last executing test programs: 7.003202158s ago: executing program 1 (id=656): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) r2 = socket$inet_icmp(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r4 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000011ff, 0x101301) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x1, 0x1, 0x12, 0xfffd}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$inet_sctp(0x2, 0x1, 0x84) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, 0x0, 0x0) sendmsg$rds(r8, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@mask_fadd={0x58, 0x118, 0x8, {{0xfffffffc, 0x1}, 0x0, 0x0, 0x5c, 0x8, 0x0, 0x200010000000}}], 0x58}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) ioctl$sock_inet_SIOCGARP(r2, 0x8954, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000000c0)={0x5c, @dev={0xac, 0x14, 0x14, 0x27}, 0x4e22, 0x1, 'sed\x00', 0x12, 0x0, 0x26}, 0x2c) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f00000001c0)=0x8, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20008000) shutdown(0xffffffffffffffff, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x4d, 0x10001, 0x7, 0x5, 0x82, 0x8, 0xfa, 0x40, 0xca, 0x5, [0x6, 0x0, 0x4b, 0x5f15, 0x0, 0x8a6d, 0xffffffff, 0x2], [0xffffffff]}}) 6.224340907s ago: executing program 3 (id=657): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000003900), 0x34aa945a513d639, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ftruncate(r1, 0x10001) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) r5 = fsopen(&(0x7f0000000040)='debugfs\x00', 0x1) r6 = fcntl$dupfd(r5, 0x406, r5) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)) timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) fchown(0xffffffffffffffff, 0x0, 0x0) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 5.61758207s ago: executing program 1 (id=659): syz_emit_vhci(&(0x7f0000000900)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_ERR_DATA_REPORTING={{0x9c}, 0xb8}}}, 0x7) 5.174206231s ago: executing program 1 (id=660): syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}, @void, {@ipv4={0x86dd, @gre={{0x5, 0x4, 0x2, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @broadcast}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {}, {}, {0x8, 0x88be, 0x8000000}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x4}}}}}}}}, 0x0) 5.173465947s ago: executing program 4 (id=661): listns(&(0x7f0000000000)={0x20, 0x0, 0x0, 0x10000000}, 0x0, 0x0, 0x0) 3.980426085s ago: executing program 4 (id=664): clock_getres(0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_buf(r1, 0x1, 0x37, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = fsopen(&(0x7f0000000240)='tracefs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x100000000000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}, 0x50) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 3.044742077s ago: executing program 1 (id=665): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x76, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) clock_adjtime(0x0, &(0x7f0000000280)={0x1000000000066fb, 0x800000000004, 0x376, 0x0, 0x0, 0x51, 0x0, 0x4, 0x0, 0x0, 0x0, 0x240b, 0x3f, 0x9, 0x0, 0x7ca53c09, 0xfffffffffffffffd, 0x1fff, 0xfffffffffffffffc, 0x4, 0x10000000000, 0x0, 0x0, 0x100000000003f89, 0x0, 0x8000000000000000}) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r5, 0x5421, &(0x7f0000000440)=0x6) connect$bt_rfcomm(r5, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000d40)={0x0, 0x7}, 0x8) close(r5) r6 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000600)={{{@in=@broadcast, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0x5, 0xa}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x40000, 0x1000000000004, 0x2, 0xa78a}, 0xfffffffe, 0x0, 0x2, 0x0, 0x3}, {{@in=@empty, 0x0, 0x33}, 0x0, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3506, 0x4, 0x2, 0x2}}, 0xe8) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x3]}}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f0000000000)={[{@grpjquota}]}, 0x1, 0x603, &(0x7f0000000700)="$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") syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000000)='./file1\x00', 0xa18c14, &(0x7f0000001640)=ANY=[@ANYBLOB="73686f72746e616d653d6c6f6d616363656e746575726f2c73686f7200000000500000006e6e742c636f6465706167653d3835372c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e39352c696f63686172736a743d6d5063726f6d616e6961702c756ee95f786c6574653d312c73686f72746e616d653d6c6f7765722c636f6465706167653d3935302c73686f72746e616d653d6d697865df675d6407eedf7f642c726f6469722c696f636861727365743d63703835302c726f646972"], 0x81, 0x2a6, &(0x7f0000000180)="$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") openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) 3.032071375s ago: executing program 3 (id=666): syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYBLOB="ab6c6453c6e30a5d0bf694038b30489d59260bae5e05ce87c6242a6fc84965bec3cfa6d58f85b94c35130b3463176f4fb40565bd75528cceb85a4296b0814532562dd18517f403a833fa0763d2953c413636c96f1e27555c86a49021e6e05e6034b73540617ad9cec49efa20", @ANYBLOB="1e87cdafaba71e00d4dbd2d162836e200513f845eb442d9b03dc447e441420f66757ff03000000000000275e88ec554077633bd3bcafbb3e728f5468b515c2b90ce0ef68f88333e5b00000000000"], 0x3, 0x2a3, &(0x7f00000009c0)="$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") ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000600)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x13) socket$xdp(0x2c, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'pimreg\x00', 0x5005}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETCARRIER(r3, 0x400454e2, &(0x7f00000001c0)=0x1) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) write$tun(r3, &(0x7f0000000700)=ANY=[@ANYBLOB="03030800040016000500452d002400650000098490780a010101ac1414aac70500040000000002000000c2000003c32902281bea49d5cafc6b947a7b6c6e38c1eb08750c31269c4125cbb5cbbae3b87a51a26c9b64a37b0cd3091a18b236ad1fd99fcfe856b3196903d26999c84f1c80f1a4ab7235329f84554a2c7f13c176c48a8cf4a09915887ad6e3a782d5c31da8fcb746961400ac633f8343897188bac1505f6a3b540379b6276b1611bc76d4403bdbb89b11d888666a7fe66969d524696c61675b0f33a4d508900112dee9b459"], 0x2e) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2200414, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYRES8, @ANYRES8], 0x1, 0x122e, &(0x7f0000002580)="$eJzs3MFrHFUcB/BftqlZU5tErdX2oA+9eBqaHDwJEiQFyYJSG6EVhCmZ6JJxN2SWwIoYe/Lq0b9BPHpTxH8gV/8Cb7mIpxzEEXZSk60NmlqyRT+fy/zIb76Z99hl4S3v7f7rX368uVFlG/kgWlNT0dqKSAcpUrTinhdXm+ut26vLnc7KjZSuL99cfC2lNPfSD+9/+s3LPw4uvPft3Hczsbfwwf4vSz/vXd67sv/7zY+6VepWqdcfpDzd6fcH+Z2ySOvdajNL6Z2yyKsidXtVsT3W3yj7W1vDlPfWL85ubRdVlfLeMG0WwzTop8H2MOUf5t1eyrIsXZwNTnT+729Z+/qgrr+PqOvz8UTUdV0/GbMxFU/FxZiLzyPi6Xgmno1L8Vxcjufjhbgyuusshg8AAAAAAAAAAAAAAAAAAAD/Hwej0/zj5/8vHJ7/n48F5/8BAAAAAAAAAAAAAAAAAADgDLx76/bqcqezciOldkT5xc7azlpzbfrLG9GNMoq4FvPxW4xO/zea+vpbnZVraeRcROwe5nd31s6N5xdHPydwmJ8e9e7lF5t8irvlsfxMzDb5dkQUsRTzcenY89tH+aUH5tvx6ivHnp/FfL0b0Y8y1kfPPsp/tpjSm2937stfHd0HAAAA/wVZ+tPC+Pq3Wb9n2Un9Jn+K7wfuW19Px9Xpyc6diGr4yWZelsX2eNH+y18mVsw8HsM4TdH6N/GZOLHVGmt99VPEpGf6WBTtw/fyo/iHU5OfzkMUdx/J3MeLCX8wcSaOXvRJjwQAAAAAAAAAAIDT+Cf7AX+Nh95FOB0P2Fn2xmSmCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/MEOHAsAAAAACPO3TqNjAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAoQIAAP//uXHE5A==") truncate(&(0x7f0000000040)='./file0\x00', 0x7) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020200000d0000000000000000000000030006000000000002000000ac1414bb000000000000000002000100000000000000000000000000030005000000000002000000ac1414aa000000000000000001001500000000000100140000000000010016"], 0x68}, 0x1, 0x7}, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, {0x2, 0x4e24, @broadcast}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e23, @loopback}, 0x82, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000380)='nicvf0\x00', 0x57bf, 0xa849, 0x3}) ftruncate(0xffffffffffffffff, 0x81ff) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 2.261133417s ago: executing program 2 (id=667): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x8a, &(0x7f0000000c40)={[{@nombcache}, {@errors_remount}, {@acl}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x2}}, {@init_itable_val={'init_itable', 0x3d, 0xfd}}, {@noquota}, {@orlov}, {@nodiscard}, {@usrjquota}, {@norecovery}, {@init_itable_val}]}, 0x6, 0x48a, &(0x7f0000000d40)="$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") 2.048117353s ago: executing program 2 (id=671): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) 1.714038861s ago: executing program 0 (id=673): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) read$FUSE(r4, &(0x7f0000003180)={0x2020}, 0x2020) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000580)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0xa, 0x0, "0ac9d323d182b9b3bf2558703c5652ac72bea01169b6a08311fd9da26f34c679cbc40bcb83b6f4fe63697b3808e4b8e506b27d8d0fe17278755b6b7ccb3e56135d74c181deac3b37a6995385eafb5537"}, 0xd8) socket(0x28, 0x5, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x5}}]}}]}, 0x48}}, 0x20040084) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0xfff5, 0x4}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x7e, 0xffffffffffffffff, 0xfffffffc, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c0004802800018008000100666962001c00028008000240000000030800034000000001080001400000001414000000110001"], 0xdc}}, 0x0) 1.701043622s ago: executing program 4 (id=674): syz_extract_tcp_res(0x0, 0xf4, 0x7ff) 1.657387216s ago: executing program 4 (id=675): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40840) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000340)={0x4002, "1803c8098021bc0000000000000000000000000000000000757fffffff00", 0xffffffffffffffff}) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x80800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000440)={0x2, "fa02791d2a69a2610f020000000000000011000100e15ac64200", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45b00e4f5b53e0ca34dd02acecdc67c5e3126628168", r4, 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f00000003c0)={0x4, "360070ffffff8f2700", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f00000000c0)={"0e337b42cc00d331ff0007000000000000001a00", r8}) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, 0x0, 0x1) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/usb_gadget/g1\x00', 