last executing test programs: 55.295067334s ago: executing program 32 (id=116): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x158, 0x111, 0x4b4, 0x0, 0x700, 0x250, 0x278, 0x278, 0x250, 0x278, 0x3, 0x0, {[{{@ipv6={@mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, [0x0, 0x0, 0x0, 0xff], [0xff000000], 'vlan0\x00', 'caif0\x00', {}, {}, 0x88, 0x0, 0x0, 0x1}, 0x0, 0xf8, 0x128, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x8, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x4e22, 0x8], [0x0, 0x0, 0x0, 0x0, 0x80]}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x1, 0x5}, {0x3, 0x5, 0x1}, 0x9, 0x6}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, [0xffffffff], [], 'geneve1\x00', 'erspan0\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x10) syz_emit_ethernet(0x15, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffaa0b000000aa000402"], 0x0) 53.876297957s ago: executing program 33 (id=174): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x31) 49.71807638s ago: executing program 34 (id=318): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4509c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a900d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a3c0db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848022e8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0000000000000000000000000001545f0ec539c3b58facd2f62dc3307a6c91d6b"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) unshare(0x22020600) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r0, r0, 0x2f, 0x0, 0x4, @void, @value=r0}, 0x20) 47.3089216s ago: executing program 35 (id=391): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000008e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000008c40)=""/19, 0x13}, 0x8}], 0x1, 0x2, 0x0) 43.162693255s ago: executing program 4 (id=580): r0 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0xd) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0) ioctl$TIOCSETD(r1, 0x80811501, 0x0) 43.090777721s ago: executing program 4 (id=582): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) syz_clone(0x21004000, 0x0, 0x0, 0x0, 0x0, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) 42.216168428s ago: executing program 4 (id=607): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x3c, 0x28, 0x4ee4e6a52ff5667f, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0x5}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40098}, 0x4000892) 42.176442533s ago: executing program 4 (id=613): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x95e, &(0x7f0000000280)={[{@data_err_ignore}, {@nodelalloc}, {}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@jqfmt_vfsv0}, {@quota}, {@grpid}, {@oldalloc}]}, 0x3, 0x44d, &(0x7f0000000ec0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 42.021069111s ago: executing program 4 (id=619): pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff}, 0x80) close_range(r0, r0, 0x2) socket$rxrpc(0x21, 0x2, 0xa) syncfs(r0) 41.410721303s ago: executing program 4 (id=643): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000070000000000000000000000850000004100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 41.359371442s ago: executing program 36 (id=643): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000070000000000000000000000850000004100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 31.951530732s ago: executing program 7 (id=787): ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) 31.846518375s ago: executing program 7 (id=790): sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000000)={[{@quota}, {@noload}, {@init_itable}]}, 0x1, 0x4d1, &(0x7f0000000500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x163841, 0x2a) setresuid(0xee00, 0xee00, 0x0) write$smackfs_label(r0, &(0x7f0000000240)={'{\x17\xc8.\xe0\x9c\xcf\xc0\\\xb2_\x1c\xb7~\xb3}\xc8\xb9\xfa8E\xaf\x1e\xb4B\x11\x16\'\x92\xe1\x8c\xe0\xa5M{\xe5\x8b$\x84\xcc#\x81\x8d\xf7\x1b3@Ne\xac\xd3\xa7\xb5\xa7\xb7\xc7\xe0wf\xc9>\xb5\x8e\xb4\xcc\xf9\xe8\xe5(\x94\x03\x96\x9fy\xf8%\xd5z\r%ik\x97\xfd\fJH\x9a\x7f\xca\x1c55\xf8\xd3\xb8\x9bBS\x97$\xbb$\xb9\x9c\xd6\x02\xde\xddH\xa8dyu\xadmp\x06%\xe0\x04\x00\x00\x00\x00\x00\x00\x00e\x8e5\xc9\x90M\xdbo\xb6S\xa5\xe6\xed\xad\xbd\xd0rAx\x11\x03_\xc8\xdf\x9b\xaft\xdc\x02\xda\xde\xb7\x9d\x9e\xc1\v\xf4\xe8\x18\xf4\x1c\xcbK\xea\xb6\xa8\xe5\xea\xd7\xef}\x91\xcf*\x84\xe6O=\v\x85q\xcd\xa3n\x8br1\x17\xab&j\x1feC\xfd\xe8\x82w\xd4\xf0\xc2l\xb98\xf7'}, 0xd6) 31.742521118s ago: executing program 7 (id=794): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0xfffffffe, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x7a2002, 0x23456}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000300)) syz_ublk_add_dev(r0, r1, r2, r3, 0x0, 0x0) 31.697052747s ago: executing program 7 (id=796): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f0000002100)="3026aef98d9915fdd28771bcc6e0fb3ddf8085572dd42af5b80af279976058954d73641521c411b42d4627d0ec1a7fef8db6291a7d3d2cd14ca61c046b4c1aebfa13ce7d5e90d774f4198f07d3da57f6a10695c1861ac717be461c6512b1eed9d6aebf18d56db0bdbef9008b72c908fe684da59f3ec2847c0f42c83b0bfc2ffe12ad10251f15c8eaa079e309314ddba4fba28866cab8245df9409d6b9323806c3b5309249d199a65b8fc699fded1ba7b2022834e89a9342639cc70c588fc1aa34ef3dc9228dd70fed4337b84b7738c66c7e4b7c3f8c84553d07ad5d759869592e0734fc9b78017698a77b18fc5b547add8790c85c078e33abfacd14c8cdbd3314ab83ea2f8d7823537b2328e08f7c26395650f03fa05139d17c17a3c71cc87bf3cab6f2f26f7c08cf68d37fbe604cc8db4d014df46a47b75f33778c677834ac00b580ca7269fd439db948c7e135a31ce894fad0cb364abc2a7b6c94a78c918c00618454ddda5df32641884c318d57d19d923a1c5cd3787d0027e96308b56d5d8501ee21d7621e6b48081a01c52209b38b22c08fdc5c990ef0a56c7e2dfe144516dd644f694a0d640af90fdf059f36712c0f08a7319d02a1530cca582b6975b4ab40ae8f912332846ed4b7cfa3cc9e5f41b168bada703377d674d3f31597c63a9342981cad40ad848ecd6f92c43961b9c733b61e03e1904a4c4df80d2f5ffa12036bd7db9e28e9ba01a4fb6175d7013027b9f3958c43a8ba3670987a4218352931d090aabfc2def095a2bc05170605527c61c26922acbfb64bf8a4cdc90c0b3ad8c3c2a88b7359f5842ca2f9b7c81fc2fb514e2903dd5b38ed42d13a0d521a861f437483aa6c8617e4a18728f2a7307f7418c707322089a973c56911c23706bca8d3e38c28adfebb4172a4f824b0b45628f7a39605ba2f3335a9c850c686c0b954b80a9678d9c3e8509995d9abd36d8e6580398ca105cb79587cbf50fa248cc3ec080085fe0ca8ee80e3157184bbe96c3985aaa26bb96b03889b68788f76bc7f8a22c3cabc26fedd7f74a56707f34205e4bbd904c83f967d18989428c50c30357ef7c5ffffad97fbca02d7f5ea3b07ac143b90c076216b4d56d8b153f14781361f657316135353860d6e38e3e17ade91978d4cc03734181bf832f021ad805f3359a16e5dd13413586db70191291d86e8b2799c2ea009a6f5f041417bb774fb346e7f3b6da67bf0aea4006bc1b9898853dc7043b433fb9667940c554e45cb13343a3b1bb966ae294902574527821f0fe1f9ba11d7e670554deec90f0c60595cc50ba9b2160ff2fdccec7e61a99669a3b94e4f88d5dcc395ee53bd3e3d564d5f7deff9e507670ef8e1cad0c8f0de51f62a6616245d696679b9066a562e36f2197e7e27b772148a24a30ba29d2daa892a47a24aa2a0175535ff82dbe2d3652c4868e3590b325ed5a391661877a9b80b7d6c44879ef79cf24eeb08946af35f5fffa2fcc2bb21e3b8b5da221ea865108fa6d2f788205d9646cb3a0ad1615e7bb7a561e43fa9fa10d4c8a6e967c5b45b1f3a26671fcf724f717e6fa655b420f1133f9a449a552a4799c3b8aafba2c742b8b522ee6214c7b15f36372f4c8abdd9eea2ba347d2af37712ec2c0a40116c445b1d9f95fc944e6626646531b7250e338d49e8b5cc629d4b4065e96a81c2c6d4801c481659d2c5e35b2beb0fcdb87f0bb0ffb30cb2d3233252db7a9feae630e486bcd396a6f11727e0a87cb723f28b37e50eaefe49a24d0b5821cb2bbb527adefb48426611bdbd3c43bd5a4cc40353b47b327f0fbce12b79db3d968918a59ea6d2aabdf92cd5ac381a5efc1e257971ce44df6974450d9d0435d0dfde1e05ffbf48bc2928977516eb5ebc4e658a8727dbdd0f20f5bb42dc8485244aaeb0487941bdcd8a2dbd346229a751e14f7d809ab09b44b92e3d1fbf1fd77d48727e5b9e6bf8cf43c5e56acb5bb2d71a816c5fa40ed3fec4986178281b14e5339568207c38a8804a37814d62279f2ee46f0a61ceeca38e7730f45a7572797ec22c43484e2bba760c6251eb02a6f246662abbfd7a4bdfb48ac741b77931e409dffb7b8f61f88414cc334067072ec8ca6f86f5392bfc07bae71ea26067c55129bac3fc5b749a47d70869101188cd50a600943ab7c2d43bb053ec2827bda02a0099d8be7d99cd582470ce9882bdff1fc98143b7560bec06508aa7de343cbb310c19dcd71657d3c46f357f98a277037dfee73a244c4ce1d8b72a40d01989910ff1c7e102b831a0f624a17ba85b6a21ca74a7269193bd958a26a0e328ef9347cd48b7f9c72748a63df78930cd34bca15ec275dced71bafe5b9bbc0671175e84018d092929c16033a5a6e65cb8bf1e6ee64ef01506c69c23de1a6479d17b5e36e046084c24ceccde26d9e597006699f6f0e91527d06449615b44ca96b77c329c6abae151dd734032f10292ecdc0978d8681b391c76295950ab4e49496e33ee1a0af4d4bf98518d77199750e3b2f0c68e39c66b61f8fa8f01e4209cd4cbad6cd9334a009257019c42f073c6adbeee1b18dc150067813d795abd1b2133a1cbc510ca9a697c39e84a9298d9e731a8f55c2d63bdb33ddf524e4ce2635d7f11e5addf25491a929caf1b382a1b1d3c0e9d45dd5e6a4e9be4566cacd375246e6cd3d5355f510dbfdc303a8040382fddb8d527ad96c956ed7338f58d75976bce4e5a38f2822e9093e2dd30f3ba84c4537b97f2ad404ff293b051ad4d32d6aca19f9543938330fda06d700859e1683811be43a50588d19585cccf8f5812eff822a6bf767164395b93837ed032309f1abff182d7e573754c4da171722421c59b046504248dbdabb0a14ce25201d0e585da86c06b8d48ef53ef21574e310590d8454e2863400d0be2aeba37164987e082eebfde545f1f9964cc9fc15d6bf78b4b186538100f12ac008be6f3360d6f895e61aaa8ea9deb3a115eb555e4425d8fe8999200cabd472e71bf9953fc8623eacc7d80aaa30e7525dd555a5f8356f88e074563bc4d7fddf832fd098e23c4d15433bce11ac2e50ee094c515d81c30d0dae00e01f58068a9a0a63df3db0cb9ecab16f460b55db6e17968c4d02fbf09aad4c5a46d0539029f0830f55bf1f29361e45244fd09b70e182a578f441b159280924b5101419b724e40cb5cbd0565bd4fac10b5576360d533da0639153e7d3bddeca59bc75006d9728cae661f11a527db181253b373631adcadc0b767e916301c456f6745e4f75bc3512b88adee25750afb27d8bbd82f54292223c312f3a8719e42774a6af26abf0a00fb423fe0044e6e9a682721de10881a4bc886a53043d15bb8d2bca598c2e582cff9a9b032dcfde9ae73ab8a589ef473a2807aba1855e0b6b0bf982aed73d64885c83456e69273dacf3bc6238ec51984ee5fc42a82d8e0dff297d578b63b9d7f686ccead507aa51ac80c88f36e22e4166cee75904217ef1d4a1a28ea0e8473000c0bf573fb67e924c810d431b2d2877cdd94155bb89ed6189642bf18c24f165f15ea23bf7eab55daa070042638ff224ba52e4e85a292db54bb6a5f1f9055e303d47de916562227b092402123c9fd472975106ec7bc6ee7fe77b9b1e8f716f64bca5e2e37603307a844671dbafaea802d68d6f8482d464854f31dde983249939d84c5a741e335d900a8f278cd32d7ee24465eacc3a2142614099edd2b466bde23cafd1579074224c6d183697d01161bd4e6af1af10e63d28eb1f3b1c3fd98abf056414aa1c061edc149af7f667f4c837fbd425805a45289ff15d7910e438de7c5956a36b76090486a2e64428e634416c780c7122481a2c83503619e99ce1b6a02981c77c98cd83bd9e9b7aad39d0d09a8ed516644f74260772c0d84907f32b08fafdaada38f8d703a5c5333d9dbb74df6e3db000bcbbf7c30baae7209b69198c2e1d32219925c7f867bbfdb146d57376c6ca94e18c56fdd0c8636bd366cdc9c4f5a6a6c50ba5fd0dc40cca6bbaff52f20935992494d02c3a9f3a5786f466d38d0f8b5840dbdea95e475b87531f9078d6d93bdeae5bf1f03c5b634c9c8d41c5a7ad2bc6dbe68d9ef4e366d52509e51488bf48254fe8f375e7a2648d94e745ce96cf06f4cf926837ecdb69abf89f351c1de2429544e5a41f02048841a61d12e56946aff724809f2b114674d097f1ecba8339e1c1f770b31ec014cdb09db5148d6d6b13a7755018f8c76b8aefbf738b28f1c9302c6902f7d8efc9971d2984773558f6111b84cd77b1d2fa2e231136598c79edf6405207c605d62c231dbea057936b653b288507670ca443d43a1d02caaa805b1676374318179c9909499e9a8e0573368521d3970be84952d5a786008f44969e37fc624ff8068671f0fe5790ab654450ac70910e4a2dd641a07cba15e68a8de0f374b3690994f415ec4c81597ec1b61db8cc43107e6cf9605d76883c62b45cf9b31742a2d50c866f7f8464967849d02ea22b9b53196efa2e143f3c438f47a4243f8b77a4f6ee871eb8522e1d386ef46a3db6b477423429922c1515d49bf529ce317b3245c3016cab334684feaecff7320a38516c93008cd84a6580af17d1dbd85dc2b85c8e40e4e7a6a72f99fd4b2e55deda496f20d3ed8ac18d851d4dae302c1c9176c9f617a330743e074a14d5e5d09161b65b0c4da7bc714c03f3e2c30b78d75e719f33eb5cdb5dbdd6ffb96ad30122920f04c6d5b53814b7836f6a2993494dea7147bd125a0a2b1eae792b973e944811345a26fbac4ba52d9c13048ad38100ac2d4c060e398128c018242f73b9aa12150ed83101fbaf129e9356ccf48780b29a59990d4e355dcb30dc550527aa039f7923e89fe2d1933aeb3f64e96a5306c8c6c06b7f530d34859b34a3161d56307d8066554d5535e2a60c71bf960f483048eb12a6677e8f8ddec9a2579a43a255950c62bfe4b7e4d280594f6a12368e3f575a2145e17aa3f066de4cc57dada1e2cc2d5520937b1b4d929f4664b51b2d71eb22c0ed8f23d876cc68aa9703b6f5df24411216f5085e17000b30f405980ec79188d26a7acc61756d0e011881502f1e1f4caf8998fb56e7ca1d316128aa34032d8c9506ddb69f4d563e3bfaa4c220a465d2b8e9f9900d892d3c540705a58435d49b19fa60fd28cf6864cef3a670f00faa86b49558aa520dbb46c3e2ceafcecf20495826efce9b05f9b038215b402b0da28531648157a00a0452316b999cc5e1ff02c91bee2554c291927beac92dbbff7659d40b995695adb140b01a2ea4fd4aa530e970e9416a222e2765ef804c2d01fc8bfb901361dfed036705040bf73c566dd7ae37cc6a276457e4efc8b4e364306bf3ad3ab4dca8b830a322dc0d22d2e16d44d14b0e1a9ad4a0c0bd7fd3aa856b27a0990222b8b5048be13c468c2c85265b5686d51762b3925e840adec3fcca1900e3f5656a06a5abdbedbd19ea5c288de1d8a83eca7ce2fc8efab62ead570012de77fcb6d9ca4160dadb5b89a9d4ef3d36db9caf009cc081c7358769ddeb7515978bf6264708ba991b6c57b1b6b2e8c76e1b26e880b586afcb91467c4da2b1f162304e1ffca506b0bc7c20a24aee8a78f713cdef77dc61cb29b2cb5d02d8300df3345def179a71f9ef2da57f759dafbcaca4a6da19d2d7be6eca64e08ee74f105fb3091b72e4f17cc0c17d32e408ccdf9b562409df48beab1de0bd0a2bb5fadcd090bf4e1a9dfd624f9649d93207e92cf72b5f2c8ec1112e53644739f963534f61d49a1ea043fd40e01180538e1cdacd563a460181b14594cd2e38d7892f821a33bd156a8dfc3433ebaeef1c15523b22732129d6e00ef60c8a27b33bc68c3ff5ba36f83bb9e6ca749cd55e6b4adac8ec359e648bd9b1400dc885725e409eb4137e48f191b75eb4c08df8298c01ebb2079e69f571f3a87d27a81d84d802e6d008131ea5bee3d69c50ccfcf36e2681a6df7ef8362bd69bf25ceef876c4656b92ef4ab0fdc68084658f087ebad102870d04a80d2ebdec406ada5dbe204cf065ad59426039fe856bdf930431ac338f5cb7705ab8daf9e90ee9eb2df8e3d8720f156f65cdbba6607f53c2fd4f4c56a7f197fade99acae746e5f8ef4ca801307ee076086cb36f882236fc36e047e75ddf7aef8804b4483600b662c674601009fbb1dd65952ca5962609f49fbd23344cec586eff2e2f5e1d5b4608b18db76a3ff7983a715205cddb389c626afac04c15e996dac3a8b82075653ba6a3559543215cf46f08ccea187448eb6ccee05cbff8bc6c51069041e09f36af1124597d6ed88cc05b2eb93ce60779854581566366e352b74b2e0bb5c703bc5d32b4b832ba0c5279485567aae10f617fccd374a811f9955a8c9cae65ffe6340052dc590e797bc789da58f9f3376c5a6d98546b46fd7fed82c1c756949b9b40b1bab244baef9d6404e1aa0a8d7d69ef0bea6684d9b2ec6fc870d8232bd3282c24b7c75c8ac4f2fd7ff8b2e3c89c349e5674fbc9a4af5b1b6aab4042ca650cb5ae1dd8dd3e40c5d2c080dac8966b768528726eee478e6086c9bb92d7e5ca9a2200bbc2ab8dd5ffac9a1567fb230107fd316b02162b4a9abe8a67ad3754deb9fc4b7198af6e6fe25b2e8ce80d4aa234b53939b7cb5ace24ef09d9c2ad3d023398a2383fa27dc552f0ee1f8ce7f6fab06289edcc034b3eb3fc4ee79d4146aaf6e6ea5de80c8a1fdfa74212ee9d9f71556053a6f00aaee757b8e13c924bb0687c13624c452aaa9c2be4e682611bc78165c17019325ee1ce8836f803b0e8510261f43ce81a2cb8d71becfe1403a1a272c90515ce7a718b9d47a7d1fcc12d6d4ae72904cac9ede12019959ebd2bd80f93db7e85254fa2f99afd63ddca8985dfa7604b4c0c40ddce63a5b5e10ec153d2a2bbbabede60f39067369159c62c6868250c5523db51fd1bceaf51edb0087e824bc29f5e2080c760f845091c480f02c61a47edf620b7aa275bb97b3482c46096ed00f0e88261d096cc4f5d3ab681ac5580b2eb17ffbe17eb64c9e6cc7f6eff52d3283d8d41e562d6cab1bb6fdd4dac360456067b3b7b737d8b365c36b049a31f11e383495558b848a009667215bba6be14d69116f6fc854dc0445c17ea098c6424a16780313c91eaa3588835ed22b2fc56c814d2a472afcdca5b588226bcfdde588bf739ce3e7d939c39c3281c2fb968a63f1647ca76ad2b97ffc0e027646c0e6cac56f5e84f720feac564123b6b81d7e5d7ebc1517e4e1c6562773e26c48ccd3c01cdd3907797db3e513877a85555ef7df36d6561232bd33ddb4b72f3d0a9d5d204083f9a503bb0083e77d2b5e33441ba77f757157d1b8c63e5c4f1df2bd79efab8ae52e1ea5c497277241674d58ec5a392af1ec15f90116caf1fde157f2807cc15db5d86ddf5964bfb93925f4744b9fcf538f95fed7348c6675bd0d7d860bd3e0187717d5196ce0839c0b3e3e79e71d90e2ef4e204c7182afb37f36a22f648e2ca0fdaceb2575372af4e25ea97368e97bd439fbfd3ba673da43697c2c529bdbcc94202aeb7cdee81c69a301f6803a8c53f664511dac89d63438be606a9bf2ace1682bd37c515947350e0fd827314c47a800ea33b02fa0e3bdfabf6734723033db75804f3b0601ca49c5a8aff1f159f2f304eb5fdcd207ef71b4f4c8b4a07d8a883092befd2aec92ad5ad4834113de4bd0b18d30978416bc99ddd34fe9de2c82d28fd1ca6b876b679c7c38f8b54fb7eff35f4baa3cfa8cfff285822e7c8b831715e417d8fb4f007580df8e60a7dd74d142149b6bf73f9c4459de953aaddc9908c9c43698a175e6b9dcf8393efda9e8b052bf7b8291778f287737e4388448e7b72c9f6b156b29b83578825ee850678870bcde20f88e69dcc2d597bbd94d9ea09b6d53a858522aa7528e90403d57f0b3e03b3347d7e12254914ddfd5a79b287258c4888bb9dca2368a6d9b5a191ad67c4015f2d79b9cd12d5e8cf78daf70ed74975e2004fdfdcfdad56b4158929364389cb5299fc77a37e2a67fd2e7147fced6e1b266a1ce47b60ccb8ba336b6c44b2ae07cedac3929cfe46c8ebc5d4aca01faa9113f101128b883c212db008908065d8a018ea5e9af4d4dc28f105ea4408123770cd1995224b9ae71137a000784db83624deb3b290ab982dd29380ecb6b453b9512c60d416fb23f202bd70af46df1f740873e358d6a593b25152c152cfb7799943b38ed9928560fb69ab89e319070a321e21d8b800e6d4082267663b5dad1e449ce72b68ed7e8cd9c7b0fbdb04d983e6feefce9a72f86b70ec74c9ebec463c493f9b24a1df04e02d82d591d14218345033bb4d6ac054e25e53decd2fc497f64a9e1129fc3c0120858536e563623d8d6ef6b981c0139a342b418d5bd84e42e400431d5538a435820fe1023d4de94b95b2ad817b8be7bd18d40034a04a152b6f70c49a8c1298b82171a7a9e94847c1749a2aafb73c041c89b41bcd24335fc383a38ff81dee1efb018978837c050969974167bf73176252ba820260842b5a701660b93e0aa3854f64c3038febc4fde4a910b479ff7a4c6856fd9fdfe26f3d29a74c9d05909a115d6c0d7a24e24cb7cb2678df486e22994b556023c1ce61bbd1488b805f9f687d00fe3c062b4d60a934ea3265d69deaecd742c277a11496a8ce7a0073324958a1c163f9406018a9c68ad1316527435dc948076790f1292a25d083b72a2a6c942d5be839d689cd42363d1ef2187010a2e2c9dd4ddef0e48a3d5c373434314f06e2ce1f6d14559131574970e7b3879ad35ac98ea6ddee6ca7007061120b364d19560b15bfadc5d631e77cff70dfe20445dfab8e1a311074e0471f0aea8c3aef9708f1b9e07821464d69a34d5ef619f495919d257986a704b3f1f6d7a277d1dc6782c31f634c35cbf0600d2e2e2f84019d3083963dbed95488651d9f3a24b57b11f5c4a4781b4fe882efa2f2476587642b8ef63984fe801f3644ca02a735f8dd906e34226697c3c246af64077d6a44123004152ec0df9707f414fcee4b5ec6aab4d610d9458fe8405b65c8428284669b200e4573c55c11b2d851301414e4e400d5e33a4361032ad44231300291d902e27d8af1641a914cb51aff5481abd933e8fe216fa3950ecadbe953c133361402cbb20f5e3efbd1de317d878382a072e82969e83af7018c7fbfaecf34d094cd48910d7e3869799e7ae5aac9edc78d81f9ee3057002113412673d71dd48df1a40e0af3314d2cfb6dc40994804da3906c5b4298cb139d067bb3e4fdff97a98523e35db4149b972fa7ec8fd11bdf8de2b8bb969a4561f53dd79821ac49e9b7c9d9ebe18f2e7f88b0353f7338467346823f73758316908fa2087a85189fdc1b6a66b9003fe328c624d71bff1cc6c5c4b0ab64e7a78f78d83250bb5c05e8be0da2b54e30f71d2d0e692572578d850d04ef9814f0ac7d6a42fdea3e5e6aa387a8f35d5316aa11389a6722d19c901379bb92f1786b5f7e792d7a35eead6e5fd986e772771ec5d564222b46236174b7cdd1a6686d6b7d7363478f6bfa8807f868b4f7d7b635f2b1ef929802b599e58f42ebfacf39ecbe6956623ff35bcd2bd7e8dfdffda2acc10a245e001435a0b1335518c232e304edc140ba41510f0550ee01256717f72ead6249ca7ae4d86af56e60b9b4bb70fca3cf3a5b44e58e2e775e0b505dd4cd017645d37c365e5c8878cb44c433f4b972fa80d85ff0e18b7cdceb83d24c9c241907103c0a06590d2e870f778e833c332092f3028c026a930c6f29f4f3f444bd02283b15a6970ba533c12377f83258306026cbc19519b90df5372087546a76fc408fa2a6ff418df964a334a63eeeec3ae384de43af223af5184bf41ae715d703a87f74ad49fd014de2c26b3e24d5be2d2bf4d6aea9b213967ec73d0a50661cf38d69b2f738a3911ec2e9381c7da9dbd89c292cf540a5c2d707cb1591e4c50da1a767bfcd71038cb876bc705984a913d6a0ce20bdc96cdae02f0482668b2cc50e95143bf03c9c2f928c8cd470a1a84f316106d8595b56faa4872a3a3f0586fd4c7e6adc28b3f9bfdb28e8551598d257c30d588676e6bd6cc223964d49466841ffbca447add3cdb4eb200d2a8f144ea7eeccd42abd4275ba4dfb2e1eb8fcb27699f7453e9a2233fefa74284ea7e7bcbfeb57578a30538e2f2d418daadb41c21e49bf8ea64471da592c463bba670983edec8f67102258f7cc0312048f50009597fc6ad6ad9478764e3a01df11c8db927acebb37f85cef9ab85d43cb8078e0ea23ff144911d517df246b13f3d441f9e87b1da00ad405e522d1ff896660e10fdafce272bd51b75c73775f771b44c124d63d790125e0ed37a6e23a16d695f741072032ac762252d90f803c64e6d2641ce39a207c1887838f9886a79a74e58968895e853412f67af15e0c848a067d1639c4b0da0ad7c14e68a7557cf700c124f59674f484178cd4770ae31d8366eb560b895b56ed7df4f1ff24ccca3c0e0e4fe63c45d68c3f2de528375e2533698ec86da823634db67f99df17b21d61c2339f05bc79b1619d2af666a1dab7960cd27f1f368b9134305706356365d60921cf8cb395b7f6e3afa32a28a204ea9a217c1de34cd8b88f6dd939a6e3095a993bc405bd204f8ce6e65daee3eb4fec1e674378ab391a8425e00ab6fec0dd29a2447b28bc60e4cb9d52a1c357632c46a2ce1c9fcffc15d07750f0f0e997688fab6b362be70be9e5e875c33aea38f4c4fc7204badd0f344c277324dc14fca5ff03a1e122ca29e7179a3f0fb02710b75980d29163333451eaae51083720b435045faf9851eb37665841caa53241e55fdc39676a55de097d15b2b4c5463151eb121205cd6682d097f06b297e218e1eb74957107ebfe8357da6ed6498893c12ebd55f6da8945f6af4a1ce19ef23938ee2eaf5b6e7cc715d8f7709e81411b3d3740e4de35628e7513638357bee3ac3fa4e85d323b0e3cb5b8484db1e5ce59fe2f00018b8da68c059e6c00dbe080b6d95dd8d72e7d3abb26d0ba6d46116a12d13189179c932854ac982da12cc248c8147fd23655cbb74bcaa4d6422bd750abb13763e4b321e1d3567e870a714f5796737c17a6ebd2411ce61ca951de0c2b2c5929638908ceaf59500fe489539483cab3957c9e2d7e3db0b453797226e34e4d3091040cff1b3a14e2026d498001864ba9813ac2f9470bd2818a0678e22a7dce9341f76a2cf6eab6cfe3c199bd517ae55b18e4ff8f469da5a1d010408e2bcfdca04c651ce4c99d73946caa1b9d3ef89d738a765dbcc83d2590044ff799f6857dae90be9ebc6dbdd52f642038e86bc8b1ca6e0f765394951a232a823a63a7ddd5f80c48a93e173a710012200b408f3752cee183369a7814800f3bd24867d57d7232fa33f4fa686e9683c2e6d43ff677d42f7cabeae4c3851cbc65ab70a79c269efe72e065524e96f1a64a13103c5d7adbcc00e105fc740016a1e2077ee804e9c5c70826aa632c2e1321deea17b7b8fb6ae158eb4afd405963ebf9514389ff0470d88630a0e6df0a04be000d4e9c4218c580f4fb30edc9173ad54009e2598f101fc1327bf1755c057b911fe98ed515d8215d", 