last executing test programs: 27.091723811s ago: executing program 3 (id=182): syz_usb_connect$hid(0x2, 0x0, 0x0, &(0x7f0000000840)={0x0, 0x0, 0xf, &(0x7f0000000080)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x1, 0x8, 0x2}]}}) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file1\x00'}) sync_file_range(r0, 0xe, 0xce69, 0x0) (async) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = socket(0x2, 0x3, 0xff) connect$inet(r1, &(0x7f00000000c0)={0x2, 0xfffd, @local}, 0x10) (async) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) (async, rerun: 32) r6 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r7 = socket$unix(0x1, 0x1, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002940)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffff7dfc, {0x0, 0x0, 0x0, r8, {0x10}, {0x60}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0xb3538085985bb3d6}, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0) (async) listen(r3, 0x7) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x40) (async) mount$tmpfs(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000280), 0x8400, &(0x7f00000005c0)={[{@quota}, {@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x31]}}, {@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x39]}}]}) (async) r10 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r10, 0x4001af84, &(0x7f00000001c0)) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r11, 0x29, 0x4b, &(0x7f0000000000), 0x4) (async) write$binfmt_elf32(r1, &(0x7f0000000080)=ANY=[], 0x14) 27.036809052s ago: executing program 3 (id=183): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a010200000000000000000200000009000200730008000440000000000900010073797a30000000000800034000000001"], 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x48494) 26.944412012s ago: executing program 3 (id=185): ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0x890b, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)={0x48, r1, 0x5, 0x4, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x400, 0x3, 0x4, 0x0, {0x8, 0x8, 0x0, 0x8, 0x0, 0x1, 0x0, 0x1}, 0x1, 0x200007, 0x4}}]}, 0x48}}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='children\x00') madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x5104200, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) pread64(r3, &(0x7f0000001400)=""/4108, 0x100c, 0x7) 26.842059044s ago: executing program 3 (id=189): r0 = socket$inet(0x2, 0x801, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x380070a, &(0x7f0000000280)={[{@user_xattr}, {@journal_dev={'journal_dev', 0x3d, 0xfb4}}, {@lazytime}, {@inlinecrypt}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x1}}]}, 0x2, 0x479, &(0x7f0000005d00)="$eJzs3M1vFOUfAPDvzLbAj7f2h/gColaJsfGlpQWVgxeNJh4wmugB9VTbQgiFGloTIUSqMXgxMSR6Vo8m/gXevBj1ZGLiSe+GhCgX0FPNzM5Ad9ltt+2yC+znk0x5np1nZ57vPvPMPDPPLgH0rKHsTxKxNSJ+j4iBara2wFD1n6uXz07+c/nsZBKLi6//leTlrlw+O1kWLd+3pcgMpxHpx0mxk1pzp88cn5iZmT5V5EfnT7w7Onf6zFPHTkwcnT46fXL84MED+8eefWb86bbEmcV1ZfcHs3t2vfzmhVcmD19456dvs/puLdYvjWNNNtz40lAW+N+Lufp1j8b/1rW7W822Jemkr4sVYVUqEZE1V3/e/weiEtcbbyBe+qirlQNuquzatLH56oVF4A6WRLdrAHRHeaHP7n/LpUNDj1vCpeerN0BZ3FeLpbqmL9KiTH/d/W07DUXE4YV/v8yWaMdzCACAFXw6+cWheLLR+C+Ne5aU217MoQxGxP8jYkdE3BUROyPi7oi87L0Rcd8q918/NXTj+Ce9uKbAWpSN/54r5rZqx3/l6C8GK0VuWx5/f3Lk2Mz0vuIzGY7+jVl+rOHWF/K/37/462fN9r90/Jct2f7LsWBRj4t9dQ/opibmJ/JBaRtc+jBid1+j+JNrMwFJROyKiN2r2/T2MnHs8W/2NCu0cvzLaMM80+LXEY9V238h6uIvJcvPT45uipnpfaPlUXGjn385/1qz/a8r/jbI2n9z7fFfrPnqdJEYfHvpfO1crHrm8vwfnzS9p1nr8b8heSM/H5XTru9PzM+fGovYkBzK8zWvj19/b5kvy2fxD+9t3P93FO/J2v/+iMgO4gci4sGIeKio+8MR8UhE7F0m/h9faL5uXe2/qaVSy8rin2p4/rt2/A8mNe2/+kTl+A/frT3+rP0P5Knh4pX8/LeCViu4ns8OAAAAbhdp/h34JB25lk7TkZHqd/h3xuZ0ZnZu/okjs++dnKp+V34w+tPySdfAkuehY8lCscVqfrx4Vlyu3188N/68Enl+ZHJ2ZqrLsUOv29Kk/2f+rHS7dsBN12gebbzBD9qAO099/09rs+de7WRlgI7ye23oXSv0/7RT9QA6z/Ufelej/n+uLm8uAO5Mrv/Qu/R/6F36P/Suuv5fid+6VROgg9bzu36J2yURC+3fcqTdj6vVROv/H8TNTrx1a1SjhUS3z0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADt8V8AAAD//6Sd8Hs=") r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000340)={0x2000, r2}, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000080)={0x2c, r4, 0x1, 0x0, 0x800000, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan0\x00'}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000040)="ee", 0x1, 0x20004010, 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/packet\x00') read$FUSE(r5, &(0x7f0000001000)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x4000, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') mount$bpf(0x0, &(0x7f0000003040)='./file0\x00', &(0x7f0000003080), 0x8080, &(0x7f0000000000)={[{@gid={'gid', 0x3d, r8}}, {@uid={'uid', 0x3d, r7}}]}) read$char_usb(r9, &(0x7f0000000140)=""/4096, 0x1000) splice(r0, 0x0, r6, 0x0, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={r5, 0x20, &(0x7f00000004c0)={&(0x7f00000002c0)=""/208, 0xd0, 0x0, &(0x7f00000003c0)=""/214, 0xd6}}, 0x10) io_uring_setup(0x694, &(0x7f00000030c0)={0x0, 0x5628, 0x400, 0x0, 0x90, 0x0, r5}) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x12, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0xe4d}}, &(0x7f00000000c0)='GPL\x00', 0x800, 0xa5, &(0x7f0000000140)=""/165, 0x40f00, 0x0, '\x00', r10, @cgroup_sock_addr=0x14, r6, 0x8, &(0x7f0000000240)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xd, 0x6, 0x9}, 0x10, r11, r5, 0x3, &(0x7f0000000540)=[r6, r5, r5], &(0x7f0000000580)=[{0x0, 0x4, 0xd, 0x7}, {0x2, 0x2, 0xa, 0x5}, {0x3, 0x2, 0xc, 0x4}], 0x10, 0x2}, 0x94) 26.220457332s ago: executing program 3 (id=190): r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x4, 0x0, &(0x7f0000000200)) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r2, &(0x7f0000000280)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) listen(r2, 0x1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) getgroups(0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') getdents64(r5, &(0x7f0000000080)=""/38, 0x26) getdents64(r5, &(0x7f0000002f80)=""/4096, 0xfde0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='@@\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd7000fddbdf250b00000008000300", @ANYRES32=r9, @ANYBLOB="18005080110001002d80d91a159237391b343784e10000000a0006000802110000000000"], 0x40}, 0x1, 0x0, 0x0, 0x40084}, 0x20000080) sendmsg$NL80211_CMD_ASSOCIATE(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, r3, 0x204, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x1, 0x14}}}}, [@NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x400, {0x6, 0xa, 0xfffe, 0x8}}}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_USE_RRM={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0xc4) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 25.968022955s ago: executing program 3 (id=194): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000180000000000000000000000711207000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 25.921732074s ago: executing program 32 (id=194): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000180000000000000000000000711207000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.24425711s ago: executing program 1 (id=467): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) (async) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) (async) r3 = syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000680)='./file0\x00', 0x12148c5, &(0x7f0000000540)={[{@shortname_mixed}, {@fat=@time_offset={'time_offset', 0x3d, 0x30a}}, {@utf8}, {@utf8}, {@uni_xlateno}, {@rodir}, {@fat=@usefree}, {@uni_xlate}, {@shortname_mixed}, {@fat=@errors_continue}, {@nonumtail}, {@fat=@umask={'umask', 0x3d, 0x8}}, {@uni_xlate}, {@numtail}]}, 0x0, 0x2d5, &(0x7f0000000ac0)="$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") (async) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) ioctl$FAT_IOCTL_GET_VOLUME_ID(r3, 0x80047213, &(0x7f0000000180)) r4 = syz_open_dev$dvb_frontend(&(0x7f0000000380), 0x0, 0x0) ioctl$FE_GET_EVENT(r4, 0xbfffffff, &(0x7f0000000500)={0x0, {0x0, 0x0, @ofdm}}) timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {r1, r2+10000000}}, &(0x7f0000000180)) (async) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8f, 0x3}) (async, rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000ac0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r6, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x46b2d3ba8e12a610}, 0x4000) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r8, 0x112, 0xb, 0xfffffffffffffffe, 0x17) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x8, 0x2, &(0x7f0000000040)=@raw=[@alu={0x7, 0x0, 0xa, 0x1, 0x0, 0x0, 0x1}, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}], &(0x7f0000000000)='syzkaller\x00', 0x4}, 0x94) 2.526323076s ago: executing program 0 (id=469): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="780000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="0815010021100000580012800b000100697036746e6c000048000280080007000400000014000200fc01000000000000000000000000000114000300fe88000000000000000000000000010105000900040000000400130008000100", @ANYRES32], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x40000c0) 2.45623936s ago: executing program 1 (id=471): r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000580)='system.posix_acl_access\x00', &(0x7f00000006c0)={{}, {}, [], {0x4, 0x1}, [{0x8, 0x3}], {0x10, 0x3}, {0x20, 0x2}}, 0x2c, 0x1) setuid(0xee00) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) unshare(0x400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x6, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x28}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000020303000000000000080000000000000800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000020301040000000000000000000040200800010001"], 0x1c}}, 0x0) close(r3) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240)={0x10001b, 0xfa, 0x0, {r2}}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r1, 0x2000012, 0x8ff, 0x0, &(0x7f0000000080)="2e4ceced000222e02df633c9e9b9", 0x0, 0x7ffe, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2}, 0x50) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=@ipv6_newaddrlabel={0x38, 0x48, 0x3, 0x0, 0x0, {}, [@IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x38}}, 0x0) 2.385173746s ago: executing program 1 (id=473): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040)={0x0, 0x0, 0x1}, 0x1b, 0x0, 0xffffffffffffffff, 0xd}, 0x48) r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') read$FUSE(r0, &(0x7f0000002d40)={0x2020}, 0x2020) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x38, r2, 0x1b, 0x0, 0x3, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x38}}, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000540)={[{@nojournal_checksum}, {@test_dummy_encryption_v1}]}, 0x1, 0x5bc, &(0x7f0000001440)="$eJzs3V2IXGcdB+D/md1N87E1H7Zqa2xWQ20gdGez2YREvLDEj1qTWlG8CIWwZKe7IbM7a3YD3algizeiIII3IggVe2FFNJCbSqntRYs3Ckr9oKIxoIIIRSsFEdSRdz620+akCe7uHJrzPHBm3/Oe2X3f2eE355w57zkngNIaSw9ZxGhEXIyI7Z3Z1z9hrPOjefDCXJqyaLU+/bes/byZgxfmek/t/d629DAcsTkidh3LYu/Ile0urTTPTtfrtXPd+ery/GJ1aaV595n56dnabG3h0JGpo5OHp45Mrd9rnfjZ1lv/fOf9l594/p///tZvDv8g9Xe0u6z/dayXsRjr/k9GYmdf/XAWcd96N1aQoc5bHXf21WXDBXaI69Zq7fp+ev/eHhF72/nfHkPRefNeevrBf2yPX91bdB+BjdPqyV/8Sgu4YVXa28BZZTwiOuVKZXy8sw1/S2yt1BtLy/sfapxfmOlsK++IkcpDZ+q1ie6+wo4YydL8gXb5tfnJN8wfjGhvA39paEt7fvx0oz4z6A87oG004tLFz53etO0N+f/LUCf/wI0r5f+XLzz1bCq/OlR0b4BBSvn/3qvznwj5h9KRfygv+Yfykn8oL/mH8pJ/KC/5h/KSfygv+Yfykn8or17+HzhxIh44caLV7J7/vtCYPXN2bvHo5MT4/PnT46cb5xbHZxuN2fYZO/PX/rv1RmPxwGScf7i6XFtari6tNE/NN84vLJ9qn9d/qpZzKQCgACcvb75v557nXsoi4tEPbGlPyabuclmFG1urlUXR5yADxbDrD+XlUm1QXvbxgewayzdfbUF9/fsCDEal6A4AhbnrNsf/oKx8/w/l5ft/KC/b+IDv/6F8fP8P5TV6lft/3dx3766JiHhbRPx0aOSm3r2+gLeU1+3qj0ZcuvSdz1ZX78OtoKCgsFoo7oMKGIzXQl90T4CizBy8MNebBtXmM7ODagnI8/I9nUFAKffN7tRZMrx6bGBkg8YJ7bwjPf7o94/vmxtKU3Q/hzagKSDHo49FxLvy1v9Z+9jAju7zdnWeFrdExK0R8Y6IeOca2/7GpyLG4oVaf538w+Bcb/5vi4i0ur49It4dEbsj4j1rbPsXF1P+f72lv07+oRw+/3zRPQCK8vGniu4BUJSTxhhAaX33kaJ7ABTl6R8W3QOgKF99segeQLk9d09ETOQd/6u0j/f3jHSvC3hT91oAWyJia0Rs655DeHP3HMHtfccMr+XUJyPG4o4f99c5/geD0xv/17xi/F9ldfzfUETsWUMbz3xw9Ct59dO7U/6feKQ3/i9Nqf3eWEBgY738WMTtufnPVsf8ZpFyGvHe/7ONsS9cfjKv/sX7098d+bn8QzFa3454f+TnvyeVqsvzi9Wllebd7ft4z9YWDh2ZOjp5eOrIVLV9iZBq70IhOY7//ZX9efW/m0z5/+Yh+YdipPX/1qvkv3/7/31raOPY1798Mq9+9I8p/7ufffP8V/66KftMe753X4KHp5eXzx2I2JQdv7J+cg0dhRtcLyO9DKX879ubv/+/q/s7af1/LCI+nLYXIuI/EfHfiPhIRHw0Ij4WEfe+SZtfu2v2cl79H55M+X/8rPU/FCPlf+Ya6//0819raGP/vp98Ma/+Q3tS/sd/+6fjDw6nSf4BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1t/SSvPsdL1eO7eBhaJfIwAAAAAAAJTF/wIAAP//d8Uzog==") symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181341, 0x84) symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x28541, 0x140) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x3c, r2, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x800}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x7}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x1}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20}, 0x80) 2.37276697s ago: executing program 0 (id=474): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x801, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x62404}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r0}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) syz_read_part_table(0x63b, &(0x7f0000000640)="$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") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0xf0, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@dev, 0x0, 0x2b}, @in=@multicast2, {0x0, 0x0, 0x2}, {0x0, 0x200001, 0x7}, {0x40000}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}}, 0xf0}}, 0x0) r2 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) setns(r2, 0x4000000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x801, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x62404}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r0}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) (async) syz_read_part_table(0x63b, &(0x7f0000000640)="$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") (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0xf0, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@dev, 0x0, 0x2b}, @in=@multicast2, {0x0, 0x0, 0x2}, {0x0, 0x200001, 0x7}, {0x40000}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}}, 0xf0}}, 0x0) (async) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) (async) connect$unix(r3, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) (async) setns(r2, 0x4000000) (async) 1.911339688s ago: executing program 0 (id=478): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r0) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) 1.863931105s ago: executing program 1 (id=480): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x0, 0x2}}]}}, 0x0, 0x46}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000080000000000000001000084060000000000000001"], &(0x7f0000000240)=""/171, 0x42, 0xab, 0x3}, 0x20) write$eventfd(r0, &(0x7f0000000140)=0x8000000000000000, 0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x204092, &(0x7f0000000200), 0x6, 0x515, &(0x7f0000000c00)="$eJzs3V1PY3kZAPDnlHYGdtGyu16smziL+xLG6BRY9oV4sS6JL1ebGNd7BqEQQqETKLsDmSjzCTRmoibe6JU3Jn4AEzMfwZhMondeeKWZKONceGNqTns6A6XFTqa0M/D7JYfzP/8/Pc/zFFrOGz0BXFiTEfFRRIxExNsRUcz6c9kUB80p/b4Hh7eW0ymJev2TfyaRZH3t63wxe1jqe9+J+EFyMu7O3v7GUqVS3j7evX9tfXNprbxW3pqbm31//oP59+ZneqwkyZ82+lJEfPjNhz/78W++/eEfvvbZ3xb/cfWHaVrXs/FOdfRDs/RCjB5bPj/S35t8o0IAAJ4Hr0TEyxHxRkR8JYoxEqduRgMAAADPofo3xi+3mgAAAMD5lIuI8Uhypex63/HI5Uql5jW8X4gXcpXqTu2rq9XdrZV0LGIiCrnV9Up5JrtWeCIKSbo822g/Xn6nbXkuuwb3TnEsXW6MAQAAAIOx0Lb//7DY3P8HAAAAzpnOJ+NHBp4HAAAAcHZcjA8AAADnn/1/AAAAONe++/HH6VR/cHircR+AlU/3djeqn15bKe9slDZ3l0vL1e0bpbVqda1SLvXwHwGVavXGu7G1e3O6lt+pTe/s7S9uVne3aouN+3ovll8eQE0AAADAcS+9fvcvSUQcfH2sMaUuZWOFoWYGPEOSfFvH9S8PKROgLzoc0h879QGTu2eXDDBQ7X/TgYvDPj6QtHe0bRiMdttU+GN7x5X/G8s2BwAADMfUF53/h4sqN+wEgKH5yYmeS0PJAxi8no/FT55tHsDgFdzmDy68E+f/24x2Gzhx/r+bev2JEgIAAPpuvDk7iOxc4HjkcqXSo9OCyep6pTwTEZ+PiD8XC5fT5dkh5gsAAAAAAAAAAAAAAAAAAAAAAAAAz6N6PYk6AAAAcK5F5P6eZPf/miq+Nd5+fOBS8p9iZHcF/uyXn/z85lKttj2b9v/rUX/tF1n/O8M4ggEAAAAXUeHU0dZ+ems/HgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD66cHhreXWNMi49xdiLCY6xc/HaGM+GoWIeOHfSeSPPC6JiJE+xD+4HRGvdoqfpGnFRJZFe/xcRIwNOf6LfYgPF9ndhYj4qNPrLxeTjXnn118+m57W/YXGi7xj/Nb730iX97/P9RjjtXu/m+4a/3bEa/mT8ccjeRQ/6RL/zR7jX//+/n63sfqvI6Y6/v1JmrNc9o21zRvTO3v719Y3l9bKa+WtubnZ9+c/mH9vfmZ6db1Szr52jPHTL/3+4E7X+psBjsZv1TnRzPBH3ep/q8f6/3vv5uErzWbhZPyIq292/vm/2ph3fv7T34m3s6cnHZ9qtQ+a7aOu/PZPV7rllsZf6fL8N3/+xfrj+Plj9V/trfyjNf+qt4cAAGdpZ29/Y6lSKW8PoPHGu/1bYdJopFtBA0p+2I3WwY5nJZ/R4US/HMOt/VtPvZ7W5vDTrOevfasr3WfoPDTENyUAAOBMPN7oH3YmAAAAAAAAAAAAAAAAAAAAcHE1/v9/5Ak/CPD1J/uksfaYB8MpFQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgVP8LAAD//9WHwV0=") r1 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000000)={0xa, @sliced={0x3, [0xf, 0x100, 0x7, 0x9, 0x5, 0x8, 0xf01b, 0x9, 0x3, 0x8, 0x4, 0x1000, 0x3, 0x49bd, 0xffff, 0x5, 0x6, 0xf711, 0xff81, 0x0, 0x7092, 0x6, 0x0, 0x2, 0x5, 0x7ff, 0x78c6, 0xc, 0x9, 0xfff9, 0x40, 0x8, 0x1, 0x7ff, 0x9, 0x0, 0x2, 0x6, 0x8001, 0x7ff, 0x400, 0x2, 0x2, 0x4, 0x0, 0x3, 0x9, 0x4], 0x56e}}) 1.752132402s ago: executing program 0 (id=481): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f00000010c0)=[{{&(0x7f0000000c00)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000c80)=""/125, 0x7d}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f0000000340)}], 0x3, &(0x7f0000000d40)=""/19, 0x13}, 0x4}, {{&(0x7f0000000d80)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000000f80)=[{&(0x7f0000001b00)=""/4096, 0x1000}, {&(0x7f0000000e00)=""/69, 0x96}, {&(0x7f0000000e80)=""/252, 0xfc}], 0x3, &(0x7f0000000fc0)=""/193, 0xc1}}], 0x2, 0x4000002b, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000000000000700000a28000000060a030000000000000000000300000308000b40000000040900010073797a300000000014"], 0x50}, 0x1, 0x0, 0x0, 0x24040890}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000200)=ANY=[@ANYRES16=r1], &(0x7f0000000040)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x94) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r5, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000040)={'lo\x00', {0x2, 0x4e22, @empty}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xa) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @empty, 0x3}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) 1.750705979s ago: executing program 1 (id=482): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r1, r0, 0x15, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x30) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r2, 0x6, 0x24, 0x0, &(0x7f0000002000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x2000, 0x2, 0x3}, 0x18, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000340)={0x2000, r4}, 0x0) landlock_restrict_self(r3, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x0) 1.715890381s ago: executing program 1 (id=484): msgctl$MSG_INFO(0x0, 0xc, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x1827ad6, &(0x7f0000000280)=ANY=[], 0x1, 0x334, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000000)={@desc={0x1, 0x0, @desc3}}) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x8) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r2 = accept4(r1, 0x0, &(0x7f0000000100), 0x80000) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x43, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x106, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0xb) r3 = getpid() r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(r3, 0x3, &(0x7f0000000140)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f00000003c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x1235000, 0x1000, 0x3, 0x1}, 0x20) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 1.412522206s ago: executing program 2 (id=488): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x9) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000000), 0x14001c, &(0x7f0000000380)=ANY=[]) close(0x3) 1.396746993s ago: executing program 2 (id=489): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) recvmsg$inet_nvme(r1, &(0x7f0000000580)={&(0x7f0000000100)=@tipc, 0x80, &(0x7f0000000480)=[{&(0x7f0000000180)=""/139, 0x8b}, {&(0x7f0000000240)=""/247, 0xf7}, {&(0x7f0000000340)=""/23, 