last executing test programs: 1m41.200584726s ago: executing program 1 (id=16): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x40, &(0x7f0000000480)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x20}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2}}, {@errors_remount}, {@nojournal_checksum}, {@journal_async_commit}, {@noauto_da_alloc}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@resgid, 0x32}]}, 0x0, 0x4e0, &(0x7f0000001a40)="$eJzs3d9rW9cdAPDvla0sP5zZYXvIAsvCkmGHLZIdL4nZQ7bB2J4C27L3zLNlYyxbxpKT2ITNYX/AYIy10Kc+9aXQP6BQ8ieUQqB9L21pKW3SPhTaRkVXUuI4UuwQWUqtzweOdO7Rvfqeo4uO7rn3cBVA3zoVEacj4kG1Wj0bEcON8kwjxWY91da7f+/WTC0lUa1e/SyJSOpltdXGtrznkcZmByPir3+K+EfyZNzy+sbidLFYWG0s5ytLK/ny+sa5haXp+cJ8YXlycuLi1KWpC1PjHWnnUERc/sNH///Pa3+8/Navbrx/7ZOxfyaN8ohH7ei0etOz6WfRNBgRq3sRrEcG0xYCAPB90DzO/3lEnI3hGEiP5gAAAID9pPrbofgmiagCAAAA+1YmnQObZHKNeQBDkcnkcvU5vD+Ow5liqVz55VxpbXm2Pld2JLKZuYViYbwxV3gksklteSLNP1o+v215MiKORcT/hg+ly7mZUnG21yc/AAAAoE8c2Tb+/3K4Pv7f4uueVQ4AAADonJFeVwAAAADYc8b/AAAAsP8Z/wMAAMC+9ucrV2qp2vz/69nr62uLpevnZgvlxdzS2kxuprS6kpsvlebTe/Yt7fR+xVJp5dexvHYzXymUK/ny+sa1pdLacuXawmN/gQ0AAAB00bGf3XkviYjN3xxKU82BXlcK6IrBZ1n5w72rB9B9A72uANAzz/T7D+wr2V5XAOi5ZIfX207eebvzdQEAAPbG6E9aX/8f2PHcwGamS1UE9ojzf9C/XP+H/uX6P/SvbAyEgTz0t51uAfr81/+r1WeqEAAA0HFDaUoyuYj0PMBQZDK5XMTRdEyQTeYWioXxiPhhRLw7nP1BbXki3TLZcc4wAAAAAAAAAAAAAAAAAAAAAAAAAFBXrSZRBQAAAPa1iMzHSXo3/4jR4TND288PHEi+Gk6fI+LGK1dfujldqaxO1Mo/f1heeblRfr4XZzAAAACA7Zrj9OY4HgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA66f69WzPN1M24n/4+IkZaxR+Mg+nzwchGxOEvkhjcsl0SEQMdiL95OyKOt4qf1KoVI41atIp/qMfxj3QgPvSzO7X+53etvn+ZOJU+t/7+XUx7qOfXvv/LPOz/BlrEr5Ud3WWME3ffyLeNfzvixGDr/qcZP2nT/5zeZfy//21jo91r1VcjRlv+/iSPxcpXllby5fWNcwtL0/OF+cLy5OTExalLUxemxvNzC8VC47FljP/+9M0HT2v/4TbxR3Zo/5ldtv/buzfv/aiezT7cPHkUf+x06/1/vE38TGP//6KRr70+2sxv1vNbnXz9nZNPa/9sm/bvtP/Hdtn+s3/59we7XBUA6ILy+sbidLFYWO3rzHN9GrXDoheiFS9mpva5vgDVaJn51x68c+3IvNft6kSmp90SAACwB54cAwMAAAAAAAAAAAAAAAAAAADd1o3biWW3xdxMHztx93wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgM75LgAA///6fNJN") clock_adjtime(0xffffffd3, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @empty, 0x9}, 0x1c) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r5 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r5, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0xffff, @private=0xe0000000}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000000000000000000020000"], 0x40}, 0xfffe) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x33c, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f0000000080)={0x0, 0x8, 0x2, {0x2, @sliced={0x0, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x9f9, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xffff, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x88b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40]}}}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f00000001c0)=@userptr={0x0, 0x2, 0x4, 0x408, 0x3, {}, {0x0, 0x1, 0x0, 0x0, 0xff, 0x14, "b9fb3c16"}, 0x1, 0x2, {0x0}, 0x7000000}) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80000, 0x0) 1m40.290401185s ago: executing program 1 (id=24): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x1f00, 0xe, 0x0, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380), 0x0, 0x0, 0xffffffff}, 0x50) 1m39.285712453s ago: executing program 1 (id=36): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)={0x48, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}]}, 0x48}}, 0x4) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00032cbd7000fbf7dbdf25020000000c00060000000000000000000c000800aa1200000000000008000100000000"], 0x34}}, 0x4000) syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x40102) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) mremap(&(0x7f000004f000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f000016c000/0x2000)=nil) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x490, 0x0, 0x6affffff, 0x3403000b, 0x320, 0x7, 0x3f8, 0x230, 0x230, 0x3f8, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0x2d8, 0x320, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x1, [{0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffc}, {}, {}, {}, {0x2}]}}, @common=@unspec=@time={{0x38}, {0x4, 0xfffffffd}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4f0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0x2000000000a, 0x2) 1m38.141939318s ago: executing program 1 (id=44): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) r1 = getpid() r2 = socket$inet(0x2, 0x4000000000000001, 0x0) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, 0xffffffffffffffff, 0x87f64000) setsockopt$sock_timeval(r2, 0x1, 0x43, &(0x7f0000abaff9), 0x10) r3 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCDFWD(r3, 0xb101, 0x0) r4 = syz_pidfd_open(r1, 0x0) setns(r4, 0x24020000) r5 = open_tree(r0, &(0x7f00000000c0)='\x00', 0x89901) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) move_mount(r5, 0x0, 0xffffffffffffff9c, 0x0, 0x274) 1m38.059245347s ago: executing program 1 (id=48): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) (async, rerun: 32) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)={0x44, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x18, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6f27b4e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) (async) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0x800, &(0x7f0000001000)=ANY=[], 0x1, 0x1c6, &(0x7f00000001c0)="$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") r4 = socket$inet_sctp(0x2, 0x4, 0x84) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000000)=0x7, 0x4) (async) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0xec, 0x0, 0x0, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) 1m37.206065113s ago: executing program 1 (id=59): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) shutdown(r1, 0x0) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000040)={'ip6_vti0\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x3, 0x0, 0x2b, @empty, @empty, 0x8, 0x10, 0x400200, 0x7}}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r4], 0x78}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r4, &(0x7f00000006c0)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x3, 0x0, 0x2b}, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, @val={@void, {0x8100, 0x6, 0x0, 0x1}}, {@ipv4={0x800, @gre={{0x10, 0x4, 0x0, 0x4, 0x1f7, 0x67, 0x0, 0x4, 0x2f, 0x0, @multicast2, @broadcast, {[@timestamp_addr={0x44, 0x2c, 0x82, 0x1, 0xc, [{@loopback, 0x1}, {@private=0xa010101, 0x8}, {@remote, 0x81}, {@broadcast, 0x5}, {@empty, 0x800}]}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x85, 0x2, [], "b639f7ee71fdd234ac4f1aaae39122fcbdb0abe2377ae4a3693823246fb0825baccb329e1a884a7c58df3703429719233d5b507f1117afd70405bd06932939f4d7ca11e669c260a96b9a146e166a22caaba23792a184afbd299d387b96bfd79f062e4aac92d61be69cb3632e7b9899de6360fa610b997a0095bb96b5239c4d2ed9f1e18ee8"}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [0xb, 0x5], "761bdd2b019f2364e72eaa4b9c35188bb9f4869d7815466cb18a480a36c1e4380b41"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "287c1697c35e33102f3ef733c2271b787610b70922e75aeeb3f0a2bf12988f624aa2e9c3afef198f09dacad82ee6ff2833c3493eb4bc84a4333e12b2515c055b8ca6c8e32a36c73c40bf4be0fa058f8d11e409dc6c1c8d695ef82262cbb9acc9990a75e99ac36f"}, {0x8, 0x88be, 0x2, {{0x3, 0x1, 0xb, 0x1, 0x0, 0x2, 0x1, 0x8}, 0x1, {0x8}}}, {0x8, 0x22eb, 0x3, {{0x1, 0x2, 0x1, 0x1, 0x0, 0x3, 0x7, 0x6}, 0x2, {0x5, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x2, "45ff188e5c9c4c2154f0ca5f40aa008fea56464e578bd1707557b44f558bf3735fdb476ce4d2d93f93b91d765f8a4db041e25e5ce69a6b3823db619020f432260c812f7850e4040c91c68dc846435450406b906e03d5fa4d468ee1140c52e7437a"}}}}}}}, 0x217) sendmmsg$sock(r1, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) r7 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r7, 0x8) 1m37.128218544s ago: executing program 32 (id=59): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) shutdown(r1, 0x0) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000040)={'ip6_vti0\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x3, 0x0, 0x2b, @empty, @empty, 0x8, 0x10, 0x400200, 0x7}}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r4], 0x78}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r4, &(0x7f00000006c0)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x3, 0x0, 0x2b}, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, @val={@void, {0x8100, 0x6, 0x0, 0x1}}, {@ipv4={0x800, @gre={{0x10, 0x4, 0x0, 0x4, 0x1f7, 0x67, 0x0, 0x4, 0x2f, 0x0, @multicast2, @broadcast, {[@timestamp_addr={0x44, 0x2c, 0x82, 0x1, 0xc, [{@loopback, 0x1}, {@private=0xa010101, 0x8}, {@remote, 0x81}, {@broadcast, 0x5}, {@empty, 0x800}]}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x85, 0x2, [], "b639f7ee71fdd234ac4f1aaae39122fcbdb0abe2377ae4a3693823246fb0825baccb329e1a884a7c58df3703429719233d5b507f1117afd70405bd06932939f4d7ca11e669c260a96b9a146e166a22caaba23792a184afbd299d387b96bfd79f062e4aac92d61be69cb3632e7b9899de6360fa610b997a0095bb96b5239c4d2ed9f1e18ee8"}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [0xb, 0x5], "761bdd2b019f2364e72eaa4b9c35188bb9f4869d7815466cb18a480a36c1e4380b41"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "287c1697c35e33102f3ef733c2271b787610b70922e75aeeb3f0a2bf12988f624aa2e9c3afef198f09dacad82ee6ff2833c3493eb4bc84a4333e12b2515c055b8ca6c8e32a36c73c40bf4be0fa058f8d11e409dc6c1c8d695ef82262cbb9acc9990a75e99ac36f"}, {0x8, 0x88be, 0x2, {{0x3, 0x1, 0xb, 0x1, 0x0, 0x2, 0x1, 0x8}, 0x1, {0x8}}}, {0x8, 0x22eb, 0x3, {{0x1, 0x2, 0x1, 0x1, 0x0, 0x3, 0x7, 0x6}, 0x2, {0x5, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x2, "45ff188e5c9c4c2154f0ca5f40aa008fea56464e578bd1707557b44f558bf3735fdb476ce4d2d93f93b91d765f8a4db041e25e5ce69a6b3823db619020f432260c812f7850e4040c91c68dc846435450406b906e03d5fa4d468ee1140c52e7437a"}}}}}}}, 0x217) sendmmsg$sock(r1, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) r7 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r7, 0x8) 1m22.380635628s ago: executing program 2 (id=233): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000004a800915c2b9f14600"/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffb0}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x600}}, [], {{0x5, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r1}, 0x20) r4 = socket(0x10, 0x803, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r5, 0x8912, &(0x7f00000001c0)) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r2, 0x0, 0x5e, 0xb8, &(0x7f00000006c0)="c8660f5d1ca9ab7faa2ab8fb1211326f7f81577cc3d2e3cfbad59b4605203847b780f9b0ae430cb1bb00918a0ba9aca35d038b87d2999d00b8dc012e70c9cd28ba42ef015a3c614628f5b7c79d432060219b4e9afdff992b4b95c3366060", &(0x7f0000000a80)=""/184, 0x2e77, 0x0, 0x9a, 0x76, &(0x7f0000000b40)="08656a270bd67bbdffd4015a6be024086c097719344301fb712b2f575031145d4a7921d719c9440901db433c596bdd6f96278d09001b7af1c2ed275a325c43270ffed0e2f7703388c472f3666a327cef2f5254956a3856acc6b393ac8af6a8f89754c533dd778d647678b9e0fa173dde62bdc2ff571b355eafc5ef05f6113ee5427cdb50df01265ed264fc042b9aaeb76935e51a20333b0071b3", &(0x7f0000000c00)="8b865f0008a3b4f4112a544581e443bd62faa345861e98acdcb8b0df3a74fa7d261fabfcb5b5db755d4aa1109af6b9e3e7377d8a6fdc0b4c7af4e217f7b331093683458f11e2384eca3215be80a42e2a66635278e46d9bc957286f2c308558d985e568afabe3df07449eecdbbf78a93e04d5bfae4af0", 0x5, 0x0, 0xffff}, 0x50) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=@delqdisc={0x74, 0x25, 0x400, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xc, 0xf}, {0xffff, 0xfff1}, {0x9, 0xb}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x4}}, @TCA_RATE={0x6, 0x5, {0x80, 0x8}}, @qdisc_kind_options=@q_atm={0x8}, @qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x81}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x78b}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xa6}]}, 0x74}}, 0xc840) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newtfilter={0x74, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x6}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_u32={{0x8}, {0x48, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_FLAGS={0x8, 0xb, 0x1}, @TCA_U32_FLAGS={0x8, 0xb, 0x1}, @TCA_U32_MARK={0x10, 0xa, {0x0, 0x9}}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r7) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="e1ff0040000000000000010000000800010002000000340500030005000000050003000000000005000300010000000500030005000000050003000200000018000300050000000800020002000000"], 0x58}, 0x1, 0x0, 0x0, 0xc082}, 0x20004080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r7, &(0x7f00000007c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000780)={&(0x7f00000009c0)={0x88, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_DEVICE={0x30, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x3}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x1ff}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_SEC_DEVICE={0x1c, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x1}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x5}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x4000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_tracing={0x1a, 0x1e, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x8001}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffa}]}, &(0x7f00000003c0)='GPL\x00', 0x7ff, 0x47, &(0x7f0000000400)=""/71, 0x41000, 0x40, '\x00', r6, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x4, 0x2, 0x5c77, 0x81}, 0x10, 0x2768, 0xffffffffffffffff, 0x1, &(0x7f00000004c0)=[r0], &(0x7f0000000500)=[{0x5, 0x5, 0xc, 0x5}], 0x10, 0x9}, 0x94) 1m22.379932894s ago: executing program 2 (id=234): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r0, 0x5402, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000001c0)=0x716) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x6, 0x6, 0x40000002, 0x47, 0x19, "d206000094f3ffffd51930f9000100"}) 1m22.355716428s ago: executing program 2 (id=235): set_mempolicy(0x2, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newqdisc={0x50, 0x24, 0x800, 0x70bd2a, 0xfffffffc, {0x0, 0x0, 0x0, r2, {0x9, 0x1}, {0xffff, 0xffff}, {0x16}}, [@qdisc_kind_options=@q_red={{0x8}, {0x24, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x7, 0x81, 0xc, 0xb, 0x14, 0x5}}, @TCA_RED_FLAGS={0xc, 0x4, {0x7, 0x8}}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008011}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000001900050017000000000800020000000000"], 0x24}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getownex(r5, 0x10, &(0x7f00000000c0)) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) r7 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="4e0a0000000000006111740000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, r7}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x3214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x82000, 0xa1) getdents64(r8, 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r9, 0x100, 0x0) getdents64(r9, 0xfffffffffffffffe, 0x29) 1m21.433455234s ago: executing program 2 (id=249): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@errors_remount}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file7\x00', 0x21c0, 0x103) r0 = socket(0x2, 0x80805, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x4}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) write$FUSE_NOTIFY_RESEND(r1, &(0x7f0000000000)={0x14}, 0x14) fallocate(r1, 0x0, 0x1, 0x8ffff) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x4000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r2, r2, 0x0, 0xe3aa6ea) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={r5, 0x2, 0x82c8, 0x9d, 0x1ff, 0x401}, &(0x7f00000000c0)=0x14) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setregset(0x4205, r6, 0x401, &(0x7f0000000000)={0x0}) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(r7, 0x8, &(0x7f0000000240)=0x2) sched_setparam(r7, &(0x7f0000000000)=0x1) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000600)={0x8000, &(0x7f0000000000), &(0x7f0000000240), &(0x7f0000000300), {0xc}, &(0x7f0000000440)=""/157, 0x9d, &(0x7f0000000500)=""/115, &(0x7f0000000580)=[r6, r7, 0xffffffffffffffff, 0x0], 0x4, {r8}}, 0x58) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x4, 0x400, 0x4, 0x1}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) 1m21.248997946s ago: executing program 2 (id=250): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00') pread64(r1, &(0x7f0000000080)=""/102356, 0x18fd4, 0x1c) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x40, 0x0, {0x0, 0x0, 0x600, r2, 0x484, 0x1406}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x3}]}, 0x41}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f0000019140)={'security\x00', 0xcf, "6b02fdcb94921f1ec544f78d7d1ce54e8be36f652f9eb6bedf58001f15b5811a42074ca5244296af4cfc19693620425fccd68c3fa41eb4c23c6868aa48593b8cb6832833319469a6c17565e0a3c7e5b319285edcff92e09c8d79d14ee45e891bd72d41377eb05fabf3269ae95525bddb9a0ba33fd4745a98b7a71223eb72a09095c26ce863647d2960da3dcd75519f50bbca1426562a2e922c2c11e5aced5f1a03f4dc389af85efbc0b769ae9c2c0a91c297ffd1b7b55cbc05d98ce966abcd4e5ee46971abee76690fcd3aa5d6aec8"}, &(0x7f0000019240)=0xf3) 1m20.877032315s ago: executing program 2 (id=254): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) lsm_set_self_attr(0x64, &(0x7f0000000280)={0x0, 0x1, 0x8e, 0x6e, "5fdda4ba65e4219e42293773a5b57e75f5f7d5d4ad2a3b63bcb1585bffc2847ebb0da6411c55cf5beb10aeda9e8f9ccd7e7d27e3a1c7ac63f93ed22968491c7025acde2b21b6f64f2f81c2f9f5bc41d75e41cf77e6359c4d08756b34d19f59decd17e636ad5fee153bd95017c006"}, 0x20, 0x0) fallocate(r2, 0x0, 0x0, 0x8ffff) 1m20.866477631s ago: executing program 33 (id=254): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) lsm_set_self_attr(0x64, &(0x7f0000000280)={0x0, 0x1, 0x8e, 0x6e, "5fdda4ba65e4219e42293773a5b57e75f5f7d5d4ad2a3b63bcb1585bffc2847ebb0da6411c55cf5beb10aeda9e8f9ccd7e7d27e3a1c7ac63f93ed22968491c7025acde2b21b6f64f2f81c2f9f5bc41d75e41cf77e6359c4d08756b34d19f59decd17e636ad5fee153bd95017c006"}, 0x20, 0x0) fallocate(r2, 0x0, 0x0, 0x8ffff) 34.022005173s ago: executing program 3 (id=693): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000240)={[{@orlov}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000008c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x3) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000019c0)={0x28, 0x10, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @fd=r7}, @nested={0x8, 0x1a, 0x0, 0x1, [@typed={0x4, 0x2}]}]}, 0x28}], 0x1}, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x4, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180), 0x51, 0x0, &(0x7f0000000580)="6db3a9bb28c65b775a0aec6c586e7e4f990c3a2072e0906f1c694f84b7c7af5e8fb210fcf948319ccd188bab0ff6953d75847cf3f7b090f4cba4c491a24152ae1c577c8d9988ddd07ac1ef018a57726f76"}) dup3(r1, r3, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101041, 0x66) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000140)) r9 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x101042, 0x65) pwrite64(r9, &(0x7f0000000000)='2', 0x1, 0x4fed0) 33.11783107s ago: executing program 3 (id=705): setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="000202"], 0x18) bind$netlink(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20001007f"], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001300000000000000000000000fe8000000000000000000000000000aa4e220000000000000a000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) 32.215337642s ago: executing program 3 (id=714): syz_read_part_table(0x1052, &(0x7f0000001740)="$eJzsz8GtwjAQBNBx4uQffwuUQhNUQCFAO7TAkRs1IRk5RCkBOLx3sHZWo5Ucvqqck+z79Ldu2ikZ+nB552lJ99ujltS107t1uzEl7X+sSelj0sZlPWdOnu24lXpOdqW/w3LgcP3UPwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgl70CAAD//+EqCuo=") (async) syz_read_part_table(0x1052, &(0x7f0000001740)="$eJzsz8GtwjAQBNBx4uQffwuUQhNUQCFAO7TAkRs1IRk5RCkBOLx3sHZWo5Ucvqqck+z79Ldu2ikZ+nB552lJ99ujltS107t1uzEl7X+sSelj0sZlPWdOnu24lXpOdqW/w3LgcP3UPwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgl70CAAD//+EqCuo=") ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000040)={0x1, 0x5, 0x4}) 31.82486287s ago: executing program 3 (id=717): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x18, r1, 0x1, 0x0, 0x25dfdbfd, {0x1b}, [@HEADER={0x4}]}, 0x18}}, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x8, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRES32=r1], 0x3, 0x122e, &(0x7f0000002580)="$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") pwritev2(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000030000000000000003"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40084}, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregset(0x4205, r2, 0x403, &(0x7f0000000000)={0x0}) 31.624596646s ago: executing program 3 (id=722): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) (async) syz_ublk_setup_queues(r7, r5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0xc8}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x668a, 0x200, 0x1100000, 0x4, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x800, 0x0, 0x145, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x20, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2, 0xfffffffd, 0x9d7c}}], 0x1, &(0x7f0000001000)={0x2e, 0x4c, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r4, '\x00', {0xfffd, 0x5, 0x0, 0x0}}, 0x0) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ftruncate(r0, 0x7) (async) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 31.275422928s ago: executing program 3 (id=726): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000007b080000000000007b8af8ff000000009408000000001700638af0ff000000001fa900000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="bb8ca1c1d740ac0196bcb37ac5480d6f6321581f14bd575d1293689ae3ca46d43064171bd6b765dccaca759a9f671ddca80dc6f59e35e88157c2a000fe07c759f22242232f9a9f6114302b9ed66541ec01e2da3d89fb81922d73e43015b6ce6eec676ccd3ebaf8e372d679bb21d34b11d7386701f6f5687a1f3455b285b94e1b4e1ed477deda62a9ed59f864781d1e744ab694840851c0827c1bf9e5728d6ec7735b883f966d07fcd4727608a05be53cb0c5d415923f04df", @ANYRES32=r0], &(0x7f0000000080)='GPL\x00', 0xb, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 31.192087184s ago: executing program 34 (id=726): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000007b080000000000007b8af8ff000000009408000000001700638af0ff000000001fa900000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="bb8ca1c1d740ac0196bcb37ac5480d6f6321581f14bd575d1293689ae3ca46d43064171bd6b765dccaca759a9f671ddca80dc6f59e35e88157c2a000fe07c759f22242232f9a9f6114302b9ed66541ec01e2da3d89fb81922d73e43015b6ce6eec676ccd3ebaf8e372d679bb21d34b11d7386701f6f5687a1f3455b285b94e1b4e1ed477deda62a9ed59f864781d1e744ab694840851c0827c1bf9e5728d6ec7735b883f966d07fcd4727608a05be53cb0c5d415923f04df", @ANYRES32=r0], &(0x7f0000000080)='GPL\x00', 0xb, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 4.121604097s ago: executing program 6 (id=1051): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000068a000000000000040000001801000020696c2500000000002020207b1ad8ff00000000bfa10000fffffff3070100000400ffffb702000008000000b703000002000000850000002f00000095"], &(0x7f0000000340)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100}, 0x94) 3.988985939s ago: executing program 6 (id=1052): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r3 = dup(r1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000740)='team_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000014c0)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x2, 0xfffc, 0xe652, 0x2, 0x85, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0x5, @empty, 0xb055}}, 0xff80, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 3.903101884s ago: executing program 6 (id=1053): setresgid(0xee00, 0xee01, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000002c0)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r1, &(0x7f0000000080)='\x00', 0x1, 0x8081, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000100)={0x7, 0x84, 0x7, 0x5, 0x5, 0xfd, 0x0, 0x0, 0xfd, 0x5, 0x3, 0x0, 0xff}, 0xe) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x101000, 0x107) getdents64(r5, &(0x7f0000000f80)=""/4096, 0x1000) recvmmsg(r1, &(0x7f0000000280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/165, 0xb5}, 0x8001}], 0x400000000000214, 0x10142, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x4c, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x3b}}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) setgroups(0x0, 0x0) setuid(0xee00) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) 2.968964091s ago: executing program 6 (id=1062): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000080)='./file0/../file0\x00', r0, &(0x7f0000000180)='./file0\x00', 0x346) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) move_mount(r0, &(0x7f0000000080)='./file0/../file0\x00', r0, &(0x7f0000000180)='./file0\x00', 0x346) (async) 2.899011471s ago: executing program 6 (id=1064): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) semctl$SEM_STAT(0xffffffffffffffff, 0x3, 0x12, &(0x7f0000000040)=""/62) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0) capset(0x0, 0x0) chdir(0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x24044080) 2.579886134s ago: executing program 6 (id=1069): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xc}, 0x10) (async) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0xfffffffd, 0x10000, 0xfffffffd, 0x0, 0x0, 0xdfb}, 0x1c) (async, rerun: 64) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x8000000000000000}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x6, 0xb1}}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x17, 0xb, &(0x7f0000000080)=ANY=[@ANYRES64=r1], &(0x7f0000000140)='GPL\x00', 0xd, 0x0, 0x0, 0x40f00, 0xa}, 0x94) 2.477222691s ago: executing program 35 (id=1069): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xc}, 0x10) (async) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0xfffffffd, 0x10000, 0xfffffffd, 0x0, 0x0, 0xdfb}, 0x1c) (async, rerun: 64) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x8000000000000000}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x6, 0xb1}}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x17, 0xb, &(0x7f0000000080)=ANY=[@ANYRES64=r1], &(0x7f0000000140)='GPL\x00', 0xd, 0x0, 0x0, 0x40f00, 0xa}, 0x94) 2.428765838s ago: executing program 5 (id=1070): getpriority(0x1, 0xffffffffffffffff) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r4) r5 = syz_open_dev$vim2m(&(0x7f0000000140), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x85}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000080)=0x2) r6 = socket(0xa, 0x3, 0x87) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x881, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x3a) r8 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x37, 0x30, 0x4e, 0x3a, 0x33]}}}, 0x4e}], [{@subj_user={'subj_user', 0x3d, '#%\x1bW\xec\xc1\xf4\xd4/\xd6\xb1\x1dx\x89\xbe*!\xa6$\x01\xd1\x0fA\xf9|\xdd\x17\xc3=\x00\x98\x85h\xdf&k\x96\xc9\xf6[=I\xfe\xcc\xd5\xf7\x85\xf0\xda4\xb8\xb5\'2\xc1F\x12\xe4\xb2\xcdp\x86\xf4B\xed\xb7\xdfJ\x9b\xc5\x1f\xb9\xf8\xd0\x85'}}, {@dont_measure}]}) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r8, 0x0, 0x0) 2.350087681s ago: executing program 5 (id=1071): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, &(0x7f0000000140)={0x14, {{0x29, 0x0, 0x3dfffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}}}, 0x88) socket$nl_route(0x10, 0x3, 0x0) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r1 = socket$inet(0x2, 0x800, 0x7fffffff) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300)=0x5, 0x4) sendto$inet(r1, 0x0, 0x0, 0x200007f9, &(0x7f0000000280)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r1, &(0x7f0000000040)="ee", 0xffffffffffffff75, 0x20004010, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000080)=@abs={0x0, 0x0, 0x4e1f}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x0, 0x48800) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$FIOCLEX(r4, 0x5451) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r1, 0x0, r5, 0x0, 0x7fffffff, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r6, 0x0, 0x1, &(0x7f0000000000)=0xab7, 0x4) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_TIOCINQ(r7, 0x541b, 0x0) 1.012729116s ago: executing program 5 (id=1077): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0) close(r1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000040)={r3, 0xd2}, &(0x7f0000000100)=0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48800}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x8, 0x6}, {}, {0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xffffff05}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) r11 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r12, {0xffff, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a0d6}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xf5, 0x0, 0x4, 0xb, 0x3}, 0x2f}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x40) r13 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r13, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r13, &(0x7f0000000300)={&(0x7f0000000280)=@xdp={0x2c, 0x0, r12, 0x18}, 0x80, &(0x7f00000034c0)=[{&(0x7f00000001c0)="27030200faff14000e0005004014c10200000006", 0x14}, {&(0x7f00000022c0)="ffc9ace87aade11690dd52a158e0b1c49686ce569fbf520db4ca", 0x1a}], 0x2}, 0x8000) 781.584487ms ago: executing program 0 (id=1081): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) openat2(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)={0x8400, 0x58, 0x20}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) r2 = getpid() prctl$PR_GET_IO_FLUSHER(0x4) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan1\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, r4, 0x405, 0x70bd27, 0x25dfdbfb, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000401}, 0x4c004) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000440)={0x0, 0xa1ff, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) 642.216954ms ago: executing program 7 (id=1084): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x150, 0x18, 0x713, 0x0, 0x25dfdbff, {{@in=@multicast1, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in6=@private0, 0x4d2, 0x32}, @in6=@private2, {0x5, 0x0, 0x8, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x100, 0x1}, {0x6}, 0x70bd2c, 0x3509, 0xa, 0x4, 0x0, 0x50}, [@algo_aead={0x5e, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x90, 0x80, "210466d38547aa140db9a200000000c538c7"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x2014) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) syz_open_dev$dri(0x0, 0x3, 0x301002) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$netlink(0x10, 0x3, 0xf) fchdir(0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000040000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="0000000001000000000000000000000030a244f7f039a14200000000"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008800c00014000000000000000090c000240000000000018ab6e14000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 618.055493ms ago: executing program 4 (id=1085): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4010) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x1, 0x68) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x6, 0x0, 0x3}}, 0x30) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r1, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x30}, 0x1, 0x0, 0x0, 0x805}, 0x20008040) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mlockall(0x7) setresuid(0xee00, 0xee00, 0x0) io_setup(0x6, &(0x7f0000000880)) ioctl$PPPIOCUNBRIDGECHAN(r4, 0x7434) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x201899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x18f881, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711069000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) 541.832994ms ago: executing program 0 (id=1086): setresgid(0xee00, 0xee01, 0x0) setgroups(0x0, 0x0) setuid(0xee00) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x5, &(0x7f00000006c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffbff}, [@call={0x85, 0x0, 0x0, 0x17}, @call={0x85, 0x0, 0x0, 0x4d}]}, &(0x7f0000000680)='GPL\x00', 0x3}, 0x94) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r1, 0xff, 0x24, &(0x7f0000002d80)="f0c46000", 0x4) syz_emit_ethernet(0x46, &(0x7f0000000780)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6000000000103afffe8000000000000000000000000000bbff02000000000000000000000000000186"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="1d1b00ba8d13cdea2aac8a25ec05", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001200), 0x8a400, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r5 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)="e0", 0x1, r5) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)) add_key$user(&(0x7f00000000c0), &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000002c0)='(', 0x1, r5) ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x110e22fff6) close(r3) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000000)={0x4000200d}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xe, 0x4, &(0x7f0000000340)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) statx(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x8, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee01}}, './file0\x00'}) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r10, &(0x7f0000001e00)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r10, &(0x7f0000004300)="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", 0x2000, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x130, 0x0, 0x10001, {0x3ffffffffffffff8, 0xfffffff7, 0x0, '\x00', {0x2fff, 0x0, 0x8000000000010000, 0x906, r11, r12, 0x1000, '\x00', 0x6, 0xfffffffffffffff3, 0x81, 0xffffffffffffffff, {0xa, 0x3ff}, {0x6, 0xffffffff}, {0x5}, {0xffffffffe, 0xa03}, 0x80008004, 0x9, 0xfffffffe, 0x5}}}}) setgroups(0x6, &(0x7f0000000240)=[r2, r8, 0xee00, r9, r12, 0xee01]) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) 489.886188ms ago: executing program 4 (id=1087): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff0300000800090001000000080007000000000014003500626f6e6430"], 0x60}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000054) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x18bdb, 0x325967a866143452) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000040), 0x2, r4}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000580)={0x401, 0x1, &(0x7f0000000180)=[r4], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r6, r5, r5], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) fallocate(r1, 0x3, 0x0, 0xffffffff000) r7 = socket(0x10, 0x3, 0x0) rt_sigprocmask(0x2, &(0x7f0000000200)={[0xfffffbfd]}, 0x0, 0x8) r8 = gettid() r9 = getpid() r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x543}, {0x7, 0x7fffffffffffffff}, {}, 0x70bd2c, 0x3500, 0x2, 0x4, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x2e}}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) rt_tgsigqueueinfo(r9, r8, 0x5, &(0x7f0000000400)={0x2, 0xffffffff, 0xa}) rt_tgsigqueueinfo(r9, r8, 0x1b, &(0x7f0000000280)={0xc, 0x0, 0x4}) rt_sigprocmask(0x2, &(0x7f00000001c0)={[0x7]}, 0x0, 0x8) sendmmsg(r7, &(0x7f0000000000), 0x400000000000235, 0x0) 488.912609ms ago: executing program 0 (id=1088): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) prlimit64(0x0, 0xc, &(0x7f0000000000)={0xfffffffffffffffc, 0x248}, 0x0) dup(r0) 487.677387ms ago: executing program 7 (id=1089): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000068a000000000000040000001801000020696c2500000000002020207b1ad8ff00000000bfa1000000200000070100000400ffffb702000008000000b703000002000000850000002f00000095"], &(0x7f0000000340)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100}, 0x94) 432.625122ms ago: executing program 5 (id=1090): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000000, &(0x7f0000000000), 0x3, 0x458, &(0x7f0000000a80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @d}}) symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') listen(0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_QUERY(0xffffffffffffffff, 0x23, &(0x7f0000002f40)=[{&(0x7f00000025c0)={0x0, &(0x7f0000002580)="81", 0x3, 0x1}, 0x0, 0x1}], 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x401, 0x70bd26, 0x25dfdbfe, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000019008111e0020f060d8107040a60000000000000001455a12a0009000a000699e3ffffff14000500fe80817806000567b8b7b94002000009080016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b61602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r2, @ANYRESDEC=r2, @ANYRES16], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x50) r3 = gettid() sched_setscheduler(r3, 0x6, &(0x7f0000000400)=0x1) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket(0x10, 0x803, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r6) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r8 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) write(r8, &(0x7f0000000100), 0xca800) ioctl$vim2m_VIDIOC_STREAMOFF(r8, 0x40045612, &(0x7f0000000000)=0x3) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x437, 0x70bc27, 0x0, {0x0, 0x0, 0x0, r7, 0x50561, 0x20}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg(r4, &(0x7f0000000340)=[{{&(0x7f00000002c0)=@xdp={0x2c, 0xa888, r7, 0x7}, 0x14, 0x0}}], 0x1, 0x80) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000000000000000000000080012000200020000000000000000001000320003000000000000000000000010003c00010000000000000000000000fc020000000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) set_mempolicy(0x6005, &(0x7f0000000480)=0xfffffffffffffffb, 0xffd) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@gettfilter={0x4c, 0x2e, 0x800, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xf, 0x6}, {0x9, 0x10}, {0x2, 0x2}}, [{0x8, 0xb, 0x7a54153e}, {0x8, 0xb, 0x7fff}, {0x8, 0xb, 0xfff}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000015}, 0x840) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) 432.222617ms ago: executing program 0 (id=1091): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="700000001000010025bd7000fddbdf2500000000", @ANYRES32=r2, @ANYBLOB="380100005f0202002c001280110001006272696467655f736c61766500000000140005800500090000000a00050008000000000008000a"], 0x70}, 0x1, 0x0, 0x0, 0x8001}, 0x40040c4) 431.712029ms ago: executing program 7 (id=1092): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x8000) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file0\x00', 0x3000490, &(0x7f0000000180)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, '?'}}, {@smackfsroot={'smackfsroot', 0x3d, 'ext4\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, '[,*^)'}}, {@subj_role={'subj_role', 0x3d, ',-Fk'}}, {@subj_user={'subj_user', 0x3d, 'memory.events.local\x00'}}, {@subj_role={'subj_role', 0x3d, ')'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'ext4\x00'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$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") 365.63461ms ago: executing program 7 (id=1093): r0 = socket(0x2, 0x80000, 0x80001) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffdd, &(0x7f0000000280)={&(0x7f0000000180)=@setlink={0x30, 0x13, 0x1, 0x70bd29, 0x25dfd9fc, {0x0, 0x0, 0x0, r2, 0x12a06, 0x409}, [@IFLA_CARRIER={0x5, 0x21, 0xe}, @IFLA_MASTER={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) 363.443612ms ago: executing program 0 (id=1094): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f00000005c0), 0x4, 0x43a, &(0x7f0000000780)="$eJzs28tvG0UYAPBv13FKXySU8ugDCBRExCNp0gI9cAGBxAEkJDiUY0jSqtRtUBMkWlUQECpHVIk74ojEX8AJLgg4IXGFO6pUoVxaOBmtvZs4jp0mwY5L/ftJm8zsjjPzeXbs2Z1sAH1rJPuRROyJiN8jYqieXV1gpP7r5tLl6b+XLk8nUa2+9VdSK3dj6fJ0UbR43e48M5pGpJ8lcahFvfMXL52dqlRmL+T58YVz74/PX7z07JlzU6dnT8+enzxx4vixiReen3yuI3Fmbbpx8KO5wwdee+fqG9Mnr77787dJEX9THB0yst7BJ6rVDlfXW3sb0slADxvCppQiIuuucm38D0UpVjpvKF79tKeNA7qqWq1Wd7c/vFgF7mBJbLTk2fzzArgzFF/02fVvsW3T1OO2cP2l+gVQFvfNfKsfGYg0L1Nuur7tpJGIOLn4z1fZFt25DwEAsMr32fznmVbzvzTubyh3d742NBwR90TEvoi4NyL2R8R9EbWyD0TEg5usv3mRZO38J722pcA2KJv/vZivba2e/xWzvxgu5bm9tfjLyakzldmj+XsyGuUdWX5inTp+eOW3L9oda5z/ZVtWfzEXzNtxbWDH6tfMTC1M/ZeYG13/JOLgQKv4k+WVgCQiDkTEwS3Wceapbw63O9Yu/vJG/nAH1pmqX0c8We//xWiKv5Csvz45fldUZo+OF2fFWr/8euXNdvXfuv+7K+v/XS3P/+X4h5PG9dr5zddx5Y/P217TbPX8H0zerqUH830fTi0sXJiIGExerze6cf/kymuLfFE+i3/0SOvxvy9W3olDEZGdxA9FxMMR8Uje9kcj4rGIOLJO/D+9/Ph7W4+/u7L4ZzbV/yuJwWje0zpROvvjd6sqHd5M/Fn/H6+lRvM9G/n820i7tnY2AwAAwP9PGhF7IknHltNpOjZW/3/5/bErrczNLzx9au6D8zP1ZwSGo5wWd7qGGu6HTuSX9UV+sil/LL9v/GVpZy0/Nj1Xmel18NDndrcZ/5k/S71uHdB1nteC/mX8Q/8y/qF/Gf/Qv1qM/529aAew/Vp9/3/cg3YA269p/Fv2gz7i+h/6l/EP/cv4h740vzNu/ZC8hMSaRKS3RTMkupTo9ScTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAZ/wbAAD//9E940M=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) (async, rerun: 64) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f00000000c0)) (rerun: 64) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file1'}, 0xb) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r0, 0x0) (async, rerun: 32) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, 0x0, &(0x7f0000000280)=0xab) (rerun: 32) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 264.407447ms ago: executing program 4 (id=1095): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) openat2(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)={0x8400, 0x58, 0x20}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) r2 = getpid() prctl$PR_GET_IO_FLUSHER(0x4) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan1\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, r4, 0x405, 0x70bd27, 0x25dfdbfb, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000401}, 0x4c004) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000440)={0x0, 0xa1ff, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) 263.613216ms ago: executing program 7 (id=1096): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x34080, 0x20) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000080)={[{@nobh}, {@errors_remount}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@inlinecrypt}, {@nolazytime}, {@dioread_nolock}, {@dioread_lock}], [{@smackfsdef={'smackfsdef', 0x3d, ':&-+[}'}}]}, 0x1, 0x490, &(0x7f0000000c00)="$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") fcntl$getownex(r0, 0x10, &(0x7f0000000040)) syz_clone3(&(0x7f0000001880)={0x2020800, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xca9097f165d7280b}, 0x58) shmget(0x2, 0x2000, 0x1000, &(0x7f0000ffc000/0x2000)=nil) (async) shmget(0x2, 0x2000, 0x1000, &(0x7f0000ffc000/0x2000)=nil) openat(r0, &(0x7f0000000080)='./file1\x00', 0x80, 0x0) (async) openat(r0, &(0x7f0000000080)='./file1\x00', 0x80, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={{r0}, 0x400, 0x80000000000000, 0x2000000100000}) 254.807401ms ago: executing program 0 (id=1097): socket$inet_smc(0x2b, 0x1, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r4 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) (async) readv(r4, &(0x7f0000000400)=[{&(0x7f0000000280)=""/174, 0xae}, {0x0}, {&(0x7f00000004c0)=""/244, 0xf4}], 0x3) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) r6 = socket(0x40000000015, 0x805, 0x0) getsockopt(r6, 0x114, 0x271d, 0x0, &(0x7f0000000000)) 226.91991ms ago: executing program 5 (id=1098): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) (async, rerun: 