last executing test programs: 1m50.711239402s ago: executing program 32 (id=79): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r2, 0x80047453, 0xffffffffffffffff) 1m49.819577552s ago: executing program 33 (id=100): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x51e, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x65) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x82001, 0x59) pwrite64(r1, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) 1m46.897414647s ago: executing program 0 (id=134): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000280)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000280), 0x2, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000040)={0x500, 0x1, &(0x7f0000000180)=[r2], &(0x7f0000000180), &(0x7f0000000240)=[r3], &(0x7f00000001c0), 0x0, 0xff}) 1m46.873127877s ago: executing program 0 (id=135): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)="4df6", 0x2}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000000)={0x0, 0x0, 0x1}, 0x8) 1m46.8540288s ago: executing program 0 (id=136): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x5]}, 0x8, 0x800) io_setup(0x2, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) prlimit64(0x0, 0xb, &(0x7f0000000140), 0x0) r2 = gettid() rt_sigqueueinfo(r2, 0x21, &(0x7f00000007c0)={0x0, 0xfffffffa}) 1m46.761213356s ago: executing program 0 (id=137): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x11050ca, 0x0) 1m46.742529454s ago: executing program 0 (id=138): r0 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) syz_open_procfs(r0, &(0x7f0000000300)='numa_maps\x00') 1m46.391544103s ago: executing program 0 (id=139): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x7, {"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", 0x1000}}, 0x1006) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004540)=ANY=[@ANYBLOB="f0140000520001002abd7000000000000a00000008000180"], 0x14f0}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x0) 1m46.391361859s ago: executing program 34 (id=139): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x7, {"a2e3ad21ed0d52f91b5d300987f70e06d038e7ff7fc6e5539b0d47078b089b3907376d090890e0878f0e1ac6e7049b334a959b669a240d5d67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07670936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70fe98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf1a34af674f3f39fe23491235c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e470dea05918b41243513f000800000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3e3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14d9fdb8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a19000000000000006f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69b15c9f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d44400009a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc01008cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c16c02ed4b5d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaab1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106d26658b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6b14effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c110000a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b51028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6815d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3f3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51090840517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4e004a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6ce1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c817e9177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d543902113c4c859465c3c115c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc248850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafcc009fc074bb6b68a1f0c4649820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948998cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2fd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5dc4ff8f0104000000000000df72279fdb0d2b9e936e5a983c12fded79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d3700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc642df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa6e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9f07b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e3ebb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3fec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4cddd5d0fc5a752f9000", 0x1000}}, 0x1006) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004540)=ANY=[@ANYBLOB="f0140000520001002abd7000000000000a00000008000180"], 0x14f0}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x0) 1m44.954633675s ago: executing program 1 (id=170): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x2080, 0x0) r0 = syz_io_uring_setup(0xf04, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x10000051}, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x5}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 1m44.913717968s ago: executing program 1 (id=171): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xe, &(0x7f0000000900)={@remote, @random="2bfd8b10d603", @void, {@generic={0x809b}}}, 0x0) 1m44.804915887s ago: executing program 1 (id=174): r0 = fanotify_init(0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r0, 0x455, 0x8000003, r1, 0x0) fanotify_mark(r0, 0x41, 0x8000038, r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000006c0)='fdinfo/3\x00') pread64(r2, &(0x7f0000000140)=""/116, 0x74, 0x4) 1m44.737836779s ago: executing program 1 (id=176): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x5, 0x3}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002340)=@newtfilter={0x478, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r2, {}, {}, {0x8, 0xc695d31f854950dd}}, [@filter_kind_options=@f_flow={{0x9}, {0x448, 0x2, [@TCA_FLOW_POLICE={0x444, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0xcb, 0xf, 0x4, 0x7ff, 0x1, 0x8000, 0xa5, 0x7ff, 0x3676, 0x8de, 0x2, 0x0, 0xc8, 0x7, 0xe14e, 0x2, 0xffff086b, 0x6372, 0x0, 0x200, 0x8, 0x4, 0x3, 0xbf, 0xfffffff9, 0x4, 0x180, 0xdfea, 0x4, 0x80000000, 0x875, 0x6, 0x4, 0x7ff, 0x204, 0x6cc7, 0x7, 0x9, 0x16f, 0x5, 0xfffffffa, 0x2, 0x80000001, 0x401, 0x3, 0x832d, 0x0, 0x0, 0x0, 0x7, 0x4, 0x7, 0x5, 0x1f12, 0x2, 0x2, 0x6, 0x7, 0x2, 0x56e23768, 0x3, 0x0, 0xfef, 0x2, 0x3ff, 0x2, 0xfffffff8, 0x7fff, 0x85, 0x693b, 0x8, 0xffffffff, 0x6, 0x0, 0x9, 0x2, 0x5, 0x2, 0x3, 0x6, 0x8, 0x80000001, 0x8b1, 0x7, 0xafd6, 0x6, 0x9, 0x5, 0xa225, 0x477, 0x7, 0x357, 0x800, 0x4, 0x4, 0x4df, 0xfffffffe, 0x7, 0xfffffba5, 0x6, 0x100, 0x400, 0x93ad, 0x2, 0x2, 0xfffffff9, 0x2, 0x7f, 0xff, 0xffffff7f, 0xa1e9, 0x5, 0xffff7fff, 0x6, 0x4, 0x61, 0x1, 0x1382, 0xc, 0x2, 0x5, 0x8, 0x9, 0x1, 0x2, 0x5, 0x74, 0x2, 0x4, 0x24000000, 0xd87, 0xb, 0x4, 0x5, 0x2, 0x1ff, 0x1ff, 0x3, 0xa, 0x4, 0x1ff, 0x0, 0x81, 0x33d1, 0x2, 0x4, 0xfffffffc, 0x1f8, 0xc, 0x0, 0x8, 0xcac, 0x10, 0x4, 0x7, 0x7, 0x10001, 0x5, 0x2, 0x6, 0x9, 0xa2987dbc, 0x9, 0xc, 0x6717, 0x47bf, 0x9, 0x6000000, 0x1f0f, 0x5e8, 0x9, 0x7, 0x17, 0x8, 0x4da0, 0x8, 0x9, 0x0, 0x3, 0xffffffff, 0x5, 0xd, 0x3, 0x5, 0x2, 0x6, 0xf, 0xc00, 0x4, 0x10, 0x6a, 0x1, 0x401, 0x80000001, 0x4, 0xfffffffd, 0x7062ddb9, 0xeb, 0x204000, 0x8, 0x3, 0x967, 0xfffffffd, 0x6fdd5f04, 0x7, 0xc69c, 0x0, 0x6, 0x5, 0x6, 0x4, 0xb5, 0x1000, 0x401, 0xb, 0x5, 0x3, 0xfffffff9, 0xb617, 0xfff, 0x8, 0x3, 0x2, 0x8, 0x4, 0x44, 0x20004c4, 0x7, 0xffff8274, 0x0, 0x2, 0x7f, 0x5, 0x2, 0x5, 0x5, 0x7, 0x80000000, 0x1, 0x5, 0x5, 0x5, 0x5, 0x1, 0xffffff38, 0x1, 0xdd9, 0x0, 0x4, 0x6, 0x1, 0x4, 0x0, 0x2, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x1, 0xaa5, 0x80000001, 0x7, {0x7, 0x1, 0x688, 0x5, 0x24, 0xfffffff8}, {0x6, 0x1, 0x2000, 0x0, 0x2}, 0x101, 0x7fff, 0xf}}]}]}}]}, 0x478}, 0x1, 0x0, 0x0, 0x4008814}, 0x2) 1m44.519455829s ago: executing program 1 (id=180): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f00000000c0)={0x200000000000001}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f00000014c0)='\x00', 0x1}], 0x1}}], 0x1, 0x400c405) exit(0x0) sendmmsg$inet6(r0, &(0x7f0000003f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40) 1m44.142463275s ago: executing program 1 (id=194): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) getsockopt(r2, 0x111, 0x5, 0x0, &(0x7f00000000c0)) 1m44.084433809s ago: executing program 35 (id=194): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) getsockopt(r2, 0x111, 0x5, 0x0, &(0x7f00000000c0)) 1m41.861223372s ago: executing program 6 (id=254): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='pids.current\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\\\x00\x00 \x00'}) 1m41.802634167s ago: executing program 6 (id=256): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10) listen(r0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x4}) shutdown(r0, 0x1) 1m41.72522672s ago: executing program 6 (id=258): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x0, {{@in6=@loopback, @in6=@dev={0xfe, 0x80, '\x00', 0xf}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x1}]}]}, 0xfc}}, 0x0) r2 = socket(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000280)={0xa, 0x4e20, 0x2, @dev={0xfe, 0x80, '\x00', 0xc}, 0x3}, 0x1c) 1m41.690734882s ago: executing program 6 (id=260): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 1m41.644989266s ago: executing program 6 (id=261): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f0000000040)={[{@debug}, {@jqfmt_vfsv0}, {@inlinecrypt}, {@errors_remount}, {@test_dummy_encryption_v1}, {@norecovery}, {@delalloc}, {@nogrpid}, {@minixdf}]}, 0x1, 0xbdb, &(0x7f0000001000)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x20) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000540)={0x9, 0x73b, 0x1, 0x1}) 1m41.319627147s ago: executing program 6 (id=264): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) socket$unix(0x1, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000f00)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x1c, 0x0, 0x0, @in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e24, 0x20, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x2fc}}}, 0x118) 1m41.301874446s ago: executing program 36 (id=264): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) socket$unix(0x1, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000f00)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x1c, 0x0, 0x0, @in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e24, 0x20, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x2fc}}}, 0x118) 1m3.516023003s ago: executing program 5 (id=916): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) tkill(r0, 0x7) wait4(r0, 0x0, 0x0, 0x0) setpgid(r0, r0) 1m3.131870749s ago: executing program 5 (id=923): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000340)=0x152, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000200)=0x7fff, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000b00)={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}}, 0x1c, 0x0}}], 0x4d, 0x24000000) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0x81}, 0xdb31}], 0x1, 0x40002042, 0x0) 1m2.943521535s ago: executing program 5 (id=924): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210008, &(0x7f0000000000)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@nodiscard}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x2e508d, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x101000, 0x4c) io_setup(0xe65e, &(0x7f00000002c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x7fff, r0, &(0x7f0000000440)="06", 0x1, 0x2000000000000009}]) 1m2.305738918s ago: executing program 5 (id=935): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000100), 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 1m1.684636393s ago: executing program 5 (id=942): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800005, 0x31, r0, 0xd0fbb000) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0x0) 1m0.347526087s ago: executing program 5 (id=953): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2c, r2, 0x1, 0x1070bd28, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 1m0.139022197s ago: executing program 37 (id=953): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2c, r2, 0x1, 0x1070bd28, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 27.40297348s ago: executing program 4 (id=1327): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000200)=0x9, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x2006}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x4c}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vlan0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000002680)=[{{0x0, 0x0, &(0x7f0000003e40)=[{0x0}, {&(0x7f0000000cc0)="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", 0x50f}, {0x0}], 0x3}}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000000000)="0085cd2f34", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000480)='=', 0x1}], 0x1}}], 0x3, 0x119e75c40277adee) 27.182608273s ago: executing program 4 (id=1330): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newsa={0x16c, 0x10, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x80}, [@algo_auth={0x5c, 0x1, {{'hmac(sha1)\x00'}, 0xa0, "000102030405060708090a0b0c0d0e0f10111213"}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x0, 0x0, 0x20, [0x0]}}]}, 0x16c}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000800)=ANY=[@ANYBLOB="001f00"/256], 0x100) sendto$inet6(r1, &(0x7f0000000600)="1234567890", 0xa, 0x0, &(0x7f0000000700)={0xa, 0x1234, 0x0, @loopback}, 0x1c) 26.966330374s ago: executing program 4 (id=1332): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) r2 = socket$xdp(0x2c, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r3, 0x0, r2}, 0x10) 26.781771971s ago: executing program 4 (id=1337): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000240), 0x1, 0x5b7, &(0x7f0000001380)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000240)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xa0) getdents64(r0, &(0x7f0000001280)=""/4089, 0xff9) getdents64(r0, 0x0, 0x0) 26.198969543s ago: executing program 4 (id=1344): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x50, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xfff2, 0xe}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x1c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x18, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0xfffffffffffffd77, 0x2, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 24.017228645s ago: executing program 4 (id=1365): unshare(0x28000600) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x3, 0x6, 0xfffa}, 0x3a, [0x20008000, 0x1, 0xf, 0x8, 0x7c, 0xfffffffe, 0xb5d, 0x7f, 0x20000006, 0x4a, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x3, 0x5, 0x0, 0x3, 0x400, 0x0, 0x1, 0x40, 0x1, 0x24, 0xd, 0x3fffffe, 0x0, 0x3, 0xe665, 0x204, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x7fc, 0x400003, 0xe, 0x4, 0x80008071, 0xffffb8f3, 0x7, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x9, 0x81, 0x4, 0x3ff, 0x8, 0x0, 0x7, 0xa, 0x8, 0x4, 0x0, 0xfffffffc], [0xc0, 0x9, 0x8000012f, 0x8004, 0x5, 0x8, 0x129432e7, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x7, 0xfffffffc, 0x6, 0x2, 0x1, 0x2, 0x2f, 0x1782000, 0x313, 0x77, 0xea4, 0x5fa, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x2, 0xff, 0x3d, 0x1000005, 0x5bea93c3, 0xd, 0x4e0, 0x2, 0x4, 0xf, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x4, 0xfe000000, 0xffff, 0x0, 0x4, 0x10009, 0x3, 0x9, 0x9, 0x9, 0x20003, 0xffffffff, 0x100bc45, 0x48c93690, 0x80, 0x3], [0x7, 0xc08, 0x4, 0x5, 0xfffffffd, 0x40, 0x31d, 0x9, 0x5, 0x7fff, 0x9, 0x10001, 0xb, 0x4, 0x5, 0x5, 0x3, 0x1ef, 0x0, 0x8, 0x86, 0x3, 0x1, 0x3e7, 0xb, 0x5, 0x0, 0x2, 0x3, 0x20000008, 0x1000, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfb1, 0x1000, 0xa2, 0x7, 0x2000a9, 0x5, 0x7, 0xac8, 0xbf, 0x1, 0x3, 0x7ff, 0x4, 0x5, 0x1, 0xa, 0x20, 0x2, 0x1c, 0x8867, 0x3, 0x2006, 0x80a2ed, 0x40000005, 0x25], [0x9, 0xbb33, 0x7, 0x8, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xcea, 0x6, 0x2, 0x57, 0x7, 0x3, 0x0, 0x10000, 0x4, 0x37f3, 0xffff, 0xa622, 0x1, 0x80000005, 0x1, 0x2, 0x150, 0x60a7, 0x6, 0x7f, 0xffffffff, 0x80000000, 0x5, 0x4, 0x4c8, 0x1, 0x8ae2, 0x10000, 0x3, 0x8d, 0x100, 0xfc, 0x40000047, 0xb2, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0x8a1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x8, 0x5, 0xb1e, 0x6, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 23.551883203s ago: executing program 38 (id=1365): unshare(0x28000600) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x3, 0x6, 0xfffa}, 0x3a, [0x20008000, 0x1, 0xf, 0x8, 0x7c, 0xfffffffe, 0xb5d, 0x7f, 0x20000006, 0x4a, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x3, 0x5, 0x0, 0x3, 0x400, 0x0, 0x1, 0x40, 0x1, 0x24, 0xd, 0x3fffffe, 0x0, 0x3, 0xe665, 0x204, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x7fc, 0x400003, 0xe, 0x4, 0x80008071, 0xffffb8f3, 0x7, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x9, 0x81, 0x4, 0x3ff, 0x8, 0x0, 0x7, 0xa, 0x8, 0x4, 0x0, 0xfffffffc], [0xc0, 0x9, 0x8000012f, 0x8004, 0x5, 0x8, 0x129432e7, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x7, 0xfffffffc, 0x6, 0x2, 0x1, 0x2, 0x2f, 0x1782000, 0x313, 0x77, 0xea4, 0x5fa, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x2, 0xff, 0x3d, 0x1000005, 0x5bea93c3, 0xd, 0x4e0, 0x2, 0x4, 0xf, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x4, 0xfe000000, 0xffff, 0x0, 0x4, 0x10009, 0x3, 0x9, 0x9, 0x9, 0x20003, 0xffffffff, 0x100bc45, 0x48c93690, 0x80, 0x3], [0x7, 0xc08, 0x4, 0x5, 0xfffffffd, 0x40, 0x31d, 0x9, 0x5, 0x7fff, 0x9, 0x10001, 0xb, 0x4, 0x5, 0x5, 0x3, 0x1ef, 0x0, 0x8, 0x86, 0x3, 0x1, 0x3e7, 0xb, 0x5, 0x0, 0x2, 0x3, 0x20000008, 0x1000, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfb1, 0x1000, 0xa2, 0x7, 0x2000a9, 0x5, 0x7, 0xac8, 0xbf, 0x1, 0x3, 0x7ff, 0x4, 0x5, 0x1, 0xa, 0x20, 0x2, 0x1c, 0x8867, 0x3, 0x2006, 0x80a2ed, 0x40000005, 0x25], [0x9, 0xbb33, 0x7, 0x8, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xcea, 0x6, 0x2, 