last executing test programs: 3m25.522673748s ago: executing program 3 (id=1022): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x3a181d3, &(0x7f0000000b40)=ANY=[], 0x1, 0x11ff, &(0x7f0000002480)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x8a) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x40047211, &(0x7f00000000c0)) 3m25.306364924s ago: executing program 3 (id=1026): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x8}, [@call={0x85, 0x0, 0x0, 0xba}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x34}, 0x94) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) syz_clone(0xaa0a1000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00', @ANYRES16=r4, @ANYBLOB="0c00990001000080730000000600f700040400000a000600"], 0x3c}, 0x1, 0x0, 0x0, 0x14001}, 0x9590f6cc3ea35512) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000200)='highspeed', 0x9) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000108fdffffff0800000800000000", @ANYRES32=0x0, @ANYBLOB="00000000a304040008"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) pwritev2(r6, 0x0, 0x0, 0x5c, 0x4, 0x2) sendto$inet(r5, &(0x7f0000000300)="89", 0x1, 0x4044880, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 3m24.088457794s ago: executing program 3 (id=1029): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x12, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x4) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r0, r2, 0x1e, 0x0, @void}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r4 = getpid() ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xf}}, './file0\x00'}) ioctl$BINDER_GET_FROZEN_INFO(r5, 0xc00c620f, &(0x7f0000000100)={r4}) sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r9 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r9, 0xffff) fcntl$addseals(r9, 0x409, 0x7) r10 = ioctl$UDMABUF_CREATE(r8, 0x40187542, &(0x7f0000000000)={r9, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r10, 0x40086200, &(0x7f00000001c0)=0x1) bpf$LINK_DETACH(0x22, &(0x7f00000001c0)=r3, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r3, 0x0, 0x0}, 0x10) 3m22.893970535s ago: executing program 3 (id=1033): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0x0, &(0x7f0000000140), 0x0, 0x246, &(0x7f00000002c0)="$eJzs3EFoFFcYB/BvZnebJllK2l4KhbZQSmkDIb0VekkvLQRKCKUUVIiIeFESISZ4Szx58aBnlZy8BPFm9Cg5GLwogqeoOcSLoMGDwYMeVnYnK9FsNLhxR5zfDyYzk5n3vjfs/t/sZSaAwuqLiKGIKEVEf0RUIiLZfMIP2dK3sTvXvTQWUav9+yRpnJftZ5rteiNiNiJ+j4jFNInD5Yjphb2rz5b//vnUVOWnCwt7ujt6kRvWVlf+WT8/cvLy8G/Tt+48GkliKKqvXdfuS1r8r5xEfPUhin0kknLeI2AnRo9fulvP/dcR8WMj/5VII/vwTk9+tliJX89t1/bM49vfdnKswO6r1Sr1e+BsDSicNCKqkaQDEZFtp+nAQPYb/l6pJz0yMXms/9DE1PjBvGcqYLdUI1b+utp1pfeN/D8sZfkHPl31/P83On+/vr1eyns0QCfV89+/f+aXkH8oHPmH4pJ/KC75h+KSfyiuZv6vyz8Ujvs/FJf8Q3HJPxSX/EMBpdlqc/4BgGKpdeX9BDKQl7znHwAAAAAAAAAAAAAAAAAAYKu57qWx5tKpmjfORqz9GRHlVvVLG68q+rzxt+dpUj/tlSRr1pZ937fZQZsu5vz09RcP8q1/87t868+MR8yeiIjBcnnr9y9pvirrvX35juOVA20WaNMf/+db/8V8R8pUtjswvBxxrT7/DLaaf9L4prFuPf9U39bxDh193mYHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMzLAAAA//9XTm32") ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000700)={@desc={0x1, 0x0, @desc1}, 0x40, 0x0, '\x00', @a}) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, &(0x7f0000000000)={@desc={0x1, 0x0, @desc1}}) 3m22.809002372s ago: executing program 3 (id=1035): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp384-generic,cbc-aes-ce)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="ab55f5ff", 0x4) 3m22.59039833s ago: executing program 3 (id=1041): r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r3, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x800) 3m6.631771866s ago: executing program 32 (id=1041): r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r3, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x800) 1m32.325742212s ago: executing program 2 (id=1564): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x1, 0x0, @rand_addr=0x1c101001, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @loopback}}}}}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') pread64(r1, &(0x7f0000000100)=""/253, 0xfd, 0x1) 1m31.680383757s ago: executing program 2 (id=1565): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) process_madvise(r3, 0x0, 0x0, 0x10, 0x0) 1m31.209581107s ago: executing program 2 (id=1567): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) tkill(r0, 0x7) wait4(r0, 0x0, 0x0, 0x0) ioprio_set$pid(0x1, r0, 0x4000) 1m31.208233574s ago: executing program 5 (id=1568): socketpair$unix(0x1, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='dummy_udc.0', 0xb) write(0xffffffffffffffff, 0x0, 0x0) 1m31.08451655s ago: executing program 5 (id=1570): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r3, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x4c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88c7}, @NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type10={{}, {}, @from_mac=@broadcast, @device_b}}}]}, 0x4c}}, 0x800) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, 0x0, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000140)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x20000000, 0x0, 0x0, 0x20000030, 0x20000060], 0x11e, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00001b09"]}, 0x108) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001c"], 0x104}}, 0x0) 1m30.017344405s ago: executing program 2 (id=1571): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x12) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x4, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "053fcbb2c1a55dfc7d070af6e6dafe09"}}}}}}}, 0x0) recvmsg(r0, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x1) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, &(0x7f0000000040)=0xd62, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvfrom(r0, 0x0, 0x9400, 0x10132, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffdf, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000380)=@xdp={0x2c, 0x0, 0x0, 0x3e}, 0x80, 0x0}, 0x15) 1m26.391902302s ago: executing program 5 (id=1575): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x4e24, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x24, 0x6, 0xff, @remote, @local, {[], {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0xc2, 0x0, 0x0, 0x3ff, {[@timestamp={0x8, 0xa, 0x1, 0x5}, @window={0x3, 0x3, 0xfb}]}}}}}}}}, 0x0) 1m26.278118919s ago: executing program 5 (id=1577): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x40000000aaa80, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300001c, 0x28011, r1, 0xc2e1000) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BLKRRPART(r1, 0x125f, 0x2a) 1m25.641322286s ago: executing program 2 (id=1582): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0xbf48ce7, "1803c80980000000080000000003000000d600", 0xffffffffffffffff}) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x5, "fa00114001000000000000000000000000000100000000000000ffff00", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45b00e4f5b53e0ca34dd02acecdc67c5e3126628168", r1, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f00000000c0)={"521a204409f89ea98ee8eabdc9a9376c9d86b7ed7b2e5fb02b7950bcf291bab7", r1}) 1m25.500198811s ago: executing program 2 (id=1585): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r3, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x4c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88c7}, @NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type10={{}, {}, @from_mac=@broadcast, @device_b}}}]}, 0x4c}}, 0x800) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000140)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x20000000, 0x0, 0x0, 0x20000030, 0x20000060], 0x11e, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00001b09"]}, 0x108) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001c"], 0x104}}, 0x0) 1m23.46763225s ago: executing program 5 (id=1588): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x210000, &(0x7f00000006c0)={[{@nodelalloc}, {@dioread_lock}, {@jqfmt_vfsv1}, {@abort}, {@max_batch_time={'max_batch_time', 0x3d, 0xed}}, {@lazytime}, {@noload}, {@stripe={'stripe', 0x3d, 0x7}}, {@grpjquota}, {@stripe={'stripe', 0x3d, 0x4}}]}, 0x1, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 1m23.17597443s ago: executing program 5 (id=1591): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x8}, [@call={0x85, 0x0, 0x0, 0xba}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x34}, 0x94) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00', @ANYRES16=r4, @ANYBLOB="0c00990001000080730000000600f700040400000a000600"], 0x3c}, 0x1, 0x0, 0x0, 0x14001}, 0x9590f6cc3ea35512) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000200)='highspeed', 0x9) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000108fdffffff0800000800000000", @ANYRES32=0x0, @ANYBLOB="00000000a304040008"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) pwritev2(r6, 0x0, 0x0, 0x5c, 0x4, 0x2) sendto$inet(r5, &(0x7f0000000300)="89", 0x1, 0x4044880, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 1m9.144253562s ago: executing program 33 (id=1585): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r3, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x4c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88c7}, @NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type10={{}, {}, @from_mac=@broadcast, @device_b}}}]}, 0x4c}}, 0x800) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000140)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x20000000, 0x0, 0x0, 0x20000030, 0x20000060], 0x11e, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00001b09"]}, 0x108) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001c"], 0x104}}, 0x0) 1m5.783933594s ago: executing program 34 (id=1591): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x8}, [@call={0x85, 0x0, 0x0, 0xba}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x34}, 0x94) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00', @ANYRES16=r4, @ANYBLOB="0c00990001000080730000000600f700040400000a000600"], 0x3c}, 0x1, 0x0, 0x0, 0x14001}, 0x9590f6cc3ea35512) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000200)='highspeed', 0x9) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000108fdffffff0800000800000000", @ANYRES32=0x0, @ANYBLOB="00000000a304040008"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) pwritev2(r6, 0x0, 0x0, 0x5c, 0x4, 0x2) sendto$inet(r5, &(0x7f0000000300)="89", 0x1, 0x4044880, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 4.798357222s ago: executing program 0 (id=2027): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) readv(r1, &(0x7f0000000400)=[{&(0x7f0000000280)=""/174, 0xae}], 0x1) 3.92423878s ago: executing program 4 (id=2030): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$eJzs3c1rHOUfAPDvbF76+vs1hVLUgwR6sFK7aRJfKgitR9FiQe91SbahZNMt2U1pYqHtwYJ4kSKIWBD/AO8eizcv+lcUtFCkBD14icxmtt1ks9kk3bqp8/nAtM8zz2yeeeaZ59nv7MyyAeTWaPpPIeLFiPgyiTjUUjYYWeHo6nbLj65PpUsSKysf/ZFEkq1rbp9k/x/IMi9ExE+fRZwotNdbW1yaLVUq5fksP1afuzJWW1w6eWmuNFOeKV+emJw8/cbkxNtvvdmztr56/q9vPrz33ukvji1//cODw3eSOBsHs7LWdjyFm62Z0RjNjslQnF234XgPKttNku1tPvys9oPtGcjG+VCkc8ChGMhGPfDfdyMiVoCcSox/yKlmHNC8tu/RdfBz4+G7qxdA7e0fXP1sJPY2ro32LydrrozS692RHtSf1vHj73fvpEt0+RziRg/qA2i6eSsiTg0Ots9/STb/7dypxofHm1tfR97ef6Cf7qXxz2sbxT+Fx/FPbBD/HNhg7O5E9/FfeNCDajpK4793Nox/H09dIwNZ7n+NmG8ouXipUj4VEf+PiOMxtCfNb3Y/5/Ty/ZVOZa3xX7qk9TdjwWw/HgzuWfua6VK99DRtbvXwVsRLT+LfJNrm/72NWHd9/6fH43ya+OXzrnUcLd99uVNZ9/a36n0EvPJ9xCsb9v+TO1rJ5vcnxxrnw1jzrGj35+2jv3aqf3vt7720//dv3v6RpPV+bW37dXy39+9yp7Kdnv/DyceNdPNG4rVSvT4/HjGcfNC+fuLJa5v55vZp+48f23z+2+j83xcRn2yx/beP3O646W7o/+lt9f/2E/ff//TbTvVvrf9fb6SOZ2u2Mv9tdQef5tgBAAAAAADAblOIiIORFIqP04VCsbj6fMeR2F+oVGv1ExerC5eno/Fd2ZEYKjTvdB9qeR5iPHsetpmfWJefjIjDEfHVwL5GvjhVrUz3u/EAAAAAAAAAAAAAAAAAAACwSxzo8P3/1G8D/d474Jnzk9+QX13Hfy9+6QnYlbz/Q34Z/5Bfxj/kl/EP+WX8Q34Z/5Bfxj/kl/EPAAAAAAAAAAAAAAAAAAAAAAAAAAAAPXX+3Ll0WVl+dH0qzU9fXVyYrV49OV2uzRbnFqaKU9X5K8WZanWmUi5OVee6/b1KtXplfCIWro3Vy7X6WG1x6cJcdeFy/cKludJM+UJ56F9pFQAAAAAAAAAAAAAAAAAAADxfaotLs6VKpTzfj8TPhYj+1b7lxJnYFbux40TSrZfPZCfD2qLhtjVrEpElBp/VzicR0e9Dl+NEnycmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGjxTwAAAP///b4wHA==") chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getdents64(r0, &(0x7f0000000140)=""/53, 0x35) 3.882471906s ago: executing program 6 (id=2031): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r0, 0x0, 0x0, 0x200c8084, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x5, @private1, 0x6}, 0x1c) sendto$inet6(r0, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) 3.845543481s ago: executing program 0 (id=2033): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x810}, 0x20008000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000090603000000000000000000050000400900020073797a3100000000050001000700000038000780060004404e21000005000700de0000000c00018008000140e00040000c00168008000140ac14160b0c00148008000140ff"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 3.798584483s ago: executing program 6 (id=2034): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='config\x00', &(0x7f00000000e0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000180)='usb_gadget/g1\x00', 0x0, 0x0) r2 = openat(r1, &(0x7f0000000250)='webusb/use\x00', 0x2, 0x0) write(r2, &(0x7f0000000100)="e3", 0x1) 3.798333786s ago: executing program 4 (id=2035): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000240)={0x0, 0x0, r3, r4, 0x2, 0xfdff, 0x2, 0xdc43, {0xac78, 0x1, 0x7, 0x69, 0xf4b, 0x0, 0x2, 0x47, 0x412f, 0xe154, 0x20, 0xb, 0x724a, 0x3, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) 3.777790596s ago: executing program 7 (id=2036): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) ioctl$NBD_DISCONNECT(r0, 0xab08) 3.771659851s ago: executing program 0 (id=2037): mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x100) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x111) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x4}}, './file1\x00'}) 3.72628092s ago: executing program 4 (id=2038): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x12) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x4, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "053fcbb2c1a55dfc7d070af6e6dafe09"}}}}}}}, 0x0) recvmsg(r0, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x1) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, &(0x7f0000000040)=0xd62, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvfrom(r0, 0x0, 0x9400, 0x10132, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffdf, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000380)=@xdp={0x2c, 0x0, 0x0, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600", 0x20}, {&(0x7f00000004c0)}], 0x2}, 0x15) 3.725618129s ago: executing program 6 (id=2039): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x4028, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000680)={r4, &(0x7f00000005c0)}, 0x20) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x14a0, &(0x7f0000000700)=ANY=[], 0x1, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r5, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5f, 0x3}) recvmmsg(r0, &(0x7f0000000340), 0x0, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 3.720365907s ago: executing program 0 (id=2040): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x4028, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000680)={r4, &(0x7f00000005c0)}, 0x20) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x14a0, &(0x7f0000000700)=ANY=[], 0x1, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r5, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5f, 0x3}) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x7f}], 0x1, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 3.566194401s ago: executing program 7 (id=2042): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x600, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) 3.132101027s ago: executing program 1 (id=2045): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000080)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 3.093179924s ago: executing program 1 (id=2046): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) sendmsg$inet6(r1, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e23, 0x180000, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000000bc0)=[@hopopts={{0x18, 0x29, 0x32, {0x32}}}], 0x18}, 0x34004894) 3.091198605s ago: executing program 7 (id=2047): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) close(r2) execveat$binfmt(0xffffffffffffff9c, r1, 0x0, &(0x7f0000002880), 0x0) 3.085976748s ago: executing program 1 (id=2048): r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800, &(0x7f0000000300)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@noauto_da_alloc}, {@dioread_nolock}, {@test_dummy_encryption}, {@block_validity}, {@nodelalloc}, {@minixdf}, {@auto_da_alloc}]}, 0x1, 0xba6, &(0x7f0000000c00)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1a42028, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x14a0, &(0x7f0000000200)=ANY=[], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80) sendfile(r0, r1, 