32) r2 = syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/net\x00') (rerun: 32) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="ed4d0000000000dfff0032", @ANYRES32=r1, @ANYBLOB="0800db00", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) 204.289747ms ago: executing program 4 (id=1099): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x150, 0x18, 0x713, 0x0, 0x25dfdbff, {{@in=@multicast1, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in6=@private0, 0x4d2, 0x32}, @in6=@private2, {0x5, 0x0, 0x8, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x100, 0x1}, {0x6}, 0x70bd2c, 0x3509, 0xa, 0x4, 0x0, 0x50}, [@algo_aead={0x5e, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x90, 0x80, "210466d38547aa140db9a200000000c538c7"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x2014) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) syz_open_dev$dri(0x0, 0x3, 0x301002) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$netlink(0x10, 0x3, 0xf) fchdir(0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000040000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="0000000001000000000000000000000030a244f7f039a14200000000"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008800c00014000000000000000090c000240000000000018ab6e14000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 96.952851ms ago: executing program 7 (id=1100): r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000000540)=""/79, 0x4f}], 0x1}, 0x7}], 0x1, 0x20, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000340)={[{@data_err_ignore}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@abort}, {@oldalloc}, {@noquota}, {@min_batch_time}, {@jqfmt_vfsold}, {@sysvgroups}, {@errors_remount}, {@auto_da_alloc}, {@nodelalloc}]}, 0x41, 0x47a, &(0x7f0000000b40)="$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") 71.509642ms ago: executing program 5 (id=1101): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000004c0)=[@ioring_restriction_register_op={0x0, 0x9}], 0x1) r1 = io_uring_setup(0xf08, &(0x7f00000003c0)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r7, {0xffff, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a0d6}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xf5, 0x0, 0x4, 0xb, 0x3}, 0x2f}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x40) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f0000000300)={&(0x7f0000000280)=@xdp={0x2c, 0x0, r7, 0x18}, 0x80, &(0x7f00000034c0)=[{&(0x7f00000001c0)="27030200faff14000e0005004014c10200000006", 0x14}, {&(0x7f00000022c0)="ffc9ace87aade11690dd52a158e0b1c49686ce569fbf520db4ca", 0x1a}], 0x2}, 0x8000) 69.694003ms ago: executing program 4 (id=1102): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000068a000000000000040000001801000020696c2500000000002020207b1ad8ff00000000bfa1000000300000070100000400ffffb702000008000000b703000002000000850000002f00000095"], &(0x7f0000000340)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100}, 0x94) 0s ago: executing program 4 (id=1103): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_USERDATA={0x5f, 0x7, 0x1, 0x0, "662379c30d944b867040d255e1a4adddba643d11596154545cdabd961505276b64fe9b631e96aa0fd21dcafb60f33ea4f0fec4c2d9e748e9366fba4ffbacbfa0253d5e9427d160b18ace3ea2d667f7ff6deab1940fc2554d1b18e9"}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "9d"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) sendmsg$tipc(r2, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x30, r4, 0x1, 0x0, 0xf00, {{}, {}, {0x14, 0x19, {0x3, 0x1, 0x1}}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000328bd7000fbdbdf2501000000000000000c4100ba9597951462726f6164636173bed12d006e6b0000"], 0x30}, 0x1, 0x0, 0x0, 0x4c801}, 0x40004) kernel console output (not intermixed with test programs): pe 2 family 0 port 6081 - 0 [ 56.501231][ T1488] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.539080][ T5938] loop4: detected capacity change from 0 to 128 [ 56.542088][ T5938] EXT4-fs: Ignoring removed orlov option [ 56.554747][ T5938] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 56.557272][ T370] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.559383][ T370] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.578234][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.578266][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.604443][ T4735] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 56.635152][ T5948] tipc: Started in network mode [ 56.636183][ T5948] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 56.638390][ T5948] tipc: Enabled bearer , priority 10 [ 56.649808][ T5948] bond1 (unregistering): Released all slaves [ 56.694641][ T5953] netlink: 4 bytes leftover after parsing attributes in process `syz.4.279'. [ 56.731169][ T4722] Bluetooth: hci2: command tx timeout [ 56.744383][ T5964] bond1: option resend_igmp: invalid value (4099) [ 56.745774][ T5964] bond1: option resend_igmp: allowed values 0 - 255 [ 56.747911][ T5964] bond1 (unregistering): Released all slaves [ 56.756004][ T4399] 8021q: adding VLAN 0 to HW filter on device eth2 [ 56.759167][ T5961] tmpfs: Bad value for 'nr_inodes' [ 56.760961][ T5961] syzkaller0: entered promiscuous mode [ 56.762115][ T5961] syzkaller0: entered allmulticast mode [ 56.853303][ T5971] mmap: syz.3.282 (5971) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 56.897434][ T5979] loop6: detected capacity change from 0 to 512 [ 56.905663][ T5979] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 56.909669][ T5983] netlink: 88 bytes leftover after parsing attributes in process `syz.4.286'. [ 56.922677][ T5979] EXT4-fs (loop6): can't mount with journal_async_commit, fs mounted w/o journal [ 57.085540][ T5994] vfat: Unknown parameter 'odepage' [ 57.128032][ T6004] tipc: Enabling of bearer rejected, already enabled [ 57.145697][ T6004] bond1 (unregistering): Released all slaves [ 57.750090][ T9] tipc: Node number set to 10005162 [ 57.807578][ T6021] EXT4-fs: inline encryption not supported [ 57.807632][ T6021] EXT4-fs: Ignoring removed nomblk_io_submit option [ 57.809108][ T6021] EXT4-fs (loop6): VFS: Can't find ext4 filesystem [ 57.891014][ T6023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 57.977519][ T6026] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 58.028449][ T6028] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.047016][ T6034] netlink: 88 bytes leftover after parsing attributes in process `syz.4.299'. [ 58.065178][ T4725] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.184178][ T6041] fuse: Bad value for 'fd' [ 58.464826][ T6053] netlink: 132 bytes leftover after parsing attributes in process `syz.4.304'. [ 58.667533][ T6056] set_capacity_and_notify: 4 callbacks suppressed [ 58.669023][ T6056] loop6: detected capacity change from 0 to 512 [ 58.672866][ T6056] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 58.682029][ T6056] EXT4-fs (loop6): 1 truncate cleaned up [ 58.686801][ T6056] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.694490][ T6056] overlayfs: failed to resolve './bus': -2 [ 58.696740][ T6056] EXT4-fs error (device loop6): ext4_find_dest_de:2050: inode #12: block 7: comm syz.6.305: bad entry in directory: directory entry overrun - offset=16, inode=14, rec_len=1024, size=56 fake=0 [ 58.714580][ T5792] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.733196][ T6059] loop6: detected capacity change from 0 to 512 [ 58.737056][ T6059] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 58.742050][ T6059] EXT4-fs (loop6): can't mount with journal_async_commit, fs mounted w/o journal [ 58.810101][ T4722] Bluetooth: hci2: command tx timeout [ 58.853150][ T6070] Illegal XDP return value 3211137024 on prog (id 48) dev N/A, expect packet loss! [ 59.086056][ T6073] netlink: 232 bytes leftover after parsing attributes in process `syz.0.309'. [ 59.187878][ T6075] IPVS: set_ctl: invalid protocol: 108 127.0.0.1:20002 [ 59.215756][ T6077] netlink: 88 bytes leftover after parsing attributes in process `syz.0.311'. [ 59.448392][ T6095] netlink: 'syz.0.318': attribute type 21 has an invalid length. [ 59.448427][ T6095] IPv6: NLM_F_CREATE should be specified when creating new route [ 59.448538][ T6095] IPv6: Can't replace route, no match found [ 59.450838][ T6089] warning: `syz.4.314' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 59.704275][ T6103] netlink: 12 bytes leftover after parsing attributes in process `syz.6.321'. [ 59.777130][ T6105] netlink: 132 bytes leftover after parsing attributes in process `syz.3.320'. [ 59.949375][ T6106] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.949713][ T6106] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.278508][ T6095] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 60.281031][ T6095] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 60.281541][ T6109] netlink: 'syz.4.322': attribute type 61 has an invalid length. [ 60.286786][ T6095] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 60.289826][ T6095] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 60.291144][ T6095] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 60.293214][ T6095] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 60.295495][ T6095] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 60.296666][ T6095] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 60.298353][ T6095] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 60.301680][ T6095] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 60.301814][ T6095] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 60.304906][ T6095] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 60.309743][ T6095] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 60.309783][ T6095] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 60.313098][ T6095] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 60.540920][ T6125] netlink: 88 bytes leftover after parsing attributes in process `syz.0.326'. [ 60.611023][ T6129] loop3: detected capacity change from 0 to 128 [ 60.630174][ T6129] EXT4-fs (loop3): Test dummy encryption mode enabled [ 60.741722][ T6129] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 60.743505][ T6134] loop4: detected capacity change from 0 to 512 [ 60.774703][ T6134] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 60.780388][ T6134] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 60.840415][ T6142] loop6: detected capacity change from 0 to 512 [ 60.840695][ T6142] EXT4-fs: Ignoring removed bh option [ 60.855695][ T6142] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 60.855723][ T6142] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 61.252261][ T6142] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 61.256385][ T6142] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 61.259475][ T6142] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.272110][ T5792] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.366504][ T6154] netlink: 4 bytes leftover after parsing attributes in process `syz.6.333'. [ 61.439734][ T4725] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 61.511881][ T6163] loop6: detected capacity change from 0 to 512 [ 61.513665][ T6163] EXT4-fs: inline encryption not supported [ 61.520657][ T6163] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 61.522755][ T6163] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.335: invalid indirect mapped block 2683928664 (level 1) [ 61.527106][ T6163] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 61.529509][ T6163] EXT4-fs (loop6): 1 truncate cleaned up [ 61.531614][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 61.531629][ C0] EXT4-fs (loop6): initial error at time 61: ext4_free_branches:1023: inode 13 [ 61.531645][ C0] EXT4-fs (loop6): last error at time 61: ext4_free_branches:1023: inode 13 [ 61.534332][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 61.540932][ T6163] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.672225][ T6172] EXT4-fs error (device loop6): ext4_get_branch:178: inode #13: block 1803188595: comm syz.6.335: invalid block [ 61.672960][ T6172] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.335: Invalid block bitmap block 3 in block_group 0 [ 61.674047][ T6172] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 61.674200][ T6172] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.335: invalid indirect mapped block 84213760 (level 0) [ 61.674341][ T6172] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.335: invalid indirect mapped block 2054779762 (level 0) [ 61.736606][ T6174] netlink: 132 bytes leftover after parsing attributes in process `syz.3.337'. [ 61.928100][ T6176] capability: warning: `syz.0.338' uses 32-bit capabilities (legacy support in use) [ 61.943757][ T5792] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.952699][ T6178] netlink: 88 bytes leftover after parsing attributes in process `syz.4.339'. [ 62.063278][ T6186] tipc: Enabling of bearer rejected, already enabled [ 62.069643][ T6186] bond1 (unregistering): Released all slaves [ 62.182421][ T6190] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 62.205275][ T6197] loop6: detected capacity change from 0 to 4096 [ 62.213873][ T6197] EXT4-fs (loop6): bs(8192) > ps(4096) unsupported for encrypt [ 62.238835][ T6203] loop4: detected capacity change from 0 to 256 [ 62.245932][ T6203] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 62.245973][ T6203] FAT-fs (loop4): Filesystem has been set read-only [ 62.247497][ T6203] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 62.247516][ T6203] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 62.331066][ T50] Bluetooth: hci2: command 0x040f tx timeout [ 62.331213][ T4722] Bluetooth: hci0: command 0x0c1a tx timeout [ 62.341502][ T50] Bluetooth: hci4: command 0x0c1a tx timeout [ 62.341509][ T4722] Bluetooth: hci3: command 0x0c1a tx timeout [ 62.640751][ T6216] loop6: detected capacity change from 0 to 4096 [ 62.659866][ T6216] EXT4-fs (loop6): Test dummy encryption mode enabled [ 62.661177][ T6220] netlink: 12 bytes leftover after parsing attributes in process `syz.3.352'. [ 62.675386][ T6216] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.694496][ T6220] netlink: 8 bytes leftover after parsing attributes in process `syz.3.352'. [ 62.694531][ T6220] netlink: 24 bytes leftover after parsing attributes in process `syz.3.352'. [ 62.770636][ T6220] veth3: entered allmulticast mode [ 62.773828][ T6220] bond1: (slave veth3): Enslaving as an active interface with an up link [ 62.777443][ T6225] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 62.792521][ T6227] bond1 (unregistering): (slave veth3): Releasing backup interface [ 62.884352][ T6227] bond1 (unregistering): Released all slaves [ 63.035313][ T5792] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.120565][ T6233] netlink: 88 bytes leftover after parsing attributes in process `syz.6.354'. [ 63.322444][ T6235] loop3: detected capacity change from 0 to 8192 [ 63.421822][ T6235] loop3: p1 p2 p3 p4[DM] [ 63.422977][ T6235] loop3: p1 size 835329 extends beyond EOD, truncated [ 63.522689][ T6235] loop3: p3 start 134217728 is beyond EOD, truncated [ 63.522800][ T6235] loop3: p4 size 262144 extends beyond EOD, truncated [ 63.681210][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 63.966984][ T6244] netlink: 28 bytes leftover after parsing attributes in process `syz.0.355'. [ 63.973433][ T6243] set_capacity_and_notify: 1 callbacks suppressed [ 63.992537][ T6243] loop6: detected capacity change from 0 to 512 [ 64.005233][ T6243] EXT4-fs: Ignoring removed mblk_io_submit option [ 64.007385][ T6243] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 64.033720][ T6243] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 64.033853][ T6243] EXT4-fs (loop6): orphan cleanup on readonly fs [ 64.038556][ T4703] udevd[4703]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 64.046291][ T6243] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.356: Invalid block bitmap block 0 in block_group 0 [ 64.046332][ T6243] loop6: lost filesystem error report for type 5 error -117 [ 64.050021][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 64.050049][ C1] EXT4-fs (loop6): last error at time 64: ext4_read_block_bitmap_nowait:483 [ 64.059908][ T6243] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.356: Invalid block bitmap block 0 in block_group 0 [ 64.059939][ T6243] loop6: lost filesystem error report for type 5 error -117 [ 64.064487][ T6243] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.356: Invalid block bitmap block 0 in block_group 0 [ 64.069127][ T6243] loop6: lost filesystem error report for type 5 error -117 [ 64.075421][ T6243] Quota error (device loop6): write_blk: dquota write failed [ 64.075475][ T6243] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 64.075502][ T6243] EXT4-fs error (device loop6): ext4_acquire_dquot:7041: comm syz.6.356: Failed to acquire dquot type 1 [ 64.075518][ T6243] loop6: lost filesystem error report for type 5 error -28 [ 64.083588][ T6243] EXT4-fs (loop6): 1 orphan inode deleted [ 64.090586][ T1488] Quota error (device loop6): do_check_range: Getting block 0 out of range 1-5 [ 64.090659][ T1488] EXT4-fs error (device loop6): ext4_release_dquot:7077: comm kworker/u8:6: Failed to release dquot type 1 [ 64.090683][ T1488] loop6: lost filesystem error report for type 5 error -117 [ 64.098056][ T4701] udevd[4701]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 64.103924][ T6243] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 64.145585][ T4703] udevd[4703]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 64.212212][ T6258] netlink: 'syz.3.360': attribute type 7 has an invalid length. [ 64.212243][ T6258] netlink: 'syz.3.360': attribute type 8 has an invalid length. [ 64.363163][ T6263] loop3: detected capacity change from 0 to 512 [ 64.373012][ T6263] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 64.376610][ T6263] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.362: corrupted in-inode xattr: invalid ea_ino [ 64.376640][ T6263] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 64.379554][ T6263] EXT4-fs (loop3): get orphan inode failed [ 64.379772][ T6263] EXT4-fs (loop3): mount failed [ 64.381788][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 64.381801][ C1] EXT4-fs (loop3): initial error at time 64: ext4_iget_extra_inode:5180: inode 15 [ 64.381817][ C1] EXT4-fs (loop3): last error at time 64: ext4_iget_extra_inode:5180: inode 15 [ 64.410343][ T50] Bluetooth: hci4: command 0x0c1a tx timeout [ 64.410437][ T50] Bluetooth: hci2: command 0x040f tx timeout [ 64.411052][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 64.411122][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 64.447641][ T6273] netlink: 132 bytes leftover after parsing attributes in process `syz.5.363'. [ 64.545227][ T1596] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.546856][ T1596] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.742265][ T5792] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.178008][ T6285] syzkaller0: entered promiscuous mode [ 65.180653][ T6285] syzkaller0: entered allmulticast mode [ 65.384329][ T6296] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.445015][ T6296] bridge_slave_1: left allmulticast mode [ 65.453493][ T6296] bridge_slave_1: left promiscuous mode [ 65.690531][ T4722] Bluetooth: hci1: command 0x0c1a tx timeout [ 66.130174][ T6296] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.490601][ T4716] Bluetooth: hci4: command 0x0c1a tx timeout [ 66.490604][ T4713] Bluetooth: hci2: command 0x040f tx timeout [ 66.497390][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 66.510116][ T4722] Bluetooth: hci0: command 0x0c1a tx timeout [ 66.686956][ T6327] loop4: detected capacity change from 0 to 256 [ 66.732789][ T6330] __nla_validate_parse: 1 callbacks suppressed [ 66.732934][ T6330] netlink: 88 bytes leftover after parsing attributes in process `syz.0.382'. [ 68.215277][ T6368] tmpfs: Bad value for 'mpol' [ 68.570209][ T4722] Bluetooth: hci2: command 0x040f tx timeout [ 68.599778][ T6377] loop0: detected capacity change from 0 to 512 [ 68.603762][ T6380] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 68.613080][ T6377] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 68.613167][ T6381] netlink: 88 bytes leftover after parsing attributes in process `syz.3.393'. [ 68.680463][ T6377] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal [ 69.166550][ T6390] deleting an unspecified loop device is not supported. [ 70.086110][ T30] audit: type=1326 audit(70.070:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6433 comm="syz.6.403" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5b77fe8 code=0x0 [ 70.670197][ T4722] Bluetooth: hci2: command 0x040f tx timeout [ 71.517009][ T6489] tmpfs: Bad value for 'mpol' [ 71.518508][ T6489] netlink: 24 bytes leftover after parsing attributes in process `syz.3.408'. [ 72.014624][ T6502] loop5: detected capacity change from 0 to 512 [ 72.014896][ T6502] journal_path: Lookup failure for './file1/file0' [ 72.014909][ T6502] EXT4-fs: error: could not find journal device path [ 72.404151][ T6508] loop3: detected capacity change from 0 to 512 [ 72.410109][ T6508] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 72.422687][ T6508] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal [ 72.474349][ T6511] tipc: Enabling of bearer rejected, already enabled [ 72.482200][ T6517] netlink: 8 bytes leftover after parsing attributes in process `syz.4.419'. [ 72.495148][ T6511] bond1 (unregistering): Released all slaves [ 72.502388][ T6517] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 72.504712][ T6517] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 72.772817][ T4722] Bluetooth: hci2: command 0x040f tx timeout [ 72.931302][ T6530] loop5: detected capacity change from 0 to 512 [ 72.935325][ T6530] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 72.955100][ T6530] EXT4-fs (loop5): can't mount with journal_async_commit, fs mounted w/o journal [ 73.070664][ T6533] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 73.354087][ T6543] netlink: 88 bytes leftover after parsing attributes in process `syz.5.427'. [ 73.539828][ T6562] tipc: Enabling of bearer rejected, already enabled [ 73.581844][ T6562] bond0 (unregistering): Released all slaves [ 73.636935][ T6568] netlink: 3 bytes leftover after parsing attributes in process `syz.3.434'. [ 73.675652][ T6552] loop5: detected capacity change from 0 to 1024 [ 73.678990][ T6552] EXT4-fs: Ignoring removed orlov option [ 73.681717][ T6552] EXT4-fs: inline encryption not supported [ 73.689133][ T6552] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 73.689211][ T6552] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 73.716932][ T6552] EXT4-fs (loop5): invalid journal inode [ 73.717018][ T6552] EXT4-fs (loop5): can't get journal size [ 73.779475][ T6552] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 73.796520][ T6576] loop4: detected capacity change from 0 to 512 [ 73.809215][ T6576] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 73.828218][ T6576] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 74.099060][ T6583] netlink: 4 bytes leftover after parsing attributes in process `syz.6.438'. [ 74.131924][ T5100] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.204431][ T6589] loop5: detected capacity change from 0 to 512 [ 74.208538][ T6589] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 74.221114][ T6589] EXT4-fs (loop5): can't mount with journal_async_commit, fs mounted w/o journal [ 74.673691][ T6600] bridge_slave_0: left allmulticast mode [ 74.673725][ T6600] bridge_slave_0: left promiscuous mode [ 74.673822][ T6600] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.674521][ T1488] tipc: Subscription rejected, illegal request [ 74.724288][ T6603] loop3: detected capacity change from 0 to 128 [ 74.724611][ T6603] EXT4-fs: Ignoring removed nobh option [ 74.746930][ T6603] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 75.038835][ T4725] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 75.198170][ T6618] tipc: Enabling of bearer rejected, failed to enable media [ 75.200804][ T6617] loop4: detected capacity change from 0 to 8 [ 75.213324][ T6617] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 75.213354][ T6617] unable to read xattr id index table [ 75.218002][ T6617] SQUASHFS error: zlib decompression failed, data probably corrupt [ 75.218051][ T6617] SQUASHFS error: Failed to read block 0x9b: -5 [ 75.218061][ T6617] SQUASHFS error: Unable to read metadata cache entry [99] [ 75.218069][ T6617] SQUASHFS error: Unable to read inode 0x127 [ 75.223994][ T6618] bond1 (unregistering): Released all slaves [ 75.242926][ T4722] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 75.383341][ T6631] loop5: detected capacity change from 0 to 512 [ 75.389236][ T6631] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 75.401585][ T6631] EXT4-fs (loop5): can't mount with journal_async_commit, fs mounted w/o journal [ 75.443044][ T6635] tipc: Resetting bearer [ 75.460863][ T3821] tipc: Resetting bearer [ 75.468575][ T6637] loop6: detected capacity change from 0 to 512 [ 75.480892][ T6637] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 75.493179][ T6637] EXT4-fs (loop6): can't mount with journal_async_commit, fs mounted w/o journal [ 75.743252][ T6640] FAULT_INJECTION: forcing a failure. [ 75.743252][ T6640] name failslab, interval 1, probability 0, space 0, times 1 [ 75.743297][ T6640] CPU: 0 UID: 0 PID: 6640 Comm: syz.3.454 Tainted: G L syzkaller #0 PREEMPT [ 75.743314][ T6640] Tainted: [L]=SOFTLOCKUP [ 75.743319][ T6640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 75.743324][ T6640] Call trace: [ 75.743327][ T6640] show_stack+0x2c/0x3c (C) [ 75.743348][ T6640] __dump_stack+0x30/0x40 [ 75.743359][ T6640] dump_stack_lvl+0xd8/0x12c [ 75.743368][ T6640] dump_stack+0x1c/0x28 [ 75.743377][ T6640] should_fail_ex+0x41c/0x590 [ 75.743388][ T6640] should_failslab+0xc4/0x120 [ 75.743397][ T6640] __kmalloc_noprof+0x108/0x6b8 [ 75.743405][ T6640] tomoyo_realpath_from_path+0xbc/0x4dc [ 75.743414][ T6640] tomoyo_path_number_perm+0x1f0/0x500 [ 75.743421][ T6640] tomoyo_file_ioctl+0x2c/0x3c [ 75.743429][ T6640] security_file_ioctl+0xdc/0x2b0 [ 75.743437][ T6640] __arm64_sys_ioctl+0xa8/0x1c4 [ 75.743447][ T6640] invoke_syscall+0x98/0x244 [ 75.743457][ T6640] el0_svc_common+0xec/0x23c [ 75.743466][ T6640] do_el0_svc+0x4c/0x5c [ 75.743475][ T6640] el0_svc+0x64/0x260 [ 75.743486][ T6640] el0t_64_sync_handler+0x48/0x148 [ 75.743495][ T6640] el0t_64_sync+0x198/0x19c [ 75.743504][ T6640] ERROR: Out of memory at tomoyo_realpath_from_path. [ 75.826675][ T6646] Injecting memory failure for pfn 0x13b54f at process virtual address 0x20000000 [ 75.839205][ T6646] Memory failure: 0x13b54f: Sending SIGBUS to syz.3.456:6646 due to hardware memory corruption [ 75.839312][ T6646] Memory failure: 0x13b54f: recovery action for dirty LRU page: Recovered [ 75.839336][ T6646] Injecting memory failure for pfn 0x219250 at process virtual address 0x20001000 [ 75.839399][ T6646] Memory failure: 0x219250: unhandlable page. [ 75.839406][ T6646] Memory failure: 0x219250: recovery action for get hwpoison page: Ignored [ 76.112002][ T6653] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 76.131725][ T6653] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 76.543224][ T6662] tipc: Enabling of bearer rejected, already enabled [ 76.569833][ T6662] bond1 (unregistering): Released all slaves [ 76.619822][ T6672] netlink: 88 bytes leftover after parsing attributes in process `syz.0.463'. [ 77.064635][ T6685] netlink: 12 bytes leftover after parsing attributes in process `syz.4.467'. [ 77.090621][ T6685] netlink: 88 bytes leftover after parsing attributes in process `syz.4.467'. [ 77.215520][ T6690] set_capacity_and_notify: 1 callbacks suppressed [ 77.217056][ T6690] loop6: detected capacity change from 0 to 512 [ 77.221759][ T6690] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 77.235347][ T6692] loop4: detected capacity change from 0 to 512 [ 77.237259][ T6692] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 77.242459][ T6692] EXT4-fs (loop4): 1 truncate cleaned up [ 77.244180][ T6690] EXT4-fs (loop6): can't mount with journal_async_commit, fs mounted w/o journal [ 77.244333][ T6692] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.416529][ T6702] loop3: detected capacity change from 0 to 512 [ 78.418013][ T6702] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 78.424422][ T6702] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal [ 78.509359][ T6708] loop6: detected capacity change from 0 to 1024 [ 78.514350][ T4735] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.514624][ T6708] loop6: detected capacity change from 0 to 512 [ 78.535775][ T6711] loop5: detected capacity change from 0 to 512 [ 78.701370][ T6715] tmpfs: Bad value for 'mpol' [ 78.893037][ T6711] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 78.903004][ T6711] EXT4-fs (loop5): can't mount with journal_async_commit, fs mounted w/o journal [ 79.526416][ T6729] FAULT_INJECTION: forcing a failure. [ 79.526416][ T6729] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.532497][ T6729] CPU: 0 UID: 0 PID: 6729 Comm: syz.4.478 Tainted: G L syzkaller #0 PREEMPT [ 79.532523][ T6729] Tainted: [L]=SOFTLOCKUP [ 79.532527][ T6729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 79.532532][ T6729] Call trace: [ 79.532535][ T6729] show_stack+0x2c/0x3c (C) [ 79.532553][ T6729] __dump_stack+0x30/0x40 [ 79.532564][ T6729] dump_stack_lvl+0xd8/0x12c [ 79.532574][ T6729] dump_stack+0x1c/0x28 [ 79.532583][ T6729] should_fail_ex+0x41c/0x590 [ 79.532594][ T6729] should_fail+0x14/0x24 [ 79.532603][ T6729] should_fail_usercopy+0x20/0x30 [ 79.532613][ T6729] _inline_copy_from_user+0x3c/0x174 [ 79.532624][ T6729] user_termios_to_kernel_termios_1+0x2c/0x3c [ 79.532633][ T6729] set_termios+0x170/0x618 [ 79.532642][ T6729] tty_mode_ioctl+0x45c/0x7f4 [ 79.532651][ T6729] n_tty_ioctl_helper+0xa8/0x2d8 [ 79.532660][ T6729] n_tty_ioctl+0x190/0x434 [ 79.532668][ T6729] tty_ioctl+0x900/0xd50 [ 79.532675][ T6729] __arm64_sys_ioctl+0x14c/0x1c4 [ 79.532686][ T6729] invoke_syscall+0x98/0x244 [ 79.532696][ T6729] el0_svc_common+0xec/0x23c [ 79.532705][ T6729] do_el0_svc+0x4c/0x5c [ 79.532715][ T6729] el0_svc+0x64/0x260 [ 79.532725][ T6729] el0t_64_sync_handler+0x48/0x148 [ 79.532734][ T6729] el0t_64_sync+0x198/0x19c [ 79.657270][ T6735] netlink: 88 bytes leftover after parsing attributes in process `syz.4.481'. [ 79.743136][ T6740] loop3: detected capacity change from 0 to 1024 [ 79.743668][ T6740] EXT4-fs: Ignoring removed bh option [ 79.743679][ T6740] EXT4-fs: inline encryption not supported [ 80.020553][ T6740] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.036314][ T6747] loop5: detected capacity change from 0 to 512 [ 80.037996][ T6740] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #12: comm syz.3.482: corrupted in-inode xattr: invalid ea_ino [ 80.046880][ T6740] EXT4-fs (loop3): Remounting filesystem read-only [ 80.056447][ T6747] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 80.081456][ T6747] EXT4-fs (loop5): can't mount with journal_async_commit, fs mounted w/o journal [ 80.086492][ T4725] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.535644][ T6759] loop5: detected capacity change from 0 to 512 [ 80.617831][ T6759] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 80.647266][ T6759] EXT4-fs (loop5): can't mount with journal_async_commit, fs mounted w/o journal [ 80.735640][ T6763] ªªªªªª: renamed from vlan0 [ 80.784174][ T6763] tipc: Disabling bearer [ 81.058832][ T6767] tipc: Enabling of bearer rejected, already enabled [ 81.079044][ T6770] loop5: detected capacity change from 0 to 512 [ 81.081560][ T6770] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 81.097236][ T6767] bond1 (unregistering): Released all slaves [ 81.102197][ T6770] EXT4-fs (loop5): can't mount with journal_async_commit, fs mounted w/o journal [ 81.208043][ T6778] FAULT_INJECTION: forcing a failure. [ 81.208043][ T6778] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 81.208085][ T6778] CPU: 1 UID: 0 PID: 6778 Comm: syz.6.491 Tainted: G L syzkaller #0 PREEMPT [ 81.208103][ T6778] Tainted: [L]=SOFTLOCKUP [ 81.208107][ T6778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 81.208114][ T6778] Call trace: [ 81.208118][ T6778] show_stack+0x2c/0x3c (C) [ 81.208143][ T6778] __dump_stack+0x30/0x40 [ 81.208155][ T6778] dump_stack_lvl+0xd8/0x12c [ 81.208165][ T6778] dump_stack+0x1c/0x28 [ 81.208174][ T6778] should_fail_ex+0x41c/0x590 [ 81.208186][ T6778] should_fail+0x14/0x24 [ 81.208195][ T6778] should_fail_usercopy+0x20/0x30 [ 81.208205][ T6778] simple_read_from_buffer+0xc4/0x238 [ 81.208215][ T6778] proc_fail_nth_read+0x1a8/0x248 [ 81.208223][ T6778] vfs_read+0x230/0x8c8 [ 81.208233][ T6778] ksys_read+0x12c/0x228 [ 81.208243][ T6778] __arm64_sys_read+0x7c/0x90 [ 81.208250][ T6778] invoke_syscall+0x98/0x244 [ 81.208260][ T6778] el0_svc_common+0xec/0x23c [ 81.208269][ T6778] do_el0_svc+0x4c/0x5c [ 81.208279][ T6778] el0_svc+0x64/0x260 [ 81.208289][ T6778] el0t_64_sync_handler+0x48/0x148 [ 81.208298][ T6778] el0t_64_sync+0x198/0x19c [ 81.491279][ T6781] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 81.555580][ T6788] syz.6.494 uses obsolete (PF_INET,SOCK_PACKET) [ 81.577786][ T4722] Bluetooth: hci1: unexpected event for opcode 0x2003 [ 81.579454][ T6797] netlink: 88 bytes leftover after parsing attributes in process `syz.4.498'. [ 81.646995][ T6800] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 81.650938][ T6800] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal [ 81.662455][ T6804] binder: 6803:6804 ioctl 4018620d ffffffffffffffff returned -22 [ 82.066172][ T6822] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 82.234536][ T6827] set_capacity_and_notify: 4 callbacks suppressed [ 82.234596][ T6827] loop3: detected capacity change from 0 to 8192 [ 82.248335][ T6827] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 82.872927][ T6822] EXT4-fs error (device loop6): ext4_readdir:265: inode #2: block 16: comm syz.6.506: path /45/file1: bad entry in directory: directory entry overrun - offset=876, inode=0, rec_len=1024, size=1024 fake=0 [ 82.916292][ T6833] loop4: detected capacity change from 0 to 1024 [ 82.924306][ T6834] tipc: Enabling of bearer rejected, failed to enable media [ 82.978524][ T4722] Bluetooth: hci4: unexpected event for opcode 0x2003 [ 83.047129][ T5792] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 83.083885][ T6834] bond1 (unregistering): Released all slaves [ 83.873180][ T6863] netlink: 88 bytes leftover after parsing attributes in process `syz.0.517'. [ 83.936140][ T4722] Bluetooth: hci0: Malformed LE Event: 0x1b [ 84.425199][ T6889] loop4: detected capacity change from 0 to 512 [ 84.453055][ T6889] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.630814][ T6901] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.521: iget: bad i_size value: 2533274857506816 [ 84.641239][ T6901] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.521: iget: bad i_size value: 2533274857506816 [ 85.295808][ T4722] Bluetooth: hci3: unexpected event for opcode 0x2003 [ 85.332224][ T6908] tipc: Enabling of bearer rejected, already enabled [ 85.361032][ T6908] bond1 (unregistering): Released all slaves [ 85.424735][ T6913] netlink: 28 bytes leftover after parsing attributes in process `syz.3.527'. [ 85.427003][ T6913] netlink: 20 bytes leftover after parsing attributes in process `syz.3.527'. [ 85.519427][ T4735] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.543822][ T6916] syzkaller0: entered promiscuous mode [ 85.548897][ T6916] syzkaller0: entered allmulticast mode [ 85.659182][ T6918] netlink: 20 bytes leftover after parsing attributes in process `syz.4.529'. [ 86.057423][ T6934] loop3: detected capacity change from 0 to 8 [ 86.060721][ T6934] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 86.060743][ T6934] unable to read xattr id index table [ 86.062160][ T6934] SQUASHFS error: zlib decompression failed, data probably corrupt [ 86.062176][ T6934] SQUASHFS error: Failed to read block 0x9b: -5 [ 86.062184][ T6934] SQUASHFS error: Unable to read metadata cache entry [99] [ 86.062191][ T6934] SQUASHFS error: Unable to read inode 0x127 [ 86.796179][ T6946] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 87.441366][ T6958] netlink: 'syz.3.538': attribute type 2 has an invalid length. [ 87.665197][ T6960] netlink: 88 bytes leftover after parsing attributes in process `syz.0.536'. [ 87.727250][ T6964] netlink: 28 bytes leftover after parsing attributes in process `syz.4.541'. [ 87.735884][ T6962] tipc: Enabling of bearer rejected, already enabled [ 87.754632][ T6962] bond1 (unregistering): Released all slaves [ 87.775495][ T6968] binder: 6967 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 87.775520][ T6968] binder: 6967:6968 ioctl c018620c 200000c0 returned -22 [ 87.782197][ T6968] netlink: 8 bytes leftover after parsing attributes in process `syz.5.542'. [ 87.784115][ T6969] netlink: 8 bytes leftover after parsing attributes in process `syz.5.542'. [ 87.784147][ T6969] netlink: 104 bytes leftover after parsing attributes in process `syz.5.542'. [ 87.786829][ T6968] netlink: 104 bytes leftover after parsing attributes in process `syz.5.542'. [ 87.825035][ T6972] syzkaller0: entered promiscuous mode [ 87.825076][ T6972] syzkaller0: entered allmulticast mode [ 87.865763][ T6979] loop0: detected capacity change from 0 to 512 [ 87.893688][ T6979] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 87.893814][ T6979] EXT4-fs (loop0): orphan cleanup on readonly fs [ 87.907438][ T6979] Quota error (device loop0): find_block_dqentry: Quota for id 0 referenced but not present [ 87.907496][ T6979] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 87.907524][ T6979] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.545: Failed to acquire dquot type 1 [ 87.907545][ T6979] loop0: lost filesystem error report for type 5 error -5 [ 87.910041][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 87.910070][ C0] EXT4-fs (loop0): initial error at time 87: ext4_acquire_dquot:7041 [ 87.910104][ C0] EXT4-fs (loop0): last error at time 87: ext4_acquire_dquot:7041 [ 87.910806][ T6984] loop5: detected capacity change from 0 to 1024 [ 87.913445][ T6979] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.545: bg 0: block 40: padding at end of block bitmap is not set [ 87.913488][ T6979] loop0: lost filesystem error report for type 5 error -117 [ 87.916306][ T6979] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 87.916341][ T6979] loop0: lost filesystem error report for type 5 error -117 [ 87.917494][ T6979] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #16: comm syz.0.545: data will be lost [ 87.917607][ T6979] EXT4-fs (loop0): 1 truncate cleaned up [ 87.926278][ T6979] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 88.652243][ T4710] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.820851][ T7016] netlink: 28 bytes leftover after parsing attributes in process `syz.6.554'. [ 88.955543][ T7018] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 89.525000][ T7023] tipc: Enabling of bearer rejected, already enabled [ 89.634270][ T7023] bond1 (unregistering): Released all slaves [ 89.648132][ T7016] bridge_slave_1: left allmulticast mode [ 89.648167][ T7016] bridge_slave_1: left promiscuous mode [ 89.648237][ T7016] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.762137][ T7031] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 89.791847][ T7034] syzkaller0: entered promiscuous mode [ 89.791882][ T7034] syzkaller0: entered allmulticast mode [ 90.401445][ T7058] loop0: detected capacity change from 0 to 512 [ 90.616082][ T7058] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 90.618831][ T7058] EXT4-fs (loop0): 1 truncate cleaned up [ 90.619339][ T7058] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.224440][ T7074] tipc: Enabling of bearer rejected, already enabled [ 91.231226][ T7074] bond1 (unregistering): Released all slaves [ 91.241206][ T4710] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.267335][ T7076] loop5: detected capacity change from 0 to 8 [ 91.267745][ T7076] squashfs: Unknown parameter '01777777777777777777777' [ 91.631282][ T7088] __nla_validate_parse: 1 callbacks suppressed [ 91.632785][ T7088] netlink: 88 bytes leftover after parsing attributes in process `syz.0.573'. [ 91.646098][ T7089] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 91.703713][ T7094] netlink: 28 bytes leftover after parsing attributes in process `syz.4.574'. [ 91.787751][ T7102] loop3: detected capacity change from 0 to 512 [ 91.792564][ T7102] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 91.801651][ T7100] syzkaller0: entered promiscuous mode [ 91.801683][ T7100] syzkaller0: entered allmulticast mode [ 91.811085][ T7102] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal [ 92.471474][ T7115] loop5: detected capacity change from 0 to 512 [ 92.473358][ T7115] EXT4-fs: inline encryption not supported [ 92.475122][ T7115] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 92.479293][ T7115] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2860: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 92.484230][ T7115] EXT4-fs (loop5): 1 truncate cleaned up [ 92.486016][ T7115] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.507709][ T7115] sctp: [Deprecated]: syz.5.581 (pid 7115) Use of struct sctp_assoc_value in delayed_ack socket option. [ 92.507709][ T7115] Use struct sctp_sack_info instead [ 92.680263][ T7120] No such timeout policy "syz1" [ 93.004660][ T7127] loop3: detected capacity change from 0 to 512 [ 93.006168][ T7127] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 93.013269][ T7127] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal [ 93.363452][ T5100] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.428987][ T7131] tipc: Enabling of bearer rejected, failed to enable media [ 93.457456][ T7131] bond2 (unregistering): Released all slaves [ 93.873834][ T7146] netlink: 28 bytes leftover after parsing attributes in process `syz.4.589'. [ 93.880709][ T7140] netlink: 88 bytes leftover after parsing attributes in process `syz.3.587'. [ 94.037873][ T7154] netlink: 16 bytes leftover after parsing attributes in process `syz.5.591'. [ 94.044030][ T7156] loop3: detected capacity change from 0 to 512 [ 94.048463][ T7156] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 94.057981][ T7156] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 94.074214][ T7161] syzkaller0: entered promiscuous mode [ 94.074253][ T7161] syzkaller0: entered allmulticast mode [ 94.118128][ T4725] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 94.671319][ T7188] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 94.711013][ T7188] xt_TPROXY: Can be used only with -p tcp or -p udp [ 94.767539][ T7196] netlink: 28 bytes leftover after parsing attributes in process `syz.6.604'. [ 94.780861][ T7194] netlink: 88 bytes leftover after parsing attributes in process `syz.0.603'. [ 95.064587][ T7203] loop3: detected capacity change from 0 to 512 [ 95.068667][ T7203] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 95.083177][ T7205] syzkaller0: entered promiscuous mode [ 95.083212][ T7205] syzkaller0: entered allmulticast mode [ 95.092457][ T7203] EXT4-fs (loop3): 1 truncate cleaned up [ 95.096891][ T7203] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.128851][ T4725] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.593186][ T7232] ublk_ctrl_add_dev: invalid recovery flags 10 [ 95.657454][ T7241] netlink: 88 bytes leftover after parsing attributes in process `syz.5.617'. [ 95.953376][ T7248] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 95.995801][ T7252] netlink: 28 bytes leftover after parsing attributes in process `syz.6.620'. [ 96.126742][ T7266] syzkaller0: entered promiscuous mode [ 96.128019][ T7266] syzkaller0: entered allmulticast mode [ 96.133348][ T7271] netlink: 4 bytes leftover after parsing attributes in process `syz.5.628'. [ 96.138277][ T7271] ipvlan3: entered promiscuous mode [ 96.715117][ T7291] netlink: 28 bytes leftover after parsing attributes in process `syz.4.634'. [ 96.843580][ T7297] netlink: 88 bytes leftover after parsing attributes in process `syz.4.635'. [ 96.865525][ T7303] loop0: detected capacity change from 0 to 512 [ 96.866347][ T7303] EXT4-fs: Ignoring removed orlov option [ 96.869686][ T7303] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 96.908797][ T7303] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #16: comm syz.0.637: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0) [ 96.908839][ T7303] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 96.909066][ T7303] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.637: couldn't read orphan inode 16 (err -117) [ 96.909082][ T7303] loop0: lost filesystem error report for type 5 error -117 [ 96.909196][ T7303] EXT4-fs (loop0): 1 orphan inode deleted [ 96.910783][ T7303] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.935300][ T4710] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.067649][ T7317] loop5: detected capacity change from 0 to 512 [ 97.085723][ T7317] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 97.094787][ T7319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.641'. [ 97.094825][ T7319] netlink: 12 bytes leftover after parsing attributes in process `syz.4.641'. [ 97.096236][ T7317] EXT4-fs (loop5): can't mount with journal_async_commit, fs mounted w/o journal [ 97.111263][ T7319] geneve2: entered promiscuous mode [ 97.111302][ T7319] geneve2: entered allmulticast mode [ 97.122526][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.122645][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.122665][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.122682][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.299260][ T7327] loop0: detected capacity change from 0 to 512 [ 97.302319][ T7327] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 97.318272][ T7327] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal [ 97.629248][ T7333] loop6: detected capacity change from 0 to 512 [ 97.634026][ T7333] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 97.647188][ T7333] EXT4-fs (loop6): can't mount with journal_async_commit, fs mounted w/o journal [ 97.984121][ T7333] FAULT_INJECTION: forcing a failure. [ 97.984121][ T7333] name failslab, interval 1, probability 0, space 0, times 0 [ 97.984159][ T7333] CPU: 0 UID: 0 PID: 7333 Comm: syz.6.644 Tainted: G L syzkaller #0 PREEMPT [ 97.984177][ T7333] Tainted: [L]=SOFTLOCKUP [ 97.984180][ T7333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 97.984185][ T7333] Call trace: [ 97.984188][ T7333] show_stack+0x2c/0x3c (C) [ 97.984206][ T7333] __dump_stack+0x30/0x40 [ 97.984217][ T7333] dump_stack_lvl+0xd8/0x12c [ 97.984226][ T7333] dump_stack+0x1c/0x28 [ 97.984235][ T7333] should_fail_ex+0x41c/0x590 [ 97.984246][ T7333] should_failslab+0xc4/0x120 [ 97.984254][ T7333] __kmalloc_noprof+0x108/0x6b8 [ 97.984263][ T7333] tomoyo_encode2+0x10c/0x330 [ 97.984271][ T7333] tomoyo_encode+0x34/0x50 [ 97.984278][ T7333] tomoyo_realpath_from_path+0x488/0x4dc [ 97.984286][ T7333] tomoyo_path_number_perm+0x1f0/0x500 [ 97.984293][ T7333] tomoyo_file_ioctl+0x2c/0x3c [ 97.984301][ T7333] security_file_ioctl+0xdc/0x2b0 [ 97.984309][ T7333] __arm64_sys_ioctl+0xa8/0x1c4 [ 97.984319][ T7333] invoke_syscall+0x98/0x244 [ 97.984329][ T7333] el0_svc_common+0xec/0x23c [ 97.984338][ T7333] do_el0_svc+0x4c/0x5c [ 97.984347][ T7333] el0_svc+0x64/0x260 [ 97.984358][ T7333] el0t_64_sync_handler+0x48/0x148 [ 97.984367][ T7333] el0t_64_sync+0x198/0x19c [ 97.984394][ T7333] ERROR: Out of memory at tomoyo_realpath_from_path. [ 97.992834][ T7339] netlink: 28 bytes leftover after parsing attributes in process `syz.5.645'. [ 98.226362][ T7350] netlink: 12 bytes leftover after parsing attributes in process `syz.4.647'. [ 98.295927][ T7359] loop4: detected capacity change from 0 to 256 [ 98.299032][ T7359] vfat: Unknown parameter 'fowner<00000000000000000000' [ 98.333775][ T7362] syzkaller0: entered promiscuous mode [ 98.335051][ T7362] syzkaller0: entered allmulticast mode [ 98.343305][ T7357] input: syz1 as /devices/virtual/input/input5 [ 98.392754][ T7367] loop4: detected capacity change from 0 to 512 [ 98.412080][ T7367] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 98.421077][ T7367] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 98.421713][ T7368] netlink: 88 bytes leftover after parsing attributes in process `syz.0.656'. [ 98.492310][ T7372] loop6: detected capacity change from 0 to 512 [ 98.561041][ T7372] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 98.590309][ T7372] EXT4-fs (loop6): can't mount with journal_async_commit, fs mounted w/o journal [ 98.605863][ T7376] loop3: detected capacity change from 0 to 512 [ 98.845167][ T7372] loop6: detected capacity change from 0 to 512 [ 98.846912][ T7376] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 98.854057][ T7379] netlink: 28 bytes leftover after parsing attributes in process `syz.0.659'. [ 98.863221][ T7372] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 98.863255][ T7372] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e018, mo2=0002] [ 98.863343][ T7372] EXT4-fs (loop6): orphan cleanup on readonly fs [ 98.867725][ T7372] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.657: bg 0: block 15: invalid block bitmap [ 98.867776][ T7372] loop6: lost filesystem error report for type 5 error -117 [ 98.867861][ T7376] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal [ 98.876148][ T7372] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 98.876185][ T7372] loop6: lost filesystem error report for type 5 error -117 [ 98.879533][ T7372] EXT4-fs (loop6): 1 truncate cleaned up [ 98.880022][ C0] EXT4-fs (loop6): error count since last fsck: 2 [ 98.880049][ C0] EXT4-fs (loop6): initial error at time 98: ext4_validate_block_bitmap:432 [ 98.880076][ C0] EXT4-fs (loop6): last error at time 98: ext4_mb_clear_bb:6679 [ 98.889618][ T7372] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 98.917575][ T7372] EXT4-fs: can't change dax mount option while remounting [ 99.283883][ T7390] loop0: detected capacity change from 0 to 512 [ 99.295001][ T7390] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 99.302294][ T7390] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal [ 99.473194][ T5792] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.552090][ T7418] netlink: 4 bytes leftover after parsing attributes in process `syz.5.667'. [ 99.562682][ T7421] FAULT_INJECTION: forcing a failure. [ 99.562682][ T7421] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 99.562710][ T7421] CPU: 0 UID: 0 PID: 7421 Comm: syz.0.661 Tainted: G L syzkaller #0 PREEMPT [ 99.562726][ T7421] Tainted: [L]=SOFTLOCKUP [ 99.562730][ T7421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 99.562736][ T7421] Call trace: [ 99.562740][ T7421] show_stack+0x2c/0x3c (C) [ 99.562760][ T7421] __dump_stack+0x30/0x40 [ 99.562771][ T7421] dump_stack_lvl+0xd8/0x12c [ 99.562781][ T7421] dump_stack+0x1c/0x28 [ 99.562790][ T7421] should_fail_ex+0x41c/0x590 [ 99.562801][ T7421] should_fail+0x14/0x24 [ 99.562811][ T7421] should_fail_usercopy+0x20/0x30 [ 99.562820][ T7421] _inline_copy_from_user+0x3c/0x188 [ 99.562832][ T7421] video_usercopy+0x2d0/0xe88 [ 99.562841][ T7421] video_ioctl2+0x3c/0x50 [ 99.562849][ T7421] v4l2_ioctl+0x148/0x18c [ 99.562858][ T7421] __arm64_sys_ioctl+0x14c/0x1c4 [ 99.562869][ T7421] invoke_syscall+0x98/0x244 [ 99.562878][ T7421] el0_svc_common+0xec/0x23c [ 99.562888][ T7421] do_el0_svc+0x4c/0x5c [ 99.562897][ T7421] el0_svc+0x64/0x260 [ 99.562908][ T7421] el0t_64_sync_handler+0x48/0x148 [ 99.562917][ T7421] el0t_64_sync+0x198/0x19c [ 99.618646][ T7422] loop5: detected capacity change from 0 to 256 [ 99.661001][ T7412] cgroup: fork rejected by pids controller in /syz3 [ 99.783452][ T7503] netlink: 28 bytes leftover after parsing attributes in process `syz.5.670'. [ 99.852765][ T7508] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 99.980787][ T7519] loop0: detected capacity change from 0 to 512 [ 99.981771][ T7519] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 99.982633][ T4722] Bluetooth: hci4: unexpected event for opcode 0x2003 [ 100.150653][ T7519] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal [ 100.417949][ T7537] loop3: detected capacity change from 0 to 512 [ 100.433883][ T7537] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 100.460401][ T7537] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal [ 100.465906][ T7538] loop5: detected capacity change from 0 to 8192 [ 100.532367][ T7537] FAULT_INJECTION: forcing a failure. [ 100.532367][ T7537] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 100.534832][ T7537] CPU: 0 UID: 0 PID: 7537 Comm: syz.3.681 Tainted: G L syzkaller #0 PREEMPT [ 100.534853][ T7537] Tainted: [L]=SOFTLOCKUP [ 100.534857][ T7537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 100.534862][ T7537] Call trace: [ 100.534867][ T7537] show_stack+0x2c/0x3c (C) [ 100.534891][ T7537] __dump_stack+0x30/0x40 [ 100.534905][ T7537] dump_stack_lvl+0xd8/0x12c [ 100.534915][ T7537] dump_stack+0x1c/0x28 [ 100.534924][ T7537] should_fail_ex+0x41c/0x590 [ 100.534935][ T7537] should_fail+0x14/0x24 [ 100.534945][ T7537] should_fail_usercopy+0x20/0x30 [ 100.534955][ T7537] _inline_copy_from_user+0x3c/0x188 [ 100.534966][ T7537] video_usercopy+0x2d0/0xe88 [ 100.534974][ T7537] video_ioctl2+0x3c/0x50 [ 100.534983][ T7537] v4l2_ioctl+0x148/0x18c [ 100.534991][ T7537] __arm64_sys_ioctl+0x14c/0x1c4 [ 100.535002][ T7537] invoke_syscall+0x98/0x244 [ 100.535012][ T7537] el0_svc_common+0xec/0x23c [ 100.535021][ T7537] do_el0_svc+0x4c/0x5c [ 100.535034][ T7537] el0_svc+0x64/0x260 [ 100.535045][ T7537] el0t_64_sync_handler+0x48/0x148 [ 100.535054][ T7537] el0t_64_sync+0x198/0x19c [ 100.655010][ T7544] 9pnet_fd: p9_fd_create_tcp (7544): problem connecting socket to 127.0.0.1 [ 100.743743][ T7548] overlayfs: workdir and upperdir must reside under the same mount [ 100.748175][ T7549] overlayfs: workdir and upperdir must reside under the same mount [ 100.849949][ T7546] Injecting memory failure for pfn 0x13b7fe at process virtual address 0x20ffe000 [ 100.858147][ T7546] Memory failure: 0x13b7fe: Sending SIGBUS to syz.0.684:7546 due to hardware memory corruption [ 100.858220][ T7546] Memory failure: 0x13b7fe: recovery action for dirty LRU page: Recovered [ 100.894821][ T4722] Bluetooth: hci0: unexpected event for opcode 0x2003 [ 100.964788][ T7561] SQUASHFS error: Unable to read inode 0xa7 [ 101.027099][ T7563] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 101.027320][ T7564] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 101.027363][ T7564] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 101.033992][ T7563] EXT4-fs (loop3): orphan cleanup on readonly fs [ 101.035346][ T7563] EXT4-fs error (device loop3): __ext4_iget:5533: inode #11: block 8: comm syz.3.690: invalid block [ 101.035383][ T7563] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 101.037535][ T7563] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.690: couldn't read orphan inode 11 (err -117) [ 101.037562][ T7563] loop3: lost filesystem error report for type 5 error -117 [ 101.041632][ C0] EXT4-fs (loop3): error count since last fsck: 2 [ 101.041642][ C0] EXT4-fs (loop3): initial error at time 101: __ext4_iget:5533: inode 11: block 8 [ 101.041662][ C0] EXT4-fs (loop3): last error at time 101: ext4_orphan_get:1404 [ 101.048859][ T7563] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 101.049757][ T7563] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.070177][ T7564] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 101.072242][ T7564] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 101.072315][ T7564] System zones: 0-2, 18-18, 34-35 [ 101.127387][ T7569] SQUASHFS error: Unable to read inode 0xa7 [ 101.351506][ T7564] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.400665][ T7564] netlink: 'syz.0.691': attribute type 13 has an invalid length. [ 101.422804][ T7563] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.690: bg 0: block 127: padding at end of block bitmap is not set [ 101.426694][ T7563] loop3: lost filesystem error report for type 5 error -117 [ 101.429673][ T7563] EXT4-fs (loop3): Remounting filesystem read-only [ 101.429889][ T7563] EXT4-fs warning (device loop3): ext4_xattr_inode_lookup_create:1609: inode #18: comm syz.3.690: cleanup dec ref error -117 [ 101.430061][ T7563] EXT4-fs warning (device loop3): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 101.430104][ T7563] EXT4-fs (loop3): 1 orphan inode deleted [ 101.440999][ T7563] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.458184][ T7564] syzkaller0: entered promiscuous mode [ 101.458218][ T7564] syzkaller0: entered allmulticast mode [ 101.463563][ T4725] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.497136][ T7576] EXT4-fs: Ignoring removed orlov option [ 101.514882][ T7576] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 101.556567][ T7571] 8021q: VLANs not supported on ipvlan1 [ 101.589070][ T4710] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.627788][ T7582] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 101.885594][ T7582] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal [ 102.045514][ T7591] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.072267][ T7591] netlink: 'syz.5.697': attribute type 12 has an invalid length. [ 102.072301][ T7591] netlink: 'syz.5.697': attribute type 29 has an invalid length. [ 102.072323][ T7591] __nla_validate_parse: 3 callbacks suppressed [ 102.072335][ T7591] netlink: 148 bytes leftover after parsing attributes in process `syz.5.697'. [ 102.072351][ T7591] netlink: 'syz.5.697': attribute type 1 has an invalid length. [ 102.072362][ T7591] netlink: 47 bytes leftover after parsing attributes in process `syz.5.697'. [ 102.082377][ T7591] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 205 vs 206 free clusters [ 102.107355][ T5100] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.162860][ T4722] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 102.167483][ T7596] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 102.182367][ T7596] EXT4-fs (loop5): can't mount with journal_async_commit, fs mounted w/o journal [ 102.275129][ T7606] netlink: 60 bytes leftover after parsing attributes in process `syz.0.702'. [ 102.275384][ T7606] netlink: 60 bytes leftover after parsing attributes in process `syz.0.702'. [ 102.298186][ T7596] FAULT_INJECTION: forcing a failure. [ 102.298186][ T7596] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.317005][ T7596] CPU: 1 UID: 0 PID: 7596 Comm: syz.5.698 Tainted: G L syzkaller #0 PREEMPT [ 102.317030][ T7596] Tainted: [L]=SOFTLOCKUP [ 102.317034][ T7596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 102.317043][ T7596] Call trace: [ 102.317047][ T7596] show_stack+0x2c/0x3c (C) [ 102.317070][ T7596] __dump_stack+0x30/0x40 [ 102.317081][ T7596] dump_stack_lvl+0xd8/0x12c [ 102.317091][ T7596] dump_stack+0x1c/0x28 [ 102.317101][ T7596] should_fail_ex+0x41c/0x590 [ 102.317112][ T7596] should_fail+0x14/0x24 [ 102.317121][ T7596] should_fail_usercopy+0x20/0x30 [ 102.317131][ T7596] _inline_copy_from_user+0x3c/0x174 [ 102.317139][ T7596] kstrtouint_from_user+0xcc/0x174 [ 102.317146][ T7596] proc_fail_nth_write+0x9c/0x234 [ 102.317155][ T7596] vfs_write+0x2a4/0xa0c [ 102.317165][ T7596] ksys_write+0x12c/0x228 [ 102.317172][ T7596] __arm64_sys_write+0x7c/0x90 [ 102.317178][ T7596] invoke_syscall+0x98/0x244 [ 102.317188][ T7596] el0_svc_common+0xec/0x23c [ 102.317198][ T7596] do_el0_svc+0x4c/0x5c [ 102.317207][ T7596] el0_svc+0x64/0x260 [ 102.317217][ T7596] el0t_64_sync_handler+0x48/0x148 [ 102.317226][ T7596] el0t_64_sync+0x198/0x19c [ 102.368770][ T4725] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 102.557606][ T7627] netlink: 132 bytes leftover after parsing attributes in process `syz.3.705'. [ 102.886232][ T7639] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 102.901876][ T7639] EXT4-fs (loop5): can't mount with journal_async_commit, fs mounted w/o journal [ 103.079343][ T7643] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 103.190978][ T7646] bridge_slave_0: left allmulticast mode [ 103.192690][ T7646] bridge_slave_0: left promiscuous mode [ 103.194741][ T7646] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.203575][ T7646] bond0: (slave bond_slave_0): Releasing backup interface [ 103.283586][ T7646] bond0: (slave bond_slave_1): Releasing backup interface [ 103.381820][ T7646] team0: Port device team_slave_0 removed [ 103.392662][ T7646] team0: Port device team_slave_1 removed [ 103.394950][ T7646] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.460496][ T7646] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.466687][ T7651] set_capacity_and_notify: 9 callbacks suppressed [ 103.466706][ T7651] loop3: detected capacity change from 0 to 8192 [ 103.489913][ T7646] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.491744][ T7646] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.494279][ T7646] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 103.540468][ T7651] loop3: p1 p2 p3 p4 [ 103.540504][ T7651] loop3: partition table partially beyond EOD, truncated [ 103.540619][ T7651] loop3: p1 start 51379968 is beyond EOD, truncated [ 103.540641][ T7651] loop3: p2 size 100664832 extends beyond EOD, truncated [ 103.562891][ T7651] loop3: p3 start 83886080 is beyond EOD, truncated [ 103.562941][ T7651] loop3: p4 start 131072 is beyond EOD, truncated [ 103.692847][ T7662] loop6: detected capacity change from 0 to 2048 [ 103.701771][ T7662] EXT4-fs (loop6): Cannot use DAX on a filesystem that may contain inline data [ 103.711680][ T7647] team0: Mode changed to "random" [ 103.711805][ T7653] tipc: Started in network mode [ 103.711817][ T7653] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 103.711863][ T7653] tipc: Enabled bearer , priority 0 [ 103.739922][ T7664] loop3: detected capacity change from 0 to 8192 [ 103.748393][ T7664] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 103.751963][ T4703] udevd[4703]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 103.764007][ T7669] netlink: 40 bytes leftover after parsing attributes in process `syz.0.719'. [ 103.764045][ T7669] netlink: 40 bytes leftover after parsing attributes in process `syz.0.719'. [ 103.790947][ T7669] netlink: 40 bytes leftover after parsing attributes in process `syz.0.719'. [ 103.790984][ T7669] netlink: 40 bytes leftover after parsing attributes in process `syz.0.719'. [ 103.812142][ T7669] netlink: 40 bytes leftover after parsing attributes in process `syz.0.719'. [ 103.819701][ T7676] loop8: detected capacity change from 0 to 1 [ 103.836760][ T7676] Dev loop8: unable to read RDB block 1 [ 103.836802][ T7676] loop8: unable to read partition table [ 103.836883][ T7676] loop8: partition table beyond EOD, truncated [ 103.836903][ T7676] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 103.848971][ T4725] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 103.849769][ T7676] macsec1: entered promiscuous mode [ 103.849797][ T7676] virt_wifi0: entered promiscuous mode [ 103.853965][ T4725] FAT-fs (loop3): Filesystem has been set read-only [ 103.966589][ T7679] netlink: 'syz.6.723': attribute type 1 has an invalid length. [ 103.980881][ T7681] loop0: detected capacity change from 0 to 512 [ 104.000671][ T7681] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 104.026808][ T7681] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal [ 104.034374][ T7681] overlayfs: failed to resolve './bus': -2 [ 104.380881][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 104.384375][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 104.386738][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 104.389216][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 104.391698][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 104.859465][ T7709] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 104.907205][ T7713] .`: (slave bond_slave_0): Releasing backup interface [ 104.989124][ T7713] .`: (slave bond_slave_1): Releasing backup interface [ 105.028712][ T7713] team0: Port device team_slave_0 removed [ 105.035312][ T7713] team0: Port device team_slave_1 removed [ 105.036804][ T7713] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.039852][ T7713] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.045208][ T7713] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 105.062410][ T7715] team0: Mode changed to "random" [ 105.062623][ T7718] tipc: Enabled bearer , priority 0 [ 105.372387][ T7726] loop6: detected capacity change from 0 to 512 [ 105.386738][ T7726] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 105.396218][ T7726] EXT4-fs (loop6): can't mount with journal_async_commit, fs mounted w/o journal [ 105.502296][ T7694] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.507679][ T7694] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.507800][ T7694] bridge_slave_0: entered allmulticast mode [ 105.508287][ T7694] bridge_slave_0: entered promiscuous mode [ 105.509063][ T7694] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.509093][ T7694] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.509160][ T7694] bridge_slave_1: entered allmulticast mode [ 105.509584][ T7694] bridge_slave_1: entered promiscuous mode [ 105.573768][ T7734] cgroup: name respecified [ 105.780180][ T4715] tipc: Node number set to 11578026 [ 105.781794][ T7694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.782817][ T7694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.788985][ T7694] team0: Port device team_slave_0 added [ 105.863997][ T7694] team0: Port device team_slave_1 added [ 105.902732][ T7694] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.902758][ T7694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.902774][ T7694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.903439][ T7694] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.903446][ T7694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.903458][ T7694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.383787][ T7694] hsr_slave_0: entered promiscuous mode [ 106.385619][ T7694] hsr_slave_1: entered promiscuous mode [ 106.387421][ T7694] debugfs: 'hsr0' already exists in 'hsr' [ 106.388828][ T7694] Cannot create hsr debugfs directory [ 106.404362][ T7751] loop5: detected capacity change from 0 to 512 [ 106.407311][ T7753] loop4: detected capacity change from 0 to 512 [ 106.409613][ T7751] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 106.411657][ T50] Bluetooth: hci3: command tx timeout [ 106.417108][ T7753] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 106.451099][ T7751] EXT4-fs (loop5): can't mount with journal_async_commit, fs mounted w/o journal [ 106.456821][ T7753] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 106.500767][ T7694] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 106.512069][ T7694] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.515602][ T7694] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 106.518537][ T7694] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.521498][ T7694] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 106.542167][ T7694] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.545157][ T7694] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 106.549556][ T7694] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.616631][ T7694] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.623042][ T7694] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.624937][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.624981][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.627721][ T7402] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.627762][ T7402] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.693936][ T7772] loop0: detected capacity change from 0 to 128 [ 106.698425][ T7772] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 106.700113][ T7772] System zones: 1-3, 19-19, 35-36 [ 106.701994][ T7772] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 106.707305][ T7772] EXT4-fs warning (device loop0): verify_group_input:137: Cannot add at group 1986330625 (only 1 groups) [ 106.741287][ T4710] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 106.776680][ T7784] tipc: Enabling of bearer rejected, already enabled [ 106.795521][ T7784] bond1 (unregistering): Released all slaves [ 106.820582][ T7791] loop5: detected capacity change from 0 to 512 [ 106.825002][ T7791] EXT4-fs (loop5): filesystem has both journal inode and journal device! [ 106.842603][ T7788] netlink: 'syz.4.746': attribute type 1 has an invalid length. [ 106.905891][ T7798] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 106.912806][ T7798] EXT4-fs (loop5): 1 truncate cleaned up [ 106.913283][ T7798] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.944575][ T5100] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.955032][ T7805] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 106.960610][ T7805] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 107.444947][ T7694] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.503235][ T7810] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 107.568411][ T7694] veth0_vlan: entered promiscuous mode [ 107.572705][ T7694] veth1_vlan: entered promiscuous mode [ 107.593441][ T7694] veth0_macvtap: entered promiscuous mode [ 107.594850][ T7694] veth1_macvtap: entered promiscuous mode [ 107.607955][ T7694] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.615654][ T7694] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.621977][ T7407] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.622016][ T7407] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.622039][ T7407] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.622060][ T7407] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.662174][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.663974][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.678168][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.678201][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.070985][ T5100] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.106766][ T7828] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.125181][ T7828] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 108.132250][ T7828] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 108.135172][ T7828] EXT4-fs (loop0): This should not happen!! Data will be lost [ 108.135172][ T7828] [ 108.136946][ T7828] EXT4-fs (loop0): Total free blocks count 0 [ 108.138028][ T7828] EXT4-fs (loop0): Free/Dirty block details [ 108.139163][ T7828] EXT4-fs (loop0): free_blocks=65280 [ 108.140369][ T7828] EXT4-fs (loop0): dirty_blocks=32 [ 108.141292][ T7828] EXT4-fs (loop0): Block reservation details [ 108.142432][ T7828] EXT4-fs (loop0): i_reserved_data_blocks=32 [ 108.174085][ T4710] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 108.174939][ T4710] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.218836][ T7842] __nla_validate_parse: 4 callbacks suppressed [ 108.218882][ T7842] netlink: 28 bytes leftover after parsing attributes in process `syz.7.756'. [ 108.252079][ T7842] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.252785][ T7842] bridge_slave_1: left allmulticast mode [ 108.253643][ T7842] bridge_slave_1: left promiscuous mode [ 108.253739][ T7842] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.297002][ T7850] tipc: Enabling of bearer rejected, failed to enable media [ 108.374460][ T7850] bond2 (unregistering): Released all slaves [ 108.438553][ T7859] syzkaller0: entered promiscuous mode [ 108.439702][ T7859] syzkaller0: entered allmulticast mode [ 108.490332][ T50] Bluetooth: hci3: command tx timeout [ 108.648798][ T7875] set_capacity_and_notify: 4 callbacks suppressed [ 108.667134][ T7875] loop0: detected capacity change from 0 to 512 [ 108.676698][ T7875] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 108.684128][ T7875] EXT4-fs (loop0): 1 truncate cleaned up [ 108.684611][ T7875] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.727398][ T4710] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.750376][ T7883] loop7: detected capacity change from 0 to 128 [ 108.757249][ T7885] loop6: detected capacity change from 0 to 2048 [ 108.759592][ T7885] EXT4-fs: Ignoring removed oldalloc option [ 108.776693][ T7887] netlink: 28 bytes leftover after parsing attributes in process `syz.0.770'. [ 108.796653][ T7885] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.182936][ T7897] tipc: Enabling of bearer rejected, already enabled [ 109.192838][ T7897] bond1 (unregistering): Released all slaves [ 109.240477][ T7776] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 109.245497][ T7776] EXT4-fs (loop6): Remounting filesystem read-only [ 109.740310][ T7920] loop5: detected capacity change from 0 to 512 [ 109.747570][ T5792] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.751932][ T7920] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 109.776927][ T7920] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.785974][ T7922] syzkaller0: entered promiscuous mode [ 109.786004][ T7922] syzkaller0: entered allmulticast mode [ 109.823563][ T5100] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.886688][ T7932] syzkaller0: entered promiscuous mode [ 109.886725][ T7932] syzkaller0: entered allmulticast mode [ 109.973620][ T7940] tipc: Enabling of bearer rejected, already enabled [ 110.008175][ T7940] bond1 (unregistering): Released all slaves [ 110.026590][ T7944] syzkaller0: entered promiscuous mode [ 110.028142][ T7944] syzkaller0: entered allmulticast mode [ 110.072887][ T7947] loop5: detected capacity change from 0 to 512 [ 110.080209][ T7947] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 110.109551][ T7947] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.788: bad orphan inode 13 [ 110.109591][ T7947] loop5: lost filesystem error report for type 5 error -117 [ 110.109757][ T7947] ext4_test_bit(bit=12, block=18) = 1 [ 110.109765][ T7947] is_bad_inode(inode)=0 [ 110.109771][ T7947] NEXT_ORPHAN(inode)=0 [ 110.109776][ T7947] max_ino=32 [ 110.109780][ T7947] i_nlink=1 [ 110.111260][ T7947] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 110.114451][ T7947] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 110.117668][ T7947] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.788: bg 0: block 248: padding at end of block bitmap is not set [ 110.118555][ T7947] Quota error (device loop5): write_blk: dquota write failed [ 110.118589][ T7947] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 110.118610][ T7947] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.788: Failed to acquire dquot type 1 [ 110.293470][ T5100] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 110.534147][ T7965] loop6: detected capacity change from 0 to 512 [ 110.535992][ T7965] EXT4-fs: inline encryption not supported [ 110.540435][ T7965] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 110.540471][ T7965] EXT4-fs (loop6): VFS: Can't find ext4 filesystem [ 110.542932][ T7968] syzkaller0: entered promiscuous mode [ 110.542946][ T7968] syzkaller0: entered allmulticast mode [ 110.570693][ T50] Bluetooth: hci3: command tx timeout [ 110.747660][ T7986] loop7: detected capacity change from 0 to 1024 [ 110.787682][ T7986] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.806568][ T7986] netlink: 92 bytes leftover after parsing attributes in process `syz.7.801'. [ 110.806614][ T7986] netlink: 36 bytes leftover after parsing attributes in process `syz.7.801'. [ 110.827233][ T7998] macvlan1: entered promiscuous mode [ 110.834836][ T7998] macvlan1: left promiscuous mode [ 110.922201][ T7694] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.214520][ T8010] random: crng reseeded on system resumption [ 111.278210][ T8013] binder: BINDER_SET_CONTEXT_MGR already set [ 111.278239][ T8013] binder: 8012:8013 ioctl 4018620d 20000240 returned -16 [ 111.278283][ T8013] binder: BINDER_SET_CONTEXT_MGR already set [ 111.278292][ T8013] binder: 8012:8013 ioctl 4018620d 20000240 returned -16 [ 111.278322][ T8013] binder: BINDER_SET_CONTEXT_MGR already set [ 111.278330][ T8013] binder: 8012:8013 ioctl 4018620d 20000240 returned -16 [ 111.278359][ T8013] binder: BINDER_SET_CONTEXT_MGR already set [ 111.278366][ T8013] binder: 8012:8013 ioctl 4018620d 20000240 returned -16 [ 111.278392][ T8013] binder: BINDER_SET_CONTEXT_MGR already set [ 111.278399][ T8013] binder: 8012:8013 ioctl 4018620d 20000240 returned -16 [ 111.278425][ T8013] binder: BINDER_SET_CONTEXT_MGR already set [ 111.278432][ T8013] binder: 8012:8013 ioctl 4018620d 20000240 returned -16 [ 111.278458][ T8013] binder: BINDER_SET_CONTEXT_MGR already set [ 111.278465][ T8013] binder: 8012:8013 ioctl 4018620d 20000240 returned -16 [ 111.278493][ T8013] binder: BINDER_SET_CONTEXT_MGR already set [ 111.278499][ T8013] binder: 8012:8013 ioctl 4018620d 20000240 returned -16 [ 111.278525][ T8013] binder: BINDER_SET_CONTEXT_MGR already set [ 111.278532][ T8013] binder: 8012:8013 ioctl 4018620d 20000240 returned -16 [ 111.278557][ T8013] binder: BINDER_SET_CONTEXT_MGR already set [ 111.278576][ T8013] binder: 8012:8013 ioctl 4018620d 20000240 returned -16 [ 111.278603][ T8013] binder: BINDER_SET_CONTEXT_MGR already set [ 111.278609][ T8013] binder: 8012:8013 ioctl 4018620d 20000240 returned -16 [ 111.278637][ T8013] binder: BINDER_SET_CONTEXT_MGR already set [ 111.278644][ T8013] binder: 8012:8013 ioctl 4018620d 20000240 returned -16 [ 111.278669][ T8013] binder: BINDER_SET_CONTEXT_MGR already set [ 111.278676][ T8013] binder: 8012:8013 ioctl 4018620d 20000240 returned -16 [ 111.278703][ T8013] binder: BINDER_SET_CONTEXT_MGR already set [ 111.278710][ T8013] binder: 8012:8013 ioctl 4018620d 20000240 returned -16 [ 111.278735][ T8013] binder: BINDER_SET_CONTEXT_MGR already set [ 111.278742][ T8013] binder: 8012:8013 ioctl 4018620d 20000240 returned -16 [ 111.278775][ T8013] binder: BINDER_SET_CONTEXT_MGR already set [ 111.278781][ T8013] binder: 8012:8013 ioctl 4018620d 20000240 returned -16 [ 111.278807][ T8013] binder: BINDER_SET_CONTEXT_MGR already set [ 111.278813][ T8013] binder: 8012:8013 ioctl 4018620d 20000240 returned -16 [ 111.278839][ T8013] binder: BINDER_SET_CONTEXT_MGR already set [ 111.278845][ T8013] binder: 8012:8013 ioctl 4018620d 20000240 returned -16 [ 111.278870][ T8013] binder: BINDER_SET_CONTEXT_MGR already set [ 111.278877][ T8013] binder: 8012:8013 ioctl 4018620d 20000240 returned -16 [ 111.278906][ T8013] binder: BINDER_SET_CONTEXT_MGR already set [ 111.278913][ T8013] binder: 8012:8013 ioctl 4018620d 20000240 returned -16 [ 111.278938][ T8013] binder: BINDER_SET_CONTEXT_MGR already set [ 111.278945][ T8013] binder: 8012:8013 ioctl 4018620d 20000240 returned -16 [ 111.278970][ T8013] binder: BINDER_SET_CONTEXT_MGR already set [ 111.278976][ T8013] binder: 8012:8013 ioctl 4018620d 20000240 returned -16 [ 111.279002][ T8013] binder: BINDER_SET_CONTEXT_MGR already set [ 111.279009][ T8013] binder: 8012:8013 ioctl 4018620d 20000240 returned -16 [ 111.279051][ T8013] binder: BINDER_SET_CONTEXT_MGR already set [ 111.279058][ T8013] binder: 8012:8013 ioctl 4018620d 20000240 returned -16 [ 111.279089][ T8013] binder: BINDER_SET_CONTEXT_MGR already set [ 111.279097][ T8013] binder: 8012:8013 ioctl 4018620d 20000240 returned -16 [ 111.279127][ T8013] binder: BINDER_SET_CONTEXT_MGR already set [ 111.279134][ T8013] binder: 8012:8013 ioctl 4018620d 20000240 returned -16 [ 111.279162][ T8013] binder: BINDER_SET_CONTEXT_MGR already set [ 111.279168][ T8013] binder: 8012:8013 ioctl 4018620d 20000240 returned -16 [ 111.279198][ T8013] binder: BINDER_SET_CONTEXT_MGR already set [ 111.279205][ T8013] binder: 8012:8013 ioctl 4018620d 20000240 returned -16 [ 111.279231][ T8013] binder: BINDER_SET_CONTEXT_MGR already set [ 111.279238][ T8013] binder: 8012:8013 ioctl 4018620d 20000240 returned -16 [ 111.279260][ T8013] binder: BINDER_SET_CONTEXT_MGR already set [ 111.279264][ T8013] binder: 8012:8013 ioctl 4018620d 20000240 returned -16 [ 111.279286][ T8013] binder: BINDER_SET_CONTEXT_MGR already set [ 111.279289][ T8013] binder: 8012:8013 ioctl 4018620d 20000240 returned -16 [ 111.279315][ T8013] binder: BINDER_SET_CONTEXT_MGR already set [ 111.279318][ T8013] binder: 8012:8013 ioctl 4018620d 20000240 returned -16 [ 111.279339][ T8013] binder: BINDER_SET_CONTEXT_MGR already set [ 111.279343][ T8013] binder: 8012:8013 ioctl 4018620d 20000240 returned -16 [ 111.279364][ T8013] binder: BINDER_SET_CONTEXT_MGR already set [ 111.279367][ T8013] binder: 8012:8013 ioctl 4018620d 20000240 returned -16 [ 111.279389][ T8013] binder: BINDER_SET_CONTEXT_MGR already set [ 111.279392][ T8013] binder: 8012:8013 ioctl 4018620d 20000240 returned -16 [ 111.279418][ T8013] binder: BINDER_SET_CONTEXT_MGR already set [ 111.279421][ T8013] binder: 8012:8013 ioctl 4018620d 20000240 returned -16 [ 111.279443][ T8013] binder: BINDER_SET_CONTEXT_MGR already set [ 111.279446][ T8013] binder: 8012:8013 ioctl 4018620d 20000240 returned -16 [ 111.279468][ T8013] binder: BINDER_SET_CONTEXT_MGR already set [ 111.279471][ T8013] binder: 8012:8013 ioctl 4018620d 20000240 returned -16 [ 111.279493][ T8013] binder: BINDER_SET_CONTEXT_MGR already set [ 111.279496][ T8013] binder: 8012:8013 ioctl 4018620d 20000240 returned -16 [ 111.279522][ T8013] binder: BINDER_SET_CONTEXT_MGR already set [ 111.279525][ T8013] binder: 8012:8013 ioctl 4018620d 20000240 returned -16 [ 111.279548][ T8013] binder: BINDER_SET_CONTEXT_MGR already set [ 111.279551][ T8013] binder: 8012:8013 ioctl 4018620d 20000240 returned -16 [ 111.279582][ T8013] binder: BINDER_SET_CONTEXT_MGR already set [ 111.279585][ T8013] binder: 8012:8013 ioctl 4018620d 20000240 returned -16 [ 111.279608][ T8013] binder: BINDER_SET_CONTEXT_MGR already set [ 111.279611][ T8013] binder: 8012:8013 ioctl 4018620d 20000240 returned -16 [ 111.279636][ T8013] binder: BINDER_SET_CONTEXT_MGR already set [ 111.279639][ T8013] binder: 8012:8013 ioctl 4018620d 20000240 returned -16 [ 111.279661][ T8013] binder: BINDER_SET_CONTEXT_MGR already set [ 111.279664][ T8013] binder: 8012:8013 ioctl 4018620d 20000240 returned -16 [ 111.279686][ T8013] binder: BINDER_SET_CONTEXT_MGR already set [ 111.279689][ T8013] binder: 8012:8013 ioctl 4018620d 20000240 returned -16 [ 111.279711][ T8013] binder: BINDER_SET_CONTEXT_MGR already set [ 111.279714][ T8013] binder: 8012:8013 ioctl 4018620d 20000240 returned -16 [ 111.279740][ T8013] binder: BINDER_SET_CONTEXT_MGR already set [ 111.279743][ T8013] binder: 8012:8013 ioctl 4018620d 20000240 returned -16 [ 111.279765][ T8013] binder: BINDER_SET_CONTEXT_MGR already set [ 111.279768][ T8013] binder: 8012:8013 ioctl 4018620d 20000240 returned -16 [ 111.279791][ T8013] binder: BINDER_SET_CONTEXT_MGR already set [ 111.279794][ T8013] binder: 8012:8013 ioctl 4018620d 20000240 returned -16 [ 111.279816][ T8013] binder: BINDER_SET_CONTEXT_MGR already set [ 111.279819][ T8013] binder: 8012:8013 ioctl 4018620d 20000240 returned -16 [ 111.279847][ T8013] binder: BINDER_SET_CONTEXT_MGR already set [ 111.279851][ T8013] binder: 8012:8013 ioctl 4018620d 20000240 returned -16 [ 111.279872][ T8013] binder: BINDER_SET_CONTEXT_MGR already set [ 111.279875][ T8013] binder: 8012:8013 ioctl 4018620d 20000240 returned -16 [ 111.279897][ T8013] binder: BINDER_SET_CONTEXT_MGR already set [ 111.279900][ T8013] binder: 8012:8013 ioctl 4018620d 20000240 returned -16 [ 111.279922][ T8013] binder: BINDER_SET_CONTEXT_MGR already set [ 111.279925][ T8013] binder: 8012:8013 ioctl 4018620d 20000240 returned -16 [ 111.279951][ T8013] binder: BINDER_SET_CONTEXT_MGR already set [ 111.279954][ T8013] binder: 8012:8013 ioctl 4018620d 20000240 returned -16 [ 111.279976][ T8013] binder: BINDER_SET_CONTEXT_MGR already set [ 111.279980][ T8013] binder: 8012:8013 ioctl 4018620d 20000240 returned -16 [ 111.382539][ T8017] loop6: detected capacity change from 0 to 8192 [ 111.419048][ T8017] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 111.460548][ T8024] syzkaller0: entered promiscuous mode [ 111.461833][ T8024] syzkaller0: entered allmulticast mode [ 111.525716][ T8027] tipc: Enabling of bearer rejected, already enabled [ 111.538806][ T8027] bond1 (unregistering): Released all slaves [ 111.596949][ T8033] x_tables: duplicate underflow at hook 2 [ 111.781877][ T8051] loop4: detected capacity change from 0 to 512 [ 111.795139][ T8051] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0002] [ 111.795205][ T8051] System zones: 1-12 [ 111.800972][ T8051] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.824: error while reading EA inode 32 err=-116 [ 111.801012][ T8051] loop4: lost filesystem error report for type 5 error -117 [ 111.805143][ T8054] loop6: detected capacity change from 0 to 512 [ 111.810022][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 111.810060][ C0] EXT4-fs (loop4): initial error at time 111: ext4_xattr_inode_iget:446 [ 111.810090][ C0] EXT4-fs (loop4): last error at time 111: ext4_xattr_inode_iget:446 [ 111.811440][ T8051] EXT4-fs (loop4): Remounting filesystem read-only [ 111.811478][ T8051] EXT4-fs warning (device loop4): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 111.811534][ T8051] EXT4-fs (loop4): 1 orphan inode deleted [ 111.812388][ T8051] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.830137][ T8054] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 111.864886][ T8057] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 111.866934][ T8054] EXT4-fs (loop6): 1 truncate cleaned up [ 111.867403][ T8054] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.876239][ T8060] netlink: 8 bytes leftover after parsing attributes in process `syz.0.826'. [ 111.878892][ T8060] netlink: 4 bytes leftover after parsing attributes in process `syz.0.826'. [ 111.886186][ T8054] netlink: 4 bytes leftover after parsing attributes in process `syz.6.823'. [ 111.889249][ T8060] netlink: 12 bytes leftover after parsing attributes in process `syz.0.826'. [ 111.893104][ T8057] EXT4-fs (loop7): can't mount with journal_async_commit, fs mounted w/o journal [ 111.964173][ T5792] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.144253][ T4735] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.317287][ T8070] tipc: Enabling of bearer rejected, already enabled [ 112.338056][ T8070] bond1 (unregistering): Released all slaves [ 112.462197][ T8078] input: syz1 as /devices/virtual/input/input8 [ 112.653505][ T50] Bluetooth: hci3: command tx timeout [ 112.853792][ T8086] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 112.856449][ T8086] overlayfs: failed to set xattr on upper [ 112.857668][ T8086] overlayfs: ...falling back to redirect_dir=nofollow. [ 112.859001][ T8086] overlayfs: ...falling back to index=off. [ 112.860534][ T8086] overlayfs: ...falling back to uuid=null. [ 112.861623][ T8086] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 113.339686][ T8117] syzkaller0: entered promiscuous mode [ 113.341912][ T8117] syzkaller0: entered allmulticast mode [ 113.454874][ T8116] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 113.477493][ T8122] syzkaller0: entered promiscuous mode [ 113.503815][ T8116] EXT4-fs (loop7): 1 truncate cleaned up [ 113.504008][ T8130] netlink: 20 bytes leftover after parsing attributes in process `syz.6.849'. [ 113.508779][ T8116] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.513920][ T8122] syzkaller0: entered allmulticast mode [ 113.563697][ T7694] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.634029][ T8141] vfat: Unknown parameter '0xffffffffffffffff' [ 113.700617][ T8146] set_capacity_and_notify: 4 callbacks suppressed [ 113.701924][ T8146] loop7: detected capacity change from 0 to 1024 [ 113.723607][ T8146] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.728791][ T8146] 9p: Bad value for 'rfdno' [ 113.785958][ T7694] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.065823][ T8162] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 114.517849][ T8159] lo: Caught tx_queue_len zero misconfig [ 114.523755][ T8164] bridge_slave_0: left allmulticast mode [ 114.523773][ T8164] bridge_slave_0: left promiscuous mode [ 114.523844][ T8164] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.533145][ T8164] bond0: (slave bond_slave_0): Releasing backup interface [ 114.568738][ T8164] bond0: (slave bond_slave_1): Releasing backup interface [ 114.606126][ T8164] team0: Port device team_slave_0 removed [ 114.609329][ T8164] team0: Port device team_slave_1 removed [ 114.609690][ T8164] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.609702][ T8164] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.614699][ T8164] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.614731][ T8164] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.616989][ T8164] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 114.623126][ T8165] tipc: Resetting bearer [ 114.623243][ T8165] vlan0: entered promiscuous mode [ 114.624697][ T8166] tipc: Enabled bearer , priority 0 [ 114.629536][ T39] tipc: Resetting bearer [ 114.669031][ T8175] netlink: 'syz.5.863': attribute type 7 has an invalid length. [ 114.671531][ T8175] netlink: 'syz.5.863': attribute type 8 has an invalid length. [ 114.679081][ T8176] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20000 [ 114.826070][ T8194] tipc: Enabling of bearer rejected, already enabled [ 114.849140][ T8194] bond1 (unregistering): Released all slaves [ 114.924087][ T8202] syzkaller0: entered promiscuous mode [ 114.924126][ T8202] syzkaller0: entered allmulticast mode [ 114.927510][ T8202] FAULT_INJECTION: forcing a failure. [ 114.927510][ T8202] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.930187][ T8202] CPU: 1 UID: 0 PID: 8202 Comm: syz.5.871 Tainted: G L syzkaller #0 PREEMPT [ 114.930205][ T8202] Tainted: [L]=SOFTLOCKUP [ 114.930208][ T8202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 114.930214][ T8202] Call trace: [ 114.930218][ T8202] show_stack+0x2c/0x3c (C) [ 114.930239][ T8202] __dump_stack+0x30/0x40 [ 114.930250][ T8202] dump_stack_lvl+0xd8/0x12c [ 114.930260][ T8202] dump_stack+0x1c/0x28 [ 114.930270][ T8202] should_fail_ex+0x41c/0x590 [ 114.930281][ T8202] should_fail+0x14/0x24 [ 114.930290][ T8202] should_fail_usercopy+0x20/0x30 [ 114.930300][ T8202] _copy_from_iter+0x424/0x1064 [ 114.930308][ T8202] skb_copy_datagram_from_iter+0xe8/0x5c8 [ 114.930318][ T8202] packet_sendmsg+0x2c04/0x4110 [ 114.930327][ T8202] __sock_sendmsg+0xc8/0x17c [ 114.930335][ T8202] ____sys_sendmsg+0x3d0/0x6c8 [ 114.930344][ T8202] ___sys_sendmsg+0x198/0x224 [ 114.930352][ T8202] __sys_sendmsg+0x158/0x204 [ 114.930360][ T8202] __arm64_sys_sendmsg+0x80/0x94 [ 114.930369][ T8202] invoke_syscall+0x98/0x244 [ 114.930379][ T8202] el0_svc_common+0xec/0x23c [ 114.930388][ T8202] do_el0_svc+0x4c/0x5c [ 114.930398][ T8202] el0_svc+0x64/0x260 [ 114.930408][ T8202] el0t_64_sync_handler+0x48/0x148 [ 114.930417][ T8202] el0t_64_sync+0x198/0x19c [ 115.297152][ T8225] netlink: 4 bytes leftover after parsing attributes in process `syz.5.879'. [ 115.297198][ T8225] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 115.763293][ T8237] loop4: detected capacity change from 0 to 256 [ 115.765162][ T8237] vfat: Unknown parameter 'nn^>¢5ßI' [ 115.792929][ T8239] tipc: Enabling of bearer rejected, failed to enable media [ 115.808867][ T8239] bond0 (unregistering): Released all slaves [ 115.896640][ T8249] syzkaller0: entered promiscuous mode [ 115.896677][ T8249] syzkaller0: entered allmulticast mode [ 115.898562][ T8249] FAULT_INJECTION: forcing a failure. [ 115.898562][ T8249] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 115.898579][ T8249] CPU: 0 UID: 0 PID: 8249 Comm: syz.7.887 Tainted: G L syzkaller #0 PREEMPT [ 115.898590][ T8249] Tainted: [L]=SOFTLOCKUP [ 115.898594][ T8249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 115.898599][ T8249] Call trace: [ 115.898602][ T8249] show_stack+0x2c/0x3c (C) [ 115.898621][ T8249] __dump_stack+0x30/0x40 [ 115.898634][ T8249] dump_stack_lvl+0xd8/0x12c [ 115.898643][ T8249] dump_stack+0x1c/0x28 [ 115.898653][ T8249] should_fail_ex+0x41c/0x590 [ 115.898664][ T8249] should_fail+0x14/0x24 [ 115.898673][ T8249] should_fail_usercopy+0x20/0x30 [ 115.898683][ T8249] _copy_from_iter+0x424/0x1064 [ 115.898691][ T8249] skb_copy_datagram_from_iter+0xe8/0x5c8 [ 115.898700][ T8249] packet_sendmsg+0x2c04/0x4110 [ 115.898709][ T8249] __sock_sendmsg+0xc8/0x17c [ 115.898718][ T8249] ____sys_sendmsg+0x3d0/0x6c8 [ 115.898726][ T8249] ___sys_sendmsg+0x198/0x224 [ 115.898734][ T8249] __sys_sendmsg+0x158/0x204 [ 115.898742][ T8249] __arm64_sys_sendmsg+0x80/0x94 [ 115.898750][ T8249] invoke_syscall+0x98/0x244 [ 115.898760][ T8249] el0_svc_common+0xec/0x23c [ 115.898770][ T8249] do_el0_svc+0x4c/0x5c [ 115.898779][ T8249] el0_svc+0x64/0x260 [ 115.898789][ T8249] el0t_64_sync_handler+0x48/0x148 [ 115.898798][ T8249] el0t_64_sync+0x198/0x19c [ 116.349562][ T8263] bridge_slave_0: left allmulticast mode [ 116.351884][ T8263] bridge_slave_0: left promiscuous mode [ 116.351993][ T8263] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.359737][ T8263] bond0: (slave bond_slave_0): Releasing backup interface [ 116.385622][ T8263] bond0: (slave bond_slave_1): Releasing backup interface [ 116.401654][ T8263] team0: Port device team_slave_0 removed [ 116.405517][ T8263] team0: Port device team_slave_1 removed [ 116.406289][ T8263] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.406304][ T8263] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.409308][ T8263] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.409320][ T8263] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.411748][ T8263] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 116.417077][ T8267] tipc: Resetting bearer [ 116.417383][ T8267] vlan0: entered promiscuous mode [ 116.435397][ T8263] tipc: Enabled bearer , priority 0 [ 117.022150][ T8290] netlink: 68 bytes leftover after parsing attributes in process `syz.4.900'. [ 117.349973][ T8305] bridge_slave_0: left allmulticast mode [ 117.351519][ T8305] bridge_slave_0: left promiscuous mode [ 117.352607][ T8305] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.357861][ T8305] bond0: (slave bond_slave_0): Releasing backup interface [ 117.366031][ T8305] bond0: (slave bond_slave_1): Releasing backup interface [ 117.598097][ T8305] team0: Port device team_slave_0 removed [ 117.755872][ T8305] team0: Port device team_slave_1 removed [ 117.759065][ T8305] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.759104][ T8305] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.766260][ T8305] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.770781][ T8305] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.783090][ T8305] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 117.839849][ T8318] vlan0: entered promiscuous mode [ 117.842994][ T8323] tipc: Started in network mode [ 117.844249][ T8323] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 117.845802][ T8323] tipc: Enabled bearer , priority 0 [ 118.182227][ T8336] netlink: 68 bytes leftover after parsing attributes in process `syz.0.912'. [ 118.672520][ T8351] loop7: detected capacity change from 0 to 2048 [ 118.714200][ T8351] loop7: p1 < > p4 [ 118.714200][ T8351] p4: [ 118.716726][ T8351] loop7: p4 size 722688 extends beyond EOD, truncated [ 118.719206][ T8351] loop7: p6 start 262464109 is beyond EOD, truncated [ 118.719247][ T8351] loop7: p7 size 2304 extends beyond EOD, truncated [ 118.791875][ T8356] netlink: 12 bytes leftover after parsing attributes in process `syz.7.918'. [ 118.902754][ T4702] udevd[4702]: inotify_add_watch(7, /dev/loop7p5, 10) failed: No such file or directory [ 118.903911][ T5063] udevd[5063]: inotify_add_watch(7, /dev/loop7p7, 10) failed: No such file or directory [ 118.906129][ T4701] udevd[4701]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 118.907828][ T4703] udevd[4703]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 118.960072][ T24] tipc: Node number set to 11578026 [ 119.136782][ T50] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 119.169218][ T8374] netlink: 'syz.6.924': attribute type 7 has an invalid length. [ 119.169256][ T8374] netlink: 'syz.6.924': attribute type 8 has an invalid length. [ 119.190488][ T8377] netlink: 68 bytes leftover after parsing attributes in process `syz.6.925'. [ 119.266393][ T8382] loop0: detected capacity change from 0 to 512 [ 119.801949][ T50] Bluetooth: hci4: unexpected event for opcode 0x0000 [ 120.109099][ T8413] netlink: 'syz.7.936': attribute type 7 has an invalid length. [ 120.111835][ T8413] netlink: 'syz.7.936': attribute type 8 has an invalid length. [ 120.328881][ T50] Bluetooth: hci4: unexpected event for opcode 0x0003 [ 120.334942][ T8439] loop7: detected capacity change from 0 to 512 [ 120.347035][ T8439] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 120.376770][ T8439] EXT4-fs (loop7): 1 truncate cleaned up [ 120.377254][ T8439] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.411832][ T7694] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.646387][ T8461] loop6: detected capacity change from 0 to 512 [ 120.662121][ T8461] EXT4-fs warning (device loop6): dx_probe:801: inode #2: comm syz.6.952: Unrecognised inode hash code 255 [ 120.662156][ T8461] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.952: Corrupt directory, running e2fsck is recommended [ 120.679811][ T8461] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 120.681830][ T8461] EXT4-fs error (device loop6): ext4_iget_extra_inode:5180: inode #15: comm syz.6.952: corrupted in-inode xattr: invalid ea_ino [ 120.681873][ T8461] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 120.684585][ T8461] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.952: couldn't read orphan inode 15 (err -117) [ 120.684633][ T8461] loop6: lost filesystem error report for type 5 error -117 [ 120.687113][ T8461] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.945867][ T5792] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.976667][ T8466] loop7: detected capacity change from 0 to 4096 [ 121.026003][ T8469] loop6: detected capacity change from 0 to 1024 [ 121.029102][ T8469] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 121.029838][ T8469] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 121.031552][ T8469] EXT4-fs error (device loop6): ext4_get_journal_inode:5900: inode #32: comm syz.6.956: iget: special inode unallocated [ 121.031579][ T8469] loop6: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 121.031938][ T8469] EXT4-fs (loop6): Remounting filesystem read-only [ 121.034045][ T8469] EXT4-fs (loop6): no journal found [ 121.186699][ T8478] loop7: detected capacity change from 0 to 512 [ 121.192648][ T8478] EXT4-fs (loop7): filesystem is read-only [ 121.193932][ T8478] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 121.200801][ T8478] EXT4-fs (loop7): filesystem is read-only [ 121.200825][ T8478] EXT4-fs (loop7): orphan cleanup on readonly fs [ 121.204384][ T8478] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.960: bg 0: block 64: padding at end of block bitmap is not set [ 121.204423][ T8478] loop7: lost filesystem error report for type 5 error -117 [ 121.208353][ T8478] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 121.211607][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 121.211622][ C1] EXT4-fs (loop7): initial error at time 2000000006: ext4_validate_block_bitmap:441 [ 121.211638][ C1] EXT4-fs (loop7): last error at time 2000000006: ext4_validate_block_bitmap:441 [ 121.216583][ T8478] loop7: lost filesystem error report for type 5 error -117 [ 121.218578][ T8478] EXT4-fs (loop7): 1 orphan inode deleted [ 121.221879][ T8478] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 121.296800][ T8486] loop4: detected capacity change from 0 to 512 [ 121.306206][ T8486] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 121.318881][ T8486] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 121.407688][ T7694] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.831109][ T8502] netlink: 80 bytes leftover after parsing attributes in process `syz.5.967'. [ 121.858653][ T8501] loop7: detected capacity change from 0 to 1024 [ 121.915493][ T8493] loop6: detected capacity change from 0 to 32768 [ 121.989010][ T8493] loop6: p1 p3 < > [ 122.076225][ T50] Bluetooth: hci0: unexpected event for opcode 0x0003 [ 123.112194][ T8520] tipc: Enabling of bearer rejected, failed to enable media [ 123.142754][ T8517] loop0: detected capacity change from 0 to 512 [ 123.153271][ T8517] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 123.156171][ T8520] bond2 (unregistering): Released all slaves [ 123.157627][ T8517] EXT4-fs (loop0): 1 truncate cleaned up [ 123.158184][ T8517] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.222759][ T50] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 123.222813][ T50] Bluetooth: hci2: Injecting HCI hardware error event [ 123.223640][ T50] Bluetooth: hci2: hardware error 0x00 [ 123.343484][ T4701] udevd[4701]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 123.346844][ T4703] udevd[4703]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 123.463194][ T8539] Cannot find add_set index 0 as target [ 123.595862][ T8543] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 124.035782][ T4710] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.047740][ T8552] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 124.063521][ T8552] EXT4-fs (loop7): can't mount with journal_async_commit, fs mounted w/o journal [ 124.083114][ T8553] ext4: Unknown parameter 'cgroup2' [ 124.094156][ T8559] journal_path: Lookup failure for './bus' [ 124.095518][ T8559] EXT4-fs: error: could not find journal device path [ 124.144985][ T8559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.986'. [ 124.415436][ T8565] netlink: 12 bytes leftover after parsing attributes in process `syz.4.987'. [ 124.513696][ T8574] netlink: 28 bytes leftover after parsing attributes in process `syz.5.991'. [ 124.548329][ T8565] netlink: 4 bytes leftover after parsing attributes in process `syz.4.987'. [ 124.573492][ T8565] bond0 (unregistering): Released all slaves [ 124.713208][ T8585] set_capacity_and_notify: 3 callbacks suppressed [ 124.713258][ T8585] loop5: detected capacity change from 0 to 8192 [ 124.742046][ T8585] loop5: p4 < > [ 124.755421][ T8603] No control pipe specified [ 125.169196][ T4703] udevd[4703]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 125.176354][ T8615] loop0: detected capacity change from 0 to 2048 [ 125.201138][ T8615] loop0: p1 p2 p3 p4 [ 125.201138][ T8615] p1: [ 125.201279][ T8615] loop0: p1 size 117442559 extends beyond EOD, truncated [ 125.205607][ T8615] loop0: p2 size 458752 extends beyond EOD, truncated [ 125.210582][ T8615] loop0: p3 start 3036676096 is beyond EOD, truncated [ 125.210627][ T8615] loop0: p4 start 100663296 is beyond EOD, truncated [ 125.210638][ T8615] loop0: p5 size 16779008 extends beyond EOD, truncated [ 125.219416][ T8627] loop7: detected capacity change from 0 to 256 [ 125.228560][ T8615] syzkaller0: entered promiscuous mode [ 125.228601][ T8615] syzkaller0: entered allmulticast mode [ 125.319636][ T8628] IPVS: set_ctl: invalid protocol: 8 0.0.0.0:20000 [ 125.380651][ T50] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 125.837929][ T8650] loop6: detected capacity change from 0 to 512 [ 125.838776][ T8650] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 125.861125][ T8650] EXT4-fs (loop6): can't mount with journal_async_commit, fs mounted w/o journal [ 125.878408][ T8655] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1018'. [ 125.885502][ T8657] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1019'. [ 125.932429][ T1596] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.933785][ T1596] ieee802154 phy1 wpan1: encryption failed: -22 [ 125.945883][ T8660] loop5: detected capacity change from 0 to 512 [ 127.845112][ T8674] loop6: detected capacity change from 0 to 1024 [ 127.865263][ T8674] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 127.867845][ T8674] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.912868][ T5792] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 128.078574][ T8692] loop6: detected capacity change from 0 to 1024 [ 128.554593][ T8714] loop0: detected capacity change from 0 to 512 [ 128.559680][ T8714] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 128.621666][ T8714] EXT4-fs (loop0): 1 truncate cleaned up [ 128.637682][ T8714] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.656125][ T4710] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.682387][ T8723] tipc: Enabling of bearer rejected, already enabled [ 129.701810][ T8725] loop4: detected capacity change from 0 to 512 [ 129.712749][ T8725] EXT4-fs: Ignoring removed nobh option [ 129.715496][ T8725] EXT4-fs (loop4): invalid inodes per group: 32 [ 129.715496][ T8725] [ 129.898873][ T8734] bond1 (unregistering): Released all slaves [ 130.074986][ T8745] loop6: detected capacity change from 0 to 1024 [ 130.077870][ T8745] EXT4-fs: Ignoring removed orlov option [ 130.081946][ T8745] ext4: Unknown parameter 'subj_role' [ 131.294311][ T8765] tipc: Enabling of bearer rejected, already enabled [ 131.692429][ T8776] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 131.770926][ T8778] bond2 (unregistering): Released all slaves [ 131.898068][ T8782] loop5: detected capacity change from 0 to 512 [ 131.908322][ T8782] ext4: Unknown parameter 'hash' [ 131.943546][ T8782] loop5: detected capacity change from 0 to 1024 [ 132.000618][ T8782] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.089400][ T8782] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 132.091515][ T8782] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 132.091532][ T8782] EXT4-fs (loop5): This should not happen!! Data will be lost [ 132.091532][ T8782] [ 132.091540][ T8782] EXT4-fs (loop5): Total free blocks count 0 [ 132.091548][ T8782] EXT4-fs (loop5): Free/Dirty block details [ 132.091556][ T8782] EXT4-fs (loop5): free_blocks=20480 [ 132.091564][ T8782] EXT4-fs (loop5): dirty_blocks=80 [ 132.091570][ T8782] EXT4-fs (loop5): Block reservation details [ 132.091577][ T8782] EXT4-fs (loop5): i_reserved_data_blocks=5 [ 132.094948][ T8782] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 48 with error 28 [ 132.133568][ T5100] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 132.280475][ T8797] fuse: Bad value for 'user_id' [ 132.280507][ T8797] fuse: Bad value for 'user_id' [ 132.385675][ T8802] tipc: Enabling of bearer rejected, already enabled [ 132.424796][ T30] audit: type=1326 audit(2000000017.750:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8798 comm="syz.5.1059" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6377fe8 code=0x7ffc0000 [ 132.424840][ T30] audit: type=1326 audit(2000000017.750:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8798 comm="syz.5.1059" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6377fe8 code=0x7ffc0000 [ 132.424861][ T30] audit: type=1326 audit(2000000017.750:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8798 comm="syz.5.1059" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6377fe8 code=0x7ffc0000 [ 132.424880][ T30] audit: type=1326 audit(2000000017.750:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8798 comm="syz.5.1059" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=261 compat=0 ip=0xffffa6377fe8 code=0x7ffc0000 [ 132.424896][ T30] audit: type=1326 audit(2000000017.750:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8798 comm="syz.5.1059" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6377fe8 code=0x7ffc0000 [ 132.424911][ T30] audit: type=1326 audit(2000000017.750:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8798 comm="syz.5.1059" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6377fe8 code=0x7ffc0000 [ 132.428993][ T30] audit: type=1326 audit(2000000017.750:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8798 comm="syz.5.1059" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6377fe8 code=0x7ffc0000 [ 132.429014][ T30] audit: type=1326 audit(2000000017.750:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8798 comm="syz.5.1059" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6377fe8 code=0x7ffc0000 [ 132.429037][ T30] audit: type=1326 audit(2000000017.750:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8798 comm="syz.5.1059" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffa6377fe8 code=0x7ffc0000 [ 132.429055][ T30] audit: type=1326 audit(2000000017.750:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8798 comm="syz.5.1059" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6377fe8 code=0x7ffc0000 [ 132.472140][ T8805] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1061'. [ 132.472158][ T8805] netlink: 'syz.7.1061': attribute type 1 has an invalid length. [ 132.472168][ T8805] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1061'. [ 132.472177][ T8805] netlink: 252 bytes leftover after parsing attributes in process `syz.7.1061'. [ 132.472185][ T8805] netlink: 'syz.7.1061': attribute type 1 has an invalid length. [ 132.472193][ T8805] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1061'. [ 132.522895][ T8805] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1061'. [ 132.523844][ T8799] syzkaller0: entered promiscuous mode [ 132.523857][ T8799] syzkaller0: entered allmulticast mode [ 132.709003][ T8814] netlink: 7 bytes leftover after parsing attributes in process `syz.7.1066'. [ 132.765006][ T8816] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1067'. [ 133.092851][ T8825] tmpfs: Bad value for 'mpol' [ 133.150635][ T4722] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 133.154020][ T4722] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 133.156005][ T4722] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 133.156736][ T4722] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 133.157263][ T4722] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 133.468675][ T8852] loop4: detected capacity change from 0 to 128 [ 133.578497][ T8857] tipc: Resetting bearer [ 133.821475][ T8857] loop0: detected capacity change from 0 to 8192 [ 133.923201][ T8857] loop0: p2 p3 p4 [ 133.923787][ T8857] loop0: p2 size 64053 extends beyond EOD, truncated [ 133.937350][ T8857] loop0: p3 start 65280 is beyond EOD, truncated [ 133.937387][ T8857] loop0: p4 size 50331904 extends beyond EOD, truncated [ 134.688464][ T8864] syzkaller0: entered promiscuous mode [ 134.688504][ T8864] syzkaller0: entered allmulticast mode [ 134.738287][ T4703] udevd[4703]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 134.742115][ T8826] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.742194][ T8826] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.742281][ T8826] bridge_slave_0: entered allmulticast mode [ 134.742752][ T8826] bridge_slave_0: entered promiscuous mode [ 134.743607][ T8826] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.743637][ T8826] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.743706][ T8826] bridge_slave_1: entered allmulticast mode [ 134.744169][ T8826] bridge_slave_1: entered promiscuous mode [ 134.758036][ T4701] udevd[4701]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 134.766410][ T8864] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1077'. [ 134.772748][ T8826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.778477][ T8873] tipc: Resetting bearer [ 134.787635][ T8873] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 134.794164][ T8826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.801633][ T4703] udevd[4703]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 134.805510][ T4701] udevd[4701]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 134.816951][ T8879] i2c i2c-0: new_device: Instantiated device hd3ss3220 at 0x47 [ 134.817969][ T8879] i2c i2c-0: delete_device: Deleting device hd3ss3220 at 0x47 [ 134.855112][ T8826] team0: Port device team_slave_0 added [ 134.856098][ T8826] team0: Port device team_slave_1 added [ 134.859509][ T8886] netlink: 88 bytes leftover after parsing attributes in process `syz.7.1084'. [ 134.880416][ T8826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.880447][ T8826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 134.881972][ T8826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.882850][ T8826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.882873][ T8826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 134.883713][ T8826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.909094][ T8873] tipc: Enabling of bearer rejected, already enabled [ 134.933506][ T8826] hsr_slave_0: entered promiscuous mode [ 134.934707][ T8826] hsr_slave_1: entered promiscuous mode [ 134.935276][ T8826] debugfs: 'hsr0' already exists in 'hsr' [ 134.935291][ T8826] Cannot create hsr debugfs directory [ 135.031120][ T8902] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1091'. [ 135.042652][ T8900] loop5: detected capacity change from 0 to 512 [ 135.044552][ T8900] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 135.052308][ T8900] EXT4-fs (loop5): 1 truncate cleaned up [ 135.054935][ T8900] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.059739][ T8900] EXT4-fs (loop5): shut down requested (2) [ 135.076936][ T8906] loop7: detected capacity change from 0 to 2048 [ 135.082046][ T8897] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 135.086882][ T8897] bond0 (unregistering): Released all slaves [ 135.096058][ T8906] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.137440][ T7694] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.156673][ T8916] loop0: detected capacity change from 0 to 512 [ 135.158501][ T8916] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 135.169941][ T8916] EXT4-fs (loop0): 1 truncate cleaned up [ 135.171459][ T8916] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.200782][ T8924] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 135.212600][ T4710] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.222873][ T4722] Bluetooth: hci2: command tx timeout [ 135.235703][ T8926] loop7: detected capacity change from 0 to 512 [ 135.236066][ T8926] EXT4-fs: Ignoring removed nobh option [ 135.236106][ T8926] EXT4-fs: inline encryption not supported [ 135.245256][ T8926] EXT4-fs (loop7): warning: checktime reached, running e2fsck is recommended [ 135.248618][ T8926] EXT4-fs error (device loop7): ext4_do_update_inode:5742: inode #15: comm syz.7.1096: corrupted inode contents [ 135.254644][ T8924] tipc: Enabling of bearer rejected, already enabled [ 135.264892][ T5100] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.266722][ T8926] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 135.272667][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 135.272696][ C1] EXT4-fs (loop7): initial error at time 2000000020: ext4_do_update_inode:5742: inode 15 [ 135.272727][ C1] EXT4-fs (loop7): last error at time 2000000020: ext4_do_update_inode:5742: inode 15 [ 135.290371][ T8926] EXT4-fs (loop7): Remounting filesystem read-only [ 135.290486][ T8926] EXT4-fs (loop7): 1 orphan inode deleted [ 135.291388][ T8926] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.304834][ T8826] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 135.310879][ T8826] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 135.312754][ T8826] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 135.323352][ T8826] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 135.325346][ T8826] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 135.332487][ T8826] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 135.342686][ T7694] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.348462][ T8826] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 135.353462][ T8826] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 135.399793][ T8826] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.399850][ T8826] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.399940][ T8826] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.399970][ T8826] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.452279][ T3937] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.453910][ T3937] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.508115][ T8952] loop7: detected capacity change from 0 to 512 [ 135.508514][ T8952] EXT4-fs: Ignoring removed oldalloc option [ 135.523809][ T8952] [ 135.524298][ T8952] ====================================================== [ 135.525650][ T8952] WARNING: possible circular locking dependency detected [ 135.526996][ T8952] syzkaller #0 Tainted: G L [ 135.528066][ T8952] ------------------------------------------------------ [ 135.529376][ T8952] syz.7.1100/8952 is trying to acquire lock: [ 135.530527][ T8952] ffff0000db12cc18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x170/0x2dc [ 135.532353][ T8952] [ 135.532353][ T8952] but task is already holding lock: [ 135.533629][ T8952] ffff0000f1ec7140 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x32c/0x828 [ 135.535446][ T8952] [ 135.535446][ T8952] which lock already depends on the new lock. [ 135.535446][ T8952] [ 135.537208][ T8952] [ 135.537208][ T8952] the existing dependency chain (in reverse order) is: [ 135.538762][ T8952] [ 135.538762][ T8952] -> #1 (&ei->xattr_sem){++++}-{4:4}: [ 135.540038][ T8952] down_write+0x50/0xc0 [ 135.540865][ T8952] ext4_destroy_inline_data+0x30/0x114 [ 135.541922][ T8952] ext4_do_writepages+0x3e4/0x3bc0 [ 135.542926][ T8952] ext4_writepages+0x198/0x2dc [ 135.543872][ T8952] do_writepages+0x284/0x47c [ 135.544785][ T8952] filemap_writeback+0x230/0x2bc [ 135.545711][ T8952] file_write_and_wait_range+0xb0/0x138 [ 135.546727][ T8952] mmb_fsync_noflush+0x80/0x1bc [ 135.547689][ T8952] ext4_sync_file+0x37c/0xf20 [ 135.548616][ T8952] vfs_fsync_range+0x120/0x140 [ 135.549536][ T8952] ext4_buffered_write_iter+0x24c/0x2ec [ 135.550606][ T8952] ext4_file_write_iter+0x1dc/0x134c [ 135.551649][ T8952] do_iter_readv_writev+0x48c/0x6f8 [ 135.552691][ T8952] vfs_writev+0x2a8/0x630 [ 135.553553][ T8952] do_pwritev+0x11c/0x224 [ 135.554410][ T8952] __arm64_sys_pwritev2+0xdc/0x110 [ 135.555396][ T8952] invoke_syscall+0x98/0x244 [ 135.556274][ T8952] el0_svc_common+0xec/0x23c [ 135.557158][ T8952] do_el0_svc+0x4c/0x5c [ 135.558004][ T8952] el0_svc+0x64/0x260 [ 135.558831][ T8952] el0t_64_sync_handler+0x48/0x148 [ 135.559859][ T8952] el0t_64_sync+0x198/0x19c [ 135.560770][ T8952] [ 135.560770][ T8952] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 135.562321][ T8952] __lock_acquire+0x17c0/0x2ebc [ 135.563250][ T8952] lock_acquire+0x140/0x364 [ 135.564126][ T8952] percpu_down_read_internal+0x5c/0x294 [ 135.565235][ T8952] ext4_writepages+0x170/0x2dc [ 135.566205][ T8952] do_writepages+0x284/0x47c [ 135.567128][ T8952] __writeback_single_inode+0x140/0x1880 [ 135.568245][ T8952] writeback_single_inode+0x400/0xb20 [ 135.569289][ T8952] write_inode_now+0x170/0x208 [ 135.570259][ T8952] iput+0x7cc/0xc2c [ 135.571017][ T8952] ext4_xattr_block_set+0x1460/0x21e8 [ 135.572062][ T8952] ext4_expand_extra_isize_ea+0xaf4/0x1384 [ 135.573216][ T8952] __ext4_expand_extra_isize+0x2a4/0x378 [ 135.574217][ T8952] __ext4_mark_inode_dirty+0x394/0x828 [ 135.575191][ T8952] ext4_evict_inode+0x798/0xfb8 [ 135.576112][ T8952] evict+0x4c0/0x74c [ 135.576862][ T8952] iput+0x8f0/0xc2c [ 135.577629][ T8952] ext4_process_orphan+0x24c/0x2c0 [ 135.578594][ T8952] ext4_orphan_cleanup+0x7d4/0xd20 [ 135.579610][ T8952] ext4_fill_super+0x4628/0x4e14 [ 135.580564][ T8952] get_tree_bdev_flags+0x388/0x43c [ 135.581570][ T8952] get_tree_bdev+0x2c/0x3c [ 135.582461][ T8952] ext4_get_tree+0x28/0x38 [ 135.583331][ T8952] vfs_get_tree+0x90/0x28c [ 135.584226][ T8952] fc_mount+0x24/0xac [ 135.584998][ T8952] do_new_mount+0x2a4/0x538 [ 135.585886][ T8952] path_mount+0x5f0/0xa88 [ 135.586728][ T8952] do_mount+0xe8/0x148 [ 135.587589][ T8952] __arm64_sys_mount+0x334/0x380 [ 135.588330][ T8826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.589748][ T8952] invoke_syscall+0x98/0x244 [ 135.590656][ T8952] el0_svc_common+0xec/0x23c [ 135.591579][ T8952] do_el0_svc+0x4c/0x5c [ 135.592412][ T8952] el0_svc+0x64/0x260 [ 135.593224][ T8952] el0t_64_sync_handler+0x48/0x148 [ 135.594233][ T8952] el0t_64_sync+0x198/0x19c [ 135.595155][ T8952] [ 135.595155][ T8952] other info that might help us debug this: [ 135.595155][ T8952] [ 135.596968][ T8952] Possible unsafe locking scenario: [ 135.596968][ T8952] [ 135.597538][ T8948] syzkaller0: entered promiscuous mode [ 135.597569][ T8948] syzkaller0: entered allmulticast mode [ 135.600329][ T8952] CPU0 CPU1 [ 135.601298][ T8952] ---- ---- [ 135.602291][ T8952] lock(&ei->xattr_sem); [ 135.603088][ T8952] lock(&sbi->s_writepages_rwsem); [ 135.604525][ T8952] lock(&ei->xattr_sem); [ 135.605667][ T8952] rlock(&sbi->s_writepages_rwsem); [ 135.606571][ T8952] [ 135.606571][ T8952] *** DEADLOCK *** [ 135.606571][ T8952] [ 135.607947][ T8952] 3 locks held by syz.7.1100/8952: [ 135.608486][ T8826] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.609980][ T8952] #0: ffff0000caa260d8 (&type->s_umount_key#27/1){+.+.}-{4:4}, at: sget_fc+0x788/0x13e8 [ 135.611070][ T7404] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.611104][ T7404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.614276][ T8952] #1: ffff0000caa26640 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x360/0xfb8 [ 135.615892][ T8952] #2: ffff0000f1ec7140 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x32c/0x828 [ 135.617670][ T8952] [ 135.617670][ T8952] stack backtrace: [ 135.618230][ T8826] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 135.619833][ T8826] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 135.621510][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.621551][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.624894][ T8952] CPU: 0 UID: 0 PID: 8952 Comm: syz.7.1100 Tainted: G L syzkaller #0 PREEMPT [ 135.626751][ T8952] Tainted: [L]=SOFTLOCKUP [ 135.627529][ T8952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 135.629289][ T8952] Call trace: [ 135.629859][ T8952] show_stack+0x2c/0x3c (C) [ 135.630669][ T8952] __dump_stack+0x30/0x40 [ 135.631411][ T8952] dump_stack_lvl+0xd8/0x12c [ 135.632211][ T8952] dump_stack+0x1c/0x28 [ 135.632923][ T8952] print_circular_bug+0x328/0x330 [ 135.633770][ T8952] check_noncircular+0x158/0x174 [ 135.634657][ T8952] __lock_acquire+0x17c0/0x2ebc [ 135.635538][ T8952] lock_acquire+0x140/0x364 [ 135.636372][ T8952] percpu_down_read_internal+0x5c/0x294 [ 135.637386][ T8952] ext4_writepages+0x170/0x2dc [ 135.638276][ T8952] do_writepages+0x284/0x47c [ 135.639084][ T8952] __writeback_single_inode+0x140/0x1880 [ 135.640076][ T8952] writeback_single_inode+0x400/0xb20 [ 135.641029][ T8952] write_inode_now+0x170/0x208 [ 135.641876][ T8952] iput+0x7cc/0xc2c [ 135.642574][ T8952] ext4_xattr_block_set+0x1460/0x21e8 [ 135.643503][ T8952] ext4_expand_extra_isize_ea+0xaf4/0x1384 [ 135.644550][ T8952] __ext4_expand_extra_isize+0x2a4/0x378 [ 135.645581][ T8952] __ext4_mark_inode_dirty+0x394/0x828 [ 135.646558][ T8952] ext4_evict_inode+0x798/0xfb8 [ 135.647429][ T8952] evict+0x4c0/0x74c [ 135.648124][ T8952] iput+0x8f0/0xc2c [ 135.648813][ T8952] ext4_process_orphan+0x24c/0x2c0 [ 135.649739][ T8952] ext4_orphan_cleanup+0x7d4/0xd20 [ 135.650677][ T8952] ext4_fill_super+0x4628/0x4e14 [ 135.651586][ T8952] get_tree_bdev_flags+0x388/0x43c [ 135.652519][ T8952] get_tree_bdev+0x2c/0x3c [ 135.653320][ T8952] ext4_get_tree+0x28/0x38 [ 135.654118][ T8952] vfs_get_tree+0x90/0x28c [ 135.654887][ T8952] fc_mount+0x24/0xac [ 135.655561][ T8952] do_new_mount+0x2a4/0x538 [ 135.656318][ T8952] path_mount+0x5f0/0xa88 [ 135.657093][ T8952] do_mount+0xe8/0x148 [ 135.657786][ T8952] __arm64_sys_mount+0x334/0x380 [ 135.658647][ T8952] invoke_syscall+0x98/0x244 [ 135.659436][ T8952] el0_svc_common+0xec/0x23c [ 135.660249][ T8952] do_el0_svc+0x4c/0x5c [ 135.660981][ T8952] el0_svc+0x64/0x260 [ 135.661656][ T8952] el0t_64_sync_handler+0x48/0x148 [ 135.662532][ T8952] el0t_64_sync+0x198/0x19c SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 135.705862][ T8952] EXT4-fs error (device loop7): ext4_xattr_inode_iget:441: inode #11: comm syz.7.1100: iget: bad extra_isize 90 (inode size 256) [ 135.708622][ T8952] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 135.708957][ T8952] EXT4-fs (loop7): Remounting filesystem read-only [ 135.710708][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 135.710725][ C1] EXT4-fs (loop7): initial error at time 2000000021: ext4_xattr_inode_iget:441: inode 11 [ 135.710740][ C1] EXT4-fs (loop7): last error at time 2000000021: ext4_xattr_inode_iget:441: inode 11 [ 135.727628][ T8952] EXT4-fs warning (device loop7): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 135.729858][ T8952] EXT4-fs (loop7): 1 orphan inode deleted [ 135.734067][ T8952] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.053664][ T8945] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.085507][ T7407] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.147186][ T7407] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.184782][ T7407] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.305631][ T7407] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.447932][ T7407] bond0 (unregistering): Released all slaves [ 136.498295][ T7407] tipc: Disabling bearer [ 136.498407][ T7407] tipc: Disabling bearer [ 136.501272][ T7407] tipc: Left network mode [ 136.584013][ T4399] 8021q: adding VLAN 0 to HW filter on device eth4 [ 136.675427][ T4399] 8021q: adding VLAN 0 to HW filter on device eth5 [ 136.734127][ T7407] hsr_slave_0: left promiscuous mode [ 136.735484][ T7407] hsr_slave_1: left promiscuous mode [ 136.739172][ T7407] veth1_macvtap: left promiscuous mode [ 136.741907][ T7407] veth0_macvtap: left promiscuous mode [ 136.741976][ T7407] veth1_vlan: left promiscuous mode [ 136.857064][ T4399] 8021q: adding VLAN 0 to HW filter on device eth6 [ 136.962491][ T4399] 8021q: adding VLAN 0 to HW filter on device eth7 [ 137.222312][ T7407] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.322264][ T7407] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.361739][ T7407] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.452130][ T7407] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.597795][ T7407] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.642553][ T7407] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.672080][ T4399] 8021q: adding VLAN 0 to HW filter on device eth8 [ 137.701940][ T7407] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.752016][ T7407] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.759821][ T4399] 8021q: adding VLAN 0 to HW filter on device eth9 [ 137.906935][ T7407] bond0 (unregistering): Released all slaves [ 137.908212][ T7407] bond1 (unregistering): Released all slaves [ 137.928657][ T7407] bond0 (unregistering): Released all slaves [ 137.931261][ T4399] 8021q: adding VLAN 0 to HW filter on device eth10 [ 137.972902][ T7407] tipc: Disabling bearer [ 137.974071][ T7407] tipc: Left network mode [ 137.975117][ T7407] tipc: Disabling bearer [ 137.976321][ T7407] tipc: Left network mode [ 138.036873][ T4399] 8021q: adding VLAN 0 to HW filter on device eth11 [ 138.141768][ T4399] 8021q: adding VLAN 0 to HW filter on device eth12 [ 138.233537][ T4399] 8021q: adding VLAN 0 to HW filter on device eth15 [ 138.335123][ T4399] 8021q: adding VLAN 0 to HW filter on device eth14 [ 138.402537][ T7407] hsr_slave_0: left promiscuous mode [ 138.403634][ T7407] hsr_slave_1: left promiscuous mode [ 138.406320][ T7407] hsr_slave_0: left promiscuous mode [ 138.407357][ T7407] hsr_slave_1: left promiscuous mode [ 138.413668][ T7407] veth1_macvtap: left promiscuous mode [ 138.413710][ T7407] veth0_macvtap: left promiscuous mode [ 138.413752][ T7407] veth1_vlan: left promiscuous mode [ 138.413781][ T7407] veth0_vlan: left promiscuous mode [ 138.416781][ T7407] veth1_macvtap: left promiscuous mode [ 138.416803][ T7407] veth0_macvtap: left promiscuous mode [ 138.416842][ T7407] veth1_vlan: left promiscuous mode [ 138.623605][ T4399] 8021q: adding VLAN 0 to HW filter on device eth13 [ 139.486771][ T7407] bridge_slave_1: left allmulticast mode [ 139.486802][ T7407] bridge_slave_1: left promiscuous mode [ 139.486883][ T7407] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.489249][ T7407] bridge_slave_0: left allmulticast mode [ 139.489264][ T7407] bridge_slave_0: left promiscuous mode [ 139.489327][ T7407] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.521324][ T7407] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.532193][ T7407] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.534701][ T7407] bond0 (unregistering): Released all slaves [ 139.557109][ T7407] hsr_slave_0: left promiscuous mode [ 139.558489][ T7407] hsr_slave_1: left promiscuous mode [ 139.558760][ T7407] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.561518][ T7407] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.622451][ T7407] team0 (unregistering): Port device team_slave_1 removed [ 139.625490][ T7407] team0 (unregistering): Port device team_slave_0 removed [ 139.652653][ T4399] 8021q: adding VLAN 0 to HW filter on device eth16 [ 139.758768][ T4399] 8021q: adding VLAN 0 to HW filter on device eth17 [ 139.865508][ T4399] 8021q: adding VLAN 0 to HW filter on device eth19 [ 139.953748][ T4399] 8021q: adding VLAN 0 to HW filter on device eth18