0x57, 0x7, 0x3, 0x0, 0x10000, 0x4, 0x37f3, 0xffff, 0xa622, 0x1, 0x80000005, 0x1, 0x2, 0x150, 0x60a7, 0x6, 0x7f, 0xffffffff, 0x80000000, 0x5, 0x4, 0x4c8, 0x1, 0x8ae2, 0x10000, 0x3, 0x8d, 0x100, 0xfc, 0x40000047, 0xb2, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0x8a1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x8, 0x5, 0xb1e, 0x6, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 10.047824017s ago: executing program 3 (id=1470): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0xb4, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00'}) recvmmsg(r0, &(0x7f0000005340)=[{{&(0x7f0000000080)=@can, 0x0, &(0x7f00000042c0)=[{&(0x7f0000000140)=""/45}, {&(0x7f0000000180)=""/63}, {&(0x7f0000000480)=""/175}, {&(0x7f0000000540)=""/229}, {&(0x7f0000000c00)=""/4096}, {&(0x7f00000032c0)=""/4096}], 0x0, &(0x7f0000004340)=""/4096}, 0x8}], 0x4a, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 9.760999277s ago: executing program 3 (id=1474): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x2c, &(0x7f0000000040)=[@in={0x2, 0x4e26, @rand_addr=0x64010100}, @in6={0xa, 0x4e23, 0x3400000, @local, 0x8}]}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 9.511037444s ago: executing program 3 (id=1477): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82, 0x0, 0x0}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x5c, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 9.103409207s ago: executing program 3 (id=1481): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000003240)={[{@utf8no}, {@fat=@errors_remount}, {@numtail}, {@numtail}, {@rodir}, {@rodir}, {@shortname_lower}, {@fat=@check_strict}, {@uni_xlate}, {@uni_xlate}, {@rodir}, {@uni_xlateno}, {@numtail}]}, 0x0, 0x2ad, &(0x7f0000000580)="$eJzs3UFrE1sYxvGnSdukKW2yKBfuhYsH3ehmaOMnCNKCGFBqI+pCmNqJhoxJyMRIRGx3bv0cxaUrBfULdOPOvbgpguCmC3GkyUybpgHTapza/H9Q5u05886c4cyEdwYy2b75/EG56FlFu6FY0igmbWhHyuxGgbFgGWvHk+q2oQvTXz/8f/3W7Su5fH5x2Zil3MrFrDFm9sybR09enH3XmL7xcvZ1QluZO9tfsh+3/tn6d/v7Srj1qmSb1Wq1Ya+6jlkreWXLmGuuY3uOKVU8p94wXf1Ft1qrtYxdWZtJ1eqO5xm70jJlp2UaVdOot4x9zy5VjGVZZialURM/ckZhc3nZzg1lMIjCVL/Gej1nx/t2Fjb/xKAAAMDJElX9f7/kmZJnKtUD9f3h+j+mI9T/0kjX/8dVi3oAGKrd+j8VXL8HUf8DAAAAAAAAAAAAAAAAAAAAAPA32PH9tO/76XAZ/iUkJSWF/0c9TgwH8z/aur64l5TcZ81Cs9BZdvpzRZXkytH8hPStfT4EOvHS5fzivGnL6K27HuSvNwtxJcL8UKZ//kIn33Tnr2tCqe79Z5XWXP/8bJ/8ZmFS58/5iWDPjiyl9f6uqnK11j6v9/OfLhhz6Wq+J3+qvR4AAAAAAKeBZfYcun9v91smfG1IT3+ncf/5gNI/eT7Qc389rv/GoztuAAAAAABGiTepsu26Tt1rPT7tQfj7B79lg1LUh5McdOVxSUHLq5MyF4MEMUm9XROHWvoH8V+b5c/SwetiLvLpPnbgx/fO1U8PO1fAIOlRfioBAAAAGIaw6B+LeiAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIywQd8iFq5/nJeQde0uHs1RAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACfDjwAAAP//5JwTUw==") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x11480, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020) 8.693233573s ago: executing program 3 (id=1484): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010001ffffcfdfffffdffffff00000000", @ANYRES32=0x0, @ANYBLOB="0002010000000000240012800b00010065727370616e000014000280050016000000000008000700ac1414bb08000a00", @ANYRES32=r3], 0x4c}, 0x1, 0x0, 0x0, 0x8044}, 0x0) 8.039930995s ago: executing program 8 (id=1491): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r0, 0x400, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) 7.755358272s ago: executing program 3 (id=1494): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x3) r1 = accept4(r0, 0x0, 0x0, 0x800) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000000)={[{@errors_continue}]}, 0x1, 0x4be, &(0x7f0000000a00)="$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") sendto$inet_nvme_of_msg(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 7.253327259s ago: executing program 39 (id=1494): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x3) r1 = accept4(r0, 0x0, 0x0, 0x800) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000000)={[{@errors_continue}]}, 0x1, 0x4be, &(0x7f0000000a00)="$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") sendto$inet_nvme_of_msg(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 7.2081967s ago: executing program 8 (id=1496): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a80)={'syz0\x00', {0x0, 0x0, 0x0, 0x1000}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0xdfe8, 0x0, 0x8, 0x0, 0x3, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xe43, 0x400000, 0xfffffffd, 0x0, 0x1, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x4], [0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x400000, 0x0, 0x4, 0x200, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffff], [0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x956]}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_CREATE(r0, 0x5501) close(0x3) 6.543970828s ago: executing program 8 (id=1500): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000880)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6tnl0\x00', 0x0, 0x4, 0x3, 0x7, 0x5, 0x64, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x20, 0x3fb, 0xffe}}) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000300)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x8000011000000009, 0x3a, 'B\xd4GGI\x82\\4\xbb\xbb\xbb\xb3\xd4)\xed\x8f\xaa\xf4\xd2{\xc5\t\xa9\xed\xf8e\xaa\xb9\xf5\r\xe3T\x0e\x8a\xd6\x9a_?G\x05\x00\x00\x00\x00\x00\x00\x00\x1e\x9a\xce\xac&x3\x15\x14y\xbf\xc6)\xa8\b/\x01\x00\x00\f\x8e1\xc4\xa1\xb2]I\xa5\x13}9\x1b0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031682d3fc142e00124788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 6.251960732s ago: executing program 8 (id=1504): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x821040, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 5.880046077s ago: executing program 8 (id=1507): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x401, 0x7ffffffe, 0x25dfdbfe, {0x0, 0x0, 0x600, r3, 0x60, 0x2000}, [@IFLA_MASTER={0x8, 0x3, r1}]}, 0x28}, 0x1, 0xd, 0x0, 0x480c5}, 0x10) 5.12345032s ago: executing program 8 (id=1510): r0 = syz_clone(0x82020000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000100)='coredump_filter\x00') syz_usb_disconnect(0xffffffffffffffff) pread64(r2, &(0x7f0000000140)=""/15, 0xf, 0x4) 4.784454502s ago: executing program 40 (id=1510): r0 = syz_clone(0x82020000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000100)='coredump_filter\x00') syz_usb_disconnect(0xffffffffffffffff) pread64(r2, &(0x7f0000000140)=""/15, 0xf, 0x4) 2.651708075s ago: executing program 9 (id=1527): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r1, r3, 0x16, 0x0, @void}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, 0x0, 0x0) 2.364647s ago: executing program 9 (id=1529): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x1, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x1}, @TCA_FLOWER_KEY_ENC_IPV4_DST={0x7, 0x1d, @multicast2}, @TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x60d2}]}}]}, 0x4c}}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.130025244s ago: executing program 2 (id=1531): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x210000, &(0x7f00000006c0)={[{@nodelalloc}, {@dioread_lock}, {@jqfmt_vfsv1}, {@abort}, {@max_batch_time={'max_batch_time', 0x3d, 0xed}}, {@lazytime}, {@bsdgroups}, {@stripe={'stripe', 0x3d, 0x7}}, {@test_dummy_encryption_v1}, {@stripe={'stripe', 0x3d, 0x4}}]}, 0x1, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 1.82327125s ago: executing program 2 (id=1532): rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x12, 0x4, @tid=r0}, &(0x7f0000000380)) timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0) r1 = gettid() mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) tkill(r1, 0x16) 1.127229905s ago: executing program 7 (id=1535): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000240)=0x7, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @remote}, 0x10) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f00000003c0)={'veth1_virt_wifi\x00', {0x2, 0x4e1f, @local}}) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000006c0)={{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x9f, 0x4e23, 0x1000, 0xa, 0xa0, 0x20, 0x33}, {0xf4, 0x6, 0xe042, 0x2, 0x4, 0x9, 0x8, 0x5}, {0x3b, 0x3, 0x1, 0x821}, 0xfffffffd, 0x6e6bc0, 0x3, 0x1, 0x1, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x40}, 0x4d2, 0x3c}, 0x2, @in=@private=0xa010102, 0x3504, 0x4, 0x1, 0x3, 0xe85, 0x81, 0xa}}, 0xe8) 1.01650924s ago: executing program 9 (id=1536): writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1a04"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 983.49685ms ago: executing program 2 (id=1537): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48800}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd27, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0xffff}, {}, {0x9, 0x4}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x6}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 903.051489ms ago: executing program 7 (id=1538): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x16, 0x0, @void}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) 753.506003ms ago: executing program 9 (id=1539): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x304) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 722.759148ms ago: executing program 7 (id=1540): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x3, 0x4) sendmmsg$inet6(r0, &(0x7f0000000580)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x6, @local, 0x7}, 0x1c, 0x0}}], 0x1, 0x24000000) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000180)=0x4, 0x4) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/130, 0x82}, 0xdb30}], 0x1, 0x40002042, 0x0) 609.042554ms ago: executing program 2 (id=1541): socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) close(r0) socket(0x2b, 0x1, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) 582.955323ms ago: executing program 7 (id=1542): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) chdir(&(0x7f0000000380)='./file0\x00') chdir(&(0x7f0000000280)='./file1\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0x800, 0x0) 381.110552ms ago: executing program 2 (id=1543): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file1\x00', 0x20002, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) unshare(0x6020400) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x66) fsync(r0) 371.344814ms ago: executing program 7 (id=1544): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x3a, 0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) 232.955152ms ago: executing program 9 (id=1545): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, '\b'}]}], {0x14, 0x11, 0x1, 0x4}}, 0xa4}, 0x1, 0x0, 0x0, 0x2004c899}, 0x0) recvmmsg(r0, &(0x7f000000c2c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 128.543186ms ago: executing program 7 (id=1546): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x16, 0x0, @void}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f00000021c0)=ANY=[@ANYBLOB="6e6174000000000000000000000000000000000000000000000000000000000005"], 0x78) 118.347636ms ago: executing program 2 (id=1547): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000150900010073797a30000000000900020073797a320000000014000000110001"], 0x94}, 0x1, 0x0, 0x0, 0x40801}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 0s ago: executing program 9 (id=1548): sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000000c0)="170000000200010400ffbe8c5ee17688a20032e80101000a000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000eaffff00000000000062068f5ee50ce5af9b1c5683ffffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded2231454668492f9c681a6a9fc", 0xb8) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x2, 0x29, 0x7, 0x66, 0x81, 0x2, 0x29, 0x1000, @empty, @multicast1}}}}}}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x84, 0x0, 0x0) kernel console output (not intermixed with test programs): 6199][ T39] veth1_vlan: left promiscuous mode [ 51.107989][ T39] veth0_vlan: left promiscuous mode [ 51.229195][ T39] team0 (unregistering): Port device team_slave_1 removed [ 51.234449][ T39] team0 (unregistering): Port device team_slave_0 removed [ 51.290655][ T4399] 8021q: adding VLAN 0 to HW filter on device eth13 [ 51.294274][ T5802] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.294367][ T5802] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.294458][ T5802] bridge_slave_0: entered allmulticast mode [ 51.295102][ T5802] bridge_slave_0: entered promiscuous mode [ 51.298391][ T5802] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.298528][ T5802] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.298605][ T5802] bridge_slave_1: entered allmulticast mode [ 51.299035][ T5802] bridge_slave_1: entered promiscuous mode [ 51.324009][ T5802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.335401][ T5802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.359297][ T5802] team0: Port device team_slave_0 added [ 51.364276][ T5802] team0: Port device team_slave_1 added [ 51.377840][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.379352][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 51.387532][ T5802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.390358][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.392092][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 51.397286][ T5802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.410381][ T5802] hsr_slave_0: entered promiscuous mode [ 51.411984][ T5802] hsr_slave_1: entered promiscuous mode [ 51.413685][ T5802] debugfs: 'hsr0' already exists in 'hsr' [ 51.414795][ T5802] Cannot create hsr debugfs directory [ 51.595271][ T4399] 8021q: adding VLAN 0 to HW filter on device eth14 [ 51.596548][ T5802] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 51.600758][ T5802] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 51.603022][ T4677] Bluetooth: hci1: command tx timeout [ 51.611662][ T5802] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 51.614521][ T5802] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 51.620583][ T5802] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 51.623222][ T5802] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 51.625656][ T5802] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 51.628061][ T5802] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 51.664420][ T5802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.671168][ T5802] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.675457][ T3800] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.675504][ T3800] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.680872][ T3800] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.680925][ T3800] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.706016][ T5802] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 51.708112][ T5802] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 51.885437][ T5983] loop4: detected capacity change from 0 to 256 [ 51.887425][ T4399] 8021q: adding VLAN 0 to HW filter on device eth15 [ 51.914505][ T5802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.051228][ T5802] veth0_vlan: entered promiscuous mode [ 52.055382][ T5802] veth1_vlan: entered promiscuous mode [ 52.057814][ T6010] loop5: detected capacity change from 0 to 256 [ 52.085411][ T5802] veth0_macvtap: entered promiscuous mode [ 52.087867][ T5802] veth1_macvtap: entered promiscuous mode [ 52.095845][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.100271][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.118204][ T3800] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.118258][ T3800] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.118280][ T3800] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.118295][ T3800] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.169781][ T6014] loop7: detected capacity change from 0 to 4096 [ 52.171418][ T4399] 8021q: adding VLAN 0 to HW filter on device eth16 [ 52.178375][ T6014] EXT4-fs: inline encryption not supported [ 52.181794][ T6014] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 52.181824][ T6014] EXT4-fs (loop7): Test dummy encryption mode enabled [ 52.188620][ T6014] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 52.188677][ T6014] System zones: 0-5 [ 52.192927][ T6014] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.255593][ T342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.255618][ T342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.258556][ T6022] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.258574][ T6022] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.286789][ T6048] netlink: 'syz.5.313': attribute type 1 has an invalid length. [ 52.315107][ T4471] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 52.316953][ T4471] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 52.332826][ T4677] Bluetooth: hci3: command tx timeout [ 52.373670][ T6056] loop9: detected capacity change from 0 to 128 [ 52.376607][ T6050] loop4: detected capacity change from 0 to 4096 [ 52.386133][ T6050] EXT4-fs (loop4): Test dummy encryption mode enabled [ 52.388048][ T6056] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 52.388120][ T6056] System zones: 1-3, 19-19, 35-36 [ 52.388687][ T6056] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 52.399091][ T6050] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.414702][ T6056] EXT4-fs warning (device loop9): verify_group_input:156: Last group not full [ 52.416518][ T5290] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.443025][ T5802] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 52.458400][ T6059] fido_id[6059]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 52.485013][ T4669] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.521580][ T6070] loop9: detected capacity change from 0 to 512 [ 52.542072][ T6070] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.606010][ T6070] EXT4-fs (loop9): shut down requested (0) [ 52.625853][ T4399] 8021q: adding VLAN 0 to HW filter on device