0x0, 0x7a67fffe) 3.026568659s ago: executing program 7 (id=2049): r0 = userfaultfd(0x80801) r1 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x11, r1, 0xc2945000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) 3.026229254s ago: executing program 7 (id=2050): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x4, 0x8, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x41, 0x8f, 0x6, 0xbee8, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x3, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bb, 0x6d7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x100001, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x5, 0x4, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x8, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x3ff, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x5, 0xa620, 0x1, 0x5, 0x1, 0xb4, 0x14c, 0x81, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x7ff, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000fedbdf251000000008000900000000001800018014000200776c616e"], 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3.025667252s ago: executing program 1 (id=2051): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x4, @private1}, 0x1c) 3.005945091s ago: executing program 7 (id=2052): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x8}, [@call={0x85, 0x0, 0x0, 0xba}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x34}, 0x94) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) syz_clone(0xaa0a1000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00', @ANYRES16=r4, @ANYBLOB="0c00990001000080730000000600f700040400000a000600"], 0x3c}, 0x1, 0x0, 0x0, 0x14001}, 0x9590f6cc3ea35512) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000200)='highspeed', 0x9) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000108fdffffff0800000800000000", @ANYRES32=0x0, @ANYBLOB="00000000a304040008"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) pwritev2(r6, 0x0, 0x0, 0x5c, 0x4, 0x2) sendto$inet(r5, &(0x7f0000000300)="89", 0x1, 0x4044880, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 2.998957209s ago: executing program 1 (id=2053): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r3, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x4c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88c7}, @NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type10={{}, {}, @from_mac=@broadcast, @device_b}}}]}, 0x4c}}, 0x800) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@rand_addr=0x64010100, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x2, 0x0, 0xee00}, {@in6=@empty, 0x0, 0x2b}, @in6=@private0, {0x0, 0x9, 0x6, 0x0, 0x200000000}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x3506, 0xa, 0x2, 0x40, 0x70}, [@coaddr={0x14, 0xe, @in6=@private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x104}}, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000140)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x20000000, 0x0, 0x0, 0x20000030, 0x20000060], 0x11e, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000"]}, 0x106) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001c"], 0x104}}, 0x0) 1.985215645s ago: executing program 6 (id=2054): unshare(0x22020600) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) close(r0) r1 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') setns(r1, 0x0) 1.95503945s ago: executing program 0 (id=2055): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000c000000000000000000008018110000", @ANYRES32, @ANYBLOB="00000000000000009c02000014000000b70300000000000055090100000000009500000000000000bf91000000000000b702bb480f2f01a2"], 0x0, 0xb, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) 1.937144577s ago: executing program 4 (id=2056): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x70}, 0x1, 0x7}, 0x200440c0) writev(0xffffffffffffffff, &(0x7f0000000a00)=[{&(0x7f0000000a40)="aaf9cbbebec1c21b2b97fe8378b1a6f9b362b0ce28d64dcae763a477474cd92e109fff8cbeb8da39e130c0e87879555d7d691c5ffa0ac0fa49a8957e4836da102348dff8d9bf765e0ac0d619a539ea3d1bf88e4ed805f6577386bc995636ac2cea14b9677b", 0x65}, {&(0x7f0000000380)="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", 0xfc}, {&(0x7f0000000540)="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", 0x1a8}, {&(0x7f0000000900)="76dd182c4fc8b7d7b41f42cd3ef0d3f7feb19b374acf8c681bff5bae66052fbda7900cf7836f597d138f7ecbf63e380d722760d9256ca254325b69e2a1d1a97b7894004ffc5f56f20f00a2349239fb194534f51634f8f7f39fe6abedd86153c650ddeaba837e85408d900f572cb257d95fb3ba8428f16466973832818415ff2bc6e15b95ca667ba0ec92eda20a06f55c9ef1", 0x92}], 0x4) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r0, &(0x7f00000031c0)={0x2020}, 0x202e) 1.658618378s ago: executing program 4 (id=2057): ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x8, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67520800fd40f78d2cfe07000000a55ba13cc01812c4dae4162e43ac61b7ad33", [0x14, 0x7fffffff]}}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c00000002060108000000000000000001000000050005000a000000050001000700040005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000001c00078008001340000000020800124000000b3108000840"], 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 908.602339ms ago: executing program 0 (id=2058): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') fchdir(r0) r1 = syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000040)='statm\x00') pread64(r2, &(0x7f0000000140)=""/15, 0xf, 0x4) 907.76224ms ago: executing program 6 (id=2059): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x3342, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r0, 0x5) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 679.644067ms ago: executing program 6 (id=2060): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x20, 0x3d, 0x107, 0x70bd2b, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x10}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000040)={r2, 0xffffffffffffffff, 0xcc0, 0x0, @val=@iter={&(0x7f0000000000)=@map_fd=r0, 0x10}}, 0x20) 682.3µs ago: executing program 1 (id=2061): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x1, 0x5000003a, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x34) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 0s ago: executing program 4 (id=2062): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): end-of-directory marker (i_pos 1) [ 41.014261][ T5021] FAT-fs (loop4): Filesystem has been set read-only [ 41.237214][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.628578][ T5032] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.628691][ T5032] batadv_slave_0: entered promiscuous mode [ 41.807492][ T5008] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.914911][ T5008] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.015562][ T5008] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.167651][ T5037] netlink: 48 bytes leftover after parsing attributes in process `syz.4.30'. [ 42.223697][ T114] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.228241][ T114] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.231523][ T114] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.234827][ T114] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.343984][ T15] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.426549][ T4711] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 42.428483][ T4711] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 42.430275][ T4711] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 42.432617][ T4711] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 42.434325][ T4711] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 42.695816][ T5049] input: syz0 as /devices/virtual/input/input3 [ 42.789872][ T5050] loop2: detected capacity change from 0 to 512 [ 42.828654][ T5050] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 42.873754][ T5050] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c840e018, mo2=0002] [ 42.875387][ T5050] EXT4-fs (loop2): orphan cleanup on readonly fs [ 42.884542][ T5050] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.33: bg 0: block 361: padding at end of block bitmap is not set [ 42.884735][ T5050] loop2: lost filesystem error report for type 5 error -117 [ 42.890892][ T5050] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 42.890930][ T5050] loop2: lost filesystem error report for type 5 error -117 [ 42.892506][ C0] EXT4-fs (loop2): error count since last fsck: 2 [ 42.892518][ C0] EXT4-fs (loop2): initial error at time 524331: ext4_validate_block_bitmap:441 [ 42.892533][ C0] EXT4-fs (loop2): last error at time 524331: ext4_mb_clear_bb:6679 [ 42.902280][ T5050] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #11: comm syz.2.33: attempt to clear invalid blocks 33619980 len 1 [ 42.902390][ T5050] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 42.912277][ T5050] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.33: invalid indirect mapped block 1811939328 (level 0) [ 42.912346][ T5050] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 42.918926][ T5050] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.33: invalid indirect mapped block 2185560079 (level 1) [ 42.918951][ T5050] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 42.928163][ T5050] EXT4-fs (loop2): 1 truncate cleaned up [ 42.931612][ T5050] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 43.094096][ T5053] warning: `syz.2.33' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 43.946546][ T15] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.254883][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 44.337337][ T15] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.449081][ T5071] loop4: detected capacity change from 0 to 8192 [ 44.508324][ T5078] loop2: detected capacity change from 0 to 512 [ 44.509454][ T5078] EXT4-fs (loop2): Test dummy encryption mode enabled [ 44.518281][ T5078] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.36: inode has both inline data and extents flags [ 44.518305][ T5078] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 44.518616][ T5078] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.36: couldn't read orphan inode 15 (err -117) [ 44.518632][ T5078] loop2: lost filesystem error report for type 5 error -117 [ 44.519363][ T5078] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.534893][ T5071] loop4: p1 < > p3 < p5 > p4 [ 44.536311][ T5078] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 44.544882][ T5071] loop4: p4 size 3081 extends beyond EOD, truncated [ 44.616555][ T5071] loop4: p5 size 3081 extends beyond EOD, truncated [ 44.628565][ T5071] capability: warning: `syz.4.38' uses deprecated v2 capabilities in a way that may be insecure [ 44.677630][ T15] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.696671][ T4711] Bluetooth: hci0: command tx timeout [ 45.354830][ T5092] overlayfs: missing 'lowerdir' [ 45.730538][ T5091] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 45.766217][ T5088] loop4: detected capacity change from 0 to 256 [ 45.766697][ T5088] vfat: Deprecated parameter 'posix' [ 45.766719][ T5088] FAT-fs: "posix" option is obsolete, not supported now [ 45.863507][ T4703] udevd[4703]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 46.217966][ T4701] udevd[4701]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 46.219615][ T5065] udevd[5065]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 46.224503][ T4700] udevd[4700]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 46.325740][ T5110] process 'syz.4.39' launched './file2' with NULL argv: empty string added [ 46.348869][ T5045] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.360166][ T5045] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.380991][ T5045] bridge_slave_0: entered allmulticast mode [ 46.457438][ T5045] bridge_slave_0: entered promiscuous mode [ 46.458489][ T5045] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.458522][ T5045] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.459782][ T5045] bridge_slave_1: entered allmulticast mode [ 46.460257][ T5045] bridge_slave_1: entered promiscuous mode [ 46.476586][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.559732][ T15] bridge_slave_1: left allmulticast mode [ 46.559769][ T15] bridge_slave_1: left promiscuous mode [ 46.560963][ T15] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.582309][ T15] bridge_slave_0: left allmulticast mode [ 46.582395][ T15] bridge_slave_0: left promiscuous mode [ 46.582618][ T15] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.668797][ T5115] syz.4.43 uses obsolete (PF_INET,SOCK_PACKET) [ 46.686859][ T5117] netlink: 28 bytes leftover after parsing attributes in process `syz.0.44'. [ 46.744797][ T4711] Bluetooth: hci0: command tx timeout [ 46.772270][ T15] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 47.552226][ T15] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 47.673567][ T15] bond0 (unregistering): Released all slaves [ 47.679940][ T5045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.723189][ T5117] xt_connbytes: Forcing CT accounting to be enabled [ 47.723228][ T5117] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 47.723288][ T5117] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 47.741250][ T5045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.917699][ T5129] loop4: detected capacity change from 0 to 1024 [ 48.117813][ T5129] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 48.297374][ T5129] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 16: comm syz.4.45: path /12/file1: bad entry in directory: directory entry overrun - offset=876, inode=0, rec_len=1024, size=1024 fake=0 [ 48.805978][ T4711] Bluetooth: hci0: command tx timeout [ 49.169334][ T5045] team0: Port device team_slave_0 added [ 49.181402][ T5045] team0: Port device team_slave_1 added [ 49.248503][ T5141] loop3: detected capacity change from 0 to 1024 [ 49.282544][ T5141] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.291387][ T4721] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 49.674245][ T5157] loop4: detected capacity change from 0 to 1024 [ 49.704590][ T5045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.705151][ T5045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.705182][ T5045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.707040][ T5157] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.707930][ T5045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.707941][ T5045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.707958][ T5045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.798401][ T4400] 8021q: adding VLAN 0 to HW filter on device eth0 [ 49.824225][ T15] hsr_slave_0: left promiscuous mode [ 49.827505][ T15] hsr_slave_1: left promiscuous mode [ 49.829179][ T15] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.831062][ T15] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 50.236400][ T5172] hub 8-0:1.0: USB hub found [ 50.256712][ T5172] hub 8-0:1.0: 8 ports detected [ 50.422645][ T15] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.424714][ T4721] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.426485][ T15] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 50.428006][ T4710] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.439225][ T15] veth1_macvtap: left promiscuous mode [ 50.440685][ T15] veth0_macvtap: left promiscuous mode [ 50.441950][ T15] veth1_vlan: left promiscuous mode [ 50.443094][ T15] veth0_vlan: left promiscuous mode [ 50.457235][ T5176] loop4: detected capacity change from 0 to 512 [ 50.523790][ T5176] EXT4-fs (loop4): Test dummy encryption mode enabled [ 50.534774][ T5176] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 50.835906][ T4711] Bluetooth: hci0: command tx timeout [ 50.885755][ T15] team0 (unregistering): Port device team_slave_1 removed [ 50.890131][ T15] team0 (unregistering): Port device team_slave_0 removed [ 51.168516][ T5045] hsr_slave_0: entered promiscuous mode [ 51.168978][ T5045] hsr_slave_1: entered promiscuous mode [ 51.169183][ T5045] debugfs: 'hsr0' already exists in 'hsr' [ 51.169194][ T5045] Cannot create hsr debugfs directory [ 51.789028][ T5209] loop4: detected capacity change from 0 to 1024 [ 51.810227][ T5209] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.278498][ T5235] loop2: detected capacity change from 0 to 512 [ 52.280773][ T5235] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 52.594076][ T5244] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 52.595658][ T5244] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 52.647788][ T5244] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 52.731366][ T4721] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.768008][ T5045] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 52.773085][ T5045] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 52.775400][ T5045] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 52.776011][ T5241] netlink: 240 