3d7ed312, 0x3, 0x5, 0x5, 0x2, 0x7ff, 0xe7, 0x7, 0x7, 0x8, 0x5, 0xfffff47b, 0x998, 0x5, 0xfffffff7, 0xb, 0x7ff, 0xff, 0x1, 0x8, 0x5, 0x2b2, 0x7, 0x4, 0x6, 0x10, 0x3, 0x121, 0x8, 0x7, 0x8000, 0x80000000, 0x0, 0x4, 0x4000000, 0x200, 0x100, 0x7ff, 0x8, 0x8001, 0x9ef8, 0xfffffffe, 0x6, 0x7ff, 0xd, 0x401, 0x6, 0x8000, 0x13, 0x2, 0x5, 0x9, 0x3, 0xfffffff4, 0x7, 0x4, 0x0, 0x9, 0x5, 0xffffffff, 0x0, 0xffff, 0x9, 0x2e, 0x90000000, 0x0, 0x3, 0x40000002, 0x1, 0x0, 0x0, 0x7f, 0x7, 0x7, 0xfffffffb, 0x1, 0x8, 0x5983, 0x4, 0x0, 0x1, 0xa, 0x2, 0x33b7, 0x5, 0x5, 0xa, 0x3, 0x35, 0x6, 0x0, 0xdf, 0x9, 0x3, 0x5, 0x5, 0x7, 0x3, 0xfffffff7, 0x3ce, 0x7, 0x7, 0x6, 0x10000, 0x9, 0xb, 0x0, 0x7, 0x3, 0x200, 0x5, 0x2f, 0xfffffffb, 0x9c7e, 0x6, 0x0, 0x4, 0x1, 0x6, 0x2, 0x0, 0x95, 0x4, 0x1, 0x3, 0x8, 0x0, 0x5e7c14df, 0x1, 0x4, 0x13c0, 0x3, 0xe, 0xddd3000, 0x40, 0x7, 0x80, 0x8, 0x80000000, 0x3f, 0x3, 0x2, 0xb4a9, 0x400, 0x60f, 0x8, 0x3, 0x3, 0xcba9, 0x7, 0x1, 0x9, 0xa3f0, 0x0, 0x5, 0x4, 0xfffffff8, 0x10001, 0x7, 0x1, 0x4f0a, 0xe, 0x81, 0x5, 0xffff, 0x1000001, 0x32c, 0x5, 0x5c, 0x6, 0x7, 0xa3, 0x0, 0x8001, 0xfffff255, 0x1, 0x5, 0x80000001, 0xa, 0x4, 0x78962c2e, 0xffff, 0x9, 0x8, 0x6, 0xff, 0x1, 0x10000, 0x5, 0x5, 0x6, 0x0, 0x1, 0x32, 0x8, 0x0, 0x5, 0x8, 0x2246, 0x10000, 0x8, 0x3, 0xfffffff6, 0x9, 0x6, 0x7, 0x9, 0x2, 0x3ef, 0x1, 0xadc2, 0x6, 0x0, 0x3, 0x5, 0x1, 0xb6, 0x7, 0x3, 0xfffffffc, 0x6, 0x3, 0x3ff, 0xd, 0x4, 0x6, 0xa2, 0x5fd751c9, 0xfffffff3, 0x3, 0x9, 0x9, 0x7fffffff, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x2, 0x5, 0x4, 0xfffffffa, {0x3, 0x0, 0x5, 0xb, 0x2, 0x100}, {0x4, 0x2, 0xd, 0xb, 0x7}, 0x10, 0x2, 0x7}}]}]}}]}, 0x484}}, 0x0) 2m59.433482526s ago: executing program 0 (id=1295): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r2, 0x110, 0x4, &(0x7f0000000040)=0x2, 0x4) 2m44.131194666s ago: executing program 42 (id=1295): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r2, 0x110, 0x4, &(0x7f0000000040)=0x2, 0x4) 21.497603171s ago: executing program 8 (id=1686): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x2808000, &(0x7f00000029c0)=ANY=[@ANYBLOB="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"], 0x1, 0x294, &(0x7f0000000500)="$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") write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) chdir(0x0) r3 = socket$inet6(0xa, 0x3, 0x26) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x5, @local, 0x9}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x15}, @in6=@remote, 0x4e20, 0x0, 0x4e22, 0x0, 0xa}, {0x9, 0x0, 0x0, 0x200000000002f1b, 0x6, 0x0, 0x0, 0x24}, {0x0, 0x4}, 0x0, 0x0, 0x1, 0x0, 0x5, 0x3}, {{@in=@private=0xa010100, 0x800, 0x33}, 0xa, @in6=@empty, 0x0, 0x2, 0x0, 0x4, 0xfffffffc, 0x4, 0x401}}, 0xe4) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) 20.424043284s ago: executing program 8 (id=1689): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0xc) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r4, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) 19.362815778s ago: executing program 8 (id=1690): openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) r0 = socket(0xf, 0x3, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$key(r0, &(0x7f0000000780)={0x40000000, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffff8, 0x0, 0x6}, {0x0, 0x0, 0x400000003, 0xfffffffffffffffc}, 0xfffffffc, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x4, 0x32}, 0x0, @in6=@remote, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 19.071424418s ago: executing program 4 (id=1692): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=@base={0x16, 0x0, 0xb161, 0x2}, 0x48) socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_LIMIT_BURST={0x8}]}}}]}]}], {0x14}}, 0xc0}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sigaltstack(0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r5, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x5}], 0x2, 0x80, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058ff0b, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000780), 0x0, 0x24000011, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001200)={r6, 0x0, &(0x7f0000001780)=""/4096}, 0x20) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x800, &(0x7f0000001b80)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRESDEC, @ANYRES16, @ANYRES64, @ANYRES8=0x0, @ANYRESOCT, @ANYRESHEX, @ANYRESOCT=0x0, @ANYBLOB="96baa9bd293f32a4be21fdffc77440a9d9c7e16c6c51d63e8ba964b01e06c4ad80d5ba81bf754b2f63dd49ffac2f96d2be9ab12be13dc3bd59217be281d895795a047ce3258eb171bd1200000000000000a112eb61edbb22074fb2464c2c040aa73dc1cccff5291d669049a8e13b373c0960d91ad00e2765cf73b478067d073524b1515e0cf674b54ab1945a77534ca0c321c00bc82e1eec0d6ea55eab950800b5c12b71f10f76", @ANYRESOCT, @ANYRES8], 0x1, 0x1be, &(0x7f0000000640)="$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") 17.889391844s ago: executing program 4 (id=1693): socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'geneve0\x00', &(0x7f0000000180)=@ethtool_drvinfo={0x3, "088faeae71cb2c8016ce5a26dd57c8e3b85de050ad1065e1247fbdd7b48a2cad", "faa4a2190f2056f3dd98242c2765ebd4628d27b3a438bb2c3942914d8fc252bd", "56b1e81bca36bfb15636d23a08b57c399ad0be96573c8a040b6ca0ee92a61519", "f11944190968857758729f09206d229d45de48ab6da2f85bfcd59e046c65c4c3", "b81ed2ff398d4d079510c21b16f048516ac785fd228f4f85015fe9f272d7de5b", "99a40c1bddc8b91781d9bc15", 0x1ff, 0xc3e, 0x6b9, 0x3}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500190002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x24000000) r0 = socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}, 0x1, 0x0, 0x0, 0x40801}, 0x40000) 16.427391331s ago: executing program 4 (id=1697): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3004006, &(0x7f0000000240)={[{@user_xattr}, {@abort}, {@resuid}, {@user_xattr}, {@discard}, {@errors_remount}, {@debug}, {@noinit_itable}, {@nomblk_io_submit}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x56d, &(0x7f0000000540)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0xffffffffffffffff, 0xfe93) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) 13.28324316s ago: executing program 8 (id=1705): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}}, 0x0) 12.194765894s ago: executing program 8 (id=1707): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, 0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, r2, &(0x7f0000000980)=@IORING_OP_RECVMSG={0xa, 0x78, 0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x3}}) syz_ublk_add_dev(r0, 0x0, r1, r2, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) 10.594616365s ago: executing program 8 (id=1711): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3004006, &(0x7f0000000240)={[{@user_xattr}, {@abort}, {@resuid}, {@user_xattr}, {@discard}, {@errors_remount}, {@debug}, {@noinit_itable}, {@nomblk_io_submit}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x56d, &(0x7f0000000540)="$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") inotify_add_watch(0xffffffffffffffff, 0x0, 0x410008a0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file7\x00', 0x21c0, 0x103) 8.409518964s ago: executing program 2 (id=1717): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}}, 0x0) 8.292315778s ago: executing program 1 (id=1718): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x85}, 0x9}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466ccfff57a000000ad6e911b51818462", 0x26}, {&(0x7f0000000140)="10ef", 0x2}], 0x2}, 0x0) 8.051826485s ago: executing program 2 (id=1720): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r1}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001840)=@gettclass={0x24, 0x2a, 0x109, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xf, 0xfff1}, {0x5}, {0x10, 0x7}}}, 0x24}}, 0x0) 8.021096636s ago: executing program 1 (id=1721): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4004) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r5, @ANYBLOB="0800050009000000"], 0x24}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r8, &(0x7f00000002c0)={0x1, 0x5}, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000194c0)={0xffffffffffffffff, 0xe0, &(0x7f00000193c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000019200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, &(0x7f0000019240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000019280)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x94, &(0x7f00000192c0)=[{}, {}], 0x10, 0x10, &(0x7f0000019300), &(0x7f0000019340), 0x8, 0xdd, 0x8, 0x8, &(0x7f0000019380)}}, 0x10) sendmsg$DCCPDIAG_GETSOCK(r6, &(0x7f00000196c0)={0x0, 0x0, &(0x7f0000019680)={&(0x7f0000019500)={0x15c, 0x13, 0x10, 0x70bd2a, 0x25dfdbfb, {0x2b, 0x44, 0x6, 0x2, {0x4e20, 0x4e20, [0x4, 0x5, 0x9, 0x9], [0x1, 0x4, 0x1, 0x7], r9, [0xfffffffe, 0x1]}, 0x5, 0x3}, [@INET_DIAG_REQ_BYTECODE={0x9d, 0x1, "761674c5fa4249d63288988d8f1eacba7ff7321a62aabfad58d1baaf0c0aab01c43fb77d6c718423c48e7d1df56e567cb5f8760bf96f7259ba860e03d3621a161acd723a35bd3143eae891fa995da45da05a0e734f97079e8754c06e35b199172f5d678d15fa752e5c414e065b9175a3ac91d87e7475bf899ca58ad233c5a2eadc690747df382b4b460bdd4aa08a7d0f9707b436038bd51a6b"}, @INET_DIAG_REQ_BYTECODE={0x70, 0x1, "b11f94802ff59cf2524bf8325d218c926fc764c89f8ba62c9f45ebd810c70404828b9dd9277cc2839971fb992d850e7f967259b495bde2fbcec820303a5a7bcde4888acfca9f46b124a9007f7d97b8045692d0314d98d799083bf71575e9a84f641b4cc7ad4907cb9af1f10e"}]}, 0x15c}}, 0x10) close(r8) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0x0) ioctl$sock_SIOCBRDELBR(r6, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r10, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) 7.711482616s ago: executing program 4 (id=1722): socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='GPL\x00'}, 0x94) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r3, 0x0, 0x25, 0x2, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[], 0x50) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/current\x00') writev(r5, &(0x7f0000000240)=[{&(0x7f0000000080)='y', 0x1}], 0x1) capset(&(0x7f0000000000)={0x20071026}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) fchown(r6, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, r8, 0xb97534d5fe9704cf, 0x70bd3c, 0x25dfdbfc, {{0x12}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x44884}, 0xc808) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.346521808s ago: executing program 2 (id=1723): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000400)={[{@minixdf}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") openat(0xffffffffffffff9c, 0x0, 0x143841, 0x114) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='freezer.state\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f"}}) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x591) 6.982848179s ago: executing program 9 (id=1724): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_GET_PROPERTY(r3, 0x80106f53, &(0x7f0000000040)={0x20, &(0x7f0000000180)=[{0x3f, '\x00', @buffer={"8c7e955bf97c402a34dce4431f5a0640edb90bb17eaf7ff9372939ffcd3044fe", 0x20}, 0x10000}, {0x12, '\x00', @data=0x9, 0x9}]}) 4.781734918s ago: executing program 1 (id=1725): socket$netlink(0x10, 0x3, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x18d6, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) prctl$PR_SET_SECUREBITS(0x1c, 0x4) setuid(0xee01) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chroot(&(0x7f0000000a40)='./file0\x00') syz_open_dev$tty20(0xc, 0x4, 0x1) 4.781304208s ago: executing program 4 (id=1726): pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8000c61) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x20008c0, &(0x7f0000000780), 0x4, 0x360, &(0x7f0000000900)="$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") syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) setpgid(r0, r0) 4.207073507s ago: executing program 1 (id=1727): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0xc) socket$inet_udp(0x2, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r4, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) 3.408448872s ago: executing program 9 (id=1728): syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.751554512s ago: executing program 2 (id=1729): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10, 0x0}, 0x300440f1) setsockopt$sock_attach_bpf(r0, 0x1, 0x12, &(0x7f0000000300), 0x4) 2.456250152s ago: executing program 9 (id=1730): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}}, 0x0) 2.391028334s ago: executing program 1 (id=1731): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x27) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x40800) 2.059422655s ago: executing program 2 (id=1732): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3004006, &(0x7f0000000240)={[{@user_xattr}, {@abort}, {@resuid}, {@user_xattr}, {@discard}, {@errors_remount}, {@debug}, {@noinit_itable}, {@nomblk_io_submit}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x56d, &(0x7f0000000540)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0xffffffffffffffff, 0xfe93) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) 1.905658449s ago: executing program 1 (id=1733): io_uring_register$IORING_REGISTER_CLOCK(0xffffffffffffffff, 0x1d, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000540), 0x80840, 0x0) ioctl$PTP_PEROUT_REQUEST(r3, 0x80503d0a, &(0x7f0000000580)={{0x2, 0xed}, {0x84d, 0x32}, 0x7, 0x1}) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) 1.771213423s ago: executing program 9 (id=1734): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0xfffffffc, 0x0, 0x1, 0x138c}, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x2, 0x0, 0xffffffffffffffff, 0xc0207512, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000140)=@new_dev={0x3, 0xe91, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x140}}}, &(0x7f0000000300)) 1.343232187s ago: executing program 4 (id=1735): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4004) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r5, @ANYBLOB="0800050009000000"], 0x24}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_REGISTER(r8, &(0x7f00000000c0)={0x0, 0xfc}, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000194c0)={0xffffffffffffffff, 0xe0, &(0x7f00000193c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000019200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, &(0x7f0000019240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000019280)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x94, &(0x7f00000192c0)=[{}, {}], 0x10, 0x10, &(0x7f0000019300), &(0x7f0000019340), 0x8, 0xdd, 0x8, 0x8, &(0x7f0000019380)}}, 0x10) sendmsg$DCCPDIAG_GETSOCK(r6, &(0x7f00000196c0)={0x0, 0x0, &(0x7f0000019680)={&(0x7f0000019500)={0x15c, 0x13, 0x10, 0x70bd2a, 0x25dfdbfb, {0x2b, 0x44, 0x6, 0x2, {0x4e20, 0x4e20, [0x4, 0x5, 0x9, 0x9], [0x1, 0x4, 0x1, 0x7], r9, [0xfffffffe, 0x1]}, 0x5, 0x3}, [@INET_DIAG_REQ_BYTECODE={0x9d, 0x1, "761674c5fa4249d63288988d8f1eacba7ff7321a62aabfad58d1baaf0c0aab01c43fb77d6c718423c48e7d1df56e567cb5f8760bf96f7259ba860e03d3621a161acd723a35bd3143eae891fa995da45da05a0e734f97079e8754c06e35b199172f5d678d15fa752e5c414e065b9175a3ac91d87e7475bf899ca58ad233c5a2eadc690747df382b4b460bdd4aa08a7d0f9707b436038bd51a6b"}, @INET_DIAG_REQ_BYTECODE={0x70, 0x1, "b11f94802ff59cf2524bf8325d218c926fc764c89f8ba62c9f45ebd810c70404828b9dd9277cc2839971fb992d850e7f967259b495bde2fbcec820303a5a7bcde4888acfca9f46b124a9007f7d97b8045692d0314d98d799083bf71575e9a84f641b4cc7ad4907cb9af1f10e"}]}, 0x15c}}, 0x10) close(r8) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0x0) ioctl$sock_SIOCBRDELBR(r6, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r10, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) 609.45121ms ago: executing program 9 (id=1736): r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000980)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, {0x6730}, 0x1, {0x0, r0}}) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) 580.939591ms ago: executing program 2 (id=1737): socket$netlink(0x10, 0x3, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x18d6, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1214040, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) prctl$PR_SET_SECUREBITS(0x1c, 0x4) setuid(0xee01) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chroot(&(0x7f0000000a40)='./file0\x00') syz_open_dev$tty20(0xc, 0x4, 0x1) 0s ago: executing program 9 (id=1738): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_GET_PROPERTY(r1, 0x80106f53, &(0x7f0000000040)={0x20, &(0x7f0000000180)=[{0x3f, '\x00', @buffer={"8c7e955bf97c402a34dce4431f5a0640edb90bb17eaf7ff9372939ffcd3044fe", 0x20}, 0x10000}, {0x12, '\x00', @data=0x9, 0x9}]}) kernel console output (not intermixed with test programs): m. [ 424.681120][ T5287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 424.718969][ T5287] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.726163][ T5287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.181898][ T7883] loop3: detected capacity change from 0 to 8 [ 425.353848][ T7883] SQUASHFS error: zlib decompression failed, data probably corrupt [ 425.362165][ T7883] SQUASHFS error: Failed to read block 0x9b: -5 [ 425.368549][ T7883] SQUASHFS