0x17}, {&(0x7f0000000380)=""/198, 0xc6}], 0x4, &(0x7f00000004c0)=""/173, 0xad}, 0x40000000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x3, 0x84}}}, 0xd4}, 0x1, 0x0, 0x0, 0xc800}, 0x0) 1.283875995s ago: executing program 2 (id=491): mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x100000c, 0x31, 0xffffffffffffffff, 0x61333000) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x200}, [@call={0x85, 0x0, 0x0, 0x41}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x88440) (async) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x88440) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) (async) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) syz_usb_connect$uac1(0x0, 0xaa, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x249c, 0x9008, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x98, 0x3, 0x1, 0x7f, 0x80, 0x3e, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xfff8, 0x28}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x300, 0x5, 0x3, 0xb5}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x403, 0x6, 0x3, 0x8}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x205, 0x3, 0xb, 0x9, 0x5, 0x8}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x6, 0x8, 0x8, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x9, 0x4, 0x8, {0x7, 0x25, 0x1, 0x4, 0x1, 0x80}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x4, 0x3, 0x1002}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x80, 0xff, 0x5, 0xa8, 0x40}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x3, 0x2, 0x81, {0x7, 0x25, 0x1, 0xc, 0x28, 0x3b}}}}}}}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x6, 0x8, 0x0, 0xff, 0x1}, 0xb, &(0x7f0000000240)={0x5, 0xf, 0xb, 0x2, [@ext_cap={0x0, 0x10, 0x2, 0x1a, 0x8, 0x0, 0x8003}, @ptm_cap={0x3}]}, 0x1, [{0xfffffffffffffe2b, &(0x7f0000000180)=@lang_id={0x0, 0x3, 0x415}}]}) 1.184356752s ago: executing program 5 (id=492): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x27, 0x1, 0x3f9) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x2a}, @in=@multicast2, 0x4e22, 0x8, 0x4e21, 0x9a, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x1, 0x3, 0x80000001, 0x0, 0xfffffffffffffffa, 0x4, 0x5, 0x9}, {0x2, 0x1d4509b6, 0x62, 0x9}, 0xd, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@empty, 0x4d4, 0x33}, 0xa, @in=@rand_addr=0x64010100, 0x34ff, 0x1, 0x0, 0x8, 0x839, 0x6, 0x3}}, 0xe8) (async) r1 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0], 0x2, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x9, 0x1, 0x6}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0xabd7, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f00000004c0)={0x1, 0x0, &(0x7f0000000280)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r5, 0xc01864ba, &(0x7f0000000540)={0x9, 0x0, r6, 0xb0b0b0b0}) (async) r7 = syz_open_dev$dri(&(0x7f0000003700), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r7, 0xc02064b6, &(0x7f00000001c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r9 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r9, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r10}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r9, 0xc01064ab, &(0x7f0000000380)={0x1, r11, r10}) (async) r12 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r12, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r12, 0xc06864a1, &(0x7f0000000340)={0x0, 0x30, r13}) (async) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r5, 0xc01864b0, &(0x7f00000006c0)={r13, r3, 0x8, 0xb65, 0x2d7}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r9, 0xc01064ab, &(0x7f0000000080)={0x0, r11, r10}) (async, rerun: 32) r14 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r14, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) r15 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r15, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r15, 0xc02064b9, &(0x7f0000000280)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000280), 0x2, r16}) ioctl$DRM_IOCTL_MODE_ATOMIC(r14, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000380)=[r16], &(0x7f00000003c0)=[0x10], &(0x7f0000000d00)=[r17], &(0x7f00000001c0), 0x0, 0xff}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000580)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[{}, {}, {}], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x3, 0x6, 0x8}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000680)={0x600, 0x5, &(0x7f0000000340)=[r2, r4, r6, r8, r11], &(0x7f0000000380)=[0x6, 0x9], &(0x7f0000000600)=[r17, 0x0, r18], &(0x7f0000000640)=[0x92, 0xfffffffffffffff8, 0x6, 0x4, 0x8, 0x2], 0x0, 0x5}) 1.144952273s ago: executing program 5 (id=494): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x28, r2, 0x1, 0x4, 0x2, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x4, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x404c890}, 0x14) 1.044406568s ago: executing program 5 (id=496): munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) set_mempolicy_home_node(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) r1 = syz_clone(0x211, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYBLOB="c1bd158743c677db610b73ea5b5c067902a31ddaafd3131d9b98b2a7b3a8fc34421e1e2b4b3f4d36fa924d", @ANYBLOB="04022abd7000fbdbdf256c0000000c00990005000000350000000800270002000000080022014601000008002600940900000800220180010000080026006c0900f4040019010500000042526e5dcc51856512"], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x20008844) ptrace(0x10, r1) ptrace$setregset(0x4205, r1, 0x1, &(0x7f0000000080)={&(0x7f0000001340)="40b2593feb8a8744cb00c9ccf8b54554e274c4b1c0457c8fa0e9e87b8ed0902aabb86ef5616722f28dc046b4c68fa6761f67c1ff22cbfec9f60dbc564222641917fab09707e0975fa39355929567ec1fcf9e3fee3f7f624182784f1d861014eb18c45fba980c45d9eb7b8de144f8ea710a74194f6ca85a25f28b1b60d2d817ab", 0x80}) 914.509896ms ago: executing program 0 (id=497): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000083c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0xe15, 0x5069f481, 0x8, 0x7fff, 0x0, 0x800, 0x0, 0x0, 0x20}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000002100)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x0, 0xffffffffffffffff, {0x0, 0x69bc1112d1e15c49}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x151002, 0xc1) write$FUSE_LSEEK(r2, &(0x7f0000006140)={0x18, 0x0, 0x0, {0x1}}, 0x18) 877.03397ms ago: executing program 5 (id=498): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file2\x00', 0x2800000, &(0x7f00000003c0)={[{@debug}, {@jqfmt_vfsv0}, {@inlinecrypt}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@nodelalloc}, {@norecovery}, {@delalloc}, {@nogrpid}, {@minixdf}]}, 0x1, 0xbdb, &(0x7f0000001000)="$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") r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000005780)='./file0\x00', 0x9400002f) socket$pppl2tp(0x18, 0x1, 0x1) setxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', 0x0, 0x0, 0x3) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x3, 0xfffffffffffffffe, &(0x7f00000000c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='sched\x00') pread64(r2, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000019200)=0xc) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000019240)={0x0, 0x0, 0x0}, &(0x7f0000019280)=0xc) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x2200000, &(0x7f00000192c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@default_permissions}, {@blksize={'blksize', 0x3d, 0x1000}}], [{@hash}, {@measure}, {@dont_appraise}, {@euid_lt={'euid<', 0xee01}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@smackfshat={'smackfshat', 0x3d, '\x00'}}]}}, 0x1, 0x0, &(0x7f00000193c0)="3b0b9803ce99f90a6e937a85694f255f7e9b2cd9f742835e9102705a83ca47b13780300e10853d39416fa77aab6219476619078643739ea7345eafd10ef5a94d21fba9b425465c79206f75c4311617ea47d0389a884a51bf00d4832b48b4") 708.088669ms ago: executing program 5 (id=499): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x740242, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc0205647, &(0x7f0000000040)={0xf010000, 0x200000}) 684.247214ms ago: executing program 5 (id=500): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4004) (async) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) (async) getpid() (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f00000001c0)=0xc) sched_setscheduler(r0, 0x5, &(0x7f0000000200)=0x962) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r6, 0x89a2, &(0x7f0000000000)='bridge0\x00') (async) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) (async) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r7, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) 495.249283ms ago: executing program 2 (id=501): r0 = socket(0x10, 0x3, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) (async) socket$igmp(0x2, 0x3, 0x2) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) (async) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async) r4 = fsmount(r3, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r2, r4}, 0x10) (async, rerun: 64) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (rerun: 64) setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) socket$igmp(0x2, 0x3, 0x2) (async, rerun: 64) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) (rerun: 64) r6 = io_uring_setup(0x2675, &(0x7f0000000080)) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) io_uring_register$IORING_REGISTER_FILES2(r6, 0xf, &(0x7f0000000040)={0x46, 0x1, 0x0, 0x0, 0x0}, 0x20) (async) lseek(r1, 0x200, 0x1) (async) getdents64(r1, 0x0, 0x0) (async) unshare(0x48080000) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e22, 0x400, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}}, 0xed, 0x4, 0xb5, 0x7, 0x20, 0x7, 0x8}, &(0x7f00000001c0)=0x9c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000002c0)={r7, 0x84, &(0x7f0000000200)=[@in6={0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x50000}, @in6={0xa, 0x4e20, 0x6, @private2}, @in={0x2, 0x4e21, @rand_addr=0x64010102}, @in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e21, 0x2, @empty, 0x5}, @in={0x2, 0x4e23, @loopback}]}, &(0x7f0000000300)=0x10) (async, rerun: 64) getsockopt$WPAN_WANTACK(r1, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000080)=0x4) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_GETENCODER(r1, 0xc01464a6, &(0x7f0000000340)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r1, 0xc02064a4, &(0x7f0000000440)={r8, 0x9, &(0x7f0000000380)=[0x200, 0x3, 0x9, 0x7ff, 0x7, 0x6, 0x9, 0x9, 0xfff8], &(0x7f00000003c0)=[0x6, 0x1, 0x5, 0xb0, 0x2, 0x6, 0x5], &(0x7f0000000400)=[0x19, 0x6]}) (async) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYRESHEX=r1, @ANYRESOCT=r0, @ANYBLOB="08001a00", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES64=r0, @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB="08001b"], 0x18c0}}, 0x0) 412.422315ms ago: executing program 2 (id=502): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r0, &(0x7f0000000240)='\x00', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x7, 0x84, 0x2, 0x5, 0x5, 0xf2, 0x0, 0x0, 0xfa, 0x2, 0x3, 0x6, 0x2, 0x2}, 0xe) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000)=0x81, 0x4) recvmmsg(r0, &(0x7f0000000840)=[{{&(0x7f0000000700)=@un=@abs, 0x80, &(0x7f0000003880)=[{&(0x7f0000000300)=""/174, 0xae}, {&(0x7f00000003c0)=""/75, 0x4b}, {&(0x7f0000000080)}, {&(0x7f0000000180)=""/48, 0x30}, {&(0x7f0000000440)=""/242, 0xf2}, {&(0x7f0000000b00)=""/240}, {&(0x7f0000002880)=""/4096}], 0x5, &(0x7f0000000200)=""/24, 0x18}, 0x6}, {{&(0x7f00000005c0)=@xdp, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000640)=""/52, 0x3c}, {&(0x7f0000000680)=""/110, 0xffcd}, {&(0x7f0000000940)=""/97, 0x61}, {&(0x7f0000000780)=""/83, 0x53}, {&(0x7f00000009c0)=""/184, 0xb8}], 0x5, &(0x7f0000001880)=""/4096, 0x1000}, 0xf8d}], 0x2, 0x40012141, 0x0) 410.385ms ago: executing program 4 (id=503): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001900010028bd7000fcdbdf251d01020008000900", @ANYRES32, @ANYBLOB='\b\x00\n', @ANYRES8=r0, @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x4008844}, 0x30004016) 404.300372ms ago: executing program 2 (id=504): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(xtea)\x00'}, 0x58) syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000040)=ANY=[@ANYBLOB="12010003000000103d10000140000102030109026e000301d8100c080b"], 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="70020000", @ANYRES16=r5, @ANYBLOB="0f0700000000000000006700000048000e00", @ANYBLOB='H'], 0x270}, 0x1, 0x0, 0x0, 0x44810}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x1405, 0x201, 0x0, 0x0, "", [{{0x8}, {0x8, 0x5}}]}, 0x20}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xffff, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x400, 0x10000000, 0x7fff, 0x4}, 0x4}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x11}}]}, 0x90}}, 0x4004084) 386.777833ms ago: executing program 4 (id=505): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000001d711861000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x4a5, &(0x7f0000000bc0)="$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") (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x5031, 0xffffffffffffffff, 0xc2dcc000) (async) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) (async) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='erofs\x00', 0x2020c80, &(0x7f0000000300)='overlay\x00') mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x121542, 0x60) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000080000000800000002"], 0x50) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x800000}, 0x20) connect$l2tp6(r2, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) (async) sendmmsg$inet6(r2, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), r3) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001600)=@filter={'filter\x00', 0xe, 0x5, 0x566, [0x0, 0x20001080, 0x2000117e, 0x200013e2], 0x0, &(0x7f0000000340), &(0x7f0000001080)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x1, [{0x3, 0x45, 0x10, 'erspan0\x00', 'team0\x00', '\x00', 'veth0_virt_wifi\x00', @broadcast, [0xff, 0xff, 0x0, 0x0, 0x0, 0xff], @random="fe802630a0f0", [0x0, 0x0, 0xff, 0x0, 0xff], 0x9e, 0x9e, 0xce, [@pkttype={{'pkttype\x00', 0x0, 0x8}, {{0x5}}}], [], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x2}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x2, [{0x9, 0x88, 0x1a, 'wlan1\x00', 'veth1_to_bond\x00', 'wg0\x00', 'team_slave_0\x00', @random="dab778f16c2f", [0xa6a23cd684118f47, 0x0, 0xff, 0x0, 0xff, 0xff], @broadcast, [0xff, 0xff, 0x0, 0xff], 0x6e, 0xd6, 0x10e, [], [@common=@dnat={'dnat\x00', 0x10, {{@empty, 0xfffffffffffffffd}}}, @common=@AUDIT={'AUDIT\x00', 0x8}], @common=@dnat={'dnat\x00', 0x10, {{@remote, 0xffffffffffffffff}}}}, {0x5, 0x40, 0x22eb, 'ip6erspan0\x00', 'macvtap0\x00', 'macsec0\x00', 'bridge_slave_0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, [0xff, 0x0, 0x0, 0xff, 0xff], @multicast, [0x0, 0x0, 0x0, 0x0, 0xff, 0xff], 0xae, 0xae, 0x126, [@quota={{'quota\x00', 0x0, 0x18}, {{0x0, 0x0, 0x4, {0xfffffffffffffffe}}}}], [], @common=@NFLOG={'NFLOG\x00', 0x50, {{0xff, 0x200, 0x0, 0x1, 0x0, "49772bf81f26d88c2603a7358601830a553c6112b8bd014d1966e3acb0812331707610e4cfea97acafa74422eb8af672952ed05a34394f6c7f2a0859b20f406a"}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffe, 0x2, [{0x5, 0x50, 0x0, 'vlan0\x00', 'veth0_vlan\x00', 'macvlan0\x00', 'rose0\x00', @multicast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], 0x106, 0x106, 0x136, [@helper={{'helper\x00', 0x0, 0x28}, {{0x0, 'snmp_trap\x00'}}}, @ip={{'ip\x00', 0x0, 0x20}, {{@multicast1, @remote, 0x0, 0x0, 0x6, 0x21, 0x2, 0x1, 0x4e20, 0x4e20, 0x4e20, 0x4e21}}}], [], @common=@redirect={'redirect\x00', 0x8, {{0xffffffffffffffff}}}}, {0x5, 0x0, 0x9, 'caif0\x00', 'hsr0\x00', 'syz_tun\x00', 'wlan0\x00', @remote, [0x0, 0xff, 0xff, 0xff], @random="4b5b8da95080", [0xff, 0xff, 0x0, 0x0, 0x9c07995ee25df066], 0x6e, 0x6e, 0x9e, [], [], @common=@STANDARD={'\x00', 0x8}}]}]}, 0x5de) (async) sendmsg$DEVLINK_CMD_SB_GET(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000780)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="00006194926c980f26bd7000fcdb"], 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4000010) (async, rerun: 32) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r1, &(0x7f0000000300), 0x0}, 0x20) (rerun: 32) 268.479671ms ago: executing program 4 (id=506): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/packet\x00') read$FUSE(r0, &(0x7f0000001000)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x4000, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0) (async) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x4000, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') mount$bpf(0x0, &(0x7f0000003040)='./file0\x00', &(0x7f0000003080), 0x8080, &(0x7f0000000000)={[{@gid={'gid', 0x3d, r2}}, {@uid={'uid', 0x3d, r1}}]}) read$char_usb(r3, &(0x7f0000000140)=""/4096, 0x1000) (async) read$char_usb(r3, &(0x7f0000000140)=""/4096, 0x1000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003640)={&(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000003580)=[{&(0x7f00000030c0)="6c944d3738384584aebb04d60159b48c20dc4849472a8588f69f8b0418364e7d9b5eb515c510c692bef16f701539a3dcffe137836e2dbaf788c6facd42070ad98f4fda6596d459fe820b4b19d80f65aa9c0ca8b64ac586756e1b4e069b4e49771b61a5522c272e60b0808c4c61193d59e77e57b95798a9bdfde3c97146221d7c9fc2f365cb353820fdbe24a7cc5c4b5ed6f2a99c2ba6295cb6a7db0e235eaf21ef46f28fbd144ba15a25406dda52d69469f9e88654507fd2d813fb9c04a28441d0eaf74bf4e1df78c218bb7239442d8a0b0787d7f555555ff19db45113900ffa316f0496", 0xe4}, {&(0x7f00000031c0)="b7fba4549cd55143137a7728566aaa35335e712870f5a8e5f323314749eebefd398ce474ac197bf165a69be1c8570ff6ec66dfe02ef19eb1ec3553a2a8a28334c5bb0b94f170853d8b07886df47387de566cdc888945b9e8ae84931532bdc1d557e4905c2c85ef5a3b77c23958f34d2203f5dcefaeeb6e7186a4875572cd8cf5f0bc78bd998daad3ea94475bc2c530f8956ee7dfb50fa6a32eeb0b39bcdc1686af76ab167a1c404e5d04a66791", 0xad}, {&(0x7f0000003280)="a5b6adcd1ea09740268417413ae31fd4ef150b2686750908acc03cfce885ddff1c1b904c85b0a45726b4c32dc1110989d1cf38dedfcdd45fa73dfc4a89068533e9b30a772b39357f97c3e9dfc495abb168ed0c008a80bf43bbbe8b68db24fe7affb08cea92e160fd592fbd869f4a342c44cba2f6db226b690b022b99dfc2f187b5bab810f1c510", 0x87}, {&(0x7f0000003340)="2b36e7ce72028eee7a9cb5b2a4537752b12a6e07eb0217c456f44a51cc10301f038491b74b2bce972de1dcdb0f8ec8e9bcd018c4d81dfcd3b628f58c03d3c6d0c5f9729039d1d1bef9b2f007a0fa9162edd19c9c5314ec8f477dd6d0dc286e494a5d21d28bc2b787dd57f4eeb382a210238fa8ea960d0e76717959822619ddacde0bfe66f4dc0ab002c6a62e0641dd322dcd8bff6a94420a6312c1d4be81230d658e280fb33db09ca7ddae9fedfe3fa40c7c8559bbc687b498a92402ea50ff69316115bf3ea531a7d8b243888593568a6c860a6abf08670f", 0xd8}, {&(0x7f0000003440)="e82fe03202b11b26f070a0d524f1f9c5e4b7f567531844daefca070558c73ffb7ea6ad", 0x23}, {&(0x7f0000003480)="768dc1a16a49cd752a4935f29a3ad460032c3d24d1f42ba3cbb045c29f85e75748990eb4a2fdbb19f3ca9c95df8aa8485aef3bed7e8940c09ed785c002b2f93106bfd6c111aae1476241717d687962b28e5081862538b09f28a48eb98d30e405967320d018cff72439ed5b0d6830f6b73fd0a8b0e22e9410679daed762063526554c6abfeef19fd29dff48dc62919fe537ff4c89f7d1e69fb0b2149f8ce665889f9b18f55a50bbc8fd9f6ca7a9166b682754590849ac977b5ced54421ce94bdec9599bdf6a3d32cb13c665504854a5d1c2fdf346e45bdf74f652dac9ab186ecca7692a3fae1e73354e902df1dba16efe99a003f08cbb657176", 0xf9}], 0x6, &(0x7f0000003600)=[@ip_tos_u8={{0x11}}], 0x18}, 0x24040010) 238.066763ms ago: executing program 4 (id=507): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r1, 0xc01c64ad, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x0, @remote}, 0x80, 0x0}, 0x5b4}], 0x1, 0x0) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r3, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) setsockopt$inet_int(r3, 0x0, 0x8, &(0x7f0000000180)=0x8, 0x4) recvmmsg(r0, &(0x7f00000045c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001ac0)=""/10, 0xa}, 0x5}], 0x1, 