bytes leftover after parsing attributes in process `syz.0.61'. [ 52.781704][ T5045] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 52.784493][ T5045] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 52.788229][ T5045] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 52.790303][ T5045] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 52.793255][ T5045] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 52.874977][ T5262] netlink: 'syz.4.62': attribute type 10 has an invalid length. [ 52.914968][ T5262] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 53.222774][ T5045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.228643][ T5045] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.242620][ T114] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.242665][ T114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.243225][ T114] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.243252][ T114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.245437][ T5264] loop3: detected capacity change from 0 to 1024 [ 53.271891][ T5045] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.289170][ T5264] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.081426][ T4710] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.699257][ T5305] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 54.984654][ T24] IPVS: starting estimator thread 0... [ 55.174284][ T5306] IPVS: using max 57 ests per chain, 136800 per kthread [ 55.232079][ T5045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.207467][ T5045] veth0_vlan: entered promiscuous mode [ 56.211899][ T5045] veth1_vlan: entered promiscuous mode [ 56.238746][ T5045] veth0_macvtap: entered promiscuous mode [ 56.286436][ T5045] veth1_macvtap: entered promiscuous mode [ 56.353905][ T5344] loop4: detected capacity change from 0 to 512 [ 56.578151][ T5348] openvswitch: netlink: Message has 78 unknown bytes. [ 56.600695][ T5045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.612304][ T5045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.624692][ T5344] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 56.627429][ T5344] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 56.627704][ T5344] System zones: 0-2, 18-18, 34-34 [ 56.640460][ T114] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.640600][ T114] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.640636][ T114] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.640661][ T114] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.695474][ T5344] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.74: bad orphan inode 15 [ 56.695497][ T5344] loop4: lost filesystem error report for type 5 error -117 [ 56.697590][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 56.697605][ C0] EXT4-fs (loop4): initial error at time 1572921: ext4_orphan_get:1425 [ 56.697622][ C0] EXT4-fs (loop4): last error at time 1572921: ext4_orphan_get:1425 [ 56.705421][ T5344] ext4_test_bit(bit=14, block=18) = 1 [ 56.705456][ T5344] is_bad_inode(inode)=0 [ 56.705473][ T5344] NEXT_ORPHAN(inode)=2264924160 [ 56.705479][ T5344] max_ino=32 [ 56.705484][ T5344] i_nlink=0 [ 56.706675][ T5344] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2972: inode #15: comm syz.4.74: corrupted xattr block 19: e_value out of bounds [ 56.706702][ T5344] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 56.712977][ T5344] EXT4-fs warning (device loop4): ext4_evict_inode:287: xattr delete (err -117) [ 56.713517][ T5344] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.995288][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.995319][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.998801][ T5344] EXT4-fs error (device loop4): ext4_search_dir:1474: inode #2: block 3: comm syz.4.74: bad entry in directory: directory entry overrun - offset=44, inode=262156, rec_len=4096, size=4096 fake=0 [ 57.083655][ T114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.083677][ T114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.305560][ T5360] netlink: 240 bytes leftover after parsing attributes in process `syz.3.75'. [ 57.410813][ T5350] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 80: padding at end of block bitmap is not set [ 57.481594][ T5374] netlink: 240 bytes leftover after parsing attributes in process `syz.1.32'. [ 57.485386][ T4721] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.429091][ T5384] loop2: detected capacity change from 0 to 1024 [ 58.538636][ T5384] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 59.617436][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 59.950869][ T5401] Injecting memory failure for pfn 0x1341cc at process virtual address 0x20000000 [ 60.305610][ T5401] Memory failure: 0x1341cc: keeping poisoned page in swap cache [ 60.306069][ T5401] Memory failure: 0x1341cc: Sending SIGBUS to syz.4.82:5401 due to hardware memory corruption [ 60.306305][ T5401] Memory failure: 0x1341cc: recovery action for dirty swapcache page: Delayed [ 60.306584][ T5401] Injecting memory failure for pfn 0x133e71 at process virtual address 0x20001000 [ 60.473123][ T5405] loop2: detected capacity change from 0 to 256 [ 60.686192][ T5401] Memory failure: 0x133e71: keeping poisoned page in swap cache [ 60.686255][ T5401] Memory failure: 0x133e71: recovery action for dirty swapcache page: Delayed [ 61.042598][ T5409] overlayfs: failed to clone upperpath [ 63.676422][ T5430] overlayfs: failed to resolve './bus': -2 [ 63.918376][ T1595] ieee802154 phy0 wpan0: encryption failed: -22 [ 63.918437][ T1595] ieee802154 phy1 wpan1: encryption failed: -22 [ 63.922723][ T9] cfg80211: failed to load regulatory.db [ 65.292948][ T5461] loop4: detected capacity change from 0 to 1024 [ 65.295434][ T5461] EXT4-fs: Ignoring removed nomblk_io_submit option [ 65.298014][ T5461] EXT4-fs: inline encryption not supported [ 65.299508][ T5461] EXT4-fs: Ignoring removed nomblk_io_submit option [ 65.330929][ T5454] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 65.369729][ T5461] EXT4-fs (loop4): mounted filesystem 00fc0c00-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 65.376014][ T5461] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.96: bg 0: block 112: padding at end of block bitmap is not set [ 65.457032][ T5469] fuse: Bad value for 'fd' [ 67.110111][ T4721] EXT4-fs (loop4): unmounting filesystem 00fc0c00-0000-0006-0000-000000000000. [ 67.215585][ T5490] netlink: 240 bytes leftover after parsing attributes in process `syz.2.102'. [ 67.406418][ T5504] loop1: detected capacity change from 0 to 512 [ 70.211875][ T5524] netlink: 8 bytes leftover after parsing attributes in process `syz.3.109'. [ 70.738076][ T5538] loop3: detected capacity change from 0 to 512 [ 70.754881][ T5538] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.014155][ T5547] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.113: corrupted xattr block 33: invalid checksum [ 71.020873][ T5547] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.113: corrupted xattr block 33: invalid checksum [ 71.025538][ T5547] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.113: corrupted xattr block 33: invalid checksum [ 71.047078][ T5546] EXT4-fs error (device loop3): ext4_validate_inode_bitmap:107: comm syz.3.113: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20 [ 71.244991][ T5552] Zero length message leads to an empty skb [ 71.245990][ T5552] fuse: Unknown parameter '/óx¹g K8EÖ ÉTìÅÅFp…ʇç"Œ…sSÐouštD-3+VÊi‰Süä §Me½ÏÀœÎ«ÐgV¨Ô®]¹ñ€ñgÇ•òBÄ“5yÉ ˜ÌÙ?µØÝ©ûF]ÔþK6[)¸aч00000000000000000008' [ 71.682063][ T4710] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.004614][ T5570] faux_driver vgem: [drm] Unknown color mode 11173; guessing buffer size. [ 72.876137][ T5577] overlayfs: failed to clone upperpath [ 73.417501][ T5581] binder: 5579:5581 unknown command 0 [ 73.417538][ T5581] binder: 5579:5581 ioctl c0306201 20000080 returned -22 [ 73.605131][ T5590] loop1: detected capacity change from 0 to 512 [ 73.613955][ T5590] EXT4-fs (loop1): Test dummy encryption mode enabled [ 73.614175][ T5590] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 74.071631][ T5603] xt_SECMARK: invalid mode: 2 [ 74.072825][ T5600] netlink: 20 bytes leftover after parsing attributes in process `syz.2.127'. [ 74.445118][ T5610] netlink: 8 bytes leftover after parsing attributes in process `syz.3.129'. [ 74.987870][ T5619] netlink: 8 bytes leftover after parsing attributes in process `syz.2.132'. [ 76.255066][ T5631] loop1: detected capacity change from 0 to 512 [ 76.326854][ T5631] EXT4-fs (loop1): Test dummy encryption mode enabled [ 76.332427][ T5631] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.134: inode has both inline data and extents flags [ 76.332463][ T5631] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 76.335346][ T5631] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.134: couldn't read orphan inode 15 (err -117) [ 76.335372][ T5631] loop1: lost filesystem error report for type 5 error -117 [ 76.337111][ C0] EXT4-fs (loop1): error count since last fsck: 2 [ 76.337128][ C0] EXT4-fs (loop1): initial error at time 1572941: ext4_orphan_get:1399: inode 15 [ 76.337148][ C0] EXT4-fs (loop1): last error at time 1572941: ext4_orphan_get:1404 [ 76.347657][ T5631] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.420924][ T5636] overlayfs: failed to clone upperpath [ 77.218125][ T5651] overlayfs: missing 'lowerdir' [ 77.234820][ T5651] netlink: 16 bytes leftover after parsing attributes in process `syz.1.134'. [ 77.236238][ T5651] netlink: 12 bytes leftover after parsing attributes in process `syz.1.134'. [ 77.236300][ T5651] netlink: 12 bytes leftover after parsing attributes in process `syz.1.134'. [ 77.501531][ T5660] loop2: detected capacity change from 0 to 2048 [ 77.593263][ T5660] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.851443][ T5668] input: syz0 as /devices/virtual/input/input4 [ 78.076760][ T5672] loop3: detected capacity change from 0 to 1024 [ 78.089741][ T5672] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.493358][ T5679] hub 8-0:1.0: USB hub found [ 78.493743][ T5679] hub 8-0:1.0: 8 ports detected [ 78.573291][ T5045] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.819222][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.854149][ T5685] loop1: detected capacity change from 0 to 1024 [ 78.863679][ T5685] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.959865][ T4710] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.152570][ T5691] Bluetooth: MGMT ver 1.23 [ 79.712062][ T5045] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.763485][ T5711] loop2: detected capacity change from 0 to 1024 [ 79.791970][ T5711] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.228295][ T5715] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 81.239667][ T5723] loop3: detected capacity change from 0 to 1024 [ 81.328537][ T5723] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.538655][ T5727] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 81.822039][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.046845][ T5740] syz_tun: entered allmulticast mode [ 82.312298][ T4710] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.667301][ T5735] syz_tun: left allmulticast mode [ 82.732906][ T5754] loop2: detected capacity change from 0 to 1024 [ 82.760746][ T5754] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.704452][ T5782] loop4: detected capacity change from 0 to 512 [ 83.706783][ T5782] EXT4-fs: inline encryption not supported [ 83.761371][ T5782] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 83.761400][ T5782] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 83.940795][ T5782] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 83.944702][ T5782] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.164: bg 0: block 248: padding at end of block bitmap is not set [ 83.944730][ T5782] loop4: lost filesystem error report for type 5 error -117 [ 83.947816][ T5782] Quota error (device loop4): write_blk: dquota write failed [ 83.947849][ T5782] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 83.947872][ T5782] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.164: Failed to acquire dquot type 1 [ 83.947883][ T5782] loop4: lost filesystem error report for type 5 error -28 [ 83.953462][ C0] EXT4-fs (loop4): error count since last fsck: 2 [ 83.953484][ C0] EXT4-fs (loop4): last error at time 3670100: ext4_acquire_dquot:7041 [ 83.956748][ T5782] EXT4-fs (loop4): 1 truncate cleaned up [ 83.959913][ T5782] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 83.982272][ T5782] netlink: 'syz.4.164': attribute type 15 has an invalid length. [ 84.248323][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.116691][ T4721] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 85.632363][ T5803] loop2: detected capacity change from 0 to 1024 [ 86.172589][ T5803] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.339750][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.297217][ T5823] Invalid ELF header type: 2 != 1 [ 88.134169][ T4711] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 88.645784][ T5835] loop1: detected capacity change from 0 to 1024 [ 88.679969][ T5835] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.333101][ T5847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.335350][ T5847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.657883][ T5045] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.013763][ T5843] infiniband syz2: set active [ 90.013803][ T5843] infiniband syz2: added bond_slave_0 [ 90.306648][ T5836] netlink: 12 bytes leftover after parsing attributes in process `syz.4.173'. [ 90.382980][ T5843] RDS/IB: syz2: added [ 90.384125][ T5843] smc: adding ib device syz2 with port count 1 [ 90.384470][ T5843] smc: ib device syz2 port 1 has no pnetid [ 90.759934][ T5857] block device autoloading is deprecated and will be removed. [ 90.797135][ T5857] Soft offlining pfn 0x135fb5 at process virtual address 0x20000000 [ 90.799478][ T5857] Soft offline: 0x135fb5: page migration failed 1, type 0x5ffc0000002101c(referenced|uptodate|dirty|arch_1|swapbacked|node=0|zone=2|lastcpupid=0x7ff) [ 91.008198][ T5859] loop4: detected capacity change from 0 to 512 [ 91.021392][ T5859] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.473179][ T5871] loop1: detected capacity change from 0 to 1024 [ 91.526986][ T5871] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.976113][ T4721] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.290539][ T5862] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 93.296758][ T5045] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.616554][ T5900] x_tables: duplicate underflow at hook 3 [ 94.037678][ T5903] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 95.086564][ T5915] loop1: detected capacity change from 0 to 512 [ 95.088528][ T5915] EXT4-fs (loop1): Test dummy encryption mode enabled [ 95.089820][ T5915] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 95.292783][ T5916] kernel profiling enabled (shift: 6) [ 95.629947][ T5919] loop1: detected capacity change from 0 to 512 [ 95.635104][ T5919] EXT4-fs (loop1): Test dummy encryption mode enabled [ 95.654618][ T5919] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.191: inode has both inline data and extents flags [ 95.654655][ T5919] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 95.654818][ T5919] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.191: couldn't read orphan inode 15 (err -117) [ 95.654839][ T5919] loop1: lost filesystem error report for type 5 error -117 [ 95.655369][ T5919] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.963081][ T5932] overlayfs: missing 'lowerdir' [ 97.277583][ T5942] loop3: detected capacity change from 0 to 512 [ 97.434481][ T5943] loop4: detected capacity change from 0 to 1024 [ 98.306493][ T5942] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.194: corrupted in-inode xattr: invalid ea_ino [ 98.306537][ T5942] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 98.312191][ T5942] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.194: couldn't read orphan inode 15 (err -117) [ 98.312226][ T5942] loop3: lost filesystem error report for type 5 error -117 [ 98.315896][ C1] EXT4-fs (loop3): error count since last fsck: 2 [ 98.315909][ C1] EXT4-fs (loop3): initial error at time 4194403: ext4_iget_extra_inode:5180: inode 15 [ 98.315927][ C1] EXT4-fs (loop3): last error at time 4194403: ext4_orphan_get:1404 [ 98.346076][ T5943] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.360817][ T5942] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.474750][ T5045] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.994237][ T5962] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 99.676876][ T4721] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.134521][ T5975] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 100.393197][ T4710] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.720087][ T5981] loop3: detected capacity change from 0 to 256 [ 100.720499][ T5981] vfat: Deprecated parameter 'posix' [ 100.720509][ T5981] FAT-fs: "posix" option is obsolete, not supported now [ 101.050885][ T5988] Soft offlining pfn 0x1342f0 at process virtual address 0x20000000 [ 101.053095][ T5988] Soft offline: 0x1342f0: page migration failed 1, type 0x5ffc0000002101c(referenced|uptodate|dirty|arch_1|swapbacked|node=0|zone=2|lastcpupid=0x7ff) [ 102.003095][ T6005] syz2: rxe_newlink: already configured on bond_slave_0 [ 102.568586][ T6012] lo speed is unknown, defaulting to 1000 [ 102.568861][ T6012] lo speed is unknown, defaulting to 1000 [ 102.573224][ T6012] lo speed is unknown, defaulting to 1000 [ 102.579690][ T6012] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 102.592924][ T6012] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 103.115365][ T6012] lo speed is unknown, defaulting to 1000 [ 103.115779][ T6012] lo speed is unknown, defaulting to 1000 [ 103.116107][ T6012] lo speed is unknown, defaulting to 1000 [ 103.116423][ T6012] lo speed is unknown, defaulting to 1000 [ 103.116781][ T6012] lo speed is unknown, defaulting to 1000 [ 103.340288][ T6029] netlink: 20 bytes leftover after parsing attributes in process `syz.0.207'. [ 103.875767][ T6034] loop3: detected capacity change from 0 to 512 [ 103.901470][ T6034] EXT4-fs (loop3): Test dummy encryption mode enabled [ 103.928885][ T6034] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.210: inode has both inline data and extents flags [ 103.936017][ T6034] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 103.938376][ T6034] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.210: couldn't read orphan inode 15 (err -117) [ 103.942254][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 103.942272][ C1] EXT4-fs (loop3): initial error at time 4718696: ext4_orphan_get:1399: inode 15 [ 103.942288][ C1] EXT4-fs (loop3): last error at time 4718696: ext4_orphan_get:1399: inode 15 [ 103.946592][ T6034] loop3: lost filesystem error report for type 5 error -117 [ 103.948427][ T6034] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.144186][ T6039] loop4: detected capacity change from 0 to 128 [ 104.149558][ T6039] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 104.826109][ T6039] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 104.901837][ T4929] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 105.072790][ T30] audit: type=1326 audit(4718697.584:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6041 comm="syz.0.212" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9cf781a8 code=0x7ffc0000 [ 105.073289][ T30] audit: type=1326 audit(4718697.584:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6041 comm="syz.0.212" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9cf781a8 code=0x7ffc0000 [ 105.075434][ T30] audit: type=1326 audit(4718697.650:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6041 comm="syz.0.212" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=141 compat=0 ip=0xffff9cf781a8 code=0x7ffc0000 [ 105.075921][ T30] audit: type=1326 audit(4718697.650:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6041 comm="syz.0.212" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9cf781a8 code=0x7ffc0000 [ 105.075957][ T30] audit: type=1326 audit(4718697.650:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6041 comm="syz.0.212" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9cf781a8 code=0x7ffc0000 [ 105.077995][ T30] audit: type=1326 audit(4718697.650:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6041 comm="syz.0.212" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffff9cf781a8 code=0x7ffc0000 [ 105.078028][ T30] audit: type=1326 audit(4718697.650:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6041 comm="syz.0.212" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9cf781a8 code=0x7ffc0000 [ 105.078061][ T30] audit: type=1326 audit(4718697.650:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6041 comm="syz.0.212" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9cf781a8 code=0x7ffc0000 [ 105.208600][ T30] audit: type=1326 audit(4718697.650:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6041 comm="syz.0.212" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=119 compat=0 ip=0xffff9cf781a8 code=0x7ffc0000 [ 105.208673][ T30] audit: type=1326 audit(4718697.650:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6041 comm="syz.0.212" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9cf781a8 code=0x7ffc0000 [ 105.909231][ T6040] overlayfs: missing 'workdir' [ 105.911193][ T6040] overlayfs: missing 'lowerdir' [ 106.088281][ T4710] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.499805][ T6058] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 106.499844][ T6058] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 106.649175][ T6089] trusted_key: syz.4.218 sent an empty control message without MSG_MORE. [ 106.773264][ T6058] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 106.773558][ T6058] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 106.928831][ T6058] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 106.928942][ T6058] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 107.452342][ T6058] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 107.452375][ T6058] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 107.829498][ T6110] loop4: detected capacity change from 0 to 512 [ 107.829859][ T6110] EXT4-fs: inline encryption not supported [ 107.834354][ T6110] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 107.837042][ T6110] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 107.849850][ T6110] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2860: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 107.849916][ T6110] EXT4-fs (loop4): 1 truncate cleaned up [ 107.850388][ T6110] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.419920][ T6126] netlink: 4 bytes leftover after parsing attributes in process `syz.3.225'. [ 108.513389][ T6126] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.513429][ T6126] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.519654][ T6126] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.519721][ T6126] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.781726][ T4721] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.320963][ T6058] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 109.321084][ T6058] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 110.002185][ T6156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.229'. [ 110.742734][ T6187] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 112.035554][ T6227] loop4: detected capacity change from 0 to 512 [ 112.038866][ T6227] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 112.357164][ T6233] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 112.357368][ T6233] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 112.368271][ T6233] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 112.552527][ T6246] loop1: detected capacity change from 0 to 256 [ 112.553990][ T6246] vfat: Deprecated parameter 'posix' [ 112.553999][ T6246] FAT-fs: "posix" option is obsolete, not supported now [ 113.170250][ T1343] netdevsim netdevsim120 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.329325][ T6265] loop4: detected capacity change from 0 to 1024 [ 113.371458][ T6265] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 113.441055][ T6274] PKCS7: Unknown OID: [4] 2.19.50.2018883.1651(bad) [ 113.442858][ T6274] PKCS7: Only support pkcs7_signedData type [ 113.558157][ T6280] IPVS: set_ctl: invalid protocol: 131 68.1.1.2:20004 [ 113.762833][ T4872] IPVS: starting estimator thread 0... [ 113.786973][ T6281] input: syz0 as /devices/virtual/input/input5 [ 113.908896][ T6282] IPVS: using max 57 ests per chain, 136800 per kthread [ 114.230999][ T6295] loop3: detected capacity change from 0 to 1024 [ 114.249698][ T4721] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 114.250500][ T6295] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.677008][ T6269] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 114.906497][ T6306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.264'. [ 115.122688][ T4710] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.534214][ T6321] hub 8-0:1.0: USB hub found [ 115.534613][ T6321] hub 8-0:1.0: 8 ports detected [ 115.932365][ T6334] netlink: 240 bytes leftover after parsing attributes in process `syz.3.267'. [ 116.241136][ T6335] loop4: detected capacity change from 0 to 512 [ 116.265169][ T6335] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 116.272000][ T6335] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c840e018, mo2=0002] [ 116.272117][ T6335] EXT4-fs (loop4): orphan cleanup on readonly fs [ 116.275374][ T6335] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.273: bg 0: block 361: padding at end of block bitmap is not set [ 116.275393][ T6335] loop4: lost filesystem error report for type 5 error -117 [ 116.278233][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 116.278243][ C0] EXT4-fs (loop4): initial error at time 5767284: ext4_validate_block_bitmap:441 [ 116.278259][ C0] EXT4-fs (loop4): last error at time 5767284: ext4_validate_block_bitmap:441 [ 116.279532][ T6335] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 116.279545][ T6335] loop4: lost filesystem error report for type 5 error -117 [ 116.279730][ T6335] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #11: comm syz.4.273: attempt to clear invalid blocks 33619980 len 1 [ 116.279747][ T6335] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 116.281930][ T6335] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.273: invalid indirect mapped block 1811939328 (level 0) [ 116.281947][ T6335] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 116.282135][ T6335] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.273: invalid indirect mapped block 2185560079 (level 1) [ 116.282148][ T6335] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 116.282416][ T6335] EXT4-fs (loop4): 1 truncate cleaned up [ 116.282876][ T6335] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 120.065356][ T4721] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 120.309851][ T6409] loop3: detected capacity change from 0 to 512 [ 120.310713][ T6409] EXT4-fs (loop3): Test dummy encryption mode enabled [ 120.322536][ T6409] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c118, mo2=0022] [ 120.322584][ T6409] System zones: 1-2, 4-12, 8-8 [ 120.322948][ T6409] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.299: iget: bad i_size value: 38620345925642 [ 120.322968][ T6409] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 120.323210][ T6409] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.299: couldn't read orphan inode 15 (err -117) [ 120.323232][ T6409] loop3: lost filesystem error report for type 5 error -117 [ 120.323959][ T6409] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.371746][ T6414] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 121.400290][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 121.400322][ T30] audit: type=1326 audit(6815865.508:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6423 comm="syz.4.302" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbdd781a8 code=0x7ffc0000 [ 121.400354][ T30] audit: type=1326 audit(6815865.508:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6423 comm="syz.4.302" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbdd781a8 code=0x7ffc0000 [ 121.405802][ T30] audit: type=1326 audit(6815865.508:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6423 comm="syz.4.302" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=141 compat=0 ip=0xffffbdd781a8 code=0x7ffc0000 [ 121.405861][ T30] audit: type=1326 audit(6815865.508:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6423 comm="syz.4.302" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbdd781a8 code=0x7ffc0000 [ 121.405905][ T30] audit: type=1326 audit(6815865.508:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6423 comm="syz.4.302" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbdd781a8 code=0x7ffc0000 [ 121.428564][ T30] audit: type=1326 audit(6815865.529:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6423 comm="syz.4.302" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffffbdd781a8 code=0x7ffc0000 [ 121.428604][ T30] audit: type=1326 audit(6815865.529:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6423 comm="syz.4.302" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbdd781a8 code=0x7ffc0000 [ 121.428635][ T30] audit: type=1326 audit(6815865.529:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6423 comm="syz.4.302" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbdd781a8 code=0x7ffc0000 [ 121.428655][ T30] audit: type=1326 audit(6815865.529:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6423 comm="syz.4.302" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=119 compat=0 ip=0xffffbdd781a8 code=0x7ffc0000 [ 121.428675][ T30] audit: type=1326 audit(6815865.529:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6423 comm="syz.4.302" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbdd781a8 code=0x7ffc0000 [ 121.536625][ T4710] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.368055][ T6453] loop4: detected capacity change from 0 to 1024 [ 122.404170][ T6453] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.487689][ T6461] netlink: 240 bytes leftover after parsing attributes in process `syz.2.310'. [ 122.866190][ T6472] Cannot find del_set index 2 as target [ 122.915005][ T6472] loop3: detected capacity change from 0 to 512 [ 122.917082][ T6472] ext2: Unknown parameter 'dont_appraise' [ 122.971809][ T6472] loop3: detected capacity change from 0 to 512 [ 123.566574][ T4721] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.388350][ T6498] loop4: detected capacity change from 0 to 8192 [ 124.427344][ T6498] loop4: p3 p4 < > [ 124.428142][ T6498] loop4: p3 start 50659072 is beyond EOD, truncated [ 124.552970][ T5111] udevd[5111]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 124.612561][ T6503] loop4: detected capacity change from 0 to 1024 [ 124.643512][ T6503] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.503273][ T4721] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.695788][ T6520] loop4: detected capacity change from 0 to 1024 [ 125.718489][ T6520] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.800821][ T1595] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.800864][ T1595] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.167533][ T6526] netlink: 12 bytes leftover after parsing attributes in process `syz.2.336'. [ 126.167571][ T6526] netlink: 20 bytes leftover after parsing attributes in process `syz.2.336'. [ 126.369537][ T6537] netlink: 240 bytes leftover after parsing attributes in process `syz.1.339'. [ 126.704109][ T4721] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.856699][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 127.856736][ T30] audit: type=1326 audit(8388735.618:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6534 comm="syz.2.340" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0d781a8 code=0x7ffc0000 [ 127.856769][ T30] audit: type=1326 audit(8388735.618:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6534 comm="syz.2.340" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0d781a8 code=0x7ffc0000 [ 128.421700][ T6555] netlink: 48 bytes leftover after parsing attributes in process `syz.4.345'. [ 128.421751][ T6555] netlink: 48 bytes leftover after parsing attributes in process `syz.4.345'. [ 128.783110][ T6568] Soft offlining pfn 0x139c9c at process virtual address 0x20000000 [ 128.789572][ T6568] Soft offline: 0x139c9c: page migration failed 1, type 0x5ffc0000002101c(referenced|uptodate|dirty|arch_1|swapbacked|node=0|zone=2|lastcpupid=0x7ff) [ 129.070550][ T6575] netlink: 240 bytes leftover after parsing attributes in process `syz.4.347'. [ 129.221818][ T6584] netlink: 8 bytes leftover after parsing attributes in process `syz.3.351'. [ 129.412874][ T6587] netlink: 20 bytes leftover after parsing attributes in process `syz.2.355'. [ 129.521025][ T6591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.524428][ T6591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.789559][ T6615] loop1: detected capacity change from 0 to 1024 [ 130.794013][ T6615] EXT4-fs: Ignoring removed nomblk_io_submit option [ 130.794053][ T6615] EXT4-fs: Ignoring removed nomblk_io_submit option [ 130.796600][ T6615] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 130.886644][ T6615] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.902326][ T5045] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.003272][ T6628] Soft offlining pfn 0x133dcf at process virtual address 0x20000000 [ 131.009713][ T6628] Soft offline: 0x133dcf: page migration failed 1, type 