error: Unable to read metadata cache entry [99] [ 425.375816][ T7883] SQUASHFS error: Unable to read inode 0x127 [ 425.419706][ T5287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 425.628985][ T5287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 425.687682][ T5287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 425.798806][ T5287] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.801142][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 425.805938][ T5287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.820594][ T5287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 425.837200][ T5287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 425.922138][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 425.945778][ T7886] loop9: detected capacity change from 0 to 512 [ 425.952394][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 425.980341][ T7886] EXT4-fs: Ignoring removed mblk_io_submit option [ 425.999279][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 426.010478][ T7886] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 426.029436][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 426.099610][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 426.156360][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 426.221016][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 426.230261][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 426.239678][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 426.257185][ T7886] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 426.270026][ T7739] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 426.295955][ T7886] EXT4-fs (loop9): orphan cleanup on readonly fs [ 426.387726][ T7899] netlink: 'syz.3.765': attribute type 4 has an invalid length. [ 426.395787][ T7899] netlink: 'syz.3.765': attribute type 17 has an invalid length. [ 426.898385][ T7886] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.764: bg 0: block 361: padding at end of block bitmap is not set [ 426.951911][ T7886] EXT4-fs (loop9): Remounting filesystem read-only [ 427.002018][ T7886] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 427.090247][ T7886] EXT4-fs (loop9): Remounting filesystem read-only [ 427.096839][ T7886] EXT4-fs error (device loop9): ext4_clear_blocks:883: inode #11: comm syz.9.764: attempt to clear invalid blocks 33619980 len 1 [ 427.160031][ T7886] EXT4-fs (loop9): Remounting filesystem read-only [ 427.268254][ T7886] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #11: comm syz.9.764: invalid indirect mapped block 1811939328 (level 0) [ 427.345879][ T7886] EXT4-fs (loop9): Remounting filesystem read-only [ 427.408349][ T7886] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #11: comm syz.9.764: invalid indirect mapped block 2185560079 (level 1) [ 427.894578][ T7886] EXT4-fs (loop9): Remounting filesystem read-only [ 428.038361][ T7886] EXT4-fs (loop9): 1 truncate cleaned up [ 428.044114][ T7886] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 429.034841][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 429.080560][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 429.205051][ T7739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 429.358436][ T5969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 429.408850][ T5969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 429.589109][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 429.649285][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 429.785141][ T7739] device veth0_vlan entered promiscuous mode [ 429.804947][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 429.853996][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 429.972465][ T7739] device veth1_vlan entered promiscuous mode [ 430.048969][ T5275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 430.217399][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 430.246862][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 430.297592][ T7962] loop5: detected capacity change from 0 to 512 [ 430.302887][ T7739] device veth0_macvtap entered promiscuous mode [ 430.334080][ T7739] device veth1_macvtap entered promiscuous mode [ 430.453720][ T7962] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 430.488265][ T7739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.513724][ T7962] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 430.546911][ T7739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.567231][ T7739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.597683][ T7739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.838515][ T7739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.895712][ T7739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.927514][ T7739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.971685][ T7739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.000779][ T7739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.049524][ T7739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.068288][ T7739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.097757][ T7739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.134383][ T7739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.160211][ T7739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.191273][ T7739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.226465][ T7739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.241734][ T7739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.252596][ T7739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.262557][ T7739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.288144][ T7739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.318224][ T7739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.350901][ T7739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.399541][ T7739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 431.431957][ T7739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.468110][ T7739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.498113][ T7739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.530628][ T7739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.561235][ T7739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.591204][ T7739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.612300][ T7739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.657978][ T7739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.672372][ T7739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.699678][ T7739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.720141][ T7739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.748111][ T7739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.768113][ T7739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.796230][ T7739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.841357][ T7739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.872622][ T7739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.914969][ T7739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.930489][ T7739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.943430][ T7739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.236916][ T7739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.415909][ T7739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.638282][ T7739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.673060][ T6206] EXT4-fs (loop9): unmounting filesystem. [ 432.681506][ T7739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 432.778649][ T5285] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 432.809354][ T5285] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 432.881489][ T7380] EXT4-fs (loop5): unmounting filesystem. [ 432.887347][ T5285] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 432.910823][ T5285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 432.929240][ T5285] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 432.959743][ T5285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 432.982093][ T7985] netlink: 4 bytes leftover after parsing attributes in process `syz.0.774'. [ 432.992541][ T7985] device bridge_slave_1 left promiscuous mode [ 432.998943][ T7985] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.009682][ T7985] device bridge_slave_0 left promiscuous mode [ 433.015959][ T7985] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.124332][ T7994] overlayfs: missing 'lowerdir' [ 433.337406][ T7739] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.709610][ T7739] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.898818][ T7739] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.995328][ T7739] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.348684][ T8004] loop9: detected capacity change from 0 to 256 [ 434.609921][ T5264] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.617848][ T5264] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.662322][ T5287] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 434.736302][ T5264] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.767926][ T5264] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.825683][ T5264] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 434.883079][ T8000] loop3: detected capacity change from 0 to 256 [ 435.013964][ T8000] FAT-fs (loop3): Directory bread(block 64) failed [ 435.058231][ T8000] FAT-fs (loop3): Directory bread(block 65) failed [ 435.106095][ T8000] FAT-fs (loop3): Directory bread(block 66) failed [ 435.172574][ T8000] FAT-fs (loop3): Directory bread(block 67) failed [ 435.213230][ T8000] FAT-fs (loop3): Directory bread(block 68) failed [ 435.308197][ T8000] FAT-fs (loop3): Directory bread(block 69) failed [ 435.314881][ T8000] FAT-fs (loop3): Directory bread(block 70) failed [ 435.438768][ T8000] FAT-fs (loop3): Directory bread(block 71) failed [ 435.448407][ T8000] FAT-fs (loop3): Directory bread(block 72) failed [ 435.454983][ T8000] FAT-fs (loop3): Directory bread(block 73) failed [ 435.686714][ T8030] loop0: detected capacity change from 0 to 512 [ 436.066879][ T8030] EXT4-fs: Ignoring removed mblk_io_submit option [ 436.192294][ T8030] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 436.301238][ T8030] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 436.369766][ T8030] EXT4-fs (loop0): orphan cleanup on readonly fs [ 436.441842][ T8030] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.782: bg 0: block 361: padding at end of block bitmap is not set [ 436.596795][ T8030] EXT4-fs (loop0): Remounting filesystem read-only [ 436.647976][ T8030] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 436.778186][ T8030] EXT4-fs (loop0): Remounting filesystem read-only [ 436.864672][ T8030] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #11: comm syz.0.782: attempt to clear invalid blocks 33619980 len 1 [ 437.040779][ T8030] EXT4-fs (loop0): Remounting filesystem read-only [ 437.137974][ T8030] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.782: invalid indirect mapped block 1811939328 (level 0) [ 437.328623][ T8030] EXT4-fs (loop0): Remounting filesystem read-only [ 437.347555][ T8030] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.782: invalid indirect mapped block 2185560079 (level 1) [ 437.419677][ T8030] EXT4-fs (loop0): Remounting filesystem read-only [ 437.426469][ T8030] EXT4-fs (loop0): 1 truncate cleaned up [ 437.451993][ T8041] rdma_rxe: rxe_register_device failed with error -23 [ 437.459044][ T8041] rdma_rxe: failed to add ipvlan0 [ 437.514998][ T8030] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 437.750018][ T8044] loop2: detected capacity change from 0 to 512 [ 437.837383][ T8044] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 437.846863][ T8044] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 438.235470][ T8055] Cannot find add_set index 0 as target [ 438.609770][ T7739] EXT4-fs (loop2): unmounting filesystem. [ 439.161014][ T8064] netlink: 4 bytes leftover after parsing attributes in process `syz.3.788'. [ 439.170191][ T8064] device bridge_slave_1 left promiscuous mode [ 439.177058][ T8064] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.497995][ T8064] device bridge_slave_0 left promiscuous mode [ 439.504410][ T8064] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.122798][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.129232][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.151873][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 440.715897][ T8090] rdma_rxe: rxe_register_device failed with error -23 [ 440.722955][ T8090] rdma_rxe: failed to add ipvlan0 [ 441.635560][ T8102] loop0: detected capacity change from 0 to 256 [ 442.087168][ T8110] loop2: detected capacity change from 0 to 512 [ 442.200379][ T8113] Bluetooth: MGMT ver 1.22 [ 442.350348][ T8115] loop9: detected capacity change from 0 to 512 [ 442.361001][ T8113] loop3: detected capacity change from 0 to 512 [ 442.382756][ T8110] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 442.432733][ T8113] ext4: Unknown parameter 'obj_type' [ 442.441477][ T8110] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 442.485166][ T8115] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 442.498620][ T5056] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 442.721482][ T8125] loop5: detected capacity change from 0 to 512 [ 442.813080][ T8125] EXT4-fs: Ignoring removed mblk_io_submit option [ 442.860184][ T8125] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 443.009520][ T8125] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 443.039349][ T8125] EXT4-fs (loop5): orphan cleanup on readonly fs [ 443.051444][ T7739] EXT4-fs (loop2): unmounting filesystem. [ 443.058926][ T6206] EXT4-fs (loop9): unmounting filesystem. [ 443.065341][ T8125] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.804: bg 0: block 361: padding at end of block bitmap is not set [ 443.198638][ T8125] EXT4-fs (loop5): Remounting filesystem read-only [ 443.218260][ T8125] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 443.258197][ T8125] EXT4-fs (loop5): Remounting filesystem read-only [ 443.264783][ T8125] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #11: comm syz.5.804: attempt to clear invalid blocks 33619980 len 1 [ 443.358209][ T8125] EXT4-fs (loop5): Remounting filesystem read-only [ 443.378680][ T8125] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.804: invalid indirect mapped block 1811939328 (level 0) [ 443.428354][ T8125] EXT4-fs (loop5): Remounting filesystem read-only [ 443.434964][ T8125] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.804: invalid indirect mapped block 2185560079 (level 1) [ 443.494314][ T8125] EXT4-fs (loop5): Remounting filesystem read-only [ 443.513253][ T8125] EXT4-fs (loop5): 1 truncate cleaned up [ 443.538415][ T8125] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 444.293028][ T4288] Bluetooth: hci0: command 0x1407 tx timeout [ 444.299229][ T4292] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 445.791128][ T7380] EXT4-fs (loop5): unmounting filesystem. [ 446.983318][ T8182] loop5: detected capacity change from 0 to 512 [ 447.066674][ T8182] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 447.581320][ T7380] EXT4-fs (loop5): unmounting filesystem. [ 447.871765][ T8193] loop3: detected capacity change from 0 to 1024 [ 449.937407][ T8227] loop5: detected capacity change from 0 to 512 [ 450.076876][ T8227] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 450.173120][ T8227] EXT4-fs (loop5): orphan cleanup on readonly fs [ 450.189226][ T8234] loop2: detected capacity change from 0 to 512 [ 450.228658][ T8227] EXT4-fs warning (device loop5): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 450.294426][ T8227] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 450.330693][ T8234] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 450.377629][ T8227] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2916: inode #16: comm syz.5.826: corrupted xattr block 31 [ 450.508351][ T8227] EXT4-fs warning (device loop5): ext4_evict_inode:301: xattr delete (err -117) [ 450.517654][ T8227] EXT4-fs (loop5): 1 orphan inode deleted [ 450.572066][ T8227] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 450.661787][ T7739] EXT4-fs (loop2): unmounting filesystem. [ 450.967260][ T7380] EXT4-fs (loop5): unmounting filesystem. [ 452.249033][ T8263] loop5: detected capacity change from 0 to 1024 [ 452.338547][ T8263] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 452.471424][ T8263] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 454.233328][ T8290] loop3: detected capacity change from 0 to 512 [ 454.325682][ T8295] loop2: detected capacity change from 0 to 256 [ 454.420982][ T8290] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 454.488561][ T8295] FAT-fs (loop2): Directory bread(block 64) failed [ 454.519998][ T8295] FAT-fs (loop2): Directory bread(block 65) failed [ 454.526673][ T8295] FAT-fs (loop2): Directory bread(block 66) failed [ 454.543446][ T7380] EXT4-fs (loop5): unmounting filesystem. [ 454.618267][ T8295] FAT-fs (loop2): Directory bread(block 67) failed [ 454.649735][ T8295] FAT-fs (loop2): Directory bread(block 68) failed [ 454.688586][ T8295] FAT-fs (loop2): Directory bread(block 69) failed [ 454.695280][ T8295] FAT-fs (loop2): Directory bread(block 70) failed [ 454.778386][ T8295] FAT-fs (loop2): Directory bread(block 71) failed [ 454.785107][ T8295] FAT-fs (loop2): Directory bread(block 72) failed [ 454.821594][ T8295] FAT-fs (loop2): Directory bread(block 73) failed [ 454.822688][ T11] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.842086][ T7276] EXT4-fs (loop3): unmounting filesystem. [ 455.431557][ T11] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.010433][ T11] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.010393][ T11] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.044566][ T8326] loop3: detected capacity change from 0 to 512 [ 459.173771][ T8326] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: comm syz.3.851: inode #1: comm syz.3.851: iget: illegal inode # [ 459.311298][ T8332] loop0: detected capacity change from 0 to 256 [ 459.350237][ T8326] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.851: error while reading EA inode 1 err=-117 [ 460.018561][ T8332] FAT-fs (loop0): Directory bread(block 64) failed [ 460.078837][ T8332] FAT-fs (loop0): Directory bread(block 65) failed [ 460.085563][ T8332] FAT-fs (loop0): Directory bread(block 66) failed [ 460.149445][ T4292] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 460.164813][ T8326] EXT4-fs (loop3): 1 orphan inode deleted [ 460.170680][ T8326] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 460.189056][ T47] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 460.196979][ T8332] FAT-fs (loop0): Directory bread(block 67) failed [ 460.206409][ T8332] FAT-fs (loop0): Directory bread(block 68) failed [ 460.213198][ T47] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 460.220813][ T8332] FAT-fs (loop0): Directory bread(block 69) failed [ 460.227789][ T8332] FAT-fs (loop0): Directory bread(block 70) failed [ 460.234745][ T47] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 460.243023][ T8332] FAT-fs (loop0): Directory bread(block 71) failed [ 460.249886][ T47] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 460.257288][ T47] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 460.338374][ T8332] FAT-fs (loop0): Directory bread(block 72) failed [ 460.398528][ T8332] FAT-fs (loop0): Directory bread(block 73) failed [ 460.529311][ T7276] EXT4-fs (loop3): unmounting filesystem. [ 460.559462][ T8343] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 460.578183][ T8343] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 460.876401][ T8350] loop3: detected capacity change from 0 to 256 [ 462.278224][ T4288] Bluetooth: hci3: command 0x0409 tx timeout [ 464.358174][ T47] Bluetooth: hci3: command 0x041b tx timeout [ 465.310583][ T8383] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.449464][ T8383] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.650888][ T8383] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.789294][ T8383] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.852772][ T8336] chnl_net:caif_netlink_parms(): no params data found [ 465.911731][ T8383] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.929108][ T8383] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.946749][ T8383] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.962499][ T8383] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.450975][ T4288] Bluetooth: hci3: command 0x040f tx timeout [ 467.944504][ T8336] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.991582][ T8336] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.038666][ T8336] device bridge_slave_0 entered promiscuous mode [ 468.047622][ T8336] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.054968][ T8336] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.063551][ T8336] device bridge_slave_1 entered promiscuous mode [ 468.095159][ T8336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 468.134851][ T8336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 468.342900][ T8414] loop9: detected capacity change from 0 to 512 [ 468.433336][ T8414] EXT4-fs error (device loop9): ext4_xattr_inode_iget:401: comm syz.9.868: inode #1: comm syz.9.868: iget: illegal inode # [ 468.488890][ T8414] EXT4-fs error (device loop9): ext4_xattr_inode_iget:406: comm syz.9.868: error while reading EA inode 1 err=-117 [ 468.521027][ T4288] Bluetooth: hci3: command 0x0419 tx timeout [ 468.535484][ T8414] EXT4-fs (loop9): 1 orphan inode deleted [ 468.563704][ T8414] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 468.573722][ T8336] team0: Port device team_slave_0 added [ 468.592225][ T8420] loop3: detected capacity change from 0 to 1024 [ 468.640088][ T8336] team0: Port device team_slave_1 added [ 468.687982][ T8336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 468.695147][ T8336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 468.817810][ T8336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 468.855232][ T5056] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 469.628316][ T6206] EXT4-fs (loop9): unmounting filesystem. [ 469.966246][ T8426] netlink: 4 bytes leftover after parsing attributes in process `syz.0.870'. [ 470.019324][ T8336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 470.026335][ T8336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 470.052289][ C1] vkms_vblank_simulate: vblank timer overrun [ 470.205455][ T8336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 470.439420][ T8336] device hsr_slave_0 entered promiscuous mode [ 470.518771][ T8336] device hsr_slave_1 entered promiscuous mode [ 470.533288][ T8336] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 470.568162][ T8336] Cannot create hsr debugfs directory [ 470.586129][ T11] device hsr_slave_0 left promiscuous mode [ 470.629271][ T11] device hsr_slave_1 left promiscuous mode [ 470.638554][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 470.668330][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 470.709004][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 470.716492][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 470.769389][ T11] device bridge_slave_1 left promiscuous mode [ 470.775672][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.848383][ T11] device bridge_slave_0 left promiscuous mode [ 470.855985][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.971057][ T11] device veth1_macvtap left promiscuous mode [ 470.977182][ T11] device veth0_macvtap left promiscuous mode [ 471.001107][ T11] device veth1_vlan left promiscuous mode [ 471.017256][ T11] device veth0_vlan left promiscuous mode [ 471.047957][ T8443] loop9: detected capacity change from 0 to 256 [ 472.223837][ T8450] loop9: detected capacity change from 0 to 512 [ 472.353036][ T8450] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 472.382438][ T8450] ext4 filesystem being mounted at /91/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 474.264298][ T8470] loop3: detected capacity change from 0 to 1024 [ 474.296822][ T8470] EXT4-fs: Ignoring removed nomblk_io_submit option [ 474.370307][ T8470] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6002c028, mo2=0102] [ 474.401439][ T8470] System zones: 0-1, 3-12 [ 474.407043][ T8470] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 474.969505][ T11] team0 (unregistering): Port device team_slave_1 removed [ 475.101540][ T11] team0 (unregistering): Port device team_slave_0 removed [ 475.258572][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 476.044596][ T7276] EXT4-fs (loop3): unmounting filesystem. [ 476.606480][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 480.400594][ T11] bond0 (unregistering): Released all slaves [ 480.608530][ T8498] netlink: 4 bytes leftover after parsing attributes in process `syz.2.881'. [ 480.617424][ T8498] device bridge_slave_1 left promiscuous mode [ 480.623759][ T8498] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.640818][ T8498] device bridge_slave_0 left promiscuous mode [ 480.647118][ T8498] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.679373][ T6206] EXT4-fs (loop9): unmounting filesystem. [ 480.885622][ T8505] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 480.928395][ T8505] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 480.951542][ T8507] loop0: detected capacity change from 0 to 1024 [ 481.962209][ T4289] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 482.426280][ T8525] rdma_rxe: rxe_register_device failed with error -23 [ 482.451001][ T8336] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.526107][ T8525] rdma_rxe: failed to add ipvlan0 [ 482.595446][ T8529] loop9: detected capacity change from 0 to 1024 [ 482.609393][ T8529] EXT4-fs: Ignoring removed nomblk_io_submit option [ 482.714162][ T8529] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6002c028, mo2=0102] [ 482.789810][ T8336] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.818518][ T8529] System zones: 0-1, 3-12 [ 482.854529][ T8529] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 483.020981][ T8336] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.103072][ T8541] netlink: 24 bytes leftover after parsing attributes in process `syz.0.889'. [ 483.161983][ T8542] loop0: detected capacity change from 0 to 1024 [ 484.150001][ T6206] EXT4-fs (loop9): unmounting filesystem. [ 484.162711][ T8336] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.318301][ T8540] netlink: 24 bytes leftover after parsing attributes in process `syz.0.889'. [ 485.550597][ T8336] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 485.611475][ T8336] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 485.644649][ T8336] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 485.697066][ T8336] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 485.718571][ T4325] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 485.938503][ T4325] usb 1-1: Using ep0 maxpacket: 16 [ 485.972661][ T4325] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 486.028088][ T4325] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 486.044445][ T8336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 486.071750][ T4325] usb 1-1: config 0 interface 0 has no altsetting 0 [ 486.098388][ T4325] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 486.120462][ T5295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 486.137052][ T5295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 486.142519][ T4325] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.195224][ T4325] usb 1-1: config 0 descriptor?? [ 486.208478][ T8336] 8021q: adding VLAN 0 to HW filter on device team0 [ 486.266954][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 486.302761][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 486.334296][ T4332] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.341572][ T4332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 486.381966][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 486.399880][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 486.413109][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 486.446276][ T4332] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.453512][ T4332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 486.503810][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 486.556113][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 486.585941][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 486.623607][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 486.716353][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 486.746253][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 486.767985][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 486.787138][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 486.817982][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 486.858741][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 486.895955][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 486.935723][ T8336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 486.940467][ T4363] usb 1-1: USB disconnect, device number 2 [ 487.360891][ T8585] 9pnet_fd: Insufficient options for proto=fd [ 487.639875][ T8590] loop9: detected capacity change from 0 to 256 [ 487.830748][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 487.848877][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 487.910975][ T8336] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 488.139123][ T8600] loop9: detected capacity change from 0 to 1024 [ 490.125285][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 490.146402][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 490.232318][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 490.252070][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 490.295183][ T8336] device veth0_vlan entered promiscuous mode [ 490.316121][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 490.345620][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 490.396222][ T8336] device veth1_vlan entered promiscuous mode [ 490.529170][ T5294] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 490.559219][ T5294] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 490.578810][ T5294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 490.611386][ T5294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 490.664022][ T8336] device veth0_macvtap entered promiscuous mode [ 490.703071][ T8336] device veth1_macvtap entered promiscuous mode [ 490.761661][ T8336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.803613][ T8336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.858270][ T8336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.880718][ T8336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.948100][ T8336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.974827][ T8336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.008086][ T8336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 491.041872][ T8336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.068082][ T8336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 491.098342][ T8336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.130676][ T8336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 491.168151][ T8336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.200457][ T8336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 491.237104][ T8336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.271806][ T8336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 491.307661][ T8336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.370628][ T8336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 491.399666][ T8336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.448190][ T8336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 491.498363][ T8336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.538310][ T8336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 491.568161][ T8336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.600736][ T8336] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 491.667579][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 491.695880][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 491.719882][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 491.759969][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 491.825254][ T8336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 491.868145][ T8336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.912872][ T8336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 491.936727][ T8336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.961812][ T8653] 9pnet_fd: Insufficient options for proto=fd [ 491.971249][ T8336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.002411][ T8336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.033150][ T8336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.064563][ T8336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.117149][ T8336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.147627][ T8336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.178182][ T8336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.184034][ T8657] loop2: detected capacity change from 0 to 512 [ 492.198146][ T8336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.218106][ T8336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.239237][ T8657] EXT4-fs: Ignoring removed orlov option [ 492.288976][ T8657] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 492.308137][ T8336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.318214][ T8336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.394199][ T8336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.409589][ T8657] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 492.450629][ T8336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.512024][ T8336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.522320][ T8657] EXT4-fs error (device loop2): ext4_iget_extra_inode:4763: inode #15: comm syz.2.904: corrupted in-inode xattr [ 492.536351][ T8657] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.904: couldn't read orphan inode 15 (err -117) [ 492.548725][ T8657] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 492.568264][ T8336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.613406][ T8336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.646750][ T8336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.668901][ T8665] overlayfs: missing 'lowerdir' [ 492.687967][ T8336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.853730][ T8336] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 492.884007][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 492.944662][ T7739] EXT4-fs (loop2): unmounting filesystem. [ 492.946813][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 493.224796][ T8336] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.273916][ T8336] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.333399][ T8336] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.398135][ T8336] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.706527][ T4373] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.768990][ T4373] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.856087][ T5294] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 493.910749][ T4870] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.954012][ T4870] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.018573][ T5266] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 498.528546][ T47] Bluetooth: hci1: command 0x0406 tx timeout [ 500.640544][ T8760] netlink: 12 bytes leftover after parsing attributes in process `syz.2.927'. [ 501.376226][ T8768] overlayfs: overlapping lowerdir path [ 501.562215][ T8778] loop2: detected capacity change from 0 to 512 [ 501.571553][ T8778] EXT4-fs: Ignoring removed nomblk_io_submit option [ 501.603316][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.617295][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.812056][ T8778] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 501.821484][ T8778] ext4 filesystem being mounted at /33/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 505.899476][ T7739] EXT4-fs (loop2): unmounting filesystem. [ 507.692587][ T8826] overlayfs: overlapping lowerdir path [ 508.578794][ T8834] loop4: detected capacity change from 0 to 256 [ 508.800281][ T8834] FAT-fs (loop4): Directory bread(block 64) failed [ 508.827368][ T8834] FAT-fs (loop4): Directory bread(block 65) failed [ 508.908317][ T8834] FAT-fs (loop4): Directory bread(block 66) failed [ 508.914960][ T8834] FAT-fs (loop4): Directory bread(block 67) failed [ 508.939585][ T8834] FAT-fs (loop4): Directory bread(block 68) failed [ 510.064511][ T8834] FAT-fs (loop4): Directory bread(block 69) failed [ 510.082206][ T8834] FAT-fs (loop4): Directory bread(block 70) failed [ 510.086332][ T8834] FAT-fs (loop4): Directory bread(block 71) failed [ 510.172102][ T8846] random: crng reseeded on system resumption [ 511.690970][ T8834] FAT-fs (loop4): Directory bread(block 72) failed [ 511.711781][ T8834] FAT-fs (loop4): Directory bread(block 73) failed [ 513.936893][ T8860] netlink: 12 bytes leftover after parsing attributes in process `syz.9.957'. [ 514.541909][ T8876] overlayfs: overlapping lowerdir path [ 517.117303][ T8896] loop9: detected capacity change from 0 to 256 [ 517.202360][ T8896] FAT-fs (loop9): Directory bread(block 64) failed [ 517.469478][ T8896] FAT-fs (loop9): Directory bread(block 65) failed [ 517.984476][ T8896] FAT-fs (loop9): Directory bread(block 66) failed [ 517.991354][ T8903] capability: warning: `syz.0.965' uses deprecated v2 capabilities in a way that may be insecure [ 518.068448][ T8896] FAT-fs (loop9): Directory bread(block 67) failed [ 518.075302][ T8896] FAT-fs (loop9): Directory bread(block 68) failed [ 518.106362][ T8896] FAT-fs (loop9): Directory bread(block 69) failed [ 518.199025][ T8896] FAT-fs (loop9): Directory bread(block 70) failed [ 518.205629][ T8896] FAT-fs (loop9): Directory bread(block 71) failed [ 518.253062][ T8896] FAT-fs (loop9): Directory bread(block 72) failed [ 518.291300][ T8896] FAT-fs (loop9): Directory bread(block 73) failed [ 519.153227][ T8918] loop0: detected capacity change from 0 to 8 [ 519.383276][ T8918] SQUASHFS error: zlib decompression failed, data probably corrupt [ 519.392952][ T8918] SQUASHFS error: Failed to read block 0x9b: -5 [ 519.399326][ T8918] SQUASHFS error: Unable to read metadata cache entry [99] [ 519.406558][ T8918] SQUASHFS error: Unable to read inode 0x127 [ 519.676286][ T5056] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 520.982923][ T8932] overlayfs: overlapping lowerdir path [ 522.037136][ T8943] overlayfs: filesystem on './file0' not supported as upperdir [ 523.840234][ T8964] netlink: 24 bytes leftover after parsing attributes in process `syz.0.981'. [ 526.187268][ T8997] loop9: detected capacity change from 0 to 512 [ 526.428991][ T8997] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 526.468207][ T8997] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 526.781794][ T6206] EXT4-fs (loop9): unmounting filesystem. [ 526.799571][ T9008] netlink: 12 bytes leftover after parsing attributes in process `syz.4.994'. [ 531.105076][ T9043] loop0: detected capacity change from 0 to 1024 [ 531.119229][ T9043] EXT4-fs: Ignoring removed nomblk_io_submit option [ 531.972392][ T9043] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6002c028, mo2=0102] [ 532.067993][ T9043] System zones: 0-1, 3-12 [ 532.321777][ T9043] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 532.814429][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 533.425869][ T9078] overlayfs: filesystem on './file0' not supported as upperdir [ 534.470211][ T9059] fuse: Bad value for 'fd' [ 538.843387][ T9116] loop9: detected capacity change from 0 to 1024 [ 538.989115][ T9116] EXT4-fs: Ignoring removed nomblk_io_submit option [ 539.101466][ T9116] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6002c028, mo2=0102] [ 539.418802][ T9116] System zones: 0-1, 3-12 [ 539.489186][ T9136] overlayfs: filesystem on './file0' not supported as upperdir [ 539.592170][ T9116] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 540.280106][ T4288] Bluetooth: hci0: command 0x0406 tx timeout [ 540.416267][ T6206] EXT4-fs (loop9): unmounting filesystem. [ 541.146572][ T9153] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1029'. [ 542.487189][ T9159] loop3: detected capacity change from 0 to 512 [ 542.582127][ T9159] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 542.629749][ T9159] ext4 filesystem being mounted at /72/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 543.692408][ T9181] loop4: detected capacity change from 0 to 1024 [ 543.700028][ T9181] EXT4-fs: Ignoring removed nomblk_io_submit option [ 543.749789][ T9181] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6002c028, mo2=0102] [ 543.770351][ T9181] System zones: 0-1, 3-12 [ 543.823788][ T9181] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 544.027805][ T9191] loop9: detected capacity change from 0 to 256 [ 544.589399][ T8336] EXT4-fs (loop4): unmounting filesystem. [ 546.871391][ T9218] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1045'. [ 548.886308][ T9243] loop9: detected capacity change from 0 to 1024 [ 548.934072][ T9243] EXT4-fs: Ignoring removed nomblk_io_submit option [ 548.991810][ T9243] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6002c028, mo2=0102] [ 549.015081][ T9243] System zones: 0-1, 3-12 [ 549.042430][ T9243] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 549.663545][ T9255] loop4: detected capacity change from 0 to 256 [ 552.799628][ T9283] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1059'. [ 553.727435][ T6206] EXT4-fs (loop9): unmounting filesystem. [ 553.860645][ T9287] loop2: detected capacity change from 0 to 512 [ 553.940368][ T9287] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 554.085716][ T9287] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1062'. [ 554.367856][ T7739] EXT4-fs (loop2): unmounting filesystem. [ 555.829950][ T9313] loop2: detected capacity change from 0 to 256 [ 557.259333][ T9178] EXT4-fs (loop3): unmounting filesystem. [ 559.366211][ T9349] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1072'. [ 559.730391][ T47] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 559.743761][ T4292] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 559.752754][ T47] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 559.763031][ T47] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 559.781598][ T4292] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 559.790276][ T47] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 560.805523][ T5289] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.680473][ T47] Bluetooth: hci4: command 0x0409 tx timeout [ 563.166614][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.173287][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.295906][ T5289] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.634071][ T9376] loop2: detected capacity change from 0 to 8 [ 563.645859][ T9376] SQUASHFS error: zlib decompression failed, data probably corrupt [ 563.653915][ T9376] SQUASHFS error: Failed to read block 0x9b: -5 [ 563.660313][ T9376] SQUASHFS error: Unable to read metadata cache entry [99] [ 563.667549][ T9376] SQUASHFS error: Unable to read inode 0x127 [ 563.733214][ T5289] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.748904][ T4289] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 563.923161][ T5289] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.337604][ T9347] chnl_net:caif_netlink_parms(): no params data found [ 564.829436][ T47] Bluetooth: hci4: command 0x041b tx timeout [ 565.372914][ T9347] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.380248][ T9347] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.391816][ T9347] device bridge_slave_0 entered promiscuous mode [ 565.410906][ T9347] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.427945][ T9347] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.587721][ T9347] device bridge_slave_1 entered promiscuous mode [ 565.754699][ T9400] netlink: 'syz.2.1083': attribute type 4 has an invalid length. [ 565.762781][ T9400] netlink: 'syz.2.1083': attribute type 17 has an invalid length. [ 566.135462][ T9347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 566.955876][ T47] Bluetooth: hci4: command 0x040f tx timeout [ 566.973202][ T9347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 567.090073][ T9347] team0: Port device team_slave_0 added [ 567.101772][ T9347] team0: Port device team_slave_1 added [ 567.453375][ T9347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 567.478428][ T9347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 567.671300][ T9347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 568.515549][ T9347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 568.523638][ T9347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 568.551361][ T9347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 568.913278][ T9426] loop2: detected capacity change from 0 to 4096 [ 568.994857][ T9426] EXT4-fs: Ignoring removed mblk_io_submit option [ 569.002441][ T47] Bluetooth: hci4: command 0x0419 tx timeout [ 569.043898][ T9426] EXT4-fs (loop2): Test dummy encryption mode enabled [ 569.123574][ T9347] device hsr_slave_0 entered promiscuous mode [ 569.139909][ T9426] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 569.195739][ T9347] device hsr_slave_1 entered promiscuous mode [ 569.212236][ T9347] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 569.356009][ T9441] loop4: detected capacity change from 0 to 512 [ 569.419186][ T9347] Cannot create hsr debugfs directory [ 569.493278][ T9441] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 569.536945][ T9441] ext4 filesystem being mounted at /40/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 569.712993][ T7739] EXT4-fs (loop2): unmounting filesystem. [ 569.746296][ T9446] EXT4-fs error (device loop4): ext4_lookup:1858: inode #12: comm syz.4.1092: iget: bad i_size value: 2533274857506816 [ 569.782489][ T9446] EXT4-fs (loop4): Remounting filesystem read-only [ 569.800030][ T9441] EXT4-fs error (device loop4): ext4_resize_begin:62: comm syz.4.1092: resize_inode disabled but reserved GDT blocks non-zero [ 569.920704][ T9441] EXT4-fs (loop4): Remounting filesystem read-only [ 570.585414][ T9454] 9pnet_fd: Insufficient options for proto=fd [ 570.800165][ T8336] EXT4-fs (loop4): unmounting filesystem. [ 571.384923][ T9347] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.321655][ T9347] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.785317][ T9347] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.902812][ T5289] device hsr_slave_0 left promiscuous mode [ 572.919929][ T5289] device hsr_slave_1 left promiscuous mode [ 572.958442][ T5289] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 572.989662][ T5289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 573.021605][ T5289] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 573.062288][ T5289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 573.281845][ T5289] device veth1_macvtap left promiscuous mode [ 573.346629][ T5289] device veth0_macvtap left promiscuous mode [ 573.389553][ T5289] device veth1_vlan left promiscuous mode [ 573.395442][ T5289] device veth0_vlan left promiscuous mode [ 575.020158][ T9511] 9pnet_fd: Insufficient options for proto=fd [ 575.995179][ T9525] overlayfs: unrecognized mount option "/" or missing value [ 576.273666][ T5289] team0 (unregistering): Port device team_slave_1 removed [ 576.492499][ T9532] loop9: detected capacity change from 0 to 4096 [ 576.510411][ T9532] EXT4-fs: Ignoring removed mblk_io_submit option [ 576.520186][ T9532] EXT4-fs (loop9): Test dummy encryption mode enabled [ 576.894225][ T5289] team0 (unregistering): Port device team_slave_0 removed [ 576.917471][ T9532] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 577.453924][ T5289] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 577.560975][ T6206] EXT4-fs (loop9): unmounting filesystem. [ 577.679311][ T5289] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 578.689431][ T9550] loop4: detected capacity change from 0 to 256 [ 580.451429][ T5289] bond0 (unregistering): Released all slaves [ 580.499681][ T9580] overlayfs: unrecognized mount option "/" or missing value [ 580.725277][ T9347] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.156968][ T9347] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 581.230774][ T9347] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 581.259819][ T9347] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 581.295529][ T9347] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 582.101961][ T9347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 582.258860][ T5260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 582.308555][ T5260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 582.344047][ T9347] 8021q: adding VLAN 0 to HW filter on device team0 [ 582.405762][ T5202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 582.434739][ T5202] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 582.698259][ T5202] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.705461][ T5202] bridge0: port 1(bridge_slave_0) entered forwarding state [ 583.666351][ T5202] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 583.688595][ T5294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 583.758815][ T5294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 583.912845][ T5294] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.920049][ T5294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 584.509540][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 584.539621][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 584.784342][ T5273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 584.826163][ T9648] loop4: detected capacity change from 0 to 8 [ 584.849435][ T9648] SQUASHFS error: zlib decompression failed, data probably corrupt [ 584.856358][ T5273] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 584.857433][ T9648] SQUASHFS error: Failed to read block 0x9b: -5 [ 584.871872][ T9648] SQUASHFS error: Unable to read metadata cache entry [99] [ 584.879147][ T9648] SQUASHFS error: Unable to read inode 0x127 [ 584.899850][ T5273] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 584.945062][ T5273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 584.985606][ T5273] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 585.010654][ T5273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 585.031960][ T5273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 585.056911][ T9347] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 585.083951][ T9347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 585.106900][ T5273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 585.121009][ T5273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 585.568135][ T4288] Bluetooth: hci3: command 0x0406 tx timeout [ 586.449378][ T5273] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 586.467100][ T5273] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 586.543152][ T9347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 586.773466][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 586.801205][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 587.854546][ T9347] device veth0_vlan entered promiscuous mode [ 588.355242][ T9347] device veth1_vlan entered promiscuous mode [ 588.531098][ T5270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 588.615427][ T5270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 588.645170][ T5270] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 589.894025][ T5270] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 589.913047][ T5270] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 589.986499][ T5270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 590.020810][ T5270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 590.079899][ T9347] device veth0_macvtap entered promiscuous mode [ 590.181510][ T9347] device veth1_macvtap entered promiscuous mode [ 590.212273][ T9731] loop2: detected capacity change from 0 to 4096 [ 590.241699][ T9731] EXT4-fs: Ignoring removed mblk_io_submit option [ 590.264179][ T9347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 590.303485][ T9347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 590.339975][ T9731] EXT4-fs (loop2): Test dummy encryption mode enabled [ 590.354096][ T9347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 590.387106][ T9731] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 590.474204][ T9347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 590.525534][ T9347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 590.627653][ T9347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 590.651454][ T9347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 590.663496][ T9347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 590.673376][ T9347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 590.684955][ T9347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 590.695050][ T9347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 590.712492][ T9347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 590.728103][ T9347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 590.748164][ T9347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 590.791472][ T9347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 590.823777][ T9347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 590.834960][ T9347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 590.858146][ T9347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 590.885364][ T9347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 590.912647][ T9347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 590.923097][ T9347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 590.937405][ T9347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 590.959374][ T7739] EXT4-fs (loop2): unmounting filesystem. [ 590.959578][ T9347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 590.977957][ T5260] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 591.049077][ T5260] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 591.118611][ T5260] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 591.138743][ T5260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 591.505089][ T9760] loop2: detected capacity change from 0 to 256 [ 591.916774][ T9347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 592.015358][ T9347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 592.947565][ T9347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 592.958134][ T9347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 592.967957][ T9347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 593.008191][ T9347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.068115][ T9347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 593.334868][ T9347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.697934][ T9347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 594.086691][ T9347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.132799][ T9347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 594.185626][ T9347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.233307][ T9347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 594.296071][ T9347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.328569][ T9347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 594.378306][ T9347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.420237][ T9347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 594.467321][ T9347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.510790][ T9347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 594.574941][ T9347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.603184][ T9347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 594.634289][ T9347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.730674][ T9347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 594.818891][ T9347] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.865986][ T9347] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.894993][ T9347] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.915701][ T9347] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.078691][ T5260] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 595.086670][ T5260] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.167917][ T5260] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 595.185599][ T5260] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.568502][ T5275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 595.577554][ T5275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 595.610155][ T5275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 595.626639][ T5275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 595.877236][ T9785] loop2: detected capacity change from 0 to 4096 [ 595.979583][ T9785] EXT4-fs: Ignoring removed mblk_io_submit option [ 596.510064][ T9785] EXT4-fs (loop2): Test dummy encryption mode enabled [ 596.545766][ T9785] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 596.712222][ T7739] EXT4-fs (loop2): unmounting filesystem. [ 596.760422][ T9806] tipc: Started in network mode [ 596.848307][ T9806] tipc: Node identity 8a6352617f26, cluster identity 4711 [ 596.907328][ T9806] tipc: Enabled bearer , priority 0 [ 597.173420][ T9806] tipc: Resetting bearer [ 597.959230][ T9810] device syzkaller0 entered promiscuous mode [ 597.988572][ T9810] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 598.186384][ T9804] tipc: Resetting bearer [ 598.370051][ T9804] tipc: Disabling bearer [ 598.427059][ T953] tipc: Node number set to 4114960993 [ 601.726545][ T9844] loop1: detected capacity change from 0 to 4096 [ 601.809034][ T9849] loop9: detected capacity change from 0 to 1024 [ 601.816693][ T9844] EXT4-fs: Ignoring removed orlov option [ 601.902001][ T9849] EXT4-fs: Ignoring removed nomblk_io_submit option [ 601.951909][ T9844] EXT4-fs (loop1): Test dummy encryption mode enabled [ 602.046690][ T9844] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 602.058611][ T9849] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6002c028, mo2=0102] [ 602.097401][ T9849] System zones: 0-1, 3-12 [ 602.135286][ T9849] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 603.161568][ T6206] EXT4-fs (loop9): unmounting filesystem. [ 603.381217][ T9844] fscrypt (loop1): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 604.248331][ T9878] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1182'. [ 604.257302][ T9878] device bridge_slave_1 left promiscuous mode [ 604.263717][ T9878] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.275298][ T9878] device bridge_slave_0 left promiscuous mode [ 604.283653][ T9878] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.320192][ T9347] EXT4-fs (loop1): unmounting filesystem. [ 607.002429][ T9908] loop1: detected capacity change from 0 to 1024 [ 607.061902][ T9908] EXT4-fs: Ignoring removed nomblk_io_submit option [ 607.216597][ T9908] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6002c028, mo2=0102] [ 607.233520][ T9908] System zones: 0-1, 3-12 [ 607.302745][ T9914] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 607.334681][ T9908] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 607.784500][ T9347] EXT4-fs (loop1): unmounting filesystem. [ 609.991391][ T9941] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1198'. [ 610.000477][ T9941] device bridge_slave_1 left promiscuous mode [ 610.006749][ T9941] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.327265][ T9941] device bridge_slave_0 left promiscuous mode [ 610.335807][ T9941] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.454036][ T9975] loop4: detected capacity change from 0 to 1024 [ 612.471867][ T9975] EXT4-fs: Ignoring removed nomblk_io_submit option [ 612.640015][ T9975] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6002c028, mo2=0102] [ 612.668284][ T9975] System zones: 0-1, 3-12 [ 613.414351][ T9975] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 613.839861][T10004] 9pnet_fd: Insufficient options for proto=fd [ 614.137300][T10009] loop9: detected capacity change from 0 to 512 [ 614.373908][T10009] EXT4-fs error (device loop9): ext4_read_inode_bitmap:140: comm syz.9.1217: Invalid inode bitmap blk 4 in block_group 0 [ 614.458779][T10009] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 614.736334][T10024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1219'. [ 614.757616][ T6206] EXT4-fs (loop9): unmounting filesystem. [ 615.122491][ T8336] EXT4-fs (loop4): unmounting filesystem. [ 615.678926][T10046] 9pnet_fd: Insufficient options for proto=fd [ 619.040442][T10108] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1238'. [ 623.718581][T10174] loop4: detected capacity change from 0 to 1024 [ 623.849860][T10174] EXT4-fs: Ignoring removed nomblk_io_submit option [ 623.980635][T10174] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6002c028, mo2=0102] [ 624.073025][T10174] System zones: 0-1, 3-12 [ 624.089451][T10174] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 624.441508][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.447962][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.931752][T10203] loop9: detected capacity change from 0 to 8 [ 624.955359][T10203] SQUASHFS error: zlib decompression failed, data probably corrupt [ 624.965005][T10203] SQUASHFS error: Failed to read block 0x9b: -5 [ 624.971820][T10203] SQUASHFS error: Unable to read metadata cache entry [99] [ 624.979125][T10203] SQUASHFS error: Unable to read inode 0x127 [ 626.012317][T10211] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1256'. [ 626.945079][T10220] loop9: detected capacity change from 0 to 256 [ 627.124695][T10220] FAT-fs (loop9): Directory bread(block 64) failed [ 627.149484][T10220] FAT-fs (loop9): Directory bread(block 65) failed [ 627.184952][T10220] FAT-fs (loop9): Directory bread(block 66) failed [ 627.221642][T10220] FAT-fs (loop9): Directory bread(block 67) failed [ 627.255330][T10220] FAT-fs (loop9): Directory bread(block 68) failed [ 627.285372][T10220] FAT-fs (loop9): Directory bread(block 69) failed [ 627.309316][T10220] FAT-fs (loop9): Directory bread(block 70) failed [ 627.332494][T10220] FAT-fs (loop9): Directory bread(block 71) failed [ 627.358272][T10220] FAT-fs (loop9): Directory bread(block 72) failed [ 627.364907][T10220] FAT-fs (loop9): Directory bread(block 73) failed [ 627.553141][ T8336] EXT4-fs (loop4): unmounting filesystem. [ 629.011916][T10236] 9pnet_fd: Insufficient options for proto=fd [ 629.328448][T10245] rdma_rxe: rxe_register_device failed with error -23 [ 629.335408][T10245] rdma_rxe: failed to add ipvlan0 [ 630.379800][T10275] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1268'. [ 632.924351][T10307] loop1: detected capacity change from 0 to 8 [ 632.961208][T10307] SQUASHFS error: zlib decompression failed, data probably corrupt [ 632.969408][T10307] SQUASHFS error: Failed to read block 0x9b: -5 [ 632.975722][T10307] SQUASHFS error: Unable to read metadata cache entry [99] [ 632.983050][T10307] SQUASHFS error: Unable to read inode 0x127 [ 633.719918][ T4289] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 638.463513][T10377] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1281'. [ 638.698767][T10382] fuse: Bad value for 'group_id' [ 639.213139][T10387] loop2: detected capacity change from 0 to 4096 [ 639.341693][T10387] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 639.611879][ T7739] EXT4-fs (loop2): unmounting filesystem. [ 642.370277][T10428] loop2: detected capacity change from 0 to 256 [ 642.527208][T10428] FAT-fs (loop2): Directory bread(block 64) failed [ 642.578692][T10428] FAT-fs (loop2): Directory bread(block 65) failed [ 642.587529][T10428] FAT-fs (loop2): Directory bread(block 66) failed [ 642.639878][T10428] FAT-fs (loop2): Directory bread(block 67) failed [ 642.646598][T10428] FAT-fs (loop2): Directory bread(block 68) failed [ 642.668360][T10428] FAT-fs (loop2): Directory bread(block 69) failed [ 642.705546][T10428] FAT-fs (loop2): Directory bread(block 70) failed [ 642.734915][T10428] FAT-fs (loop2): Directory bread(block 71) failed [ 642.772144][T10428] FAT-fs (loop2): Directory bread(block 72) failed [ 642.812253][T10428] FAT-fs (loop2): Directory bread(block 73) failed [ 645.143717][T10482] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1297'. [ 646.000875][T10497] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1301'. [ 646.067579][T10497] loop1: detected capacity change from 0 to 1024 [ 646.123339][T10497] EXT4-fs: Ignoring removed bh option [ 646.353211][T10497] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 646.425201][T10497] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1301'. [ 647.219609][ T9347] EXT4-fs (loop1): unmounting filesystem. [ 647.969407][T10527] overlayfs: filesystem on './file0' not supported as upperdir [ 649.083150][T10532] loop9: detected capacity change from 0 to 4096 [ 649.520056][T10532] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 650.386478][ T6206] EXT4-fs (loop9): unmounting filesystem. [ 651.641177][T10586] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1317'. [ 651.838083][T10586] loop9: detected capacity change from 0 to 1024 [ 651.862328][T10586] EXT4-fs: Ignoring removed bh option [ 651.928637][T10586] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 651.959930][T10586] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1317'. [ 652.033495][T10600] tap0: tun_chr_ioctl cmd 1074025677 [ 652.059876][ T6206] EXT4-fs (loop9): unmounting filesystem. [ 652.086696][T10600] tap0: linktype set to 776 [ 652.310666][T10613] netlink: 'syz.9.1320': attribute type 9 has an invalid length. [ 654.813479][T10636] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1327'. [ 656.383314][T10663] loop9: detected capacity change from 0 to 1024 [ 656.422434][T10663] EXT4-fs: Ignoring removed nomblk_io_submit option [ 656.478783][T10663] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6002c028, mo2=0102] [ 656.504967][T10663] System zones: 0-1, 3-12 [ 656.520708][T10663] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 657.253129][ T6206] EXT4-fs (loop9): unmounting filesystem. [ 658.221065][T10696] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1345'. [ 660.639312][T10725] 9pnet: Could not find request transport: fd0x0000000000000004 [ 661.360006][T10741] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1358'. [ 662.731551][ T47] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 662.921245][ T4292] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 662.941762][ T47] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 662.981824][ T4292] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 663.151604][ T4292] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 663.179443][ T4292] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 665.238266][ T4292] Bluetooth: hci1: command 0x0409 tx timeout [ 667.322098][ T4292] Bluetooth: hci1: command 0x041b tx timeout [ 667.579796][ T5267] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.566154][ T5267] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.784999][T10821] loop1: detected capacity change from 0 to 1024 [ 668.813465][T10754] chnl_net:caif_netlink_parms(): no params data found [ 668.872079][T10821] EXT4-fs: inline encryption not supported [ 668.944519][T10821] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 669.038772][T10821] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 669.075644][T10821] EXT4-fs (loop1): orphan cleanup on readonly fs [ 669.175086][T10821] EXT4-fs error (device loop1): ext4_quota_enable:7045: comm syz.1.1380: Bad quota inum: 9, type: 2 [ 669.220315][ T5267] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.225994][T10821] EXT4-fs (loop1): Remounting filesystem read-only [ 669.242647][T10821] EXT4-fs warning (device loop1): ext4_enable_quotas:7093: Failed to enable