0x1ff) chdir(&(0x7f0000000400)='./my_configfs/usb_gadget/g1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='functions/uvc.usb0\x00', 0x1ff) 1.488430236s ago: executing program 2 (id=676): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x40, 0x9, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x20000) 973.289668ms ago: executing program 2 (id=677): syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_rsp={{0x15, 0x9, 0xa}, {0x2, 0x1, 0xff81, 0x3, 0x237}}}}, 0x17) 937.143793ms ago: executing program 2 (id=678): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSW(r0, 0x5403, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$nullb(0xffffffffffffff9c, 0x0, 0x169802, 0x0) ioctl$BLKBSZSET(r4, 0x40081271, &(0x7f0000000100)=0x10000) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0x42, 0x4, 0x2b0, 0xffffffff, 0x0, 0x180, 0x180, 0xffffffff, 0xffffffff, 0x218, 0x218, 0x218, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'ipvlan0\x00', 'nr0\x00', {}, {}, 0x2f, 0x2}, 0x74000002, 0x70, 0xd0, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x7, 0x11, 0x0, 0x5], 0x1, 0x5}, {0xffffffffffffffff, [0x1, 0x1, 0x4, 0x6, 0x20], 0x3, 0x6}}}}, {{@ip={@empty, @remote, 0xff, 0x0, 'veth0_to_batadv\x00', 'team_slave_1\x00', {0xff}, {}, 0x16}, 0x287, 0x70, 0xb0, 0x2000000}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x3, {0x100008}}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000180)={0x7, 0x5, 0x1d, 0x8000fd, 0x12, "3bad02002e000000006cb400"}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r6 = syz_open_dev$tty1(0xc, 0x4, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004041}, 0x44000) ioctl$TIOCL_BLANKSCREEN(r6, 0x560e, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00'}) syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000040)) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[], 0x60}, 0x1, 0x400000000000000}, 0x40010) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000040)={0x89, 0xfffe, 0x1000, 0x5}) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x40009, 0xc, 0x0, 0x10000e, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x1000000100, 0x0, 0x0, 0x9, 0x3, 0x0, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffe, 0x1000, 0x8, 0xb, 0x2000000003, 0x6, 0x3}) 545.787419ms ago: executing program 0 (id=679): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e"], 0x7) 545.135422ms ago: executing program 4 (id=680): socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x66, &(0x7f0000000440)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb8000", 0x30, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @mcast2, {[], @time_exceed={0x4, 0x1, 0x0, 0x9, '\x00', {0x0, 0x6, "f99063", 0x800, 0x3a, 0xff, @mcast1, @ipv4={'\x00', '\xff\xff', @remote}}}}}}}}, 0x0) 475.513556ms ago: executing program 0 (id=681): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) 474.963228ms ago: executing program 3 (id=682): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xbc}}, 0x0) 420.377306ms ago: executing program 4 (id=683): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x8005d}) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r7, 0x11c, 0x3, &(0x7f0000000100)=""/222, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x8000) sendto$inet6(0xffffffffffffffff, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) close(0xffffffffffffffff) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r8, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000000080)={0x28, r3, 0x301, 0x70bd28, 0x25dfdbf8, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xe529, 0x9}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x9000}, 0x20044884) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', r2, 0x29, 0x86, 0x0, 0x2, 0x2e, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x7800, 0x80, 0x5, 0x9}}) 420.088597ms ago: executing program 0 (id=684): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xd, 0xf, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xff000000}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x6, 0x0, 0xb}, {0x65}}, [], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 330.835016ms ago: executing program 3 (id=685): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x94) 324.462288ms ago: executing program 0 (id=686): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3f20}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x3}}, [], {{0x6, 0x1, 0x6, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 306.039058ms ago: executing program 1 (id=687): syz_emit_vhci(&(0x7f0000001280)=ANY=[@ANYBLOB="02c9000c00080005001b0304"], 0x11) 50.76768ms ago: executing program 3 (id=688): bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e040a0404"], 0x7) 49.765824ms ago: executing program 2 (id=689): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x28, 0xe, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008894}, 0x800) 325.416µs ago: executing program 0 (id=690): syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000580)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x3}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@errors_continue}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 130.292µs ago: executing program 3 (id=691): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000340)={[{@data_err_ignore}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@abort}, {@oldalloc}, {@noquota}, {@min_batch_time}, {@jqfmt_vfsold}, {@sysvgroups}, {@errors_remount}, {@auto_da_alloc}, {@nodelalloc}]}, 0x41, 0x47a, &(0x7f0000000b40)="$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") 0s ago: executing program 1 (id=692): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWSETELEM={0x24, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x4c}}, 0x0) kernel console output (not intermixed with test programs): interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.708543][ T4719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.718748][ T4719] hsr_slave_0: entered promiscuous mode [ 30.719124][ T4719] hsr_slave_1: entered promiscuous mode [ 30.728566][ T4714] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.733092][ T4714] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.733183][ T4714] bridge_slave_0: entered allmulticast mode [ 30.733678][ T4714] bridge_slave_0: entered promiscuous mode [ 30.734672][ T4714] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.734694][ T4714] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.734788][ T4714] bridge_slave_1: entered allmulticast mode [ 30.735789][ T4714] bridge_slave_1: entered promiscuous mode [ 30.762242][ T4709] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.763744][ T4709] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.765207][ T4709] bridge_slave_0: entered allmulticast mode [ 30.766761][ T4709] bridge_slave_0: entered promiscuous mode [ 30.771164][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.772505][ T4709] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.773924][ T4709] bridge_slave_1: entered allmulticast mode [ 30.775477][ T4709] bridge_slave_1: entered promiscuous mode [ 30.790118][ T4714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.791093][ T4714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.800762][ T4714] team0: Port device team_slave_0 added [ 30.809179][ T4709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.813208][ T4714] team0: Port device team_slave_1 added [ 30.821684][ T4709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.836315][ T4709] team0: Port device team_slave_0 added [ 30.843951][ T4714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.845298][ T4714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.847727][ T4714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.851189][ T4717] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.851279][ T4717] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.851372][ T4717] bridge_slave_0: entered allmulticast mode [ 30.851815][ T4717] bridge_slave_0: entered promiscuous mode [ 30.853658][ T4709] team0: Port device team_slave_1 added [ 30.859790][ T4714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.859813][ T4714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.859828][ T4714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.861835][ T4717] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.861886][ T4717] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.861936][ T4717] bridge_slave_1: entered allmulticast mode [ 30.862357][ T4717] bridge_slave_1: entered promiscuous mode [ 30.889786][ T4717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.890793][ T4717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.893692][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.894992][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.897514][ T4709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.898287][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.898295][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.898309][ T4709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.910895][ T4714] hsr_slave_0: entered promiscuous mode [ 30.911245][ T4714] hsr_slave_1: entered promiscuous mode [ 30.911481][ T4714] debugfs: 'hsr0' already exists in 'hsr' [ 30.911518][ T4714] Cannot create hsr debugfs directory [ 30.920365][ T4710] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.921706][ T4710] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.923015][ T4710] bridge_slave_0: entered allmulticast mode [ 30.924559][ T4710] bridge_slave_0: entered promiscuous mode [ 30.926608][ T4710] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.928116][ T4710] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.929570][ T4710] bridge_slave_1: entered allmulticast mode [ 30.931050][ T4710] bridge_slave_1: entered promiscuous mode [ 30.933238][ T4717] team0: Port device team_slave_0 added [ 30.934051][ T4717] team0: Port device team_slave_1 added [ 30.953452][ T4717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.953474][ T4717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.953491][ T4717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.954028][ T4717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.954035][ T4717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.954050][ T4717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.963458][ T4710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.964398][ T4710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.974191][ T4710] team0: Port device team_slave_0 added [ 30.977327][ T4710] team0: Port device team_slave_1 added [ 30.990863][ T4709] hsr_slave_0: entered promiscuous mode [ 30.991183][ T4709] hsr_slave_1: entered promiscuous mode [ 30.991381][ T4709] debugfs: 'hsr0' already exists in 'hsr' [ 30.991391][ T4709] Cannot create hsr debugfs directory [ 31.002798][ T4717] hsr_slave_0: entered promiscuous mode [ 31.003114][ T4717] hsr_slave_1: entered promiscuous mode [ 31.003296][ T4717] debugfs: 'hsr0' already exists in 'hsr' [ 31.003304][ T4717] Cannot create hsr debugfs directory [ 31.003905][ T4719] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.006856][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.007186][ T4719] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.009125][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.009900][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.009908][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.009921][ T4710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.010562][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.010573][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.010584][ T4710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.019363][ T4719] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.022064][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.037970][ T4719] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.040176][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.072023][ T4710] hsr_slave_0: entered promiscuous mode [ 31.073572][ T4710] hsr_slave_1: entered promiscuous mode [ 31.074858][ T4710] debugfs: 'hsr0' already exists in 'hsr' [ 31.075883][ T4710] Cannot create hsr debugfs directory [ 31.101440][ T4719] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.101490][ T4719] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.101707][ T4719] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.101735][ T4719] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.140839][ T4714] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.144428][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.147995][ T4714] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.149166][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.149465][ T4714] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.151265][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.155473][ T4714] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.157884][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.182687][ T4709] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.186672][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.189712][ T4709] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.191991][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.193732][ T4709] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.195629][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.197402][ T4709] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.199742][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.212589][ T4714] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.212634][ T4714] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.212725][ T4714] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.212760][ T4714] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.234213][ T4719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.241423][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.241472][ T4709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.241565][ T4709] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.241617][ T4709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.246028][ T4719] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.250079][ T4717] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.252022][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.252332][ T4717] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.255406][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.259433][ T4206] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.262685][ T4206] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.264513][ T4206] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.266661][ T4206] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.268355][ T4206] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.278847][ T4717] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.281463][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.283150][ T4717] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.285236][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.287295][ T4206] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.287352][ T4206] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.317272][ T4719] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.319450][ T4719] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.331487][ T4709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.344452][ T4714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.344630][ T4710] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.347380][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.348553][ T4710] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.349505][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.349782][ T4710] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.352482][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.365158][ T4714] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.365350][ T4710] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.367354][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.388716][ T4709] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.391434][ T4206] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.391479][ T4206] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.394403][ T4206] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.394442][ T4206] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.402296][ T4714] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.402332][ T4714] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.419372][ T15] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.419418][ T15] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.436056][ T4717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.441115][ T4059] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.441157][ T4059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.450448][ T4717] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.462302][ T4059] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.462349][ T4059] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.463089][ T4059] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.463107][ T4059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.481280][ T4710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.494695][ T4717] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.494730][ T4717] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.503208][ T4719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.524892][ T4710] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.537268][ T4059] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.537316][ T4059] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.538491][ T4059] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.538511][ T4059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.554395][ T4710] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.556466][ T4710] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.656949][ T4714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.679213][ T4719] veth0_vlan: entered promiscuous mode [ 31.686954][ T4719] veth1_vlan: entered promiscuous mode [ 31.694170][ T4714] veth0_vlan: entered promiscuous mode [ 31.694584][ T4719] veth0_macvtap: entered promiscuous mode [ 31.695956][ T4719] veth1_macvtap: entered promiscuous mode [ 31.723852][ T4709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.726863][ T4714] veth1_vlan: entered promiscuous mode [ 31.741021][ T4719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.754031][ T4719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.757137][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.757351][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.757424][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.760395][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.764630][ T4714] veth0_macvtap: entered promiscuous mode [ 31.771442][ T4709] veth0_vlan: entered promiscuous mode [ 31.776251][ T4710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.779754][ T4714] veth1_macvtap: entered promiscuous mode [ 31.782263][ T4717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.803545][ T4709] veth1_vlan: entered promiscuous mode [ 31.821024][ T4714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.822309][ T4714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.833673][ T4717] veth0_vlan: entered promiscuous mode [ 31.840654][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.840681][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.844668][ T40] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.844722][ T40] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.844739][ T40] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.844755][ T40] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.846102][ T4710] veth0_vlan: entered promiscuous mode [ 31.849049][ T4710] veth1_vlan: entered promiscuous mode [ 31.853871][ T4717] veth1_vlan: entered promiscuous mode [ 31.866673][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.866706][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.880399][ T4710] veth0_macvtap: entered promiscuous mode [ 31.882006][ T4709] veth0_macvtap: entered promiscuous mode [ 31.890200][ T4709] veth1_macvtap: entered promiscuous mode [ 31.894445][ T4710] veth1_macvtap: entered promiscuous mode [ 31.903073][ T4719] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.904522][ T4717] veth0_macvtap: entered promiscuous mode [ 31.912418][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.913438][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.915573][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.929906][ T4717] veth1_macvtap: entered