0x45833af92e4b38de, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x40) read$smackfs_ptrace(r4, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000080000b302feff040000009500000000000000487bdb1d17fe2fdce10ce72064963160d49df72a87c92f85cd44d05bc4218611399e94d93dd4db72980c8e6cc6c7467c2641cddfeb2d09142abef814c527a994453deb74a9e2a305524220b1f4486e1d7ff1e2ddfe02b9c889482d4dd0bcb2dfb157eef25d112245e8fd212097a84a96dcbb4aa3433eb2c9671f6d8962afed0c0b58f1ed73be08e04a31b1c894146013f04ad563078054df24bc9487c6d917d534af8463c08d52607b2470c5d9b0cb063337745499c1d330f347383f62c0413882625326ce9b20e0f51cc568cdeb8e88ed25f22a657559bee97f1591bee65488d87e188ea109bc42e843f0477c61299329d0ddaffe1addbd0917cbde6703e1050343017349ae62d45081ee46bfe4d8f4c622ce886eef861769d0a698bd4090998f286240cfbb1d15ea42c4e28f8031b3a24cb8625038f5"], &(0x7f0000000100)='GPL\x00', 0x8, 0x105, &(0x7f0000000280)=""/261, 0x40f00}, 0x94) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e24, 0x97, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x63a7}, 0x1c) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_NEW_STATION(r7, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000700)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="00052cc67000fbdbdf1c130076560cf798002a004c5b3776f200008400311426e3f6f2d187df89342200000600b500c60500", @ANYRES32=0x0, @ANYBLOB="0600ab0081000000050029000c0000000500e400000000000600120004000000"], 0x50}, 0x1, 0x0, 0x0, 0xcbd6667d477e3f16}, 0x0) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x6, 0x9}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_BETA={0x8, 0x5, 0x13}, @TCA_PIE_ECN={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 132.824298ms ago: executing program 4 (id=508): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x36, 0x1, 0x8d6d, 0x4, 0xe50}, 0xad, 0x0, 0x89, 0x6, 0xff, 0xe, 0x1c, 0x8, 0x6, 0x38bcaf55, {0xd, 0x9, 0x3, 0x0, 0x10000}}}}]}, 0x78}}, 0x20000000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000380)={0x1, @pix_mp={0x368c, 0x8, 0x41495043, 0x7, 0x0, [{0x8000, 0x40}, {0xffff, 0x8}, {0x4, 0x8}, {0x6, 0x5}, {0x4, 0x100}, {0x0, 0x8}, {0x8, 0x80000001}, {0x32f2, 0x6}], 0x77, 0x99, 0x7, 0x2, 0x3}}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffe0, 0xffff}, {0x9, 0x1}}}, 0x24}}, 0x0) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000140)={r2, 0x1, 0x6, @remote}, 0x10) r8 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) writev(r8, &(0x7f0000000280)=[{&(0x7f00000045c0)="02", 0x1}, {0x0}], 0x2) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r10, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000f80)={0x2c, r9, 0x1, 0x70bd22, 0x40, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0x4}, {0x4}, {0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8d4}, 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r9, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000000}, 0x40) write$smackfs_load(r8, &(0x7f0000000180)={'', 0x20, '{#', 0x20, 'wtb'}, 0x8) r12 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x0, 0xfffffffffffffffe, 0xfffffffc, 0x3ff}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x10001}, @TCA_SAMPLE_RATE={0x8}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x4}}}]}]}, 0x70}}, 0x40040) 311.217µs ago: executing program 0 (id=509): socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) r0 = socket$packet(0x11, 0x2, 0x300) (rerun: 32) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0xffffffff}]}, 0x10) (async) r1 = socket$unix(0x1, 0x1, 0x0) (async, rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (rerun: 64) close(r2) (async, rerun: 32) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (rerun: 32) close(r3) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) (async, rerun: 32) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async, rerun: 32) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) (rerun: 32) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r4, 0x26}, 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) (async, rerun: 32) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) (async, rerun: 32) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="b143ee5d8fb7924aa216976f8766144b8d16a688a0f16c090ee9df571a5b037f0cf020f3fe7fc90cdad1b1f77d44e7b9252f6bde5c498e43029000e13dbdde4f50f00b82734087e6b388a92056663b4bdee8794b805f15aab6bf05b3f2fe2e1265083dc74f049f01514f42f49491d1d895fcefecd55c2b56a14a", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000cc0)={{r6}, &(0x7f0000000c40), &(0x7f0000000c80)=r2}, 0x20) (async, rerun: 32) r8 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'gretap0\x00', 0x0}) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) (async) sendto$packet(r8, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) 0s ago: executing program 4 (id=510): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x45) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b0, 0x0, 0x238, 0x170, 0xd8, 0x0, 0x410, 0x410, 0x410, 0x410, 0x410, 0x6, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xffffff00, 0x0, 'veth0\x00', 'veth0_to_bridge\x00', {}, {0xff}, 0x62, 0x0, 0x50}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xb, 0x4, @ipv4=@loopback, 0x4e24}}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0xff, 'geneve0\x00', 'veth1_to_team\x00', {}, {}, 0x89, 0x6, 0x24}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xff, 'ip6_vti0\x00', 'geneve0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x5}, {0x0, 0x6}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x31, 0x7, 0x1}}}, {{@ip={@loopback, @multicast1, 0xff, 0xff, 'veth0_to_batadv\x00', 'bridge_slave_0\x00', {0xff}, {0xff}, 0x44, 0x1, 0x15}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x55d, 0x3, @multicast1, 0x4e21}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xcf8a) recvmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000300000006"], 0x34c}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8a141, 0x59) pwrite64(r3, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) kernel console output (not intermixed with test programs): Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 30.693375][ T4678] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 30.714996][ T4685] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 30.716164][ T4685] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 30.716725][ T4685] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 30.716948][ T4685] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 30.717165][ T4685] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 30.717354][ T4685] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 30.717591][ T4685] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 30.718343][ T4685] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 30.718589][ T4685] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 30.719054][ T4685] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 30.719364][ T4685] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 30.719839][ T4685] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 30.720093][ T4685] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 30.720454][ T4685] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.720704][ T4685] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 30.721679][ T4685] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 30.724946][ T4685] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 30.726728][ T4687] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.727057][ T4686] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 30.727302][ T4686] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.736034][ T4686] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.745768][ T4677] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 30.750096][ T4678] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 30.752247][ T4678] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 31.120112][ T4674] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.120403][ T4674] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.120719][ T4674] bridge_slave_0: entered allmulticast mode [ 31.121186][ T4674] bridge_slave_0: entered promiscuous mode [ 31.131118][ T4674] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.131198][ T4674] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.131570][ T4674] bridge_slave_1: entered allmulticast mode [ 31.132240][ T4674] bridge_slave_1: entered promiscuous mode [ 31.142100][ T4674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.146893][ T4672] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.147291][ T4672] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.147355][ T4672] bridge_slave_0: entered allmulticast mode [ 31.148193][ T4672] bridge_slave_0: entered promiscuous mode [ 31.159816][ T4674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.159984][ T4672] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.160318][ T4672] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.160578][ T4672] bridge_slave_1: entered allmulticast mode [ 31.161214][ T4672] bridge_slave_1: entered promiscuous mode [ 31.168268][ T4672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.174317][ T4672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.197097][ T4672] team0: Port device team_slave_0 added [ 31.199200][ T4674] team0: Port device team_slave_0 added [ 31.200017][ T4674] team0: Port device team_slave_1 added [ 31.202836][ T4673] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.204107][ T4673] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.205538][ T4673] bridge_slave_0: entered allmulticast mode [ 31.206975][ T4673] bridge_slave_0: entered promiscuous mode [ 31.210319][ T4673] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.211773][ T4673] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.213206][ T4673] bridge_slave_1: entered allmulticast mode [ 31.214803][ T4673] bridge_slave_1: entered promiscuous mode [ 31.219852][ T4672] team0: Port device team_slave_1 added [ 31.232346][ T4672] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.233608][ T4672] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.237670][ T4672] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.241297][ T4670] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.242644][ T4670] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.243903][ T4670] bridge_slave_0: entered allmulticast mode [ 31.245426][ T4670] bridge_slave_0: entered promiscuous mode [ 31.247790][ T4674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.247813][ T4674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.247829][ T4674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.248380][ T4674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.248388][ T4674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.248403][ T4674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.260153][ T4672] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.260163][ T4672] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.260177][ T4672] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.269563][ T4673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.276244][ T4674] hsr_slave_0: entered promiscuous mode [ 31.277022][ T4674] hsr_slave_1: entered promiscuous mode [ 31.277432][ T4670] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.277486][ T4670] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.277544][ T4670] bridge_slave_1: entered allmulticast mode [ 31.278692][ T4670] bridge_slave_1: entered promiscuous mode [ 31.286129][ T4673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.313447][ T4670] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.317409][ T4670] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.318697][ T4673] team0: Port device team_slave_0 added [ 31.319452][ T4673] team0: Port device team_slave_1 added [ 31.322290][ T4671] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.323603][ T4671] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.324848][ T4671] bridge_slave_0: entered allmulticast mode [ 31.326434][ T4671] bridge_slave_0: entered promiscuous mode [ 31.330983][ T4671] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.332214][ T4671] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.333477][ T4671] bridge_slave_1: entered allmulticast mode [ 31.334949][ T4671] bridge_slave_1: entered promiscuous mode [ 31.338073][ T4672] hsr_slave_0: entered promiscuous mode [ 31.338388][ T4672] hsr_slave_1: entered promiscuous mode [ 31.338610][ T4672] debugfs: 'hsr0' already exists in 'hsr' [ 31.338656][ T4672] Cannot create hsr debugfs directory [ 31.357225][ T4671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.358690][ T4673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.358700][ T4673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.358712][ T4673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.359375][ T4673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.359383][ T4673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.359398][ T4673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.362136][ T4670] team0: Port device team_slave_0 added [ 31.362981][ T4670] team0: Port device team_slave_1 added [ 31.379665][ T4671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.399798][ T4670] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.401029][ T4670] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.405514][ T4670] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.409562][ T4670] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.410780][ T4670] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.415314][ T4670] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.418107][ T4671] team0: Port device team_slave_0 added [ 31.426540][ T4673] hsr_slave_0: entered promiscuous mode [ 31.426975][ T4673] hsr_slave_1: entered promiscuous mode [ 31.427185][ T4673] debugfs: 'hsr0' already exists in 'hsr' [ 31.427196][ T4673] Cannot create hsr debugfs directory [ 31.434093][ T4671] team0: Port device team_slave_1 added [ 31.466395][ T4671] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.466423][ T4671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.466451][ T4671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.475869][ T4670] hsr_slave_0: entered promiscuous mode [ 31.476606][ T4670] hsr_slave_1: entered promiscuous mode [ 31.476824][ T4670] debugfs: 'hsr0' already exists in 'hsr' [ 31.476835][ T4670] Cannot create hsr debugfs directory [ 31.481284][ T4671] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.481304][ T4671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.481329][ T4671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.526611][ T4671] hsr_slave_0: entered promiscuous mode [ 31.528095][ T4671] hsr_slave_1: entered promiscuous mode [ 31.529369][ T4671] debugfs: 'hsr0' already exists in 'hsr' [ 31.530410][ T4671] Cannot create hsr debugfs directory [ 31.574161][ T4674] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.578785][ T4674] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.585610][ T4674] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.588050][ T4674] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.591552][ T4674] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.593923][ T4674] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.595699][ T4674] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.598148][ T4674] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.627140][ T4674] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.627198][ T4674] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.627466][ T4674] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.627498][ T4674] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.633235][ T4672] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.636831][ T4672] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.638469][ T4672] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.640685][ T4672] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.641708][ T4672] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.643038][ T4672] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.645274][ T4672] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.647710][ T4672] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.670450][ T4673] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.673017][ T4673] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.674583][ T4673] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.676970][ T4673] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.678591][ T4672] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.678643][ T4672] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.678848][ T4672] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.678877][ T4672] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.686110][ T4673] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.688561][ T4673] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.690299][ T4673] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.692378][ T4673] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.715787][ T4670] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.720146][ T4670] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.721183][ T4674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.723540][ T4670] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.725584][ T4670] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.731326][ T15] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.732710][ T15] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.734116][ T15] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.735766][ T15] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.744344][ T4670] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.746934][ T4670] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.748844][ T4670] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.750940][ T4670] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.755621][ T4674] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.775552][ T15] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.775629][ T15] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.775993][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.776012][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.789367][ T4672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.799530][ T4671] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.802266][ T4671] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.803892][ T4671] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.805913][ T4671] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.807369][ T4671] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.809775][ T4671] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.811892][ T4671] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.813979][ T4671] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.829084][ T4672] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.835357][ T4674] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.835407][ T4674] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.848816][ T4670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.851501][ T1405] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.851561][ T1405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.853101][ T1405] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.853123][ T1405] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.897299][ T4670] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.901078][ T4673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.906726][ T1281] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.906780][ T1281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.921137][ T1405] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.921188][ T1405] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.933390][ T4673] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.949108][ T15] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.949153][ T15] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.952538][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.952577][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.998703][ T4671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.001936][ T4671] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.014433][ T1405] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.014476][ T1405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.017875][ T1405] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.017913][ T1405] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.053924][ T4674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.077371][ T4674] veth0_vlan: entered promiscuous mode [ 32.099408][ T4674] veth1_vlan: entered promiscuous mode [ 32.142822][ T4674] veth0_macvtap: entered promiscuous mode [ 32.160835][ T4674] veth1_macvtap: entered promiscuous mode [ 32.169846][ T4674] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.181956][ T4674] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.186660][ T1310] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.186778][ T1310] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.186804][ T1310] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.186827][ T1310] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.198276][ T4672] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.226775][ T4670] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.277171][ T4673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.283874][ T4671] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.286522][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.286552][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.295386][ T4670] veth0_vlan: entered promiscuous mode [ 32.315355][ T4670] veth1_vlan: entered promiscuous mode [ 32.319475][ T882] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.319498][ T882] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.326050][ T4673] veth0_vlan: entered promiscuous mode [ 32.329152][ T4673] veth1_vlan: entered promiscuous mode [ 32.336181][ T4672] veth0_vlan: entered promiscuous mode [ 32.341420][ T4673] veth0_macvtap: entered promiscuous mode [ 32.355274][ T4673] veth1_macvtap: entered promiscuous mode [ 32.361670][ T4670] veth0_macvtap: entered promiscuous mode [ 32.364140][ T4672] veth1_vlan: entered promiscuous mode [ 32.367260][ T4674] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.375886][ T4670] veth1_macvtap: entered promiscuous mode [ 32.384415][ T4673] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.394967][ T4670] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.396363][ T4670] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.402763][ T4673] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.404551][ T4850] fuse: Bad value for 'fd' [ 32.413542][ T4671] veth0_vlan: entered promiscuous mode [ 32.418324][ T4671] veth1_vlan: entered promiscuous mode [ 32.423526][ T4672] veth0_macvtap: entered promiscuous mode [ 32.424663][ T4672] veth1_macvtap: entered promiscuous mode [ 32.435461][ T4671] veth0_macvtap: entered promiscuous mode [ 32.440696][ T4671] veth1_macvtap: entered promiscuous mode [ 32.447571][ T40] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.448515][ T40] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.448539][ T40] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.448559][ T40] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.448578][ T40] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.448593][ T40] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.448609][ T40] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.448623][ T40] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.453978][ T4671] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.455009][ T4671] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.459845][ T1281] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.460002][ T1281] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.460060][ T1281] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.460115][ T1281] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.481325][ T4672] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.500549][ T4672] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.512887][ T882] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.513007][ T882] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.513064][ T882] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.513081][ T882] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.535474][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.535517][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.563407][ T882] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.565333][ T882] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.572895][ T882] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.572924][ T882] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.721590][ T4856] loop0: detected capacity change from 0 to 512 [ 32.738599][ T50] Bluetooth: hci0: command tx timeout [ 32.807866][ T50] Bluetooth: hci1: command tx timeout [ 32.808107][ T50] Bluetooth: hci3: command tx timeout [ 32.808196][ T50] Bluetooth: hci2: command tx timeout [ 32.808257][ T50] Bluetooth: hci4: command tx timeout [ 33.401331][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.401359][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.482942][ T882] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.482970][ T882] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.514712][ T4862] loop1: detected capacity change from 0 to 512 [ 33.559868][ T4862] EXT4-fs (loop1): ea_inode feature is not supported for Hurd [ 33.604374][ T1184] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.604409][ T1184] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.610092][ T882] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.610121][ T882] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.666550][ T4871] loop1: detected capacity change from 0 to 1024 [ 33.668250][ T4871] EXT4-fs: inline encryption not supported [ 33.669317][ T4871] EXT4-fs: Ignoring removed bh option [ 33.686063][ T4871] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 33.706669][ T1184] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.706704][ T1184] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.716306][ T4873] loop0: detected capacity change from 0 to 128 [ 33.718873][ T4873] ======================================================= [ 33.718873][ T4873] WARNING: The mand mount option has been deprecated and [ 33.718873][ T4873] and is ignored by this kernel. Remove the mand [ 33.718873][ T4873] option from the mount to silence this warning. [ 33.718873][ T4873] ======================================================= [ 33.738702][ T4871] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.791533][ T4673] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.884078][ T4880] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.884820][ T4880] bridge_slave_1: left promiscuous mode [ 33.884912][ T4880] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.889469][ T4886] fuse: Bad value for 'fd' [ 33.894550][ T4888] loop2: detected capacity change from 0 to 512 [ 33.902842][ T4888] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 33.902874][ T4888] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 33.911701][ T4888] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.14: bad orphan inode 131083 [ 33.911780][ T4888] loop2: lost filesystem error report for type 5 error -117 [ 33.912991][ T4880] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 33.913985][ T4888] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.963210][ T4895] binder: BINDER_SET_CONTEXT_MGR already set [ 33.968311][ T4895] binder: 4894:4895 ioctl 4018620d 20000040 returned -16 [ 33.968585][ T4895] binder: 4894:4895 got transaction to invalid handle, 1 [ 33.968627][ T4895] binder: 4894:4895 cannot find target node [ 33.968651][ T4895] binder: 4894:4895 transaction async to 0:0 failed 3/29201/-22, code 0 size 72-24 line 3236 [ 33.992723][ T4681] binder: undelivered TRANSACTION_ERROR: 29201 [ 34.019713][ T4900] loop0: detected capacity change from 0 to 2048 [ 34.023083][ T4880] netlink: 'syz.4.5': attribute type 21 has an invalid length. [ 34.023139][ T4880] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5'. [ 34.023186][ T4880] netlink: 'syz.4.5': attribute type 4 has an invalid length. [ 34.023199][ T4880] netlink: 3 bytes leftover after parsing attributes in process `syz.4.5'. [ 34.081113][ T4900] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.749437][ T4900] netlink: 32 bytes leftover after parsing attributes in process `syz.0.16'. [ 34.749471][ T4900] tipc: Invalid UDP bearer configuration [ 34.749616][ T4900] tipc: Enabling of bearer rejected, failed to enable media [ 34.771637][ T4670] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.774255][ T4913] capability: warning: `syz.4.18' uses deprecated v2 capabilities in a way that may be insecure [ 34.793633][ T40] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 34.793973][ T40] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 33 with error 28 [ 34.793986][ T40] EXT4-fs (loop0): This should not happen!! Data will be lost [ 34.793986][ T40] [ 34.793993][ T40] EXT4-fs (loop0): Total free blocks count 0 [ 34.794000][ T40] EXT4-fs (loop0): Free/Dirty block details [ 34.794009][ T40] EXT4-fs (loop0): free_blocks=2415919104 [ 34.794019][ T40] EXT4-fs (loop0): dirty_blocks=48 [ 34.794026][ T40] EXT4-fs (loop0): Block reservation details [ 34.794031][ T40] EXT4-fs (loop0): i_reserved_data_blocks=3 [ 34.795330][ T4674] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 34.796061][ T4674] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.808344][ T4678] Bluetooth: hci0: command tx timeout [ 34.887931][ T50] Bluetooth: hci2: command tx timeout [ 34.887975][ T50] Bluetooth: hci3: command tx timeout [ 34.888007][ T50] Bluetooth: hci1: command tx timeout [ 34.890105][ T4678] Bluetooth: hci4: command tx timeout [ 34.900378][ T4925] netlink: 8 bytes leftover after parsing attributes in process `syz.3.23'. [ 34.900417][ T4925] netlink: 24 bytes leftover after parsing attributes in process `syz.3.23'. [ 34.956247][ T4915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19'. [ 34.976691][ T4930] loop4: detected capacity change from 0 to 4096 [ 35.003553][ T30] audit: type=1326 audit(34.990:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4933 comm="syz.3.25" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6977a28 code=0x50000 [ 35.010554][ T30] audit: type=1326 audit(35.000:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4933 comm="syz.3.25" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6977a28 code=0x50000 [ 35.010596][ T30] audit: type=1326 audit(35.000:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4933 comm="syz.3.25" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6977a28 code=0x50000 [ 35.010625][ T30] audit: type=1326 audit(35.000:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4933 comm="syz.3.25" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6977a28 code=0x50000 [ 35.010645][ T30] audit: type=1326 audit(35.000:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4933 comm="syz.3.25" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6977a28 code=0x50000 [ 35.010664][ T30] audit: type=1326 audit(35.000:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4933 comm="syz.3.25" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6977a28 code=0x50000 [ 35.010683][ T30] audit: type=1326 audit(35.000:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4933 comm="syz.3.25" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6977a28 code=0x50000 [ 35.010700][ T30] audit: type=1326 audit(35.000:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4933 comm="syz.3.25" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6977a28 code=0x50000 [ 35.010718][ T30] audit: type=1326 audit(35.000:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4933 comm="syz.3.25" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6977a28 code=0x50000 [ 35.010735][ T30] audit: type=1326 audit(35.000:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4933 comm="syz.3.25" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6977a28 code=0x50000 [ 35.049139][ T4930] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.137809][ T4947] netlink: 36 bytes leftover after parsing attributes in process `syz.0.26'. [ 35.137844][ T4947] netlink: 4 bytes leftover after parsing attributes in process `syz.0.26'. [ 35.209683][ T4672] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.315431][ T4958] loop4: detected capacity change from 0 to 1024 [ 35.316030][ T4958] EXT4-fs: Ignoring removed i_version option [ 35.316057][ T4958] EXT4-fs: inline encryption not supported [ 35.319660][ T4958] EXT4-fs (loop4): Test dummy encryption mode enabled [ 35.324198][ T4958] EXT4-fs (loop4): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 35.341142][ T4963] loop1: detected capacity change from 0 to 512 [ 35.343899][ T4963] EXT4-fs: Ignoring removed i_version option [ 35.346499][ T4958] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #4: comm syz.4.29: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 35.346601][ T4958] loop4: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 35.350249][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 35.350267][ C0] EXT4-fs (loop4): initial error at time 35: ext4_ext_check_inode:521: inode 4 [ 35.350287][ C0] EXT4-fs (loop4): last error at time 35: ext4_ext_check_inode:521: inode 4 [ 35.357350][ T4958] EXT4-fs error (device loop4): ext4_quota_enable:7228: comm syz.4.29: Bad quota inode: 4, type: 1 [ 35.357393][ T4958] loop4: lost filesystem error report for type 5 error -117 [ 35.365133][ T4958] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 35.365574][ T4958] EXT4-fs (loop4): mount failed [ 35.380904][ T4963] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.389471][ T4963] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.494450][ T4969] syz.2.31 uses obsolete (PF_INET,SOCK_PACKET) [ 35.583990][ T4981] netlink: 24 bytes leftover after parsing attributes in process `syz.4.29'. [ 36.316215][ T4993] loop0: detected capacity change from 0 to 256 [ 36.325274][ T4993] vfat: Unknown parameter 'nonumtail0' [ 36.434723][ T4997] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.36: inode has both inline data and extents flags [ 36.434762][ T4997] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 36.437626][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 36.437655][ C1] EXT4-fs (loop1): initial error at time 36: ext4_orphan_get:1397: inode 15 [ 36.437691][ C1] EXT4-fs (loop1): last error at time 36: ext4_orphan_get:1397: inode 15 [ 36.446547][ T4997] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.36: couldn't read orphan inode 15 (err -117) [ 36.446583][ T4997] loop1: lost filesystem error report for type 5 error -117 [ 36.447257][ T4997] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.614523][ T4673] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.696176][ T5006] EXT4-fs: Ignoring removed nobh option [ 36.696745][ T5006] EXT4-fs: inline encryption not supported [ 36.714221][ T5006] EXT4-fs (loop1): Test dummy encryption mode enabled [ 36.724830][ T5006] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 36.725115][ T5006] EXT4-fs: failed to create workqueue [ 36.725358][ T5006] EXT4-fs (loop1): mount failed [ 36.788491][ T5012] netlink: zone id is out of range [ 36.788757][ T5012] netlink: zone id is out of range [ 36.788994][ T5012] netlink: zone id is out of range [ 36.789226][ T5012] netlink: zone id is out of range [ 36.789478][ T5012] netlink: zone id is out of range [ 36.789483][ T5012] netlink: zone id is out of range [ 36.789487][ T5012] netlink: zone id is out of range [ 36.789491][ T5012] netlink: zone id is out of range [ 36.789496][ T5012] netlink: zone id is out of range [ 36.809526][ T5013] syzkaller0: entered promiscuous mode [ 36.809561][ T5013] syzkaller0: entered allmulticast mode [ 36.887684][ T4677] Bluetooth: hci0: command tx timeout [ 36.968411][ T4677] Bluetooth: hci4: command tx timeout [ 36.970049][ T4677] Bluetooth: hci1: command tx timeout [ 36.971316][ T4677] Bluetooth: hci3: command tx timeout [ 36.971333][ T4677] Bluetooth: hci2: command tx timeout [ 37.049564][ T5018] EXT4-fs: Ignoring removed bh option [ 37.049858][ T5018] EXT4-fs: inline encryption not supported [ 37.080999][ T5018] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 37.096319][ T5018] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 37.114338][ T5018] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 2: comm syz.1.41: lblock 2 mapped to illegal pblock 2 (length 1) [ 37.114376][ T5018] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 37.117623][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 37.117647][ C1] EXT4-fs (loop1): initial error at time 37: ext4_map_blocks:791: inode 3: block 2 [ 37.117682][ C1] EXT4-fs (loop1): last error at time 37: ext4_map_blocks:791: inode 3: block 2 [ 37.125093][ T5018] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 48: comm syz.1.41: lblock 0 mapped to illegal pblock 48 (length 1) [ 37.125131][ T5018] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 37.132673][ T5018] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.41: Failed to acquire dquot type 0 [ 37.132713][ T5018] loop1: lost filesystem error report for type 5 error -117 [ 37.146586][ T5018] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 37.146920][ T5018] loop1: lost filesystem error report for type 5 error -117 [ 37.156096][ T5018] EXT4-fs error (device loop1): ext4_evict_inode:267: inode #11: comm syz.1.41: mark_inode_dirty error [ 37.156151][ T5018] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 37.160989][ T5018] EXT4-fs warning (device loop1): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 37.161135][ T5018] EXT4-fs (loop1): 1 orphan inode deleted [ 37.161656][ T5018] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.178132][ T1310] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 37.185891][ T1310] EXT4-fs error (device loop1): ext4_release_dquot:7070: comm kworker/u8:7: Failed to release dquot type 0 [ 37.238694][ T4673] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.242543][ T4673] EXT4-fs error (device loop1): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 37.242581][ T4673] loop1: lost filesystem error report for type 5 error -117 [ 37.245713][ T4673] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 37.245752][ T4673] loop1: lost filesystem error report for type 5 error -117 [ 37.245894][ T4673] EXT4-fs error (device loop1): ext4_quota_off:7318: inode #3: comm syz-executor: mark_inode_dirty error [ 37.245911][ T4673] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 37.372815][ T5031] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 37.784438][ T4674] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 37.827436][ T5039] nfs4: Bad value for 'source' [ 37.844131][ T5043] process 'syz.0.49' launched './file2' with NULL argv: empty string added [ 37.859952][ T5043] netdevsim netdevsim0: Firmware load for '../file0/../file0/../file0' refused, path contains '..' component [ 37.967701][ T5049] set_capacity_and_notify: 5 callbacks suppressed [ 37.967738][ T5049] loop0: detected capacity change from 0 to 128 [ 37.971092][ T5049] FAT-fs (loop0): bogus logical sector size 0 [ 37.971232][ T5049] FAT-fs (loop0): Can't find a valid FAT filesystem [ 38.311125][ T5056] netlink: 68 bytes leftover after parsing attributes in process `syz.1.53'. [ 38.311159][ T5056] tipc: Enabling of bearer rejected, media not registered [ 38.334910][ T5062] Illegal XDP return value 4294967274 on prog (id 3) dev N/A, expect packet loss! [ 38.392445][ T5071] loop0: detected capacity change from 0 to 512 [ 38.413726][ T5071] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.55: couldn't read orphan inode 26 (err -116) [ 38.413766][ T5071] loop0: lost filesystem error report for type 5 error -116 [ 38.416281][ T5071] EXT4-fs (loop0): Remounting filesystem read-only [ 38.416819][ T5071] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.432891][ T4674] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.531245][ T5093] warning: `syz.3.61' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 38.539135][ T5091] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 38.600054][ T5100] loop3: detected