quota tracking (type=2, err=-117, ino=9). Please run e2fsck to fix. [ 669.257642][T10821] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 669.269183][T10821] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 669.399247][ T4292] Bluetooth: hci1: command 0x040f tx timeout [ 669.498572][ T5267] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.522968][ T9347] EXT4-fs (loop1): unmounting filesystem. [ 670.529523][T10754] bridge0: port 1(bridge_slave_0) entered blocking state [ 670.598188][T10754] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.658952][T10754] device bridge_slave_0 entered promiscuous mode [ 670.801154][T10754] bridge0: port 2(bridge_slave_1) entered blocking state [ 670.821382][T10754] bridge0: port 2(bridge_slave_1) entered disabled state [ 670.908314][T10754] device bridge_slave_1 entered promiscuous mode [ 671.181080][T10754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 671.228906][T10854] loop1: detected capacity change from 0 to 1024 [ 671.271909][T10754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 671.309133][T10854] EXT4-fs: Ignoring removed nomblk_io_submit option [ 671.504973][T10854] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6002c028, mo2=0102] [ 671.548302][T10854] System zones: 0-1, 3-12 [ 671.768757][ T4288] Bluetooth: hci1: command 0x0419 tx timeout [ 671.878020][T10862] loop4: detected capacity change from 0 to 8 [ 672.153022][T10862] SQUASHFS error: zlib decompression failed, data probably corrupt [ 672.161411][T10862] SQUASHFS error: Failed to read block 0x9b: -5 [ 672.167731][T10862] SQUASHFS error: Unable to read metadata cache entry [99] [ 672.175036][T10862] SQUASHFS error: Unable to read inode 0x127 [ 672.268949][T10754] team0: Port device team_slave_0 added [ 672.330302][T10854] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 672.506688][T10754] team0: Port device team_slave_1 added [ 672.560006][ T4289] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 674.843628][ T9347] EXT4-fs (loop1): unmounting filesystem. [ 675.828554][T10754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 675.836984][T10754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 676.078011][T10754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 676.193679][T10754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 676.222519][T10754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 676.428788][T10754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 677.374911][T10754] device hsr_slave_0 entered promiscuous mode [ 677.409645][T10754] device hsr_slave_1 entered promiscuous mode [ 677.425751][T10754] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 677.456739][T10754] Cannot create hsr debugfs directory [ 681.002934][T10754] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.078343][ T4288] Bluetooth: hci4: command 0x0406 tx timeout [ 683.344064][T10754] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.680485][T10754] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.791976][T10972] loop1: detected capacity change from 0 to 4096 [ 685.421757][T10972] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 685.602620][T10754] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.943777][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.950353][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.191303][ T9347] EXT4-fs (loop1): unmounting filesystem. [ 688.247221][T11008] loop2: detected capacity change from 0 to 8 [ 688.304809][T11008] SQUASHFS error: zlib decompression failed, data probably corrupt [ 688.313024][T11008] SQUASHFS error: Failed to read block 0x9b: -5 [ 688.319593][T11008] SQUASHFS error: Unable to read metadata cache entry [99] [ 688.326930][T11008] SQUASHFS error: Unable to read inode 0x127 [ 688.525163][T10754] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 693.123240][T10754] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 693.358246][T10754] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 693.380267][T10754] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 694.528527][ T5267] device hsr_slave_0 left promiscuous mode [ 694.562432][ T5267] device hsr_slave_1 left promiscuous mode [ 694.586800][ T5267] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 694.671617][ T5267] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 694.716151][ T5267] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 694.788104][ T5267] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 694.883952][ T5267] device veth1_macvtap left promiscuous mode [ 694.900555][ T5267] device veth0_macvtap left promiscuous mode [ 694.923950][ T5267] device veth1_vlan left promiscuous mode [ 694.945088][ T5267] device veth0_vlan left promiscuous mode [ 695.377695][ T5267] bond1 (unregistering): Released all slaves [ 695.591476][T11068] loop4: detected capacity change from 0 to 1024 [ 695.651857][T11068] EXT4-fs: Ignoring removed bh option [ 696.075674][ T4373] smc: removing ib device syz2 [ 696.100551][T11068] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 697.814959][ T5267] team0 (unregistering): Port device team_slave_1 removed [ 697.915512][ T5267] team0 (unregistering): Port device team_slave_0 removed [ 698.006898][ T5267] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 698.097873][ T5267] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 698.754124][ T5267] bond0 (unregistering): Released all slaves [ 698.819091][T11071] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1435'. [ 699.022165][ T8336] EXT4-fs (loop4): unmounting filesystem. [ 699.025643][T11081] loop2: detected capacity change from 0 to 128 [ 699.040300][T11081] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 699.049367][T11081] ext4 filesystem being mounted at /140/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 699.277356][T10754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 699.388508][ T5969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 699.518686][ T5969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 699.550964][T10754] 8021q: adding VLAN 0 to HW filter on device team0 [ 699.591823][ T7739] EXT4-fs (loop2): unmounting filesystem. [ 699.620445][ T5969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 699.630847][ T5969] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 699.665398][T11091] 9pnet_fd: Insufficient options for proto=fd [ 699.683253][ T5969] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.690481][ T5969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 700.300960][ T5969] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 700.343094][ T5969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 700.424101][ T5969] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 700.449339][ T5969] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.456500][ T5969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 700.772442][ T5969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 700.792553][T11101] fuse: Unknown parameter 'group_i00000000000000000000' [ 700.812553][ T5969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 700.828927][ T5969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 700.864006][ T5969] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 700.892988][ T5969] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 700.912157][ T5969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 700.954442][ T5969] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 700.984695][ T5968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 701.015257][ T5968] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 701.064418][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 701.079796][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 701.138596][T10754] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 701.995977][T11118] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1446'. [ 702.226353][T11118] loop9: detected capacity change from 0 to 1024 [ 702.326622][T11118] EXT4-fs: Ignoring removed bh option [ 702.476594][T11118] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 705.179590][T11145] loop4: detected capacity change from 0 to 512 [ 705.238231][T11145] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 705.368249][T11118] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1446'. [ 705.479477][T11145] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1451'. [ 705.592473][ T6206] EXT4-fs (loop9): unmounting filesystem. [ 706.631146][ T8336] EXT4-fs (loop4): unmounting filesystem. [ 707.029853][T11173] fuse: Unknown parameter 'group_i00000000000000000000' [ 707.235356][ T4886] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 707.260679][ T4886] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 707.280776][T10754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 712.494627][T11216] loop2: detected capacity change from 0 to 512 [ 712.658334][T11224] loop9: detected capacity change from 0 to 512 [ 712.668405][T11224] EXT4-fs: Ignoring removed nomblk_io_submit option [ 712.846517][T11219] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1463'. [ 712.883968][T11224] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 712.892119][T11224] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8800c01d, mo2=0002] [ 712.909273][T11224] EXT4-fs (loop9): couldn't mount RDWR because of unsupported optional features (80) [ 712.919351][T11224] EXT4-fs (loop9): Skipping orphan cleanup due to unknown ROCOMPAT features [ 712.929131][T11224] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 713.032439][T11216] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 713.038461][T11221] loop4: detected capacity change from 0 to 1024 [ 713.838874][T11216] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1464'. [ 714.700939][T11212] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1463'. [ 714.713863][ T7739] EXT4-fs (loop2): unmounting filesystem. [ 715.113725][ T6206] EXT4-fs (loop9): unmounting filesystem. [ 715.335793][ T5202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 715.375763][T11252] fuse: Unknown parameter 'group_id00000000000000000000' [ 715.379320][ T5202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 715.449638][ T5202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 715.464401][ T5202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 715.491975][ T5202] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 715.509663][ T5202] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 715.528786][T10754] device veth0_vlan entered promiscuous mode [ 715.585466][T10754] device veth1_vlan entered promiscuous mode [ 715.700609][ T5275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 715.717820][ T5275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 715.748956][ T5275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 715.761234][T11264] loop1: detected capacity change from 0 to 256 [ 715.764404][ T5275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 716.016009][T10754] device veth0_macvtap entered promiscuous mode [ 717.090383][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 718.187603][T10754] device veth1_macvtap entered promiscuous mode [ 720.917801][T11296] loop2: detected capacity change from 0 to 512 [ 721.027770][T11298] loop4: detected capacity change from 0 to 1024 [ 721.066025][T11296] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 721.083404][T11298] EXT4-fs: Ignoring removed bh option [ 721.178874][T11298] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 721.201019][T11296] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1476'. [ 722.269525][ T4288] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 722.286563][ T4288] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 722.294628][ T4288] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 722.302714][ T4288] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 722.312198][ T4288] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 722.329271][ T4288] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 722.333381][ T8336] EXT4-fs (loop4): unmounting filesystem. [ 722.344841][ T7739] EXT4-fs (loop2): unmounting filesystem. [ 722.611284][T11322] fuse: Unknown parameter 'group_id00000000000000000000' [ 723.012309][T11327] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1483'. [ 724.315903][T11346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1488'. [ 724.358338][ T4292] Bluetooth: hci2: command 0x0409 tx timeout [ 724.533577][T11309] chnl_net:caif_netlink_parms(): no params data found [ 724.568356][T11349] loop1: detected capacity change from 0 to 512 [ 724.603064][T11350] loop9: detected capacity change from 0 to 1024 [ 724.641725][T11350] EXT4-fs: Ignoring removed bh option [ 724.940891][T11349] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 725.197236][T11350] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 726.189425][T11349] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1490'. [ 726.195422][T11365] loop4: detected capacity change from 0 to 1024 [ 726.206773][T11365] EXT4-fs: Ignoring removed nomblk_io_submit option [ 726.312120][T11365] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6002c028, mo2=0102] [ 726.328843][T11368] fuse: Unknown parameter 'group_id00000000000000000000' [ 726.352125][ T6206] EXT4-fs (loop9): unmounting filesystem. [ 726.390857][T11365] System zones: 0-1, 3-12 [ 726.396523][T11365] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 726.438296][ T4292] Bluetooth: hci2: command 0x041b tx timeout [ 726.475269][T11309] bridge0: port 1(bridge_slave_0) entered blocking state [ 726.518335][T11309] bridge0: port 1(bridge_slave_0) entered disabled state [ 726.546137][T11309] device bridge_slave_0 entered promiscuous mode [ 726.555230][ T9347] EXT4-fs (loop1): unmounting filesystem. [ 726.753678][T11309] bridge0: port 2(bridge_slave_1) entered blocking state [ 726.767534][T11309] bridge0: port 2(bridge_slave_1) entered disabled state [ 726.799440][T11309] device bridge_slave_1 entered promiscuous mode [ 727.111527][T11309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 728.607246][ T4292] Bluetooth: hci2: command 0x040f tx timeout [ 728.664705][T11309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 729.070165][T11309] team0: Port device team_slave_0 added [ 729.195707][T11309] team0: Port device team_slave_1 added [ 729.202108][T11396] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1500'. [ 729.409957][T11309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 729.455387][T11309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 729.485678][ T8336] EXT4-fs (loop4): unmounting filesystem. [ 729.598036][T11309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 729.630886][T11309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 729.637889][T11309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 729.741028][T11309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 730.363757][T11411] loop1: detected capacity change from 0 to 1024 [ 730.375191][T11412] loop2: detected capacity change from 0 to 512 [ 730.424752][T11411] EXT4-fs: Ignoring removed bh option [ 730.615841][T11309] device hsr_slave_0 entered promiscuous mode [ 730.635156][T11412] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 730.666218][T11411] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 730.678700][ T4292] Bluetooth: hci2: command 0x0419 tx timeout [ 730.746718][T11309] device hsr_slave_1 entered promiscuous mode [ 730.838598][T11309] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 730.853377][T11309] Cannot create hsr debugfs directory [ 731.765855][T11426] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1504'. [ 732.180690][ T9347] EXT4-fs (loop1): unmounting filesystem. [ 732.195834][ T7739] EXT4-fs (loop2): unmounting filesystem. [ 732.705170][T11446] loop2: detected capacity change from 0 to 1024 [ 733.143059][T11446] EXT4-fs: Ignoring removed nomblk_io_submit option [ 733.480440][T11446] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6002c028, mo2=0102] [ 733.510702][T11446] System zones: 0-1, 3-12 [ 733.549081][T11446] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 733.636766][T11453] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1513'. [ 735.034631][ T7739] EXT4-fs (loop2): unmounting filesystem. [ 737.577630][T11482] loop1: detected capacity change from 0 to 1024 [ 737.642443][T11482] EXT4-fs: Ignoring removed bh option [ 737.732827][T11482] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 738.166418][T11480] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1519'. [ 738.546464][T11496] Illegal XDP return value 4294967274 on prog (id 19) dev syz_tun, expect packet loss! [ 738.896808][ T9347] EXT4-fs (loop1): unmounting filesystem. [ 738.911773][T11500] loop4: detected capacity change from 0 to 1024 [ 738.989029][T11500] EXT4-fs: Ignoring removed nomblk_io_submit option [ 739.378843][T11518] overlayfs: missing 'lowerdir' [ 740.314397][T11500] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6002c028, mo2=0102] [ 740.409413][T11500] System zones: 0-1, 3-12 [ 740.564478][T11500] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 