promiscuous mode [ 31.934590][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.937142][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.949647][ T15] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.949702][ T15] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.949725][ T15] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.949741][ T15] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.949758][ T15] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.949773][ T15] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.949788][ T15] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.949802][ T15] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.963855][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.973860][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.975360][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.976664][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.976690][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.976704][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.976718][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.015026][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.015061][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.017223][ T15] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.017234][ T15] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.039259][ T1285] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.039296][ T1285] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.045380][ T1285] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.045419][ T1285] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.058662][ T15] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.058692][ T15] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.067027][ T15] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.067060][ T15] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.086611][ T4059] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.086645][ T4059] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.130240][ T4900] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6'. [ 32.207732][ T4902] syzkaller0: entered promiscuous mode [ 32.207766][ T4902] syzkaller0: entered allmulticast mode [ 32.255188][ T4908] syzkaller0: entered promiscuous mode [ 32.255222][ T4908] syzkaller0: entered allmulticast mode [ 32.265714][ T4916] loop1: detected capacity change from 0 to 128 [ 32.281968][ T4916] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 32.337902][ T4716] Bluetooth: hci0: command tx timeout [ 32.338320][ T4716] Bluetooth: hci2: command tx timeout [ 32.338530][ T4716] Bluetooth: hci3: command tx timeout [ 32.338730][ T4716] Bluetooth: hci4: command tx timeout [ 32.440291][ T4716] Bluetooth: hci1: command tx timeout [ 33.284883][ T4926] syzkaller0: entered promiscuous mode [ 33.284918][ T4926] syzkaller0: entered allmulticast mode [ 33.303585][ T4710] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 33.356160][ T4930] netlink: 'syz.2.13': attribute type 4 has an invalid length. [ 33.425855][ T4936] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.12'. [ 33.452784][ T4938] syzkaller0: entered promiscuous mode [ 33.453895][ T4938] syzkaller0: entered allmulticast mode [ 33.708465][ T4943] loop2: detected capacity change from 0 to 512 [ 33.871179][ T4943] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 33.871307][ T4943] EXT4-fs (loop2): orphan cleanup on readonly fs [ 33.874283][ T4943] Quota error (device loop2): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 33.874371][ T4943] EXT4-fs warning (device loop2): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 33.876281][ T4943] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 33.876436][ T4943] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #16: comm syz.2.17: inode has both inline data and extents flags [ 33.876474][ T4943] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 33.876843][ T4943] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.17: couldn't read orphan inode 16 (err -117) [ 33.876877][ T4943] loop2: lost filesystem error report for type 5 error -117 [ 33.877434][ T4943] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 34.390181][ T4717] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.408081][ T4716] Bluetooth: hci3: command tx timeout [ 34.408115][ T4716] Bluetooth: hci2: command tx timeout [ 34.408142][ T4716] Bluetooth: hci0: command tx timeout [ 34.408224][ T4726] Bluetooth: hci4: command tx timeout [ 34.488372][ T4726] Bluetooth: hci1: command tx timeout [ 34.830715][ T4957] Zero length message leads to an empty skb [ 34.857305][ T4959] syzkaller0: entered promiscuous mode [ 34.857335][ T4959] syzkaller0: entered allmulticast mode [ 35.015329][ T4965] loop4: detected capacity change from 0 to 512 [ 35.018709][ T4965] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 35.022010][ T4965] EXT4-fs (loop4): orphan cleanup on readonly fs [ 35.022080][ T4965] EXT4-fs warning (device loop4): ext4_enable_quotas:7276: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 35.022093][ T4965] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 35.022100][ T4965] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.24: bad orphan inode 768 [ 35.022111][ T4965] loop4: lost filesystem error report for type 5 error -117 [ 35.022911][ T4965] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 35.037939][ T4965] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 35.058713][ T4965] EXT4-fs warning (device loop4): ext4_enable_quotas:7276: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 35.193663][ T4910] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 35.217069][ T4719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.221545][ T4969] netlink: 4 bytes leftover after parsing attributes in process `syz.0.26'. [ 35.244857][ T4971] tipc: Started in network mode [ 35.244886][ T4971] tipc: Node identity 4, cluster identity 4711 [ 35.244909][ T4971] tipc: Node number set to 4 [ 35.392084][ T4976] binder: 4975:4976 tried to acquire reference to desc 0, got 1 instead [ 35.394171][ T4976] binder: 4975:4976 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 35.395757][ T4976] binder: 4976 RLIMIT_NICE not set [ 35.395810][ T4976] binder: 4976 RLIMIT_NICE not set [ 35.395864][ T4976] binder: send failed reply for transaction 5 to 4975:4976 [ 35.395910][ T4976] binder: 4975:4976 transaction 5 fd fixups failed 29201/-12, line 5098 [ 35.396368][ T10] binder: undelivered TRANSACTION_COMPLETE [ 35.396380][ T10] binder: undelivered TRANSACTION_ERROR: 29201 [ 35.512410][ T4984] bridge_slave_0: left allmulticast mode [ 35.512447][ T4984] bridge_slave_0: left promiscuous mode [ 35.512554][ T4984] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.516958][ T4984] bridge_slave_1: left allmulticast mode [ 35.516995][ T4984] bridge_slave_1: left promiscuous mode [ 35.517089][ T4984] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.522435][ T4984] bond0: (slave bond_slave_0): Releasing backup interface [ 36.452190][ T4984] bond0: (slave bond_slave_1): Releasing backup interface [ 36.488097][ T4725] Bluetooth: hci0: command tx timeout [ 36.488136][ T4725] Bluetooth: hci2: command tx timeout [ 36.488164][ T4725] Bluetooth: hci3: command tx timeout [ 36.488244][ T4726] Bluetooth: hci4: command tx timeout [ 36.493024][ T4995] netlink: 'syz.4.33': attribute type 4 has an invalid length. [ 36.494529][ T4984] team0: Port device team_slave_0 removed [ 36.496949][ T4984] team0: Port device team_slave_1 removed [ 36.497291][ T4984] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 36.497302][ T4984] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 36.499981][ T4984] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 36.499991][ T4984] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 36.501271][ T4984] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 36.507192][ T4986] team0: Mode changed to "activebackup" [ 36.510841][ T4987] vlan0: entered promiscuous mode [ 36.513439][ T4987] team0: Port device vlan0 added [ 36.525633][ T4984] tipc: Started in network mode [ 36.525686][ T4984] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 36.525750][ T4984] tipc: Enabled bearer , priority 0 [ 36.526920][ T4990] syzkaller0: entered promiscuous mode [ 36.526931][ T4990] syzkaller0: entered allmulticast mode [ 36.533000][ T4994] syzkaller0: entered promiscuous mode [ 36.534007][ T4994] syzkaller0: entered allmulticast mode [ 36.537442][ T4991] netlink: 'syz.4.33': attribute type 4 has an invalid length. [ 36.567560][ T4726] Bluetooth: hci1: command tx timeout [ 36.600953][ T5000] syzkaller0: entered promiscuous mode [ 36.600988][ T5000] syzkaller0: entered allmulticast mode [ 36.624619][ T5004] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 36.624661][ T5004] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 36.657024][ T5006] binder: 5005:5006 tried to acquire reference to desc 0, got 1 instead [ 36.659389][ T5006] binder: 5005:5006 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 36.662021][ T5006] binder: 5006 RLIMIT_NICE not set [ 36.663077][ T5006] binder: 5006 RLIMIT_NICE not set [ 36.664108][ T5006] binder: send failed reply for transaction 11 to 5005:5006 [ 36.665666][ T5006] binder: 5005:5006 transaction 11 fd fixups failed 29201/-12, line 5098 [ 36.669357][ T10] binder: undelivered TRANSACTION_COMPLETE [ 36.669382][ T10] binder: undelivered TRANSACTION_ERROR: 29201 [ 36.692112][ T5010] syzkaller0: entered promiscuous mode [ 36.692140][ T5010] syzkaller0: entered allmulticast mode [ 36.753458][ T5014] syzkaller0: entered promiscuous mode [ 36.753498][ T5014] syzkaller0: entered allmulticast mode [ 36.912634][ T5035] syzkaller0: entered promiscuous mode [ 36.912675][ T5035] syzkaller0: entered allmulticast mode [ 37.218062][ T5043] loop1: detected capacity change from 0 to 1024 [ 37.220015][ T5043] EXT4-fs: Ignoring removed bh option [ 37.223652][ T5043] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 37.240379][ T5043] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.517974][ T4799] tipc: Node number set to 11578026 [ 38.177023][ T5056] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 38.178596][ T5056] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 38.220125][ T4710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.294245][ T40] tipc: Subscription rejected, illegal request [ 38.316168][ T5067] configfs-gadget.g1 gadget.0: HOST MAC 6a:38:b1:44:90:fa [ 38.316205][ T5067] configfs-gadget.g1 gadget.0: MAC ca:e1:99:6f:58:5c [ 38.394364][ T5077] syz.0.62 uses obsolete (PF_INET,SOCK_PACKET) [ 38.557776][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 38.568239][ T4716] Bluetooth: hci3: command tx timeout [ 38.568271][ T4716] Bluetooth: hci2: command tx timeout [ 38.568293][ T4716] Bluetooth: hci0: command tx timeout [ 38.571102][ T4726] Bluetooth: hci4: command tx timeout [ 38.647848][ T4726] Bluetooth: hci1: command tx timeout [ 38.708637][ T10] usb 1-1: Dual-Role OTG device on HNP port [ 38.708839][ T10] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 38.708851][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.728722][ T10] cdc_eem 1-1:1.0 usb1: register 'cdc_eem' at usb-dummy_hcd.0-1, CDC EEM Device, 9a:58:3a:e3:a5:61 [ 39.849253][ T30] audit: type=1400 audit(39.820:2): lsm=SMACK fn=smack_inode_getxattr action=denied subject="_" object="lower|ir" requested=r pid=5141 comm="syz.0.66" name="file1" dev="tmpfs" ino=62 [ 39.849297][ T30] audit: type=1400 audit(39.830:3): lsm=SMACK fn=smack_inode_getxattr action=denied subject="_" object="lower|ir" requested=r pid=5141 comm="syz.0.66" name="file1" dev="tmpfs" ino=62 [ 39.849327][ T30] audit: type=1400 audit(39.830:4): lsm=SMACK fn=smack_inode_getxattr action=denied subject="_" object="lower|ir" requested=r pid=5141 comm="syz.0.66" name="file1" dev="tmpfs" ino=62 [ 39.849345][ T30] audit: type=1400 audit(39.830:5): lsm=SMACK fn=smack_inode_getxattr action=denied subject="_" object="lower|ir" requested=r pid=5141 comm="syz.0.66" name="file1" dev="tmpfs" ino=62 [ 39.849363][ T30] audit: type=1400 audit(39.830:6): lsm=SMACK fn=smack_inode_getxattr action=denied subject="_" object="lower|ir" requested=r pid=5141 comm="syz.0.66" name="file1" dev="tmpfs" ino=62 [ 39.849381][ T30] audit: type=1400 audit(39.830:7): lsm=SMACK fn=smack_inode_get_acl action=denied subject="_" object="lower|ir" requested=r pid=5141 comm="syz.0.66" name="file1" dev="tmpfs" ino=62 [ 39.917323][ T5154] loop0: detected capacity change from 0 to 4096 [ 39.948082][ T5154] EXT4-fs: Ignoring removed orlov option [ 39.955875][ T5154] EXT4-fs (loop0): Test dummy encryption mode enabled [ 39.973988][ T5154] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.054937][ T5165] loop4: detected capacity change from 0 to 1024 [ 40.055400][ T5165] EXT4-fs: Ignoring removed bh option [ 40.061073][ T5165] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 40.063207][ T5167] loop3: detected capacity change from 0 to 128 [ 40.063644][ T5167] vfat: Unknown parameter 'ldS [ 40.063644][ T5167] ] 0HY& ^·$*oIeϦՏL5 4coOeuRθZBE2V-х3cҕ, priority 0 [ 55.003564][ T5536] tipc: Resetting bearer [ 55.009823][ T5536] tipc: Disabling bearer [ 55.066715][ T4714] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.129094][ T5543] loop0: detected capacity change from 0 to 128 [ 55.129509][ T5543] vfat: Unknown parameter 'ldS [ 55.129509][ T5543] ] 0HY& ^·$*oIeϦՏL5 4coOeuRθZBE2V-х3cҕ, priority 0 [ 65.774944][ T5787] syzkaller0: entered promiscuous mode [ 65.774956][ T5787] syzkaller0: entered allmulticast mode [ 65.813659][ T5787] tipc: Resetting bearer [ 65.818688][ T5789] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 65.818726][ T5789] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 65.828026][ T5786] tipc: Resetting bearer [ 65.834650][ T5786] tipc: Disabling bearer [ 66.359209][ T4709] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.611006][ T5804] syzkaller0: entered promiscuous mode [ 66.613318][ T5804] syzkaller0: entered allmulticast mode [ 67.013809][ T5816] loop2: detected capacity change from 0 to 512 [ 67.017057][ T5816] ext4: Unknown parameter 'fowner>00000000000000000000' [ 68.172009][ T5821] vlan1: entered allmulticast mode [ 68.172043][ T5821] veth0_vlan: entered allmulticast mode [ 69.656593][ T5854] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 69.656633][ T5854] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 69.680604][ T5844] syzkaller0: entered promiscuous mode [ 69.681849][ T5844] syzkaller0: entered allmulticast mode [ 71.776674][ T5859] tipc: Enabled bearer , priority 0 [ 71.808783][ T5859] tipc: Resetting bearer [ 71.951784][ T5867] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 71.951857][ T5867] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 72.272797][ T5875] syzkaller0: entered promiscuous mode [ 72.274005][ T5875] syzkaller0: entered allmulticast mode [ 72.305738][ T5876] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 72.305774][ T5876] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 72.351851][ T5879] loop0: detected capacity change from 0 to 128 [ 72.352226][ T5879] vfat: Unknown parameter 'ldS [ 72.352226][ T5879] ] 0HY& ^·$*oIeϦՏL5 4coOeuRθZBE2V-х3cҕ, priority 0 [ 73.801788][ T5906] syzkaller0: entered promiscuous mode [ 73.802232][ T5906] syzkaller0: entered allmulticast mode [ 73.908716][ T5909] tipc: Resetting bearer [ 73.922638][ T5905] tipc: Resetting bearer [ 73.926985][ T5905] tipc: Disabling bearer [ 74.132580][ T30] audit: type=1326 audit(74.080:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5911 comm="syz.0.254" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff89977fe8 code=0x0 [ 74.270771][ T5923] netlink: 'syz.2.258': attribute type 27 has an invalid length. [ 74.272787][ T5923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.258'. [ 74.274913][ T5923] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 75.713611][ T5939] loop0: detected capacity change from 0 to 2048 [ 75.738571][ T5940] syzkaller0: entered promiscuous mode [ 75.738605][ T5940] syzkaller0: entered allmulticast mode [ 75.787049][ T5939] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.834300][ T5939] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 75.834395][ T5939] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 75.837427][ T5939] TC_ACT_REPEAT abuse ? [ 76.193235][ T5959] netlink: 84 bytes leftover after parsing attributes in process `syz.2.271'. [ 76.212248][ T4714] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.670240][ T5986] loop3: detected capacity change from 0 to 4096 [ 77.672988][ T5986] EXT4-fs: Ignoring removed nobh option [ 77.675646][ T5986] EXT4-fs (loop3): Test dummy encryption mode enabled [ 78.110826][ T5986] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.988506][ T5998] loop0: detected capacity change from 0 to 128 [ 78.988973][ T5998] vfat: Unknown parameter 'ldS [ 78.988973][ T5998] ] 0HY& ^·$*oIeϦՏL5 4coOeuRθZBE2V-х3cҕ, priority 0 [ 84.376965][ T6053] tipc: Resetting bearer [ 84.391823][ T6052] tipc: Resetting bearer [ 84.418288][ T6052] tipc: Disabling bearer [ 84.734712][ T6065] loop2: detected capacity change from 0 to 8192 [ 84.740418][ T6065] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 84.744222][ T6065] FAT-fs (loop2): error, clusters badly computed (1 != 0) [ 84.745992][ T6065] FAT-fs (loop2): Filesystem has been set read-only [ 85.370025][ T6075] loop1: detected capacity change from 0 to 256 [ 85.921483][ T6082] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 85.921543][ T6082] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 86.153170][ T6090] loop0: detected capacity change from 0 to 512 [ 86.159968][ T6090] EXT4-fs (loop0): Test dummy encryption mode enabled [ 86.170050][ T6090] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.307: inode has both inline data and extents flags [ 86.172725][ T6090] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 86.173825][ T6090] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.307: couldn't read orphan inode 15 (err -117) [ 86.177799][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 86.177810][ C1] EXT4-fs (loop0): initial error at time 86: ext4_orphan_get:1399: inode 15 [ 86.177827][ C1] EXT4-fs (loop0): last error at time 86: ext4_orphan_get:1399: inode 15 [ 86.183082][ T6090] loop0: lost filesystem error report for type 5 error -117 [ 86.184661][ T6090] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.284093][ T6095] syzkaller0: entered promiscuous mode [ 86.284129][ T6095] syzkaller0: entered allmulticast mode [ 86.364764][ T6099] netlink: 32 bytes leftover after parsing attributes in process `syz.1.309'. [ 86.402611][ T6096] overlayfs: missing 'lowerdir' [ 86.518879][ T6102] loop3: detected capacity change from 0 to 512 [ 86.522754][ T6102] EXT4-fs (loop3): Test dummy encryption mode enabled [ 86.526709][ T6102] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.310: inode has both inline data and extents flags [ 86.526744][ T6102] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 86.527083][ T6102] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.310: couldn't read orphan inode 15 (err -117) [ 86.527105][ T6102] loop3: lost filesystem error report for type 5 error -117 [ 86.527826][ T6102] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.810400][ T6105] overlayfs: missing 'lowerdir' [ 87.035472][ T4714] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.270780][ T6112] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 87.270824][ T6112] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 87.400068][ T6116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.312'. [ 87.407285][ T6116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.312'. [ 87.408040][ T6116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.312'. [ 87.409190][ T6116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.312'. [ 87.409587][ T6116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.312'. [ 87.647070][ T6118] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 87.648406][ T6118] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 89.633294][ T6186] loop1: detected capacity change from 0 to 128 [ 89.637351][ T6186] vfat: Unknown parameter 'ldS [ 89.637351][ T6186] ] 0HY& ^·$*oIeϦՏL5 4coOeuRθZBE2V-х3cҕ rejected, already enabled [ 92.494609][ T6293] loop3: detected capacity change from 0 to 512 [ 92.507272][ T6293] EXT4-fs (loop3): Test dummy encryption mode enabled [ 92.518134][ T6293] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.334: inode has both inline data and extents flags [ 92.518173][ T6293] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 92.518840][ T6293] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.334: couldn't read orphan inode 15 (err -117) [ 92.518882][ T6293] loop3: lost filesystem error report for type 5 error -117 [ 92.519732][ T6293] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.514319][ T6324] loop2: detected capacity change from 0 to 4096 [ 93.521226][ T6324] EXT4-fs (loop2): Test dummy encryption mode enabled [ 93.536029][ T6324] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.699746][ T4709] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.775471][ T4717] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.334771][ T6398] syzkaller0: entered promiscuous mode [ 95.334810][ T6398] syzkaller0: entered allmulticast mode [ 95.594598][ T6423] syzkaller0: entered promiscuous mode [ 95.594640][ T6423] syzkaller0: entered allmulticast mode [ 95.597123][ T6423] simple: basic_1 [ 95.597157][ T6423] simple: basic_2 [ 95.597164][ T6423] simple: basic_3 [ 95.597170][ T6423] simple: basic_4 [ 95.597176][ T6423] simple: basic_5 [ 95.597181][ T6423] simple: basic_6 [ 95.597186][ T6423] simple: basic_7 [ 95.597190][ T6423] simple: basic_8 [ 95.597194][ T6423] simple: basic_9 [ 95.597198][ T6423] simple: basic_10 [ 95.597202][ T6423] simple: basic_11 [ 95.597206][ T6423] simple: basic_12 [ 95.597210][ T6423] simple: basic_13 [ 95.597214][ T6423] simple: basic_14 [ 95.597218][ T6423] simple: basic_15 [ 95.597222][ T6423] simple: basic_16 [ 95.597226][ T6423] simple: basic_17 [ 95.597232][ T6423] 0: reclassify loop, rule prio 0, protocol 800 [ 96.036670][ T6444] syzkaller0: entered promiscuous mode [ 96.038042][ T6444] syzkaller0: entered allmulticast mode [ 96.343006][ T6454] process 'syz.4.349' launched './file1' with NULL argv: empty string added [ 96.589402][ T6463] loop2: detected capacity change from 0 to 8192 [ 96.650148][ T6463] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 97.361299][ T6494] binder: 6493:6494 ioctl 4018620d 0 returned -22 [ 97.362857][ T6494] binder: 6493:6494 ioctl c0306201 0 returned -14 [ 97.445451][ T6499] syz_tun: entered allmulticast mode [ 97.459915][ T6492] netlink: 24 bytes leftover after parsing attributes in process `syz.2.352'. [ 97.460324][ T6492] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 97.556150][ T6502] capability: warning: `syz.1.357' uses deprecated v2 capabilities in a way that may be insecure [ 98.026546][ T6511] overlayfs: missing 'lowerdir' [ 98.415594][ T6514] loop1: detected capacity change from 0 to 1024 [ 98.433662][ T4725] Bluetooth: hci3: ACL packet for unknown connection handle 1 [ 98.443392][ T6514] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.159621][ T6547] veth1_macvtap: left promiscuous mode [ 99.267251][ T4710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.329640][ T6555] loop2: detected capacity change from 0 to 128 [ 99.334702][ T6555] vfat: Unknown parameter 'ldS [ 99.334702][ T6555] ] 0HY& ^·$*oIeϦՏL5 4coOeuRθZBE2V-х3cҕ, priority 0 [ 104.086230][ T6662] syzkaller0: entered promiscuous mode [ 104.086988][ T6662] syzkaller0: entered allmulticast mode [ 104.091168][ T6662] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 104.098840][ T6662] tipc: Resetting bearer [ 104.101606][ T6661] tipc: Resetting bearer [ 104.105391][ T6661] tipc: Disabling bearer [ 104.358108][ T6668] overlayfs: missing 'lowerdir' [ 106.549011][ T6702] syzkaller0: entered promiscuous mode [ 106.549042][ T6702] syzkaller0: entered allmulticast mode [ 106.556367][ T6702] tipc: Enabled bearer , priority 0 [ 106.560209][ T6704] syzkaller0: entered promiscuous mode [ 106.560236][ T6704] syzkaller0: entered allmulticast mode [ 106.570938][ T6702] tipc: Resetting bearer [ 106.572655][ T6704] tipc: Started in network mode [ 106.572695][ T6704] tipc: Node identity 5ecc0325027b, cluster identity 4711 [ 106.573057][ T6704] tipc: Enabled bearer , priority 0 [ 106.587125][ T6704] tipc: Resetting bearer [ 106.590203][ T6701] tipc: Resetting bearer [ 106.597259][ T6701] tipc: Disabling bearer [ 106.602701][ T6700] tipc: Resetting bearer [ 106.605775][ T6700] tipc: Disabling bearer [ 107.800192][ T6733] loop1: detected capacity change from 0 to 128 [ 107.802469][ T6733] vfat: Unknown parameter 'ldS [ 107.802469][ T6733] ] 0HY& ^·$*oIeϦՏL5 4coOeuRθZBE2V-х3cҕ, priority 0 [ 123.662861][ T6983] tipc: Resetting bearer [ 123.672012][ T6986] capability: warning: `syz.4.488' uses 32-bit capabilities (legacy support in use) [ 123.782484][ T6990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.478'. [ 125.448505][ T4891] tipc: Node number set to 134418688 [ 125.928170][ T1595] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.928376][ T1595] ieee802154 phy1 wpan1: encryption failed: -22 [ 128.110734][ T7006] 9p: Bad value for 'rfdno' [ 129.253012][ T7025] loop2: detected capacity change from 0 to 256 [ 129.747958][ T7035] Invalid source name [ 129.748026][ T7035] UBIFS error (pid: 7035): cannot open "ubifs", error -22 [ 131.248245][ T7044] overlay: filesystem on ./bus not supported [ 131.438673][ T7050] loop0: detected capacity change from 0 to 128 [ 131.446261][ T7050] vfat: Unknown parameter 'ldS [ 131.446261][ T7050] ] 0HY& ^·$*oIeϦՏL5 4coOeuRθZBE2V-х3cҕ 11) [ 141.155417][ T7206] FAT-fs (loop2): Can't find a valid FAT filesystem [ 141.254769][ T4709] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.318817][ T7211] loop0: detected capacity change from 0 to 2048 [ 141.505222][ T7213] overlayfs: failed to clone upperpath [ 141.554419][ T7214] overlayfs: missing 'lowerdir' [ 142.301326][ T7218] loop3: detected capacity change from 0 to 512 [ 142.320343][ T7218] EXT4-fs (loop3): Test dummy encryption mode enabled [ 142.549686][ T7216] binder: 7201:7216 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 142.699653][ T7211] Dev loop0: unable to read RDB block 8 [ 142.699688][ T7211] loop0: AHDI p3 [ 142.713729][ T7218] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.534: inode has both inline data and extents flags [ 142.713761][ T7218] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 142.716661][ T7218] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.534: couldn't read orphan inode 15 (err -117) [ 142.718454][ C0] EXT4-fs (loop3): error count since last fsck: 2 [ 142.718464][ C0] EXT4-fs (loop3): initial error at time 142: ext4_orphan_get:1399: inode 15 [ 142.718479][ C0] EXT4-fs (loop3): last error at time 142: ext4_orphan_get:1404 [ 142.725452][ T7218] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.878703][ T7227] loop1: detected capacity change from 0 to 128 [ 142.879128][ T7227] vfat: Unknown parameter 'ldS [ 142.879128][ T7227] ] 0HY& ^·$*oIeϦՏL5 4coOeuRθZBE2V-х3cҕ 0x0eff [ 150.226170][ T4714] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.240340][ T7321] syzkaller0: entered promiscuous mode [ 150.240370][ T7321] syzkaller0: entered allmulticast mode [ 151.039714][ T7340] syz2: rxe_newlink: already configured on ipvlan0 [ 151.121713][ T4725] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 151.765848][ T7345] loop1: detected capacity change from 0 to 512 [ 151.772871][ T7345] EXT4-fs (loop1): Test dummy encryption mode enabled [ 151.966449][ T7345] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.564: inode has both inline data and extents flags [ 151.966488][ T7345] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 151.967490][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 151.967509][ C1] EXT4-fs (loop1): initial error at time 151: ext4_orphan_get:1399: inode 15 [ 151.967525][ C1] EXT4-fs (loop1): last error at time 151: ext4_orphan_get:1399: inode 15 [ 151.974907][ T7345] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.564: couldn't read orphan inode 15 (err -117) [ 151.974928][ T7345] loop1: lost filesystem error report for type 5 error -117 [ 151.978120][ T7345] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.038263][ T7353] x_tables: duplicate underflow at hook 3 [ 152.489805][ T7358] overlayfs: missing 'lowerdir' [ 152.680049][ T7357] loop0: detected capacity change from 0 to 2048 [ 152.686813][ T7357] EXT4-fs (loop0): Cannot use DAX on a filesystem that may contain inline data [ 152.693086][ T7361] loop2: detected capacity change from 0 to 512 [ 152.770670][ T7361] EXT4-fs (loop2): Test dummy encryption mode enabled [ 152.775174][ T7361] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.568: inode has both inline data and extents flags [ 152.775210][ T7361] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 152.777581][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 152.777594][ C1] EXT4-fs (loop2): initial error at time 152: ext4_orphan_get:1399: inode 15 [ 152.777614][ C1] EXT4-fs (loop2): last error at time 152: ext4_orphan_get:1399: inode 15 [ 152.785710][ T7361] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.568: couldn't read orphan inode 15 (err -117) [ 152.785748][ T7361] loop2: lost filesystem error report for type 5 error -117 [ 152.789156][ T7361] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.795805][ T7357] loop0: detected capacity change from 0 to 256 [ 153.767715][ T4722] Bluetooth: hci1: command 0x2016 tx timeout [ 153.767845][ T4722] Bluetooth: hci4: command 0x2016 tx timeout [ 153.767932][ T4722] Bluetooth: hci3: command 0x0406 tx timeout [ 153.768019][ T4722] Bluetooth: hci2: command 0x0406 tx timeout [ 153.768093][ T4722] Bluetooth: hci0: command 0x0406 tx timeout [ 153.801960][ T7372] overlayfs: missing 'lowerdir' [ 153.999259][ T4710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.635009][ T7392] netlink: 24 bytes leftover after parsing attributes in process `syz.3.573'. [ 155.754827][ T4717] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.103404][ T7397] loop2: detected capacity change from 0 to 128 [ 156.195858][ T7400] loop0: detected capacity change from 0 to 512 [ 156.255496][ T7400] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 156.674377][ T7400] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 156.675012][ T7400] Quota error (device loop0): write_blk: dquota write failed [ 156.675025][ T7400] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 156.675087][ T7400] Quota error (device loop0): write_blk: dquota write failed [ 156.675151][ T7400] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 156.675168][ T7400] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.570: Failed to acquire dquot type 1 [ 156.675178][ T7400] loop0: lost