eth18 [ 52.649088][ T6085] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.728081][ T5802] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.730751][ T6026] __quota_error: 590 callbacks suppressed [ 52.730774][ T6026] Quota error (device loop9): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 52.740424][ T4669] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.802519][ T4677] Bluetooth: hci4: command tx timeout [ 52.897382][ T6105] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.923856][ T6105] Injecting memory failure for pfn 0x13817c at process virtual address 0x20000000 [ 52.934888][ T6105] Memory failure: 0x13817c: Sending SIGBUS to syz.9.325:6105 due to hardware memory corruption [ 52.937142][ T6105] Memory failure: 0x13817c: recovery action for dirty LRU page: Recovered [ 52.955831][ T6114] netlink: 'syz.8.327': attribute type 12 has an invalid length. [ 52.955864][ T6114] netlink: 'syz.8.327': attribute type 29 has an invalid length. [ 52.955891][ T6114] netlink: 148 bytes leftover after parsing attributes in process `syz.8.327'. [ 52.955910][ T6114] netlink: 'syz.8.327': attribute type 1 has an invalid length. [ 52.955924][ T6114] netlink: 'syz.8.327': attribute type 2 has an invalid length. [ 52.955937][ T6114] netlink: 11 bytes leftover after parsing attributes in process `syz.8.327'. [ 52.979872][ T5802] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.024355][ T6119] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 53.025397][ T6119] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 53.025429][ T6119] System zones: 1-12 [ 53.027374][ T6119] EXT4-fs (loop4): 1 truncate cleaned up [ 53.027809][ T6119] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.067723][ T4399] 8021q: adding VLAN 0 to HW filter on device eth17 [ 53.277006][ T4669] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.349628][ T6155] printk: legacy console [ttyGS0] disabled [ 53.425738][ T6166] input: syz1 as /devices/virtual/input/input10 [ 53.523292][ T4399] 8021q: adding VLAN 0 to HW filter on device eth19 [ 53.682577][ T4677] Bluetooth: hci1: command tx timeout [ 53.829016][ T6206] netlink: 'syz.7.356': attribute type 4 has an invalid length. [ 53.835743][ T6206] netlink: 'syz.7.356': attribute type 4 has an invalid length. [ 54.125222][ T6225] set_capacity_and_notify: 4 callbacks suppressed [ 54.126689][ T6225] loop7: detected capacity change from 0 to 512 [ 54.134914][ T6225] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 54.139460][ T6225] EXT4-fs (loop7): 1 truncate cleaned up [ 54.140059][ T6225] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.181224][ T5290] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.402462][ T4677] Bluetooth: hci3: command tx timeout [ 54.558153][ T6259] loop9: detected capacity change from 0 to 1024 [ 54.570429][ T6259] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 54.595070][ T6259] EXT4-fs error (device loop9): ext4_map_blocks:833: inode #15: block 3: comm syz.9.371: lblock 3 mapped to illegal pblock 3 (length 3) [ 54.600139][ T6259] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 54.600185][ T6259] EXT4-fs (loop9): This should not happen!! Data will be lost [ 54.600185][ T6259] [ 54.609158][ T6259] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.371: bg 0: block 112: padding at end of block bitmap is not set [ 54.611467][ T6259] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 28 [ 54.611483][ T6259] EXT4-fs (loop9): This should not happen!! Data will be lost [ 54.611483][ T6259] [ 54.611491][ T6259] EXT4-fs (loop9): Total free blocks count 0 [ 54.611499][ T6259] EXT4-fs (loop9): Free/Dirty block details [ 54.611779][ T6259] EXT4-fs (loop9): free_blocks=0 [ 54.611801][ T6259] EXT4-fs (loop9): dirty_blocks=64 [ 54.611808][ T6259] EXT4-fs (loop9): Block reservation details [ 54.636752][ T6045] EXT4-fs error (device loop9): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:27: lblock 8 mapped to illegal pblock 8 (length 8) [ 54.638454][ T5802] EXT4-fs warning (device loop9): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 54.647930][ T6267] loop4: detected capacity change from 0 to 512 [ 54.667906][ T6267] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.709768][ T6277] netlink: 'syz.9.377': attribute type 3 has an invalid length. [ 54.709798][ T6277] netlink: 8 bytes leftover after parsing attributes in process `syz.9.377'. [ 54.734481][ T4669] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.814712][ T6287] loop5: detected capacity change from 0 to 1024 [ 54.833401][ T6287] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 54.847797][ T6287] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.381: bg 0: block 112: padding at end of block bitmap is not set [ 54.850328][ T6287] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 54.850353][ T6287] EXT4-fs (loop5): This should not happen!! Data will be lost [ 54.850353][ T6287] [ 54.850364][ T6287] EXT4-fs (loop5): Total free blocks count 0 [ 54.850374][ T6287] EXT4-fs (loop5): Free/Dirty block details [ 54.850384][ T6287] EXT4-fs (loop5): free_blocks=0 [ 54.850403][ T6287] EXT4-fs (loop5): dirty_blocks=64 [ 54.850411][ T6287] EXT4-fs (loop5): Block reservation details [ 54.850417][ T6287] EXT4-fs (loop5): i_reserved_data_blocks=4 [ 54.857618][ T6285] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: comm syz.5.381: lblock 0 mapped to illegal pblock 0 (length 1) [ 54.866570][ T6285] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: comm syz.5.381: lblock 0 mapped to illegal pblock 0 (length 1) [ 54.867480][ T6285] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: comm syz.5.381: lblock 0 mapped to illegal pblock 0 (length 1) [ 54.867755][ T6285] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: comm syz.5.381: lblock 0 mapped to illegal pblock 0 (length 1) [ 54.867964][ T6285] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: comm syz.5.381: lblock 0 mapped to illegal pblock 0 (length 1) [ 54.868140][ T6285] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: comm syz.5.381: lblock 0 mapped to illegal pblock 0 (length 1) [ 54.868402][ T6285] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: comm syz.5.381: lblock 0 mapped to illegal pblock 0 (length 1) [ 54.868581][ T6285] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: comm syz.5.381: lblock 0 mapped to illegal pblock 0 (length 1) [ 54.868933][ T6287] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: comm syz.5.381: lblock 0 mapped to illegal pblock 0 (length 1) [ 54.888184][ T6293] loop4: detected capacity change from 0 to 128 [ 54.892967][ T6279] mmap: syz.9.378 (6279) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 54.896813][ T5036] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 54.897796][ T5036] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 54.898194][ T6293] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 54.944720][ T4669] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 55.024243][ T6301] loop4: detected capacity change from 0 to 2048 [ 55.097630][ T5115] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 55.099715][ T5115] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 55.176724][ T6317] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(0) [ 55.274579][ T6326] netlink: 8 bytes leftover after parsing attributes in process `syz.8.395'. [ 55.378653][ T6340] sock: sock_set_timeout: `syz.9.400' (pid 6340) tries to set negative timeout [ 55.461772][ T6348] netlink: 8 bytes leftover after parsing attributes in process `syz.8.404'. [ 55.732073][ T6369] vxcan0: tx drop: invalid da for name 0x0000008000000000 [ 55.756993][ T6378] loop9: detected capacity change from 0 to 512 [ 55.758489][ T6378] EXT4-fs: Ignoring removed bh option [ 55.764848][ T4677] Bluetooth: hci1: command tx timeout [ 55.768549][ T6378] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 55.789185][ T6378] EXT4-fs (loop9): 1 truncate cleaned up [ 55.854734][ T6385] loop9: detected capacity change from 0 to 512 [ 55.864844][ T6385] EXT4-fs error (device loop9): ext4_orphan_get:1399: inode #15: comm syz.9.418: inode has both inline data and extents flags [ 55.867671][ T6385] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 55.867875][ T6385] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.418: couldn't read orphan inode 15 (err -117) [ 55.872256][ T6385] loop9: lost filesystem error report for type 5 error -117 [ 56.001919][ T6399] netlink: 32 bytes leftover after parsing attributes in process `syz.9.423'. [ 56.113724][ T6413] loop8: detected capacity change from 0 to 1024 [ 56.114000][ T6413] EXT4-fs: Invalid want_extra_isize 3 [ 56.425804][ T6423] loop8: detected capacity change from 0 to 256 [ 56.429859][ T6423] FAT-fs (loop8): data area starts beyond volume (350 > 320) [ 56.429900][ T6423] FAT-fs (loop8): Can't find a valid FAT filesystem [ 56.482520][ T4677] Bluetooth: hci3: command tx timeout [ 56.488288][ T6431] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 56.489920][ T6431] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 56.489939][ T6431] EXT4-fs (loop9): This should not happen!! Data will be lost [ 56.489939][ T6431] [ 56.489949][ T6431] EXT4-fs (loop9): Total free blocks count 0 [ 56.489959][ T6431] EXT4-fs (loop9): Free/Dirty block details [ 56.489969][ T6431] EXT4-fs (loop9): free_blocks=65280 [ 56.489978][ T6431] EXT4-fs (loop9): dirty_blocks=33 [ 56.489985][ T6431] EXT4-fs (loop9): Block reservation details [ 56.489991][ T6431] EXT4-fs (loop9): i_reserved_data_blocks=33 [ 56.496049][ T6431] Direct I/O collision with buffered writes! File: /file1 Comm: syz.9.439 [ 56.504002][ T6024] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 3 with error 28 [ 56.504026][ T6024] EXT4-fs (loop9): This should not happen!! Data will be lost [ 56.504026][ T6024] [ 56.507106][ T5802] EXT4-fs warning (device loop9): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 56.561527][ T6437] SQUASHFS error: Failed to read block 0x6e6: -5 [ 56.561557][ T6437] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 57.014949][ T4768] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 57.019701][ T4768] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 57.079405][ T6476] use of bytesused == 0 is deprecated and will be removed in the future, [ 57.079435][ T6476] use the actual size instead. [ 57.501773][ T6485] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 57.535299][ T6487] EXT4-fs: inline encryption not supported [ 57.538492][ T6487] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 57.540475][ T6487] EXT4-fs (loop4): Test dummy encryption mode enabled [ 57.545942][ T6487] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 57.547834][ T6487] System zones: 0-5 [ 57.802356][ T6519] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 57.815783][ T6519] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.473: bad orphan inode 131072 [ 57.818044][ T6519] loop4: lost filesystem error report for type 5 error -117 [ 57.916511][ T6515] psci: CPU1 killed (polled 0 ms) [ 57.956988][ T6528] input: syz1 as /devices/virtual/input/input12 [ 58.166612][ T4768] atkbd serio1: keyboard reset failed on [ 58.205190][ T6045] Bluetooth: (null): Invalid header checksum [ 58.352562][ T6550] process 'syz.8.483' launched './file1' with NULL argv: empty string added [ 58.492487][ T4677] Bluetooth: hci3: command tx timeout [ 58.660394][ T6565] EXT4-fs: Ignoring removed bh option [ 58.685620][ T6565] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 58.685656][ T6565] EXT4-fs (loop8): Test dummy encryption mode enabled [ 58.887922][ T6584] input: syz0 as /devices/virtual/input/input14 [ 59.039986][ T4768] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 59.044381][ T4768] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 59.123780][ T6599] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 59.123827][ T6599] System zones: 1-3, 19-19, 35-36 [ 59.158137][ T6599] EXT4-fs warning (device loop9): verify_group_input:137: Cannot add at group 1986330625 (only 1 groups) [ 59.345867][ T6609] set_capacity_and_notify: 8 callbacks suppressed [ 59.353738][ T6609] loop4: detected capacity change from 0 to 8192 [ 59.381447][ T6609] loop4: p1 p2 p3 p4[EZD] [ 59.381476][ T6609] loop4: partition table partially beyond EOD, truncated [ 59.381596][ T6609] loop4: p1 start 16384 is beyond EOD, truncated [ 59.381615][ T6609] loop4: p2 size 150994944 extends beyond EOD, truncated [ 59.405906][ T6609] loop4: p3 start 67108864 is beyond EOD, truncated [ 59.409288][ T6609] loop4: p4 size 33555584 extends beyond EOD, truncated [ 59.837794][ T6641] loop5: detected capacity change from 0 to 512 [ 59.900507][ T6641] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 59.913846][ T6641] EXT4-fs (loop5): 1 truncate cleaned up [ 59.938731][ T6641] EXT4-fs (loop5): shut down requested (2) [ 60.601391][ T6661] netlink: 'syz.7.518': attribute type 1 has an invalid length. [ 60.625323][ T4660] udevd[4660]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 60.643716][ T6661] 8021q: adding VLAN 0 to HW filter on device bond1 [ 60.682938][ T4878] udevd[4878]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 60.992182][ T6680] loop7: detected capacity change from 0 to 2048 [ 61.098117][ T6680] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.524: bg 0: block 345: padding at end of block bitmap is not set [ 61.121615][ T6680] EXT4-fs (loop7): Remounting filesystem read-only [ 61.266966][ T6691] syzkaller1: entered promiscuous mode [ 61.266998][ T6691] syzkaller1: entered allmulticast mode [ 61.637325][ T6717] netlink: 'syz.7.537': attribute type 25 has an invalid length. [ 61.639281][ T6717] netlink: 4 bytes leftover after parsing attributes in process `syz.7.537'. [ 61.678036][ T6717] netlink: 'syz.7.537': attribute type 25 has an invalid length. [ 61.678063][ T6717] netlink: 4 bytes leftover after parsing attributes in process `syz.7.537'. [ 61.684393][ T6025] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.684545][ T6025] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.684560][ T6025] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.684574][ T6025] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.811412][ T4768] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 61.815611][ T4768] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 61.942157][ T6731] fido_id[6731]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 62.460461][ T6757] loop4: detected capacity change from 0 to 4096 [ 62.833949][ T6757] EXT4-fs (loop4): Online resizing not supported with bigalloc [ 63.169425][ T6818] loop8: detected capacity change from 0 to 4096 [ 63.188339][ T6818] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 63.188368][ T6818] EXT4-fs (loop8): Test dummy encryption mode enabled [ 63.193992][ T6818] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 63.194044][ T6818] System zones: 0-5 [ 63.299171][ T6820] loop5: detected capacity change from 0 to 8192 [ 63.645512][ T6840] loop8: detected capacity change from 0 to 512 [ 63.707592][ T6840] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 63.714987][ T6840] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.573: bg 0: block 104: invalid block bitmap [ 63.715022][ T6840] loop8: lost filesystem error report for type 5 error -117 [ 63.718294][ T6840] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 63.718320][ T6840] loop8: lost filesystem error report for type 5 error -117 [ 63.721774][ T6840] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.573: invalid indirect mapped block 1 (level 1) [ 63.721804][ T6840] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 63.723329][ C0] EXT4-fs (loop8): error count since last fsck: 3 [ 63.723343][ C0] EXT4-fs (loop8): initial error at time 63: ext4_validate_block_bitmap:432 [ 63.723355][ C0] EXT4-fs (loop8): last error at time 63: ext4_free_branches:1023: inode 11 [ 63.732495][ T6840] EXT4-fs (loop8): 1 truncate cleaned up [ 63.769619][ T6840] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 63.792108][ T4684] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 63.795236][ T4684] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 63.799176][ T4684] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 63.801649][ T4684] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 63.810792][ T4684] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 63.820006][ T6850] netlink: 4 bytes leftover after parsing attributes in process `syz.5.584'. [ 64.363904][ T6850] bond0: (slave bond_slave_1): Releasing backup interface [ 64.495574][ T868] cfg80211: failed to load regulatory.db [ 64.497570][ T1597] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.497622][ T1597] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.602175][ T6860] loop8: detected capacity change from 0 to 4096 [ 64.705456][ T6860] EXT4-fs (loop8): Test dummy encryption mode enabled [ 64.740981][ T6866] loop5: detected capacity change from 0 to 4096 [ 64.785566][ T6866] EXT4-fs: inline encryption not supported [ 64.809285][ T6866] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 64.809318][ T6866] EXT4-fs (loop5): Test dummy encryption mode enabled [ 64.829312][ T6866] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 64.829363][ T6866] System zones: 0-5 [ 65.031681][ T6866] overlayfs: refusing to follow metacopy origin for (/file1) [ 65.172752][ T6881] misc userio: Can't change port extra on an already running userio instance [ 65.234846][ T6884] input: syz1 as /devices/virtual/input/input16 [ 65.506514][ T6889] loop8: detected capacity change from 0 to 2048 [ 65.595301][ T6901] loop9: detected capacity change from 0 to 512 [ 65.646810][ T6889] overlayfs: failed to verify upper (/file0, ino=12, err=-28) [ 65.667730][ T6846] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.667776][ T6846] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.667860][ T6846] bridge_slave_0: entered allmulticast mode [ 65.668334][ T6846] bridge_slave_0: entered promiscuous mode [ 65.669009][ T6846] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.669044][ T6846] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.669108][ T6846] bridge_slave_1: entered allmulticast mode [ 65.669538][ T6846] bridge_slave_1: entered promiscuous mode [ 65.694093][ T6889] overlayfs: failed to verify index dir 'upper' xattr [ 65.694127][ T6889] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 65.706258][ T6901] Injecting memory failure for pfn 0x159c00 at process virtual address 0x20000000 [ 65.708864][ T6901] Memory failure: 0x159c00: Sending SIGBUS to syz.9.583:6901 due to hardware memory corruption [ 65.760095][ T6901] Memory failure: 0x159c00: recovery action for unsplit thp: Failed [ 65.781866][ T6901] Injecting memory failure for pfn 0x159c00 at process virtual address 0x20000000 [ 65.782028][ T6901] Memory failure: 0x159c00: Sending SIGBUS to syz.9.583:6901 due to hardware memory corruption [ 65.782129][ T6901] Memory failure: 0x159c00: recovery action for already poisoned page: Failed [ 65.795932][ T6846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.803582][ T6846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.818573][ T6907] loop7: detected capacity change from 0 to 512 [ 65.843584][ T4677] Bluetooth: hci0: command tx timeout [ 65.924576][ T6846] team0: Port device team_slave_0 added [ 65.953483][ T6846] team0: Port device team_slave_1 added [ 65.959326][ T6846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.959345][ T6846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.959363][ T6846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.959863][ T6846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.959876][ T6846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.959896][ T6846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.962520][ T6907] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 66.059808][ T6846] hsr_slave_0: entered promiscuous mode [ 66.142965][ T6846] hsr_slave_1: entered promiscuous mode [ 66.143195][ T6846] debugfs: 'hsr0' already exists in 'hsr' [ 66.143212][ T6846] Cannot create hsr debugfs directory [ 66.169902][ T6922] loop9: detected capacity change from 0 to 1024 [ 66.187735][ T6907] EXT4-fs (loop7): 1 truncate cleaned up [ 66.315921][ T6907] EXT4-fs error (device loop7): ext4_find_dest_de:2050: inode #12: block 7: comm syz.7.585: bad entry in directory: directory entry overrun - offset=16, inode=2147483648, rec_len=1024, size=56 fake=0 [ 66.420257][ T6907] EXT4-fs (loop7): Remounting filesystem read-only [ 66.577343][ T6939] loop5: detected capacity change from 0 to 1024 [ 66.590924][ T6939] EXT4-fs: Ignoring removed bh option [ 67.246110][ T6846] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.492336][ T6846] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.632263][ T6846] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.728567][ T6991] loop7: detected capacity change from 0 to 1024 [ 67.743704][ T6991] EXT4-fs: Ignoring removed bh option [ 67.748030][ T6987] loop5: detected capacity change from 0 to 4096 [ 67.758551][ T6987] EXT4-fs (loop5): Test dummy encryption mode enabled [ 67.765946][ T6991] EXT4-fs (loop7): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 67.790698][ T6846] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.922493][ T4677] Bluetooth: hci0: command tx timeout [ 67.927166][ T6991] EXT4-fs error (device loop7): ext4_find_dest_de:2050: inode #12: block 7: comm syz.7.606: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 67.959552][ T6991] EXT4-fs (loop7): Remounting filesystem read-only [ 68.594419][ T7031] loop7: detected capacity change from 0 to 4096 [ 68.594688][ T7031] EXT4-fs: inline encryption not supported [ 68.601143][ T7031] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 68.601167][ T7031] EXT4-fs (loop7): Test dummy encryption mode enabled [ 68.619701][ T7031] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 68.619752][ T7031] System zones: 0-5 [ 68.772880][ T7043] EXT4-fs: Ignoring removed i_version option [ 68.945989][ T5036] EXT4-fs unmount: 49 callbacks suppressed [ 68.947342][ T5036] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.050054][ T7060] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 69.055351][ T7060] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 69.060716][ T7059] overlayfs: refusing to follow metacopy origin for (/file1) [ 69.212081][ T7067] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 69.637206][ T7094] set_capacity_and_notify: 1 callbacks suppressed [ 69.648365][ T7094] loop8: detected capacity change from 0 to 512 [ 69.648872][ T7094] EXT4-fs: Ignoring removed mblk_io_submit option [ 69.687187][ T7094] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.898985][ T5520] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.987683][ T7111] loop7: detected capacity change from 0 to 512 [ 69.995786][ T7111] EXT4-fs: inline encryption not supported [ 70.002723][ T4677] Bluetooth: hci0: command tx timeout [ 70.041502][ T7111] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.140087][ T6967] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 70.147405][ T6846] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.289726][ T6846] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 70.290081][ T6846] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.311647][ T6846] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 70.320796][ T6846] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.331902][ T5290] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.352672][ T6846] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 70.352978][ T6846] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.376497][ T6846] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 70.599626][ T6846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.634672][ T7153] loop9: detected capacity change from 0 to 128 [ 70.657140][ T7153] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 70.678570][ T6846] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.706782][ T6037] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.706823][ T6037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.707374][ T6037] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.707402][ T6037] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.729876][ T7153] syz.9.648 (pid 7153) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 70.771159][ T6846] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.774932][ T7158] loop8: detected capacity change from 0 to 1024 [ 70.792260][ T7158] EXT4-fs: Ignoring removed bh option [ 70.794611][ T7158] EXT4-fs (loop8): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 70.802345][ T6846] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.821625][ T7158] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.891119][ T5802] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 70.979492][ T5520] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.024351][ T7171] netlink: 'syz.7.652': attribute type 10 has an invalid length. [ 71.024381][ T7171] netlink: 20 bytes leftover after parsing attributes in process `syz.7.652'. [ 71.399128][ T7192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.401262][ T7192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.611991][ T6846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.630771][ T7209] Bluetooth: MGMT ver 1.23 [ 71.898170][ T7227] loop7: detected capacity change from 0 to 128 [ 71.918380][ T7227] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 71.918438][ T7227] System zones: 1-3, 19-19, 35-36 [ 71.928683][ T7227] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 72.063053][ T5290] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 72.083250][ T4677] Bluetooth: hci0: command tx timeout [ 72.099995][ T6846] veth0_vlan: entered promiscuous mode [ 72.133086][ T6846] veth1_vlan: entered promiscuous mode [ 72.138220][ T6846] veth0_macvtap: entered promiscuous mode [ 72.197584][ T6846] veth1_macvtap: entered promiscuous mode [ 72.207189][ T6846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.241113][ T6846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.400492][ T6045] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.402111][ T6045] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.459734][ T6045] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.460851][ T6045] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.607832][ T6040] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.607854][ T6040] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.692439][ T6028] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.692468][ T6028] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.845311][ T7269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.847363][ T7269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.397936][ T7287] loop9: detected capacity change from 0 to 4096 [ 73.483621][ T7287] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.558509][ T7287] fscrypt (loop9, inode 19): Sub-block data units not yet supported with IV_INO_LBLK_32 [ 73.626049][ T5802] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.724351][ T7308] loop4: detected capacity change from 0 to 512 [ 73.753710][ T7308] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.166363][ T7334] loop9: detected capacity change from 0 to 512 [ 74.212931][ T7334] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.276704][ T7334] EXT4-fs (loop9): shut down requested (0) [ 74.296077][ T6846] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.379130][ T7348] bridge1: entered promiscuous mode [ 74.418765][ T7354] loop5: detected capacity change from 0 to 8 [ 74.449363][ T5802] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.607659][ T7324] SQUASHFS error: zlib decompression failed, data probably corrupt [ 74.607700][ T7324] SQUASHFS error: Failed to read block 0x4df: -5 [ 74.607723][ T7324] SQUASHFS error: Unable to read data cache entry [4df] [ 74.607736][ T7324] SQUASHFS error: Unable to read page, block 4df, size 1 [ 74.607969][ T7324] SQUASHFS error: Unable to read data cache entry [4df] [ 74.607986][ T7324] SQUASHFS error: Unable to read page, block 4df, size 1 [ 74.636746][ T7324] SQUASHFS error: zlib decompression failed, data probably corrupt [ 74.636798][ T7324] SQUASHFS error: Failed to read block 0x4de: -5 [ 74.641858][ T7324] SQUASHFS error: zlib decompression failed, data probably corrupt [ 74.641896][ T7324] SQUASHFS error: Failed to read block 0x4e0: -5 [ 74.647553][ T7324] SQUASHFS error: zlib decompression failed, data probably corrupt [ 74.649637][ T7324] SQUASHFS error: Failed to read block 0x4de: -5 [ 74.650946][ T7324] SQUASHFS error: Unable to read data cache entry [4de] [ 74.654785][ T7324] SQUASHFS error: Unable to read page, block 4de, size 1 [ 74.655574][ T7324] SQUASHFS error: Unable to read data cache entry [4de] [ 74.655589][ T7324] SQUASHFS error: Unable to read page, block 4de, size 1 [ 74.655628][ T7324] SQUASHFS error: Unable to read data cache entry [4de] [ 74.655641][ T7324] SQUASHFS error: Unable to read page, block 4de, size 1 [ 74.655666][ T7324] SQUASHFS error: Unable to read data cache entry [4de] [ 74.655677][ T7324] SQUASHFS error: Unable to read page, block 4de, size 1 [ 74.796690][ T7368] input: syz1 as /devices/virtual/input/input17 [ 75.058368][ T7382] tipc: Started in network mode [ 75.060569][ T7382] tipc: Node identity 887766554433221100ffeeddccbbaa99, cluster identity 1 [ 75.439877][ T7399] sit1: entered allmulticast mode [ 75.978721][ T7431] loop5: detected capacity change from 0 to 2048 [ 76.098325][ T7431] GPT:first_usable_lbas don't match. [ 76.098344][ T7431] GPT:34 != 290 [ 76.098360][ T7431] GPT: Use GNU Parted to correct GPT errors. [ 76.098406][ T7431] loop5: p1 p2 p3 [ 76.110060][ T7442] loop4: detected capacity change from 0 to 1024 [ 76.126151][ T7431] overlayfs: failed lookup in lower (newroot/150, name='file0', err=-40): overlapping layers [ 76.168679][ T7442] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.367925][ T7461] binder: 7458:7461 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 76.369569][ T7461] binder: 7458:7461 ioctl c0306201 200001c0 returned -22 [ 76.475567][ T6846] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.488837][ T4660] udevd[4660]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 76.513606][ T4661] udevd[4661]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 76.568218][ T4877] udevd[4877]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 76.815230][ T7484] netlink: 24 bytes leftover after parsing attributes in process `syz.5.741'. [ 77.071685][ T7502] loop9: detected capacity change from 0 to 512 [ 77.094163][ T7502] EXT4-fs error (device loop9): ext4_orphan_get:1399: inode #15: comm syz.9.745: iget: bad i_size value: 38620345925642 [ 77.096724][ T7502] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 77.097159][ T7502] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.745: couldn't read orphan inode 15 (err -117) [ 77.101473][ T7502] loop9: lost filesystem error report for type 5 error -117 [ 77.102413][ C0] EXT4-fs (loop9): error count since last fsck: 2 [ 77.102438][ C0] EXT4-fs (loop9): initial error at time 77: ext4_orphan_get:1399: inode 15 [ 77.102475][ C0] EXT4-fs (loop9): last error at time 77: ext4_orphan_get:1404 [ 77.111171][ T7502] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.165261][ T7500] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.745: bg 0: block 5: invalid block bitmap [ 77.187063][ T7502] EXT4-fs (loop9): shut down requested (0) [ 78.178984][ T7567] loop7: detected capacity change from 0 to 2048 [ 78.263451][ T7567] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.280156][ T5802] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.485670][ T5290] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.557309][ T7627] typec_fusb302 0-0022: I2C/SMBus block functionality not supported! [ 78.573919][ T7627] i2c i2c-0: new_device: Instantiated device typec_fusb302 at 0x22 [ 78.591838][ T7631] Invalid ELF header magic: != ELF [ 78.939828][ T7656] loop4: detected capacity change from 0 to 2048 [ 78.983744][ T7656] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.106016][ T6846] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.926299][ T7731] loop9: detected capacity change from 0 to 1024 [ 79.926629][ T7731] EXT4-fs: Ignoring removed bh option [ 79.931506][ T7731] EXT4-fs (loop9): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 79.952052][ T7731] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.121431][ T7744] loop7: detected capacity change from 0 to 512 [ 80.142997][ T7744] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.151490][ T7744] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.245470][ T7760] netlink: 51 bytes leftover after parsing attributes in process `syz.5.797'. [ 80.257551][ T5802] EXT4-fs error (device loop9): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /100/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 80.262967][ T5802] EXT4-fs (loop9): Remounting filesystem read-only [ 80.266486][ T5802] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.679765][ T7788] loop7: detected capacity change from 0 to 512 [ 80.712192][ T7788] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.805283][ T5290] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.179108][ T7819] batadv_slave_0: entered promiscuous mode [ 81.182990][ T7817] batadv_slave_0: left promiscuous mode [ 81.207084][ T7821] loop7: detected capacity change from 0 to 7 [ 81.210589][ T7821] Dev loop7: unable to read RDB block 7 [ 81.211840][ T7821] loop7: AHDI p1 p2 p3 [ 81.213675][ T7821] loop7: partition table partially beyond EOD, truncated [ 81.213816][ T7821] loop7: p1 start 1601398130 is beyond EOD, truncated [ 81.213839][ T7821] loop7: p2 start 1702059890 is beyond EOD, truncated [ 81.296267][ T7822] loop8: detected capacity change from 0 to 8192 [ 81.319708][ T7822] loop8: p1 < > p3 p4 < > [ 81.321526][ T7822] loop8: p3 size 218103808 extends beyond EOD, truncated [ 81.511126][ T7836] loop8: detected capacity change from 0 to 4096 [ 81.520854][ T7836] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.568413][ T7841] loop9: detected capacity change from 0 to 512 [ 81.571097][ T7841] EXT4-fs: Ignoring removed bh option [ 81.576179][ T7841] EXT4-fs (loop9): warning: mounting unchecked fs, running e2fsck is recommended [ 81.578634][ T7841] EXT4-fs (loop9): 1 truncate cleaned up [ 81.579084][ T7841] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.599123][ T5520] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.602062][ T7841] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.824: bg 0: block 465: padding at end of block bitmap is not set [ 81.613371][ T7841] EXT4-fs error (device loop9) in ext4_setattr:6172: error 28 [ 81.646602][ T5802] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.733736][ T4660] udevd[4660]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 81.736615][ T4878] udevd[4878]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 81.739074][ T4661] udevd[4661]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 82.039736][ T7863] loop9: detected capacity change from 0 to 128 [ 82.048296][ T7863] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 82.048366][ T7863] System zones: 1-3, 19-19, 35-36 [ 82.048948][ T7863] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 82.081220][ T5802] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 83.006308][ T7873] loop9: detected capacity change from 0 to 512 [ 83.010766][ T7873] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 83.025238][ T7873] EXT4-fs error (device loop9): ext4_orphan_get:1425: comm syz.9.837: bad orphan inode 13 [ 83.027322][ T7873] loop9: lost filesystem error report for type 5 error -117 [ 83.027707][ T7873] ext4_test_bit(bit=12, block=18) = 1 [ 83.030493][ T7873] is_bad_inode(inode)=0 [ 83.030578][ T7873] NEXT_ORPHAN(inode)=0 [ 83.030591][ T7873] max_ino=32 [ 83.030603][ T7873] i_nlink=1 [ 83.031104][ T7873] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 83.047159][ T7873] EXT4-fs warning (device loop9): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 83.054781][ T7873] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.837: bg 0: block 248: padding at end of block bitmap is not set [ 83.058946][ T7873] Quota error (device loop9): write_blk: dquota write failed [ 83.060941][ T7873] Quota error (device loop9): qtree_write_dquot: Error -28 occurred while creating quota [ 83.063589][ T7873] EXT4-fs error (device loop9): ext4_acquire_dquot:7041: comm syz.9.837: Failed to acquire dquot type 1 [ 83.069797][ T7873] Quota error (device loop9): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 83.072284][ T7873] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 83.075689][ T7873] EXT4-fs error (device loop9): ext4_acquire_dquot:7041: comm syz.9.837: Failed to acquire dquot type 1 [ 83.090258][ T5802] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 83.094482][ T6037] Quota error (device loop9): do_check_range: Getting block 0 out of range 1-5 [ 83.094518][ T6037] EXT4-fs error (device loop9): ext4_release_dquot:7077: comm kworker/u8:19: Failed to release dquot type 1 [ 83.094542][ T6037] loop9: lost filesystem error report for type 5 error -117 [ 83.100095][ T7749] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 83.217769][ T7883] loop7: detected capacity change from 0 to 1024 [ 83.231986][ T7886] loop4: detected capacity change from 0 to 128 [ 83.234044][ T7883] EXT4-fs (loop7): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 83.247055][ T7883] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.257522][ T7886] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 83.338260][ T6846] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 83.396908][ T5290] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.412898][ T7895] netlink: 12 bytes leftover after parsing attributes in process `syz.5.846'. [ 83.427353][ T7895] xfrm1: entered promiscuous mode [ 83.432832][ T7895] xfrm1: entered allmulticast mode [ 83.433057][ T7895] netlink: 12 bytes leftover after parsing attributes in process `syz.5.846'. [ 83.916745][ T7914] loop7: detected capacity change from 0 to 128 [ 83.926025][ T7914] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 83.959188][ T7919] loop5: detected capacity change from 0 to 512 [ 83.981651][ T7919] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 83.993562][ T7914] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 84.019142][ T7919] EXT4-fs (loop5): 1 truncate cleaned up [ 84.019609][ T7919] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.086529][ T5036] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.499882][ T7947] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.637903][ T7959] EXT4-fs (loop4): shut down requested (0) [ 84.758524][ T7963] EXT4-fs: Ignoring removed bh option [ 84.764332][ T7963] EXT4-fs: inline encryption not supported [ 84.767117][ T7963] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 84.776951][ T7963] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 84.801278][ T7963] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 2: comm syz.5.874: lblock 2 mapped to illegal pblock 2 (length 1) [ 84.801350][ T7963] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 84.805032][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 84.805054][ C0] EXT4-fs (loop5): initial error at time 84: ext4_map_blocks:791: inode 3: block 2 [ 84.805076][ C0] EXT4-fs (loop5): last error at time 84: ext4_map_blocks:791: inode 3: block 2 [ 84.812272][ T7963] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 84.812322][ T7963] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 48: comm syz.5.874: lblock 0 mapped to illegal pblock 48 (length 1) [ 84.812352][ T7963] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 84.812818][ T7963] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 84.812828][ T7963] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.874: Failed to acquire dquot type 0 [ 84.812851][ T7963] loop5: lost filesystem error report for type 5 error -117 [ 84.813123][ T7963] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 84.813134][ T7963] loop5: lost filesystem error report for type 5 error -117 [ 84.841338][ T7963] EXT4-fs error (device loop5): ext4_evict_inode:267: inode #11: comm syz.5.874: mark_inode_dirty error [ 84.841424][ T7963] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 84.849278][ T7963] EXT4-fs warning (device loop5): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 84.849400][ T7963] EXT4-fs (loop5): 1 orphan inode deleted [ 84.850119][ T7963] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.860573][ T6846] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.866898][ T6043] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:25: lblock 1 mapped to illegal pblock 1 (length 1) [ 84.899455][ T6043] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 84.899505][ T6043] EXT4-fs error (device loop5): ext4_release_dquot:7077: comm kworker/u8:25: Failed to release dquot type 0 [ 84.931432][ T7963] EXT4-fs (loop5): shut down requested (2) [ 85.000207][ T5036] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.676965][ T7997] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.819828][ T8000] EXT4-fs (loop5): shut down requested (0) [ 85.980399][ T5036] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.636497][ T8014] set_capacity_and_notify: 3 callbacks suppressed [ 86.649027][ T8014] loop5: detected capacity change from 0 to 4096 [ 86.649582][ T8014] EXT4-fs: inline encryption not supported [ 86.654392][ T8014] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 86.654404][ T8014] EXT4-fs (loop5): Test dummy encryption mode enabled [ 86.673113][ T8014] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 86.673232][ T8014] System zones: 0-5 [ 86.678007][ T8014] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.835908][ T8027] loop4: detected capacity change from 0 to 512 [ 86.856285][ T8027] EXT4-fs (loop4): Test dummy encryption mode enabled [ 86.871373][ T8027] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e064e0ad, mo2=0002] [ 86.871438][ T8027] System zones: 1-12 [ 86.872212][ T8027] EXT4-fs (loop4): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.937802][ T8027] EXT4-fs error (device loop4): __ext4_add_entry:2412: inode #2: comm syz.4.900: Directory hole found for htree leaf block 0 [ 86.945360][ T8027] EXT4-fs (loop4): Remounting filesystem read-only [ 87.031647][ T6846] EXT4-fs (loop4): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 87.089979][ T5036] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.642092][ T8047] loop4: detected capacity change from 0 to 2048 [ 87.668327][ T8047] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.903934][ T6846] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.313577][ T8076] loop8: detected capacity change from 0 to 8 [ 88.315742][ T8076] loop8: [CUMANA/ADFS] p1 [ADFS] p1 [ 88.320367][ T8076] loop8: partition table partially beyond EOD, truncated [ 88.320559][ T8076] loop8: p1 size 2645487272 extends beyond EOD, truncated [ 88.401344][ T8080] loop7: detected capacity change from 0 to 256 [ 88.601645][ T8089] loop5: detected capacity change from 0 to 1024 [ 88.626993][ T8093] loop8: detected capacity change from 0 to 1024 [ 88.644480][ T8089] EXT4-fs: Ignoring removed bh option [ 88.647164][ T8089] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 88.689022][ T8087] loop9: detected capacity change from 0 to 4096 [ 88.691577][ T8093] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.698419][ T8091] loop7: detected capacity change from 0 to 2048 [ 88.702926][ T8089] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.714029][ T8087] EXT4-fs: inline encryption not supported [ 88.717760][ T8087] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 88.717807][ T8087] EXT4-fs (loop9): Test dummy encryption mode enabled [ 88.730407][ T8087] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 88.730487][ T8087] System zones: 0-5 [ 88.740828][ T8087] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.746769][ T8091] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.775183][ T8087] EXT4-fs (loop9): shut down requested (2) [ 88.785200][ T4660] udevd[4660]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 88.837477][ T5290] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.165519][ T8113] loop7: detected capacity change from 0 to 512 [ 89.197749][ T8113] EXT4-fs (loop7): Test dummy encryption mode enabled [ 89.206177][ T8113] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e064e0ad, mo2=0002] [ 89.208030][ T8113] System zones: 1-12 [ 89.211890][ T5036] EXT4-fs error (device loop5): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /188/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 89.217657][ T5036] EXT4-fs (loop5): Remounting filesystem read-only [ 89.309116][ T8113] EXT4-fs error (device loop7): __ext4_add_entry:2412: inode #2: comm syz.7.933: Directory hole found for htree leaf block 0 [ 89.314508][ T8113] EXT4-fs (loop7): Remounting filesystem read-only [ 89.342687][ T8118] input: syz1 as /devices/virtual/input/input18 [ 89.568903][ T8121] EXT4-fs error (device loop5): ext4_read_inline_dir:1494: inode #12: block 7: comm syz.5.935: path /: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 89.588980][ T8121] EXT4-fs error (device loop5): ext4_read_inline_dir:1494: inode #12: block 7: comm syz.5.935: path /: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 89.688210][ T5036] EXT4-fs error (device loop5): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /189/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 89.696026][ T5036] EXT4-fs error (device loop5): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /189/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 89.711399][ T5036] EXT4-fs error (device loop5): empty_inline_dir:1778: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 89.726125][ T5036] EXT4-fs warning (device loop5): empty_inline_dir:1785: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 89.726395][ T5036] EXT4-fs error (device loop5): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /189/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 89.735121][ T5036] EXT4-fs error (device loop5): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /189/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 89.740389][ T5036] EXT4-fs error (device loop5): empty_inline_dir:1778: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 89.753174][ T5036] EXT4-fs warning (device loop5): empty_inline_dir:1785: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 89.753380][ T5036] EXT4-fs error (device loop5): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /189/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 89.765736][ T5036] EXT4-fs error (device loop5): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /189/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 89.771348][ T5036] EXT4-fs warning (device loop5): empty_inline_dir:1785: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 89.776996][ T5036] EXT4-fs warning (device loop5): empty_inline_dir:1785: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 89.795067][ T5036] EXT4-fs warning (device loop5): empty_inline_dir:1785: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 89.809319][ T5036] EXT4-fs warning (device loop5): empty_inline_dir:1785: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 89.828741][ T5036] EXT4-fs warning (device loop5): empty_inline_dir:1785: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 89.837101][ T5036] EXT4-fs warning (device loop5): empty_inline_dir:1785: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 89.846378][ T5036] EXT4-fs warning (device loop5): empty_inline_dir:1785: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 89.865544][ T5036] EXT4-fs warning (device loop5): empty_inline_dir:1785: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 90.310958][ T8142] EXT4-fs: Ignoring removed bh option [ 90.414471][ T8144] EXT4-fs: inline encryption not supported [ 90.420020][ T8144] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 90.424462][ T8144] EXT4-fs (loop9): Test dummy encryption mode enabled [ 90.430357][ T8142] EXT4-fs (loop7): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 90.441274][ T8144] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 90.441371][ T8144] System zones: 0-5 [ 90.844917][ T4781] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 90.853176][ T4781] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 90.882063][ T5290] EXT4-fs error (device loop7): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /178/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 90.899791][ T5290] EXT4-fs (loop7): Remounting filesystem read-only [ 91.326742][ T6043] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.531243][ T6045] Bluetooth: hci2: Frame reassembly failed (-84) [ 91.571674][ T8171] faux_driver vkms: [drm] Unknown color mode 256; guessing buffer size. [ 91.578524][ T6043] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.634488][ T4673] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 91.639115][ T4673] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 91.645576][ T4673] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 91.648608][ T4673] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 91.654668][ T4673] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 91.781197][ T6043] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.877197][ T8181] bridge0: port 3(erspan0) entered blocking state [ 91.896796][ T8181] bridge0: port 3(erspan0) entered disabled state [ 91.897232][ T8181] erspan0: entered allmulticast mode [ 91.944013][ T8181] erspan0: entered promiscuous mode [ 91.944521][ T8181] bridge0: port 3(erspan0) entered blocking state [ 91.944583][ T8181] bridge0: port 3(erspan0) entered forwarding state [ 91.969921][ T8183] erspan0: left allmulticast mode [ 91.969958][ T8183] erspan0: left promiscuous mode [ 91.970708][ T8183] bridge0: port 3(erspan0) entered disabled state [ 92.105969][ T6043] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.267495][ T8170] fido_id[8170]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 92.467425][ T6043] veth0: left allmulticast mode [ 92.467469][ T6043] veth0: left promiscuous mode [ 92.467613][ T6043] bridge0: port 3(veth0) entered disabled state [ 92.474932][ T6043] bridge_slave_1: left allmulticast mode [ 92.476311][ T6043] bridge_slave_1: left promiscuous mode [ 92.477657][ T6043] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.486703][ T6043] bridge_slave_0: left allmulticast mode [ 92.489152][ T6043] bridge_slave_0: left promiscuous mode [ 92.489281][ T6043] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.701829][ T6043] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.708226][ T6043] bond0 (unregistering): Released all slaves [ 92.761491][ T6043] tipc: Left network mode [ 92.924199][ T6043] hsr_slave_0: left promiscuous mode [ 92.924942][ T6043] hsr_slave_1: left promiscuous mode [ 92.925379][ T6043] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.925406][ T6043] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.931410][ T6043] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.934563][ T6043] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.961894][ T6043] veth1_macvtap: left promiscuous mode [ 92.961942][ T6043] veth0_macvtap: left promiscuous mode [ 92.962022][ T6043] veth1_vlan: left promiscuous mode [ 92.962082][ T6043] veth0_vlan: left promiscuous mode [ 93.317085][ T6043] team0 (unregistering): Port device team_slave_1 removed [ 93.338843][ T6043] team0 (unregistering): Port device team_slave_0 removed [ 93.461528][ T4399] 8021q: adding VLAN 0 to HW filter on device eth20 [ 93.603011][ T4677] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 93.660037][ T8172] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.661760][ T8172] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.663658][ T8172] bridge_slave_0: entered allmulticast mode [ 93.671635][ T8172] bridge_slave_0: entered promiscuous mode [ 93.681469][ T8172] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.681566][ T8172] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.681753][ T8172] bridge_slave_1: entered allmulticast mode [ 93.683790][ T4673] Bluetooth: hci5: command tx timeout [ 93.690111][ T8172] bridge_slave_1: entered promiscuous mode [ 93.727449][ T8172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.734951][ T8172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.761200][ T8172] team0: Port device team_slave_0 added [ 93.768796][ T8172] team0: Port device team_slave_1 added [ 93.797168][ T8172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.798788][ T8172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.806355][ T8172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.813888][ T8172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.813926][ T8172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.813977][ T8172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.864459][ T8172] hsr_slave_0: entered promiscuous mode [ 93.866512][ T8172] hsr_slave_1: entered promiscuous mode [ 93.868142][ T8172] debugfs: 'hsr0' already exists in 'hsr' [ 93.869370][ T8172] Cannot create hsr debugfs directory [ 94.106526][ T4399] 8021q: adding VLAN 0 to HW filter on device eth21 [ 94.304808][ T8172] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 94.310427][ T8172] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.316048][ T8172] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.319584][ T8172] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.322345][ T8172] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.332872][ T8172] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.336541][ T8172] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.346142][ T8172] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.434758][ T8172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.440903][ T8172] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.464142][ T6043] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.464206][ T6043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.465026][ T6043] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.465060][ T6043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.496383][ T8172] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 94.506188][ T8172] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.646329][ T4399] 8021q: adding VLAN 0 to HW filter on device eth22 [ 94.800870][ T8172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.847295][ T8172] veth0_vlan: entered promiscuous mode [ 94.855800][ T8172] veth1_vlan: entered promiscuous mode [ 94.871911][ T8172] veth0_macvtap: entered promiscuous mode [ 94.891480][ T8172] veth1_macvtap: entered promiscuous mode [ 94.911574][ T8172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.924302][ T8172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.944516][ T6023] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.944581][ T6023] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.944621][ T6023] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.944650][ T6023] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.027104][ T6045] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.027139][ T6045] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.061030][ T6043] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.061070][ T6043] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.301196][ T4399] 8021q: adding VLAN 0 to HW filter on device eth23 [ 95.767464][ T4673] Bluetooth: hci5: command tx timeout [ 96.181613][ T8332] set_capacity_and_notify: 4 callbacks suppressed [ 96.239017][ T8332] loop7: detected capacity change from 0 to 2048 [ 96.239569][ T8332] EXT4-fs: Ignoring removed i_version option [ 97.145573][ T8374] loop9: detected capacity change from 0 to 512 [ 97.187295][ T8374] EXT4-fs: Ignoring removed nomblk_io_submit option [ 97.190818][ T8374] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 97.213180][ T8374] EXT4-fs (loop9): 1 truncate cleaned up [ 97.290995][ T8374] EXT4-fs error (device loop9): ext4_check_dx_root:2201: inode #2: comm syz.9.997: Corrupt dir, invalid name for '..', running e2fsck is recommended [ 97.507798][ T8389] loop8: detected capacity change from 0 to 512 [ 97.516623][ T8388] loop3: detected capacity change from 0 to 128 [ 97.525241][ T8389] ext2: Bad value for 'barrier' [ 97.557834][ T8388] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 97.560315][ T8388] System zones: 1-3, 19-19, 35-36 [ 97.602029][ T8392] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.602539][ T8392] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.844208][ T4673] Bluetooth: hci5: command tx timeout [ 97.889228][ T8401] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1007'. [ 98.587777][ T8436] loop3: detected capacity change from 0 to 512 [ 98.599791][ T8436] EXT4-fs (loop3): Test dummy encryption mode enabled [ 98.624490][ T8436] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.1016: inode has both inline data and extents flags [ 98.624578][ T8436] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 98.628273][ T8436] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1016: couldn't read orphan inode 15 (err -117) [ 98.628325][ T8436] loop3: lost filesystem error report for type 5 error -117 [ 98.632694][ C0] EXT4-fs (loop3): error count since last fsck: 2 [ 98.632706][ C0] EXT4-fs (loop3): initial error at time 98: ext4_orphan_get:1399: inode 15 [ 98.632725][ C0] EXT4-fs (loop3): last error at time 98: ext4_orphan_get:1404 [ 98.965673][ T8450] loop4: detected capacity change from 0 to 128 [ 98.980137][ T8450] EXT4-fs (loop4): Test dummy encryption mode enabled [ 99.004578][ T8450] EXT4-fs mount: 21 callbacks suppressed [ 99.004618][ T8450] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 99.205760][ T8450] EXT4-fs (loop4): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 ro. [ 99.327276][ T6846] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 99.460148][ T8469] hugetlbfs: syz.4.1025 (8469): Using mlock ulimits for SHM_HUGETLB is obsolete [ 99.923469][ T4673] Bluetooth: hci5: command tx timeout [ 100.258552][ T8504] input: syz0 as /devices/virtual/input/input19 [ 100.415050][ T8509] loop8: detected capacity change from 0 to 8 [ 100.608039][ T8517] netlink: 'syz.4.1040': attribute type 1 has an invalid length. [ 100.608093][ T8517] netlink: 'syz.4.1040': attribute type 4 has an invalid length. [ 100.608124][ T8517] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1040'. [ 100.635527][ T8509] SQUASHFS error: Failed to read block 0x60: -5 [ 101.184582][ T8539] netlink: 'syz.7.1048': attribute type 7 has an invalid length. [ 101.184724][ T8539] netlink: 'syz.7.1048': attribute type 7 has an invalid length. [ 101.516144][ T8555] loop7: detected capacity change from 0 to 128 [ 101.568485][ T8555] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 101.673141][ T8563] netlink: 'syz.8.1055': attribute type 14 has an invalid length. [ 101.674849][ T8563] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1055'. [ 101.735844][ T6043] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.735987][ T6043] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.736049][ T6043] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.736089][ T6043] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.755713][ T8563] netlink: 'syz.8.1055': attribute type 14 has an invalid length. [ 101.755747][ T8563] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1055'. [ 101.822342][ T5290] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 102.053969][ T8570] ip6erspan0: entered allmulticast mode [ 102.070318][ T8575] loop8: detected capacity change from 0 to 1024 [ 102.112071][ T8575] EXT4-fs: Ignoring removed nomblk_io_submit option [ 102.127243][ T8575] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.223589][ T8583] trusted_key: syz.4.1061 sent an empty control message without MSG_MORE. [ 102.270965][ T8586] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1062'. [ 102.282916][ T8586] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1062'. [ 102.288342][ T5520] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.438852][ T8590] loop4: detected capacity change from 0 to 1024 [ 102.467549][ T8590] EXT4-fs: Ignoring removed bh option [ 102.472636][ T8590] EXT4-fs: Ignoring removed bh option [ 102.478804][ T8593] loop3: detected capacity change from 0 to 128 [ 102.485862][ T8590] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 102.526530][ T8590] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.706865][ T8590] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 102.916482][ T6846] EXT4-fs error (device loop4): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /70/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 102.916870][ T6846] EXT4-fs (loop4): Remounting filesystem read-only [ 102.936081][ T6846] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.076133][ T8611] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1069'. [ 103.369516][ T8623] Injecting memory failure for pfn 0x119060 at process virtual address 0x20000000 [ 103.371618][ T8623] Memory failure: 0x119060: Sending SIGBUS to syz.7.1074:8623 due to hardware memory corruption [ 103.396216][ T8623] Memory failure: 0x119060: recovery action for unsplit thp: Failed [ 103.599772][ T8634] 8021q: adding VLAN 0 to HW filter on device bond1 [ 103.600410][ T8634] bridge0: port 3(bond1) entered blocking state [ 103.618880][ T8634] bridge0: port 3(bond1) entered disabled state [ 103.619065][ T8634] bond1: entered allmulticast mode [ 103.620186][ T8634] bond1: entered promiscuous mode [ 103.620549][ T8634] bridge0: port 3(bond1) entered blocking state [ 103.620592][ T8634] bridge0: port 3(bond1) entered forwarding state [ 103.622237][ T8632] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1076'. [ 103.842115][ T9] Process accounting resumed [ 103.888385][ T8633] Process accounting resumed [ 104.335884][ T8656] loop8: detected capacity change from 0 to 4096 [ 104.345858][ T8656] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 104.352879][ T8656] EXT4-fs (loop8): Test dummy encryption mode enabled [ 104.374285][ T8662] loop4: detected capacity change from 0 to 128 [ 104.382132][ T8656] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.405879][ T8662] vfat: Unknown parameter 'uid-0x000000000000ee00' [ 104.452270][ T6040] bridge0: port 3(bond1) entered disabled state [ 104.634184][ T5520] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.907950][ T8687] netlink: 'syz.3.1092': attribute type 10 has an invalid length. [ 105.290182][ T8706] netlink: 'syz.7.1096': attribute type 1 has an invalid length. [ 105.451641][ T8706] 8021q: adding VLAN 0 to HW filter on device bond2 [ 105.549016][ T8710] bond2 (unregistering): Released all slaves [ 105.606846][ T8717] loop3: detected capacity change from 0 to 512 [ 105.621644][ T8717] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 105.647833][ T8717] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.1099: corrupted in-inode xattr: e_value size too large [ 105.647920][ T8717] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 105.652421][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 105.652454][ C0] EXT4-fs (loop3): initial error at time 105: ext4_iget_extra_inode:5180: inode 15 [ 105.652512][ C0] EXT4-fs (loop3): last error at time 105: ext4_iget_extra_inode:5180: inode 15 [ 105.668061][ T8717] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1099: couldn't read orphan inode 15 (err -117) [ 105.668146][ T8717] loop3: lost filesystem error report for type 5 error -117 [ 105.680044][ T8717] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.175094][ T8730] loop9: detected capacity change from 0 to 128 [ 106.195797][ T8172] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.214034][ T8730] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 106.459190][ T5802] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 107.291731][ C0] Unknown status report in ack skb [ 107.417947][ T8783] loop3: detected capacity change from 0 to 256 [ 107.448166][ T30] audit: type=1400 audit(107.420:600): lsm=SMACK fn=smack_post_notification action=denied subject="y" object="_" requested=w pid=8776 comm="syz.8.1116" [ 107.451834][ T8784] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1117'. [ 107.455676][ T8784] netlink: 'syz.7.1117': attribute type 2 has an invalid length. [ 107.458478][ T8784] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1117'. [ 107.535113][ T8786] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 109.218917][ T8847] loop4: detected capacity change from 0 to 512 [ 109.292205][ T8847] EXT4-fs: Ignoring removed bh option [ 109.332765][ T8847] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 109.332827][ T8847] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 109.437223][ T4673] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 109.439561][ T4673] CPU: 0 UID: 0 PID: 4673 Comm: kworker/u9:2 Tainted: G L syzkaller #0 PREEMPT [ 109.439584][ T4673] Tainted: [L]=SOFTLOCKUP [ 109.439589][ T4673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 109.439595][ T4673] Workqueue: hci3 hci_rx_work [ 109.439614][ T4673] Call trace: [ 109.439617][ T4673] show_stack+0x2c/0x3c (C) [ 109.439634][ T4673] __dump_stack+0x30/0x40 [ 109.439647][ T4673] dump_stack_lvl+0xd8/0x12c [ 109.439659][ T4673] dump_stack+0x1c/0x28 [ 109.439670][ T4673] sysfs_warn_dup+0x9c/0xb8 [ 109.439683][ T4673] sysfs_create_dir_ns+0x190/0x1f4 [ 109.439694][ T4673] kobject_add_internal+0x290/0x6f0 [ 109.439703][ T4673] kobject_add_varg+0x9c/0xe8 [ 109.439716][ T4673] kobject_add+0x110/0x1c8 [ 109.439728][ T4673] device_add+0x394/0x9e0 [ 109.439741][ T4673] hci_conn_add_sysfs+0xbc/0x1e8 [ 109.439752][ T4673] le_conn_complete_evt+0xc68/0x10f8 [ 109.439762][ T4673] hci_le_conn_complete_evt+0x114/0x3d8 [ 109.439770][ T4673] hci_le_meta_evt+0x2b0/0x46c [ 109.439781][ T4673] hci_event_packet+0x4c0/0x9c8 [ 109.439791][ T4673] hci_rx_work+0x2f4/0xd78 [ 109.439803][ T4673] process_scheduled_works+0x788/0x10b8 [ 109.439814][ T4673] worker_thread+0x798/0xbd0 [ 109.439824][ T4673] kthread+0x304/0x3d4 [ 109.439832][ T4673] ret_from_fork+0x10/0x20 [ 109.462814][ T4673] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 109.462844][ T4673] Bluetooth: hci3: failed to register connection device [ 109.529154][ T8847] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 109.555786][ T8847] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 109.556885][ T8847] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.811796][ T6846] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.028338][ T8909] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 111.992784][ T8938] loop4: detected capacity change from 0 to 512 [ 112.050984][ T8938] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.124591][ T8938] EXT4-fs (loop4): shut down requested (2) [ 112.241278][ T6846] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.369293][ T8956] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1172'. [ 112.372205][ T8956] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1172'. [ 112.383153][ T8955] netlink: 52 bytes leftover after parsing attributes in process `syz.9.1175'. [ 112.439194][ T8955] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1175'. [ 112.586101][ T8958] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1176'. [ 112.803410][ T8953] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1174'. [ 113.044151][ T8969] loop8: detected capacity change from 0 to 256 [ 114.145360][ T9004] Soft offlining pfn 0x1596d7 at process virtual address 0x20017000 [ 114.164914][ T9004] Soft offline: 0x1596d7: thp split failed [ 114.579389][ T9020] xt_hashlimit: size too large, truncated to 1048576 [ 114.681608][ T9033] loop9: detected capacity change from 0 to 256 [ 114.866651][ T9037] loop4: detected capacity change from 0 to 1024 [ 114.867260][ T9037] EXT4-fs: Ignoring removed bh option [ 114.873245][ T9037] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 114.886198][ T9037] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.006719][ T9037] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 115.026901][ T9046] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 115.175513][ T9037] EXT4-fs error (device loop4): ext4_find_dest_de:2050: inode #12: block 7: comm syz.4.1210: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 115.206519][ T9037] EXT4-fs (loop4): Remounting filesystem read-only [ 115.207262][ T9037] overlayfs: failed to create directory ./file0/work (errno: 30); mounting read-only [ 115.226154][ T9037] overlayfs: failed to set uuid (/bus, err=-30); falling back to uuid=null. [ 115.375689][ T9059] loop3: detected capacity change from 0 to 512 [ 115.386867][ T9059] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 115.390557][ T9059] EXT4-fs (loop3): invalid journal inode [ 115.390651][ T9059] EXT4-fs (loop3): can't get journal size [ 115.414248][ T9059] EXT4-fs (loop3): 1 truncate cleaned up [ 115.414939][ T9059] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.490325][ T6846] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.647817][ T8172] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.927847][ T9083] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1223'. [ 116.437103][ T9097] netlink: 'syz.9.1228': attribute type 13 has an invalid length. [ 116.437153][ T9097] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1228'. [ 116.484291][ T9097] netlink: 'syz.9.1228': attribute type 13 has an invalid length. [ 116.484329][ T9097] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1228'. [ 116.504722][ T6040] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.504836][ T6040] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.504900][ T6040] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.504939][ T6040] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.706017][ T9107] loop9: detected capacity change from 0 to 256 [ 116.757670][ T9107] syz.9.1231: attempt to access beyond end of device [ 116.757670][ T9107] loop9: rw=8388608, sector=1768, nr_sectors = 4 limit=256 [ 116.846839][ T9107] syz.9.1231: attempt to access beyond end of device [ 116.846839][ T9107] loop9: rw=8388608, sector=1768, nr_sectors = 4 limit=256 [ 116.954158][ T9086] loop3: detected capacity change from 0 to 256 [ 116.971630][ T9086] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 117.494211][ T9125] loop4: detected capacity change from 0 to 1024 [ 117.554129][ T9125] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.901461][ T6846] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.686440][ T9161] loop8: detected capacity change from 0 to 8192 [ 118.717334][ T9161] loop8: p1 < > p2 < > p3 p4 < > [ 118.718594][ T9161] loop8: partition table partially beyond EOD, truncated [ 118.721009][ T9161] loop8: p1 start 67108864 is beyond EOD, truncated [ 118.726804][ T9161] loop8: p3 start 100859904 is beyond EOD, truncated [ 118.811006][ T9161] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1254'. [ 119.139101][ T9177] loop9: detected capacity change from 0 to 128 [ 119.161674][ T9177] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 119.326983][ T9180] 9pnet: p9_errstr2errno: server reported unknown error  [ 119.333436][ T9182] loop8: detected capacity change from 0 to 1024 [ 119.338730][ T9182] EXT4-fs: Ignoring removed bh option [ 119.369217][ T9182] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.378234][ T8197] udevd[8197]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 119.387751][ T4660] udevd[4660]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 119.464779][ T5802] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 119.599792][ T9196] loop3: detected capacity change from 0 to 512 [ 119.622809][ T9196] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.1267: inode has both inline data and extents flags [ 119.622852][ T9196] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 119.626609][ T9196] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1267: couldn't read orphan inode 15 (err -117) [ 119.626673][ T9196] loop3: lost filesystem error report for type 5 error -117 [ 119.631997][ T9196] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.661940][ T9195] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-61) [ 119.693675][ T5520] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.874160][ T9196] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 120.051340][ T8172] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.063306][ T9209] loop9: detected capacity change from 0 to 256 [ 120.516003][ T9235] loop3: detected capacity change from 0 to 128 [ 120.543716][ T9235] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 120.598068][ T9235] EXT4-fs (loop3): shut down requested (2) [ 120.611004][ T9235] __find_get_block_slow() failed. block=144115188075855872, b_blocknr=0, b_state=0x00000010, b_size=1024, device loop3 blocksize: 1024 [ 120.615097][ T9235] grow_buffers: requested out-of-range block 144115188075855872 for device loop3 [ 120.617091][ T9235] EXT4-fs warning (device loop3): ext4_resize_fs:2018: can't read last block, resize aborted [ 120.693447][ T9239] loop9: detected capacity change from 0 to 512 [ 120.706325][ T9239] EXT4-fs error (device loop9): ext4_orphan_get:1399: inode #15: comm syz.9.1281: inode has both inline data and extents flags [ 120.709552][ T9239] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 120.711542][ T9239] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.1281: couldn't read orphan inode 15 (err -117) [ 120.713717][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 120.713735][ C0] EXT4-fs (loop9): initial error at time 120: ext4_orphan_get:1399: inode 15 [ 120.713763][ C0] EXT4-fs (loop9): last error at time 120: ext4_orphan_get:1399: inode 15 [ 120.724045][ T9239] loop9: lost filesystem error report for type 5 error -117 [ 120.737861][ T9239] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.816600][ T8172] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 120.960212][ T9250] loop4: detected capacity change from 0 to 256 [ 120.981565][ T9251] loop3: detected capacity change from 0 to 512 [ 121.025121][ T9251] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.174383][ T5802] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.452048][ T9266] loop8: detected capacity change from 0 to 7 [ 121.475102][ T9263] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1291'. [ 121.475160][ T9263] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1291'. [ 121.515331][ T9266] Dev loop8: unable to read RDB block 7 [ 121.515372][ T9266] loop8: unable to read partition table [ 121.515485][ T9266] loop8: partition table beyond EOD, truncated [ 121.515502][ T9266] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 121.709545][ T9275] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1295'. [ 122.387087][ T8172] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.914109][ T9316] EXT4-fs (loop9): Test dummy encryption mode enabled [ 122.922226][ T9316] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 123.103629][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 123.123970][ T9328] Soft offlining pfn 0x16f7af at process virtual address 0x2046b000 [ 123.125965][ T9328] Soft offline: 0x16f7af: invalidated [ 123.130915][ T9] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 123.245221][ T5802] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 123.550429][ T9339] EXT4-fs: inline encryption not supported [ 123.559837][ T9339] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 123.583789][ T9339] EXT4-fs (loop4): 1 truncate cleaned up [ 123.584454][ T9339] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.718313][ T9330] fido_id[9330]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 123.728189][ T9348] set_capacity_and_notify: 2 callbacks suppressed [ 123.771571][ T9348] loop7: detected capacity change from 0 to 2048 [ 123.800416][ T9348] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.810919][ T6846] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.030157][ T5290] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.130711][ T9367] loop8: detected capacity change from 0 to 512 [ 124.145866][ T9367] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 124.191688][ T9367] EXT4-fs (loop8): 1 truncate cleaned up [ 124.229995][ T9367] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.242092][ T9373] loop7: detected capacity change from 0 to 1024 [ 124.244086][ T9373] EXT4-fs: Ignoring removed bh option [ 124.246473][ T9373] EXT4-fs (loop7): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 124.268129][ T9373] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.428670][ T9373] EXT4-fs error (device loop7): ext4_find_dest_de:2050: inode #12: block 7: comm syz.7.1325: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 124.447807][ T9373] EXT4-fs (loop7): Remounting filesystem read-only [ 124.710591][ T5520] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.767377][ T9398] overlayfs: overlapping lowerdir path [ 124.795851][ T5290] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.836422][ T9403] binder: 9401:9403 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 124.839227][ T9403] binder: 9403 RLIMIT_NICE not set [ 124.979292][ T9400] loop4: detected capacity change from 0 to 1024 [ 125.076835][ T9400] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 125.145043][ T9400] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 125.167633][ T9400] EXT4-fs error (device loop4): ext4_readdir:265: inode #12: block 80: comm syz.4.1337: path /: bad entry in directory: directory entry overrun - offset=296, inode=0, rec_len=1024, size=1024 fake=0 [ 125.193273][ T9400] overlayfs: failed to look up () for ino (-13) [ 125.290831][ T6846] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 16: comm syz-executor: path /128/file1: bad entry in directory: directory entry overrun - offset=876, inode=0, rec_len=1024, size=1024 fake=0 [ 125.301482][ T9425] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.321387][ T6846] EXT4-fs error (device loop4): ext4_readdir:265: inode #11: block 37: comm syz-executor: path /128/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 125.328404][ T6846] EXT4-fs error (device loop4): ext4_empty_dir:3125: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 125.335016][ T6846] EXT4-fs error (device loop4): ext4_readdir:265: inode #11: block 37: comm syz-executor: path /128/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 125.342357][ T6846] EXT4-fs error (device loop4): ext4_empty_dir:3125: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 125.353508][ T6846] EXT4-fs error (device loop4): ext4_readdir:265: inode #11: block 37: comm syz-executor: path /128/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 125.360789][ T6846] EXT4-fs error (device loop4): ext4_empty_dir:3125: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 125.375351][ T6846] EXT4-fs error (device loop4): ext4_readdir:265: inode #11: block 37: comm syz-executor: path /128/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 125.381151][ T6846] EXT4-fs error (device loop4): ext4_empty_dir:3125: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 125.507210][ T9430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1345'. [ 125.511716][ T9430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1345'. [ 125.851640][ T9437] ªªªªªª: renamed from vlan0 (while UP) [ 125.924443][ T1597] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.924496][ T1597] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.473725][ T9461] loop7: detected capacity change from 0 to 1024 [ 126.498933][ T9461] EXT4-fs: inline encryption not supported [ 126.524526][ T9461] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 126.628402][ T9461] EXT4-fs error (device loop7): ext4_map_blocks:833: inode #15: block 3: comm syz.7.1354: lblock 3 mapped to illegal pblock 3 (length 3) [ 126.643183][ T9461] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 126.643237][ T9461] EXT4-fs (loop7): This should not happen!! Data will be lost [ 126.643237][ T9461] [ 126.683054][ T9461] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #15: block 3: comm syz.7.1354: lblock 3 mapped to illegal pblock 3 (length 1) [ 126.694815][ T9461] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #15: block 3: comm syz.7.1354: lblock 3 mapped to illegal pblock 3 (length 1) [ 126.698866][ T9461] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #15: block 3: comm syz.7.1354: lblock 3 mapped to illegal pblock 3 (length 1) [ 126.704837][ T9461] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #15: block 3: comm syz.7.1354: lblock 3 mapped to illegal pblock 3 (length 1) [ 126.708224][ T9461] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #15: block 3: comm syz.7.1354: lblock 3 mapped to illegal pblock 3 (length 1) [ 126.722187][ T9461] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #15: block 3: comm syz.7.1354: lblock 3 mapped to illegal pblock 3 (length 1) [ 126.729692][ T9461] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #15: block 3: comm syz.7.1354: lblock 3 mapped to illegal pblock 3 (length 1) [ 126.736935][ T9461] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #15: block 3: comm syz.7.1354: lblock 3 mapped to illegal pblock 3 (length 1) [ 126.740195][ T9461] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #15: block 3: comm syz.7.1354: lblock 3 mapped to illegal pblock 3 (length 1) [ 126.817888][ T9468] loop9: detected capacity change from 0 to 4096 [ 126.860193][ T9468] EXT4-fs (loop9): Test dummy encryption mode enabled [ 126.873534][ T9468] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.015529][ T9474] input: syz0 as /devices/virtual/input/input20 [ 127.243595][ T5802] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.400485][ T6846] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 127.555770][ T6040] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 127.555833][ T6040] EXT4-fs (loop7): This should not happen!! Data will be lost [ 127.555833][ T6040] [ 127.569940][ T5290] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 127.571677][ T5290] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 127.853561][ T9488] syzkaller1: entered promiscuous mode [ 127.853611][ T9488] syzkaller1: entered allmulticast mode [ 128.080574][ T9494] loop9: detected capacity change from 0 to 512 [ 128.147598][ T9494] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.281248][ T9501] netlink: 'syz.7.1371': attribute type 30 has an invalid length. [ 128.281315][ T9501] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1371'. [ 128.281416][ T9501] netlink: 'syz.7.1371': attribute type 30 has an invalid length. [ 128.281443][ T9501] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1371'. [ 128.395770][ T5802] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.416960][ T4673] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 128.419767][ T4673] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 128.423164][ T4673] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 128.426056][ T4673] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 128.444154][ T4673] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 128.649703][ T9512] loop9: detected capacity change from 0 to 1024 [ 128.669738][ T9512] EXT4-fs: Ignoring removed bh option [ 128.701012][ T9512] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.109815][ T5802] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.120830][ T9527] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1379'. [ 129.120887][ T9527] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1379'. [ 130.112941][ T4673] block nbd1: Receive control failed (result -32) [ 130.116091][ T4677] block nbd1: Receive control failed (result -32) [ 130.484630][ T4677] Bluetooth: hci0: command tx timeout [ 130.629903][ T9506] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.641840][ T9506] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.642124][ T9506] bridge_slave_0: entered allmulticast mode [ 130.646523][ T9506] bridge_slave_0: entered promiscuous mode [ 130.675362][ T9506] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.682594][ T9506] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.682855][ T9506] bridge_slave_1: entered allmulticast mode [ 130.683797][ T9506] bridge_slave_1: entered promiscuous mode [ 130.799483][ T9506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.843002][ T9506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.951494][ T9506] team0: Port device team_slave_0 added [ 130.956030][ T9506] team0: Port device team_slave_1 added [ 131.071441][ T9506] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.073927][ T9506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 131.081341][ T9506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.101449][ T9506] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.103868][ T9506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 131.110621][ T9506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.270440][ T4470] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 131.277822][ T4470] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 131.308737][ T9506] hsr_slave_0: entered promiscuous mode [ 131.329416][ T9506] hsr_slave_1: entered promiscuous mode [ 131.329916][ T9506] debugfs: 'hsr0' already exists in 'hsr' [ 131.329951][ T9506] Cannot create hsr debugfs directory [ 131.465883][ T9586] loop3: detected capacity change from 0 to 4096 [ 131.468903][ T9586] EXT4-fs (loop3): Test dummy encryption mode enabled [ 131.491561][ T9586] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.723928][ T8172] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.728739][ T9587] fido_id[9587]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 132.564065][ T4677] Bluetooth: hci0: command tx timeout [ 133.542516][ T9506] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 133.567455][ T9506] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 133.594351][ T9506] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 133.625086][ T9506] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 133.640532][ T9506] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 133.685750][ T9506] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 133.686388][ T9506] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 133.725732][ T9506] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 133.758202][ T9634] loop7: detected capacity change from 0 to 512 [ 133.820974][ T9634] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 133.848157][ T9634] EXT4-fs (loop7): 1 truncate cleaned up [ 133.849027][ T9634] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.903751][ T9647] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1416'. [ 133.903812][ T9647] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1416'. [ 134.170372][ T9506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.208782][ C0] Unknown status report in ack skb [ 134.219442][ T9506] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.285109][ T3800] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.285186][ T3800] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.378148][ T3800] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.378208][ T3800] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.431755][ T9506] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 134.442217][ T5290] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.474890][ T6043] Bluetooth: hci2: Frame reassembly failed (-84) [ 134.480389][ T9506] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 134.582860][ T30] audit: type=1326 audit(134.560:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9653 comm="syz.8.1419" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6d7b0a8 code=0x0 [ 134.642739][ T4673] Bluetooth: hci0: command tx timeout [ 135.708872][ T9506] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.836799][ T9506] veth0_vlan: entered promiscuous mode [ 135.870004][ T9506] veth1_vlan: entered promiscuous mode [ 135.943006][ T9715] netlink: 'syz.3.1433': attribute type 12 has an invalid length. [ 135.981017][ T9506] veth0_macvtap: entered promiscuous mode [ 136.001892][ T9506] veth1_macvtap: entered promiscuous mode [ 136.060555][ T9506] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.137911][ T9506] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.217802][ T3800] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.217864][ T3800] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.217906][ T3800] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.217934][ T3800] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.485633][ T4677] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 136.491122][ T6040] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.491183][ T6040] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.628126][ T6045] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.628161][ T6045] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.725404][ T4673] Bluetooth: hci0: command tx timeout [ 137.245905][ T9747] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1441'. [ 137.263933][ T9747] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1441'. [ 137.583880][ T9762] loop3: detected capacity change from 0 to 512 [ 137.593612][ T9762] EXT4-fs: Ignoring removed nobh option [ 137.598488][ T9762] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 137.647512][ T9762] EXT4-fs (loop3): 1 truncate cleaned up [ 137.659289][ T9762] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.090566][ T8172] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.290613][ T9772] loop3: detected capacity change from 0 to 2048 [ 138.322681][ T9772] EXT4-fs: Ignoring removed nobh option [ 138.364512][ T9775] ublk_batch_commit_io: dev 4 queue 0 io 0: commit failure -16 [ 138.369846][ T9772] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.382928][ T9775] ublk_batch_commit_io: dev 4 queue 0 io 0: commit failure -16 [ 138.737619][ T9783] loop8: detected capacity change from 0 to 1024 [ 138.814530][ T9786] i2c i2c-0: new_device: Instantiated device anx7411 at 0x2c [ 138.833549][ T9783] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.940128][ T9783] Invalid ELF header len 10 [ 139.109155][ T5520] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.270099][ T9800] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1451'. [ 139.383750][ T8172] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.576804][ T9808] loop2: detected capacity change from 0 to 1024 [ 139.624573][ T9808] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 139.702944][ T9808] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: comm syz.2.1455: lblock 0 mapped to illegal pblock 0 (length 1) [ 139.734943][ T9808] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 139.735009][ T9808] EXT4-fs (loop2): This should not happen!! Data will be lost [ 139.735009][ T9808] [ 139.790597][ T9819] loop7: detected capacity change from 0 to 1024 [ 139.821072][ T9821] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #15: comm iou-wrk-9808: lblock 0 mapped to illegal pblock 0 (length 1) [ 139.863607][ T9819] EXT4-fs: inline encryption not supported [ 139.966616][ T9506] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 139.970501][ T9506] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 140.191842][ T9827] loop9: detected capacity change from 0 to 4096 [ 140.194136][ T9819] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 140.267239][ T9827] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.417965][ T9819] EXT4-fs error (device loop7): ext4_map_blocks:833: inode #15: block 3: comm syz.7.1457: lblock 3 mapped to illegal pblock 3 (length 3) [ 140.445168][ T9819] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 140.445263][ T9819] EXT4-fs (loop7): This should not happen!! Data will be lost [ 140.445263][ T9819] [ 140.593783][ T9819] EXT4-fs error (device loop7): ext4_map_blocks:833: inode #15: comm syz.7.1457: lblock 0 mapped to illegal pblock 0 (length 3) [ 140.660026][ T9819] EXT4-fs error (device loop7): ext4_map_blocks:833: inode #15: block 8: comm syz.7.1457: lblock 8 mapped to illegal pblock 8 (length 8) [ 140.686777][ T9819] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 140.686866][ T9819] EXT4-fs (loop7): This should not happen!! Data will be lost [ 140.686866][ T9819] [ 140.889686][ T5802] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.079801][ T5290] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 141.081352][ T5290] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 141.161476][ T9848] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd32 [ 141.386658][ T9853] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1466'. [ 141.415516][ T9857] loop8: detected capacity change from 0 to 128 [ 141.496717][ T9857] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 141.795148][ T5520] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 141.847556][ T9872] loop2: detected capacity change from 0 to 7 [ 141.854144][ T9872] Dev loop2: unable to read RDB block 7 [ 141.855481][ T9872] loop2: unable to read partition table [ 141.863017][ T9872] loop2: partition table beyond EOD, truncated [ 141.863119][ T9872] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 142.124780][ T9881] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1476'. [ 142.124851][ T9881] netlink: 'syz.9.1476': attribute type 8 has an invalid length. [ 142.124884][ T9881] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1476'. [ 142.218764][ T9887] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1476'. [ 142.220955][ T9887] netlink: 'syz.9.1476': attribute type 8 has an invalid length. [ 142.223291][ T9887] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1476'. [ 142.531572][ T9896] loop3: detected capacity change from 0 to 128 [ 142.864509][ T8172] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 142.865302][ T8172] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 143.222315][ T9912] loop8: detected capacity change from 0 to 256 [ 143.312139][ T9912] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 143.381298][ T9920] binder: 9915:9920 ioctl c038586a 20000180 returned -22 [ 143.878367][ T9929] loop2: detected capacity change from 0 to 2048 [ 143.973935][ T9929] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.171854][ T3800] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.399985][ T9941] input: syz0 as /devices/virtual/input/input21 [ 144.533488][ T9506] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.665167][ T3800] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.750780][ T4677] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 144.754745][ T4677] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 144.759703][ T4677] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 144.777891][ T4677] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 144.780707][ T4677] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 145.232677][ T3800] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.273348][ T9967] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1503'. [ 145.274607][ T9967] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1503'. [ 145.290366][ T9967] netlink: 'syz.2.1503': attribute type 32 has an invalid length. [ 145.290394][ T9967] netlink: 424 bytes leftover after parsing attributes in process `syz.2.1503'. [ 145.663987][ T3800] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.398308][ T3800] bridge_slave_1: left allmulticast mode [ 146.398370][ T3800] bridge_slave_1: left promiscuous mode [ 146.398567][ T3800] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.415910][ T3800] bridge_slave_0: left allmulticast mode [ 146.415946][ T3800] bridge_slave_0: left promiscuous mode [ 146.416114][ T3800] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.810906][ T4677] Bluetooth: hci2: command tx timeout [ 147.135758][ T4673] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 147.147016][ T4673] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 147.155144][ T4673] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 147.160752][ T4673] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 147.166103][ T4673] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 147.387029][ T3800] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.436737][ T3800] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.441053][ T3800] bond0 (unregistering): Released all slaves [ 147.781168][T10034] loop2: detected capacity change from 0 to 512 [ 147.825525][T10034] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.945856][T10041] loop7: detected capacity change from 0 to 128 [ 148.007198][T10041] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 148.062039][T10034] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #18: comm syz.2.1518: corrupted inode contents [ 148.088110][T10034] loop2: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 148.099588][T10034] EXT4-fs (loop2): Remounting filesystem read-only [ 148.099645][T10034] EXT4-fs warning (device loop2): ext4_evict_inode:287: xattr delete (err -30) [ 148.235153][T10047] lvs 8-0:1.0: Bind LVS driver with SS root Hub only [ 148.263588][ T9506] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.263974][T10047] lvs 8-0:1.0: probe with driver lvs failed with error -22 [ 148.368781][ T5290] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 148.873484][T10070] binder: 10069:10070 ioctl c0306201 20000080 returned -14 [ 148.876836][T10070] binder: 10069:10070 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 148.880444][ T3800] hsr_slave_0: left promiscuous mode [ 148.882306][ T3800] hsr_slave_1: left promiscuous mode [ 148.889444][ T3800] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.889485][ T3800] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.889675][ T4673] Bluetooth: hci2: command tx timeout [ 148.902185][ T3800] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.902237][ T3800] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.025703][ T3800] veth1_macvtap: left promiscuous mode [ 149.025766][ T3800] veth0_macvtap: left promiscuous mode [ 149.025870][ T3800] veth1_vlan: left promiscuous mode [ 149.025953][ T3800] veth0_vlan: left promiscuous mode [ 149.210348][ T4673] Bluetooth: hci1: command tx timeout [ 149.469259][T10085] loop2: detected capacity change from 0 to 1024 [ 149.489735][T10085] EXT4-fs: test_dummy_encryption requires encrypt feature [ 150.056518][ T3800] team0 (unregistering): Port device team_slave_1 removed [ 150.092572][ T3800] team0 (unregistering): Port device team_slave_0 removed [ 150.316332][T10092] overlayfs: failed to verify origin (281/file1, ino=1522, err=-61) [ 150.406902][T10081] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1529'. [ 150.407148][T10081] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1529'. [ 150.962615][ T4673] Bluetooth: hci2: command tx timeout [ 151.039126][T10123] syzkaller0: entered promiscuous mode [ 151.040496][T10123] syzkaller0: entered allmulticast mode [ 151.148276][ T9948] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.150012][ T9948] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.152101][ T9948] bridge_slave_0: entered allmulticast mode [ 151.159546][ T9948] bridge_slave_0: entered promiscuous mode [ 151.178286][ T9948] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.178341][ T9948] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.178443][ T9948] bridge_slave_1: entered allmulticast mode [ 151.179130][ T9948] bridge_slave_1: entered promiscuous mode [ 151.283124][ T4673] Bluetooth: hci1: command tx timeout [ 151.330414][ T9948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.383845][ T9948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.437137][ T9948] team0: Port device team_slave_0 added [ 151.459139][ T9948] team0: Port device team_slave_1 added [ 153.803373][ T4673] Bluetooth: hci2: command tx timeout [ 153.833820][ T4673] Bluetooth: hci1: command tx timeout [ 156.836337][ T4677] Bluetooth: hci1: command tx timeout [ 174.025680][ T4684] Bluetooth: hci4: command 0x0406 tx timeout [ 177.602381][ C0] sched: DL replenish lagged too much [ 178.464258][ T4673] Bluetooth: hci3: command 0x0406 tx timeout [ 194.175020][ T1597] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.296395][ T1597] ieee802154 phy1 wpan1: encryption failed: -22 [ 249.753117][ T1597] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.492369][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 256.493709][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P4343/1:b..l [ 256.495257][ C0] rcu: (detected by 0, t=10502 jiffies, g=33577, q=666448 ncpus=1) [ 256.496628][ C0] task:udevd state:R running task stack:0 pid:4343 tgid:4343 ppid:1 task_flags:0x400140 flags:0x00800000 [ 256.498924][ C0] Call trace: [ 256.499511][ C0] __switch_to+0x2b0/0x6e0 (T) [ 256.500347][ C0] __schedule+0x1370/0x2d80 [ 256.501148][ C0] preempt_schedule_common+0xd4/0x190 [ 256.502117][ C0] preempt_schedule+0x60/0x78 [ 256.502921][ C0] _raw_spin_unlock_irqrestore+0x94/0x98 [ 256.503924][ C0] __wake_up_common_lock+0x5c/0x78 [ 256.504828][ C0] __wake_up_sync_key+0x20/0x2c [ 256.505676][ C0] sock_def_readable+0x208/0x6f4 [ 256.506529][ C0] __netlink_sendskb+0xa8/0xd0 [ 256.507354][ C0] netlink_sendskb+0x2c/0xdc [ 256.508140][ C0] netlink_unicast+0x2c0/0x7f8 [ 256.508972][ C0] netlink_sendmsg+0x648/0x948 [ 256.509829][ C0] __sock_sendmsg+0xc8/0x17c [ 256.510649][ C0] ____sys_sendmsg+0x3d0/0x6c8 [ 256.511510][ C0] ___sys_sendmsg+0x198/0x224 [ 256.512326][ C0] __sys_sendmsg+0x158/0x204 [ 256.513112][ C0] __arm64_sys_sendmsg+0x80/0x94 [ 256.513986][ C0] invoke_syscall+0x98/0x244 [ 256.514794][ C0] el0_svc_common+0xec/0x23c [ 256.515562][ C0] do_el0_svc+0x4c/0x5c [ 256.516279][ C0] el0_svc+0x64/0x260 [ 256.516971][ C0] el0t_64_sync_handler+0x48/0x148 [ 256.517917][ C0] el0t_64_sync+0x198/0x19c [ 256.518726][ C0] rcu: rcu_preempt kthread starved for 504 jiffies! g33577 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 256.520746][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 256.522509][ C0] rcu: RCU grace-period kthread stack dump: [ 256.523555][ C0] task:rcu_preempt state:R running task stack:0 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00000010 [ 256.525912][ C0] Call trace: [ 256.526468][ C0] __switch_to+0x2b0/0x6e0 (T) [ 256.527276][ C0] __schedule+0x1370/0x2d80 [ 256.528050][ C0] schedule+0x13c/0x20c [ 256.528764][ C0] schedule_timeout+0x13c/0x28c [ 256.529595][ C0] rcu_gp_fqs_loop+0x284/0x13c4 [ 256.530434][ C0] rcu_gp_kthread+0x148/0x230 [ 256.531262][ C0] kthread+0x304/0x3d4 [ 256.531967][ C0] ret_from_fork+0x10/0x20 [ 256.532766][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 256.533843][ C0] CPU: 0 UID: 0 PID: 4332 Comm: klogd Tainted: G L syzkaller #0 PREEMPT [ 256.535538][ C0] Tainted: [L]=SOFTLOCKUP [ 256.536312][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 256.538166][ C0] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 256.539612][ C0] pc : check_kcov_mode+0xc/0x54 [ 256.540485][ C0] lr : write_comp_data+0x38/0x84 [ 256.541389][ C0] sp : ffff80008eb26b90 [ 256.542099][ C0] x29: ffff80008eb26b90 x28: ffff0000da5a8000 x27: ffff80008eb26e80 [ 256.543523][ C0] x26: dfff800000000000 x25: ffff000174f85e98 x24: 0000000000000132 [ 256.544927][ C0] x23: ffff0000d3131d40 x22: 0000000000000007 x21: 0000000000010000 [ 256.546360][ C0] x20: 0000000000000132 x19: ffff800084c7b0b4 x18: 1fffe00035bc5428 [ 256.547737][ C0] x17: ffff800125379000 x16: ffff80008eb20000 x15: ffff800088bbd060 [ 256.549123][ C0] x14: 0000000085049ee4 x13: 00080aaaaaaaaaaa x12: ffff0000d3131d40 [ 256.550511][ C0] x11: ffff80008eb26b00 x10: 000000000000001f x9 : 0000000000000300 [ 256.551936][ C0] x8 : ffff0000d3131d40 x7 : ffff800084c7d1e8 x6 : 0000000000000000 [ 256.553369][ C0] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff800084c7b0b4 [ 256.554829][ C0] x2 : 0000000000000132 x1 : ffff0000d3131d40 x0 : 0000000000000003 [ 256.556316][ C0] Call trace: [ 256.556886][ C0] check_kcov_mode+0xc/0x54 (P) [ 256.557762][ C0] __sanitizer_cov_trace_const_cmp8+0x24/0x30 [ 256.558811][ C0] validate_xmit_skb+0x9f8/0x10ec [ 256.559669][ C0] __dev_queue_xmit+0x908/0x2bc0 [ 256.560552][ C0] ip_finish_output2+0xcd0/0x1274 [ 256.561453][ C0] __ip_finish_output+0x198/0x41c [ 256.562334][ C0] ip_finish_output+0x44/0x2fc [ 256.563157][ C0] ip_output+0x28c/0x400 [ 256.563906][ C0] ip_local_out+0x110/0x148 [ 256.564717][ C0] synproxy_send_tcp+0x3bc/0x568 [ 256.565577][ C0] synproxy_send_client_synack+0x3b0/0x640 [ 256.566601][ C0] nft_synproxy_eval_v4+0x16c/0x278 [ 256.567512][ C0] nft_synproxy_do_eval+0x2d8/0x4a4 [ 256.568444][ C0] nft_synproxy_eval+0x34/0x48 [ 256.569240][ C0] nft_do_chain+0x418/0x13c8 [ 256.570084][ C0] nft_do_chain_inet+0x284/0x3d4 [ 256.570954][ C0] nf_hook_slow+0xc8/0x224 [ 256.571730][ C0] NF_HOOK+0x1f0/0x398 [ 256.572442][ C0] ip_local_deliver+0x128/0x188 [ 256.573267][ C0] ip_rcv_finish+0x20c/0x230 [ 256.574068][ C0] NF_HOOK+0x308/0x398 [ 256.574778][ C0] ip_rcv+0x7c/0x9c [ 256.575461][ C0] __netif_receive_skb_one_core+0xc8/0x110 [ 256.576475][ C0] __netif_receive_skb+0x34/0x128 [ 256.577309][ C0] process_backlog+0x5f4/0x16f8 [ 256.578142][ C0] __napi_poll+0xb4/0x328 [ 256.578921][ C0] net_rx_action+0x5b0/0xc14 [ 256.579710][ C0] handle_softirqs+0x2ec/0xd98 [ 256.580572][ C0] __do_softirq+0x14/0x20 [ 256.581366][ C0] ____do_softirq+0x14/0x20 [ 256.582197][ C0] call_on_irq_stack+0x30/0x48 [ 256.583036][ C0] do_softirq_own_stack+0x20/0x2c [ 256.583916][ C0] __irq_exit_rcu+0x1ac/0x428 [ 256.584775][ C0] irq_exit_rcu+0x14/0x84 [ 256.585580][ C0] el1_interrupt+0x40/0x60 [ 256.586371][ C0] el1h_64_irq_handler+0x18/0x24 [ 256.587234][ C0] el1h_64_irq+0x6c/0x70 [ 256.587985][ C0] _raw_spin_unlock_irqrestore+0x44/0x98 (P) [ 256.588980][ C0] debug_check_no_obj_freed+0x2c8/0x3a4 [ 256.589939][ C0] __free_frozen_pages+0x4b8/0xbb8 [ 256.590830][ C0] free_frozen_pages+0x14/0x20 [ 256.591654][ C0] __free_slab+0x11c/0x1b4 [ 256.592506][ C0] free_slab+0x2c/0x154 [ 256.593246][ C0] discard_slab+0x48/0x90 [ 256.594005][ C0] __slab_free+0x1a0/0x1d0 [ 256.594797][ C0] ___cache_free+0x80/0x94 [ 256.595593][ C0] qlist_free_all+0xb4/0x120 [ 256.596413][ C0] kasan_quarantine_reduce+0x118/0x124 [ 256.597351][ C0] __kasan_kmalloc+0x2c/0xb4 [ 256.598183][ C0] __kmalloc_node_track_caller_noprof+0x434/0x6d4 [ 256.599324][ C0] kmalloc_reserve+0x118/0x214 [ 256.600188][ C0] __alloc_skb+0x230/0x610 [ 256.600969][ C0] alloc_skb_with_frags+0xb8/0x690 [ 256.601841][ C0] sock_alloc_send_pskb+0x740/0x850 [ 256.602774][ C0] unix_dgram_sendmsg+0x434/0x1078 [ 256.603679][ C0] __sock_sendmsg+0xc8/0x17c [ 256.604471][ C0] __sys_sendto+0x250/0x328 [ 256.605293][ C0] __arm64_sys_sendto+0xe4/0x104 [ 256.606176][ C0] invoke_syscall+0x98/0x244 [ 256.607000][ C0] el0_svc_common+0xec/0x23c [ 256.607826][ C0] do_el0_svc+0x4c/0x5c [ 256.608564][ C0] el0_svc+0x64/0x260 [ 256.609314][ C0] el0t_64_sync_handler+0x48/0x148 [ 256.610207][ C0] el0t_64_sync+0x198/0x19c [ 256.689610][ T4673] Bluetooth: hci0: command tx timeout [ 256.727519][ T1597] ieee802154 phy1 wpan1: encryption failed: -22