741.864681][ T8336] EXT4-fs (loop4): unmounting filesystem. [ 742.655397][T11535] loop1: detected capacity change from 0 to 512 [ 742.913539][T11535] EXT4-fs error (device loop1): ext4_quota_enable:7049: comm syz.1.1530: inode #4278190080: comm syz.1.1530: iget: illegal inode # [ 743.333950][T11535] EXT4-fs (loop1): Remounting filesystem read-only [ 743.498612][T11535] EXT4-fs error (device loop1): ext4_quota_enable:7052: comm syz.1.1530: Bad quota inode: 4278190080, type: 2 [ 743.535709][T11535] EXT4-fs (loop1): Remounting filesystem read-only [ 743.576993][T11535] EXT4-fs warning (device loop1): ext4_enable_quotas:7093: Failed to enable quota tracking (type=2, err=-117, ino=4278190080). Please run e2fsck to fix. [ 743.746012][T11309] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 744.152106][T11535] EXT4-fs (loop1): mount failed [ 744.193219][ T5202] device hsr_slave_0 left promiscuous mode [ 744.228556][ T5202] device hsr_slave_1 left promiscuous mode [ 744.479436][ T5202] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 744.494702][ T5202] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 744.503818][ T5202] device bridge_slave_1 left promiscuous mode [ 744.522083][ T5202] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.533236][ T5202] device bridge_slave_0 left promiscuous mode [ 744.561787][ T5202] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.617411][T11556] loop9: detected capacity change from 0 to 1024 [ 744.666702][T11556] EXT4-fs: Ignoring removed bh option [ 744.701753][T11556] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 744.751616][ T5202] device veth1_macvtap left promiscuous mode [ 744.923137][ T5202] device veth0_macvtap left promiscuous mode [ 745.405382][ T5202] device veth1_vlan left promiscuous mode [ 745.442062][ T5202] device veth0_vlan left promiscuous mode [ 745.599329][T11565] loop4: detected capacity change from 0 to 256 [ 746.173362][T11573] loop1: detected capacity change from 0 to 1024 [ 746.212469][T11573] EXT4-fs: Ignoring removed nomblk_io_submit option [ 746.283124][T11573] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6002c028, mo2=0102] [ 746.321511][T11573] System zones: 0-1, 3-12 [ 746.331636][T11573] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 747.349125][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.366711][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.239637][ T5202] team0 (unregistering): Port device team_slave_1 removed [ 749.823578][ T5202] team0 (unregistering): Port device team_slave_0 removed [ 750.002257][ T5202] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 750.119566][ T5202] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 750.454987][ T9347] EXT4-fs (loop1): unmounting filesystem. [ 750.579147][T11601] random: crng reseeded on system resumption [ 750.670960][ T5202] bond0 (unregistering): Released all slaves [ 750.797312][T11309] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 750.814749][T11556] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1534'. [ 750.988120][T11309] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 751.048514][T11309] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 751.103424][ T6206] EXT4-fs (loop9): unmounting filesystem. [ 751.313968][T11602] block device autoloading is deprecated and will be removed. [ 751.740944][T11309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 752.526356][ T5275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 752.538938][ T5275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 752.616370][T11309] 8021q: adding VLAN 0 to HW filter on device team0 [ 752.632938][ T5275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 752.700947][ T5275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 752.713504][T11617] loop2: detected capacity change from 0 to 1024 [ 752.773828][ T5275] bridge0: port 1(bridge_slave_0) entered blocking state [ 752.781072][ T5275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 752.840123][ T5275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 752.849172][ T5275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 752.858438][ T5275] bridge0: port 2(bridge_slave_1) entered blocking state [ 752.865589][ T5275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 753.066908][T11627] loop4: detected capacity change from 0 to 512 [ 753.420904][T11631] loop1: detected capacity change from 0 to 8 [ 753.452926][T11631] SQUASHFS error: zlib decompression failed, data probably corrupt [ 753.461211][T11631] SQUASHFS error: Failed to read block 0x9b: -5 [ 753.467608][T11631] SQUASHFS error: Unable to read metadata cache entry [99] [ 753.577802][T11631] SQUASHFS error: Unable to read inode 0x127 [ 753.670768][T11617] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 753.683305][ T5275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 753.685884][T11617] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 753.732891][ T5275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 753.814286][ T5275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 753.882726][ T5275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 753.893676][ T5275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 753.952464][ T5275] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 753.984764][ T5275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 754.026582][ T5275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 754.066853][T11309] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 754.117676][ T7739] EXT4-fs (loop2): unmounting filesystem. [ 754.175651][T11309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 754.199539][ T5275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 754.240209][ T5275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 754.666760][ T5275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 754.838389][ T5275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 754.895155][ T5275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 755.136890][T11649] loop2: detected capacity change from 0 to 1024 [ 755.243540][T11649] EXT4-fs: Ignoring removed bh option [ 755.769249][T11649] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 755.810421][T11649] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1555'. [ 756.094816][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 756.129493][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 756.173080][T11309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 757.898082][T11687] loop4: detected capacity change from 0 to 512 [ 757.994869][ T7739] EXT4-fs (loop2): unmounting filesystem. [ 758.192775][T11232] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 758.483717][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 758.528417][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 759.213381][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 759.266112][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 759.361528][T11309] device veth0_vlan entered promiscuous mode [ 759.424893][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 759.458289][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 759.503322][T11309] device veth1_vlan entered promiscuous mode [ 759.520732][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 759.796414][T11309] device veth0_macvtap entered promiscuous mode [ 759.807103][T11309] device veth1_macvtap entered promiscuous mode [ 759.834741][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 759.875567][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 759.961654][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 760.051485][T11309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 760.129409][T11309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 760.215933][T11309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 760.292870][T11309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 760.324561][T11724] loop1: detected capacity change from 0 to 1024 [ 760.370815][T11309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 760.388489][T11724] EXT4-fs: Ignoring removed bh option [ 760.420324][T11309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 760.430316][T11309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 760.445387][T11309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 760.456018][T11309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 760.466924][T11309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 760.491644][T11309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 760.517445][T11309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 760.538029][T11309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 760.561729][T11724] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 760.577072][T11309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 760.628047][T11309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 760.670458][T11309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 760.708288][T11309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 760.739168][T11309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 760.785545][T11309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 760.818011][T11309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 760.838655][T11309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 760.870179][T11309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 760.908264][T11309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 760.949207][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 760.964506][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 760.990958][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 761.040313][T11724] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1571'. [ 761.109820][T11309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 761.168561][T11309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.229909][T11309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 761.296785][T11309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.315180][T11309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 761.500628][T11309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.546372][T11309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 761.631960][T11309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.764569][T11309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 762.230678][T11309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.260033][T11309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 762.270606][T11309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.280640][T11309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 762.292312][T11309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.302381][T11309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 762.312917][T11309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.337978][T11309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 762.361179][T11309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.371998][T11741] fuse: Bad value for 'fd' [ 762.394462][T11309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 762.414385][T11309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.426928][T11309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 762.437757][T11309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.450023][ T9347] EXT4-fs (loop1): unmounting filesystem. [ 762.483706][T11309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 762.538992][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 762.568672][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 762.582148][T11309] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.608165][T11309] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.616928][T11309] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.645050][T11309] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.724058][T11748] loop1: detected capacity change from 0 to 256 [ 763.507748][ T4870] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 763.547161][ T4870] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 763.587872][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 764.120102][ T4305] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 764.158883][ T4305] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 764.320419][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 764.397564][T11766] loop4: detected capacity change from 0 to 1024 [ 764.420968][T11766] EXT4-fs: Ignoring removed bh option [ 764.588876][T11766] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 765.614385][T11766] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1582'. [ 765.840704][T11790] fuse: Bad value for 'fd' [ 765.896434][ T8336] EXT4-fs (loop4): unmounting filesystem. [ 766.292304][T11796] loop8: detected capacity change from 0 to 1024 [ 766.797447][T11210] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 768.346299][T11823] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1595'. [ 769.072723][T11824] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1593'. [ 769.098174][T11824] device bridge_slave_1 left promiscuous mode [ 769.179219][T11824] bridge0: port 2(bridge_slave_1) entered disabled state [ 770.299058][T11824] device bridge_slave_0 left promiscuous mode [ 770.379851][T11824] bridge0: port 1(bridge_slave_0) entered disabled state [ 770.555215][T11841] loop1: detected capacity change from 0 to 1024 [ 770.643084][T11841] EXT4-fs: Ignoring removed bh option [ 770.795500][T11841] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 771.628930][T11841] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1598'. [ 771.757369][T11860] fuse: Bad value for 'fd' [ 771.950352][ T9347] EXT4-fs (loop1): unmounting filesystem. [ 772.396146][T11869] loop1: detected capacity change from 0 to 1024 [ 774.527096][T11898] loop2: detected capacity change from 0 to 512 [ 774.627497][T11898] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 774.668826][T11898] ext4 filesystem being mounted at /185/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 774.714557][T11899] loop9: detected capacity change from 0 to 8 [ 774.726971][T11899] SQUASHFS error: zlib decompression failed, data probably corrupt [ 774.735129][T11899] SQUASHFS error: Failed to read block 0x9b: -5 [ 774.741636][T11899] SQUASHFS error: Unable to read metadata cache entry [99] [ 774.748964][T11899] SQUASHFS error: Unable to read inode 0x127 [ 775.027081][ T7739] EXT4-fs (loop2): unmounting filesystem. [ 775.250916][T11910] loop2: detected capacity change from 0 to 256 [ 776.511585][T11918] loop1: detected capacity change from 0 to 256 [ 777.140952][T11934] loop8: detected capacity change from 0 to 1024 [ 777.252144][T11929] MPTCP: kernel_bind error, err=-98 [ 778.572024][T11951] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1625'. [ 780.421072][T12003] loop2: detected capacity change from 0 to 1024 [ 781.883901][T12014] loop2: detected capacity change from 0 to 256 [ 782.382482][T12023] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1639'. [ 782.757716][T12031] loop2: detected capacity change from 0 to 256 [ 782.854894][T12031] FAT-fs (loop2): Directory bread(block 64) failed [ 782.861712][T12031] FAT-fs (loop2): Directory bread(block 65) failed [ 782.869792][T12031] FAT-fs (loop2): Directory bread(block 66) failed [ 782.876428][T12031] FAT-fs (loop2): Directory bread(block 67) failed [ 782.883671][T12031] FAT-fs (loop2): Directory bread(block 68) failed [ 782.890340][T12031] FAT-fs (loop2): Directory bread(block 69) failed [ 782.897225][T12031] FAT-fs (loop2): Directory bread(block 70) failed [ 782.903894][T12031] FAT-fs (loop2): Directory bread(block 71) failed [ 782.910755][T12031] FAT-fs (loop2): Directory bread(block 72) failed [ 782.917422][T12031] FAT-fs (loop2): Directory bread(block 73) failed [ 786.814038][T12056] loop1: detected capacity change from 0 to 1024 [ 786.856956][T12058] loop9: detected capacity change from 0 to 1024 [ 787.183900][T12058] EXT4-fs: Ignoring removed nomblk_io_submit option [ 787.870340][T12058] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6002c028, mo2=0102] [ 787.963286][T12058] System zones: 0-1, 3-12 [ 788.009017][T12058] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 788.092681][T12065] loop8: detected capacity change from 0 to 256 [ 788.451603][T12070] fuse: Invalid rootmode [ 788.789006][T12077] loop2: detected capacity change from 0 to 1024 [ 788.844500][T12077] EXT4-fs: Ignoring removed bh option [ 788.916798][T12077] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 789.089564][T12077] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1652'. [ 789.301853][ T7739] EXT4-fs (loop2): unmounting filesystem. [ 792.570764][T12115] netlink: 'syz.8.1659': attribute type 1 has an invalid length. [ 793.567087][T12122] loop2: detected capacity change from 0 to 1024 [ 793.798612][ T6206] EXT4-fs (loop9): unmounting filesystem. [ 794.728955][T12132] fuse: Bad value for 'rootmode' [ 795.657026][T12141] loop8: detected capacity change from 0 to 1024 [ 795.717651][T12141] EXT4-fs: Ignoring