0x5ffc0000002101c(referenced|uptodate|dirty|arch_1|swapbacked|node=0|zone=2|lastcpupid=0x7ff) [ 131.226935][ T30] audit: type=1326 audit(8913027.293:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6632 comm="syz.3.374" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff879781a8 code=0x7ffc0000 [ 131.226978][ T30] audit: type=1326 audit(8913027.293:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6632 comm="syz.3.374" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffff879781a8 code=0x7ffc0000 [ 131.227011][ T30] audit: type=1326 audit(8913027.293:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6632 comm="syz.3.374" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffff879781a8 code=0x7ffc0000 [ 131.878662][ T6663] loop3: detected capacity change from 0 to 1024 [ 131.904425][ T6663] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.666110][ T6687] netlink: 8 bytes leftover after parsing attributes in process `syz.0.393'. [ 132.784616][ T6692] Soft offlining pfn 0x139a70 at process virtual address 0x20000000 [ 132.788459][ T6692] Soft offline: 0x139a70: page migration failed 1, type 0x5ffc0000002101c(referenced|uptodate|dirty|arch_1|swapbacked|node=0|zone=2|lastcpupid=0x7ff) [ 133.004408][ T4710] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.479043][ T6706] netlink: 32 bytes leftover after parsing attributes in process `syz.3.399'. [ 133.514669][ T6710] netlink: 'syz.3.401': attribute type 21 has an invalid length. [ 133.514703][ T6710] IPv6: NLM_F_CREATE should be specified when creating new route [ 133.515111][ T6710] netlink: 'syz.3.401': attribute type 1 has an invalid length. [ 133.651373][ T6715] netlink: 8 bytes leftover after parsing attributes in process `syz.4.398'. [ 133.842646][ T6717] netlink: 8 bytes leftover after parsing attributes in process `syz.1.403'. [ 133.944582][ T6731] netlink: 4 bytes leftover after parsing attributes in process `syz.1.410'. [ 134.320115][ T6740] loop1: detected capacity change from 0 to 1024 [ 134.357907][ T6740] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.720314][ T6749] loop3: detected capacity change from 0 to 512 [ 134.724049][ T6749] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 134.726100][ T6749] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c840e018, mo2=0002] [ 134.726288][ T6749] EXT4-fs (loop3): orphan cleanup on readonly fs [ 134.730391][ T6749] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.412: bg 0: block 361: padding at end of block bitmap is not set [ 134.730428][ T6749] loop3: lost filesystem error report for type 5 error -117 [ 134.733549][ T6749] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 134.733586][ T6749] loop3: lost filesystem error report for type 5 error -117 [ 134.735173][ T6749] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #11: comm syz.3.412: attempt to clear invalid blocks 33619980 len 1 [ 134.735192][ T6749] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 134.741751][ C1] EXT4-fs (loop3): error count since last fsck: 3 [ 134.741762][ C1] EXT4-fs (loop3): initial error at time 9961606: ext4_validate_block_bitmap:441 [ 134.741774][ C1] EXT4-fs (loop3): last error at time 9961606: ext4_clear_blocks:876: inode 11 [ 134.746802][ T6749] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.412: invalid indirect mapped block 1811939328 (level 0) [ 134.746827][ T6749] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 134.748676][ T6749] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.412: invalid indirect mapped block 2185560079 (level 1) [ 134.748703][ T6749] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 134.752130][ T6749] EXT4-fs (loop3): 1 truncate cleaned up [ 134.753407][ T6749] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 135.196278][ T5045] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.293761][ T6772] netlink: 16 bytes leftover after parsing attributes in process `syz.0.422'. [ 135.710721][ T6782] xt_hashlimit: max too large, truncated to 1048576 [ 135.780015][ T6788] loop1: detected capacity change from 0 to 512 [ 135.798602][ T6788] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 135.858137][ T6788] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.429: bad orphan inode 13 [ 135.858178][ T6788] loop1: lost filesystem error report for type 5 error -117 [ 135.858371][ T6788] ext4_test_bit(bit=12, block=18) = 1 [ 135.858379][ T6788] is_bad_inode(inode)=0 [ 135.858396][ T6788] NEXT_ORPHAN(inode)=0 [ 135.858400][ T6788] max_ino=32 [ 135.858404][ T6788] i_nlink=1 [ 135.858891][ T6788] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 135.874166][ T6788] EXT4-fs error (device loop1): ext4_lookup:1789: inode #2: comm syz.1.429: deleted inode referenced: 12 [ 135.904223][ T5045] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 136.497244][ T4710] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 136.870873][ T6839] loop1: detected capacity change from 0 to 512 [ 136.876384][ T6839] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.448: corrupted in-inode xattr: invalid ea_ino [ 136.876424][ T6839] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 136.876545][ T6839] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.448: couldn't read orphan inode 15 (err -117) [ 136.876566][ T6839] loop1: lost filesystem error report for type 5 error -117 [ 136.877075][ T6839] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.988581][ T6849] netlink: 136 bytes leftover after parsing attributes in process `syz.4.452'. [ 136.988617][ T6849] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 137.260813][ T6852] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 138.174422][ T5045] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.328209][ T6879] Illegal XDP return value 4294967274 on prog (id 101) dev N/A, expect packet loss! [ 139.420202][ T6928] Soft offlining pfn 0x132a5b at process virtual address 0x20000000 [ 139.423250][ T6928] Soft offline: 0x132a5b: page migration failed 1, type 0x5ffc0000002101c(referenced|uptodate|dirty|arch_1|swapbacked|node=0|zone=2|lastcpupid=0x7ff) [ 140.193916][ T6956] loop1: detected capacity change from 0 to 512 [ 140.196590][ T6956] EXT4-fs: inline encryption not supported [ 140.199657][ T6956] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 140.205653][ T6956] EXT4-fs (loop1): 1 truncate cleaned up [ 140.207153][ T6956] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.319309][ T6961] loop3: detected capacity change from 0 to 1024 [ 140.625912][ T6961] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.693125][ T6971] netlink: 16 bytes leftover after parsing attributes in process `syz.2.491'. [ 141.387748][ T4710] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.387925][ T5045] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.443775][ T6992] loop3: detected capacity change from 0 to 512 [ 141.448517][ T6992] EXT4-fs (loop3): Test dummy encryption mode enabled [ 141.450690][ T6992] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 141.665815][ T6999] overlayfs: failed to resolve './bus': -2 [ 143.305051][ T7045] netlink: 'syz.0.514': attribute type 5 has an invalid length. [ 144.082674][ T7072] overlayfs: failed to resolve './bus': -2 [ 144.971088][ T7105] Soft offlining pfn 0x138e8e at process virtual address 0x20000000 [ 144.980421][ T7105] Soft offline: 0x138e8e: page migration failed 1, type 0x5ffc0000002101c(referenced|uptodate|dirty|arch_1|swapbacked|node=0|zone=2|lastcpupid=0x7ff) [ 145.685330][ T7117] netlink: 240 bytes leftover after parsing attributes in process `syz.2.534'. [ 147.506540][ T7162] netlink: 'syz.4.552': attribute type 4 has an invalid length. [ 147.507968][ T7162] netlink: 17 bytes leftover after parsing attributes in process `syz.4.552'. [ 148.284513][ T7200] xt_CT: You must specify a L4 protocol and not use inversions on it [ 151.687123][ T7299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.600'. [ 153.608507][ T7346] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 154.475024][ T7351] loop1: detected capacity change from 0 to 1024 [ 154.610167][ T7351] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.330443][ T7368] netlink: 240 bytes leftover after parsing attributes in process `syz.4.623'. [ 155.712938][ T5045] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.809538][ T7379] netlink: 240 bytes leftover after parsing attributes in process `syz.4.624'. [ 155.993340][ T4384] lo speed is unknown, defaulting to 1000 [ 158.141810][ T7440] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 159.037239][ T7442] loop1: detected capacity change from 0 to 1024 [ 159.127744][ T7442] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.865259][ T5045] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.971640][ T7462] netlink: 80 bytes leftover after parsing attributes in process `syz.2.651'. [ 160.284260][ T7475] netlink: 'syz.1.657': attribute type 11 has an invalid length. [ 160.377938][ T7486] loop1: detected capacity change from 0 to 1024 [ 160.408376][ T7486] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.806578][ T7509] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 161.310457][ T5045] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.845576][ T7538] xt_CT: No such helper "pptp" [ 161.942053][ T7541] netlink: 240 bytes leftover after parsing attributes in process `syz.0.681'. [ 162.231565][ T7550] loop1: detected capacity change from 0 to 1024 [ 162.240680][ T7550] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.141618][ T5045] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.845389][ T7612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.699'. [ 166.845423][ T7612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.699'. [ 166.853551][ T7613] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 166.857282][ T7613] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 167.397138][ T7622] netlink: 4 bytes leftover after parsing attributes in process `syz.4.697'. [ 167.397172][ T7622] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.397202][ T7622] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.479569][ T7622] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.479636][ T7622] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.815618][ T7629] overlayfs: failed to clone upperpath [ 168.575387][ T7643] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 170.511280][ T7661] netlink: 28 bytes leftover after parsing attributes in process `syz.3.714'. [ 170.511321][ T7661] netlink: 28 bytes leftover after parsing attributes in process `syz.3.714'. [ 172.857164][ T7715] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 174.132285][ T7726] overlayfs: failed to clone upperpath [ 176.667719][ T7763] netlink: 240 bytes leftover after parsing attributes in process `syz.3.741'. [ 176.761828][ T7765] overlayfs: failed to clone upperpath [ 177.040066][ T7775] netlink: 240 bytes leftover after parsing attributes in process `syz.4.748'. [ 179.224298][ T7812] overlayfs: failed to clone upperpath [ 179.445852][ T7817] netlink: 240 bytes leftover after parsing attributes in process `syz.3.760'. [ 179.756774][ T7822] netlink: 240 bytes leftover after parsing attributes in process `syz.2.762'. [ 182.497631][ T7868] overlayfs: failed to clone upperpath [ 182.588671][ T7877] overlayfs: failed to clone upperpath [ 185.806433][ T7920] overlayfs: failed to clone upperpath [ 185.925119][ T7930] netlink: 240 bytes leftover after parsing attributes in process `syz.3.794'. [ 187.940564][ T1595] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.940610][ T1595] ieee802154 phy1 wpan1: encryption failed: -22 [ 189.691168][ T7976] netlink: 240 bytes leftover after parsing attributes in process `syz.4.809'. [ 189.699834][ T7977] overlayfs: failed to clone upperpath [ 191.701821][ T8015] netlink: 240 bytes leftover after parsing attributes in process `syz.3.821'. [ 191.813694][ T8024] netlink: 60 bytes leftover after parsing attributes in process `syz.2.826'. [ 191.816519][ T8024] netlink: 60 bytes leftover after parsing attributes in process `syz.2.826'. [ 191.858837][ T8021] overlayfs: failed to clone upperpath [ 191.875872][ T8027] gretap0: entered promiscuous mode [ 193.906300][ T8041] netlink: 'syz.2.832': attribute type 8 has an invalid length. [ 194.835451][ T8061] netlink: 16 bytes leftover after parsing attributes in process `syz.0.836'. [ 195.352272][ T8075] netlink: 240 bytes leftover after parsing attributes in process `syz.0.841'. [ 195.412699][ T8076] overlayfs: failed to clone upperpath [ 195.565913][ T8083] netlink: 240 bytes leftover after parsing attributes in process `syz.3.843'. [ 199.299869][ T8113] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.300646][ T8113] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.541342][ T8144] netlink: 240 bytes leftover after parsing attributes in process `syz.2.861'. [ 200.758574][ T8155] overlayfs: failed to clone upperpath [ 201.861959][ T8178] syz_tun: entered allmulticast mode [ 201.865633][ T8178] syz_tun: left allmulticast mode [ 203.107812][ T8200] netlink: 240 bytes leftover after parsing attributes in process `syz.1.881'. [ 203.458375][ T8203] overlayfs: failed to clone upperpath [ 205.106336][ T8243] xt_CT: You must specify a L4 protocol and not use inversions on it [ 205.756680][ T8253] netlink: 240 bytes leftover after parsing attributes in process `syz.3.898'. [ 205.833659][ T8257] netlink: 64 bytes leftover after parsing attributes in process `syz.2.902'. [ 206.568406][ T8263] netlink: 240 bytes leftover after parsing attributes in process `syz.2.905'. [ 206.764842][ T8268] overlayfs: failed to clone upperpath [ 207.268284][ T8278] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 209.150265][ T8303] netlink: 240 bytes leftover after parsing attributes in process `syz.3.917'. [ 209.202758][ T8302] overlayfs: failed to clone upperpath [ 209.975280][ T8318] netlink: 240 bytes leftover after parsing attributes in process `syz.0.922'. [ 210.734381][ T8327] ip_tables: iptables: counters copy to user failed while replacing table [ 210.942161][ T8333] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 213.273105][ T8352] netlink: 240 bytes leftover after parsing attributes in process `syz.2.935'. [ 214.965746][ T8385] netlink: 240 bytes leftover after parsing attributes in process `syz.3.944'. [ 215.470970][ T8399] netlink: 240 bytes leftover after parsing attributes in process `syz.3.949'. [ 215.496967][ T8400] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 216.775933][ T8407] netlink: 240 bytes leftover after parsing attributes in process `syz.2.950'. [ 220.439460][ T8450] Injecting memory failure for pfn 0x138d9a at process virtual address 0x20000000 [ 220.806156][ T8454] overlayfs: failed to clone upperpath [ 220.807551][ T8450] Memory failure: 0x138d9a: Sending SIGBUS to syz.2.965:8450 due to hardware memory corruption [ 220.810234][ T8450] Memory failure: 0x138d9a: recovery action for dirty LRU page: Recovered [ 220.812288][ T8450] Injecting memory failure for pfn 0x219270 at process virtual address 0x20001000 [ 220.819281][ T8450] Memory failure: 0x219270: unhandlable page. [ 220.820909][ T8450] Memory failure: 0x219270: recovery action for get hwpoison page: Ignored [ 221.996326][ T8466] netlink: zone id is out of range [ 221.997490][ T8466] netlink: zone id is out of range [ 222.000876][ T8466] netlink: zone id is out of range [ 222.002680][ T8466] netlink: zone id is out of range [ 222.002713][ T8466] netlink: zone id is out of range [ 222.002725][ T8466] netlink: zone id is out of range [ 222.002856][ T8466] netlink: zone id is out of range [ 222.003692][ T8466] netlink: zone id is out of range [ 222.003725][ T8466] netlink: zone id is out of range [ 222.012677][ T8466] netlink: zone id is out of range [ 223.651740][ T8464] netlink: 240 bytes leftover after parsing attributes in process `syz.4.967'. [ 227.820981][ C1] sched: DL replenish lagged too much [ 229.263762][ T8496] net_ratelimit: 1 callbacks suppressed [ 229.264102][ T8496] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 229.798463][ T8513] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 229.939398][ T8517] ip_tables: iptables: counters copy to user failed while replacing table [ 232.407586][ T8543] overlayfs: failed to clone upperpath [ 233.141896][ T8548] overlayfs: failed to clone upperpath [ 233.889696][ T8560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.997'. [ 233.892760][ T8560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.997'. [ 234.438742][ T8577] tipc: Started in network mode [ 234.440306][ T8577] tipc: Node identity 7fff, cluster identity 4711 [ 234.444068][ T8577] tipc: Node number set to 32767 [ 234.634039][ T8578] overlayfs: failed to clone upperpath [ 235.016624][ T8589] overlayfs: failed to clone upperpath [ 235.285967][ T8601] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 235.287946][ T8601] overlayfs: missing 'lowerdir' [ 235.724812][ T8610] overlayfs: failed to clone upperpath [ 238.855447][ T8651] overlayfs: failed to clone upperpath [ 245.571263][ T8696] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1044'. [ 248.098090][ T8710] bond0: option arp_interval: invalid value (18446744073709551615) [ 248.098127][ T8710] bond0: option arp_interval: allowed values 0 - 2147483647 [ 250.045648][ T1595] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.055886][ T1595] ieee802154 phy1 wpan1: encryption failed: -22 [ 252.314574][ T8735] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1056'. [ 256.990398][ T4711] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 256.994212][ T4711] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 256.996130][ T4711] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 256.999529][ T4711] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 257.003149][ T4711] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 257.057897][ T4714] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 257.065863][ T4714] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 257.077410][ T4714] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 257.082628][ T4714] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 257.084231][ T4714] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 257.793651][ T4838] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.886420][ T8755] lo speed is unknown, defaulting to 1000 [ 257.983892][ T4838] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.108318][ T4838] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.371851][ T8755] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.373473][ T8755] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.375984][ T8755] bridge_slave_0: entered allmulticast mode [ 258.377974][ T8755] bridge_slave_0: entered promiscuous mode [ 258.381169][ T4838] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.440009][ T8827] overlayfs: failed to clone upperpath [ 258.631098][ T8755] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.633599][ T8755] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.635386][ T8755] bridge_slave_1: entered allmulticast mode [ 258.639718][ T8755] bridge_slave_1: entered promiscuous mode [ 258.683516][ T8755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.688873][ T8755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.710640][ T4905] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20002 - 0 [ 258.710721][ T4905] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20002 - 0 [ 258.710742][ T4905] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20002 - 0 [ 258.722181][ T8755] team0: Port device team_slave_0 added [ 258.724624][ T8755] team0: Port device team_slave_1 added [ 258.753304][ T8755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.753338][ T8755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 258.753350][ T8755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.895326][ T30] audit: type=1400 audit(34078977.557:73): lsm=SMACK fn=smack_inode_permission action=denied subject="_" object="lowerdir" requested=w pid=8844 comm="syz.1.1091" name="file1" dev="tmpfs" ino=1036 [ 258.943439][ T4838] netdevsim netdevsim120 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.993917][ T8755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.993948][ T8755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 258.993966][ T8755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.008037][ T4905] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20002 - 0 [ 259.044039][ T8755] hsr_slave_0: entered promiscuous mode [ 259.046059][ T8755] hsr_slave_1: entered promiscuous mode [ 259.046664][ T8755] debugfs: 'hsr0' already exists in 'hsr' [ 259.046675][ T8755] Cannot create hsr debugfs directory [ 259.081813][ T4711] Bluetooth: hci5: command tx timeout [ 260.012332][ T5652] netdevsim netdevsim120 eth4: set [1, 0] type 2 family 0 port 20002 - 0 [ 260.023245][ T4838] bridge_slave_1: left allmulticast mode [ 260.023268][ T4838] bridge_slave_1: left promiscuous mode [ 260.023363][ T4838] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.024723][ T4838] bridge_slave_0: left allmulticast mode [ 260.024740][ T4838] bridge_slave_0: left promiscuous mode [ 260.028128][ T4838] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.500816][ T4838] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 260.517956][ T4838] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 260.531799][ T4838] bond0 (unregistering): Released all slaves [ 260.577654][ T4838] tipc: Left network mode [ 260.579363][ T4400] 8021q: adding VLAN 0 to HW filter on device eth0 [ 260.663506][ T8755] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 260.672469][ T8755] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 260.676237][ T8755] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 260.683345][ T8755] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 260.686278][ T8755] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 260.690757][ T8755] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 260.693300][ T8755] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 260.700044][ T8755] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 260.702253][ T8878] lo speed is unknown, defaulting to 1000 [ 260.892770][ T8920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1106'. [ 260.906980][ T4400] 8021q: adding VLAN 0 to HW filter on device eth1 [ 261.821009][ T4711] Bluetooth: hci5: command tx timeout [ 262.030653][ T8755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.063636][ T8755] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.081682][ T4928] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.081726][ T4928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.085356][ T4928] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.085402][ T4928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.193991][ T4838] hsr_slave_0: left promiscuous mode [ 262.295962][ T4838] hsr_slave_1: left promiscuous mode [ 262.300450][ T4838] veth1_macvtap: left promiscuous mode [ 262.303890][ T4838] veth0_macvtap: left promiscuous mode [ 262.305308][ T4838] veth1_vlan: left promiscuous mode [ 262.305372][ T4838] veth0_vlan: left promiscuous mode [ 262.307977][ T8953] Injecting memory failure for pfn 0x13947d at process virtual address 0x20001000 [ 262.317554][ T8953] Memory failure: 0x13947d: recovery action for clean LRU page: Recovered [ 262.319488][ T8953] Injecting memory failure for pfn 0x13947c at process virtual address 0x20002000 [ 262.324389][ T8953] Memory failure: 0x13947c: recovery action for clean LRU page: Recovered [ 262.324427][ T8953] Injecting memory failure for pfn 0x13947b at process virtual address 0x20003000 [ 262.589511][ T8953] Memory failure: 0x13947b: recovery action for clean LRU page: Recovered [ 262.721167][ T4838] team0 (unregistering): Port device team_slave_1 removed [ 262.727027][ T4838] team0 (unregistering): Port device team_slave_0 removed [ 262.789666][ T8938] lo speed is unknown, defaulting to 1000 [ 262.790589][ T4400] 8021q: adding VLAN 0 to HW filter on device eth2 [ 262.798086][ T8967] gtp1: entered allmulticast mode [ 262.832991][ T8755] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 263.098675][ T8993] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1122'. [ 263.959434][ T4711] Bluetooth: hci5: command tx timeout [ 264.038617][ T4838] IPVS: stop unused estimator thread 0... [ 265.032915][ T8755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.159798][ T4400] 8021q: adding VLAN 0 to HW filter on device eth3 [ 265.401322][ T8755] veth0_vlan: entered promiscuous mode [ 265.403148][ T8755] veth1_vlan: entered promiscuous mode [ 265.438979][ T8755] veth0_macvtap: entered promiscuous mode [ 265.445699][ T8755] veth1_macvtap: entered promiscuous mode [ 265.450398][ T8755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.453243][ T8755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.511426][ T1343] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.511470][ T1343] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.511504][ T1343] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.511524][ T1343] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.317803][ T4711] Bluetooth: hci5: command tx timeout [ 266.515731][ T5652] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.517287][ T5652] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.601178][ T4928] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.603188][ T4928] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.760990][ T4400] 8021q: adding VLAN 0 to HW filter on device eth4 [ 267.880021][ T9117] overlayfs: failed to clone upperpath [ 274.669833][ T9219] binder: 9217:9219 ERROR: BC_REGISTER_LOOPER called without request [ 274.669880][ T9219] binder: 9217:9219 got transaction to invalid handle, 1 [ 274.669934][ T9219] binder: 9217:9219 cannot find target node [ 274.669954][ T9219] binder: 9217:9219 transaction async to 0:0 failed 1/29201/-22, code 0 size 0-0 line 3252 [ 274.716385][ T9221] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.308123][ T9244] xt_hashlimit: size too large, truncated to 1048576 [ 279.991143][ T9289] overlayfs: failed to clone upperpath [ 280.528182][ T9309] overlayfs: failed to clone upperpath [ 282.506069][ T9306] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 282.825604][ T9412] netlink: 'syz.5.1233': attribute type 1 has an invalid length. [ 283.075047][ T9413] overlayfs: failed to clone upperpath [ 283.757932][ T9439] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1242'. [ 286.881527][ T9443] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1241'. [ 288.342938][ T9490] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1261'. [ 289.791816][ T9502] netlink: 'syz.5.1267': attribute type 1 has an invalid length. [ 292.294368][ T4872] atkbd serio0: keyboard reset failed on [ 292.869247][ T9531] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1277'. [ 294.391056][ T9559] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 295.352975][ T9591] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1300'. [ 295.569764][ T9593] lo speed is unknown, defaulting to 1000 [ 295.948671][ T9606] netlink: 'syz.1.1306': attribute type 34 has an invalid length. [ 296.364036][ T9618] loop5: detected capacity change from 0 to 128 [ 296.420090][ T9618] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 296.571679][ T8755] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 296.651341][ T9628] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.833059][ T9636] netlink: 'syz.5.1319': attribute type 39 has an invalid length. [ 297.476849][ T9670] loop5: detected capacity change from 0 to 256 [ 298.604686][ T9700] ip_tables: iptables: counters copy to user failed while replacing table [ 298.613648][ T9700] tipc: Started in network mode [ 298.616020][ T9700] tipc: Node identity ac141441, cluster identity 4711 [ 298.621800][ T9700] tipc: Enabled bearer , priority 10 [ 298.623168][ T9702] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1345'. [ 298.623850][ T9702] netlink: 34959 bytes leftover after parsing attributes in process `syz.2.1345'. [ 299.706662][ T4872] tipc: Node number set to 2886997057 [ 300.166697][ T9740] loop5: detected capacity change from 0 to 128 [ 300.186534][ T9740] FAT-fs (loop5): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 300.188447][ T9740] FAT-fs (loop5): Filesystem has been set read-only [ 302.314984][ T9742] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1359'. [ 309.881004][ T9818] Injecting memory failure for pfn 0x133c08 at process virtual address 0x20000000 [ 310.110103][ T9818] Memory failure: 0x133c08: Sending SIGBUS to syz.0.1388:9818 due to hardware memory corruption [ 310.110164][ T9818] Memory failure: 0x133c08: recovery action for dirty LRU page: Recovered [ 310.110202][ T9818] Injecting memory failure for pfn 0x219270 at process virtual address 0x20001000 [ 310.110330][ T9818] Memory failure: 0x219270: Sending SIGBUS to syz.0.1388:9818 due to hardware memory corruption [ 310.110356][ T9818] Memory failure: 0x219270: recovery action for already poisoned page: Failed [ 310.195357][ T9838] loop5: detected capacity change from 0 to 512 [ 310.232738][ T9838] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 310.249429][ T9838] EXT4-fs warning (device loop5): ext4_group_add:1735: No reserved GDT blocks, can't resize [ 310.286259][ T8755] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.782246][ T1595] ieee802154 phy0 wpan0: encryption failed: -22 [ 313.782293][ T1595] ieee802154 phy1 wpan1: encryption failed: -22 [ 313.807272][ T9887] TCP: tcp_parse_options: Illegal window scaling value 251 > 14 received [ 315.095275][ T9932] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1426'. [ 318.374133][ T9957] fuse: Bad value for 'fd' [ 320.775854][ T9966] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1435'. [ 322.170691][T10006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1446'. [ 322.979854][T10017] overlayfs: missing 'lowerdir' [ 323.778895][T10025] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1451'. [ 323.945712][T10038] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1456'. [ 325.350296][T10065] overlayfs: missing 'lowerdir' [ 325.921692][T10083] vcan0: tx drop: invalid sa for name 0xfffffffffffffffe [ 326.911009][T10114] overlayfs: missing 'workdir' [ 327.031978][T10121] fuse: fd is not a fuse device [ 327.439662][T10133] overlayfs: missing 'lowerdir' [ 327.786175][T10142] loop5: detected capacity change from 0 to 512 [ 327.792692][T10142] EXT4-fs error (device loop5): ext4_iget_extra_inode:5180: inode #15: comm syz.5.1488: corrupted in-inode xattr: invalid ea_ino [ 328.784307][T10142] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 329.791681][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 329.791723][ C1] EXT4-fs (loop5): initial error at time 40894790: ext4_iget_extra_inode:5180: inode 15 [ 329.791758][ C1] EXT4-fs (loop5): last error at time 40894790: ext4_iget_extra_inode:5180: inode 15 [ 329.797900][T10142] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.1488: couldn't read orphan inode 15 (err -117) [ 329.797938][T10142] loop5: lost filesystem error report for type 5 error -117 [ 329.799228][T10142] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.589142][ T8755] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.007775][T10186] loop5: detected capacity change from 0 to 1024 [ 334.102724][T10186] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 334.308609][T10192] overlayfs: missing 'lowerdir' [ 334.698372][T10174] overlayfs: missing 'workdir' [ 335.646720][T10230] capability: warning: `syz.1.1512' uses 32-bit capabilities (legacy support in use) [ 335.651917][T10230] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1512'. [ 336.645304][T10191] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 337.035985][T10234] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 337.347460][ T8755] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.223895][T10285] loop5: detected capacity change from 0 to 1024 [ 339.250205][T10285] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 339.611075][T10308] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 340.795511][T10321] sit1: entered allmulticast mode [ 343.430164][T10291] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 343.471624][T10325] ip6gre1: entered promiscuous mode [ 343.482696][T10325] ip6gre1: entered allmulticast mode [ 344.340885][T10342] overlayfs: missing 'workdir' [ 344.370066][ T8755] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.130086][T10356] overlayfs: failed to resolve './file0': -2 [ 347.168294][T10359] loop5: detected capacity change from 0 to 512 [ 347.182549][T10359] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 347.209161][T10359] EXT4-fs (loop5): 1 truncate cleaned up [ 347.210673][T10359] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 347.249108][T10359] EXT4-fs (loop5): shut down requested (0) [ 347.307843][T10365] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1555'. [ 347.668207][T10376] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 347.811337][ T8755] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.379227][T10391] overlayfs: missing 'workdir' [ 353.688564][ T4817] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 354.764880][ T4817] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 354.767752][ T4817] usb 1-1: Dual-Role OTG device on HNP port [ 354.775388][ T4817] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.739086][ T4817] gspca_main: spca501-2.14.0 probing 0000:0000 [ 355.760488][ T4817] gspca_spca501: reg write: error -32 [ 355.760527][ T4817] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 355.760563][ T4817] spca501 1-1:1.0: probe with driver spca501 failed with error -22 [ 356.425799][T10434] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 356.425852][T10434] TCP: tcp_parse_options: Illegal window scaling value 251 > 14 received [ 356.434053][T10431] bridge1: entered promiscuous mode [ 356.443898][T10431] bridge1: entered allmulticast mode [ 356.962141][T10447] overlayfs: missing 'lowerdir' [ 357.336358][T10467] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 359.410530][T10473] loop5: detected capacity change from 0 to 1024 [ 359.425109][T10473] EXT4-fs (loop5): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 359.468029][T10473] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 359.482389][T10473] EXT4-fs error (device loop5): ext4_read_inline_dir:1494: inode #12: block 7: comm syz.5.1588: path /: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 359.486864][T10473] EXT4-fs error (device loop5): ext4_read_inline_dir:1494: inode #12: block 7: comm syz.5.1588: path /: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 359.535482][ T8755] EXT4-fs error (device loop5): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /77/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 359.546148][ T8755] EXT4-fs error (device loop5): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /77/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 359.550675][ T8755] EXT4-fs error (device loop5): empty_inline_dir:1778: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 359.556604][ T8755] EXT4-fs warning (device loop5): empty_inline_dir:1785: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 359.559554][ T8755] EXT4-fs error (device loop5): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /77/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 359.564187][ T8755] EXT4-fs error (device loop5): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /77/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 359.568798][ T8755] EXT4-fs error (device loop5): empty_inline_dir:1778: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 359.572826][ T8755] EXT4-fs warning (device loop5): empty_inline_dir:1785: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 359.577048][ T8755] EXT4-fs error (device loop5): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /77/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 359.581531][ T8755] EXT4-fs error (device loop5): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /77/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 359.587842][ T8755] EXT4-fs warning (device loop5): empty_inline_dir:1785: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 359.592513][ T8755] EXT4-fs warning (device loop5): empty_inline_dir:1785: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 359.596397][ T8755] EXT4-fs warning (device loop5): empty_inline_dir:1785: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 359.599500][ T8755] EXT4-fs warning (device loop5): empty_inline_dir:1785: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 359.602829][ T8755] EXT4-fs warning (device loop5): empty_inline_dir:1785: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 359.607782][ T8755] EXT4-fs warning (device loop5): empty_inline_dir:1785: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 359.610892][ T8755] EXT4-fs warning (device loop5): empty_inline_dir:1785: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 359.615117][ T8755] EXT4-fs warning (device loop5): empty_inline_dir:1785: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 359.779972][ T8755] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.205879][T10494] overlayfs: failed to clone upperpath [ 360.558137][T10505] fuse: Bad value for 'fd' [ 367.454357][T10521] fuse: Bad value for 'fd' [ 367.547404][T10525] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.274203][T10552] syz_tun: entered allmulticast mode [ 371.281898][T10551] syz_tun: left allmulticast mode [ 376.701109][T10588] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 376.806013][ T1595] ieee802154 phy0 wpan0: encryption failed: -22 [ 376.806045][ T1595] ieee802154 phy1 wpan1: encryption failed: -22 [ 376.820354][T10588] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 376.822438][T10588] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 376.825132][T10588] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 376.833237][T10588] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 377.004644][ T4714] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 377.008599][ T4714] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 377.010710][ T4714] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 377.013094][ T4714] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 377.014785][ T4714] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 377.088016][ T4928] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.193190][ T4928] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.453077][T10632] netlink: 'syz.4.1633': attribute type 12 has an invalid length. [ 379.691710][T10588] Bluetooth: hci1: command tx timeout [ 379.692385][T10588] Bluetooth: hci5: command tx timeout [ 379.935046][ T4928] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.947883][T10638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1635'. [ 380.732606][T10595] lo speed is unknown, defaulting to 1000 [ 380.769389][T10648] overlayfs: failed to clone upperpath [ 381.776159][ T4714] Bluetooth: hci5: command tx timeout [ 381.778122][T10588] Bluetooth: hci1: command tx timeout [ 381.953189][ T4928] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.745881][T10582] lo speed is unknown, defaulting to 1000 [ 382.749047][T10644] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 384.374787][ T4714] Bluetooth: hci5: command tx timeout [ 384.382625][ T4714] Bluetooth: hci1: command tx timeout [ 384.409269][T10595] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.409315][T10595] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.409491][T10595] bridge_slave_0: entered allmulticast mode [ 384.410000][T10595] bridge_slave_0: entered promiscuous mode [ 384.410825][T10595] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.410859][T10595] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.410927][T10595] bridge_slave_1: entered allmulticast mode [ 384.411371][T10595] bridge_slave_1: entered promiscuous mode [ 386.470338][T10675] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1643'. [ 386.548997][T10588] Bluetooth: hci1: command tx timeout [ 386.549037][T10588] Bluetooth: hci5: command tx timeout [ 386.747937][ T114] netdevsim netdevsim5 eth8: set [1, 0] type 2 family 0 port 20002 - 0 [ 386.753177][T10595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 386.775190][T10595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 386.884311][T10582] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.887071][T10582] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.888827][T10582] bridge_slave_0: entered allmulticast mode [ 386.891001][T10582] bridge_slave_0: entered promiscuous mode [ 386.896156][T10595] team0: Port device team_slave_0 added [ 386.902857][T10595] team0: Port device team_slave_1 added [ 386.913472][T10582] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.915200][T10582] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.916974][T10582] bridge_slave_1: entered allmulticast mode [ 386.920576][T10582] bridge_slave_1: entered promiscuous mode [ 386.947379][T10595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 386.949032][T10595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 386.955220][T10595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 386.955871][T10595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 386.955879][T10595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 386.955895][T10595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 386.976019][T10582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 386.983441][T10582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.026904][T10689] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1646'. [ 387.048428][ T4928] bridge_slave_1: left allmulticast mode [ 387.048464][ T4928] bridge_slave_1: left promiscuous mode [ 387.048561][ T4928] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.053201][ T4928] bridge_slave_0: left allmulticast mode [ 387.053223][ T4928] bridge_slave_0: left promiscuous mode [ 387.053293][ T4928] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.162100][ T4928] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 388.260976][ T4928] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 388.303259][ T4928] bond0 (unregistering): Released all slaves [ 388.312730][T10595] hsr_slave_0: entered promiscuous mode [ 388.314395][T10595] hsr_slave_1: entered promiscuous mode [ 388.320550][T10595] debugfs: 'hsr0' already exists in 'hsr' [ 388.321562][T10595] Cannot create hsr debugfs directory [ 388.338031][T10582] team0: Port device team_slave_0 added [ 388.429952][ T4400] 8021q: adding VLAN 0 to HW filter on device eth5 [ 388.442359][T10582] team0: Port device team_slave_1 added [ 392.068333][T10724] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1652'. [ 392.086748][T10728] fuse: Bad value for 'fd' [ 392.094866][T10582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.094892][T10582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.094918][T10582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.121085][ T114] netdevsim netdevsim5 eth5: set [1, 0] type 2 family 0 port 20002 - 0 [ 392.126015][ T15] netdevsim netdevsim5 eth7: set [1, 0] type 2 family 0 port 20002 - 0 [ 392.128796][ T15] netdevsim netdevsim5 eth6: set [1, 0] type 2 family 0 port 20002 - 0 [ 392.131922][T10582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 392.137402][T10582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.137450][T10582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 392.283560][T10733] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1655'. [ 392.307852][T10735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1655'. [ 392.452714][T10582] hsr_slave_0: entered promiscuous mode [ 392.837859][T10751] overlayfs: failed to clone upperpath [ 393.522613][T10582] hsr_slave_1: entered promiscuous mode [ 393.522893][T10582] debugfs: 'hsr0' already exists in 'hsr' [ 393.522923][T10582] Cannot create hsr debugfs directory [ 394.739167][T10753] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 397.742902][ T4400] 8021q: adding VLAN 0 to HW filter on device eth6 [ 399.048928][T10789] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1665'. [ 400.097827][ T4928] hsr_slave_0: left promiscuous mode [ 400.108955][ T4928] hsr_slave_1: left promiscuous mode [ 400.109298][ T4928] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 400.109318][ T4928] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 400.113741][ T4928] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 400.115768][ T4928] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 400.129521][ T4928] veth1_macvtap: left promiscuous mode [ 400.131289][ T4928] veth0_macvtap: left promiscuous mode [ 400.132602][ T4928] veth1_vlan: left promiscuous mode [ 400.133969][ T4928] veth0_vlan: left promiscuous mode [ 401.149421][ T4928] team0 (unregistering): Port device team_slave_1 removed [ 401.158772][ T4928] team0 (unregistering): Port device team_slave_0 removed [ 401.478525][T10595] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 401.497454][T10595] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 401.499499][T10582] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 401.517722][T10582] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 401.518070][T10582] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 401.521840][T10582] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 401.526970][T10582] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 404.533348][T10582] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 404.599533][T10595] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 404.787401][T10595] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 404.787787][T10595] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 404.795394][T10595] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 404.798917][ T4400] 8021q: adding VLAN 0 to HW filter on device eth7 [ 404.801457][T10582] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 404.812407][T10582] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 404.816804][T10595] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 404.822381][T10595] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 404.920549][T10582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.936191][T10582] 8021q: adding VLAN 0 to HW filter on device team0 [ 404.967817][ T114] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.967863][ T114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 404.968432][ T114] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.968459][ T114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.059795][T10595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.102115][ T4928] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.112176][T10595] 8021q: adding VLAN 0 to HW filter on device team0 [ 405.129107][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.129163][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 405.175133][T10887] overlayfs: failed to clone upperpath [ 405.375679][ T4928] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.386893][ T5652] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.386946][ T5652] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.472968][ T4928] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.481169][ T4400] 8021q: adding VLAN 0 to HW filter on device eth8 [ 405.597748][ T4928] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.611931][T10582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 405.727540][T10595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 405.737725][ T114] netdevsim netdevsim2 eth11: set [1, 0] type 2 family 0 port 20002 - 0 [ 405.738429][ T12] netdevsim netdevsim2 eth10: set [1, 0] type 2 family 0 port 20002 - 0 [ 405.738458][ T12] netdevsim netdevsim2 eth9: set [1, 0] type 2 family 0 port 20002 - 0 [ 405.768491][ T4928] bridge_slave_1: left promiscuous mode [ 405.770078][ T4928] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.773512][ T4928] bridge_slave_0: left allmulticast mode [ 405.775816][ T4928] bridge_slave_0: left promiscuous mode [ 405.775917][ T4928] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.979143][ T4928] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 405.996940][ T4928] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 406.145399][ T4928] bond0 (unregistering): (slave team0): Releasing backup interface [ 406.194938][T10941] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1686'. [ 406.337986][ T4928] bond0 (unregistering): Released all slaves [ 406.671904][ T12] netdevsim netdevsim2 eth12: set [1, 0] type 2 family 0 port 20002 - 0 [ 406.957310][T10595] veth0_vlan: entered promiscuous mode [ 406.966944][T10595] veth1_vlan: entered promiscuous mode [ 407.128930][T10595] veth0_macvtap: entered promiscuous mode [ 407.921811][T10582] veth0_vlan: entered promiscuous mode [ 407.924189][T10582] veth1_vlan: entered promiscuous mode [ 407.930079][T10582] veth0_macvtap: entered promiscuous mode [ 407.931422][T10582] veth1_macvtap: entered promiscuous mode [ 408.091994][ T4400] 8021q: adding VLAN 0 to HW filter on device eth9 [ 408.183429][T10595] veth1_macvtap: entered promiscuous mode [ 408.191790][T10582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.194429][T10582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 408.237029][T10982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1693'. [ 408.255752][ T4999] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.255800][ T4999] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.255836][ T4999] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.255859][ T4999] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.258132][T10595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.259175][T10595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 408.301914][ T5652] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.302292][ T5652] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.302327][ T5652] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.302692][ T5652] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.447795][ T4999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.447826][ T4999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.477315][ T4928] hsr_slave_0: left promiscuous mode [ 408.478445][ T4928] hsr_slave_1: left promiscuous mode [ 408.478738][ T4928] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 408.480546][ T4928] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 408.480559][ T4928] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 408.612107][T11002] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1696'. [ 408.687841][ T4928] veth1_macvtap: left promiscuous mode [ 408.688456][ T4928] veth0_macvtap: left promiscuous mode [ 408.694176][ T4928] veth1_vlan: left promiscuous mode [ 408.694369][ T4928] veth0_vlan: left promiscuous mode [ 409.822732][ T4928] team0 (unregistering): Port device team_slave_1 removed [ 409.833311][ T4928] team0 (unregistering): Port device team_slave_0 removed [ 409.989693][ T4893] lo speed is unknown, defaulting to 1000 [ 409.989726][ T4893] infiniband syz0: ib_query_port failed (-19) [ 409.992941][ T4400] 8021q: adding VLAN 0 to HW filter on device eth12 [ 410.037374][ T1343] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.039205][ T1343] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.056409][ T4838] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.056436][ T4838] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.072253][ T1343] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.072281][ T1343] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.174454][T11037] tipc: Started in network mode [ 410.174497][T11037] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 410.174612][T11037] tipc: Enabled bearer , priority 0 [ 410.179759][T11036] loop6: detected capacity change from 0 to 1024 [ 410.983205][T11036] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 411.216010][ T8572] tipc: Node number set to 43690 [ 411.567867][T11065] overlayfs: failed to clone upperpath [ 411.627171][T11060] Injecting memory failure for pfn 0x14c9ea at process virtual address 0x20000000 [ 411.645300][T10582] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.682357][T11060] Memory failure: 0x14c9ea: Sending SIGBUS to syz.7.1706:11060 due to hardware memory corruption [ 411.682420][T11060] Memory failure: 0x14c9ea: recovery action for dirty LRU page: Recovered [ 411.682457][T11060] Injecting memory failure for pfn 0x219270 at process virtual address 0x20001000 [ 411.682488][T11060] Memory failure: 0x219270: Sending SIGBUS to syz.7.1706:11060 due to hardware memory corruption [ 411.682505][T11060] Memory failure: 0x219270: recovery action for already poisoned page: Failed [ 411.910756][ T4400] 8021q: adding VLAN 0 to HW filter on device eth11 [ 413.347182][T11085] netlink: 240 bytes leftover after parsing attributes in process `syz.7.1712'. [ 413.600532][T11104] loop6: detected capacity change from 0 to 1024 [ 413.646735][T11104] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 413.740350][ T4400] 8021q: adding VLAN 0 to HW filter on device eth10 [ 413.756328][T11115] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.812691][T11126] loop7: detected capacity change from 0 to 1024 [ 413.850984][T11126] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 414.160725][T11142] overlayfs: failed to clone upperpath [ 414.506310][T10582] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.619889][T11162] overlayfs: failed to clone upperpath [ 414.760627][T10595] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.810295][T11181] syz_tun: entered allmulticast mode [ 414.813435][T11180] syz_tun: left allmulticast mode [ 414.826664][T11182] loop7: detected capacity change from 0 to 4096 [ 414.840736][T11182] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.920516][T11182] fscrypt (loop7, inode 19): Sub-block data units not yet supported with IV_INO_LBLK_32 [ 414.944408][T10595] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.072299][T11208] loop6: detected capacity change from 0 to 1024 [ 415.091602][T11208] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 415.995802][T10582] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.103735][T11238] overlayfs: failed to resolve './file0': -2 [ 416.192834][T11241] overlayfs: failed to clone upperpath [ 416.453192][T11244] 9pnet_fd: p9_fd_create_unix (11244): problem connecting socket: ./file0: -5 [ 416.519245][T11252] netlink: 168 bytes leftover after parsing attributes in process `syz.7.1759'. [ 416.520001][T11252] netlink: 168 bytes leftover after parsing attributes in process `syz.7.1759'. [ 416.772114][T11271] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1764'. [ 417.926653][T11285] input: syz0 as /devices/virtual/input/input8 [ 418.027751][T11285] loop7: detected capacity change from 0 to 512 [ 418.031477][T11285] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 418.035226][T11285] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c840e018, mo2=0002] [ 418.037830][T11285] EXT4-fs (loop7): orphan cleanup on readonly fs [ 418.044722][T11285] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1772: bg 0: block 361: padding at end of block bitmap is not set [ 418.044749][T11285] loop7: lost filesystem error report for type 5 error -117 [ 418.044873][T11285] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 418.044891][T11285] loop7: lost filesystem error report for type 5 error -117 [ 418.044970][T11285] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #11: comm syz.7.1772: attempt to clear invalid blocks 33619980 len 1 [ 418.044988][T11285] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 418.045198][T11285] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.1772: invalid indirect mapped block 1811939328 (level 0) [ 418.045216][T11285] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 418.045707][T11285] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.1772: invalid indirect mapped block 2185560079 (level 1) [ 418.045733][T11285] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 418.047013][T11285] EXT4-fs (loop7): 1 truncate cleaned up [ 418.047575][T11285] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 418.527053][T11322] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 418.606867][T10595] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 418.800693][T11367] loop7: detected capacity change from 0 to 128 [ 418.814733][T11367] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 418.849623][T11367] EXT4-fs error (device loop7): dx_make_map:1296: inode #2: block 33: comm syz.7.1799: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 418.853838][T11374] overlayfs: failed to clone lowerpath [ 418.858067][T11367] EXT4-fs error (device loop7) in do_split:2027: Corrupt filesystem [ 418.944975][T11347] loop6: detected capacity change from 0 to 32768 [ 419.023362][T10595] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 419.043367][T11347] loop6: p1 p3 < > [ 419.356014][T11395] overlayfs: failed to clone upperpath [ 419.658180][ T26] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 419.692642][ T26] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 419.976400][T10928] udevd[10928]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 419.979665][T10924] udevd[10924]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 420.209074][T11437] fuse: Bad value for 'fd' [ 420.262048][T11440] input: syz1 as /devices/virtual/input/input9 [ 420.500058][T11467] netlink: 240 bytes leftover after parsing attributes in process `syz.7.1819'. [ 421.423948][T11483] overlayfs: failed to clone upperpath [ 421.773614][T11494] loop6: detected capacity change from 0 to 1024 [ 421.787688][T11494] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 422.458742][T11547] vxcan0: tx address claim with different name [ 422.538637][T11550] overlayfs: failed to clone upperpath [ 422.709033][T10582] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.226430][T11574] fuse: Bad value for 'fd' [ 423.253216][T11576] fuse: Bad value for 'fd' [ 423.555197][T11603] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1857'. [ 424.283249][T11606] fuse: Bad value for 'fd' [ 424.283890][T11606] Injecting memory failure for pfn 0x13dd3c at process virtual address 0x20000000 [ 424.424914][T11614] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1860'. [ 424.788096][T11606] Memory failure: 0x13dd3c: Sending SIGBUS to syz.1.1859:11606 due to hardware memory corruption [ 424.788169][T11606] Memory failure: 0x13dd3c: recovery action for dirty LRU page: Recovered [ 424.788201][T11606] Injecting memory failure for pfn 0x13b0f5 at process virtual address 0x20001000 [ 424.790196][T11606] Memory failure: 0x13b0f5: Sending SIGBUS to syz.1.1859:11606 due to hardware memory corruption [ 424.790223][T11606] Memory failure: 0x13b0f5: recovery action for dirty LRU page: Recovered [ 424.790235][T11606] Injecting memory failure for pfn 0x1452c2 at process virtual address 0x20002000 [ 424.790298][T11606] Memory failure: 0x1452c2: Sending SIGBUS to syz.1.1859:11606 due to hardware memory corruption [ 424.790316][T11606] Memory failure: 0x1452c2: recovery action for dirty LRU page: Recovered [ 424.790336][T11606] Injecting memory failure for pfn 0x219270 at process virtual address 0x20003000 [ 424.790352][T11606] Memory failure: 0x219270: Sending SIGBUS to syz.1.1859:11606 due to hardware memory corruption [ 424.790361][T11606] Memory failure: 0x219270: recovery action for already poisoned page: Failed [ 424.851719][T11621] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 424.864800][T11621] bond1: (slave lo): Enslaving as an active interface with an up link [ 424.867541][T11621] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 424.972340][T11641] fuse: Bad value for 'fd' [ 425.483029][T11660] netlink: 240 bytes leftover after parsing attributes in process `syz.7.1877'. [ 426.255518][T11665] fuse: Bad value for 'fd' [ 426.314174][T11674] fuse: Bad value for 'fd' [ 426.830359][T11700] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1888'. [ 427.535882][T11707] loop7: detected capacity change from 0 to 256 [ 427.826714][T11723] overlayfs: failed to clone upperpath [ 428.080502][T11755] fuse: Bad value for 'fd' [ 428.839179][T11828] loop6: detected capacity change from 0 to 512 [ 428.841847][T11828] EXT4-fs: Ignoring removed mblk_io_submit option [ 428.866694][T11828] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 429.015063][T10582] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.521521][T11860] overlayfs: failed to clone upperpath [ 430.009907][T11877] overlayfs: failed to clone upperpath [ 430.245606][T11887] overlayfs: failed to clone upperpath [ 430.964795][T11913] loop7: detected capacity change from 0 to 1024 [ 430.978108][T11913] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 431.871843][T10595] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.197529][T11942] overlayfs: failed to clone upperpath [ 432.640051][T11949] overlayfs: failed to clone upperpath [ 432.931904][T11954] Bluetooth: hci0: unsupported parameter 255 [ 432.931937][T11954] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 433.047601][T11961] input: syz0 as /devices/virtual/input/input10 [ 433.439823][T11967] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 433.548081][T11971] loop7: detected capacity change from 0 to 4096 [ 433.575857][T11971] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 433.597874][T11971] EXT4-fs (loop7): shut down requested (2) [ 433.633623][T10595] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.686394][T11983] loop7: detected capacity change from 0 to 1024 [ 433.710972][T11983] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 433.751070][T11991] loop6: detected capacity change from 0 to 256 [ 434.314741][T12018] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1979'. [ 435.076451][T10595] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.117596][T12048] loop7: detected capacity change from 0 to 512 [ 436.118406][T12048] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 436.129351][T12048] EXT4-fs (loop7): 1 truncate cleaned up [ 436.129834][T12048] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 436.150971][T12048] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 436.154185][T12048] EXT4-fs (loop7): Remounting filesystem read-only [ 436.166945][T12048] evm: overlay not supported [ 436.210694][T10595] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.362855][T12061] loop7: detected capacity change from 0 to 1024 [ 436.403921][T12061] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 436.521791][T12074] fuse: fd is not a fuse device [ 436.522416][T12074] fuse: fd is not a fuse device [ 436.522706][T12074] fuse: fd is not a fuse device [ 436.832632][T12080] 9p: Bad value for 'rfdno' [ 437.022428][T12069] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 437.235375][T10595] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.637708][T12109] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2012'. [ 437.678624][T12113] binder: 12112:12113 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 437.681300][T12113] binder: 12113 RLIMIT_NICE not set [ 437.725801][T12119] loop6: detected capacity change from 0 to 1024 [ 437.727732][T12119] EXT4-fs: inline encryption not supported [ 437.729077][T12118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2016'. [ 437.731046][T12119] EXT4-fs: Ignoring removed bh option [ 437.739512][T12119] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 437.771599][T12119] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 437.814889][T10582] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.802570][T12149] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 439.095124][T12174] block nbd7: NBD_DISCONNECT [ 439.095694][T12164] block nbd7: Disconnected due to user request. [ 439.095712][T12164] block nbd7: shutting down sockets [ 439.193360][T12180] overlayfs: failed to clone upperpath [ 439.398508][T12185] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2042'. [ 439.415301][T12185] bond1: entered promiscuous mode [ 439.415571][T12185] 8021q: adding VLAN 0 to HW filter on device bond1 [ 439.541511][T12185] 8021q: adding VLAN 0 to HW filter on device bond1 [ 439.541754][T12185] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 439.542278][T12185] bond1: (slave ip6gre1): Error -95 calling set_mac_address [ 439.816431][ T1595] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.816477][ T1595] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.164439][T12216] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2053'. [ 442.829891][T12242] syz_tun: entered allmulticast mode [ 442.833856][T12243] ------------[ cut here ]------------ [ 442.833877][T12243] do not call blocking ops when !TASK_RUNNING; state=2 set at [<000000007d168c8e>] prepare_to_wait_event+0x2e4/0x3ac [ 442.833946][T12243] WARNING: kernel/sched/core.c:9124 at __might_sleep+0xc0/0xdc, CPU#0: syz.4.2062/12243 [ 442.838314][T12243] Modules linked in: [ 442.839003][T12243] CPU: 0 UID: 0 PID: 12243 Comm: syz.4.2062 Tainted: G L syzkaller #0 PREEMPT [ 442.840698][T12243] Tainted: [L]=SOFTLOCKUP [ 442.841419][T12243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 442.843107][T12243] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 442.844439][T12243] pc : __might_sleep+0xc0/0xdc [ 442.845301][T12243] lr : __might_sleep+0xc0/0xdc [ 442.846132][T12243] sp : ffff80009b847930 [ 442.846811][T12243] x29: ffff80009b847930 x28: ffff8000805a9ec8 x27: ffff80009b847a00 [ 442.848196][T12243] x26: 0000000000000000 x25: ffff80009b847a08 x24: 0000000000000000 [ 442.849567][T12243] x23: ffff700013708f3c x22: ffff0000d12d16d0 x21: 0000000000000002 [ 442.850992][T12243] x20: ffff8000869ca160 x19: 000000000000026f x18: 00000000ffffffff [ 442.852382][T12243] x17: ffff800080168534 x16: ffff80008034b12c x15: ffff8000805a7e34 [ 442.853882][T12243] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 442.855308][T12243] x11: 0000000000000000 x10: 0000000000080000 x9 : 139e589cae704000 [ 442.856768][T12243] x8 : 139e589cae704000 x7 : ffff80008048ea5c x6 : 0000000000000000 [ 442.858156][T12243] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000802f8870 [ 442.859580][T12243] x2 : 0000000100000000 x1 : ffff0000d12d0000 x0 : 0000000000000001 [ 442.860950][T12243] Call trace: [ 442.861540][T12243] __might_sleep+0xc0/0xdc (P) [ 442.862366][T12243] __mutex_lock+0xf8/0xf14 [ 442.863145][T12243] mutex_lock_nested+0x24/0x30 [ 442.863986][T12243] futex_pivot_pending+0x30/0xa4 [ 442.864830][T12243] futex_hash_allocate+0x73c/0xc20 [ 442.865686][T12243] futex_hash_prctl+0xd0/0x324 [ 442.866453][T12243] __arm64_sys_prctl+0x9c0/0x14e8 [ 442.867303][T12243] invoke_syscall+0x98/0x244 [ 442.868058][T12243] el0_svc_common+0xec/0x23c [ 442.868852][T12243] do_el0_svc+0x4c/0x5c [ 442.869599][T12243] el0_svc+0x64/0x260 [ 442.870243][T12243] el0t_64_sync_handler+0x48/0x148 [ 442.871112][T12243] el0t_64_sync+0x198/0x19c [ 442.871856][T12243] irq event stamp: 76 [ 442.872532][T12243] hardirqs last enabled at (75): [] __arm64_exit_to_kernel_mode+0x64/0x78 [ 442.874285][T12243] hardirqs last disabled at (76): [] el1_brk64+0x20/0x54 [ 442.875724][T12243] softirqs last enabled at (24): [] do_sve_acc+0x32c/0x4b8 [ 442.877209][T12243] softirqs last disabled at (22): [] do_sve_acc+0x10c/0x4b8 [ 442.878707][T12243] ---[ end trace 0000000000000000 ]--- [ 442.891396][T12242] syz_tun: left allmulticast mode [ 443.137290][T12252] overlayfs: failed to clone upperpath [ 443.339099][T12251] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2064'.