0x2000, &(0x7f0000005400)={&(0x7f0000000380)={0x50, 0xfffffffffffffffe, 0x2004b3404, {0x7, 0x2d, 0x5, 0x212420, 0xb, 0x0, 0x1, 0x200001, 0x0, 0x0, 0x100, 0x80}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000400)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x80000004}}, 0x30) 31.633350212s ago: executing program 7 (id=797): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x401, 0x100bf28, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @private1, 0x1}, 0x1c) 31.520480954s ago: executing program 0 (id=805): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='vegas', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) 31.434922514s ago: executing program 0 (id=807): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='\f', 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x8541, 0x1a9) fallocate(r1, 0x8, 0x4000, 0x8000) 31.410362603s ago: executing program 0 (id=808): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x2) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000000)={0x1, 0x1, @stop_pts=0x5}) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000380)={0x0, 0x1, @stop_pts=0x8}) 31.302796765s ago: executing program 0 (id=810): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204001, &(0x7f0000000240), 0x1, 0xb9f, &(0x7f0000000c00)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r0, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) 31.240756303s ago: executing program 0 (id=813): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0xff8d, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="eb", 0x1}], 0x1}], 0x1, 0x40800) 30.938785013s ago: executing program 0 (id=821): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r1, 0x0, r2, 0x0, 0x38f9, 0x0) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000080)=0x9, 0x4) write(r0, &(0x7f0000000040), 0xffffff4a) 30.904318572s ago: executing program 37 (id=821): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r1, 0x0, r2, 0x0, 0x38f9, 0x0) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000080)=0x9, 0x4) write(r0, &(0x7f0000000040), 0xffffff4a) 30.803448004s ago: executing program 7 (id=824): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./dev/nvme0\x00', 0x2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl(r0, 0xc0504e47, &(0x7f0000000a00)) 24.924720098s ago: executing program 9 (id=851): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) ftruncate(r0, 0x472e) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000080)='\xa3\xcb\xd8\xf3sb\xb5*\xdd ', 0xa) 24.902830641s ago: executing program 9 (id=853): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x1000) syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo\x00') 24.836322077s ago: executing program 9 (id=855): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f0000000040)='sysfs\x00', 0x10, 0x0) r0 = fanotify_init(0x8, 0x1000) fanotify_mark(r0, 0x5, 0x1018, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') umount2(&(0x7f0000000180)='./file0\x00', 0xb) 24.75571546s ago: executing program 9 (id=857): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2a) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00') 24.668988752s ago: executing program 8 (id=860): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000080)=0xb, 0x8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 24.662157782s ago: executing program 9 (id=861): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f00000011c0)=[{{&(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)="1b", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=' ', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002180)=[{&(0x7f0000000a80)="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", 0x2b9}], 0x1}}], 0x4, 0x2400c0a2) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000a40)="b0", 0x306}], 0x1) 24.450919296s ago: executing program 8 (id=863): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xd0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x1000608, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./file0\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0xfffffffffffffffe, 0xfe9c) 24.394697894s ago: executing program 8 (id=865): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x4) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 24.252578551s ago: executing program 9 (id=868): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0) 24.252048644s ago: executing program 8 (id=869): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x96) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x11050ca, 0x0) 24.135926881s ago: executing program 38 (id=868): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0) 24.122987153s ago: executing program 8 (id=873): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000016c0)={0x2c, r1, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44051}, 0x24000004) 23.822859797s ago: executing program 8 (id=877): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0xa8}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0xd, 0x6b1c, 0x40, 0x0, 0xdce, 0x9}}, {0x4}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) 23.761446223s ago: executing program 39 (id=877): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0xa8}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0xd, 0x6b1c, 0x40, 0x0, 0xdce, 0x9}}, {0x4}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) 15.769820966s ago: executing program 40 (id=824): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./dev/nvme0\x00', 0x2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl(r0, 0xc0504e47, &(0x7f0000000a00)) 9.065632899s ago: executing program 2 (id=1296): r0 = syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x3, 0x2, 0x0, 0x175}, &(0x7f0000ffe000)=0x0, &(0x7f0000ffe000)=0x0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x2, &(0x7f0000000180), 0xfe) syz_io_uring_modify_offsets$flags(r1, r2, 0x68, 0x1) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r3, &(0x7f0000002140)={0x2020}, 0x2020) 8.914745228s ago: executing program 5 (id=1301): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x800, 0x0, 0x1}, 0x18) 8.886010175s ago: executing program 5 (id=1303): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x6a, &(0x7f0000000400)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="00759d7800", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x40, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "161655ee40edcc6d79812b3a391de2ad03b93013eab7a6dc", "cc7fa90bdd97849215de6ce2549ea8e78f832885d92a1527e45cda3e0a89486a"}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000054c0)=[{{0x0, 0x0, &(0x7f0000005400)=[{0x0}, {&(0x7f0000004100)=""/4096, 0x1000}], 0x2}, 0x1}], 0x1, 0x2, 0x0) 8.876403152s ago: executing program 2 (id=1304): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0', 0x1) write(r0, &(0x7f0000000180)='1', 0x1) 8.819865381s ago: executing program 3 (id=1306): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x121a02) r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xcf0b, 0x0, 0x3, 0x11}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x4, 0x8, 0x0, 0x0, 0x4, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x101, 0x11, 0x5, 0x0, 0x0) 8.803320261s ago: executing program 5 (id=1307): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e20, @dev}, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, 0xffffffffffffffff) 6.530937999s ago: executing program 1 (id=1315): r0 = io_uring_setup(0xaae, &(0x7f0000000080)={0x0, 0xffffeffa, 0x800, 0x7, 0x2}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 6.486102983s ago: executing program 6 (id=1317): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000140)=0x2000004) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000240)="00214717a7071100000043060000000004000000000004b19de18b7effd1752b7f22ffd95acfe95f048dc4b0292dc274bb005b5f216b49aa8febbfca4e37e12fb7bb0ad912bb5187779b5556ffa764ca", 0x50}], 0x1, 0x9, 0x1) 5.21229978s ago: executing program 1 (id=1318): setns(0xc9, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x10, 0x3a, 0xff, @loopback, @loopback, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x2d, 0x6, 0x999, 0x5932}}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000400)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) sendmsg(0xffffffffffffffff, 0x0, 0x0) 5.166921682s ago: executing program 5 (id=1319): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffffd100ef85, 0x7fff, 0x1, 0x4, 0x4, 0x0, 0x0, 0xe02938cd5d65cfba}}, 0x50) 5.16675192s ago: executing program 3 (id=1320): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) close(0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0x9ffc) 5.166608118s ago: executing program 6 (id=1321): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x1000410, &(0x7f0000000080)={[{@grpid}, {@jqfmt_vfsv0}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file7\x00', 0x1c4) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file7/file0\x00', 0x840000, 0x0, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x2) openat$smackfs_access(0xffffffffffffff9c, 0x0, 0x2, 0x0) 5.159486535s ago: executing program 2 (id=1323): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x4) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)="00214717a70700000000030600000000000000000000721d5874f72cf86d73d32f46380feb56a29357215d78fc44fac3f44d", 0x32}], 0x1, 0x7, 0x1) 274.651048ms ago: executing program 1 (id=1324): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000700)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x800) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0xfffffffc, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x800006, 0x102, 0x1, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x4, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x7, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x2, 0x3, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x0, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x100, 0x2, 0x2f, 0xe, 0x312, 0xffffffff, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x0, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0x8, 0x2, 0x5f, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x1, 0x3, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0xb8, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x800001ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x5, 0x4, 0x2, 0x7, 0x20000008, 0x14, 0x6d01, 0x6, 0x38, 0x800003, 0x8, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0x7, 0xa, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x4, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x7, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 274.315899ms ago: executing program 6 (id=1325): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000023c0)=@delchain={0x5ac, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x580, 0x2, [@TCA_BPF_ACT={0x57c, 0x1, [@m_bpf={0x108, 0x11, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0x5, 0x6, '\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xffffffff, 0x3, 0xffffffffffffffff, 0x10001, 0x6}}]}, {0xb1, 0x6, "a41f25d22b1bae1b6bfb4a42ad5ba9db462fca41280c331f630e2c9f0be1093117392575082305ebc27660464ef802792ce06133244235023f0f4882fc0a47f4d5e499a8857cd81b0e6fda422cbc53ad098872214190756df6bbd0e760248aa97e200702fd569bd27d4a70df1d4a123ffc42d2592c81751e15e260622f14aeaaca5dc8acab93651fdd1d5614d98f28fc76d402e1028d91028270a2722b141a9140c47e37d068e7193d463a6444"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_police={0x444, 0x9, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe73, 0x9, 0x7, 0x3, 0x1ff, 0x7, 0x8, 0x80, 0x3, 0x1, 0x10000000, 0x401, 0x3, 0x2, 0x4, 0x6, 0x1000, 0x3, 0x5, 0x5, 0xfffffff9, 0xff, 0xc, 0x7fff, 0x5, 0x5c7000, 0x9, 0x7fffffff, 0x5, 0x6, 0x0, 0x80, 0x1f, 0x7ff, 0xfffffc84, 0x10, 0xfffffff7, 0x3, 0x8, 0x6, 0x5, 0xb, 0x8, 0xfffffffd, 0x4c, 0xe, 0xf, 0x9, 0x9, 0x3, 0xfffffff9, 0xfffffffa, 0x1, 0x2, 0x9, 0x8, 0xc6e7, 0xa000, 0x2, 0x8000, 0x17, 0x6, 0x2e52, 0x9, 0x7, 0x6, 0x414, 0x10001, 0x0, 0x5, 0xffffffff, 0xc, 0x1000, 0x4, 0x800, 0x10, 0x39, 0x5, 0x2, 0x5c3, 0x800, 0x2, 0x5, 0x6e6, 0x3, 0x7, 0x6, 0xc, 0x3, 0x14e, 0x8, 0x5, 0xad8, 0x289f, 0x3, 0x97e, 0x3, 0x80, 0x6, 0xb, 0x8, 0xe6, 0x720, 0x2, 0xa98f, 0x1, 0xffffffff, 0x0, 0x3, 0x74, 0xdd7c, 0x2, 0x0, 0xffffff7c, 0x6, 0x7f, 0x1, 0x6, 0x4, 0x7, 0x3, 0x7, 0xb, 0xfff, 0xfffffffd, 0x3, 0xc60, 0x7, 0x4, 0xf8ca, 0xb, 0x6, 0x3ff, 0x7fffffff, 0x8001, 0xd, 0x0, 0x4, 0x4, 0x0, 0x421, 0x8, 0x9, 0x2, 0x1, 0x0, 0x9, 0xffff, 0x7ff, 0x8, 0x9, 0x2, 0xb, 0xa00, 0x2, 0xfec, 0x5, 0x5, 0x5, 0x9, 0x2, 0x400, 0x3, 0x3, 0x3, 0x8, 0xe59, 0x1000, 0x101, 0x5, 0x8001, 0x9, 0x4, 0x0, 0x6155, 0xe040, 0x80000001, 0x40, 0x7f, 0x9, 0x5e59, 0x81, 0x0, 0x9, 0x0, 0x3, 0x1, 0xb571, 0xe, 0x7, 0xa, 0x80000000, 0x2797, 0x4, 0x2, 0x2, 0x2, 0x3, 0x81, 0xffffffff, 0x6f, 0xfffffffd, 0x5, 0xb, 0x1, 0x3, 0x3, 0x1, 0x2, 0x4, 0x8001, 0x7, 0x7, 0x1, 0x32d, 0x9, 0x6, 0x2, 0x6, 0x2, 0x4, 0x1, 0x4, 0x0, 0x1000, 0x80000001, 0xffffffff, 0x4, 0x7, 0x8, 0x8, 0x697, 0xe339, 0x9, 0x1, 0x6, 0xffffffff, 0x9, 0x9, 0x35, 0x7, 0x5, 0xfffffffb, 0xfffffff9, 0x965, 0x7145, 0x90b6, 0x6, 0x6, 0x2, 0x8, 0x1, 0x1, 0xd5, 0x7ff, 0x200]}]]}, {0x11, 0x6, "94cedea66d85e9b70c476ee3b0"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_xt={0x2c, 0x13, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x5ac}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0xa, 0xfc, 0x0, 0x7, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in=@empty, @in=@rand_addr=0x64010100, 0x2c, 0x30}]}, 0x38}}, 0x40408c0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 233.737873ms ago: executing program 5 (id=1326): unshare(0x8040480) mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x5) r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) msgrcv(r0, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) 233.59876ms ago: executing program 3 (id=1327): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x401, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) 233.509198ms ago: executing program 2 (id=1328): r0 = socket(0x10, 0x803, 0x0) r1 = syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x3, 0x55}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r0, 0x0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000680)=""/188, 0xbc}], 0x1}, 0x0, 0x10182, 0x0, {0x1}}) io_uring_enter(r1, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) 233.34982ms ago: executing program 1 (id=1329): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x48, r1, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:default_t:s0\x00'}]}, 0x48}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)={0x14, r1, 0x301}, 0x14}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0) 205.828898ms ago: executing program 3 (id=1330): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x14a0, &(0x7f0000000700)=ANY=[], 0x1, 0x0, 0x0) symlinkat(&(0x7f0000002300)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000003200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 202.759916ms ago: executing program 2 (id=1331): syz_mount_image$ext4(&(0x7f0000000f40)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000f80)={[{@grpjquota}, {@resuid}, {@block_validity}, {@errors_remount}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'func'}}]}, 0x1, 0x79b, &(0x7f0000000180)="$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") renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4) setrlimit(0xa, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 187.640193ms ago: executing program 5 (id=1332): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 187.286775ms ago: executing program 6 (id=1333): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a0000070800024000000002090001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="34020000", @ANYRES16=r1, @ANYBLOB="050000000000000000003f00000008000300", @ANYRES32=r2, @ANYBLOB="6c005e80080003000300000008000200a609000008000600c0dc00000800090005000000080007009801000020"], 0x234}}, 0x0) 153.289051ms ago: executing program 1 (id=1334): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002240)='./file0\x00', 0x800012, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x2c7, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000280)=""/59, 0x5e) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000f80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 128.090599ms ago: executing program 3 (id=1335): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) listen(r0, 