removed bh option [ 795.798731][T12125] fuse: Unknown parameter 'grou00000000000000000000' [ 795.978310][T12141] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 796.000580][T12141] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1665'. [ 796.283014][T11309] EXT4-fs (loop8): unmounting filesystem. [ 797.480247][T12171] loop1: detected capacity change from 0 to 1024 [ 797.505400][T12171] EXT4-fs: Ignoring removed nomblk_io_submit option [ 797.575532][T12171] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6002c028, mo2=0102] [ 797.603651][T12171] System zones: 0-1, 3-12 [ 797.631489][T12171] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 798.535970][T12180] loop2: detected capacity change from 0 to 1024 [ 799.023878][T11210] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 799.174855][T12207] loop4: detected capacity change from 0 to 4096 [ 799.768095][T12207] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 800.213490][T12219] loop9: detected capacity change from 0 to 1024 [ 800.269162][T12219] EXT4-fs: Ignoring removed bh option [ 800.395856][T12219] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 800.417407][ T8336] EXT4-fs (loop4): unmounting filesystem. [ 800.708605][T12219] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1679'. [ 801.339478][ T6206] EXT4-fs (loop9): unmounting filesystem. [ 801.394711][T12228] loop8: detected capacity change from 0 to 512 [ 801.497569][T12228] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 801.658099][T12228] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 801.889589][T11309] EXT4-fs (loop8): unmounting filesystem. [ 802.488333][T12250] loop8: detected capacity change from 0 to 256 [ 802.560594][T12231] fuse: Unknown parameter 'grou00000000000000000000' [ 802.640723][ T9347] EXT4-fs (loop1): unmounting filesystem. [ 803.066783][T12256] loop1: detected capacity change from 0 to 1024 [ 803.124002][T12256] EXT4-fs: Ignoring removed nomblk_io_submit option [ 803.185028][T12256] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6002c028, mo2=0102] [ 803.202987][T12256] System zones: 0-1, 3-12 [ 803.233952][T12256] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 803.501999][T12263] loop4: detected capacity change from 0 to 1024 [ 805.283244][T12288] loop4: detected capacity change from 0 to 8 [ 805.441704][T12288] SQUASHFS error: zlib decompression failed, data probably corrupt [ 805.450067][T12288] SQUASHFS error: Failed to read block 0x9b: -5 [ 805.456390][T12288] SQUASHFS error: Unable to read metadata cache entry [99] [ 805.463761][T12288] SQUASHFS error: Unable to read inode 0x127 [ 806.133086][T12294] loop4: detected capacity change from 0 to 1024 [ 806.240171][T12294] EXT4-fs: Ignoring removed bh option [ 806.663360][T12294] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 807.049882][T12294] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1693'. [ 807.065374][T12309] loop2: detected capacity change from 0 to 512 [ 807.268050][T12309] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 807.321380][T12309] ext4 filesystem being mounted at /204/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 807.509922][ T8336] EXT4-fs (loop4): unmounting filesystem. [ 807.843247][ T7739] EXT4-fs (loop2): unmounting filesystem. [ 808.760922][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.767332][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.545489][T12343] loop4: detected capacity change from 0 to 1024 [ 809.583161][T12343] EXT4-fs: Ignoring removed nomblk_io_submit option [ 809.797542][T12348] overlayfs: overlapping lowerdir path [ 809.823357][ T9347] EXT4-fs (loop1): unmounting filesystem. [ 809.840705][T12343] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6002c028, mo2=0102] [ 809.915163][T12343] System zones: 0-1, 3-12 [ 809.997067][T12343] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 813.069639][T12387] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 813.104279][T12385] loop9: detected capacity change from 0 to 512 [ 813.323171][T12385] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 813.362991][T12385] ext4 filesystem being mounted at /282/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 814.685404][T12399] loop8: detected capacity change from 0 to 1024 [ 814.723079][T12399] EXT4-fs: Ignoring removed nomblk_io_submit option [ 814.839286][ T6206] EXT4-fs (loop9): unmounting filesystem. [ 814.867558][T12399] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6002c028, mo2=0102] [ 815.008288][T12399] System zones: 0-1, 3-12 [ 815.013928][T12399] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 815.069165][T12402] overlayfs: overlapping lowerdir path [ 815.194568][T12409] MPTCP: kernel_bind error, err=-98 [ 815.513662][T12418] netlink: 160 bytes leftover after parsing attributes in process `syz.9.1716'. [ 816.097861][ T8336] EXT4-fs (loop4): unmounting filesystem. [ 817.096236][T12445] loop2: detected capacity change from 0 to 512 [ 818.857961][T12451] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 819.153945][T12445] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 819.198382][T12445] ext4 filesystem being mounted at /211/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 819.491384][T12461] overlayfs: overlapping lowerdir path [ 820.182311][T12464] loop4: detected capacity change from 0 to 256 [ 820.534342][T12464] FAT-fs (loop4): Directory bread(block 64) failed [ 820.541091][T12464] FAT-fs (loop4): Directory bread(block 65) failed [ 820.548933][T12464] FAT-fs (loop4): Directory bread(block 66) failed [ 820.555574][T12464] FAT-fs (loop4): Directory bread(block 67) failed [ 820.562864][T12464] FAT-fs (loop4): Directory bread(block 68) failed [ 820.569531][T12464] FAT-fs (loop4): Directory bread(block 69) failed [ 820.576464][T12464] FAT-fs (loop4): Directory bread(block 70) failed [ 820.583144][T12464] FAT-fs (loop4): Directory bread(block 71) failed [ 820.590099][T12464] FAT-fs (loop4): Directory bread(block 72) failed [ 820.596727][T12464] FAT-fs (loop4): Directory bread(block 73) failed [ 821.050675][ T7739] EXT4-fs (loop2): unmounting filesystem. [ 822.085699][T12480] loop2: detected capacity change from 0 to 1024 [ 822.137220][T12480] EXT4-fs: Ignoring removed nomblk_io_submit option [ 822.479077][T12480] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6002c028, mo2=0102] [ 822.524927][T12480] System zones: 0-1, 3-12 [ 822.560392][T12480] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 823.104238][T12495] misc userio: No port type given on /dev/userio [ 824.011064][T12502] ================================================================== [ 824.019195][T12502] BUG: KASAN: use-after-free in dvb_device_open+0xc6/0x370 [ 824.026571][T12502] Read of size 8 at addr ffff888145b38818 by task syz.9.1738/12502 [ 824.034512][T12502] [ 824.036890][T12502] CPU: 0 PID: 12502 Comm: syz.9.1738 Not tainted syzkaller #0 [ 824.044366][T12502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 824.054442][T12502] Call Trace: [ 824.057777][T12502] [ 824.060783][T12502] dump_stack_lvl+0x188/0x24e [ 824.065563][T12502] ? read_lock_is_recursive+0x10/0x10 [ 824.071001][T12502] ? show_regs_print_info+0x12/0x12 [ 824.076228][T12502] ? load_image+0x400/0x400 [ 824.080775][T12502] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 824.086313][T12502] ? __virt_addr_valid+0x188/0x540 [ 824.091502][T12502] ? __virt_addr_valid+0x465/0x540 [ 824.096654][T12502] ? dvb_device_open+0xc6/0x370 [ 824.101535][T12502] print_report+0xa8/0x210 [ 824.105997][T12502] kasan_report+0x10b/0x140 [ 824.110614][T12502] ? dvb_device_open+0xc6/0x370 [ 824.115495][T12502] dvb_device_open+0xc6/0x370 [ 824.120202][T12502] ? do_raw_spin_unlock+0x11d/0x230 [ 824.125451][T12502] chrdev_open+0x5c5/0x6a0 [ 824.129965][T12502] ? cd_forget+0x160/0x160 [ 824.134413][T12502] ? fsnotify_perm+0x39b/0x550 [ 824.139243][T12502] ? cd_forget+0x160/0x160 [ 824.143684][T12502] do_dentry_open+0x7e9/0x10d0 [ 824.148487][T12502] path_openat+0x2635/0x2ee0 [ 824.153109][T12502] ? verify_lock_unused+0x140/0x140 [ 824.158341][T12502] ? do_syscall_64+0x4c/0xa0 [ 824.162948][T12502] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 824.169059][T12502] ? do_filp_open+0x430/0x430 [ 824.173940][T12502] do_filp_open+0x1f1/0x430 [ 824.178480][T12502] ? vfs_tmpfile+0x480/0x480 [ 824.183105][T12502] ? _raw_spin_unlock+0x24/0x40 [ 824.187986][T12502] ? alloc_fd+0x58f/0x630 [ 824.192372][T12502] do_sys_openat2+0x150/0x4b0 [ 824.197087][T12502] ? up_read+0x20/0x20 [ 824.201189][T12502] ? do_sys_open+0xe0/0xe0 [ 824.205636][T12502] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 824.211662][T12502] ? lock_chain_count+0x20/0x20 [ 824.216550][T12502] __x64_sys_openat+0x135/0x160 [ 824.221433][T12502] do_syscall_64+0x4c/0xa0 [ 824.225869][T12502] ? clear_bhb_loop+0x60/0xb0 [ 824.230578][T12502] ? clear_bhb_loop+0x60/0xb0 [ 824.235287][T12502] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 824.241214][T12502] RIP: 0033:0x7fe18fb5d68e [ 824.245704][T12502] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 824.265366][T12502] RSP: 002b:00007fe190a47b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 824.273845][T12502] RAX: ffffffffffffffda RBX: 00007fe190a486c0 RCX: 00007fe18fb5d68e [ 824.281843][T12502] RDX: 0000000000000002 RSI: 00007fe190a47c00 RDI: ffffffffffffff9c [ 824.289834][T12502] RBP: 00007fe190a47c00 R08: 0000000000000000 R09: 0000000000000000 [ 824.297827][T12502] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 824.305828][T12502] R13: 00007fe18fe16038 R14: 00007fe18fe15fa0 R15: 00007fffc76337e8 [ 824.313831][T12502] [ 824.316870][T12502] [ 824.319206][T12502] Allocated by task 1: [ 824.323295][T12502] kasan_set_track+0x4b/0x70 [ 824.327917][T12502] __kasan_kmalloc+0x8e/0xa0 [ 824.332539][T12502] dvb_register_device+0x311/0x2150 [ 824.337757][T12502] dvb_register_frontend+0x645/0x920 [ 824.343109][T12502] vidtv_bridge_probe+0x9a1/0xf70 [ 824.348202][T12502] platform_probe+0x137/0x1c0 [ 824.352927][T12502] really_probe+0x2aa/0xc70 [ 824.357486][T12502] __driver_probe_device+0x18c/0x330 [ 824.362795][T12502] driver_probe_device+0x4f/0x420 [ 824.367845][T12502] __driver_attach+0x44a/0x6e0 [ 824.372636][T12502] bus_for_each_dev+0x182/0x1f0 [ 824.377514][T12502] bus_add_driver+0x30a/0x5a0 [ 824.382214][T12502] driver_register+0x32d/0x430 [ 824.387008][T12502] vidtv_bridge_init+0x39/0x67 [ 824.391903][T12502] do_one_initcall+0x26a/0x840 [ 824.396706][T12502] do_initcall_level+0x137/0x1e4 [ 824.401682][T12502] do_initcalls+0x4b/0x8a [ 824.406033][T12502] kernel_init_freeable+0x415/0x5be [ 824.411257][T12502] kernel_init+0x19/0x1b0 [ 824.415654][T12502] ret_from_fork+0x1f/0x30 [ 824.420098][T12502] [ 824.422438][T12502] Freed by task 12451: [ 824.426523][T12502] kasan_set_track+0x4b/0x70 [ 824.431152][T12502] kasan_save_free_info+0x2d/0x50 [ 824.436202][T12502] ____kasan_slab_free+0x126/0x1e0 [ 824.441342][T12502] slab_free_freelist_hook+0x131/0x1a0 [ 824.446826][T12502] __kmem_cache_free+0xb6/0x1f0 [ 824.451702][T12502] dvb_device_open+0x2e7/0x370 [ 824.456489][T12502] chrdev_open+0x5c5/0x6a0 [ 824.460931][T12502] do_dentry_open+0x7e9/0x10d0 [ 824.465733][T12502] path_openat+0x2635/0x2ee0 [ 824.470346][T12502] do_filp_open+0x1f1/0x430 [ 824.474870][T12502] do_sys_openat2+0x150/0x4b0 [ 824.479577][T12502] __x64_sys_openat+0x135/0x160 [ 824.484481][T12502] do_syscall_64+0x4c/0xa0 [ 824.488922][T12502] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 824.494854][T12502] [ 824.497192][T12502] The buggy address belongs to the object at ffff888145b38800 [ 824.497192][T12502] which belongs to the cache kmalloc-256 of size 256 [ 824.511292][T12502] The buggy address is located 24 bytes inside of [ 824.511292][T12502] 256-byte region [ffff888145b38800, ffff888145b38900) [ 824.524501][T12502] [ 824.526841][T12502] The buggy address belongs to the physical page: [ 824.533396][T12502] page:ffffea000516ce00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x145b38 [ 824.543657][T12502] head:ffffea000516ce00 order:1 compound_mapcount:0 compound_pincount:0 [ 824.552000][T12502] flags: 0x57ff00000010200(slab|head|node=1|zone=2|lastcpupid=0x7ff) [ 824.560105][T12502] raw: 057ff00000010200 0000000000000000 dead000000000122 ffff888017441b40 [ 824.568713][T12502] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 824.577307][T12502] page dumped because: kasan: bad access detected [ 824.583732][T12502] page_owner tracks the page as allocated [ 824.589457][T12502] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 17236831371, free_ts 0 [ 824.609196][T12502] post_alloc_hook+0x173/0x1a0 [ 824.614093][T12502] get_page_from_freelist+0x1a1e/0x1ab0 [ 824.619670][T12502] __alloc_pages+0x1ec/0x4f0 [ 824.624292][T12502] alloc_page_interleave+0x24/0x1e0 [ 824.629553][T12502] alloc_slab_page+0x5d/0x160 [ 824.634297][T12502] new_slab+0x87/0x2c0 [ 824.638394][T12502] ___slab_alloc+0xbc6/0x1240 [ 824.643096][T12502] __kmem_cache_alloc_node+0x1a0/0x260 [ 824.648585][T12502] kmalloc_trace+0x26/0xe0 [ 824.653082][T12502] bus_add_driver+0xda/0x5a0 [ 824.657698][T12502] driver_register+0x32d/0x430 [ 824.662491][T12502] usb_register_driver+0x202/0x3d0 [ 824.667675][T12502] do_one_initcall+0x26a/0x840 [ 824.672464][T12502] do_initcall_level+0x137/0x1e4 [ 824.677428][T12502] do_initcalls+0x4b/0x8a [ 824.681781][T12502] kernel_init_freeable+0x415/0x5be [ 824.687000][T12502] page_owner free stack trace missing [ 824.692386][T12502] [ 824.694727][T12502] Memory state around the buggy address: [ 824.700374][T12502] ffff888145b38700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 824.708467][T12502] ffff888145b38780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 824.716547][T12502] >ffff888145b38800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 824.724634][T12502] ^ [ 824.729500][T12502] ffff888145b38880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 824.737605][T12502] ffff888145b38900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 824.745681][T12502] ================================================================== [ 824.757155][T12502] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 824.764390][T12502] CPU: 0 PID: 12502 Comm: syz.9.1738 Not tainted syzkaller #0 [ 824.771870][T12502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 824.781944][T12502] Call Trace: [ 824.785249][T12502] [ 824.788224][T12502] dump_stack_lvl+0x188/0x24e [ 824.792931][T12502] ? memcpy+0x3c/0x60 [ 824.796946][T12502] ? show_regs_print_info+0x12/0x12 [ 824.802178][T12502] ? load_image+0x400/0x400 [ 824.806714][T12502] panic+0x2e5/0x730 [ 824.810642][T12502] ? bpf_jit_dump+0xd0/0xd0 [ 824.815175][T12502] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 824.821183][T12502] ? _raw_spin_unlock+0x40/0x40 [ 824.826063][T12502] check_panic_on_warn+0x80/0xa0 [ 824.831083][T12502] ? dvb_device_open+0xc6/0x370 [ 824.835963][T12502] end_report+0x66/0x110 [ 824.840240][T12502] kasan_report+0x118/0x140 [ 824.844774][T12502] ? dvb_device_open+0xc6/0x370 [ 824.849650][T12502] dvb_device_open+0xc6/0x370 [ 824.854350][T12502] ? do_raw_spin_unlock+0x11d/0x230 [ 824.859585][T12502] chrdev_open+0x5c5/0x6a0 [ 824.864033][T12502] ? cd_forget+0x160/0x160 [ 824.868481][T12502] ? fsnotify_perm+0x39b/0x550 [ 824.873278][T12502] ? cd_forget+0x160/0x160 [ 824.877724][T12502] do_dentry_open+0x7e9/0x10d0 [ 824.882538][T12502] path_openat+0x2635/0x2ee0 [ 824.887166][T12502] ? verify_lock_unused+0x140/0x140 [ 824.892385][T12502] ? do_syscall_64+0x4c/0xa0 [ 824.896983][T12502] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 824.903088][T12502] ? do_filp_open+0x430/0x430 [ 824.907780][T12502] do_filp_open+0x1f1/0x430 [ 824.912295][T12502] ? vfs_tmpfile+0x480/0x480 [ 824.916914][T12502] ? _raw_spin_unlock+0x24/0x40 [ 824.921793][T12502] ? alloc_fd+0x58f/0x630 [ 824.926148][T12502] do_sys_openat2+0x150/0x4b0 [ 824.930851][T12502] ? up_read+0x20/0x20 [ 824.934939][T12502] ? do_sys_open+0xe0/0xe0 [ 824.939410][T12502] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 824.945413][T12502] ? lock_chain_count+0x20/0x20 [ 824.950284][T12502] __x64_sys_openat+0x135/0x160 [ 824.955175][T12502] do_syscall_64+0x4c/0xa0 [ 824.959600][T12502] ? clear_bhb_loop+0x60/0xb0 [ 824.964287][T12502] ? clear_bhb_loop+0x60/0xb0 [ 824.968975][T12502] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 824.974910][T12502] RIP: 0033:0x7fe18fb5d68e [ 824.979335][T12502] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 824.998947][T12502] RSP: 002b:00007fe190a47b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 825.007388][T12502] RAX: ffffffffffffffda RBX: 00007fe190a486c0 RCX: 00007fe18fb5d68e [ 825.015391][T12502] RDX: 0000000000000002 RSI: 00007fe190a47c00 RDI: ffffffffffffff9c [ 825.023379][T12502] RBP: 00007fe190a47c00 R08: 0000000000000000 R09: 0000000000000000 [ 825.031357][T12502] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 825.039340][T12502] R13: 00007fe18fe16038 R14: 00007fe18fe15fa0 R15: 00007fffc76337e8 [ 825.047324][T12502] [ 825.050611][T12502] Kernel Offset: disabled [ 825.054973][T12502] Rebooting in 86400 seconds..