capacity change from 0 to 4096 [ 38.601427][ T5100] EXT4-fs: inline encryption not supported [ 38.603005][ T5100] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 38.603034][ T5100] EXT4-fs (loop3): Test dummy encryption mode enabled [ 38.604329][ T5100] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8842c1a8, mo2=0003] [ 38.605212][ T5100] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.612107][ T5100] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 38.617185][ T5100] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 38.703077][ T5100] syzkaller0: entered promiscuous mode [ 38.704363][ T5100] syzkaller0: entered allmulticast mode [ 38.753941][ T5109] loop2: detected capacity change from 0 to 256 [ 38.760131][ T5110] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 38.763197][ T5110] FAT-fs (loop2): Filesystem has been set read-only [ 38.764978][ T5110] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 38.769702][ T5109] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 38.771812][ T5109] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 38.773883][ T5109] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 38.775899][ T5109] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 38.777853][ T5110] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 38.779917][ T5110] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 38.781933][ T5109] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 38.782258][ T5109] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 38.926057][ T5116] trusted_key: syz.2.68 sent an empty control message without MSG_MORE. [ 38.979086][ T4677] Bluetooth: hci0: command tx timeout [ 39.048034][ T4677] Bluetooth: hci2: command tx timeout [ 39.048290][ T4677] Bluetooth: hci3: command tx timeout [ 39.048304][ T4677] Bluetooth: hci1: command tx timeout [ 39.048317][ T4677] Bluetooth: hci4: command tx timeout [ 39.186283][ T5122] loop4: detected capacity change from 0 to 512 [ 39.196027][ T5122] EXT4-fs (loop4): orphan cleanup on readonly fs [ 39.196676][ T5122] EXT4-fs warning (device loop4): ext4_xattr_inode_get:546: inode #11: comm syz.4.70: ea_inode file size=0 entry size=21760 [ 39.201966][ T5122] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 39.205265][ T5122] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #15: comm syz.4.70: corrupted inode contents [ 39.208006][ T5122] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 39.209953][ T5122] EXT4-fs error (device loop4): ext4_dirty_inode:6587: inode #15: comm syz.4.70: mark_inode_dirty error [ 39.209993][ T5122] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 39.214665][ T5122] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #15: comm syz.4.70: corrupted inode contents [ 39.214704][ T5122] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 39.217636][ C0] EXT4-fs (loop4): error count since last fsck: 3 [ 39.217649][ C0] EXT4-fs (loop4): initial error at time 39: ext4_do_update_inode:5690: inode 15 [ 39.217664][ C0] EXT4-fs (loop4): last error at time 39: ext4_do_update_inode:5690: inode 15 [ 39.225169][ T5122] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3001: inode #15: comm syz.4.70: mark_inode_dirty error [ 39.225210][ T5122] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 39.228898][ T5122] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3004: inode #15: comm syz.4.70: mark inode dirty (error -117) [ 39.232400][ T5122] EXT4-fs warning (device loop4): ext4_evict_inode:287: xattr delete (err -117) [ 39.232485][ T5122] EXT4-fs (loop4): 1 orphan inode deleted [ 39.233617][ T5122] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 39.244504][ T4671] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.255890][ T4672] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.275689][ T5125] loop3: detected capacity change from 0 to 512 [ 39.277470][ T5125] ext4: Unknown parameter 'permit_directio' [ 39.352000][ T5131] loop4: detected capacity change from 0 to 512 [ 39.381042][ T5131] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 39.615635][ T5103] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 39.621689][ T5131] Zero length message leads to an empty skb [ 39.675295][ T5139] loop0: detected capacity change from 0 to 128 [ 39.690569][ T4758] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.708775][ T4758] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 39.716552][ T5141] loop1: detected capacity change from 0 to 4096 [ 39.721706][ T5141] EXT4-fs: Ignoring removed mblk_io_submit option [ 39.721767][ T5141] EXT4-fs: Ignoring removed orlov option [ 39.724376][ T5141] EXT4-fs (loop1): Test dummy encryption mode enabled [ 39.735811][ T5141] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.740309][ T5141] hid-generic 0000:0000:0000.0001: pid 5141 passed too short report [ 39.745714][ T5141] 9p: Bad value for 'rfdno' [ 39.748678][ T5142] 9p: Bad value for 'rfdno' [ 39.750822][ T5142] 9p: Bad value for 'rfdno' [ 39.750922][ T5142] 9p: Bad value for 'rfdno' [ 39.751011][ T5142] 9p: Bad value for 'rfdno' [ 39.751090][ T5142] 9p: Bad value for 'rfdno' [ 39.751176][ T5142] 9p: Bad value for 'rfdno' [ 39.751252][ T5142] 9p: Bad value for 'rfdno' [ 39.751346][ T5142] 9p: Bad value for 'rfdno' [ 39.751424][ T5142] 9p: Bad value for 'rfdno' [ 39.751513][ T5142] 9p: Bad value for 'rfdno' [ 39.763317][ T5142] 9p: Bad value for 'rfdno' [ 39.763436][ T5142] 9p: Bad value for 'rfdno' [ 39.763615][ T5142] 9p: Bad value for 'rfdno' [ 39.763704][ T5142] 9p: Bad value for 'rfdno' [ 39.763798][ T5142] 9p: Bad value for 'rfdno' [ 39.763884][ T5142] 9p: Bad value for 'rfdno' [ 39.763967][ T5142] 9p: Bad value for 'rfdno' [ 39.772148][ T5142] 9p: Bad value for 'rfdno' [ 39.774655][ T5151] netlink: 52 bytes leftover after parsing attributes in process `syz.4.77'. [ 39.778091][ T5142] 9p: Bad value for 'rfdno' [ 39.779101][ T5142] 9p: Bad value for 'rfdno' [ 39.782207][ T5142] 9p: Bad value for 'rfdno' [ 39.782320][ T5142] 9p: Bad value for 'rfdno' [ 39.782410][ T5142] 9p: Bad value for 'rfdno' [ 39.782505][ T5142] 9p: Bad value for 'rfdno' [ 39.782599][ T5142] 9p: Bad value for 'rfdno' [ 39.782680][ T5142] 9p: Bad value for 'rfdno' [ 39.782765][ T5142] 9p: Bad value for 'rfdno' [ 39.782842][ T5142] 9p: Bad value for 'rfdno' [ 39.782934][ T5142] 9p: Bad value for 'rfdno' [ 39.783010][ T5142] 9p: Bad value for 'rfdno' [ 39.792098][ T5142] 9p: Bad value for 'rfdno' [ 39.794136][ T5142] 9p: Bad value for 'rfdno' [ 39.794241][ T5142] 9p: Bad value for 'rfdno' [ 39.823367][ T5151] loop4: detected capacity change from 0 to 512 [ 39.838987][ T5151] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.77: corrupted in-inode xattr: e_value size too large [ 39.842579][ T5151] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.77: couldn't read orphan inode 15 (err -117) [ 39.842608][ T5151] loop4: lost filesystem error report for type 5 error -117 [ 39.843534][ T5151] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.855409][ T5153] faux_driver vkms: [drm] Unknown color mode 36865; guessing buffer size. [ 39.864773][ T4673] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.874254][ T5153] Injecting memory failure for pfn 0x21d0b2 at process virtual address 0x20ffb000 [ 39.882039][ T5153] Memory failure: 0x21d0b2: unhandlable page. [ 39.882071][ T5153] Memory failure: 0x21d0b2: recovery action for get hwpoison page: Ignored [ 39.885426][ T4431] IPVS: starting estimator thread 0... [ 39.910173][ T5161] EXT4-fs: Ignoring removed i_version option [ 39.913443][ T5161] EXT4-fs: Ignoring removed nobh option [ 39.915806][ T5161] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 39.922063][ T5161] EXT4-fs (loop1): 1 truncate cleaned up [ 39.923606][ T5161] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.945981][ T4672] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.986269][ T5167] Bluetooth: MGMT ver 1.23 [ 39.987811][ T5159] IPVS: using max 58 ests per chain, 139200 per kthread [ 39.988446][ T5167] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 39.990759][ T5166] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 39.992654][ T5166] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 39.994543][ T5166] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 39.997080][ T5166] EXT4-fs error (device loop4): ext4_get_journal_inode:5896: inode #5: comm syz.4.81: unexpected bad inode w/o EXT4_IGET_BAD [ 39.998930][ T5166] EXT4-fs (loop4): no journal found [ 39.998942][ T5166] EXT4-fs (loop4): can't get journal size [ 40.000072][ T5166] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 40.026833][ T4672] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.036926][ T4673] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.340796][ T5193] tmpfs: Bad value for 'mpol' [ 40.352452][ T5198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.90'. [ 40.354676][ T5198] netlink: 12 bytes leftover after parsing attributes in process `syz.1.90'. [ 40.370492][ T5198] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.375818][ T5198] EXT4-fs error (device loop1): ext4_find_dest_de:2050: inode #2: block 3: comm syz.1.90: bad entry in directory: directory entry overrun - offset=12, inode=65538, rec_len=2048, size=2048 fake=0 [ 40.398280][ T5202] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 40.404098][ T5202] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 40.432204][ T4673] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.491032][ T5209] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.511321][ T4672] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.879161][ T5229] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.879684][ T5229] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.156861][ T1281] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 41.240292][ T5242] syz.3.101 (5242): /proc/5240/oom_adj is deprecated, please use /proc/5240/oom_score_adj instead. [ 41.803500][ T5267] EXT4-fs error (device loop1): __ext4_fill_super:5596: comm syz.1.108: inode #2: comm syz.1.108: iget: illegal inode # [ 41.803545][ T5267] loop1: lost filesystem error report for type 5 error -117 [ 41.804088][ T5267] EXT4-fs (loop1): Remounting filesystem read-only [ 41.804164][ T5267] EXT4-fs (loop1): get root inode failed [ 41.804174][ T5267] EXT4-fs (loop1): mount failed [ 42.739032][ T5281] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.746132][ T5284] vti0: entered allmulticast mode [ 42.753922][ T5281] vti0: entered allmulticast mode [ 42.805079][ T4673] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.025757][ T5293] netlink: 28 bytes leftover after parsing attributes in process `syz.1.114'. [ 43.687727][ T4678] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 43.687731][ T50] Bluetooth: hci5: command 0x1003 tx timeout [ 43.716822][ T5296] input: syz1 as /devices/virtual/input/input3 [ 43.768139][ T5298] set_capacity_and_notify: 7 callbacks suppressed [ 43.768167][ T5298] loop0: detected capacity change from 0 to 256 [ 43.964639][ T5306] syz_tun: entered allmulticast mode [ 43.975857][ T4431] IPVS: starting estimator thread 0... [ 44.058759][ T5307] IPVS: using max 57 ests per chain, 136800 per kthread [ 44.060471][ T5236] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 44.131997][ T5318] fuse: Bad value for 'fd' [ 44.145084][ T5316] netlink: 8 bytes leftover after parsing attributes in process `syz.4.120'. [ 44.167294][ T5321] netlink: 'syz.3.122': attribute type 1 has an invalid length. [ 44.174484][ T5321] netlink: 60 bytes leftover after parsing attributes in process `syz.3.122'. [ 44.183546][ T5321] macvlan2: entered promiscuous mode [ 44.183581][ T5321] macvlan2: entered allmulticast mode [ 44.377411][ T5346] netlink: 'syz.2.126': attribute type 21 has an invalid length. [ 44.377498][ T5346] netlink: 132 bytes leftover after parsing attributes in process `syz.2.126'. [ 44.648628][ T5384] loop0: detected capacity change from 0 to 2048 [ 44.687290][ T5385] loop2: detected capacity change from 0 to 8192 [ 44.695306][ T5303] syz_tun: left allmulticast mode [ 44.740647][ T5385] loop2: p1 < > p3[EZD] [ 44.744313][ T5385] loop2: p3 start 3238002688 is beyond EOD, truncated [ 44.747383][ T5398] netlink: 16 bytes leftover after parsing attributes in process `syz.1.135'. [ 44.750696][ T5398] tipc: Invalid UDP bearer configuration [ 44.750735][ T5398] tipc: Enabling of bearer rejected, failed to enable media [ 44.757935][ T5397] netlink: 52 bytes leftover after parsing attributes in process `syz.3.134'. [ 44.757966][ T5397] netlink: 'syz.3.134': attribute type 1 has an invalid length. [ 44.889968][ T5418] loop3: detected capacity change from 0 to 128 [ 45.384809][ T5434] loop4: detected capacity change from 0 to 1024 [ 45.402752][ T5434] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.420966][ T5434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.426769][ T5434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.492043][ T5440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.493955][ T5440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.501182][ T5440] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20003 [ 45.707786][ T5449] loop2: detected capacity change from 0 to 8192 [ 45.736497][ T5455] loop3: detected capacity change from 0 to 256 [ 45.830878][ T5466] loop1: detected capacity change from 0 to 512 [ 45.832787][ T5466] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 45.840151][ T5466] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.152: invalid indirect mapped block 4294967295 (level 0) [ 45.840190][ T5466] fserror_report: 3 callbacks suppressed [ 45.840586][ T5466] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 45.845980][ T5466] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.152: invalid indirect mapped block 4294967295 (level 1) [ 45.846022][ T5466] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 45.847648][ C0] EXT4-fs (loop1): error count since last fsck: 2 [ 45.847663][ C0] EXT4-fs (loop1): initial error at time 45: ext4_free_branches:1023: inode 16 [ 45.847689][ C0] EXT4-fs (loop1): last error at time 45: ext4_free_branches:1023: inode 16 [ 45.861101][ T5466] EXT4-fs (loop1): 1 orphan inode deleted [ 45.863126][ T5466] EXT4-fs (loop1): 1 truncate cleaned up [ 45.864836][ T5466] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.881004][ T5466] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 45.890556][ T5466] EXT4-fs error (device loop1): ext4_find_dest_de:2050: inode #2: block 13: comm syz.1.152: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=1024 fake=0 [ 45.898515][ T5466] mmap: syz.1.152 (5466) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 45.904224][ T5466] EXT4-fs error (device loop1): ext4_lookup:1785: inode #15: comm syz.1.152: iget: bad extra_isize 46 (inode size 256) [ 45.946275][ T5466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.953848][ T5466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.955048][ T5466] overlayfs: failed to resolve './bus': -2 [ 46.257924][ T4758] net_ratelimit: 16 callbacks suppressed [ 46.257972][ T4758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 46.455742][ T5477] netlink: 12 bytes leftover after parsing attributes in process `syz.0.154'. [ 46.467877][ T5477] bond1: entered allmulticast mode [ 46.469698][ T5477] 8021q: adding VLAN 0 to HW filter on device bond1 [ 46.471212][ T4673] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.523485][ T5484] loop2: detected capacity change from 0 to 7 [ 46.523884][ T5484] Buffer I/O error on dev loop2, logical block 0, async page read [ 46.523942][ T5484] Buffer I/O error on dev loop2, logical block 0, async page read [ 46.523980][ T5484] Buffer I/O error on dev loop2, logical block 0, async page read [ 46.524015][ T5484] Buffer I/O error on dev loop2, logical block 0, async page read [ 46.524054][ T5484] Buffer I/O error on dev loop2, logical block 0, async page read [ 46.524093][ T5484] Buffer I/O error on dev loop2, logical block 0, async page read [ 46.524127][ T5484] Buffer I/O error on dev loop2, logical block 0, async page read [ 46.524153][ T5484] ldm_validate_partition_table(): Disk read failed. [ 46.524171][ T5484] Buffer I/O error on dev loop2, logical block 0, async page read [ 46.524209][ T5484] Buffer I/O error on dev loop2, logical block 0, async page read [ 46.524242][ T5484] Buffer I/O error on dev loop2, logical block 0, async page read [ 46.524290][ T5484] Dev loop2: unable to read RDB block 0 [ 46.524384][ T5484] loop2: unable to read partition table [ 46.524444][ T5484] loop2: partition table beyond EOD, truncated [ 46.524460][ T5484] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 46.595626][ T30] kauditd_printk_skb: 7301 callbacks suppressed [ 46.595663][ T30] audit: type=1326 audit(46.580:7310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5483 comm="syz.0.156" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=277 compat=0 ip=0xffff84d77a28 code=0x7fc00000 [ 46.814096][ T5502] loop2: detected capacity change from 0 to 1024 [ 46.834576][ T5502] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.850751][ T4670] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.969490][ T5513] netlink: 'syz.3.164': attribute type 30 has an invalid length. [ 47.000162][ T5515] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.003393][ T5515] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.100174][ T5530] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.139584][ T5535] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.141580][ T5535] bridge_slave_1: left promiscuous mode [ 47.142868][ T5535] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.146290][ T4670] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.149744][ T5535] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 47.154967][ T5535] netlink: 'syz.3.169': attribute type 12 has an invalid length. [ 47.156669][ T5535] netlink: 'syz.3.169': attribute type 29 has an invalid length. [ 47.159359][ T5535] netlink: 148 bytes leftover after parsing attributes in process `syz.3.169'. [ 47.194842][ T5537] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.288256][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 47.296292][ T5537] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.383144][ T5537] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.452722][ T5537] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.458962][ T5543] loop1: p1 < > p2 p4 < p5 > [ 47.458987][ T5543] loop1: partition table partially beyond EOD, truncated [ 47.459104][ T5543] loop1: p1 start 134217728 is beyond EOD, truncated [ 47.459114][ T5543] loop1: p2 size 591360 extends beyond EOD, truncated [ 47.460196][ T5543] loop1: p5 size 591360 extends beyond EOD, truncated [ 47.464435][ T5543] binder: tried to use weak ref as strong ref [ 47.464447][ T5543] binder: 5542:5543 Acquire 1 refcount change on invalid ref 0 ret -22 [ 47.464630][ T5543] binder: 5542:5543 got transaction to invalid handle, 1 [ 47.464640][ T5543] binder: 5542:5543 cannot find target node [ 47.464653][ T5543] binder: 5542:5543 transaction call to 0:0 failed 6/29201/-22, code 0 size 72-24 line 3236 [ 47.464750][ T5543] binder: 5542:5543 ioctl 80026101 200012c0 returned -22 [ 47.464942][ T1499] binder: undelivered TRANSACTION_ERROR: 29201 [ 47.529618][ T5547] netlink: 4 bytes leftover after parsing attributes in process `syz.1.174'. [ 47.535809][ T5551] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 47.538374][ T5551] overlayfs: missing 'lowerdir' [ 47.577015][ T4896] udevd[4896]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 47.581428][ T4664] udevd[4664]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 47.584022][ T4663] udevd[4663]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 47.592727][ T5547] team0: Port device team_slave_0 removed [ 47.612459][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.628202][ T1281] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.630280][ T1281] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.631935][ T1281] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.671798][ T5560] vfat: Unknown parameter 'utR8' [ 47.672220][ T5560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.176'. [ 47.704020][ T5565] nfs: Unknown parameter 'smackfstransmuteCÒ?