0x6) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x80, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x5}, 0x0, 0x2}, 0xe) 78.566914ms ago: executing program 6 (id=1336): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='select \n', 0x10) write(r0, &(0x7f0000000100)='file read /etc/passwd task.uid=0 exec.argv[0]=\"s\\\" exec.envp[\"PATH\"]=\"/bin\"\n', 0x4c) 36.794202ms ago: executing program 2 (id=1337): r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000300)={0x4}) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r0) 34.518364ms ago: executing program 6 (id=1338): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="3c1204"], 0x98) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e20, 0x44, @dev={0xfe, 0x80, '\x00', 0x42}, 0x5}]}, &(0x7f0000000140)=0x10) 13.624587ms ago: executing program 3 (id=1339): r0 = fsopen(&(0x7f0000000140)='pipefs\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) socket$inet_udp(0x2, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 0s ago: executing program 1 (id=1340): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2, 0xf5ff}, 0x10) sendmsg$tipc(r1, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x41, 0x1, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x41) kernel console output (not intermixed with test programs): 9905][ T5814] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 44.760186][ T5814] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 44.763590][ T5814] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 44.876301][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.897027][ T4720] Bluetooth: hci1: command tx timeout [ 44.902471][ T5814] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.907374][ T1250] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.907414][ T1250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.912855][ T929] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.912895][ T929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.922963][ T5814] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 44.927256][ T5814] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 45.061431][ T4401] 8021q: adding VLAN 0 to HW filter on device eth9 [ 45.075869][ T6002] sctp: [Deprecated]: syz.0.381 (pid 6002) Use of int in max_burst socket option. [ 45.075869][ T6002] Use struct sctp_assoc_value instead [ 45.211767][ T5918] Set syz1 is full, maxelem 65536 reached [ 45.214602][ T4720] Bluetooth: hci3: command tx timeout [ 45.221415][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.338976][ T4725] lg-g15 0003:046D:C222.0002: unknown main item tag 0x0 [ 45.340685][ T4725] lg-g15 0003:046D:C222.0002: unknown main item tag 0x0 [ 45.343612][ T4725] lg-g15 0003:046D:C222.0002: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 45.354857][ T5356] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 45.375995][ T5814] veth0_vlan: entered promiscuous mode [ 45.377688][ T5814] veth1_vlan: entered promiscuous mode [ 45.430168][ T929] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.462565][ T4401] 8021q: adding VLAN 0 to HW filter on device eth10 [ 45.476316][ T5814] veth0_macvtap: entered promiscuous mode [ 45.478799][ T5814] veth1_macvtap: entered promiscuous mode [ 45.491043][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.495217][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.499497][ T1250] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.499589][ T1250] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.499662][ T1250] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.499721][ T1250] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.521726][ T929] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.607476][ T929] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.617408][ T4710] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 45.620846][ T4710] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 45.646952][ T4710] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 45.653712][ T1250] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.653741][ T1250] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.655778][ T4710] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 45.656274][ T4710] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 45.707376][ T4841] nintendo 0005:057E:2007.0003: hidraw0: BLUETOOTH HID v80.00 Gamepad [syz0] on syz0 [ 45.717308][ T929] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.730947][ T6078] pim6reg: entered allmulticast mode [ 45.737453][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.739502][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.747132][ T6077] pim6reg: left allmulticast mode [ 45.759061][ T4401] 8021q: adding VLAN 0 to HW filter on device eth11 [ 45.864337][ T929] bridge_slave_1: left allmulticast mode [ 45.864374][ T929] bridge_slave_1: left promiscuous mode [ 45.864460][ T929] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.868551][ T929] bridge_slave_0: left allmulticast mode [ 45.868673][ T929] bridge_slave_0: left promiscuous mode [ 45.868812][ T929] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.909885][ T6107] loop1: detected capacity change from 0 to 8 [ 45.948781][ T6107] SQUASHFS error: Unknown inode type 0 in squashfs_iget! [ 46.001877][ T929] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 46.017627][ T929] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 46.035784][ T929] bond0 (unregistering): Released all slaves [ 46.282663][ T6154] loop7: detected capacity change from 0 to 512 [ 46.291951][ T6154] EXT4-fs: Ignoring removed nobh option [ 46.325592][ T6154] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.357999][ T6154] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000. [ 46.387387][ T5814] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.395176][ T929] hsr_slave_0: left promiscuous mode [ 46.396692][ T929] hsr_slave_1: left promiscuous mode [ 46.396979][ T929] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.396990][ T929] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 46.402791][ T929] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.402825][ T929] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 46.413329][ T929] veth1_macvtap: left promiscuous mode [ 46.414612][ T929] veth0_macvtap: left promiscuous mode [ 46.418827][ T929] veth1_vlan: left promiscuous mode [ 46.418889][ T929] veth0_vlan: left promiscuous mode [ 46.506199][ T6182] loop7: detected capacity change from 0 to 512 [ 46.533558][ T6182] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.551018][ T5814] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.569601][ T929] team0 (unregistering): Port device team_slave_1 removed [ 46.589249][ T929] team0 (unregistering): Port device team_slave_0 removed [ 46.660174][ T6167] netlink: 'syz.1.425': attribute type 1 has an invalid length. [ 46.670975][ T4401] 8021q: adding VLAN 0 to HW filter on device eth12 [ 46.703691][ T6064] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.703740][ T6064] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.703882][ T6064] bridge_slave_0: entered allmulticast mode [ 46.706098][ T6064] bridge_slave_0: entered promiscuous mode [ 46.710765][ T6064] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.710787][ T6064] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.710849][ T6064] bridge_slave_1: entered allmulticast mode [ 46.714607][ T6064] bridge_slave_1: entered promiscuous mode [ 46.747636][ T6064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.757407][ T6064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.785837][ T6064] team0: Port device team_slave_0 added [ 46.786653][ T6064] team0: Port device team_slave_1 added [ 46.816912][ T6064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.818494][ T6064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.823901][ T6064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.836662][ T6064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.838255][ T6064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.843200][ T6064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.858553][ T6064] hsr_slave_0: entered promiscuous mode [ 46.860052][ T6064] hsr_slave_1: entered promiscuous mode [ 46.861397][ T6064] debugfs: 'hsr0' already exists in 'hsr' [ 46.862626][ T6064] Cannot create hsr debugfs directory [ 46.883577][ T6215] process 'syz.7.438' launched './file0' with NULL argv: empty string added [ 46.890633][ T6215] overlayfs: missing 'lowerdir' [ 46.892760][ T6214] loop4: detected capacity change from 0 to 512 [ 46.908535][ T6214] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 46.914492][ T6214] EXT4-fs (loop4): 1 truncate cleaned up [ 46.930694][ T6214] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.951379][ T6221] loop1: detected capacity change from 0 to 512 [ 46.965406][ T6221] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.441: corrupted in-inode xattr: invalid ea_ino [ 46.965445][ T6221] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 46.967014][ T6221] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.441: couldn't read orphan inode 15 (err -117) [ 46.967036][ T6221] loop1: lost filesystem error report for type 5 error -117 [ 46.967601][ T6221] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.990578][ T4712] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.042187][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.119168][ T6064] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 47.143540][ T6064] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.143961][ T6064] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 47.147302][ T6064] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.153140][ T6064] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 47.167561][ T6064] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.168138][ T6064] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 47.170657][ T6064] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.189490][ T4401] 8021q: adding VLAN 0 to HW filter on device eth13 [ 47.213737][ T6064] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.213789][ T6064] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.213875][ T6064] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.213909][ T6064] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.263548][ T6064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.271238][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.274005][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.294152][ T4720] Bluetooth: hci3: command tx timeout [ 47.307030][ T6064] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.313527][ T929] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.313570][ T929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.317687][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.317730][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.336850][ T6271] Injecting memory failure for pfn 0x219070 at process virtual address 0x20289000 [ 47.361920][ T6271] Memory failure: 0x219070: unhandlable page. [ 47.363420][ T6271] Memory failure: 0x219070: recovery action for get hwpoison page: Ignored [ 47.372957][ T6281] EXT4-fs: Ignoring removed i_version option [ 47.398690][ T6281] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.445086][ T4712] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.522593][ T6306] Injecting memory failure for pfn 0x11e2e2 at process virtual address 0x20000000 [ 47.526133][ T6306] Memory failure: 0x11e2e2: Sending SIGBUS to syz.4.464:6306 due to hardware memory corruption [ 47.528403][ T6306] Memory failure: 0x11e2e2: recovery action for dirty LRU page: Recovered [ 47.530094][ T6306] Injecting memory failure for pfn 0x219070 at process virtual address 0x20001000 [ 47.532006][ T6306] Memory failure: 0x219070: Sending SIGBUS to syz.4.464:6306 due to hardware memory corruption [ 47.534536][ T6306] Memory failure: 0x219070: recovery action for already poisoned page: Failed [ 47.573368][ T6303] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.579696][ T6303] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.463: corrupted xattr block 33: invalid ea_ino [ 47.586059][ T6303] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.463: corrupted xattr block 33: invalid ea_ino [ 47.588859][ T6303] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.463: corrupted xattr block 33: invalid ea_ino [ 47.596284][ T6303] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.463: corrupted xattr block 33: invalid ea_ino [ 47.622009][ T6064] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.636455][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.644613][ T4401] 8021q: adding VLAN 0 to HW filter on device eth14 [ 47.695569][ T4720] Bluetooth: hci4: command tx timeout [ 47.740418][ T6332] SQUASHFS error: Failed to read block 0x4de: -5 [ 47.740454][ T6332] SQUASHFS error: Unable to read data cache entry [4de] [ 47.740477][ T6332] SQUASHFS error: Unable to read page, block 4de, size 1000000 [ 47.740590][ T6332] SQUASHFS error: Unable to read data cache entry [4de] [ 47.740602][ T6332] SQUASHFS error: Unable to read page, block 4de, size 1000000 [ 47.740634][ T6332] SQUASHFS error: Unable to read data cache entry [4de] [ 47.740644][ T6332] SQUASHFS error: Unable to read page, block 4de, size 1000000 [ 47.740673][ T6332] SQUASHFS error: Unable to read data cache entry [4de] [ 47.740682][ T6332] SQUASHFS error: Unable to read page, block 4de, size 1000000 [ 47.777559][ T6064] veth0_vlan: entered promiscuous mode [ 47.789299][ T6064] veth1_vlan: entered promiscuous mode [ 47.817862][ T6064] veth0_macvtap: entered promiscuous mode [ 47.820771][ T6064] veth1_macvtap: entered promiscuous mode [ 47.823411][ T6346] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 47.839227][ T6064] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.848464][ T6064] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.850294][ T6346] syz.4.470: attempt to access beyond end of device [ 47.850294][ T6346] loop4: rw=0, sector=17179852706, nr_sectors = 16 limit=512 [ 47.888020][ T4401] 8021q: adding VLAN 0 to HW filter on device eth15 [ 47.931025][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.931059][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.934942][ T40] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.936690][ T40] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.948871][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.948900][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.954395][ T929] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.955098][ T929] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.322452][ T30] audit: type=1400 audit(48.290:5): lsm=SMACK fn=smack_inode_rename action=denied subject="_" object="l" requested=rw pid=6410 comm="syz.4.497" name="file0" dev="tmpfs" ino=710 [ 48.408879][ T6427] set_capacity_and_notify: 4 callbacks suppressed [ 48.411146][ T6427] loop4: detected capacity change from 0 to 512 [ 48.411796][ T6427] EXT4-fs (loop4): Test dummy encryption mode enabled [ 48.413512][ T6427] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.504: inode has both inline data and extents flags [ 48.413527][ T6427] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 48.413616][ T6427] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.504: couldn't read orphan inode 15 (err -117) [ 48.413628][ T6427] loop4: lost filesystem error report for type 5 error -117 [ 48.417802][ T6427] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.420592][ T6427] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 48.422735][ T6427] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 48.456524][ T4712] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.617048][ T6460] input: syz0 as /devices/virtual/input/input3 [ 48.653269][ T6466] netlink: 752 bytes leftover after parsing attributes in process `syz.8.521'. [ 48.793731][ T6489] dlm: non-version read from control device 4096 [ 48.865095][ T6498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.533'. [ 48.865165][ T6498] netlink: 52 bytes leftover after parsing attributes in process `syz.4.533'. [ 48.958559][ T6510] input: syz0 as /devices/virtual/input/input4 [ 49.157080][ T6537] loop1: detected capacity change from 0 to 256 [ 49.162709][ T6537] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 49.224969][ T6548] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779264) [ 49.226866][ T6548] FAT-fs (loop1): Filesystem has been set read-only [ 49.228877][ T6548] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 49.235479][ T6548] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 49.271798][ T6552] netdevsim netdevsim4: Firmware load for 'Л./file0/../file0/../file0' refused, path contains '..' component [ 49.300187][ T6554] netlink: 12 bytes leftover after parsing attributes in process `syz.8.558'. [ 49.373859][ T6564] loop8: detected capacity change from 0 to 4096 [ 49.374342][ T4720] Bluetooth: hci3: command tx timeout [ 49.379997][ T6564] EXT4-fs: inline encryption not supported [ 49.383471][ T6564] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 49.383498][ T6564] EXT4-fs (loop8): Test dummy encryption mode enabled [ 49.386772][ T6564] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0002] [ 49.386810][ T6564] System zones: 0-5 [ 49.388016][ T6564] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.403346][ T6064] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.507249][ T6580] netlink: 48 bytes leftover after parsing attributes in process `syz.1.568'. [ 49.507619][ T6580] netlink: 48 bytes leftover after parsing attributes in process `syz.1.568'. [ 49.663147][ T6597] synth uevent: /bus/platform/drivers/usb-conn-gpio: unknown uevent action string [ 49.774754][ T4720] Bluetooth: hci4: command tx timeout [ 49.851040][ T30] audit: type=1326 audit(49.820:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6611 comm="syz.8.584" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2d792a8 code=0x0 [ 49.855855][ T4841] nintendo 0005:057E:2007.0003: Failed to get joycon info; ret=-110 [ 49.855872][ T4841] nintendo 0005:057E:2007.0003: Failed to retrieve controller info; ret=-110 [ 49.855881][ T4841] nintendo 0005:057E:2007.0003: Failed to initialize controller; ret=-110 [ 49.861252][ T4841] nintendo 0005:057E:2007.0003: probe - fail = -110 [ 49.861322][ T4841] nintendo 0005:057E:2007.0003: probe with driver nintendo failed with error -110 [ 50.008411][ T6617] loop7: detected capacity change from 0 to 4096 [ 50.011531][ T6620] Format for adding new device is "id port_count num_queues" (uint uint uint). [ 50.012973][ T6617] EXT4-fs: inline encryption not supported [ 50.019728][ T6617] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 50.023505][ T6617] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c128, mo2=0023] [ 