filesystem error report for type 5 error -28 [ 156.677484][ C1] EXT4-fs (loop0): error count since last fsck: 2 [ 156.677496][ C1] EXT4-fs (loop0): initial error at time 156: ext4_mb_generate_buddy:1317 [ 156.677507][ C1] EXT4-fs (loop0): last error at time 156: ext4_acquire_dquot:7041 [ 156.697378][ T7400] EXT4-fs (loop0): 1 truncate cleaned up [ 156.697970][ T7400] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.703195][ T7397] loop2: detected capacity change from 0 to 512 [ 156.714637][ T7397] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 156.714680][ T7397] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 156.755070][ T7397] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.575: Invalid block bitmap block 0 in block_group 0 [ 156.755112][ T7397] loop2: lost filesystem error report for type 5 error -117 [ 156.759044][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 156.759059][ C0] EXT4-fs (loop2): initial error at time 156: ext4_read_block_bitmap_nowait:483 [ 156.759072][ C0] EXT4-fs (loop2): last error at time 156: ext4_read_block_bitmap_nowait:483 [ 156.791133][ T7397] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 156.791177][ T7397] loop2: lost filesystem error report for type 5 error -117 [ 156.798016][ T7397] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #11: comm syz.2.575: attempt to clear invalid blocks 983261 len 1 [ 156.798061][ T7397] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 156.799590][ T7397] EXT4-fs error (device loop2): __ext4_get_inode_loc:4886: comm syz.2.575: Invalid inode table block 0 in block_group 0 [ 156.799610][ T7397] loop2: lost filesystem error report for type 5 error -117 [ 156.814868][ T7397] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 156.814901][ T7397] loop2: lost filesystem error report for type 5 error -117 [ 156.820002][ T7397] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 156.820038][ T7397] loop2: lost filesystem error report for type 5 error -117 [ 156.825645][ T7397] EXT4-fs error (device loop2): __ext4_get_inode_loc:4886: comm syz.2.575: Invalid inode table block 0 in block_group 0 [ 156.825728][ T7397] loop2: lost filesystem error report for type 5 error -117 [ 156.826121][ T7393] EXT4-fs error (device loop0): __ext4_remount:6844: comm syz.0.570: Abort forced by user [ 156.827918][ T7393] EXT4-fs (loop0): Remounting filesystem read-only [ 156.827932][ T7393] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 157.047540][ T7397] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 157.075841][ T7397] loop2: lost filesystem error report for type 5 error -117 [ 157.076375][ T7397] EXT4-fs error (device loop2): ext4_truncate:4691: inode #11: comm syz.2.575: mark_inode_dirty error [ 157.098711][ T4714] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.135201][ T7397] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 157.169634][ T7397] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 157.169691][ T7397] loop2: lost filesystem error report for type 5 error -117 [ 157.170273][ T7397] EXT4-fs error (device loop2): __ext4_get_inode_loc:4886: comm syz.2.575: Invalid inode table block 0 in block_group 0 [ 157.170296][ T7397] loop2: lost filesystem error report for type 5 error -117 [ 157.170691][ T7397] EXT4-fs (loop2): 1 truncate cleaned up [ 157.171161][ T7397] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.390300][ T7419] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 158.882713][ T4717] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.173609][ T7439] overlayfs: failed to clone upperpath [ 160.175055][ T7439] overlayfs: missing 'lowerdir' [ 160.850602][ T4716] Bluetooth: hci0: command 0x0406 tx timeout [ 160.850995][ T7422] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 160.851026][ T7422] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 160.857037][ T7422] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 160.857130][ T7422] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 160.857147][ T7422] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 160.861434][ T7422] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 160.861473][ T7422] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 160.864449][ T7422] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 160.864487][ T7422] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 162.917825][ T4726] Bluetooth: hci4: command 0x2016 tx timeout [ 162.917873][ T4726] Bluetooth: hci3: command 0x0406 tx timeout [ 162.917907][ T4726] Bluetooth: hci2: command 0x0406 tx timeout [ 162.917930][ T4726] Bluetooth: hci1: command 0x2016 tx timeout [ 162.917952][ T4726] Bluetooth: hci0: command 0x0406 tx timeout [ 163.155117][ T7479] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 163.473224][ T7445] Set syz1 is full, maxelem 65536 reached [ 163.505432][ T4799] IPVS: starting estimator thread 0... [ 163.758210][ T7481] IPVS: using max 60 ests per chain, 144000 per kthread [ 163.764413][ T7491] loop3: detected capacity change from 0 to 512 [ 163.768776][ T7491] EXT4-fs (loop3): Test dummy encryption mode enabled [ 163.882726][ T7492] random: crng reseeded on system resumption [ 163.890854][ T7491] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.595: inode has both inline data and extents flags [ 163.890885][ T7491] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 163.894136][ T7491] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.595: couldn't read orphan inode 15 (err -117) [ 163.894159][ T7491] loop3: lost filesystem error report for type 5 error -117 [ 163.898583][ C0] EXT4-fs (loop3): error count since last fsck: 2 [ 163.898597][ C0] EXT4-fs (loop3): initial error at time 163: ext4_orphan_get:1399: inode 15 [ 163.898615][ C0] EXT4-fs (loop3): last error at time 163: ext4_orphan_get:1404 [ 163.903926][ T7491] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.091676][ T7500] Restarting kernel threads ... [ 164.092495][ T7500] Done restarting kernel threads. [ 164.656959][ T7505] loop0: detected capacity change from 0 to 2048 [ 164.686631][ T7505] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.862154][ T7517] input: syz0 as /devices/virtual/input/input6 [ 165.078405][ T4726] Bluetooth: hci2: command 0x0406 tx timeout [ 165.079741][ T4726] Bluetooth: hci3: command 0x0406 tx timeout [ 165.081088][ T4726] Bluetooth: hci4: command 0x2016 tx timeout [ 165.083634][ T4716] Bluetooth: hci0: command 0x0406 tx timeout [ 165.162212][ T7520] overlayfs: missing 'lowerdir' [ 166.498225][ T4714] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.966350][ T7549] netlink: 4 bytes leftover after parsing attributes in process `syz.4.606'. [ 167.976423][ T7552] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 168.024112][ T4799] IPVS: starting estimator thread 0... [ 168.125655][ T7556] loop1: detected capacity change from 0 to 512 [ 168.167830][ T7553] IPVS: using max 42 ests per chain, 100800 per kthread [ 168.191150][ T7556] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.487568][ T7562] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 168.795104][ T4710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.994146][ T7570] netlink: 'syz.1.610': attribute type 10 has an invalid length. [ 169.111882][ T7570] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 169.874859][ T7576] loop1: detected capacity change from 0 to 256 [ 170.397573][ T7584] fuse: Invalid rootmode [ 170.419844][ T7584] netlink: 'syz.2.614': attribute type 10 has an invalid length. [ 170.420745][ T7584] netlink: 40 bytes leftover after parsing attributes in process `syz.2.614'. [ 172.420825][ T4709] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.829899][ T7587] netlink: 64 bytes leftover after parsing attributes in process `syz.3.616'. [ 175.112030][ T7609] bridge0: port 4(netdevsim1) entered blocking state [ 175.112105][ T7609] bridge0: port 4(netdevsim1) entered disabled state [ 175.112332][ T7609] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 175.113654][ T7609] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 175.113951][ T7609] bridge0: port 4(netdevsim1) entered blocking state [ 175.114005][ T7609] bridge0: port 4(netdevsim1) entered forwarding state [ 175.391397][ T4711] Bluetooth: hci2: unexpected event for opcode 0x010e [ 175.400926][ T7615] loop1: detected capacity change from 0 to 1024 [ 175.401282][ T7615] EXT4-fs: Ignoring removed nomblk_io_submit option [ 175.469755][ T7615] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.401167][ T4710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.759101][ T7655] batadv_slave_1: entered promiscuous mode [ 178.171516][ T7659] overlay: ./bus is not a directory [ 178.537854][ T7647] batadv_slave_1: left promiscuous mode [ 179.615594][ T7670] loop2: detected capacity change from 0 to 512 [ 179.778832][ T7656] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 180.385528][ T7676] loop0: detected capacity change from 0 to 128 [ 180.416493][ T7676] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 180.637597][ T4716] Bluetooth: hci4: unexpected event for opcode 0x200f [ 180.878286][ T7690] netlink: 12 bytes leftover after parsing attributes in process `syz.4.639'. [ 181.072097][ T7679] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 181.072118][ T7679] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 181.072860][ T7679] vhci_hcd vhci_hcd.0: Device attached [ 181.083524][ T7691] vhci_hcd: connection closed [ 181.104348][ T6465] vhci_hcd vhci_hcd.0: stop threads [ 181.108271][ T6465] vhci_hcd vhci_hcd.0: release socket [ 181.110905][ T6465] vhci_hcd vhci_hcd.0: disconnect device [ 181.414089][ T7687] loop3: detected capacity change from 0 to 8 [ 181.558366][ T7687] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 181.558390][ T7687] unable to read xattr id index table [ 181.569832][ T7687] SQUASHFS error: Failed to read block 0x1ab: -5 [ 181.569855][ T7687] SQUASHFS error: Unable to read metadata cache entry [1a9] [ 181.569874][ T7687] SQUASHFS error: Unable to read inode 0x127 [ 182.856100][ T7713] xt_CT: You must specify a L4 protocol and not use inversions on it [ 183.146405][ T7718] loop3: detected capacity change from 0 to 512 [ 183.162750][ T7706] netlink: 'syz.1.640': attribute type 2 has an invalid length. [ 183.172183][ T7706] loop1: detected capacity change from 0 to 128 [ 183.219897][ T7703] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 183.219917][ T7703] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 183.220036][ T7703] vhci_hcd vhci_hcd.0: Device attached [ 183.395607][ T7707] vhci_hcd: connection closed [ 183.400301][ T6461] vhci_hcd vhci_hcd.1: stop threads [ 183.402352][ T6461] vhci_hcd vhci_hcd.1: release socket [ 183.427729][ T6461] vhci_hcd vhci_hcd.1: disconnect device [ 183.468006][ T4891] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 183.781046][ T4714] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 183.787931][ T7718] EXT4-fs (loop3): Invalid log block size: 2147483649 [ 185.165641][ T7747] overlayfs: failed to clone upperpath [ 185.170287][ T4716] Bluetooth: hci4: command 0x2016 tx timeout [ 185.170468][ T4711] Bluetooth: hci4: Opcode 0x206a failed: -110 [ 185.236608][ T7750] overlayfs: missing 'lowerdir' [ 185.828668][ T7737] loop3: detected capacity change from 0 to 512 [ 185.847437][ T7757] loop2: detected capacity change from 0 to 1024 [ 186.057509][ T7737] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 186.063200][ T7757] EXT4-fs: Ignoring removed nomblk_io_submit option [ 186.063249][ T7757] EXT4-fs: inline encryption not supported [ 186.063259][ T7757] EXT4-fs: Ignoring removed nomblk_io_submit option [ 186.082479][ T7737] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.650: corrupted in-inode xattr: invalid ea_ino [ 186.082514][ T7737] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 186.085342][ T7737] EXT4-fs (loop3): get orphan inode failed [ 186.085570][ T7737] EXT4-fs (loop3): mount failed [ 186.087642][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 186.087654][ C0] EXT4-fs (loop3): initial error at time 186: ext4_iget_extra_inode:5180: inode 15 [ 186.087674][ C0] EXT4-fs (loop3): last error at time 186: ext4_iget_extra_inode:5180: inode 15 [ 186.514532][ T7757] EXT4-fs (loop2): mounted filesystem 00fc0c00-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.921540][ T7804] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 187.226900][ T7817] openvswitch: netlink: Message has 78 unknown bytes. [ 187.378874][ T1595] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.378922][ T1595] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.558496][ T7824] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 188.917593][ T4711] Bluetooth: hci1: unexpected event for opcode 0x0c5b [ 190.073711][ T4717] EXT4-fs (loop2): unmounting filesystem 00fc0c00-0000-0006-0000-000000000000. [ 191.085817][ T7864] loop3: detected capacity change from 0 to 128 [ 191.086492][ T7864] vfat: Unknown parameter 'ldS [ 191.086492][ T7864] ] 0HY& ^·$*oIeϦՏL5 4coOeuRθZBE2V-х3cҕs_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x170/0x2dc [ 194.129297][ T7955] [ 194.129297][ T7955] but task is already holding lock: [ 194.130530][ T7955] ffff0000f38a3900 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x32c/0x828 [ 194.132274][ T7955] [ 194.132274][ T7955] which lock already depends on the new lock. [ 194.132274][ T7955] [ 194.134147][ T7955] [ 194.134147][ T7955] the existing dependency chain (in reverse order) is: [ 194.135775][ T7955] [ 194.135775][ T7955] -> #1 (&ei->xattr_sem){++++}-{4:4}: [ 194.137136][ T7955] down_write+0x50/0xc0 [ 194.137949][ T7955] ext4_xattr_set_handle+0x134/0xde4 [ 194.138964][ T7955] ext4_initxattrs+0xa8/0x11c [ 194.139816][ T7955] security_inode_init_security+0x244/0x370 [ 194.140887][ T7955] ext4_init_security+0x44/0x58 [ 194.141790][ T7955] __ext4_new_inode+0x286c/0x3308 [ 194.142712][ T7955] ext4_ext_migrate+0x564/0xc54 [ 194.143181][ T7963] loop2: detected capacity change from 0 to 256 [ 194.144271][ T7963] vfat: Deprecated parameter 'posix' [ 194.144290][ T7963] FAT-fs: "posix" option is obsolete, not supported now [ 194.145612][ T7955] ext4_ioctl+0x1e14/0x4430 [ 194.147736][ T7955] __arm64_sys_ioctl+0x14c/0x1c4 [ 194.148696][ T7955] invoke_syscall+0x98/0x244 [ 194.149570][ T7955] el0_svc_common+0xec/0x23c [ 194.150416][ T7955] do_el0_svc+0x4c/0x5c [ 194.151243][ T7955] el0_svc+0x64/0x260 [ 194.151996][ T7955] el0t_64_sync_handler+0x48/0x148 [ 194.152969][ T7955] el0t_64_sync+0x198/0x19c [ 194.153835][ T7955] [ 194.153835][ T7955] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 194.155316][ T7955] __lock_acquire+0x17c0/0x2ebc [ 194.156207][ T7955] lock_acquire+0x140/0x364 [ 194.157040][ T7955] percpu_down_read_internal+0x5c/0x294 [ 194.158072][ T7955] ext4_writepages+0x170/0x2dc [ 194.158974][ T7955] do_writepages+0x284/0x47c [ 194.159849][ T7955] __writeback_single_inode+0x140/0x1880 [ 194.160856][ T7955] writeback_single_inode+0x400/0xb20 [ 194.161803][ T7955] write_inode_now+0x170/0x208 [ 194.162678][ T7955] iput+0x7cc/0xc2c [ 194.163400][ T7955] ext4_xattr_block_set+0x1460/0x21e8 [ 194.164384][ T7955] ext4_expand_extra_isize_ea+0xaf4/0x1384 [ 194.165438][ T7955] __ext4_expand_extra_isize+0x2a4/0x378 [ 194.166448][ T7955] __ext4_mark_inode_dirty+0x394/0x828 [ 194.167488][ T7955] ext4_evict_inode+0x798/0xfb8 [ 194.168386][ T7955] evict+0x4c0/0x74c [ 194.169131][ T7955] iput+0x8f0/0xc2c [ 194.169824][ T7955] ext4_process_orphan+0x24c/0x2c0 [ 194.170761][ T7955] ext4_orphan_cleanup+0x7d4/0xd20 [ 194.171693][ T7955] ext4_fill_super+0x4628/0x4e14 [ 194.172640][ T7955] get_tree_bdev_flags+0x388/0x43c [ 194.173616][ T7955] get_tree_bdev+0x2c/0x3c [ 194.174470][ T7955] ext4_get_tree+0x28/0x38 [ 194.175302][ T7955] vfs_get_tree+0x90/0x28c [ 194.176168][ T7955] fc_mount+0x24/0xac [ 194.176940][ T7955] do_new_mount+0x2a4/0x538 [ 194.177789][ T7955] path_mount+0x5f0/0xa88 [ 194.178609][ T7955] do_mount+0xe8/0x148 [ 194.179373][ T7955] __arm64_sys_mount+0x334/0x380 [ 194.180285][ T7955] invoke_syscall+0x98/0x244 [ 194.181148][ T7955] el0_svc_common+0xec/0x23c [ 194.182015][ T7955] do_el0_svc+0x4c/0x5c [ 194.182850][ T7955] el0_svc+0x64/0x260 [ 194.183599][ T7955] el0t_64_sync_handler+0x48/0x148 [ 194.184506][ T7955] el0t_64_sync+0x198/0x19c [ 194.185357][ T7955] [ 194.185357][ T7955] other info that might help us debug this: [ 194.185357][ T7955] [ 194.187072][ T7955] Possible unsafe locking scenario: [ 194.187072][ T7955] [ 194.188312][ T7955] CPU0 CPU1 [ 194.189235][ T7955] ---- ---- [ 194.190151][ T7955] lock(&ei->xattr_sem); [ 194.190919][ T7955] lock(&sbi->s_writepages_rwsem); [ 194.192243][ T7955] lock(&ei->xattr_sem); [ 194.193386][ T7955] rlock(&sbi->s_writepages_rwsem); [ 194.194302][ T7955] [ 194.194302][ T7955] *** DEADLOCK *** [ 194.194302][ T7955] [ 194.195680][ T7955] 3 locks held by syz.3.691/7955: [ 194.196498][ T7955] #0: ffff0000c93680d8 (&type->s_umount_key#28/1){+.+.}-{4:4}, at: sget_fc+0x788/0x13e8 [ 194.198337][ T7955] #1: ffff0000c9368640 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x360/0xfb8 [ 194.200071][ T7955] #2: ffff0000f38a3900 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x32c/0x828 [ 194.201907][ T7955] [ 194.201907][ T7955] stack backtrace: [ 194.202957][ T7955] CPU: 0 UID: 0 PID: 7955 Comm: syz.3.691 Tainted: G L syzkaller #0 PREEMPT [ 194.204782][ T7955] Tainted: [L]=SOFTLOCKUP [ 194.205546][ T7955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 194.207294][ T7955] Call trace: [ 194.207889][ T7955] show_stack+0x2c/0x3c (C) [ 194.208674][ T7955] __dump_stack+0x30/0x40 [ 194.209388][ T7955] dump_stack_lvl+0xd8/0x12c [ 194.210139][ T7955] dump_stack+0x1c/0x28 [ 194.210818][ T7955] print_circular_bug+0x328/0x330 [ 194.211640][ T7955] check_noncircular+0x158/0x174 [ 194.212423][ T7955] __lock_acquire+0x17c0/0x2ebc [ 194.213233][ T7955] lock_acquire+0x140/0x364 [ 194.213999][ T7955] percpu_down_read_internal+0x5c/0x294 [ 194.214935][ T7955] ext4_writepages+0x170/0x2dc [ 194.215695][ T7955] do_writepages+0x284/0x47c [ 194.216460][ T7955] __writeback_single_inode+0x140/0x1880 [ 194.217382][ T7955] writeback_single_inode+0x400/0xb20 [ 194.218303][ T7955] write_inode_now+0x170/0x208 [ 194.219131][ T7955] iput+0x7cc/0xc2c [ 194.219792][ T7955] ext4_xattr_block_set+0x1460/0x21e8 [ 194.220679][ T7955] ext4_expand_extra_isize_ea+0xaf4/0x1384 [ 194.221710][ T7955] __ext4_expand_extra_isize+0x2a4/0x378 [ 194.222697][ T7955] __ext4_mark_inode_dirty+0x394/0x828 [ 194.223659][ T7955] ext4_evict_inode+0x798/0xfb8 [ 194.224516][ T7955] evict+0x4c0/0x74c [ 194.225209][ T7955] iput+0x8f0/0xc2c [ 194.225817][ T7955] ext4_process_orphan+0x24c/0x2c0 [ 194.226657][ T7955] ext4_orphan_cleanup+0x7d4/0xd20 [ 194.227523][ T7955] ext4_fill_super+0x4628/0x4e14 [ 194.228354][ T7955] get_tree_bdev_flags+0x388/0x43c [ 194.229225][ T7955] get_tree_bdev+0x2c/0x3c [ 194.229994][ T7955] ext4_get_tree+0x28/0x38 [ 194.230753][ T7955] vfs_get_tree+0x90/0x28c [ 194.231507][ T7955] fc_mount+0x24/0xac [ 194.232253][ T7955] do_new_mount+0x2a4/0x538 [ 194.233041][ T7955] path_mount+0x5f0/0xa88 [ 194.233799][ T7955] do_mount+0xe8/0x148 [ 194.234531][ T7955] __arm64_sys_mount+0x334/0x380 [ 194.235384][ T7955] invoke_syscall+0x98/0x244 [ 194.236140][ T7955] el0_svc_common+0xec/0x23c [ 194.236900][ T7955] do_el0_svc+0x4c/0x5c [ 194.237588][ T7955] el0_svc+0x64/0x260 [ 194.238259][ T7955] el0t_64_sync_handler+0x48/0x148 [ 194.239117][ T7955] el0t_64_sync+0x198/0x19c [ 194.247527][ T7955] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.691: iget: bad extra_isize 90 (inode size 256) [ 194.251988][ T7955] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 194.254862][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 194.254883][ C0] EXT4-fs (loop3): initial error at time 194: ext4_xattr_inode_iget:441: inode 11 [ 194.254913][ C0] EXT4-fs (loop3): last error at time 194: ext4_xattr_inode_iget:441: inode 11 [ 194.267689][ T7955] EXT4-fs (loop3): Remounting filesystem read-only [ 194.269011][ T7955] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 194.271305][ T7955] EXT4-fs warning (device loop3): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 194.272727][ T7955] EXT4-fs (loop3): 1 orphan inode deleted [ 194.272959][ T7955] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.291609][ T4709] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.505362][ T7966] netlink: 'syz.2.693': attribute type 4 has an invalid length. [ 197.747483][ T4711] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 197.747518][ T4711] Bluetooth: hci2: Injecting HCI hardware error event [ 197.747969][ T4716] Bluetooth: hci2: hardware error 0x00 [ 199.950495][ T4716] Bluetooth: hci2: Opcode 0x0c03 failed: -110