{)‹îSC¸/Kß?Ä W¹¢¬­yPüOyËñiÉ9¸ !{&9d£?78Ý9’ƒ•ìø0ØÐèi6 AÀ*§U©Ø¢QšƒeýÂYyÞæ[‹ÿBaÙÎô£ÛlÈ©&ç®AA€:DYt‚p£&›Œ˜„ûW9ÄËHcsY壧ƒ ãõïƒêÓþÉ>cfS&+p¹DŒ| TæY|¡XIˆÿ:­ì©m€~;øF‘'ëù£J$3ψŠ¥qŒ·wÈŽ·’?IFZ ñ¹t¥{ÀUÏ$i»)²&šR§Täl±ïˆ!ߪ'âеºKó_soa&~ŒðÓð¸rs×®… O»…©?Ð?†‘' [ 47.707628][ T5565] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 47.707643][ T5565] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 47.716932][ T5565] vhci_hcd vhci_hcd.0: Device attached [ 47.759938][ T5565] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.760997][ T5565] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.825568][ T5571] EXT4-fs: Ignoring removed bh option [ 47.830404][ T5571] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 47.830883][ T5571] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 47.836781][ T5571] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 47.838984][ T5571] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 47.843070][ T5571] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.893784][ T4674] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.951019][ T4758] usb 6-1: new low-speed USB device number 2 using vhci_hcd [ 47.989154][ T5599] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.181: inode has both inline data and extents flags [ 47.989198][ T5599] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 47.989316][ T5599] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.181: couldn't read orphan inode 15 (err -117) [ 47.989331][ T5599] loop0: lost filesystem error report for type 5 error -117 [ 47.989868][ T5599] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.042318][ T5599] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 48.045880][ T5599] evm: overlay not supported [ 48.064454][ T5613] netlink: 28 bytes leftover after parsing attributes in process `syz.3.183'. [ 48.077361][ T4674] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.266712][ T5633] EXT4-fs: inline encryption not supported [ 48.266753][ T5633] EXT4-fs: Ignoring removed oldalloc option [ 48.334775][ T5634] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 48.334957][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 48.507264][ T4982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 48.514897][ T5633] EXT4-fs (loop3): 1 truncate cleaned up [ 48.517588][ T5633] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.528415][ T5633] tipc: Started in network mode [ 48.529586][ T5633] tipc: Node identity aaaaaaaaaa34, cluster identity 4711 [ 48.531120][ T5633] tipc: Enabled bearer , priority 10 [ 48.536929][ T5566] vhci_hcd: connection reset by peer [ 48.539176][ T39] vhci_hcd vhci_hcd.2: stop threads [ 48.539390][ T39] vhci_hcd vhci_hcd.2: release socket [ 48.539770][ T39] vhci_hcd vhci_hcd.2: disconnect device [ 48.729072][ T4681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 48.770928][ T5631] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 48.785673][ T5631] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ce01c, mo2=0002] [ 48.785765][ T5631] System zones: 1-12 [ 48.785894][ T5631] EXT4-fs (loop0): orphan cleanup on readonly fs [ 48.786246][ T5631] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.188: invalid indirect mapped block 12 (level 1) [ 48.786274][ T5631] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 48.788846][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 48.788862][ C0] EXT4-fs (loop0): initial error at time 48: ext4_free_branches:1023: inode 11 [ 48.788893][ C0] EXT4-fs (loop0): last error at time 48: ext4_free_branches:1023: inode 11 [ 48.789121][ T5631] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.188: invalid indirect mapped block 2 (level 2) [ 48.789154][ T5631] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 48.790482][ T5631] EXT4-fs (loop0): 1 truncate cleaned up [ 48.790954][ T5631] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 48.798538][ T5631] netlink: 16 bytes leftover after parsing attributes in process `syz.0.188'. [ 48.823545][ T4671] EXT4-fs error (device loop3): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 48.828723][ T4671] EXT4-fs error (device loop3): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 48.829051][ T4671] EXT4-fs error (device loop3): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 49.058213][ T4674] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 49.094803][ T4678] Bluetooth: hci4: unexpected event for opcode 0x0c47 [ 49.094821][ T4671] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.133594][ T1405] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.140886][ T5652] set_capacity_and_notify: 9 callbacks suppressed [ 49.147112][ T5652] loop0: detected capacity change from 0 to 1024 [ 49.156535][ T5649] loop1: detected capacity change from 0 to 128 [ 49.158714][ T5652] ext4: Unknown parameter '' [ 49.160600][ T5649] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 49.160631][ T5649] System zones: 1-3, 19-19, 35-36 [ 49.161214][ T5649] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 49.171510][ T5649] EXT4-fs warning (device loop1): ext4_group_add:1735: No reserved GDT blocks, can't resize [ 49.181085][ T4672] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.195763][ T5658] ip6_vti0: entered promiscuous mode [ 49.236414][ T4673] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.252747][ T1405] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.270101][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 49.274844][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 49.275270][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 49.275631][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 49.275850][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 49.306408][ T5673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 49.306566][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 49.314809][ T5664] loop4: detected capacity change from 0 to 8192 [ 49.316333][ T5676] netlink: 4 bytes leftover after parsing attributes in process `syz.0.202'. [ 49.318262][ T5676] netlink: 'syz.0.202': attribute type 3 has an invalid length. [ 49.321238][ T5676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.202'. [ 49.354936][ T1405] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.361695][ T5664] loop4: p1 p2 p3 [ 49.376064][ T5682] loop0: detected capacity change from 0 to 512 [ 49.389175][ T5684] loop1: detected capacity change from 0 to 1024 [ 49.390678][ T5684] EXT4-fs: Ignoring removed i_version option [ 49.391898][ T5684] EXT4-fs: inline encryption not supported [ 49.392213][ T5682] EXT4-fs (loop0): 1 truncate cleaned up [ 49.392656][ T5682] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.398104][ T5677] netlink: 'syz.2.201': attribute type 11 has an invalid length. [ 49.403332][ T5684] EXT4-fs (loop1): Test dummy encryption mode enabled [ 49.405189][ T5684] EXT4-fs (loop1): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 49.418708][ T5684] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #4: comm syz.1.204: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 49.418759][ T5684] loop1: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 49.418899][ T5684] EXT4-fs error (device loop1): ext4_quota_enable:7228: comm syz.1.204: Bad quota inode: 4, type: 1 [ 49.418914][ T5684] loop1: lost filesystem error report for type 5 error -117 [ 49.418986][ T5684] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 49.419183][ T5684] EXT4-fs (loop1): mount failed [ 49.444497][ T4674] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.463951][ T5684] netlink: 32 bytes leftover after parsing attributes in process `syz.1.204'. [ 49.521388][ T1405] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.530652][ T4431] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 49.789886][ T9] tipc: Node number set to 10398378 [ 49.822895][ T5699] lo speed is unknown, defaulting to 1000 [ 49.849131][ T5699] lo speed is unknown, defaulting to 1000 [ 50.222919][ T5715] loop2: detected capacity change from 0 to 512 [ 50.223568][ T5715] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 50.223583][ T5715] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 50.227922][ T5715] EXT4-fs error (device loop2): __ext4_get_inode_loc:4885: comm syz.2.209: Invalid inode table block 1 in block_group 0 [ 50.227958][ T5715] loop2: lost filesystem error report for type 5 error -117 [ 50.232703][ T5715] EXT4-fs (loop2): Remounting filesystem read-only [ 50.232767][ T5715] EXT4-fs (loop2): get root inode failed [ 50.232787][ T5715] EXT4-fs (loop2): mount failed [ 50.328523][ T1405] bridge_slave_0: left allmulticast mode [ 50.328599][ T1405] bridge_slave_0: left promiscuous mode [ 50.329215][ T1405] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.382999][ T5721] loop1: detected capacity change from 0 to 512 [ 50.389208][ T5721] EXT4-fs: Mount option(s) incompatible with ext2 [ 50.535778][ T5729] loop2: detected capacity change from 0 to 128 [ 50.539258][ T5734] binder: 5733:5734 tried to acquire reference to desc 0, got 1 instead [ 50.539904][ T5734] binder: 5733:5734 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 50.539923][ T5734] binder: 5734 RLIMIT_NICE not set [ 50.540016][ T5734] binder: undelivered transaction 11, fd fixups failed [ 50.540043][ T5734] binder: 5733:5734 async transaction 11 fd fixups failed 29201/-12, line 5083 [ 50.540066][ T5734] binder: undelivered transaction 12, fd fixups failed [ 50.540112][ T5734] binder: 5733:5734 async transaction 12 fd fixups failed 29201/-12, line 5083 [ 50.543427][ T856] binder: undelivered TRANSACTION_COMPLETE [ 50.543441][ T856] binder: undelivered TRANSACTION_COMPLETE [ 50.555609][ T5729] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 50.573585][ T5729] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.212: checksumming directory block 0 [ 50.595007][ T5729] EXT4-fs (loop2): Remounting filesystem read-only [ 50.625028][ T4670] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 50.681830][ T5747] netlink: 36 bytes leftover after parsing attributes in process `syz.2.215'. [ 50.771880][ T1405] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 50.795090][ T1405] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 50.801005][ T1405] bond0 (unregistering): Released all slaves [ 50.803557][ T5699] lo speed is unknown, defaulting to 1000 [ 50.804752][ T5699] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 50.817950][ T5699] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 50.885012][ T5699] lo speed is unknown, defaulting to 1000 [ 50.889000][ T1405] tipc: Disabling bearer [ 50.896391][ T5763] capability: warning: `syz.1.219' uses 32-bit capabilities (legacy support in use) [ 50.904141][ T1405] tipc: Left network mode [ 50.904869][ T5699] lo speed is unknown, defaulting to 1000 [ 50.905420][ T5699] lo speed is unknown, defaulting to 1000 [ 50.905761][ T5699] lo speed is unknown, defaulting to 1000 [ 50.906106][ T5699] lo speed is unknown, defaulting to 1000 [ 50.906417][ T5699] lo speed is unknown, defaulting to 1000 [ 50.933350][ T5763] syzkaller1: entered promiscuous mode [ 50.933388][ T5763] syzkaller1: entered allmulticast mode [ 50.976099][ T5777] loop4: detected capacity change from 0 to 512 [ 51.005416][ T5777] EXT4-fs (loop4): Invalid default hash set in the superblock [ 51.007851][ T5777] netlink: 'syz.4.223': attribute type 2 has an invalid length. [ 51.174086][ T5663] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.174133][ T5663] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.174232][ T5663] bridge_slave_0: entered allmulticast mode [ 51.174717][ T5663] bridge_slave_0: entered promiscuous mode [ 51.185222][ T4359] 8021q: adding VLAN 0 to HW filter on device eth1 [ 51.189276][ T5663] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.193112][ T5663] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.193251][ T5663] bridge_slave_1: entered allmulticast mode [ 51.193777][ T5663] bridge_slave_1: entered promiscuous mode [ 51.239956][ T5663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.250037][ T5811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.252229][ T5811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.287822][ T50] Bluetooth: hci1: command tx timeout [ 51.313799][ T5817] loop1: detected capacity change from 0 to 1024 [ 51.314148][ T5817] EXT4-fs: Ignoring removed nobh option [ 51.314165][ T5817] EXT4-fs: Ignoring removed i_version option [ 51.334424][ T5817] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.363827][ T5663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.395654][ T5663] team0: Port device team_slave_0 added [ 51.411256][ T5817] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 51.412067][ T5817] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 51.412083][ T5817] EXT4-fs (loop1): This should not happen!! Data will be lost [ 51.412083][ T5817] [ 51.412091][ T5817] EXT4-fs (loop1): Total free blocks count 0 [ 51.412097][ T5817] EXT4-fs (loop1): Free/Dirty block details [ 51.412106][ T5817] EXT4-fs (loop1): free_blocks=20480 [ 51.412114][ T5817] EXT4-fs (loop1): dirty_blocks=3312 [ 51.412120][ T5817] EXT4-fs (loop1): Block reservation details [ 51.412126][ T5817] EXT4-fs (loop1): i_reserved_data_blocks=207 [ 51.459901][ T40] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 4 with error 28 [ 51.462713][ T5663] team0: Port device team_slave_1 added [ 51.469876][ T4673] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 51.472747][ T5828] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.563257][ T1405] hsr_slave_0: left promiscuous mode [ 51.572673][ T1405] hsr_slave_1: left promiscuous mode [ 51.573058][ T1405] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.573073][ T1405] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 51.576970][ T1405] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.577000][ T1405] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 51.651744][ T5837] EXT4-fs error (device loop0): ext4_empty_dir:3085: inode #11: comm syz.0.230: Directory hole found for htree leaf block 0 [ 51.768094][ T4681] net_ratelimit: 1 callbacks suppressed [ 51.768121][ T4681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 51.829974][ T4431] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 51.836670][ T1405] veth1_macvtap: left promiscuous mode [ 51.838216][ T1405] veth0_macvtap: left promiscuous mode [ 51.839209][ T1405] veth1_vlan: left promiscuous mode [ 51.840156][ T1405] veth0_vlan: left promiscuous mode [ 51.855305][ T5836] FAT-fs (loop4): Directory bread(block 64) failed [ 51.855345][ T5836] FAT-fs (loop4): Directory bread(block 65) failed [ 51.855374][ T5836] FAT-fs (loop4): Directory bread(block 66) failed [ 51.855385][ T5836] FAT-fs (loop4): Directory bread(block 67) failed [ 51.855652][ T5836] FAT-fs (loop4): Directory bread(block 68) failed [ 51.855686][ T5836] FAT-fs (loop4): Directory bread(block 69) failed [ 51.855718][ T5836] FAT-fs (loop4): Directory bread(block 70) failed [ 51.855731][ T5836] FAT-fs (loop4): Directory bread(block 71) failed [ 51.855755][ T5836] FAT-fs (loop4): Directory bread(block 72) failed [ 51.855766][ T5836] FAT-fs (loop4): Directory bread(block 73) failed [ 52.009682][ T1405] team0 (unregistering): Port device team_slave_1 removed [ 52.016140][ T1405] team0 (unregistering): Port device team_slave_0 removed [ 52.074758][ T5854] binder: 5852:5854 tried to acquire reference to desc 0, got 1 instead [ 52.075782][ T5854] binder: 5852:5854 got reply transaction with no transaction stack [ 52.075803][ T5854] binder: 5852:5854 transaction reply to 0:0 failed 25/29201/-71, code 0 size 0-0 line 3139 [ 52.140784][ T5663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.140812][ T5663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.140843][ T5663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.152328][ T5663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.154015][ T5663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.158176][ T5864] __nla_validate_parse: 2 callbacks suppressed [ 52.158191][ T5864] netlink: 8 bytes leftover after parsing attributes in process `syz.4.239'. [ 52.160879][ T5663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.201509][ T5864] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 52.203586][ T5864] overlayfs: failed to set xattr on upper [ 52.203630][ T5864] overlayfs: ...falling back to redirect_dir=nofollow. [ 52.203658][ T5864] overlayfs: ...falling back to uuid=null. [ 52.208552][ T5867] EXT4-fs warning (device loop2): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop2. [ 52.249483][ T5663] hsr_slave_0: entered promiscuous mode [ 52.254187][ T5663] hsr_slave_1: entered promiscuous mode [ 52.254432][ T5663] debugfs: 'hsr0' already exists in 'hsr' [ 52.254448][ T5663] Cannot create hsr debugfs directory [ 52.394799][ T4674] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.619320][ T5897] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 52.640367][ T5897] EXT4-fs (loop2): 1 truncate cleaned up [ 52.646113][ T5897] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.293299][ T4431] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 53.306851][ T4359] 8021q: adding VLAN 0 to HW filter on device eth0 [ 53.311581][ T5895] lo speed is unknown, defaulting to 1000 [ 53.340329][ T5891] netlink: 4 bytes leftover after parsing attributes in process `syz.0.243'. [ 53.359194][ T4758] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 53.422612][ T50] Bluetooth: hci1: command tx timeout [ 53.426502][ T4670] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.457074][ T5904] netlink: 27696 bytes leftover after parsing attributes in process `syz.4.244'. [ 53.550967][ T5902] batadv_slave_0: entered promiscuous mode [ 53.553994][ T5663] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 53.558983][ T5663] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 53.568870][ T5663] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 53.573460][ T5663] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 53.573797][ T5663] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 53.578849][ T5663] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 53.586344][ T5663] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 53.594094][ T5663] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 53.607984][ T1499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 53.651293][ T5901] batadv_slave_0: left promiscuous mode [ 53.674408][ T5663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.744037][ T5663] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.755672][ T1310] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.755721][ T1310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.764467][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.764518][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.814132][ T5931] EXT4-fs: Ignoring removed nobh option [ 53.814169][ T5931] EXT4-fs: Ignoring removed bh option [ 53.818080][ T5931] EXT4-fs (loop0): bad geometry: bigalloc file system with non-zero first_data_block [ 53.818080][ T5931] [ 53.839786][ T50] Bluetooth: hci4: unexpected event for opcode 0x203d [ 53.892768][ T4359] 8021q: adding VLAN 0 to HW filter on device eth2 [ 53.969947][ T5948] EXT4-fs: Ignoring removed mblk_io_submit option [ 53.973913][ T5948] EXT4-fs (loop4): orphan cleanup on readonly fs [ 53.974088][ T5948] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 53.983425][ T5948] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.250: attempt to clear invalid blocks 2 len 1 [ 53.983462][ T5948] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 53.984908][ T5948] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 53.985970][ T5948] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.250: invalid indirect mapped block 1819239214 (level 0) [ 53.985995][ T5948] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 53.986598][ T5948] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.250: invalid indirect mapped block 1819239214 (level 1) [ 53.986615][ T5948] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 