50.023584][ T6617] System zones: 0-5 [ 50.031551][ T6617] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.082660][ T5814] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.212042][ T4385] hid-generic 0005:0C45:0002.0004: unknown main item tag 0x0 [ 50.216127][ T4385] hid-generic 0005:0C45:0002.0004: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 50.448591][ T6646] netlink: 'syz.1.596': attribute type 2 has an invalid length. [ 50.448627][ T6646] netlink: 4 bytes leftover after parsing attributes in process `syz.1.596'. [ 50.455471][ T6648] netlink: 156 bytes leftover after parsing attributes in process `syz.7.597'. [ 50.661971][ T6670] netlink: 8 bytes leftover after parsing attributes in process `syz.4.607'. [ 50.688459][ T6677] loop4: detected capacity change from 0 to 512 [ 50.688859][ T6677] EXT4-fs: Ignoring removed oldalloc option [ 50.703124][ T6677] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 50.733275][ T6677] EXT4-fs (loop4): 1 orphan inode deleted [ 50.733307][ T6677] EXT4-fs (loop4): 1 truncate cleaned up [ 50.733789][ T6677] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.788485][ T6677] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 50.792867][ T6677] overlayfs: failed to verify upper root origin [ 50.828937][ T4712] EXT4-fs warning (device loop4): ext4_rmdir:3192: inode #17: comm syz-executor: empty directory 'file.cold' has too many links (0) [ 50.829045][ T4712] EXT4-fs error (device loop4): ext4_lookup:1785: inode #15: comm syz-executor: iget: bad extra_isize 46 (inode size 256) [ 50.829428][ T4712] EXT4-fs error (device loop4): ext4_lookup:1785: inode #15: comm syz-executor: iget: bad extra_isize 46 (inode size 256) [ 51.250867][ T6756] loop8: detected capacity change from 0 to 2048 [ 51.287878][ T6756] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.332978][ T6567] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.362705][ T6766] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.638: bg 0: block 345: padding at end of block bitmap is not set [ 51.366566][ T6766] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 128 with error 117 [ 51.366596][ T6766] EXT4-fs (loop8): This should not happen!! Data will be lost [ 51.366596][ T6766] [ 51.422569][ T6771] loop1: detected capacity change from 0 to 512 [ 51.425612][ T6771] EXT4-fs: inline encryption not supported [ 51.433431][ T929] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.438118][ T6771] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 51.441918][ T6064] EXT4-fs warning (device loop8): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 51.446045][ T6771] EXT4-fs (loop1): 1 truncate cleaned up [ 51.450719][ T6064] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.455615][ T4720] Bluetooth: hci3: command tx timeout [ 51.460790][ T6771] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.526744][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.548806][ T929] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.600450][ T4812] IPVS: starting estimator thread 0... [ 51.603389][ T6785] IPVS: sh: TCP 127.0.0.1:21 - no destination available [ 51.610485][ T4710] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 51.612241][ T4710] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 51.612992][ T4710] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 51.615367][ T4710] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 51.615867][ T4710] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 51.636935][ T929] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.684298][ T6788] IPVS: using max 56 ests per chain, 134400 per kthread [ 51.686027][ T929] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.834063][ T929] bridge_slave_1: left allmulticast mode [ 51.834098][ T929] bridge_slave_1: left promiscuous mode [ 51.834204][ T929] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.839936][ T929] bridge_slave_0: left allmulticast mode [ 51.839968][ T929] bridge_slave_0: left promiscuous mode [ 51.840051][ T929] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.854235][ T4720] Bluetooth: hci4: command tx timeout [ 51.872374][ T6823] loop8: detected capacity change from 0 to 4096 [ 51.895381][ T6823] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.917286][ T6823] EXT4-fs error (device loop8): ext4_do_update_inode:5742: inode #15: comm syz.8.653: corrupted inode contents [ 51.919785][ T6823] EXT4-fs error (device loop8): ext4_dirty_inode:6639: inode #15: comm syz.8.653: mark_inode_dirty error [ 51.922334][ T6823] EXT4-fs error (device loop8): ext4_do_update_inode:5742: inode #15: comm syz.8.653: corrupted inode contents [ 51.926165][ T6823] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #15: comm syz.8.653: mark_inode_dirty error [ 51.928553][ T6823] EXT4-fs error (device loop8): ext4_do_update_inode:5742: inode #15: comm syz.8.653: corrupted inode contents [ 51.931029][ T6823] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #15: comm syz.8.653: mark_inode_dirty error [ 51.933530][ T6823] EXT4-fs error (device loop8): ext4_do_update_inode:5742: inode #15: comm syz.8.653: corrupted inode contents [ 51.936350][ T6823] EXT4-fs error (device loop8): ext4_truncate:4691: inode #15: comm syz.8.653: mark_inode_dirty error [ 51.938719][ T6823] EXT4-fs error (device loop8) in ext4_setattr:6172: Corrupt filesystem [ 51.949685][ T6823] EXT4-fs error (device loop8): ext4_do_update_inode:5742: inode #15: comm syz.8.653: corrupted inode contents [ 51.954802][ T6823] EXT4-fs warning (device loop8): swap_inode_boot_loader:481: couldn't mark inode #15 dirty (err -117) [ 51.979996][ T6064] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.015288][ T929] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 52.056761][ T929] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 52.085141][ T929] bond0 (unregistering): Released all slaves [ 52.130677][ T6835] loop0: detected capacity change from 0 to 1024 [ 52.167155][ T6835] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 52.173997][ T6835] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: comm syz.0.658: lblock 0 mapped to illegal pblock 0 (length 6) [ 52.179381][ T6835] EXT4-fs (loop0): Remounting filesystem read-only [ 52.195708][ T4709] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 52.420088][ T6787] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.421606][ T6787] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.423100][ T6787] bridge_slave_0: entered allmulticast mode [ 52.424868][ T6787] bridge_slave_0: entered promiscuous mode [ 52.426949][ T6787] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.428452][ T6787] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.429957][ T6787] bridge_slave_1: entered allmulticast mode [ 52.431679][ T6787] bridge_slave_1: entered promiscuous mode [ 52.463822][ T6884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.667'. [ 52.463861][ T6884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.667'. [ 52.467655][ T929] hsr_slave_0: left promiscuous mode [ 52.468030][ T929] hsr_slave_1: left promiscuous mode [ 52.469150][ T929] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.469174][ T929] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.469782][ T929] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.469792][ T929] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.479001][ T929] veth1_macvtap: left promiscuous mode [ 52.479055][ T929] veth0_macvtap: left promiscuous mode [ 52.479116][ T929] veth1_vlan: left promiscuous mode [ 52.479152][ T929] veth0_vlan: left promiscuous mode [ 52.550919][ T5149] fido_id[5149]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 52.594798][ T929] team0 (unregistering): Port device team_slave_1 removed [ 52.600009][ T929] team0 (unregistering): Port device team_slave_0 removed [ 52.670084][ T6884] gretap0: entered promiscuous mode [ 52.671006][ T6884] macvlan2: entered allmulticast mode [ 52.671018][ T6884] gretap0: entered allmulticast mode [ 52.682444][ T6787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.684292][ T6787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.692416][ T6787] team0: Port device team_slave_0 added [ 52.693778][ T6787] team0: Port device team_slave_1 added [ 52.726351][ T6787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.726382][ T6787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.726408][ T6787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.727037][ T6787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.727051][ T6787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.727069][ T6787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.742928][ T6787] hsr_slave_0: entered promiscuous mode [ 52.743236][ T6787] hsr_slave_1: entered promiscuous mode [ 52.743420][ T6787] debugfs: 'hsr0' already exists in 'hsr' [ 52.743430][ T6787] Cannot create hsr debugfs directory [ 52.801231][ T6787] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 52.803785][ T6787] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 52.804456][ T6787] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 52.806331][ T6787] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 52.806791][ T6787] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 52.808871][ T6787] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 52.809319][ T6787] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 52.810992][ T6787] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 52.843474][ T6787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.850236][ T6787] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.852313][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.852355][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.859396][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.859440][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.704245][ T4720] Bluetooth: hci1: command tx timeout [ 53.934406][ T4720] Bluetooth: hci4: command tx timeout [ 55.774183][ T4720] Bluetooth: hci1: command tx timeout [ 57.580815][ T6890] fido_id[6890]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 57.640277][ T6906] netlink: 8 bytes leftover after parsing attributes in process `syz.7.672'. [ 57.702804][ T6922] fido_id[6922]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 57.816035][ T6787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.819615][ T6941] dlm: non-version read from control device 4096 [ 57.854170][ T4720] Bluetooth: hci1: command tx timeout [ 57.889056][ T6936] fido_id[6936]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 57.955938][ T4401] 8021q: adding VLAN 0 to HW filter on device eth16 [ 58.046940][ T6787] veth0_vlan: entered promiscuous mode [ 58.048107][ T6960] Injecting memory failure for pfn 0x11fcfc at process virtual address 0x20001000 [ 58.052771][ T6960] Memory failure: 0x11fcfc: Sending SIGBUS to syz.1.682:6960 due to hardware memory corruption [ 58.052850][ T6960] Memory failure: 0x11fcfc: recovery action for dirty LRU page: Recovered [ 58.052913][ T6960] Injecting memory failure for pfn 0x134f2a at process virtual address 0x20002000 [ 58.053353][ T6960] Memory failure: 0x134f2a: recovery action for clean LRU page: Recovered [ 58.053412][ T6960] Injecting memory failure for pfn 0x134f69 at process virtual address 0x20003000 [ 58.053494][ T6960] Memory failure: 0x134f69: recovery action for clean LRU page: Recovered [ 58.061077][ T6787] veth1_vlan: entered promiscuous mode [ 58.101948][ T6969] bond1 (unregistering): Released all slaves [ 58.135746][ T6787] veth0_macvtap: entered promiscuous mode [ 58.138914][ T6787] veth1_macvtap: entered promiscuous mode [ 58.142450][ T6787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.143463][ T6787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.430487][ T5934] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.430723][ T5934] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.430839][ T5934] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.564373][ T1405] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.584555][ T4295] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.584587][ T4295] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.617694][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.617730][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.053225][ T7047] netlink: 64 bytes leftover after parsing attributes in process `syz.0.702'. [ 59.423153][ T30] audit: type=1400 audit(59.390:7): lsm=SMACK fn=smack_inode_permission action=denied subject="_" object="l" requested=w pid=7081 comm="syz.8.715" name="file1" dev="tmpfs" ino=350 [ 59.447901][ T7090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.716'. [ 59.447936][ T7090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.716'. [ 59.447963][ T7090] netlink: 'syz.0.716': attribute type 14 has an invalid length. [ 59.447973][ T7090] netlink: 'syz.0.716': attribute type 13 has an invalid length. [ 59.493140][ T7100] loop0: detected capacity change from 0 to 128 [ 59.527433][ T7100] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 59.581504][ T7100] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 59.596661][ T7116] ptrace attach of "ci-upstream-gce-arm64/syz-executor exec"[4714] was attempted by "ci-upstream-gce-arm64/syz-executor exec"[7116] [ 59.662551][ T7125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.670728][ T7125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.722848][ T4401] 8021q: adding VLAN 0 to HW filter on device eth17 [ 59.917360][ T7174] netlink: 36 bytes leftover after parsing attributes in process `syz.7.745'. [ 59.934106][ T4720] Bluetooth: hci1: command tx timeout [ 60.056626][ T4401] 8021q: adding VLAN 0 to HW filter on device eth18 [ 60.170903][ T7204] input: syz1 as /devices/virtual/input/input5 [ 60.225461][ T7213] netlink: 272 bytes leftover after parsing attributes in process `syz.9.759'. [ 60.317049][ T7224] loop1: detected capacity change from 0 to 256 [ 60.330729][ T30] audit: type=1400 audit(60.300:8): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=wx pid=7223 comm="syz.1.762" name="/" dev="loop1" ino=1 [ 60.370452][ T7234] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 60.370452][ T7234] The task syz.9.761 (7234) triggered the difference, watch for misbehavior. [ 60.385882][ T4401] 8021q: adding VLAN 0 to HW filter on device eth19 [ 60.540044][ T7256] binder: 7253:7256 ioctl 4018620d 0 returned -22 [ 60.549610][ T7256] binder: 7253:7256 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 60.549654][ T7256] binder: 7256 RLIMIT_NICE not set [ 60.651211][ T7271] loop8: detected capacity change from 0 to 256 [ 60.681264][ T7271] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 60.718424][ T7271] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16779264) [ 60.720175][ T7271] FAT-fs (loop8): Filesystem has been set read-only [ 60.721857][ T7271] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16779008) [ 60.723522][ T7271] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16779008) [ 60.832552][ T7289] loop7: detected capacity change from 0 to 512 [ 60.834282][ T7289] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 60.843889][ T7289] EXT4-fs (loop7): 1 truncate cleaned up [ 60.845369][ T7289] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.900909][ T5814] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.983427][ T7300] loop1: detected capacity change from 0 to 512 [ 60.986092][ T7300] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 61.002087][ T7300] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.789: inode has both inline data and extents flags [ 61.002130][ T7300] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 61.002250][ T7300] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.789: couldn't read orphan inode 15 (err -117) [ 61.002266][ T7300] loop1: lost filesystem error report for type 5 error -117 [ 61.009040][ T7305] loop7: detected capacity change from 0 to 512 [ 61.042412][ T7305] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 61.048405][ T7300] EXT4-fs error (device loop1): ext4_check_dx_root:2201: inode #2: comm syz.1.789: Corrupt dir, invalid name_len for '.', running e2fsck is recommended [ 61.161485][ T7317] netlink: 20 bytes leftover after parsing attributes in process `syz.9.795'. [ 61.213822][ T7323] netlink: 'syz.1.798': attribute type 39 has an invalid length. [ 61.238779][ T7327] loop0: detected capacity change from 0 to 512 [ 61.246690][ T7327] EXT4-fs (loop0): Test dummy encryption mode enabled [ 61.246735][ T7327] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 61.250669][ T7327] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.800: bad orphan inode 131083 [ 61.250711][ T7327] loop0: lost filesystem error report for type 5 error -117 [ 61.383006][ T7343] loop0: detected capacity change from 0 to 512 [ 61.483591][ T4725] hid-generic 0000:0000:0001.0005: unknown main item tag 0x0 [ 61.483632][ T4725] hid-generic 0000:0000:0001.0005: unknown main item tag 0x0 [ 61.483656][ T4725] hid-generic 0000:0000:0001.0005: unknown main item tag 0x0 [ 61.483666][ T4725] hid-generic 0000:0000:0001.0005: unknown main item tag 0x0 [ 61.483675][ T4725] hid-generic 0000:0000:0001.0005: unknown main item tag 0x0 [ 61.483684][ T4725] hid-generic 0000:0000:0001.0005: unknown main item tag 0x0 [ 61.483692][ T4725] hid-generic 0000:0000:0001.0005: unknown main item tag 0x0 [ 61.483700][ T4725] hid-generic 0000:0000:0001.0005: unknown main item tag 0x0 [ 61.487340][ T4725] hid-generic 0000:0000:0001.0005: hidraw0: HID v0.10 Device [syz0] on syz1 [ 61.531066][ T7351] loop0: detected capacity change from 0 to 4096 [ 61.577506][ T7351] Quota error (device loop0): find_block_dqentry: Quota for id 0 referenced but not present [ 61.577565][ T7351] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 61.577591][ T7351] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.810: Failed to acquire dquot type 1 [ 61.581622][ T7351] EXT4-fs warning (device loop0): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 61.607789][ T4709] EXT4-fs error (device loop0): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 61.610594][ T4709] EXT4-fs error (device loop0): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 61.671134][ T7361] loop1: detected capacity change from 0 to 256 [ 61.826202][ T7370] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.818: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 61.829695][ T7370] EXT4-fs (loop1): Remounting filesystem read-only [ 61.933977][ T4295] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.979679][ T4710] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.981949][ T4710] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.983571][ T4710] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.988705][ T4710] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.990384][ T4710] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.997842][ T4295] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.080270][ T4295] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.152356][ T4295] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.217092][ T7410] input: syz0 as /devices/virtual/input/input6 [ 62.298310][ T4295] bridge_slave_1: left allmulticast mode [ 62.298345][ T4295] bridge_slave_1: left promiscuous mode [ 62.298436][ T4295] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.303187][ T4295] bridge_slave_0: left allmulticast mode [ 62.303210][ T4295] bridge_slave_0: left promiscuous mode [ 62.303288][ T4295] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.438994][ T7425] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 62.439063][ T7425] System zones: 1-12 [ 62.442026][ T7425] EXT4-fs error (device loop8): ext4_xattr_inode_iget:441: inode #12: comm syz.8.830: missing EA_INODE flag [ 62.442056][ T7425] loop8: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 62.446247][ T7425] EXT4-fs error (device loop8): ext4_xattr_inode_iget:446: comm syz.8.830: error while reading EA inode 12 err=-117 [ 62.446273][ T7425] loop8: lost filesystem error report for type 5 error -117 [ 62.446888][ T7425] EXT4-fs (loop8): 1 orphan inode deleted [ 62.453926][ T4295] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 62.479783][ T4295] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 62.515216][ T4295] bond0 (unregistering): Released all slaves [ 62.563259][ T7381] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.563426][ T7381] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.563503][ T7381] bridge_slave_0: entered allmulticast mode [ 62.564725][ T7381] bridge_slave_0: entered promiscuous mode [ 62.566648][ T7381] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.566702][ T7381] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.566768][ T7381] bridge_slave_1: entered allmulticast mode [ 62.567298][ T7381] bridge_slave_1: entered promiscuous mode [ 62.581424][ T4295] tipc: Disabling bearer [ 62.583570][ T4295] tipc: Left network mode [ 62.607330][ T7381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.610187][ T7381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.619196][ T7381] team0: Port device team_slave_0 added [ 62.621833][ T7381] team0: Port device team_slave_1 added [ 62.644018][ T7381] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.644616][ T7381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.644631][ T7381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.645443][ T7381] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.645450][ T7381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.645463][ T7381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.658696][ T7381] hsr_slave_0: entered promiscuous mode [ 62.659023][ T7381] hsr_slave_1: entered promiscuous mode [ 62.659365][ T7381] debugfs: 'hsr0' already exists in 'hsr' [ 62.659376][ T7381] Cannot create hsr debugfs directory [ 62.830355][ T4295] hsr_slave_0: left promiscuous mode [ 62.831618][ T4295] hsr_slave_1: left promiscuous mode [ 62.831878][ T4295] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.831890][ T4295] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.832961][ T4295] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.832977][ T4295] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.839547][ T4295] veth1_macvtap: left promiscuous mode [ 62.839593][ T4295] veth0_macvtap: left promiscuous mode [ 62.839693][ T4295] veth1_vlan: left promiscuous mode [ 62.839729][ T4295] veth0_vlan: left promiscuous mode [ 62.946464][ T4295] team0 (unregistering): Port device team_slave_1 removed [ 62.950189][ T4295] team0 (unregistering): Port device team_slave_0 removed [ 63.267209][ T4295] IPVS: stop unused estimator thread 0... [ 63.672605][ T7381] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.675019][ T7381] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 63.676734][ T7381] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.679042][ T7381] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 63.679375][ T7381] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.681198][ T7381] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 63.681525][ T7381] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.683568][ T7381] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 63.706695][ T7381] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.712727][ T7381] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.718666][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.718714][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.722777][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.722827][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.014752][ T4720] Bluetooth: hci0: command tx timeout [ 64.505188][ T1595] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.506514][ T10] cfg80211: failed to load regulatory.db [ 64.507726][ T1595] ieee802154 phy1 wpan1: encryption failed: -22 [ 66.094162][ T4720] Bluetooth: hci0: command tx timeout [ 67.759780][ T7483] netlink: 28 bytes leftover after parsing attributes in process `syz.1.845'. [ 67.759830][ T7483] netlink: 'syz.1.845': attribute type 7 has an invalid length. [ 67.759840][ T7483] netlink: 16 bytes leftover after parsing attributes in process `syz.1.845'. [ 67.818687][ T7381] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.819260][ T7488] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.833788][ T7381] veth0_vlan: entered promiscuous mode [ 67.842025][ T7381] veth1_vlan: entered promiscuous mode [ 67.850431][ T7381] veth0_macvtap: entered promiscuous mode [ 67.893672][ T7381] veth1_macvtap: entered promiscuous mode [ 67.906120][ T4401] 8021q: adding VLAN 0 to HW filter on device eth20 [ 67.911029][ T7381] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.923741][ T7381] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.974251][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.975548][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.975565][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.013878][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.013907][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.029574][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.029599][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.048175][ T4295] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.132782][ T7530] netlink: 12 bytes leftover after parsing attributes in process `syz.8.858'. [ 68.174585][ T4720] Bluetooth: hci0: command tx timeout [ 68.260496][ T7538] EXT4-fs mount: 13 callbacks suppressed [ 68.260540][ T7538] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 68.276276][ T7536] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 68.338989][ T7548] FAULT_INJECTION: forcing a failure. [ 68.338989][ T7548] name failslab, interval 1, probability 0, space 0, times 1 [ 68.339030][ T7548] CPU: 0 UID: 0 PID: 7548 Comm: syz.3.862 Tainted: G L syzkaller #0 PREEMPT [ 68.339048][ T7548] Tainted: [L]=SOFTLOCKUP [ 68.339052][ T7548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 68.339058][ T7548] Call trace: [ 68.339061][ T7548] show_stack+0x2c/0x3c (C) [ 68.339082][ T7548] __dump_stack+0x30/0x40 [ 68.339095][ T7548] dump_stack_lvl+0xd8/0x12c [ 68.339106][ T7548] dump_stack+0x1c/0x28 [ 68.339118][ T7548] should_fail_ex+0x41c/0x590 [ 68.339127][ T7548] should_failslab+0xc4/0x120 [ 68.339136][ T7548] kmem_cache_alloc_noprof+0x94/0x5d8 [ 68.339146][ T7548] do_timer_create+0x204/0xf8c [ 68.339155][ T7548] __arm64_sys_timer_create+0x13c/0x1ac [ 68.339168][ T7548] invoke_syscall+0x98/0x244 [ 68.339180][ T7548] el0_svc_common+0xec/0x23c [ 68.339192][ T7548] do_el0_svc+0x4c/0x5c [ 68.339203][ T7548] el0_svc+0x64/0x260 [ 68.339218][ T7548] el0t_64_sync_handler+0x44/0x104 [ 68.339228][ T7548] el0t_64_sync+0x198/0x19c [ 68.424482][ T7556] FAULT_INJECTION: forcing a failure. [ 68.424482][ T7556] name failslab, interval 1, probability 0, space 0, times 0 [ 68.424519][ T7556] CPU: 0 UID: 0 PID: 7556 Comm: syz.3.864 Tainted: G L syzkaller #0 PREEMPT [ 68.424535][ T7556] Tainted: [L]=SOFTLOCKUP [ 68.424538][ T7556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 68.424544][ T7556] Call trace: [ 68.424547][ T7556] show_stack+0x2c/0x3c (C) [ 68.424566][ T7556] __dump_stack+0x30/0x40 [ 68.424579][ T7556] dump_stack_lvl+0xd8/0x12c [ 68.424591][ T7556] dump_stack+0x1c/0x28 [ 68.424602][ T7556] should_fail_ex+0x41c/0x590 [ 68.424611][ T7556] should_failslab+0xc4/0x120 [ 68.424621][ T7556] __kmalloc_noprof+0x108/0x6b8 [ 68.424632][ T7556] tomoyo_encode2+0x10c/0x330 [ 68.424642][ T7556] tomoyo_encode+0x34/0x50 [ 68.424651][ T7556] tomoyo_realpath_from_path+0x488/0x4dc [ 68.424661][ T7556] tomoyo_mount_permission+0x3b4/0x7e4 [ 68.424671][ T7556] tomoyo_sb_mount+0x48/0x60 [ 68.424681][ T7556] security_sb_mount+0xfc/0x308 [ 68.424693][ T7556] path_mount+0xb8/0xa88 [ 68.424705][ T7556] do_mount+0xe8/0x148 [ 68.424715][ T7556] __arm64_sys_mount+0x33c/0x388 [ 68.424727][ T7556] invoke_syscall+0x98/0x244 [ 68.424739][ T7556] el0_svc_common+0xec/0x23c [ 68.424751][ T7556] do_el0_svc+0x4c/0x5c [ 68.424763][ T7556] el0_svc+0x64/0x260 [ 68.424774][ T7556] el0t_64_sync_handler+0x44/0x104 [ 68.424784][ T7556] el0t_64_sync+0x198/0x19c [ 68.431731][ T7556] ERROR: Out of memory at tomoyo_realpath_from_path. [ 68.491771][ T7562] input: syz0 as /devices/virtual/input/input7 [ 68.666583][ T4295] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.750771][ T7579] set_capacity_and_notify: 2 callbacks suppressed [ 68.751783][ T4295] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.756492][ T7579] loop3: detected capacity change from 0 to 512 [ 68.756962][ T7579] EXT4-fs: Ignoring removed oldalloc option [ 68.765737][ T7579] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 68.771231][ T4710] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.772055][ T4710] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.772375][ T4710] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.772705][ T4710] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.772953][ T4710] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.800823][ T7579] EXT4-fs (loop3): 1 truncate cleaned up [ 68.801430][ T7579] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.863802][ T4295] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.869352][ T7381] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.013977][ T4295] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.169674][ T7614] loop3: detected capacity change from 0 to 1024 [ 69.181050][ T7614] EXT4-fs: Ignoring removed oldalloc option [ 69.181098][ T7614] EXT4-fs: Ignoring removed orlov option [ 69.219982][ T7614] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.229574][ T7614] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: comm syz.3.879: lblock 0 mapped to illegal pblock 0 (length 6) [ 69.232248][ T4295] bridge_slave_1: left allmulticast mode [ 69.232277][ T4295] bridge_slave_1: left promiscuous mode [ 69.232394][ T4295] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.238841][ T4295] bridge_slave_0: left allmulticast mode [ 69.238870][ T4295] bridge_slave_0: left promiscuous mode [ 69.238949][ T4295] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.239739][ T4720] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.240352][ T4720] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.240646][ T4720] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.240992][ T4720] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.241196][ T4720] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 69.263619][ T7614] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 69.263680][ T7614] EXT4-fs (loop3): This should not happen!! Data will be lost [ 69.263680][ T7614] [ 69.313782][ T5934] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:8: bg 0: block 112: padding at end of block bitmap is not set [ 69.326648][ T5934] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 32 with error 28 [ 69.326689][ T5934] EXT4-fs (loop3): This should not happen!! Data will be lost [ 69.326689][ T5934] [ 69.326711][ T5934] EXT4-fs (loop3): Total free blocks count 0 [ 69.326720][ T5934] EXT4-fs (loop3): Free/Dirty block details [ 69.326729][ T5934] EXT4-fs (loop3): free_blocks=0 [ 69.326738][ T5934] EXT4-fs (loop3): dirty_blocks=32 [ 69.326744][ T5934] EXT4-fs (loop3): Block reservation details [ 69.332762][ T7381] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 69.443789][ T4295] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 69.469904][ T4295] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 69.475270][ T4295] bond0 (unregistering): Released all slaves [ 69.524007][ T7657] loop3: detected capacity change from 0 to 2048 [ 69.535659][ T7580] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.535702][ T7580] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.540011][ T7580] bridge_slave_0: entered allmulticast mode [ 69.541710][ T7580] bridge_slave_0: entered promiscuous mode [ 69.544244][ T7580] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.545940][ T7580] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.547636][ T7580] bridge_slave_1: entered allmulticast mode [ 69.549521][ T7580] bridge_slave_1: entered promiscuous mode [ 69.575150][ T7580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.578616][ T7580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.601237][ T7657] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.610114][ T7657] EXT4-fs (loop3): shut down requested (2) [ 69.627615][ T7381] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.680925][ T7580] team0: Port device team_slave_0 added [ 69.681905][ T7580] team0: Port device team_slave_1 added [ 69.682573][ T7675] input input8: cannot allocate more than FF_MAX_EFFECTS effects [ 69.750482][ T7580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.750570][ T7580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.750587][ T7580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.759776][ T7580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.759786][ T7580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.759798][ T7580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.817081][ T4295] hsr_slave_0: left promiscuous mode [ 69.818288][ T4295] hsr_slave_1: left promiscuous mode [ 69.818556][ T4295] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.818568][ T4295] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.820247][ T4295] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.820259][ T4295] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.827471][ T4295] veth1_macvtap: left promiscuous mode [ 69.827520][ T4295] veth0_macvtap: left promiscuous mode [ 69.827576][ T4295] veth1_vlan: left promiscuous mode [ 69.827620][ T4295] veth0_vlan: left promiscuous mode [ 69.940817][ T4295] team0 (unregistering): Port device team_slave_1 removed [ 69.945859][ T4295] team0 (unregistering): Port device team_slave_0 removed [ 70.004308][ T7580] hsr_slave_0: entered promiscuous mode [ 70.005970][ T7580] hsr_slave_1: entered promiscuous mode [ 70.006180][ T7580] debugfs: 'hsr0' already exists in 'hsr' [ 70.006191][ T7580] Cannot create hsr debugfs directory [ 70.012789][ T4401] 8021q: adding VLAN 0 to HW filter on device eth21 [ 70.110208][ T7617] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.110296][ T7617] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.110362][ T7617] bridge_slave_0: entered allmulticast mode [ 70.110904][ T7617] bridge_slave_0: entered promiscuous mode [ 70.112234][ T7617] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.112290][ T7617] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.112348][ T7617] bridge_slave_1: entered allmulticast mode [ 70.112832][ T7617] bridge_slave_1: entered promiscuous mode [ 70.161406][ T7617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.164001][ T7617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.173814][ T7617] team0: Port device team_slave_0 added [ 70.175749][ T7617] team0: Port device team_slave_1 added [ 70.182767][ T7617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.182989][ T7617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.183005][ T7617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.183645][ T7617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.183653][ T7617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.183665][ T7617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.196910][ T7617] hsr_slave_0: entered promiscuous mode [ 70.197253][ T7617] hsr_slave_1: entered promiscuous mode [ 70.197467][ T7617] debugfs: 'hsr0' already exists in 'hsr' [ 70.197477][ T7617] Cannot create hsr debugfs directory [ 70.254404][ T4710] Bluetooth: hci0: command tx timeout [ 70.400172][ T4295] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.426173][ T4401] 8021q: adding VLAN 0 to HW filter on device eth22 [ 70.490938][ T4295] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.572072][ T4295] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.607557][ T4401] 8021q: adding VLAN 0 to HW filter on device eth23 [ 70.633596][ T7766] loop3: detected capacity change from 0 to 512 [ 70.653200][ T4295] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.657327][ T7766] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.896: corrupted in-inode xattr: invalid ea_ino [ 70.657367][ T7766] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 70.657535][ T7766] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.896: couldn't read orphan inode 15 (err -117) [ 70.657555][ T7766] loop3: lost filesystem error report for type 5 error -117 [ 70.658135][ T7766] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.681712][ T7381] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.793914][ T4295] bridge_slave_1: left allmulticast mode [ 70.793955][ T4295] bridge_slave_1: left promiscuous mode [ 70.794075][ T4295] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.801048][ T4295] bridge_slave_0: left allmulticast mode [ 70.801084][ T4295] bridge_slave_0: left promiscuous mode [ 70.801154][ T4295] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.814129][ T4710] Bluetooth: hci1: command tx timeout [ 70.948653][ T4295] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 70.977410][ T4295] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 70.995392][ T4295] bond0 (unregistering): Released all slaves [ 71.294284][ T4710] Bluetooth: hci4: command tx timeout [ 71.297321][ T4295] hsr_slave_0: left promiscuous mode [ 71.298408][ T4295] hsr_slave_1: left promiscuous mode [ 71.298663][ T4295] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.298676][ T4295] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.298739][ T7842] loop1: detected capacity change from 0 to 4096 [ 71.299078][ T7842] EXT4-fs: inline encryption not supported [ 71.299105][ T7842] EXT4-fs: Ignoring removed nomblk_io_submit option [ 71.302696][ T4295] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.302708][ T4295] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.307215][ T7842] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 71.307227][ T7842] EXT4-fs (loop1): Test dummy encryption mode enabled [ 71.307391][ T7842] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 71.311504][ T7842] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=2842c198, mo2=0003] [ 71.311568][ T7842] System zones: 0-5 [ 71.312389][ T7842] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.313634][ T4295] veth1_macvtap: left promiscuous mode [ 71.313663][ T4295] veth0_macvtap: left promiscuous mode [ 71.313712][ T4295] veth1_vlan: left promiscuous mode [ 71.313748][ T4295] veth0_vlan: left promiscuous mode [ 71.380086][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.493211][ T4295] team0 (unregistering): Port device team_slave_1 removed [ 71.508379][ T4295] team0 (unregistering): Port device team_slave_0 removed [ 71.654257][ T7876] No fuse device found [ 71.704266][ T7580] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.706997][ T7580] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.708755][ T7580] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.711009][ T7580] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.713740][ T7580] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.719899][ T7882] vhci_hcd vhci_hcd.2: default hub control req: 800b v0000 i0000 l31125 [ 71.728021][ T7580] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.728394][ T7580] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.733063][ T7580] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.756501][ T7889] FAULT_INJECTION: forcing a failure. [ 71.756501][ T7889] name failslab, interval 1, probability 0, space 0, times 0 [ 71.758997][ T7889] CPU: 1 UID: 0 PID: 7889 Comm: syz.1.914 Tainted: G L syzkaller #0 PREEMPT [ 71.759019][ T7889] Tainted: [L]=SOFTLOCKUP [ 71.759023][ T7889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 71.759030][ T7889] Call trace: [ 71.759033][ T7889] show_stack+0x2c/0x3c (C) [ 71.759057][ T7889] __dump_stack+0x30/0x40 [ 71.759070][ T7889] dump_stack_lvl+0xd8/0x12c [ 71.759082][ T7889] dump_stack+0x1c/0x28 [ 71.759094][ T7889] should_fail_ex+0x41c/0x590 [ 71.759103][ T7889] should_failslab+0xc4/0x120 [ 71.759113][ T7889] __kmalloc_noprof+0x108/0x6b8 [ 71.759123][ T7889] security_prepare_creds+0x60/0x35c [ 71.759132][ T7889] prepare_creds+0x500/0x7d0 [ 71.759144][ T7889] lookup_user_key+0x1a4/0xd4c [ 71.759154][ T7889] __arm64_sys_add_key+0x34c/0x43c [ 71.759162][ T7889] invoke_syscall+0x98/0x244 [ 71.759174][ T7889] el0_svc_common+0xec/0x23c [ 71.759186][ T7889] do_el0_svc+0x4c/0x5c [ 71.759197][ T7889] el0_svc+0x64/0x260 [ 71.759208][ T7889] el0t_64_sync_handler+0x44/0x104 [ 71.759218][ T7889] el0t_64_sync+0x198/0x19c [ 71.816146][ T7617] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 71.822791][ T7617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.823283][ T7617] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 71.826497][ T7617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.827535][ T7617] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 71.829955][ T7617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.830266][ T7617] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 71.831199][ T7617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.846354][ T7580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.859983][ T7580] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.864591][ T1250] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.864637][ T1250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.865408][ T1250] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.865437][ T1250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.882243][ T7580] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.882281][ T7580] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.915903][ T7617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.919515][ T7617] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.938361][ T1250] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.938412][ T1250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.938988][ T1250] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.939007][ T1250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.112210][ T7580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.133012][ T7580] veth0_vlan: entered promiscuous mode [ 72.135864][ T7944] loop1: detected capacity change from 0 to 128 [ 72.152758][ T7580] veth1_vlan: entered promiscuous mode [ 72.179614][ T7580] veth0_macvtap: entered promiscuous mode [ 72.180726][ T7580] veth1_macvtap: entered promiscuous mode [ 72.205378][ T7580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.221670][ T7617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.228091][ T7580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.244295][ T5934] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.244345][ T5934] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.244369][ T5934] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.244386][ T5934] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.300173][ T4295] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.300214][ T4295] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.321461][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.321497][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.378319][ T7617] veth0_vlan: entered promiscuous mode [ 72.383370][ T7617] veth1_vlan: entered promiscuous mode [ 72.410093][ T7617] veth0_macvtap: entered promiscuous mode [ 72.421901][ T7617] veth1_macvtap: entered promiscuous mode [ 72.433264][ T7617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.437540][ T7617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.442002][ T5934] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.442105][ T5934] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.442129][ T5934] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.442149][ T5934] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.507013][ T7983] syzkaller1: entered promiscuous mode [ 72.508701][ T7983] syzkaller1: entered allmulticast mode [ 72.528575][ T4295] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.528621][ T4295] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.539690][ T1405] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.539717][ T1405] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.616052][ T8000] FAULT_INJECTION: forcing a failure. [ 72.616052][ T8000] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 72.618611][ T8000] CPU: 1 UID: 0 PID: 8000 Comm: syz.5.927 Tainted: G L syzkaller #0 PREEMPT [ 72.618636][ T8000] Tainted: [L]=SOFTLOCKUP [ 72.618640][ T8000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 72.618645][ T8000] Call trace: [ 72.618648][ T8000] show_stack+0x2c/0x3c (C) [ 72.618671][ T8000] __dump_stack+0x30/0x40 [ 72.618685][ T8000] dump_stack_lvl+0xd8/0x12c [ 72.618696][ T8000] dump_stack+0x1c/0x28 [ 72.618708][ T8000] should_fail_ex+0x41c/0x590 [ 72.618717][ T8000] should_fail+0x14/0x24 [ 72.618724][ T8000] should_fail_usercopy+0x20/0x30 [ 72.618732][ T8000] _inline_copy_from_user+0x3c/0x174 [ 72.618744][ T8000] __arm64_sys_mq_getsetattr+0x13c/0x310 [ 72.618755][ T8000] invoke_syscall+0x98/0x244 [ 72.618767][ T8000] el0_svc_common+0xec/0x23c [ 72.618779][ T8000] do_el0_svc+0x4c/0x5c [ 72.618790][ T8000] el0_svc+0x64/0x260 [ 72.618801][ T8000] el0t_64_sync_handler+0x44/0x104 [ 72.618811][ T8000] el0t_64_sync+0x198/0x19c [ 72.753824][ T8018] FAULT_INJECTION: forcing a failure. [ 72.753824][ T8018] name failslab, interval 1, probability 0, space 0, times 0 [ 72.753868][ T8018] CPU: 0 UID: 0 PID: 8018 Comm: syz.5.932 Tainted: G L syzkaller #0 PREEMPT [ 72.753881][ T8018] Tainted: [L]=SOFTLOCKUP [ 72.753885][ T8018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 72.753890][ T8018] Call trace: [ 72.753893][ T8018] show_stack+0x2c/0x3c (C) [ 72.753915][ T8018] __dump_stack+0x30/0x40 [ 72.753928][ T8018] dump_stack_lvl+0xd8/0x12c [ 72.753940][ T8018] dump_stack+0x1c/0x28 [ 72.753951][ T8018] should_fail_ex+0x41c/0x590 [ 72.753961][ T8018] should_failslab+0xc4/0x120 [ 72.753970][ T8018] kmem_cache_alloc_lru_noprof+0x98/0x5dc [ 72.753980][ T8018] __d_alloc+0x50/0x690 [ 72.753990][ T8018] d_alloc_pseudo+0x2c/0xd8 [ 72.753999][ T8018] alloc_path_pseudo+0xe8/0x1d4 [ 72.754008][ T8018] alloc_file_pseudo+0xb0/0x198 [ 72.754017][ T8018] __anon_inode_getfile+0x118/0x1c8 [ 72.754037][ T8018] __anon_inode_getfd+0x70/0xf4 [ 72.754049][ T8018] anon_inode_getfd+0x44/0x58 [ 72.754061][ T8018] bpf_map_new_fd+0x64/0x88 [ 72.754074][ T8018] map_create+0x4e0/0x156c [ 72.754082][ T8018] __sys_bpf+0x308/0x82c [ 72.754090][ T8018] __arm64_sys_bpf+0xd0/0xec [ 72.754097][ T8018] invoke_syscall+0x98/0x244 [ 72.754110][ T8018] el0_svc_common+0xec/0x23c [ 72.754121][ T8018] do_el0_svc+0x4c/0x5c [ 72.754133][ T8018] el0_svc+0x64/0x260 [ 72.754143][ T8018] el0t_64_sync_handler+0x44/0x104 [ 72.754153][ T8018] el0t_64_sync+0x198/0x19c [ 72.895269][ T4710] Bluetooth: hci1: command tx timeout [ 72.900769][ T8036] loop5: detected capacity change from 0 to 512 [ 72.940004][ T8036] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.991620][ T7617] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.002027][ T26] kernel read not supported for file /video7 (pid: 26 comm: kworker/1:1) [ 73.057809][ T8063] bond0: (slave macvlan0): Opening slave failed [ 73.103780][ T8078] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 73.230795][ T8095] FAULT_INJECTION: forcing a failure. [ 73.230795][ T8095] name failslab, interval 1, probability 0, space 0, times 0 [ 73.230832][ T8095] CPU: 1 UID: 0 PID: 8095 Comm: syz.1.954 Tainted: G L syzkaller #0 PREEMPT [ 73.230846][ T8095] Tainted: [L]=SOFTLOCKUP [ 73.230850][ T8095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 73.230855][ T8095] Call trace: [ 73.230858][ T8095] show_stack+0x2c/0x3c (C) [ 73.230880][ T8095] __dump_stack+0x30/0x40 [ 73.230893][ T8095] dump_stack_lvl+0xd8/0x12c [ 73.230905][ T8095] dump_stack+0x1c/0x28 [ 73.230916][ T8095] should_fail_ex+0x41c/0x590 [ 73.230925][ T8095] should_failslab+0xc4/0x120 [ 73.230935][ T8095] kmem_cache_alloc_noprof+0x94/0x5d8 [ 73.230945][ T8095] __mpol_dup+0x88/0x1c4 [ 73.230955][ T8095] mbind_range+0x24c/0x3e4 [ 73.230966][ T8095] __arm64_sys_mbind+0x5c8/0x994 [ 73.230976][ T8095] invoke_syscall+0x98/0x244 [ 73.230989][ T8095] el0_svc_common+0xec/0x23c [ 73.231001][ T8095] do_el0_svc+0x4c/0x5c [ 73.231012][ T8095] el0_svc+0x64/0x260 [ 73.231023][ T8095] el0t_64_sync_handler+0x44/0x104 [ 73.231033][ T8095] el0t_64_sync+0x198/0x19c [ 73.290484][ T8099] 9p: Unknown Cache mode or invalid value 777777777777777777 [ 73.319449][ T8106] loop1: detected capacity change from 0 to 512 [ 73.329431][ T8106] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 73.341677][ T8106] EXT4-fs (loop1): 1 truncate cleaned up [ 73.342157][ T8106] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.344251][ T8108] loop3: detected capacity change from 0 to 512 [ 73.362057][ T8113] loop2: detected capacity change from 0 to 512 [ 73.374604][ T4710] Bluetooth: hci4: command tx timeout [ 73.385627][ T8108] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.397681][ T8113] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.416581][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.463517][ T7580] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.527218][ T7381] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.597994][ T30] audit: type=1807 audit(73.570:9): action=measure UNKNOWN=f res=0 [ 73.599765][ T30] audit: type=1802 audit(73.570:10): pid=8131 uid=0 auid=4294967295 ses=4294967295 subj=_ op=update_policy cause=invalid-policy comm="syz.2.966" res=0 errno=0 [ 73.603226][ T8131] ima: policy update failed [ 73.607759][ T30] audit: type=1802 audit(73.580:11): pid=8131 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.2.966" res=0 errno=0 [ 73.750999][ T8150] EXT4-fs: Ignoring removed bh option [ 73.760187][ T8150] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 73.762110][ T8150] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 73.868085][ T30] audit: type=1400 audit(73.840:12): lsm=SMACK fn=smack_inode_setattr action=denied subject="w" object="_" requested=w pid=8162 comm="syz.1.981" name=6D656D66643A791035FBF77583253A72C2B978A471C1EA5F8C5A37E7619B11780EA1CF1A985337C9 dev="hugetlbfs" ino=22794 [ 73.922730][ T8174] set_capacity_and_notify: 1 callbacks suppressed [ 73.923448][ T8174] loop1: detected capacity change from 0 to 1024 [ 73.927509][ T8174] EXT4-fs error (device loop1): __ext4_fill_super:5600: comm syz.1.983: inode #2: comm syz.1.983: iget: illegal inode # [ 73.927548][ T8174] loop1: lost filesystem error report for type 5 error -117 [ 73.927966][ T8174] EXT4-fs (loop1): Remounting filesystem read-only [ 73.927982][ T8174] EXT4-fs (loop1): get root inode failed [ 73.927989][ T8174] EXT4-fs (loop1): mount failed [ 73.934114][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 73.934128][ C0] EXT4-fs (loop1): initial error at time 73: __ext4_fill_super:5600 [ 73.934143][ C0] EXT4-fs (loop1): last error at time 73: __ext4_fill_super:5600 [ 73.993946][ T8183] loop1: detected capacity change from 0 to 1024 [ 74.021598][ T8183] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 74.030259][ T8183] EXT4-fs error (device loop1): ext4_free_blocks:6718: comm syz.1.984: Freeing blocks not in datazone - block = 0, count = 16 [ 74.038541][ T8183] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.984: bg 0: block 112: padding at end of block bitmap is not set [ 74.041760][ T8183] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 74.042193][ T8183] EXT4-fs (loop1): This should not happen!! Data will be lost [ 74.042193][ T8183] [ 74.042209][ T8183] EXT4-fs (loop1): Total free blocks count 0 [ 74.042219][ T8183] EXT4-fs (loop1): Free/Dirty block details [ 74.042252][ T8183] EXT4-fs (loop1): free_blocks=0 [ 74.042270][ T8183] EXT4-fs (loop1): dirty_blocks=48 [ 74.042278][ T8183] EXT4-fs (loop1): Block reservation details [ 74.042284][ T8183] EXT4-fs (loop1): i_reserved_data_blocks=3 [ 74.113729][ T4714] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 74.115602][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 74.215564][ T8211] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 74.377873][ T8237] lapbether: lapb_data_request error - 4 [ 74.422048][ T8244] loop1: detected capacity change from 0 to 512 [ 74.429526][ T8244] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 74.433062][ T8244] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 74.436554][ T8244] System zones: 1-12 [ 74.438779][ T8244] EXT4-fs (loop1): 1 truncate cleaned up [ 74.440643][ T8244] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.449367][ T8244] EXT4-fs (loop1): shut down requested (1) [ 74.468164][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.612486][ T8269] loop2: detected capacity change from 0 to 512 [ 74.630366][ T8269] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 74.633475][ T8269] EXT4-fs (loop2): 1 truncate cleaned up [ 74.635474][ T8269] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.642068][ T8269] EXT4-fs (loop2): shut down requested (2) [ 74.668142][ T7580] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.771595][ T8285] loop9: detected capacity change from 0 to 7 [ 74.775471][ T4856] kernel read not supported for file /kmsg (pid: 4856 comm: kworker/1:4) [ 74.797105][ T8285] Dev loop9: unable to read RDB block 7 [ 74.797144][ T8285] loop9: unable to read partition table [ 74.797218][ T8285] loop9: partition table beyond EOD, truncated [ 74.797233][ T8285] loop_reread_partitions: partition scan of loop9 (ъщ) failed (rc=-5) [ 74.800716][ C1] invalid error, dev loop9, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 74.800792][ C1] Buffer I/O error on dev loop9, logical block 0, lost async page write [ 74.802362][ C1] invalid error, dev loop9, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 74.802390][ C1] Buffer I/O error on dev loop9, logical block 0, lost async page write [ 74.889642][ T8299] loop2: detected capacity change from 0 to 256 [ 74.975558][ T4710] Bluetooth: hci1: command tx timeout [ 75.264978][ T8343] loop3: detected capacity change from 0 to 512 [ 75.306615][ T8343] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.327997][ T8343] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 75.332381][ T8343] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 75.337426][ T8343] EXT4-fs (loop3): This should not happen!! Data will be lost [ 75.337426][ T8343] [ 75.339782][ T8343] EXT4-fs (loop3): Total free blocks count 0 [ 75.339819][ T8343] EXT4-fs (loop3): Free/Dirty block details [ 75.339837][ T8343] EXT4-fs (loop3): free_blocks=65280 [ 75.339854][ T8343] EXT4-fs (loop3): dirty_blocks=33 [ 75.339868][ T8343] EXT4-fs (loop3): Block reservation details [ 75.339881][ T8343] EXT4-fs (loop3): i_reserved_data_blocks=33 [ 75.379012][ T7381] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 75.379819][ T7381] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.431129][ T8357] comedi comedi0: comedi_config --init_data is deprecated [ 75.455374][ T4710] Bluetooth: hci4: command tx timeout [ 75.627605][ T8382] loop1: detected capacity change from 0 to 512 [ 75.627935][ T8382] EXT4-fs: Ignoring removed nobh option [ 75.636857][ T8382] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #3: comm syz.1.1025: corrupted inode contents [ 75.636889][ T8382] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 75.639089][ T8382] EXT4-fs error (device loop1): ext4_dirty_inode:6639: inode #3: comm syz.1.1025: mark_inode_dirty error [ 75.639112][ T8382] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 75.640881][ T8382] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #3: comm syz.1.1025: corrupted inode contents [ 75.640897][ T8382] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 75.641054][ T8382] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #3: comm syz.1.1025: mark_inode_dirty error [ 75.641066][ T8382] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 75.641237][ T8382] Quota error (device loop1): write_blk: dquota write failed [ 75.641293][ T8382] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 75.641634][ T8382] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.1025: Failed to acquire dquot type 0 [ 75.641653][ T8382] loop1: lost filesystem error report for type 5 error -117 [ 75.643018][ T8382] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.1025: corrupted inode contents [ 75.643037][ T8382] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 75.643424][ T8382] EXT4-fs error (device loop1): ext4_dirty_inode:6639: inode #16: comm syz.1.1025: mark_inode_dirty error [ 75.643441][ T8382] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 75.643567][ T8382] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.1025: corrupted inode contents [ 75.643581][ T8382] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 75.643688][ T8382] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.1025: mark_inode_dirty error [ 75.643699][ T8382] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 75.643820][ T8382] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.1025: corrupted inode contents [ 75.643830][ T8382] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 75.643946][ T8382] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 75.643954][ T8382] loop1: lost filesystem error report for type 5 error -117 [ 75.644067][ C0] EXT4-fs (loop1): error count since last fsck: 11 [ 75.644076][ C0] EXT4-fs (loop1): initial error at time 75: ext4_do_update_inode:5742: inode 3 [ 75.644090][ C0] EXT4-fs (loop1): last error at time 75: ext4_orphan_del:303 [ 75.646556][ T8382] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.1025: corrupted inode contents [ 75.646773][ T8382] EXT4-fs error (device loop1): ext4_truncate:4691: inode #16: comm syz.1.1025: mark_inode_dirty error [ 75.646897][ T8382] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 75.646906][ T8382] loop1: lost filesystem error report for type 5 error -117 [ 75.647861][ T8382] EXT4-fs (loop1): 1 truncate cleaned up [ 75.648341][ T8382] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.651393][ T8382] EXT4-fs warning (device loop1): ext4_es_cache_extent:1082: inode #3: comm syz.1.1025: ES cache extent failed: add [1,1,41,0x1] conflict with existing [1,-2,576460752303423487,0x18] [ 75.651393][ T8382] [ 75.666658][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.772539][ T8400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1028'. [ 76.035536][ T8443] Console: switching to colour dummy device 80x25 [ 76.090281][ T8443] Console: switching to colour frame buffer device 128x48 [ 76.202952][ T8463] FAULT_INJECTION: forcing a failure. [ 76.202952][ T8463] name failslab, interval 1, probability 0, space 0, times 0 [ 76.202996][ T8463] CPU: 0 UID: 0 PID: 8463 Comm: syz.2.1043 Tainted: G L syzkaller #0 PREEMPT [ 76.203008][ T8463] Tainted: [L]=SOFTLOCKUP [ 76.203012][ T8463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 76.203017][ T8463] Call trace: [ 76.203020][ T8463] show_stack+0x2c/0x3c (C) [ 76.203039][ T8463] __dump_stack+0x30/0x40 [ 76.203052][ T8463] dump_stack_lvl+0xd8/0x12c [ 76.203063][ T8463] dump_stack+0x1c/0x28 [ 76.203075][ T8463] should_fail_ex+0x41c/0x590 [ 76.203083][ T8463] should_failslab+0xc4/0x120 [ 76.203093][ T8463] kmem_cache_alloc_noprof+0x94/0x5d8 [ 76.203103][ T8463] security_inode_alloc+0x40/0x304 [ 76.203116][ T8463] inode_init_always_gfp+0x704/0xbac [ 76.203127][ T8463] alloc_inode+0x9c/0x198 [ 76.203137][ T8463] alloc_anon_inode+0x28/0x31c [ 76.203149][ T8463] aio_setup_ring+0xe0/0xad4 [ 76.203158][ T8463] ioctx_alloc+0x2ec/0x780 [ 76.203166][ T8463] __arm64_sys_io_setup+0x14c/0x2f4 [ 76.203174][ T8463] invoke_syscall+0x98/0x244 [ 76.203186][ T8463] el0_svc_common+0xec/0x23c [ 76.203198][ T8463] do_el0_svc+0x4c/0x5c [ 76.203215][ T8463] el0_svc+0x64/0x260 [ 76.203226][ T8463] el0t_64_sync_handler+0x44/0x104 [ 76.203237][ T8463] el0t_64_sync+0x198/0x19c [ 76.268555][ T8470] loop3: detected capacity change from 0 to 1024 [ 76.301580][ T8470] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 76.307654][ T8470] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1045: bg 0: block 112: padding at end of block bitmap is not set [ 76.330011][ T8470] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 28 [ 76.330051][ T8470] EXT4-fs (loop3): This should not happen!! Data will be lost [ 76.330051][ T8470] [ 76.330067][ T8470] EXT4-fs (loop3): Total free blocks count 0 [ 76.330082][ T8470] EXT4-fs (loop3): Free/Dirty block details [ 76.330108][ T8470] EXT4-fs (loop3): free_blocks=0 [ 76.330130][ T8470] EXT4-fs (loop3): dirty_blocks=16 [ 76.330142][ T8470] EXT4-fs (loop3): Block reservation details [ 76.330153][ T8470] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 76.358037][ T8481] loop5: detected capacity change from 0 to 512 [ 76.361926][ T8481] EXT4-fs: Ignoring removed mblk_io_submit option [ 76.366019][ T8481] EXT4-fs error (device loop5): ext4_iget_extra_inode:5180: inode #15: comm syz.5.1047: corrupted in-inode xattr: e_value size too large [ 76.366049][ T8481] fserror_report: 2 callbacks suppressed [ 76.366072][ T8481] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 76.370302][ T8481] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.1047: couldn't read orphan inode 15 (err -117) [ 76.370341][ T8481] loop5: lost filesystem error report for type 5 error -117 [ 76.374858][ C0] EXT4-fs (loop5): error count since last fsck: 2 [ 76.374872][ C0] EXT4-fs (loop5): initial error at time 76: ext4_iget_extra_inode:5180: inode 15 [ 76.374905][ C0] EXT4-fs (loop5): last error at time 76: ext4_orphan_get:1404 [ 76.381531][ T8481] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.385686][ T7381] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 76.386496][ T7381] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 76.438060][ T7617] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.593432][ T8507] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 76.597162][ T8507] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.1054: bad orphan inode 131083 [ 76.597195][ T8507] loop3: lost filesystem error report for type 5 error -117 [ 76.600432][ T8507] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.635726][ T7381] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.803812][ T8533] FAULT_INJECTION: forcing a failure. [ 76.803812][ T8533] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 76.803855][ T8533] CPU: 1 UID: 0 PID: 8533 Comm: syz.1.1057 Tainted: G L syzkaller #0 PREEMPT [ 76.803873][ T8533] Tainted: [L]=SOFTLOCKUP [ 76.803878][ T8533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 76.803883][ T8533] Call trace: [ 76.803886][ T8533] show_stack+0x2c/0x3c (C) [ 76.803906][ T8533] __dump_stack+0x30/0x40 [ 76.803918][ T8533] dump_stack_lvl+0xd8/0x12c [ 76.803930][ T8533] dump_stack+0x1c/0x28 [ 76.803941][ T8533] should_fail_ex+0x41c/0x590 [ 76.803950][ T8533] should_fail+0x14/0x24 [ 76.803957][ T8533] should_fail_usercopy+0x20/0x30 [ 76.803965][ T8533] _inline_copy_from_user+0x3c/0x174 [ 76.803977][ T8533] do_seccomp+0x36c/0xbfc [ 76.803986][ T8533] __arm64_sys_seccomp+0x84/0x98 [ 76.803996][ T8533] invoke_syscall+0x98/0x244 [ 76.804008][ T8533] el0_svc_common+0xec/0x23c [ 76.804022][ T8533] do_el0_svc+0x4c/0x5c [ 76.804034][ T8533] el0_svc+0x64/0x260 [ 76.804045][ T8533] el0t_64_sync_handler+0x44/0x104 [ 76.804055][ T8533] el0t_64_sync+0x198/0x19c [ 77.054992][ T4710] Bluetooth: hci1: command tx timeout [ 77.140448][ T4720] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 77.142720][ T4720] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 77.144838][ T4720] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 77.146606][ T4720] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 77.148223][ T4720] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 77.325880][ T4401] 8021q: adding VLAN 0 to HW filter on device eth0 [ 77.361550][ T8580] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.392887][ T8580] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.1069: missing EA_INODE flag [ 77.402630][ T8580] EXT4-fs (loop3): Remounting filesystem read-only [ 77.438063][ T7381] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.518328][ T8596] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.524613][ T8596] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: comm syz.3.1073: lblock 0 mapped to illegal pblock 0 (length 1) [ 77.534727][ T4710] Bluetooth: hci4: command tx timeout [ 77.542179][ T8596] EXT4-fs (loop3): Remounting filesystem read-only [ 77.653783][ T7381] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 77.708460][ T8623] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1077'. [ 78.097474][ T8659] binder: 8658:8659 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 78.107157][ T8563] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.113580][ T8563] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.113701][ T8563] bridge_slave_0: entered allmulticast mode [ 78.117980][ T8563] bridge_slave_0: entered promiscuous mode [ 78.122011][ T8563] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.124275][ T8563] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.124380][ T8563] bridge_slave_1: entered allmulticast mode [ 78.127201][ T8563] bridge_slave_1: entered promiscuous mode [ 78.173596][ T8563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.185596][ T8563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.247791][ T8563] team0: Port device team_slave_0 added [ 78.250811][ T8563] team0: Port device team_slave_1 added [ 78.295217][ T8563] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.295257][ T8563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.295271][ T8563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.295822][ T8563] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.295829][ T8563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.295841][ T8563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.376108][ T8563] hsr_slave_0: entered promiscuous mode [ 78.381220][ T8563] hsr_slave_1: entered promiscuous mode [ 78.385281][ T8563] debugfs: 'hsr0' already exists in 'hsr' [ 78.385315][ T8563] Cannot create hsr debugfs directory [ 78.421138][ T8675] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.465519][ T7580] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.807626][ T8714] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1101'. [ 78.911580][ T8726] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1106'. [ 79.172723][ T8760] vhci_hcd vhci_hcd.0: Expecting SOCK_STREAM - found 5 [ 79.214469][ T4710] Bluetooth: hci5: command tx timeout [ 79.269621][ T8563] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 79.270921][ T8776] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1123'. [ 79.290868][ T8563] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.304833][ T8563] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 79.306716][ T8779] set_capacity_and_notify: 4 callbacks suppressed [ 79.306752][ T8779] loop1: detected capacity change from 0 to 256 [ 79.315451][ T8563] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.317226][ T8563] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 79.319771][ T8563] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.328947][ T8563] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 79.332141][ T8563] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.488830][ T8804] FAULT_INJECTION: forcing a failure. [ 79.488830][ T8804] name failslab, interval 1, probability 0, space 0, times 0 [ 79.491349][ T8804] CPU: 0 UID: 0 PID: 8804 Comm: syz.1.1129 Tainted: G L syzkaller #0 PREEMPT [ 79.491368][ T8804] Tainted: [L]=SOFTLOCKUP [ 79.491372][ T8804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 79.491378][ T8804] Call trace: [ 79.491382][ T8804] show_stack+0x2c/0x3c (C) [ 79.491405][ T8804] __dump_stack+0x30/0x40 [ 79.491418][ T8804] dump_stack_lvl+0xd8/0x12c [ 79.491430][ T8804] dump_stack+0x1c/0x28 [ 79.491442][ T8804] should_fail_ex+0x41c/0x590 [ 79.491451][ T8804] should_failslab+0xc4/0x120 [ 79.491460][ T8804] kmem_cache_alloc_noprof+0x94/0x5d8 [ 79.491470][ T8804] prepare_creds+0x34/0x7d0 [ 79.491482][ T8804] cap_task_prctl+0x6c0/0x8a8 [ 79.491494][ T8804] security_task_prctl+0xe8/0x17c [ 79.491504][ T8804] __arm64_sys_prctl+0x13c/0x13d0 [ 79.491516][ T8804] invoke_syscall+0x98/0x244 [ 79.491529][ T8804] el0_svc_common+0xec/0x23c [ 79.491541][ T8804] do_el0_svc+0x4c/0x5c [ 79.491552][ T8804] el0_svc+0x64/0x260 [ 79.491563][ T8804] el0t_64_sync_handler+0x44/0x104 [ 79.491573][ T8804] el0t_64_sync+0x198/0x19c [ 79.497944][ T8563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.501036][ T8563] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.534543][ T5934] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.534591][ T5934] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.538030][ T5934] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.538071][ T5934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.559610][ T8815] loop2: detected capacity change from 0 to 1024 [ 79.561431][ T8815] EXT4-fs: Ignoring removed nomblk_io_submit option [ 79.566578][ T8815] EXT4-fs: inline encryption not supported [ 79.567814][ T8815] EXT4-fs: Ignoring removed nomblk_io_submit option [ 79.576415][ T8563] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.599400][ T8815] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.639117][ T7580] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 79.724877][ T8563] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.776770][ T8563] veth0_vlan: entered promiscuous mode [ 79.779832][ T8563] veth1_vlan: entered promiscuous mode [ 79.797381][ T8563] veth0_macvtap: entered promiscuous mode [ 79.805362][ T8563] veth1_macvtap: entered promiscuous mode [ 79.810796][ T8563] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.817068][ T8563] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.861481][ T1250] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.861517][ T1250] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.876519][ T5934] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.877796][ T5934] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.877809][ T5934] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.877910][ T5934] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.879434][ T1250] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.894639][ T1250] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.919029][ T4401] 8021q: adding VLAN 0 to HW filter on device eth1 [ 80.117995][ T8879] [U] [ 80.118656][ T8879] [U]  [ 80.118667][ T8879] [U]  [ 80.120855][ T8879] [U] [ 80.120877][ T8879] [U] [ 80.120892][ T8879] [U] [ 80.120967][ T8879] [U] [ 80.120984][ T8879] [U] [ 80.120998][ T8879] [U] [ 80.121013][ T8879] [U] [ 80.121168][ T8879] [U] [ 80.121184][ T8879] [U] [ 80.121197][ T8879] [U] [ 80.121215][ T8879] [U] [ 80.121278][ T8879] [U] [ 80.121293][ T8879] [U] [ 80.121306][ T8879] [U] [ 80.121318][ T8879] [U] [ 80.121382][ T8879] [U] [ 80.121397][ T8879] [U] [ 80.121410][ T8879] [U] [ 80.121423][ T8879] [U] [ 80.121480][ T8879] [U] [ 80.121495][ T8879] [U] [ 80.121507][ T8879] [U] [ 80.121520][ T8879] [U] [ 80.121583][ T8879] [U] [ 80.121597][ T8879] [U] [ 80.121609][ T8879] [U] [ 80.121622][ T8879] [U] [ 80.121679][ T8879] [U] [ 80.121693][ T8879] [U] [ 80.121706][ T8879] [U] [ 80.121719][ T8879] [U] [ 80.121781][ T8879] [U] [ 80.121795][ T8879] [U] [ 80.121807][ T8879] [U] [ 80.121820][ T8879] [U] [ 80.121877][ T8879] [U] [ 80.121890][ T8879] [U] [ 80.121903][ T8879] [U] [ 80.121916][ T8879] [U] [ 80.121977][ T8879] [U] [ 80.121991][ T8879] [U] [ 80.122003][ T8879] [U] [ 80.122016][ T8879] [U] [ 80.122072][ T8879] [U] [ 80.122086][ T8879] [U] [ 80.122098][ T8879] [U] [ 80.122111][ T8879] [U] [ 80.122172][ T8879] [U] [ 80.122186][ T8879] [U] [ 80.122199][ T8879] [U] [ 80.122215][ T8879] [U] [ 80.122271][ T8879] [U] [ 80.122285][ T8879] [U] [ 80.122298][ T8879] [U] [ 80.122310][ T8879] [U] [ 80.122373][ T8879] [U] [ 80.122387][ T8879] [U] [ 80.122399][ T8879] [U] [ 80.122412][ T8879] [U] [ 80.122468][ T8879] [U] [ 80.122482][ T8879] [U] [ 80.122494][ T8879] [U] [ 80.122507][ T8879] [U] [ 80.122519][ T8879] [U] [ 80.122583][ T8879] [U] [ 80.122596][ T8879] [U] [ 80.122609][ T8879] [U] [ 80.122621][ T8879] [U] [ 80.122681][ T8879] [U] [ 80.122695][ T8879] [U] [ 80.122707][ T8879] [U] [ 80.122720][ T8879] [U] [ 80.122780][ T8879] [U] [ 80.122794][ T8879] [U] [ 80.122807][ T8879] [U] [ 80.122819][ T8879] [U] [ 80.122879][ T8879] [U] [ 80.122892][ T8879] [U] [ 80.122905][ T8879] [U] [ 80.122917][ T8879] [U] [ 80.122978][ T8879] [U] [ 80.122992][ T8879] [U] [ 80.123005][ T8879] [U] [ 80.123017][ T8879] [U] [ 80.123076][ T8879] [U] [ 80.123090][ T8879] [U] [ 80.123102][ T8879] [U] [ 80.123115][ T8879] [U] [ 80.123179][ T8879] [U] [ 80.123192][ T8879] [U] [ 80.123205][ T8879] [U] [ 80.123220][ T8879] [U] [ 80.123276][ T8879] [U] [ 80.123290][ T8879] [U] [ 80.123303][ T8879] [U] [ 80.123315][ T8879] [U] [ 80.123376][ T8879] [U] [ 80.123389][ T8879] [U] [ 80.123402][ T8879] [U] [ 80.123415][ T8879] [U] [ 80.123471][ T8879] [U] [ 80.123485][ T8879] [U] [ 80.123497][ T8879] [U] [ 80.123510][ T8879] [U] [ 80.123570][ T8879] [U] [ 80.123584][ T8879] [U] [ 80.123596][ T8879] [U] [ 80.123609][ T8879] [U] [ 80.123665][ T8879] [U] [ 80.123679][ T8879] [U] [ 80.123691][ T8879] [U] [ 80.123704][ T8879] [U] [ 80.123764][ T8879] [U] [ 80.123778][ T8879] [U] [ 80.123791][ T8879] [U] [ 80.123803][ T8879] [U] [ 80.123860][ T8879] [U] [ 80.123874][ T8879] [U] [ 80.123886][ T8879] [U] [ 80.123899][ T8879] [U] [ 80.123959][ T8879] [U] [ 80.123973][ T8879] [U] [ 80.123986][ T8879] [U] [ 80.123998][ T8879] [U] [ 80.147370][ T8879] [U] [ 80.147391][ T8879] [U] [ 80.147407][ T8879] [U] [ 80.148771][ T8877] [U] [ 80.313704][ T8910] loop3: detected capacity change from 0 to 256 [ 80.337033][ T4401] 8021q: adding VLAN 0 to HW filter on device eth2 [ 80.483818][ T8936] loop2: detected capacity change from 0 to 1024 [ 80.509534][ T8936] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 80.518169][ T8936] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.635892][ T8961] FAULT_INJECTION: forcing a failure. [ 80.635892][ T8961] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 80.638487][ T8961] CPU: 0 UID: 0 PID: 8961 Comm: syz.1.1172 Tainted: G L syzkaller #0 PREEMPT [ 80.638509][ T8961] Tainted: [L]=SOFTLOCKUP [ 80.638513][ T8961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 80.638518][ T8961] Call trace: [ 80.638522][ T8961] show_stack+0x2c/0x3c (C) [ 80.638546][ T8961] __dump_stack+0x30/0x40 [ 80.638559][ T8961] dump_stack_lvl+0xd8/0x12c [ 80.638571][ T8961] dump_stack+0x1c/0x28 [ 80.638582][ T8961] should_fail_ex+0x41c/0x590 [ 80.638592][ T8961] should_fail+0x14/0x24 [ 80.638599][ T8961] should_fail_usercopy+0x20/0x30 [ 80.638607][ T8961] __arm64_sys_move_pages+0x166c/0x1aa0 [ 80.638618][ T8961] invoke_syscall+0x98/0x244 [ 80.638630][ T8961] el0_svc_common+0xec/0x23c [ 80.638642][ T8961] do_el0_svc+0x4c/0x5c [ 80.638654][ T8961] el0_svc+0x64/0x260 [ 80.638665][ T8961] el0t_64_sync_handler+0x44/0x104 [ 80.638675][ T8961] el0t_64_sync+0x198/0x19c [ 80.656713][ T7580] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.737269][ T8973] xt_hashlimit: size too large, truncated to 1048576 [ 80.779231][ T8976] loop3: detected capacity change from 0 to 128 [ 80.786598][ T8976] FAT-fs (loop3): bogus number of FAT sectors [ 80.786628][ T8976] FAT-fs (loop3): Can't find a valid FAT filesystem [ 80.789588][ T4401] 8021q: adding VLAN 0 to HW filter on device eth3 [ 80.803819][ T8976] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1179'. [ 80.867685][ T8986] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1181'. [ 80.867832][ T8987] device-mapper: ioctl: name not supplied when creating device [ 80.889652][ T26] psmouse serio1: Failed to reset mouse on : -5 [ 80.910834][ T8994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1185'. [ 80.919697][ T8994] netlink: 34959 bytes leftover after parsing attributes in process `syz.2.1185'. [ 81.002296][ T9012] evm: overlay not supported [ 81.066709][ T9020] netlink: 'syz.2.1194': attribute type 4 has an invalid length. [ 81.173150][ T9038] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1200'. [ 81.292666][ T9058] bridge0: port 3(veth0) entered blocking state [ 81.294820][ T4710] Bluetooth: hci5: command tx timeout [ 81.301517][ T9058] bridge0: port 3(veth0) entered disabled state [ 81.301684][ T9058] veth0: entered allmulticast mode [ 81.302246][ T9058] veth0: entered promiscuous mode [ 81.302473][ T9058] bridge0: port 3(veth0) entered blocking state [ 81.302511][ T9058] bridge0: port 3(veth0) entered forwarding state [ 81.572686][ T9100] loop2: detected capacity change from 0 to 2048 [ 81.606952][ T9100] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.664673][ T7580] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.671306][ T9112] FAULT_INJECTION: forcing a failure. [ 81.671306][ T9112] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 81.673933][ T9112] CPU: 0 UID: 0 PID: 9112 Comm: syz.3.1222 Tainted: G L syzkaller #0 PREEMPT [ 81.673955][ T9112] Tainted: [L]=SOFTLOCKUP [ 81.673960][ T9112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 81.673967][ T9112] Call trace: [ 81.673971][ T9112] show_stack+0x2c/0x3c (C) [ 81.673997][ T9112] __dump_stack+0x30/0x40 [ 81.674011][ T9112] dump_stack_lvl+0xd8/0x12c [ 81.674027][ T9112] dump_stack+0x1c/0x28 [ 81.674039][ T9112] should_fail_ex+0x41c/0x590 [ 81.674049][ T9112] should_fail+0x14/0x24 [ 81.674056][ T9112] should_fail_usercopy+0x20/0x30 [ 81.674065][ T9112] strncpy_from_user+0x48/0x388 [ 81.674075][ T9112] __arm64_sys_request_key+0x114/0x37c [ 81.674085][ T9112] invoke_syscall+0x98/0x244 [ 81.674097][ T9112] el0_svc_common+0xec/0x23c [ 81.674109][ T9112] do_el0_svc+0x4c/0x5c [ 81.674120][ T9112] el0_svc+0x64/0x260 [ 81.674131][ T9112] el0t_64_sync_handler+0x44/0x104 [ 81.674141][ T9112] el0t_64_sync+0x198/0x19c [ 81.728985][ T9118] netlink: 'syz.2.1223': attribute type 11 has an invalid length. [ 81.729024][ T9118] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1223'. [ 81.785877][ T9127] FAULT_INJECTION: forcing a failure. [ 81.785877][ T9127] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 81.785918][ T9127] CPU: 1 UID: 0 PID: 9127 Comm: syz.5.1226 Tainted: G L syzkaller #0 PREEMPT [ 81.785935][ T9127] Tainted: [L]=SOFTLOCKUP [ 81.785939][ T9127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 81.785944][ T9127] Call trace: [ 81.785947][ T9127] show_stack+0x2c/0x3c (C) [ 81.785969][ T9127] __dump_stack+0x30/0x40 [ 81.785982][ T9127] dump_stack_lvl+0xd8/0x12c [ 81.785994][ T9127] dump_stack+0x1c/0x28 [ 81.786005][ T9127] should_fail_ex+0x41c/0x590 [ 81.786014][ T9127] should_fail_alloc_page+0xec/0x10c [ 81.786025][ T9127] prepare_alloc_pages+0x194/0x4a4 [ 81.786035][ T9127] __alloc_frozen_pages_noprof+0x134/0x320 [ 81.786046][ T9127] alloc_pages_mpol+0x1ec/0x3c0 [ 81.786056][ T9127] alloc_frozen_pages_noprof+0xc4/0x10c [ 81.786067][ T9127] alloc_pages_noprof+0x30/0x148 [ 81.786077][ T9127] __pte_alloc+0x40/0x1c4 [ 81.786090][ T9127] do_pte_missing+0x259c/0x2a24 [ 81.786099][ T9127] handle_mm_fault+0x14f8/0x2514 [ 81.786108][ T9127] __get_user_pages+0x8b4/0x15b8 [ 81.786118][ T9127] __gup_longterm_locked+0xa14/0xffc [ 81.786129][ T9127] gup_fast_fallback+0x19a0/0x1bcc [ 81.786140][ T9127] get_user_pages_fast+0x6c/0xa8 [ 81.786151][ T9127] madvise_do_behavior+0x16c/0x7c0 [ 81.786159][ T9127] do_madvise+0x28c/0x2f0 [ 81.786166][ T9127] __arm64_sys_madvise+0xac/0xc8 [ 81.786174][ T9127] invoke_syscall+0x98/0x244 [ 81.786186][ T9127] el0_svc_common+0xec/0x23c [ 81.786198][ T9127] do_el0_svc+0x4c/0x5c [ 81.786210][ T9127] el0_svc+0x64/0x260 [ 81.786226][ T9127] el0t_64_sync_handler+0x44/0x104 [ 81.786237][ T9127] el0t_64_sync+0x198/0x19c [ 81.850600][ T9136] loop1: detected capacity change from 0 to 128 [ 81.882298][ T9135] syzkaller1: entered allmulticast mode [ 82.054010][ T9164] macvlan1: entered promiscuous mode [ 82.059654][ T9164] macvlan1: left promiscuous mode [ 82.087737][ T9168] loop5: detected capacity change from 0 to 256 [ 82.626678][ T9233] loop1: detected capacity change from 0 to 512 [ 82.651182][ T9238] loop2: detected capacity change from 0 to 1024 [ 82.656817][ T9233] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a85ec018, mo2=0002] [ 82.656858][ T9233] System zones: 0-2, 18-18, 34-35 [ 82.657750][ T9233] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.667648][ T9238] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 82.690060][ T9238] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #3: block 1: comm syz.2.1255: lblock 1 mapped to illegal pblock 1 (length 1) [ 82.690107][ T9238] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 82.692218][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.695102][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 82.695112][ C0] EXT4-fs (loop2): initial error at time 82: ext4_map_blocks:833: inode 3: block 1 [ 82.695131][ C0] EXT4-fs (loop2): last error at time 82: ext4_map_blocks:833: inode 3: block 1 [ 82.703359][ T9238] Quota error (device loop2): write_blk: dquota write failed [ 82.709137][ T9238] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 82.709216][ T9238] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.1255: Failed to acquire dquot type 0 [ 82.709237][ T9238] loop2: lost filesystem error report for type 5 error -117 [ 82.714296][ T9238] EXT4-fs error (device loop2): ext4_free_blocks:6718: comm syz.2.1255: Freeing blocks not in datazone - block = 0, count = 4096 [ 82.714328][ T9238] loop2: lost filesystem error report for type 5 error -117 [ 82.723430][ T9238] EXT4-fs error (device loop2): ext4_read_inode_bitmap:141: comm syz.2.1255: Invalid inode bitmap blk 0 in block_group 0 [ 82.723477][ T9238] loop2: lost filesystem error report for type 5 error -117 [ 82.727658][ T39] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 82.727668][ T9238] EXT4-fs error (device loop2) in ext4_free_inode:363: Corrupt filesystem [ 82.727687][ T9238] loop2: lost filesystem error report for type 5 error -117 [ 82.727697][ T39] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 82.731443][ T39] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 82.731470][ T39] EXT4-fs error (device loop2): ext4_release_dquot:7077: comm kworker/u8:2: Failed to release dquot type 0 [ 82.731484][ T39] loop2: lost filesystem error report for type 5 error -117 [ 82.735020][ T9238] EXT4-fs (loop2): 1 orphan inode deleted [ 82.735521][ T9238] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.740018][ T9238] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.1255: Invalid block bitmap block 0 in block_group 0 [ 82.776561][ T7580] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.783028][ T9251] EXT4-fs: inline encryption not supported [ 82.805878][ T9251] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 82.807893][ T9251] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1258: invalid indirect mapped block 2683928664 (level 1) [ 82.807947][ T9251] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 82.808292][ T9251] EXT4-fs (loop1): 1 truncate cleaned up [ 82.812466][ T9251] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.822033][ T9251] EXT4-fs (loop1): shut down requested (2) [ 82.855296][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.001774][ T9276] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.049030][ T9285] mmap: syz.2.1265 (9285) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 83.131339][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.284707][ T9315] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.1274: inode has both inline data and extents flags [ 83.284747][ T9315] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 83.284842][ T9315] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.1274: couldn't read orphan inode 15 (err -117) [ 83.284855][ T9315] loop5: lost filesystem error report for type 5 error -117 [ 83.285372][ T9315] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.315365][ T7617] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.374231][ T4710] Bluetooth: hci5: command tx timeout [ 83.441964][ T9329] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.522287][ T7580] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.631115][ T9366] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 83.631163][ T9366] System zones: 1-3, 19-19, 35-36 [ 83.631737][ T9366] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 83.643938][ T9366] EXT4-fs warning (device loop1): verify_group_input:156: Last group not full [ 83.666972][ T4714] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 83.712485][ T9373] bcache: register_bcache() error : failed to open device [ 83.778668][ T9383] binder: 9382:9383 ioctl c0306201 20000540 returned -14 [ 83.861519][ T9392] EXT4-fs (loop3): Test dummy encryption mode enabled [ 83.863119][ T9392] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.948042][ T7381] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.189961][ T9434] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 84.684168][ T26] misc userio: Buffer overflowed, userio client isn't keeping up [ 84.743192][ T4401] 8021q: adding VLAN 0 to HW filter on device eth4 [ 84.912157][ T4401] 8021q: adding VLAN 0 to HW filter on device eth5 [ 85.058095][ T4401] 8021q: adding VLAN 0 to HW filter on device eth6 [ 85.199356][ T4401] 8021q: adding VLAN 0 to HW filter on device eth7 [ 85.464180][ T4710] Bluetooth: hci5: command tx timeout [ 85.737096][ T26] input: PS/2 Generic Mouse as /devices/serio1/input/input9 [ 85.954106][ T26] psmouse serio1: Failed to enable mouse on [ 86.172788][ T9609] set_capacity_and_notify: 7 callbacks suppressed [ 86.180639][ T9609] loop1: detected capacity change from 0 to 128 [ 87.577749][ T9413] psci: CPU1 killed (polled 0 ms) [ 87.608929][ T0] Detected PIPT I-cache on CPU1 [ 87.608968][ T0] GICv3: CPU1: found redistributor 1 region 0:0x00000000080c0000 [ 87.609147][ T0] CPU1: Booted secondary processor 0x0000000001 [0x410fd4f1] [ 92.683718][ T30] audit: type=1400 audit(92.650:13): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=4714 comm="syz-executor" saddr=10.128.0.169 src=30028 daddr=10.128.1.117 dest=51372 netif=enp0s0 [ 92.694780][ T9692] netlink: 428 bytes leftover after parsing attributes in process `syz.6.1333'. [ 92.694820][ T9692] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1333'. [ 92.700096][ T30] audit: type=1400 audit(92.670:14): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=15 comm="ksoftirqd/0" saddr=10.128.0.169 src=30028 daddr=10.128.1.117 dest=51372 netif=enp0s0 [ 92.707033][ T9693] loop2: detected capacity change from 0 to 2048 [ 92.710344][ T9695] loop5: detected capacity change from 0 to 512 [ 92.712149][ T30] audit: type=1400 audit(92.680:15): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=9694 comm="syz.5.1332" saddr=10.128.0.169 src=30028 daddr=10.128.1.117 dest=51372 netif=enp0s0 [ 92.719660][ T30] audit: type=1400 audit(92.690:16): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=9696 comm="dhcpcd-run-hook" saddr=10.128.0.169 src=30028 daddr=10.128.1.117 dest=51372 netif=enp0s0 [ 92.724223][ T30] audit: type=1400 audit(92.690:17): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=41 comm="pr/ttyAMA-1" saddr=10.128.0.169 src=30028 daddr=10.128.1.117 dest=51372 netif=enp0s0 [ 92.736569][ T30] audit: type=1400 audit(92.710:18): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=9698 comm="syz.1.1334" saddr=10.128.0.169 src=30028 daddr=10.128.1.117 dest=51372 netif=enp0s0 [ 92.741592][ T9699] loop1: detected capacity change from 0 to 256 [ 92.742230][ T9699] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 92.752897][ T9693] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.1331: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 92.756719][ T9693] EXT4-fs (loop2): Remounting filesystem read-only [ 92.763862][ T9699] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 92.770024][ T30] audit: type=1400 audit(92.740:19): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=12 comm="kworker/u8:0" saddr=10.128.0.169 src=30028 daddr=10.128.1.117 dest=51372 netif=enp0s0 [ 92.770067][ T30] audit: type=1400 audit(92.740:20): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=12 comm="kworker/u8:0" saddr=10.128.0.169 src=30028 daddr=10.128.1.117 dest=51372 netif=enp0s0 [ 92.810853][ T30] audit: type=1400 audit(92.780:21): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=4344 comm="udevd" saddr=10.128.0.169 src=30028 daddr=10.128.1.117 dest=51372 netif=enp0s0 [ 92.816189][ T30] audit: type=1400 audit(92.790:22): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=15 comm="ksoftirqd/0" saddr=10.128.0.169 src=30028 daddr=10.128.1.117 dest=51372 netif=enp0s0 [ 92.954271][ T4725] kernel read not supported for file /video9 (pid: 4725 comm: kworker/0:4) [ 92.964282][ T9742] loop3: detected capacity change from 0 to 256 [ 99.176701][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 99.176915][ T30] audit: type=1400 audit(99.150:39): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=0 comm="swapper/0" saddr=10.128.0.169 src=30028 daddr=10.128.1.117 dest=51372 netif=enp0s0 [ 99.454563][ T30] audit: type=1400 audit(99.430:40): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=12 comm="kworker/u8:0" saddr=10.128.0.169 src=30028 daddr=10.128.1.117 dest=51372 netif=enp0s0 [ 105.833763][ T30] audit: type=1400 audit(105.800:41): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=0 comm="swapper/0" saddr=10.128.0.169 src=30028 daddr=10.128.1.117 dest=51372 netif=enp0s0 [ 106.734832][ T30] audit: type=1400 audit(106.710:42): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=0 comm="swapper/0" saddr=10.128.0.169 src=30028 daddr=10.128.1.117 dest=51372 netif=enp0s0 [ 119.145666][ T30] audit: type=1400 audit(119.120:43): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=0 comm="swapper/0" saddr=10.128.0.169 src=30028 daddr=10.128.1.117 dest=51372 netif=enp0s0 [ 120.814846][ T30] audit: type=1400 audit(120.790:44): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=0 comm="swapper/0" saddr=10.128.0.169 src=30028 daddr=10.128.1.117 dest=51372 netif=enp0s0 [ 125.934498][ T1595] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.934547][ T1595] ieee802154 phy1 wpan1: encryption failed: -22 [ 125.964214][ T4398] nvme nvme0: controller is down; will reset: CSTS=0xffffffff, PCI_STATUS=0x10 [ 125.966486][ T4398] nvme nvme0: Does your device have a faulty power saving mode enabled? [ 125.966525][ T4398] nvme nvme0: Try "nvme_core.default_ps_max_latency_us=0 pcie_aspm=off pcie_port_pm=off" and report a bug [ 126.074855][ T1405] nvme 0000:00:02.0: enabling device (0000 -> 0002) [ 126.086990][ T1405] nvme nvme0: Disabling device after reset failure: -19 [ 126.136094 ** replaying previous printk message ** [ 126.136094][ T4404] non-slab/vmalloc memory [ 126.136124][ T4404] list_add corruption. prev->next should be next (ffff0000c8594040), but was ffff800094bd7aa0. (prev=ffff0000c8c2b648). [ 126.136264][ T4404] ------------[ cut here ]------------ [ 126.136268][ T4404] kernel BUG at lib/list_debug.c:34! [ 126.136350][ T4404] Internal error: Oops - BUG: 00000000f2000800 [#1] SMP [ 126.142848][ T4404] Dumping ftrace buffer: [ 126.143542][ T4404] (ftrace buffer empty) [ 126.144276][ T4404] Modules linked in: [ 126.144985][ T4404] CPU: 1 UID: 0 PID: 4404 Comm: kworker/1:1H Tainted: G L syzkaller #0 PREEMPT [ 126.146877][ T4404] Tainted: [L]=SOFTLOCKUP [ 126.147659][ T4404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 126.149448][ T4404] Workqueue: kblockd blk_mq_requeue_work [ 126.150453][ T4404] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 126.151824][ T4404] pc : __list_add_valid_or_report+0x144/0x148 [ 126.152858][ T4404] lr : __list_add_valid_or_report+0x144/0x148 [ 126.153910][ T4404] sp : ffff800094bd79f0 [ 126.154640][ T4404] x29: ffff800094bd79f0 x28: ffff0000c8c29a50 x27: ffff0000c8c29a48 [ 126.156184][ T4404] x26: 1fffe000190b2809 x25: ffff0000c8594040 x24: ffff0000c8594048 [ 126.157711][ T4404] x23: 1fffe000191856c9 x22: dfff800000000000 x21: ffff0000c8c29648 [ 126.159198][ T4404] x20: ffff0000c8c2b648 x19: ffff0000c8594040 x18: 00000000ffffffff [ 126.160594][ T4404] x17: 3034303439353863 x16: 3030303066666666 x15: 28207478656e2065 [ 126.162071][ T4404] x14: 6220646c756f6873 x13: 0000000000000001 x12: 0000000000000000 [ 126.163583][ T4404] x11: 0000000000000000 x10: 0000000000000002 x9 : cd1a5f67ac8d2f00 [ 126.165135][ T4404] x8 : cd1a5f67ac8d2f00 x7 : ffff80008048c60c x6 : 0000000000000000 [ 126.166697][ T4404] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008049731c [ 126.168200][ T4404] x2 : 0000000100000001 x1 : ffff0000c89657c0 x0 : 0000000000000075 [ 126.169585][ T4404] Call trace: [ 126.170143][ T4404] __list_add_valid_or_report+0x144/0x148 (P) [ 126.171184][ T4404] blk_mq_request_bypass_insert+0x130/0x1cc [ 126.172227][ T4404] blk_mq_requeue_work+0x3a4/0x52c [ 126.173124][ T4404] process_scheduled_works+0x788/0x10b8 [ 126.174127][ T4404] worker_thread+0x798/0xbd0 [ 126.174943][ T4404] kthread+0x304/0x3d4 [ 126.175694][ T4404] ret_from_fork+0x10/0x20 [ 126.176475][ T4404] Code: 91270000 aa1303e1 aa1403e3 979c2c73 (d4210000) [ 126.177707][ T4404] ---[ end trace 0000000000000000 ]--- [ 126.613672][ T4404] Kernel panic - not syncing: Oops - BUG: Fatal exception [ 126.614950][ T4404] SMP: stopping secondary CPUs [ 126.615774][ T4404] Dumping ftrace buffer: [ 126.616480][ T4404] (ftrace buffer empty) [ 126.617262][ T4404] Kernel Offset: disabled [ 126.618003][ T4404] CPU features: 0x14000000,003c0008,27020a02,a84ff6a7 [ 126.619166][ T4404] Memory Limit: none [ 127.034046][ T4404] Rebooting in 86400 seconds..