53.987632][ C0] EXT4-fs (loop4): error count since last fsck: 4 [ 53.987647][ C0] EXT4-fs (loop4): initial error at time 53: ext4_clear_blocks:876: inode 13 [ 53.987666][ C0] EXT4-fs (loop4): last error at time 53: ext4_free_branches:1023: inode 13 [ 53.989250][ T5948] EXT4-fs (loop4): 1 truncate cleaned up [ 54.167928][ T5663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.259532][ T856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 54.317223][ T5663] veth0_vlan: entered promiscuous mode [ 54.329394][ T4431] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 54.334147][ T5663] veth1_vlan: entered promiscuous mode [ 54.343941][ T4359] 8021q: adding VLAN 0 to HW filter on device eth3 [ 54.361939][ T5663] veth0_macvtap: entered promiscuous mode [ 54.367432][ T5995] netlink: 44 bytes leftover after parsing attributes in process `syz.2.257'. [ 54.373415][ T5663] veth1_macvtap: entered promiscuous mode [ 54.383173][ T5998] set_capacity_and_notify: 6 callbacks suppressed [ 54.384461][ T5998] loop4: detected capacity change from 0 to 512 [ 54.390174][ T5663] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.395060][ T5998] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 54.400895][ T5663] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.402344][ T5998] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.258: bad orphan inode 131083 [ 54.402367][ T5998] loop4: lost filesystem error report for type 5 error -117 [ 54.420877][ T15] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.420939][ T15] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.420975][ T15] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.420997][ T15] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.493372][ T15] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.493395][ T15] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.510791][ T15] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.510814][ T15] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.870842][ T856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 55.326959][ T6027] loop5: detected capacity change from 0 to 512 [ 55.328625][ T6031] netlink: 332 bytes leftover after parsing attributes in process `syz.1.263'. [ 55.355976][ T6036] netlink: 12 bytes leftover after parsing attributes in process `syz.4.264'. [ 55.371604][ T4758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 55.433407][ T6041] loop5: detected capacity change from 0 to 1024 [ 55.437859][ T6041] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 55.437944][ T6041] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 55.443314][ T6042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 55.443518][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 55.447390][ T6041] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 55.447546][ T6041] EXT4-fs (loop5): orphan cleanup on readonly fs [ 55.448866][ T6041] EXT4-fs error (device loop5): ext4_read_inode_bitmap:167: comm syz.5.267: Inode bitmap for bg 0 marked uninitialized [ 55.448879][ T6041] loop5: lost filesystem error report for type 5 error -117 [ 55.449043][ T6041] EXT4-fs (loop5): Remounting filesystem read-only [ 55.449071][ T50] Bluetooth: hci1: command tx timeout [ 55.450754][ T6041] EXT4-fs (loop5): shut down requested (1) [ 55.451293][ T6041] netlink: 12 bytes leftover after parsing attributes in process `syz.5.267'. [ 55.451307][ T6041] netlink: 20 bytes leftover after parsing attributes in process `syz.5.267'. [ 55.526292][ T6049] RGB/YUV Input: ================= START STATUS ================= [ 55.526323][ T6049] RGB/YUV Input: Test Pattern: 75% Colorbar [ 55.527070][ T6049] RGB/YUV Input: Show Information: All [ 55.527082][ T6049] RGB/YUV Input: Vertical Flip: false [ 55.527092][ T6049] RGB/YUV Input: Horizontal Flip: false [ 55.527100][ T6049] RGB/YUV Input: Brightness: 128 [ 55.527110][ T6049] RGB/YUV Input: Contrast: 128 [ 55.527118][ T6049] RGB/YUV Input: Hue: 0 [ 55.527127][ T6049] RGB/YUV Input: Saturation: 128 [ 55.527135][ T6049] RGB/YUV Input: Pixel Rate: 160000000 [ 55.527145][ T6049] RGB/YUV Input: Horizontal Blanking: 800 [ 55.527153][ T6049] RGB/YUV Input: Vertical Blanking: 3223 [ 55.527162][ T6049] RGB/YUV Input: ================== END STATUS ================== [ 55.531375][ T6049] netlink: 'syz.0.268': attribute type 11 has an invalid length. [ 55.531387][ T6049] netlink: 80 bytes leftover after parsing attributes in process `syz.0.268'. [ 55.601354][ T6056] loop0: detected capacity change from 0 to 2048 [ 56.027464][ T6064] fuse: Bad value for 'user_id' [ 56.027497][ T6064] fuse: Bad value for 'user_id' [ 56.098932][ T6067] syzkaller1: entered promiscuous mode [ 56.098961][ T6067] syzkaller1: entered allmulticast mode [ 56.236481][ T6076] sch_fq: defrate 0 ignored. [ 56.953666][ T6112] loop0: detected capacity change from 0 to 4096 [ 56.957058][ T6112] EXT4-fs: Ignoring removed mblk_io_submit option [ 56.961649][ T6112] EXT4-fs (loop0): Test dummy encryption mode enabled [ 56.988603][ T6112] tipc: Started in network mode [ 56.988643][ T6112] tipc: Node identity ac14142f, cluster identity 4711 [ 56.989301][ T6112] tipc: New replicast peer: 0.0.0.0 [ 56.989646][ T6112] tipc: Enabled bearer , priority 10 [ 56.989916][ T6112] tipc: New replicast peer: 224.0.0.1 [ 57.038231][ T6115] tmpfs: Unknown parameter 'gr' [ 57.059773][ T6117] netlink: 80 bytes leftover after parsing attributes in process `syz.0.287'. [ 57.118332][ T6121] loop4: detected capacity change from 0 to 512 [ 57.120904][ T6121] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #12: comm syz.4.289: missing EA_INODE flag [ 57.120940][ T6121] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 57.121152][ T6121] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.289: error while reading EA inode 12 err=-117 [ 57.121164][ T6121] loop4: lost filesystem error report for type 5 error -117 [ 57.123445][ T6121] EXT4-fs (loop4): 1 orphan inode deleted [ 57.383032][ T6154] netlink: 20 bytes leftover after parsing attributes in process `syz.2.294'. [ 57.391624][ T6154] tipc: Started in network mode [ 57.391654][ T6154] tipc: Node identity 4, cluster identity 4711 [ 57.391663][ T6154] tipc: Node number set to 4 [ 57.392219][ T6154] tipc: Can't bind to reserved service type 0 [ 57.400405][ T6150] loop0: detected capacity change from 0 to 512 [ 57.408745][ T6150] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 57.408766][ T6150] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 57.408776][ T6150] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.293: Corrupt directory, running e2fsck is recommended [ 57.409369][ T6150] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 57.410040][ T6150] EXT4-fs error (device loop0): ext4_iget_extra_inode:5128: inode #15: comm syz.0.293: corrupted in-inode xattr: invalid ea_ino [ 57.410059][ T6150] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 57.416721][ T6150] EXT4-fs (loop0): Remounting filesystem read-only [ 57.458468][ T24] net_ratelimit: 2 callbacks suppressed [ 57.458504][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 57.467479][ T6169] loop2: detected capacity change from 0 to 512 [ 57.531290][ T50] Bluetooth: hci1: command tx timeout [ 57.543733][ T30] audit: type=1326 audit(57.530:7311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6173 comm="syz.0.296" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84d77a28 code=0x7ffc0000 [ 57.547746][ T30] audit: type=1326 audit(57.530:7312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6173 comm="syz.0.296" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=203 compat=0 ip=0xffff84d77a28 code=0x7ffc0000 [ 57.547767][ T30] audit: type=1326 audit(57.530:7313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6173 comm="syz.0.296" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84d77a28 code=0x7ffc0000 [ 57.578689][ T6180] usb usb5: usbfs: process 6180 (syz.4.299) did not claim interface 0 before use [ 57.600570][ T30] audit: type=1326 audit(57.590:7314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6173 comm="syz.0.296" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffff84d77a28 code=0x7ffc0000 [ 57.600609][ T30] audit: type=1326 audit(57.590:7315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6173 comm="syz.0.296" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84d77a28 code=0x7ffc0000 [ 57.603772][ T30] audit: type=1326 audit(57.590:7316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6173 comm="syz.0.296" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffff84d77a28 code=0x7ffc0000 [ 57.603803][ T30] audit: type=1326 audit(57.590:7317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6173 comm="syz.0.296" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84d77a28 code=0x7ffc0000 [ 57.603833][ T30] audit: type=1326 audit(57.590:7318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6173 comm="syz.0.296" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff84d79a18 code=0x7ffc0000 [ 57.603853][ T30] audit: type=1326 audit(57.590:7319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6173 comm="syz.0.296" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=206 compat=0 ip=0xffff84d5a8ec code=0x7ffc0000 [ 57.603872][ T30] audit: type=1326 audit(57.590:7320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6173 comm="syz.0.296" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=207 compat=0 ip=0xffff84d5a8ec code=0x7ffc0000 [ 57.605670][ T6169] overlayfs: failed to resolve './bus': -2 [ 57.646308][ T6175] loop0: detected capacity change from 0 to 128 [ 57.692973][ T6191] loop2: detected capacity change from 0 to 256 [ 57.770916][ T6198] netlink: 4 bytes leftover after parsing attributes in process `syz.4.304'. [ 57.773456][ T6198] netlink: 52 bytes leftover after parsing attributes in process `syz.4.304'. [ 57.775211][ T6198] netlink: 52 bytes leftover after parsing attributes in process `syz.4.304'. [ 57.776809][ T6198] netlink: 52 bytes leftover after parsing attributes in process `syz.4.304'. [ 57.779346][ T6196] EXT4-fs: Ignoring removed bh option [ 57.802265][ T6198] netlink: 8 bytes leftover after parsing attributes in process `syz.4.304'. [ 57.997774][ T4982] tipc: Node number set to 2886997039 [ 58.170432][ T6244] binder: 6243:6244 tried to acquire reference to desc 0, got 1 instead [ 58.173265][ T6244] binder: 6243:6244 got reply transaction with bad transaction stack, transaction 30 has target 6243:0 [ 58.173611][ T6244] binder_debug: 4 callbacks suppressed [ 58.173618][ T6244] binder: 6243:6244 transaction reply to 0:0 failed 31/29201/-71, code 0 size 0-0 line 3154 [ 58.173653][ T6244] binder: 6243:6244 ioctl c0306201 20000680 returned -14 [ 58.174679][ T4982] binder: release 6243:6244 transaction 30 out, still active [ 58.174693][ T4982] binder: undelivered TRANSACTION_ERROR: 29201 [ 58.183263][ T4982] binder: send failed reply for transaction 30, target dead [ 58.263474][ T6252] syzkaller0: entered promiscuous mode [ 58.264708][ T6252] syzkaller0: entered allmulticast mode [ 58.499452][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.209137][ T4681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.301958][ T6285] mmap: syz.5.329 (6285): VmData 37756928 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data. [ 59.338222][ T6294] netlink: 20 bytes leftover after parsing attributes in process `syz.1.331'. [ 59.338256][ T6294] netlink: 4 bytes leftover after parsing attributes in process `syz.1.331'. [ 59.368570][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.370428][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.397945][ T6301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.334'. [ 59.528012][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.641595][ T6318] set_capacity_and_notify: 3 callbacks suppressed [ 59.641644][ T6318] loop5: detected capacity change from 0 to 2048 [ 60.582574][ T4758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 60.648237][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 60.849220][ T6366] loop1: detected capacity change from 0 to 512 [ 60.850080][ T6366] EXT4-fs: inline encryption not supported [ 60.850166][ T6366] /dev/loop1: Can't open blockdev [ 60.880933][ T6370] loop4: detected capacity change from 0 to 512 [ 60.882514][ T6370] EXT4-fs: Ignoring removed i_version option [ 60.886930][ T6370] EXT4-fs: Ignoring removed nobh option [ 60.889010][ T6370] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 60.896208][ T6370] EXT4-fs (loop4): 1 truncate cleaned up [ 61.609231][ T4982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 61.812220][ T6407] loop0: detected capacity change from 0 to 512 [ 61.825575][ T6407] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 61.868634][ T6424] netlink: 100 bytes leftover after parsing attributes in process `syz.2.364'. [ 61.895147][ T6426] loop2: detected capacity change from 0 to 512 [ 61.896852][ T6426] EXT4-fs: Ignoring removed i_version option [ 61.898074][ T6426] EXT4-fs: Ignoring removed bh option [ 61.902339][ T6426] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.365: inode #13: comm syz.2.365: iget: illegal inode # [ 61.904567][ T6426] loop2: lost filesystem error report for type 5 error -117 [ 61.904897][ T6426] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.365: couldn't read orphan inode 13 (err -117) [ 61.908392][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 61.908404][ C0] EXT4-fs (loop2): initial error at time 61: ext4_orphan_get:1397 [ 61.908422][ C0] EXT4-fs (loop2): last error at time 61: ext4_orphan_get:1397 [ 61.914924][ T6426] loop2: lost filesystem error report for type 5 error -117 [ 61.945088][ T6431] loop5: detected capacity change from 0 to 128 [ 61.969165][ T6437] binder: 6436:6437 ioctl c0306201 20000180 returned -14 [ 61.970124][ T6437] binder: 6436:6437 got transaction to invalid handle, 1 [ 61.970491][ T6437] binder: 6436:6437 cannot find target node [ 61.970522][ T6437] binder: 6436:6437 transaction call to 0:0 failed 35/29201/-22, code 0 size 72-24 line 3236 [ 61.971225][ T6437] binder: 6436:6437 got transaction to invalid handle, 3 [ 61.971235][ T6437] binder: 6436:6437 cannot find target node [ 61.971246][ T6437] binder: 6436:6437 transaction call to 0:0 failed 36/29201/-22, code 0 size 0-0 line 3236 [ 61.993710][ T6431] syzkaller0: entered promiscuous mode [ 61.993745][ T6431] syzkaller0: entered allmulticast mode [ 61.998250][ T4982] binder: undelivered TRANSACTION_ERROR: 29201 [ 61.998314][ T4982] binder: undelivered TRANSACTION_ERROR: 29201 [ 62.054055][ T6444] loop2: detected capacity change from 0 to 512 [ 62.068017][ T6444] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal [ 62.181995][ T6448] netlink: 'syz.2.370': attribute type 1 has an invalid length. [ 62.257145][ T856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 62.262789][ T6452] loop1: detected capacity change from 0 to 1024 [ 62.263521][ T6452] EXT4-fs: inline encryption not supported [ 62.264900][ T6452] EXT4-fs: Mount option(s) incompatible with ext2 [ 62.366346][ T6457] xt_hashlimit: size too large, truncated to 1048576 [ 62.573482][ T6453] team0: Device gtp0 is of different type [ 62.590209][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 62.611832][ T6460] loop1: detected capacity change from 0 to 2048 [ 62.651103][ T4982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 62.655294][ T6460] loop1: p1 < > p4 < > [ 62.655320][ T6460] loop1: partition table partially beyond EOD, truncated [ 62.656305][ T6460] loop1: p4 start 42180 is beyond EOD, truncated [ 62.719048][ T6464] loop0: detected capacity change from 0 to 128 [ 63.204155][ T6498] netlink: 632 bytes leftover after parsing attributes in process `syz.5.379'. [ 63.894114][ T4758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 64.183191][ T6513] netlink: 16 bytes leftover after parsing attributes in process `syz.2.384'. [ 64.183221][ T6513] netlink: 20 bytes leftover after parsing attributes in process `syz.2.384'. [ 64.187287][ T6513] EXT4-fs: Ignoring removed nomblk_io_submit option [ 64.187513][ T6513] EXT4-fs: Ignoring removed bh option [ 64.202602][ T6513] EXT4-fs error (device loop2): mb_free_blocks:2049: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 64.203434][ T6513] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #11: comm syz.2.384: corrupted inode contents [ 64.203460][ T6513] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 64.204033][ T6513] EXT4-fs error (device loop2): ext4_dirty_inode:6587: inode #11: comm syz.2.384: mark_inode_dirty error [ 64.204066][ T6513] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 64.204267][ T6513] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.384: invalid indirect mapped block 1 (level 1) [ 64.204281][ T6513] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 64.204401][ T6513] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #11: comm syz.2.384: corrupted inode contents [ 64.204412][ T6513] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 64.205173][ T6513] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 64.205187][ T6513] loop2: lost filesystem error report for type 5 error -117 [ 64.205310][ T6513] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #11: comm syz.2.384: corrupted inode contents [ 64.205321][ T6513] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 64.205436][ T6513] EXT4-fs error (device loop2): ext4_truncate:4690: inode #11: comm syz.2.384: mark_inode_dirty error [ 64.205447][ T6513] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 64.205561][ T6513] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 64.205570][ T6513] loop2: lost filesystem error report for type 5 error -117 [ 64.205726][ T6513] EXT4-fs (loop2): 1 truncate cleaned up [ 64.213682][ T6513] EXT4-fs error (device loop2): ext4_readdir:265: inode #2: block 13: comm syz.2.384: path /86/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 64.489187][ T1578] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.489239][ T1578] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.493390][ T1281] sl0: compressed packet ignored [ 64.499763][ T26] cfg80211: failed to load regulatory.db [ 64.967999][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 65.398861][ T6527] pim6reg: entered allmulticast mode [ 65.400055][ T6527] pim6reg: left allmulticast mode [ 65.421008][ T6528] pim6reg: entered allmulticast mode [ 65.422078][ T6527] pim6reg: left allmulticast mode [ 65.492888][ T6531] syz_tun: entered allmulticast mode [ 65.547286][ T6532] netlink: 'syz.2.389': attribute type 39 has an invalid length. [ 65.554948][ T6532] syz_tun (unregistering): left allmulticast mode [ 65.611012][ T4681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 65.724839][ T6464] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 65.795781][ T6553] tmpfs: Bad value for 'mpol' [ 65.808210][ T4674] EXT4-fs unmount: 33 callbacks suppressed [ 65.808245][ T4674] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 65.814292][ T6555] set_capacity_and_notify: 1 callbacks suppressed [ 65.820779][ T6555] loop2: detected capacity change from 0 to 128 [ 65.905511][ T6567] fuse: Bad value for 'group_id' [ 65.905545][ T6567] fuse: Bad value for 'group_id' [ 65.913070][ T6559] loop1: detected capacity change from 0 to 512 [ 65.930288][ T6570] loop0: detected capacity change from 0 to 128 [ 66.018786][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 66.078498][ T6587] netlink: 'syz.0.401': attribute type 7 has an invalid length. [ 66.080830][ T6587] netlink: 'syz.0.401': attribute type 5 has an invalid length. [ 66.082333][ T6587] netlink: 17 bytes leftover after parsing attributes in process `syz.0.401'. [ 66.484998][ T856] lo speed is unknown, defaulting to 1000 [ 67.055018][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.814778][ T6650] fuse: Unknown parameter ' 0x0000000000000008' [ 67.827017][ T6652] binder: BINDER_SET_CONTEXT_MGR already set [ 67.829203][ T6652] binder: 6651:6652 ioctl 4018620d 20001000 returned -16 [ 67.829414][ T6652] binder: 6651:6652 got transaction to invalid handle, 1 [ 67.829430][ T6652] binder: 6651:6652 cannot find target node [ 67.829450][ T6652] binder: 6651:6652 transaction async to 0:0 failed 39/29201/-22, code 0 size 88-24 line 3236 [ 67.829568][ T6652] binder: 6651:6652 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 67.829584][ T6652] binder: 6652 RLIMIT_NICE not set [ 67.902088][ T6665] fuse: Bad value for 'group_id' [ 67.903066][ T6665] fuse: Bad value for 'group_id' [ 67.921636][ T6668] binder: 6649:6668 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 67.921999][ T6668] binder: 6649:6668 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 67.922013][ T6668] binder: 6649:6668 ioctl c0306201 20000540 returned -22 [ 67.923666][ T6668] binder: 6649:6668 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 67.923680][ T6668] binder: 6668 RLIMIT_NICE not set [ 67.961206][ T6670] loop4: detected capacity change from 0 to 256 [ 68.586589][ T4982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 68.660009][ T856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 68.665026][ T9] binder: undelivered TRANSACTION_ERROR: 29201 [ 69.052912][ T6693] netlink: 8 bytes leftover after parsing attributes in process `syz.0.426'. [ 69.057156][ T6695] loop1: detected capacity change from 0 to 512 [ 69.092677][ T6695] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.106489][ T30] kauditd_printk_skb: 66 callbacks suppressed [ 69.106524][ T30] audit: type=1326 audit(69.090:7387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6692 comm="syz.1.428" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95577a28 code=0x7ffc0000 [ 69.106556][ T30] audit: type=1326 audit(69.090:7388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6692 comm="syz.1.428" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=88 compat=0 ip=0xffff95577a28 code=0x7ffc0000 [ 69.106578][ T30] audit: type=1326 audit(69.090:7389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6692 comm="syz.1.428" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95577a28 code=0x7ffc0000 [ 69.120125][ T30] audit: type=1326 audit(69.110:7390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6692 comm="syz.1.428" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=209 compat=0 ip=0xffff95577a28 code=0x7ffc0000 [ 69.124432][ T30] audit: type=1326 audit(69.110:7391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6692 comm="syz.1.428" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95577a28 code=0x7ffc0000 [ 69.136880][ T30] audit: type=1326 audit(69.120:7392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6692 comm="syz.1.428" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=117 compat=0 ip=0xffff95577a28 code=0x7ffc0000 [ 69.136917][ T30] audit: type=1326 audit(69.120:7393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6692 comm="syz.1.428" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95577a28 code=0x7ffc0000 [ 69.136950][ T30] audit: type=1326 audit(69.120:7394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6692 comm="syz.1.428" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff95577a28 code=0x7ffc0000 [ 69.136971][ T30] audit: type=1326 audit(69.120:7395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6692 comm="syz.1.428" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95577a28 code=0x7ffc0000 [ 69.227515][ T30] audit: type=1326 audit(69.150:7396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6692 comm="syz.1.428" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=200 compat=0 ip=0xffff95577a28 code=0x7ffc0000 [ 69.280446][ T4681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 69.314555][ T6718] lo speed is unknown, defaulting to 1000 [ 69.325857][ T6722] netlink: 12 bytes leftover after parsing attributes in process `syz.0.435'. [ 69.346861][ T6727] netlink: 28 bytes leftover after parsing attributes in process `syz.2.436'. [ 69.350255][ T6722] 8021q: adding VLAN 0 to HW filter on device bond2 [ 69.383876][ T6732] fuse: Bad value for 'group_id' [ 69.383913][ T6732] fuse: Bad value for 'group_id' [ 69.609120][ T4796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 69.609157][ T4796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 69.687141][ T6746] lo speed is unknown, defaulting to 1000 [ 69.703620][ T6746] loop0: detected capacity change from 0 to 512 [ 69.705246][ T6746] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 69.709500][ T6746] EXT4-fs (loop0): 1 truncate cleaned up [ 69.709977][ T6746] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.908494][ T4673] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.185204][ T6765] sctp: [Deprecated]: syz.5.445 (pid 6765) Use of struct sctp_assoc_value in delayed_ack socket option. [ 70.185204][ T6765] Use struct sctp_sack_info instead [ 70.251524][ T6773] loop2: detected capacity change from 0 to 256 [ 70.257055][ T6773] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 70.303229][ T6768] loop5: detected capacity change from 0 to 8192 [ 70.439062][ T6782] loop4: detected capacity change from 0 to 512 [ 70.445852][ T6782] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 70.445888][ T6782] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 70.445903][ T6782] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.452: Corrupt directory, running e2fsck is recommended [ 70.452634][ T6782] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 70.454093][ T6782] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.452: corrupted in-inode xattr: invalid ea_ino [ 70.454129][ T6782] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 70.456859][ T6782] EXT4-fs (loop4): Remounting filesystem read-only [ 70.457372][ T6782] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.481249][ T4672] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.549889][ T6796] netlink: 'syz.2.456': attribute type 7 has an invalid length. [ 70.585693][ T6798] loop2: detected capacity change from 0 to 4096 [ 70.587446][ T6798] EXT4-fs: Ignoring removed mblk_io_submit option [ 70.592623][ T6798] ext4: Unknown parameter 'appraise_type' [ 70.649704][ T4982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 70.694695][ T6810] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.460: bg 0: block 393: padding at end of block bitmap is not set [ 70.697963][ T6810] loop2: lost filesystem error report for type 5 error -117 [ 70.699823][ T6810] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 70.702657][ T6810] loop2: lost filesystem error report for type 5 error -117 [ 70.703462][ T6810] EXT4-fs (loop2): 2 truncates cleaned up [ 70.706500][ T6810] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.713302][ T6810] netlink: 4 bytes leftover after parsing attributes in process `syz.2.460'. [ 70.765353][ T4670] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.780821][ T6814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.461'. [ 70.782526][ T6814] netlink: 4 bytes leftover after parsing attributes in process `syz.2.461'. [ 71.004756][ T6827] netlink: 80 bytes leftover after parsing attributes in process `syz.1.465'. [ 71.006322][ T6827] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 71.008768][ T6827] netlink: 64 bytes leftover after parsing attributes in process `syz.1.465'. [ 71.102426][ T6828] set_capacity_and_notify: 1 callbacks suppressed [ 71.102470][ T6828] loop1: detected capacity change from 0 to 1024 [ 71.517000][ T6836] loop4: detected capacity change from 0 to 1024 [ 71.532626][ T6836] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.688206][ T856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 71.697867][ T4796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 71.926353][ T6841] loop1: detected capacity change from 0 to 128 [ 71.930631][ T6841] vfat: Unknown parameter 'nnonumtail' [ 72.524512][ T6745] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 72.578462][ T4674] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.610558][ T4672] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.625689][ T6849] netlink: 16 bytes leftover after parsing attributes in process `syz.2.470'. [ 72.625721][ T6849] netlink: 4 bytes leftover after parsing attributes in process `syz.2.470'. [ 72.731045][ T4982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.750444][ T6856] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 72.829509][ T4982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.842877][ T6865] loop1: detected capacity change from 0 to 512 [ 72.845664][ T6861] loop0: detected capacity change from 0 to 2048 [ 72.858172][ T6865] EXT4-fs (loop1): Test dummy encryption mode enabled [ 73.133269][ T6865] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.133951][ T6861] loop0: p1 < > p3 p4 < > [ 73.133961][ T6861] loop0: partition table partially beyond EOD, truncated [ 73.134046][ T6861] loop0: p1 start 262144 is beyond EOD, truncated [ 73.134055][ T6861] loop0: p3 start 33554432 is beyond EOD, truncated [ 73.191624][ T4673] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.214218][ T6882] loop4: detected capacity change from 0 to 512 [ 73.253221][ T6882] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.479: iget: bad extra_isize 90 (inode size 256) [ 73.253268][ T6882] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 73.256709][ T6882] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.479: error while reading EA inode 11 err=-117 [ 73.256735][ T6882] loop4: lost filesystem error report for type 5 error -117 [ 73.256934][ T6882] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 73.256981][ T6882] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.479: iget: bad extra_isize 90 (inode size 256) [ 73.256993][ T6882] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 73.257648][ C1] EXT4-fs (loop4): error count since last fsck: 3 [ 73.257662][ C1] EXT4-fs (loop4): initial error at time 73: ext4_xattr_inode_iget:441: inode 11 [ 73.257678][ C1] EXT4-fs (loop4): last error at time 73: ext4_xattr_inode_iget:441: inode 11 [ 73.264096][ T6882] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.479: error while reading EA inode 11 err=-117 [ 73.264121][ T6882] loop4: lost filesystem error report for type 5 error -117 [ 73.264334][ T6882] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #18: comm syz.4.479: iget: bad extra_isize 90 (inode size 256) [ 73.264352][ T6882] loop4: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 73.264490][ T6882] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.479: error while reading EA inode 18 err=-117 [ 73.264502][ T6882] loop4: lost filesystem error report for type 5 error -117 [ 73.264660][ T6882] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #18: comm syz.4.479: iget: bad extra_isize 90 (inode size 256) [ 73.264672][ T6882] loop4: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 73.264801][ T6882] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.479: error while reading EA inode 18 err=-117 [ 73.264812][ T6882] loop4: lost filesystem error report for type 5 error -117 [ 73.264975][ T6882] EXT4-fs (loop4): 1 orphan inode deleted [ 73.265444][ T6882] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.285541][ T5709] udevd[5709]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 73.304766][ T4672] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.388515][ T6895] loop1: detected capacity change from 0 to 128 [ 73.627922][ T6907] random: crng reseeded on system resumption [ 73.767804][ T4796] net_ratelimit: 1 callbacks suppressed [ 73.767842][ T4796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.898327][ T6932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.898507][ T6932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.258441][ T6952] loop5: detected capacity change from 0 to 4096 [ 74.258855][ T6952] EXT4-fs: inline encryption not supported [ 74.259294][ T6952] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 74.297559][ T6952] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c198, mo2=0003] [ 74.298713][ T6952] System zones: 0-5 [ 74.308464][ T6952] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.319361][ T6952] fuse: fd is not a fuse device [ 74.335459][ T5663] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.720845][ T6974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.721034][ T6974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.721539][ T6974] __nla_validate_parse: 1 callbacks suppressed [ 74.721548][ T6974] netlink: 532 bytes leftover after parsing attributes in process `syz.2.504'. [ 74.726812][ T50] Bluetooth: hci0: Unknown advertising packet type: 0x53 [ 74.726824][ T50] Bluetooth: hci0: Malformed LE Event: 0x0d [ 74.751928][ T6977] loop4: detected capacity change from 0 to 512 [ 74.759390][ T6977] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 74.759444][ T6977] EXT4-fs: failed to create workqueue [ 74.759460][ T6977] EXT4-fs (loop4): mount failed [ 74.808553][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 74.998134][ T6990] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 75.001115][ T6990] nvme_fabrics: unknown parameter or missing value ' {# wtb' in ctrl creation request [ 75.091111][ T6996] loop4: detected capacity change from 0 to 128 [ 75.100094][ T6996] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 75.130788][ T6996] netlink: 'syz.4.510': attribute type 29 has an invalid length. [ 75.131233][ T6996] netlink: 'syz.4.510': attribute type 29 has an invalid length. [ 75.132356][ T6996] netlink: 204 bytes leftover after parsing attributes in process `syz.4.510'. [ 75.142659][ T6996] [ 75.143068][ T6996] ====================================================== [ 75.144226][ T6996] WARNING: possible circular locking dependency detected [ 75.145591][ T6996] syzkaller #0 Tainted: G L [ 75.146533][ T6996] ------------------------------------------------------ [ 75.147777][ T6996] syz.4.510/6996 is trying to acquire lock: [ 75.148803][ T6996] ffff0000f0c2de80 (&ei->xattr_sem){++++}-{4:4}, at: ext4_xattr_set_handle+0x138/0xe00 [ 75.150505][ T6996] [ 75.150505][ T6996] but task is already holding lock: [ 75.151788][ T6996] ffff0000c9f4ec18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_ext_migrate+0x280/0xc58 [ 75.153625][ T6996] [ 75.153625][ T6996] which lock already depends on the new lock. [ 75.153625][ T6996] [ 75.155498][ T6996] [ 75.155498][ T6996] the existing dependency chain (in reverse order) is: [ 75.157056][ T6996] [ 75.157056][ T6996] -> #1 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 75.158472][ T6996] percpu_down_read_internal+0x5c/0x294 [ 75.159412][ T6996] ext4_writepages+0x16c/0x2d8 [ 75.160329][ T6996] do_writepages+0x270/0x468 [ 75.161146][ T6996] __writeback_single_inode+0x144/0x1808 [ 75.162238][ T6996] writeback_single_inode+0x3b8/0xaa0 [ 75.163303][ T6996] write_inode_now+0x170/0x208 [ 75.164211][ T6996] iput+0x6bc/0xb90 [ 75.165014][ T6996] ext4_xattr_block_set+0x12dc/0x2188 [ 75.166058][ T6996] ext4_expand_extra_isize_ea+0xb18/0x13a0 [ 75.167143][ T6996] __ext4_expand_extra_isize+0x29c/0x370 [ 75.168229][ T6996] __ext4_mark_inode_dirty+0x3a4/0x810 [ 75.169282][ T6996] ext4_evict_inode+0x7a0/0xfc4 [ 75.170278][ T6996] evict+0x4b8/0x740 [ 75.171054][ T6996] iput+0x858/0xb90 [ 75.171842][ T6996] ext4_process_orphan+0x240/0x2b4 [ 75.172824][ T6996] ext4_orphan_cleanup+0x7b8/0xd30 [ 75.173859][ T6996] ext4_fill_super+0x45a4/0x4d60 [ 75.174870][ T6996] get_tree_bdev_flags+0x380/0x434 [ 75.175893][ T6996] get_tree_bdev+0x2c/0x3c [ 75.176771][ T6996] ext4_get_tree+0x28/0x38 [ 75.177565][ T6996] vfs_get_tree+0x90/0x28c [ 75.178547][ T6996] fc_mount+0x24/0xac [ 75.179301][ T6996] do_new_mount+0x2a4/0x540 [ 75.180107][ T6996] path_mount+0x5d0/0xa68 [ 75.180944][ T6996] do_mount+0xe8/0x148 [ 75.181756][ T6996] __arm64_sys_mount+0x334/0x380 [ 75.182717][ T6996] invoke_syscall+0x98/0x244 [ 75.183656][ T6996] el0_svc_common+0xe8/0x23c [ 75.184573][ T6996] do_el0_svc+0x48/0x58 [ 75.185384][ T6996] el0_svc+0x64/0x260 [ 75.186136][ T6996] el0t_64_sync_handler+0x48/0x148 [ 75.187157][ T6996] el0t_64_sync+0x198/0x19c [ 75.188030][ T6996] [ 75.188030][ T6996] -> #0 (&ei->xattr_sem){++++}-{4:4}: [ 75.189337][ T6996] __lock_acquire+0x1780/0x2f44 [ 75.190259][ T6996] lock_acquire+0x140/0x368 [ 75.191160][ T6996] down_write+0x50/0xc0 [ 75.191981][ T6996] ext4_xattr_set_handle+0x138/0xe00 [ 75.193029][ T6996] ext4_initxattrs+0xa4/0x118 [ 75.193930][ T6996] security_inode_init_security+0x24c/0x378 [ 75.195088][ T6996] ext4_init_security+0x44/0x58 [ 75.196042][ T6996] __ext4_new_inode+0x28dc/0x3390 [ 75.197034][ T6996] ext4_ext_migrate+0x56c/0xc58 [ 75.198043][ T6996] ext4_ioctl+0x1cd4/0x4234 [ 75.198965][ T6996] __arm64_sys_ioctl+0x14c/0x1c4 [ 75.199941][ T6996] invoke_syscall+0x98/0x244 [ 75.200851][ T6996] el0_svc_common+0xe8/0x23c [ 75.201742][ T6996] do_el0_svc+0x48/0x58 [ 75.202551][ T6996] el0_svc+0x64/0x260 [ 75.203316][ T6996] el0t_64_sync_handler+0x48/0x148 [ 75.204242][ T6996] el0t_64_sync+0x198/0x19c [ 75.205142][ T6996] [ 75.205142][ T6996] other info that might help us debug this: [ 75.205142][ T6996] [ 75.206759][ T6996] Possible unsafe locking scenario: [ 75.206759][ T6996] [ 75.208058][ T6996] CPU0 CPU1 [ 75.208979][ T6996] ---- ---- [ 75.209875][ T6996] lock(&sbi->s_writepages_rwsem); [ 75.210796][ T6996] lock(&ei->xattr_sem); [ 75.211928][ T6996] lock(&sbi->s_writepages_rwsem); [ 75.213307][ T6996] lock(&ei->xattr_sem); [ 75.214071][ T6996] [ 75.214071][ T6996] *** DEADLOCK *** [ 75.214071][ T6996] [ 75.215571][ T6996] 3 locks held by syz.4.510/6996: [ 75.216488][ T6996] #0: ffff0000cc0e2410 (sb_writers#3){.+.+}-{0:0}, at: mnt_want_write_file+0x64/0xdc [ 75.218226][ T6996] #1: ffff0000f0c2ea98 (&sb->s_type->i_mutex_key#10){++++}-{4:4}, at: ext4_ioctl+0x1ccc/0x4234 [ 75.220048][ T6996] #2: ffff0000c9f4ec18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_ext_migrate+0x280/0xc58 [ 75.221883][ T6996] [ 75.221883][ T6996] stack backtrace: [ 75.222860][ T6996] CPU: 1 UID: 0 PID: 6996 Comm: syz.4.510 Tainted: G L syzkaller #0 PREEMPT [ 75.224672][ T6996] Tainted: [L]=SOFTLOCKUP [ 75.225388][ T6996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 75.227144][ T6996] Call trace: [ 75.227661][ T6996] show_stack+0x2c/0x3c (C) [ 75.228466][ T6996] __dump_stack+0x30/0x40 [ 75.229170][ T6996] dump_stack_lvl+0xd8/0x12c [ 75.229893][ T6996] dump_stack+0x1c/0x28 [ 75.230626][ T6996] print_circular_bug+0x328/0x330 [ 75.231479][ T6996] check_noncircular+0x158/0x174 [ 75.232198][ T6996] __lock_acquire+0x1780/0x2f44 [ 75.233092][ T6996] lock_acquire+0x140/0x368 [ 75.233872][ T6996] down_write+0x50/0xc0 [ 75.234530][ T6996] ext4_xattr_set_handle+0x138/0xe00 [ 75.235297][ T6996] ext4_initxattrs+0xa4/0x118 [ 75.236125][ T6996] security_inode_init_security+0x24c/0x378 [ 75.237132][ T6996] ext4_init_security+0x44/0x58 [ 75.237945][ T6996] __ext4_new_inode+0x28dc/0x3390 [ 75.238950][ T6996] ext4_ext_migrate+0x56c/0xc58 [ 75.239841][ T6996] ext4_ioctl+0x1cd4/0x4234 [ 75.240651][ T6996] __arm64_sys_ioctl+0x14c/0x1c4 [ 75.241509][ T6996] invoke_syscall+0x98/0x244 [ 75.242236][ T6996] el0_svc_common+0xe8/0x23c [ 75.243037][ T6996] do_el0_svc+0x48/0x58 [ 75.243714][ T6996] el0_svc+0x64/0x260 [ 75.244365][ T6996] el0t_64_sync_handler+0x48/0x148 [ 75.245243][ T6996] el0t_64_sync+0x198/0x19c [ 75.260404][ T4672] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 75.847882][ T4796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 75.849490][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 76.887837][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.928062][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.888314][ T856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.967987][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.207815][ T856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.007708][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.058035][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.928128][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.088498][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.127720][ T4796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.167823][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.968113][ T856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog