last executing test programs: 7.519432203s ago: executing program 1 (id=779): syz_open_dev$hidraw(0x0, 0x7ff, 0x2acc43) r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x22000, 0x0) fchdir(r0) exit(0x3) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) getdents64(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r6 = socket(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0xfffffffffffffffe, 0x3) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r5], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r9], 0x50}}, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r4) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r10}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 6.84499376s ago: executing program 2 (id=782): r0 = socket$packet(0x11, 0x3, 0x300) sync_file_range(r0, 0x0, 0xfff, 0x1) r1 = socket(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000380)={0xa, 0x2, 0xf}) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x1, @remote, 0x4}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) recvmmsg(r4, &(0x7f00000002c0), 0x220, 0x100, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_to_hsr\x00', 0x0}) sendto$packet(r0, &(0x7f0000000140)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195e", 0x2a, 0x400c010, &(0x7f0000000000)={0x11, 0x3, r7, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x8, 0x100, 0x3}, &(0x7f00000000c0), 0x0, &(0x7f00000004c0)) 6.432119523s ago: executing program 3 (id=784): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0x7e, 0x4, 0x7, 0xfffffff2, 0x1, "6800190100000006000000000000000200", 0x36, 0x1}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000780)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x1011f, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$revoke(0x3, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$P9_RREAD(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80, 0x20000006, 0x20000000, 0x6, 0x5f, 0x9, 0x1005, 0xffff2d37, 0xffffff01, 0x6, 0x10000003, 0x5, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0xd, 0x1, 0x0, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xfffffffc, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x5, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x0, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012d, 0x8004, 0x5, 0xffffffd3, 0x129432e2, 0xc8, 0xf8, 0xe, 0x2be, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2f, 0xe, 0x26, 0x3, 0xa7e, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000045, 0x5f31, 0x1000d, 0x4e0, 0x1, 0x4, 0xb, 0x4, 0x9, 0x4, 0xd, 0xffff8001, 0x47, 0x8000, 0x1, 0xfe000000, 0xfffe, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0xbec, 0xbc45, 0x3, 0x42, 0x3], [0x4, 0x406, 0xe, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x2005, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x5, 0x80005, 0x8, 0x1ef, 0x22, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xc, 0xc, 0x2, 0x2, 0x3, 0x2000000b, 0x4, 0x9, 0x6, 0x38, 0x800003, 0x600, 0x83, 0x3, 0x4, 0x2950bfaf, 0x6, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7fe, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x40000007, 0xb, 0x5, 0x938, 0xfffffbff, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x54, 0x5, 0x3, 0x101, 0x10000, 0x5, 0x7fff, 0xfffe, 0xa620, 0x1, 0x78b, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x1, 0x4, 0xc8, 0x1, 0xfffff000, 0x5, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xab, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0xfffffffb, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 6.261825314s ago: executing program 1 (id=786): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8000000000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$kcm(0xa, 0x2, 0x0) r4 = socket(0x2, 0x80002, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000080)={0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x3, 'lblc\x00', 0x8, 0x42, 0x6f}, 0x2c) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010103, 0x4e21, 0x3, 'lblcr\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x0, 0x6, 0x1}}, 0x44) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x24, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xf0}}, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000180)={[{@nodelalloc}]}, 0xfe, 0x278, &(0x7f0000000840)="$eJzs3b1rJGUYAPBn9iNrTAhRGxs/QEQ0EGIhCDbaKAQkiIigQkTEShIhJm3WysbCXiWVTRA7o6VcE665PyB3lyLXXBOuuHAHd8UeO7MLm82G7GY/5u7m94P5eGfer4F53ncCmdkACms+It6PiHJELERENSKSzgyvZst8K7kzvb8a0Wh8eidJ82XpTLvcTETUI+LdiEr73Nbel0f3Dj5645fN6ut/7n0xPanr63R8dPjxyR8rP/+z/PZWqXVstrXtvI5RSnocqyQRz4+jscdEUsm7B/Tn7+vNuH8hIl5L478apVbI/roxdaUab/3eu9zUyWT7CYxDo1FtzoH1BlA4pfQZOCktRkS2XyotLmbP8DfKSXy/vvHjwnfrm2vf5j1SASOQ1LO/ew8//K/270xX/N8uZ/Hfl3fG3FNgLJrx/9knuzeb+yflvHsDTMRL2aYZ/wtfb78Z4h8KR/xDcYl/KK4e8T+Vd5+AAV1y7h5u/jdUwJPM8z8Ul/iHp1i1vVPveXr4+L/f+g/CUwcbl6kJmJS5dG3+h+Lqiv9c3scF8tEZ/wBAsTRqOb+ADOQm7/EHAAAAAAAAAAAAAAAAAAA4a2d6f7W9DFVRpf+sV3+LOP4gK9PZfi09W05/jzjimXT97N3kVNXJYE319NUrQ1YwpL9G/Pb1Sm2w/HO3Rtv+oK69PJ56fzqdPPfbdttrEfVm5qVK5ez9n7TuvwudW/9zFxSsftNfA6OSdKXf+3yy7Xd7uJtv+8sHEf83x5+lXuNfKV5Mt73Hn9nOTyxf0g8PhqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAiXkUAAD//yKMcfw=") symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') 5.686085116s ago: executing program 4 (id=788): socket(0xa, 0x5, 0x0) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$inet(r0, &(0x7f0000008600)={0x2, 0x4e21, @private=0xa010100}, 0x10) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write$binfmt_format(r1, &(0x7f0000000100)='-1\x00', 0x2) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r3, 0x2, 0x0, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f00000001c0)=0x7fffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x58e, &(0x7f0000000180), 0x1, 0x459, &(0x7f0000000c00)="$eJzs28tvVNUfAPDvvW2B8mp//PDBQ62isfHR0oLKwo1GExeamLjBZW0LQQZqaE2EEEVjcGlI3BuXJv4FrnRj1JWJW90bEmLYiK7G3Jl7mQczpR2mvch8Psml59x7Lud859wzc+49MwEMrInsnyRiZ0T8FhFj9WxrgYn6nxvXL87/ff3ifBLV6lt/JrVyf12/OF8ULc7bkWcm04j00yQOdKh3+fyF03OVyuK5PD+9cua96eXzF549dWbu5OLJxbOzx44dPTLzwvOzz/Ulzv9lbd3/4dLBfa+9feWN+eNX3vnpm6Ei/rY4+mRitYNPVKt9rq5cu5rSyXCJDWFdsjGQdddIbfyPxVA0Om8sXv2k1MYBG6qa63L4UhW4hyVRdguAchQf9Nn9b7Ft3uyjfNdeqt8AZXHfyLf6keFI8zIjbfe3/TQREccv/fNltsXGPIcAAGjxXTb/eabT/C+N+5vK7c7XhsbztZQ9EfH/iNgbEfdF1Mo+EBEPrrP+9kWSW+c/6dWeAlujbP73Yr621Tr/K2Z/MT6U53bV4h9JTpyqLB7OX5PJGNma5WdWqeP7V379vNux5vlftmX1F3PBvB1Xh7e2nrMwtzJ3JzE3u/ZxxP7hTvEnN1cCkojYFxH7e6zj1FNfH+x27Pbxr6IP60zVryKerPf/pWiLv5Csvj45vS0qi4eni6viVj//cvnNbvXfUfx9kPX/9o7X/834x5Pm9drl9ddx+ffPut7TTPV0/Td2bMn/fjC3snJuJmJL8nq90c37ZxvnFvmifBb/5KHO439PNF6JAxGRXcQPRcTDEfFI3nePRsRjEXGoLa7m++sfX3783W7x3w39v9DW/+OtRdr6v5HYEu17OieGTv/wbev/2Eiu7f3vaC01me9Zy/vfWtrV29UMAAAA/z1pROyMJJ26mR5Np6bq3+HfG9vTytLyytMnlt4/u1D/jcB4jKTFk66xpuehM/ltfZGfbcsfyZ8bfzE0WstPzS9VFsoOHgbcjlvGf1ob/5k/hspuHbDh/F4LBlfT+E/KbAew+Xz+w+Ay/mFwdRj/o2W0A9h8nT7/PyqhHcDmaxv/lv1ggPR2/7+77+0ANp/nfzC4mse/LwDAwFgejdv/SL5TYlv0cpbEPZOI9K5oRn8SSY+jYK2JnWUHuP5E2e9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/fFvAAAA///VxO+8") syslog(0x4, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x38}, 0x1, 0x300, 0x0, 0x20000010}, 0x4) 5.685731642s ago: executing program 2 (id=789): syz_mount_image$ext4(&(0x7f0000000540)='ext3\x00', &(0x7f00000005c0)='./file0\x00', 0xa0040a, &(0x7f0000000000), 0x21, 0x4c0, &(0x7f0000001740)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) syz_mount_image$ext4(&(0x7f0000000300)='ext3\x00', &(0x7f0000000280)='./cgroup\x00', 0x1011, &(0x7f0000000340)={[{@dioread_lock}, {@grpquota}]}, 0x15, 0x66a, &(0x7f0000000ec0)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$sock_SIOCDELDLCI(r2, 0x8981, &(0x7f0000000040)={'ip6gre0\x00', 0x52c8}) syz_pidfd_open(0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setresuid(0xee00, 0xee00, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 5.549942838s ago: executing program 0 (id=790): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x40002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mount$overlay(0x0, 0x0, 0x0, 0x8, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x10) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x1000804, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xff, 0x28e, &(0x7f0000000f40)="$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") mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./proc\x00', 0x1ff) io_uring_setup(0x3fe9, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) 5.541960454s ago: executing program 4 (id=791): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$watch_queue(0x0, 0x80) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x5) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x3}}, 0x48) r3 = socket$netlink(0x10, 0x3, 0x10) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000001d80)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001900)=ANY=[@ANYBLOB], 0x420}, 0x1, 0x0, 0x0, 0x400c004}, 0x20001004) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000200)={'team0\x00', &(0x7f00000005c0)=@ethtool_link_settings={0x4c, 0x4, 0x1, 0x6, 0x7, 0x0, 0x0, 0x0, 0xc, 0x4, [0x2, 0x9, 0x0, 0xfd, 0x5, 0x0, 0x0, 0x2]}}) 5.531123176s ago: executing program 3 (id=792): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000780)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x1011f, 0x2, 0x0) signalfd4(r1, &(0x7f0000000100)={[0x8]}, 0x8, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$revoke(0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) write$P9_RREAD(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = fsmount(r3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000004) r5 = openat$cgroup(r4, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58) 4.79173914s ago: executing program 1 (id=793): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = gettid() ioprio_get$pid(0x2, r0) sched_getscheduler(r0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = gettid() mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000000000000009500a505000000001058cb65"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r5, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff74, 0x19, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) fcntl$setown(r2, 0x8, r4) socket$netlink(0x10, 0x3, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, 0x0) 3.747046209s ago: executing program 2 (id=794): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x2) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r3, 0xee01, 0x0) getrandom(0x0, 0x0, 0x3) r4 = socket$inet(0x2, 0x6, 0xfffffff8) setsockopt$inet_msfilter(r4, 0x0, 0x29, 0x0, 0x1c) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r5, 0x0, 0xb49, 0x8ffff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r6, r6, 0x0, 0xe3aa6ea) sendmsg$NFC_CMD_DEV_DOWN(0xffffffffffffffff, 0x0, 0x4004c044) 3.731127032s ago: executing program 3 (id=795): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read(r0, &(0x7f0000000300)=""/96, 0x60) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) setfsgid(0xee00) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, &(0x7f00000005c0), 0x802}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x14, 0x3, 0x220104, 0xb, 0x1}, 0x50) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) 3.730136596s ago: executing program 4 (id=796): socket(0x18, 0x4, 0x0) syz_emit_ethernet(0x76, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) clock_adjtime(0x0, &(0x7f0000000280)={0x1000000000066fb, 0x800000000004, 0x376, 0x0, 0x0, 0x51, 0x0, 0x4, 0x0, 0x0, 0x0, 0x200000240b, 0x3f, 0x9, 0x0, 0x80, 0xfffffffffffffffd, 0x1fff, 0xfffffffffffffffc, 0x4, 0x1010000000000, 0x0, 0x0, 0x100000000003f89, 0x0, 0x7fffffffffffffff}) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/graphics/fbcon/rotate\x00', 0x1, 0x0) write(r4, &(0x7f0000000300)='1', 0x1) r5 = socket$inet6(0xa, 0x80003, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000600)={{{@in=@broadcast, @in=@loopback, 0x0, 0x0, 0x0, 0x5, 0x2, 0x20, 0xa0, 0x6c}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x40000, 0x1000000000004, 0x2, 0xa78a}, 0xfffffffe, 0x0, 0x2, 0x0, 0x3}, {{@in=@empty, 0x0, 0x33}, 0x0, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3506, 0x4, 0x2, 0x2}}, 0xe8) 3.601372697s ago: executing program 0 (id=797): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r4}, 0x38) fsetxattr(r0, &(0x7f00000001c0)=@known='trusted.overlay.metacopy\x00', &(0x7f00000002c0)='}{^\x00', 0x4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x1ed) mount$overlay(0x0, 0x0, &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) r5 = memfd_create(&(0x7f0000000000)='\xff\x00l\x1e\xa0,\xc1\x8d\\Rxt\'\xb6\xbf\xc8*\n\xaf\x1b\xec\xfd\xbbY\x99\xb3\x06c\xd6\xf6\xb0\xcd=\xf3\x03`\x93\xff\x05e\xaa$\x00\xeaw\xd9\x10\x0f\x1d\x888\x8cS\x12?R\x99\xda7\xce)\x8f\xcc\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd32J\xd7\x9f\xea:=\xcc\x17(|L\xda\xc3\x1ca\xe8s\xb6\xebw\xc7\xabS\xd7pJ\xd2\xa1\xcf\xae\x1f2\x9f\x98\xa80\r\x85\xb4\x86\xbc\xd0\xea\xbf\xb1Z\xb7e$\xcf<\ra\x9b\xa5\xdc\v\x1e\xfd\xc7\x91\xf22\xcf\x96\x99\xc1\xbb\xa1j\xe5\xa8\x7f\a\xa9\xa7G\xad\xa3\x8b\xf1\xdb\\]R\x8cf\xac1\xd7V\xaf\xb5\x8e\x10\x95\x9f=2\xd0-\xe1K:\xc3b\x89\x15OS\xa5\x98Ky\x12\xe7Qt#\xeb\x99\a\x10\x1c\xb3N\x85\xeb\x80\x05\x82_\x15\xdc\xbc\xf93\xdd\xf5g\x98\xd4\x8az\xe4`\xa5\x00\x00\x00\x00\xcd\x13\xfc+\xac\xe5\x8bI\f\xd6\x89\xc7HY\xcf\x00O\x88\xe6\x8b\x8bF/\x82u\xffCnG\x02\x82\xfc\xe9Od\x92\x06\xdeg@y\xa6=4\xb1}\xa8Yr\xad9\xb9b)\xec}\x87=\x91:IV\xab\xdf\xa2\xba+6D\x1fuf\xdeJYw$L\xa1\x83NH\xe3\xf2\x91\x8cW\xb7\b\x04\x12\x8b\x8bV\x19\xf1\r\xcb\x94\xa3\xf4\xe4\x97$\x99c\rG\xd7#\xe2\xfd\x80\xadR\x83\xdc\xb8d\x15|\xac\xb8g$\x0f@\xca3\x9f\xb1\xea\xc6vQ\x1b\xdb#\xa3\"\x9f\x9e\xd8\xba\x13d\x9bx\x9a\xbf\xee\xf2kQ\xe0\xc4/~7\xcd\xd1\x06\xe5\x17\x9b\bW|\xbc\x86D\x05\xaf<\xdfy,I2f\xa7G\xe3Qp<\'6 x\n\x94f\xf8\xa2\xea\xf4\xa5\x9eY\xf80C\x91\x7f\x16u\x8c(Xl\x90\xd2\x9f\xa9\xb9kJy[\x93\xfe{\xe5\x1a\xe9\xb7T\x19;\xb9\t\xe7\x0ei\xfaZ\xfbS:\x9b\xc1r\xcbM.\xf8\xb8wR\xb3p~b\xcb\v1-\a-\x8a#\xaa1\xa9\x9a\x88\a\xc5\xb9*\xd3?\xac\n\x9c\xcd\xe2\xc9\xbd\xeb\xb3\xf65\xbdaP\t\xd6\x06\x1c\xeeNg\x92>\x92>\xaf\b3\x05\xfdM\xd2F\v\xbd\xeb\x83 \x9d\x90S\x11w\xefg\\\xca\xe2\xfc~w\xbe\xefh#\x96\xa5h\xec\xbfr\xc8Bi\x90\"(\xf2\xc6\xcc\xfbX\x14{\x9e5\x87\x91\xe2\x9b\xd4\xc6\xc2whk+\x0f\x82\xca\xc1@\xcb~P\xe4\x18\xf9E\'\xab\xc7z\xd7\x05V{\xa1X\xa3\x10\x13.]tlz\x12\xde\xf2\xa43\xee#\x92J~\xda \x9b\xc4\xc0V\xb3\x9dCO\x1fu\x1c4\x1d\v}\x1b\xe5>w\xfbsm\xa3\fI|\x96-p\x86\xd3O\xfa\x9a\x8f\xb2\x8e\x88qGEG', 0x6) fallocate(r5, 0x3, 0x1, 0xfffffffb) mkdirat(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x80) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}) 3.598411471s ago: executing program 1 (id=798): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)={0x1c, 0x3, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x44014) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@setlink={0x2c, 0x13, 0x1, 0x70bd29, 0x25dfdbf8, {0x0, 0x0, 0x0, r1, 0x3007, 0x409}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) 2.795233711s ago: executing program 2 (id=799): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, 0x0, 0x0) listen(r2, 0x2) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 2.794307146s ago: executing program 3 (id=800): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nvmet/subsystems/testsubsys/namespaces/1/../file0\x00', 0x147) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000024000180060005004e040000060001000200000008000300ac1414aa0800060001000000"], 0x38}}, 0x0) listen(r0, 0xc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0x40086604, 0x0) r6 = open(&(0x7f00000000c0)='./config\x00', 0x2, 0x110) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r6) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r8, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800) 2.793101267s ago: executing program 4 (id=801): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r2, r4, 0x16, 0x0, @void}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r5, 0x0, 0x2d, &(0x7f0000000140)={0x9, {{0x2, 0x4e21, @rand_addr=0x64010102}}}, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2c, r0, 0x1, 0x4, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xcb}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r7, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xc00) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r11, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)={0x48, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @action={{{}, {}, @device_a, @device_a, @from_mac=@broadcast, {0x0, 0xff}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x0, 0x5}, @void}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 2.677790865s ago: executing program 0 (id=802): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = syz_io_uring_setup(0x6457, &(0x7f0000000540)={0x0, 0x8550, 0xc50, 0x0, 0x11, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000300)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000001800)='/sys/fs/smackfs/doi\x00', 0x2, 0x0) write$smackfs_cipsonum(r4, &(0x7f0000001840)=0x48, 0x14) write$smackfs_cipsonum(r4, &(0x7f0000000000)=0x1, 0x14) syz_clone(0x21d40011, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r5, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x1c}, 0x60) sendto(r5, &(0x7f00000005c0)="a1bfc48ba9", 0xfdef, 0x0, &(0x7f0000000700)=@ax25={{0x3, @bcast, 0x5}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x80) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="030300000000000000002a0000000e0002006e657464657673696d0000000f0002"], 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000009c0)=ANY=[@ANYBLOB="380000000101050000000000000000000200c57652e0ac5151b34a1c577b5709320000240002800c00028005000100010000001400018008"], 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x40000c0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x44805}, 0x8014) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f00000000c0)={[{@dax_never}]}, 0x0, 0x248, &(0x7f0000000bc0)="$eJzs3T9oFFkcB/DfzO5eLsly5O6ag4O7g+M47gIh1x3YxEYhICGICCpERGyURIgJdomVjYXWKqlsgtgZrdMEG0Ww8k+K2AgaLAwWWqzsTiLRbDBxN7uS+Xxg2JnZee/3hp3v221mNoDc6omIgYgoRERvRJQiIll/wB/Z0rO6OdO5MBJRqRx8ndSOy7Yza+26I2I6Iv6PiPk0idPFiMm5o0tvH+//+9JE6a8bc0c6W3qSq5aXFg+sXB+6eHvwv8kHj14OJTEQ5U/Oq/mSOvuKScRPO1HsG5EU2z0CtmL4/K0n1dz/HBF/1vJfijSyD+/y+Hfzpfj32mZtr7x6+Gsrxwo0X6VSqn4HTleA3EkjohxJ2hcR2Xqa9vVlv+GfFrrSM2Pj53pPjU2Mnmz3TAU0Szlicd/djjvdn+X/RSHLP7B7VfN/aHj2WXV9pdDu0QCtVM1/7/Gpf0L+IXfkH/JL/iG/5B/yS/4hv+Qf8kv+Ydf4frsN5B/yS/4hv+Qf8mt9/gGAfKl0tPsOZKBd2j3/AAAAAAAAAAAAAAAAAAAAG810LoysLa2qee9qxPLeiCjWq1+o/R/x2qNNu94k1cM+SrJmDTn2e4MdNOjmDt59vZVHuv3wfOfqb8X935rZW3nbLaZGI6YvRER/sbjx+ktWr7+v9+MX3i+daLBAg/Ycbm/997Otq1Wqs2+wkmQr/fXmnzR+qb3Wn3/Km/S5HWffNdgBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALfMhAAD//+M2bGo=") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='mnt/encrypted_dir\x00', 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r8, 0x800c6613, &(0x7f00000006c0)=@v1={0x0, @aes128, 0x3, @desc2}) io_uring_enter(r2, 0x1, 0x1, 0x1, 0x0, 0x0) 2.676220982s ago: executing program 3 (id=803): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) accept(r0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x9, 0x4, 0x4, 0x100, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) syz_open_dev$video4linux(&(0x7f0000000040), 0x7ffffffbffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002300), 0x0, 0x2000c000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8d33864195c5c22f}, 0x60400c0) close_range(r1, 0xffffffffffffffff, 0x0) 2.60206861s ago: executing program 4 (id=804): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6_tcp(0xa, 0x1, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x81) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r3 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x240880c0, &(0x7f0000000280)={0xa, 0xe20, 0x0, @mcast1}, 0x1c) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) 2.52568635s ago: executing program 0 (id=805): setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x45, 0x0, 0x0) fsopen(&(0x7f0000000000)='pipefs\x00', 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f00000002c0)) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, [0x9, 0x1, 0x5, 0x8001, 0x4, 0x2, 0x461, 0x10201, 0x6, 0xe, 0x1, 0x75a3, 0xffffffffffffff7f, 0x6, 0x3]}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x80000) sendfile(r3, 0xffffffffffffffff, 0x0, 0x3) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0xd3000000, 0x10}, &(0x7f0000000100)=0xc) bind$inet(0xffffffffffffffff, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x400, 0x150, 0x1a}, 0x18) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}}) r5 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000000)={{0x2, 0x3, @local}, {0x1, @remote}, 0x4a, {0x2, 0x0, @remote}, 'veth1_to_bridge\x00'}) ioctl$sock_inet_SIOCSARP(r4, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x4a, {0x2, 0x0, @multicast2}, 'syz_tun\x00'}) 1.897352363s ago: executing program 1 (id=806): syz_mount_image$ext4(&(0x7f0000000540)='ext3\x00', &(0x7f00000005c0)='./file0\x00', 0xa0040a, &(0x7f0000000000), 0x21, 0x4c0, &(0x7f0000001740)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) syz_mount_image$ext4(&(0x7f0000000300)='ext3\x00', &(0x7f0000000280)='./cgroup\x00', 0x1011, &(0x7f0000000340)={[{@dioread_lock}, {@grpquota}]}, 0x15, 0x66a, &(0x7f0000000ec0)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$sock_SIOCDELDLCI(r2, 0x8981, &(0x7f0000000040)={'ip6gre0\x00', 0x52c8}) syz_pidfd_open(0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setresuid(0xee00, 0xee00, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.863970807s ago: executing program 2 (id=807): socket(0xa, 0x5, 0x0) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$inet(r0, &(0x7f0000008600)={0x2, 0x4e21, @private=0xa010100}, 0x10) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write$binfmt_format(r1, &(0x7f0000000100)='-1\x00', 0x2) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r3, 0x2, 0x0, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f00000001c0)=0x7fffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x58e, &(0x7f0000000180), 0x1, 0x459, &(0x7f0000000c00)="$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") syslog(0x4, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x38}, 0x1, 0x300, 0x0, 0x20000010}, 0x4) 1.83675391s ago: executing program 0 (id=808): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) readahead(r3, 0xf303, 0x9) landlock_restrict_self(0xffffffffffffffff, 0x0) r4 = io_uring_setup(0x5501, &(0x7f0000000080)={0x0, 0x4178, 0x400, 0x0, 0x110}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x12, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711812000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) bpf$LINK_DETACH(0x22, &(0x7f00000001c0), 0x4) close_range(r4, 0xffffffffffffffff, 0x0) 1.694783278s ago: executing program 4 (id=809): syz_emit_vhci(0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2505000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ppoll(0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000000)={r4, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000001c0)=0x1) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000000c0)=0x7) socket$nl_generic(0x10, 0x3, 0x10) 888.579025ms ago: executing program 0 (id=810): r0 = socket$inet(0xa, 0x801, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, &(0x7f0000000a00)=ANY=[@ANYBLOB='nonumtail=0,utf8=1,uni_xlate=1,shortname=winnt,uni_xlatM=1,shortname=lower,utf8=0,shortname=winnt,uni_xlate=1,nonumtail=0,codepage=866,usefree,iocharset=cp1250,nonumtail=0,nonumtail=0,utf8=0,uni_xlate=0,\x00'], 0xfd, 0x2a8, &(0x7f0000000240)="$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") mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) fsmount(0xffffffffffffffff, 0x0, 0x0) listen(r0, 0x8) accept4(r0, 0x0, 0x0, 0x0) 886.052666ms ago: executing program 2 (id=811): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r1 = socket(0x2b, 0x1, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x28, 0x5, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c0004802800018008000100666962001c00028008000240000000030800034000000001080001400000001414000000110001"], 0xdc}, 0x1, 0x0, 0x0, 0x40}, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x8, &(0x7f0000000140)=0xfb78, 0x4) sendmsg$rds(r0, &(0x7f0000000740)={&(0x7f0000000240)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000300)=[@mask_cswp={0x58, 0x114, 0x9, {{0x0, 0x10002}, &(0x7f0000000180)=0x7, &(0x7f00000001c0)=0x95fd, 0x2, 0x40, 0x23, 0x6, 0x29, 0xaac0}}], 0x58}, 0x0) 885.486412ms ago: executing program 3 (id=812): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0x40}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000400)=[@in={0x2, 0x0, @empty}, @in6={0xa, 0x0, 0x0, @empty}], 0x2c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r5, 0x10e, 0x3, 0xffffffffffffffff, 0x38) io_uring_setup(0x19b4, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x2) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000000)={0x4, 0xfffffffc, 0x11, 0x20, 0x100, &(0x7f00000004c0)="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"}) 0s ago: executing program 1 (id=813): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000100)={[{@noload}, {@quota}, {@lazytime}, {@errors_remount}, {@quota}, {@quota}]}, 0x3, 0x443, &(0x7f0000000940)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0xfffffffffffffffe}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x1c3425, 0x0) execve(0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) quotactl_fd$Q_SYNC(r4, 0xffffffff80000101, 0x0, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r5, &(0x7f0000013c00)={0x0, 0x0, &(0x7f0000013bc0)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001b14010000000000000000000800030001fc0000080001", @ANYBLOB="8068"], 0x28}}, 0x0) symlinkat(&(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) kernel console output (not intermixed with test programs): eam_slave_0 added [ 29.903530][ T4732] team0: Port device team_slave_1 added [ 29.907833][ T4724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.908866][ T4730] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.908896][ T4730] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.908953][ T4730] bridge_slave_0: entered allmulticast mode [ 29.909794][ T4730] bridge_slave_0: entered promiscuous mode [ 29.911024][ T4730] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.911057][ T4730] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.911140][ T4730] bridge_slave_1: entered allmulticast mode [ 29.911553][ T4730] bridge_slave_1: entered promiscuous mode [ 29.913002][ T4723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.913011][ T4723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.913026][ T4723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.916335][ T4723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.916343][ T4723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.916358][ T4723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.926747][ T4724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.944676][ T4723] hsr_slave_0: entered promiscuous mode [ 29.944998][ T4723] hsr_slave_1: entered promiscuous mode [ 29.946011][ T4732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.946018][ T4732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.946031][ T4732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.946517][ T4732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.946524][ T4732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.946539][ T4732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.959915][ T4729] hsr_slave_0: entered promiscuous mode [ 29.960256][ T4729] hsr_slave_1: entered promiscuous mode [ 29.960818][ T4729] debugfs: 'hsr0' already exists in 'hsr' [ 29.960866][ T4729] Cannot create hsr debugfs directory [ 29.961534][ T4724] team0: Port device team_slave_0 added [ 29.975153][ T4730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.976015][ T4730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.983261][ T4732] hsr_slave_0: entered promiscuous mode [ 29.983565][ T4732] hsr_slave_1: entered promiscuous mode [ 29.983748][ T4732] debugfs: 'hsr0' already exists in 'hsr' [ 29.983758][ T4732] Cannot create hsr debugfs directory [ 29.984446][ T4724] team0: Port device team_slave_1 added [ 30.001025][ T4730] team0: Port device team_slave_0 added [ 30.016162][ T4730] team0: Port device team_slave_1 added [ 30.030831][ T4724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.030842][ T4724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.030859][ T4724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.033017][ T4724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.033024][ T4724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.033037][ T4724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.058812][ T4724] hsr_slave_0: entered promiscuous mode [ 30.059088][ T4724] hsr_slave_1: entered promiscuous mode [ 30.059263][ T4724] debugfs: 'hsr0' already exists in 'hsr' [ 30.059273][ T4724] Cannot create hsr debugfs directory [ 30.070065][ T4730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.070076][ T4730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.070090][ T4730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.070721][ T4730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.070728][ T4730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.070740][ T4730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.124878][ T4723] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.128548][ T4723] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.128904][ T4723] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.130291][ T4723] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.134123][ T4730] hsr_slave_0: entered promiscuous mode [ 30.134434][ T4730] hsr_slave_1: entered promiscuous mode [ 30.134616][ T4730] debugfs: 'hsr0' already exists in 'hsr' [ 30.134625][ T4730] Cannot create hsr debugfs directory [ 30.145285][ T4723] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.147844][ T4723] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.156428][ T4723] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.157540][ T4723] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.191062][ T4723] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.191095][ T4723] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.191230][ T4723] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.191257][ T4723] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.197538][ T4729] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.200128][ T4729] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.200413][ T4729] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.201624][ T4729] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.210099][ T4729] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.211229][ T4729] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.211514][ T4729] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.212328][ T4729] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.228644][ T4732] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.229824][ T4732] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.230108][ T4732] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.230967][ T4732] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.232487][ T4732] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.236567][ T4732] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.242265][ T4729] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.242293][ T4729] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.242367][ T4729] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.242401][ T4729] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.246127][ T4732] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.247232][ T4732] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.260605][ T4724] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.262471][ T4724] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.268865][ T4724] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.270571][ T4724] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.271210][ T4724] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.272371][ T4724] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.278705][ T4724] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.279664][ T4724] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.286502][ T4723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.300352][ T1825] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.300832][ T1825] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.301386][ T1825] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.301640][ T1825] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.319543][ T4730] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.320996][ T4730] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.321490][ T4730] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.322523][ T4730] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.329077][ T4730] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.330079][ T4730] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.330436][ T4730] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.331880][ T4730] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.336877][ T4723] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.344357][ T1348] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.344389][ T1348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.344738][ T1348] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.344758][ T1348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.380623][ T4729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.393817][ T4730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.402514][ T4732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.412914][ T4730] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.423428][ T4729] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.430915][ T1825] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.430945][ T1825] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.431275][ T1825] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.431295][ T1825] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.432381][ T1825] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.432405][ T1825] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.436318][ T1825] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.436344][ T1825] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.440058][ T4724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.446554][ T4732] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.455573][ T924] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.455598][ T924] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.455962][ T924] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.455980][ T924] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.471387][ T4729] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.471402][ T4729] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.486166][ T4732] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.494620][ T4730] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.497922][ T4724] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.524091][ T924] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.524127][ T924] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.524487][ T924] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.524507][ T924] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.539836][ T4724] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.539852][ T4724] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.662179][ T4723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.695207][ T4729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.715930][ T4729] veth0_vlan: entered promiscuous mode [ 30.718083][ T4729] veth1_vlan: entered promiscuous mode [ 30.729532][ T4729] veth0_macvtap: entered promiscuous mode [ 30.730682][ T4729] veth1_macvtap: entered promiscuous mode [ 30.738701][ T4732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.739486][ T4730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.750754][ T4729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.755876][ T4729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.770968][ T1825] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.779905][ T4730] veth0_vlan: entered promiscuous mode [ 30.792149][ T4730] veth1_vlan: entered promiscuous mode [ 30.814267][ T4732] veth0_vlan: entered promiscuous mode [ 30.824239][ T1825] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.824251][ T1825] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.831360][ T4724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.834715][ T4732] veth1_vlan: entered promiscuous mode [ 30.844657][ T58] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.844704][ T58] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.846282][ T4724] veth0_vlan: entered promiscuous mode [ 30.867374][ T4732] veth0_macvtap: entered promiscuous mode [ 30.868720][ T4732] veth1_macvtap: entered promiscuous mode [ 30.869103][ T4724] veth1_vlan: entered promiscuous mode [ 30.872499][ T4732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.877196][ T4730] veth0_macvtap: entered promiscuous mode [ 30.878305][ T4730] veth1_macvtap: entered promiscuous mode [ 30.883377][ T4732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.885763][ T1825] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.885985][ T1825] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.886636][ T1825] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.899053][ T4724] veth0_macvtap: entered promiscuous mode [ 30.900032][ T4724] veth1_macvtap: entered promiscuous mode [ 30.904194][ T58] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.904696][ T58] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.910791][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.910804][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.918986][ T4723] veth0_vlan: entered promiscuous mode [ 30.920830][ T4723] veth1_vlan: entered promiscuous mode [ 30.926790][ T4724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.933630][ T4730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.934867][ T4730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.941781][ T4723] veth0_macvtap: entered promiscuous mode [ 30.950169][ T4724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.955601][ T4723] veth1_macvtap: entered promiscuous mode [ 30.960003][ T1825] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.960014][ T1825] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.975053][ T58] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.978200][ T58] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.978228][ T58] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.980061][ T4723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.981401][ T4723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.987916][ T4729] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.998391][ T1199] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.998404][ T1199] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.013820][ T1199] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.025416][ T1825] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.025429][ T1825] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.025520][ T1825] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.056051][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.056067][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.081178][ T4905] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 31.081263][ T4905] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 31.093554][ T4905] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 31.108888][ T1199] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.108900][ T1199] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.134377][ T58] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.134964][ T58] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.135001][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.135009][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.135102][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.135111][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.135213][ T58] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.136537][ T1825] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.151923][ T1199] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.151935][ T1199] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.173951][ T58] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.383237][ T4736] Bluetooth: hci2: command tx timeout [ 31.383697][ T4728] Bluetooth: hci0: command tx timeout [ 31.462924][ T4736] Bluetooth: hci4: command tx timeout [ 31.463148][ T4736] Bluetooth: hci3: command tx timeout [ 31.467762][ T4728] Bluetooth: hci1: command tx timeout [ 31.537274][ T40] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.537497][ T40] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.923612][ T4926] capability: warning: `syz.4.5' uses deprecated v2 capabilities in a way that may be insecure [ 33.470778][ T4737] Bluetooth: hci0: command tx timeout [ 33.470810][ T4737] Bluetooth: hci2: command tx timeout [ 33.543407][ T4737] Bluetooth: hci1: command tx timeout [ 33.543992][ T4737] Bluetooth: hci3: command tx timeout [ 33.544103][ T4737] Bluetooth: hci4: command tx timeout [ 33.578904][ T4947] fuse: Unknown parameter '0x000000000000000300000000000000000000' [ 33.661749][ T4955] 8021q: adding VLAN 0 to HW filter on device bond1 [ 33.672322][ T4961] netlink: 'syz.2.15': attribute type 1 has an invalid length. [ 33.681825][ T4961] team0: Port device bridge1 added [ 33.693426][ T4961] ipvlan2: entered allmulticast mode [ 33.693439][ T4961] team0: entered allmulticast mode [ 33.693446][ T4961] team_slave_0: entered allmulticast mode [ 33.693457][ T4961] team_slave_1: entered allmulticast mode [ 33.693466][ T4961] bridge1: entered allmulticast mode [ 33.693894][ T4961] team0: Device ipvlan2 is already an upper device of the team interface [ 33.707083][ T4955] bond1: (slave geneve2): making interface the new active one [ 33.707851][ T4955] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 33.985328][ T4955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13'. [ 33.985347][ T4955] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13'. [ 33.988440][ T4955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.990020][ T4955] bond1: (slave bond0): making interface the new active one [ 33.991234][ T4955] bond1: (slave bond0): Enslaving as an active interface with an up link [ 34.018802][ T4955] bond1 (unregistering): (slave geneve2): Releasing active interface [ 34.018825][ T4955] bond0: entered promiscuous mode [ 34.018835][ T4955] bond_slave_0: entered promiscuous mode [ 34.018913][ T4955] bond_slave_1: entered promiscuous mode [ 34.054631][ T4955] bond1 (unregistering): (slave bond0): Releasing active interface [ 34.054668][ T4955] bond0: left promiscuous mode [ 34.054678][ T4955] bond_slave_0: left promiscuous mode [ 34.054745][ T4955] bond_slave_1: left promiscuous mode [ 34.074561][ T4955] bond1 (unregistering): Released all slaves [ 34.574338][ T4978] loop1: detected capacity change from 0 to 4096 [ 34.583717][ T4978] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.597877][ T4976] netlink: 116 bytes leftover after parsing attributes in process `syz.1.20'. [ 35.552701][ T4737] Bluetooth: hci0: command tx timeout [ 35.552761][ T4728] Bluetooth: hci2: command tx timeout [ 35.672389][ T4728] Bluetooth: hci4: command tx timeout [ 35.672422][ T4728] Bluetooth: hci3: command tx timeout [ 35.672442][ T4728] Bluetooth: hci1: command tx timeout [ 36.522118][ T5005] loop3: detected capacity change from 0 to 1024 [ 36.522515][ T5005] ======================================================= [ 36.522515][ T5005] WARNING: The mand mount option has been deprecated and [ 36.522515][ T5005] and is ignored by this kernel. Remove the mand [ 36.522515][ T5005] option from the mount to silence this warning. [ 36.522515][ T5005] ======================================================= [ 36.522551][ T5005] EXT4-fs: Ignoring removed oldalloc option [ 36.522560][ T5005] EXT4-fs: Ignoring removed orlov option [ 36.675869][ T5005] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.623310][ T4737] Bluetooth: hci2: command tx timeout [ 37.623333][ T4737] Bluetooth: hci0: command tx timeout [ 37.723990][ T4728] Bluetooth: hci1: command tx timeout [ 37.724025][ T4728] Bluetooth: hci3: command tx timeout [ 37.724047][ T4728] Bluetooth: hci4: command tx timeout [ 38.058789][ T4724] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.150280][ T5025] vimc link validate: Sensor A:src:640x480 (0x42474752, 8, 2, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 38.150328][ T5025] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 38.196805][ T5035] loop2: detected capacity change from 0 to 512 [ 38.269520][ T5036] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm syz.3.27: bg 0: block 112: padding at end of block bitmap is not set [ 39.161951][ T5035] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 39.161976][ T5035] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 39.228877][ T5035] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 39.228919][ T5035] System zones: 1-12 [ 39.229806][ T5035] EXT4-fs (loop2): 1 truncate cleaned up [ 39.230255][ T5035] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.240477][ T5012] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 39.443859][ T5036] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 18 with error 28 [ 39.443882][ T5036] EXT4-fs (loop3): This should not happen!! Data will be lost [ 39.443882][ T5036] [ 39.443890][ T5036] EXT4-fs (loop3): Total free blocks count 0 [ 39.443898][ T5036] EXT4-fs (loop3): Free/Dirty block details [ 39.443909][ T5036] EXT4-fs (loop3): free_blocks=0 [ 39.443919][ T5036] EXT4-fs (loop3): dirty_blocks=32 [ 39.443926][ T5036] EXT4-fs (loop3): Block reservation details [ 39.443932][ T5036] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 39.507367][ T4737] Bluetooth: hci1: unexpected subevent 0x18 length: 30 > 19 [ 39.507389][ T4737] Bluetooth: hci1: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 39.538721][ T5049] batman_adv: batadv0: Adding interface: dummy0 [ 39.538735][ T5049] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.538750][ T5049] batman_adv: batadv0: Interface activated: dummy0 [ 39.551677][ T5049] batadv0: mtu less than device minimum [ 39.553580][ T5049] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 39.555269][ T5049] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 39.556832][ T5049] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 39.558390][ T5049] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 39.559955][ T5049] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 39.561525][ T5049] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 39.563118][ T5049] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 39.564676][ T5049] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 39.566233][ T5049] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 39.866776][ T4732] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.917743][ T4729] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 40.818351][ T5082] loop1: detected capacity change from 0 to 512 [ 40.824095][ T5082] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 40.830320][ T5082] EXT4-fs (loop1): 1 truncate cleaned up [ 40.832093][ T12] IPVS: starting estimator thread 0... [ 40.833323][ T5082] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.869815][ T5089] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 40.973430][ T5084] IPVS: using max 61 ests per chain, 146400 per kthread [ 40.976025][ T4724] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.339057][ T5100] netlink: 'syz.0.51': attribute type 1 has an invalid length. [ 41.589785][ T5102] loop2: detected capacity change from 0 to 128 [ 41.606816][ T5102] FAT-fs (loop2): data area starts beyond volume (414 > 128) [ 41.606844][ T5102] FAT-fs (loop2): Can't find a valid FAT filesystem [ 41.683972][ T5108] loop0: detected capacity change from 0 to 512 [ 41.771423][ T5108] FAT-fs (loop0): bogus number of FAT sectors [ 41.771452][ T5108] FAT-fs (loop0): Can't find a valid FAT filesystem [ 42.880485][ T5128] capability: warning: `syz.1.59' uses 32-bit capabilities (legacy support in use) [ 43.416816][ T5140] loop0: detected capacity change from 0 to 512 [ 43.434915][ T5140] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.586279][ T5152] netlink: 'syz.2.65': attribute type 1 has an invalid length. [ 43.727906][ T5153] loop3: detected capacity change from 0 to 8 [ 44.815645][ T5150] SQUASHFS error: Failed to read block 0x9ca: -5 [ 44.815688][ T5150] SQUASHFS error: Failed to read block 0x2cf2: -5 [ 44.815806][ T5150] SQUASHFS error: Failed to read block 0x2cf2: -5 [ 44.815813][ T5150] SQUASHFS error: Unable to read data cache entry [2cf2] [ 44.815819][ T5150] SQUASHFS error: Unable to read page, block 2cf2, size 50000 [ 44.815948][ T5150] SQUASHFS error: Unable to read data cache entry [2cf2] [ 44.815953][ T5150] SQUASHFS error: Unable to read page, block 2cf2, size 50000 [ 45.292577][ T5165] loop4: detected capacity change from 0 to 8 [ 45.717532][ T4728] Bluetooth: hci3: command 0x2016 tx timeout [ 46.719911][ T5182] loop2: detected capacity change from 0 to 8 [ 47.343989][ T4730] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.445541][ T5197] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 47.627739][ T5202] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 47.627752][ T5202] IPv6: NLM_F_CREATE should be set when creating new route [ 47.627777][ T5202] IPv6: NLM_F_CREATE should be set when creating new route [ 47.631288][ T5202] loop0: detected capacity change from 0 to 1024 [ 47.634856][ T5202] EXT4-fs: Ignoring removed mblk_io_submit option [ 47.635337][ T5202] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 47.635349][ T5202] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 47.635656][ T5202] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 47.636838][ T5202] EXT4-fs (loop0): journal inode is deleted [ 47.646137][ T5201] netlink: 'syz.2.78': attribute type 1 has an invalid length. [ 47.651471][ T5201] 8021q: adding VLAN 0 to HW filter on device bond1 [ 47.658595][ T5201] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 47.707568][ T5205] syzkaller0: entered promiscuous mode [ 47.707652][ T5205] syzkaller0: entered allmulticast mode [ 47.782790][ T4728] Bluetooth: hci3: command 0x2016 tx timeout [ 48.045318][ T5215] loop2: detected capacity change from 0 to 128 [ 48.051369][ T5215] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 48.787308][ T5233] loop4: detected capacity change from 0 to 512 [ 49.111657][ T4732] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.114925][ T5229] tc action pedit offset must be on 32 bit boundaries [ 49.159876][ T5240] netlink: 'syz.2.90': attribute type 1 has an invalid length. [ 49.169750][ T5240] 8021q: adding VLAN 0 to HW filter on device bond2 [ 49.179709][ T5240] bond1: (slave veth0_to_bond): Releasing backup interface [ 49.254781][ T5240] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 49.364818][ T5253] net_ratelimit: 10 callbacks suppressed [ 49.364845][ T5253] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 49.628821][ T5245] loop3: detected capacity change from 0 to 4096 [ 49.642323][ T5251] loop4: detected capacity change from 0 to 512 [ 49.642430][ T5245] EXT4-fs (loop3): Test dummy encryption mode enabled [ 49.646928][ T5251] journal_path: Lookup failure for './file1' [ 49.646946][ T5251] EXT4-fs: error: could not find journal device path [ 49.651032][ T5245] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c198, mo2=0003] [ 49.651091][ T5245] System zones: 0-5 [ 49.663550][ T5245] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.695160][ T5245] fscrypt: AES-256-XTS using blk-crypto-fallback [ 49.701466][ T5245] warning: `syz.3.92' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 49.716783][ T4729] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.055041][ T4728] Bluetooth: hci3: command 0x2016 tx timeout [ 50.248066][ T5276] netlink: 'syz.2.99': attribute type 4 has an invalid length. [ 51.824480][ T5289] 9p: Bad value for 'rfdno' [ 52.146578][ T4737] Bluetooth: hci4: unexpected Set CIG Parameters response data [ 52.217020][ T5293] process 'syz.3.104' launched '/dev/fd/7' with NULL argv: empty string added [ 52.419970][ T5303] netlink: 'syz.3.108': attribute type 1 has an invalid length. [ 52.432047][ T5303] netlink: 4 bytes leftover after parsing attributes in process `syz.3.108'. [ 52.441130][ T5303] bridge1: entered promiscuous mode [ 52.512384][ T5311] syzkaller0: entered promiscuous mode [ 52.512403][ T5311] syzkaller0: entered allmulticast mode [ 52.516073][ T5311] 0: reclassify loop, rule prio 0, protocol 700 [ 52.516245][ T5311] netlink: 168 bytes leftover after parsing attributes in process `syz.1.110'. [ 52.517078][ T5312] syzkaller0: entered promiscuous mode [ 52.517093][ T5312] syzkaller0: entered allmulticast mode [ 52.929856][ T5318] loop3: detected capacity change from 0 to 512 [ 52.932259][ T5318] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 52.953135][ T5318] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4223: comm syz.3.113: Allocating blocks 41-42 which overlap fs metadata [ 52.953211][ T5318] loop3: lost filesystem error report for type 5 error -117 [ 52.958132][ T5318] EXT4-fs (loop3): Remounting filesystem read-only [ 52.958260][ T5318] Quota error (device loop3): write_blk: dquota write failed [ 52.958270][ T5318] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 52.958338][ T5318] Quota error (device loop3): write_blk: dquota write failed [ 52.958384][ T5318] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 52.958449][ T5318] EXT4-fs (loop3): 1 truncate cleaned up [ 52.958923][ T5318] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.008768][ T5327] tc action pedit offset 132 out of bounds [ 53.008784][ T5327] tc action pedit offset 132 out of bounds [ 53.008790][ T5327] tc action pedit offset 132 out of bounds [ 53.008796][ T5327] tc action pedit offset 132 out of bounds [ 53.008802][ T5327] tc action pedit offset 132 out of bounds [ 53.008807][ T5327] tc action pedit offset 132 out of bounds [ 53.008812][ T5327] tc action pedit offset 132 out of bounds [ 53.008817][ T5327] tc action pedit offset 132 out of bounds [ 53.008822][ T5327] tc action pedit offset 132 out of bounds [ 53.008827][ T5327] tc action pedit offset 132 out of bounds [ 53.008855][ T5327] TC_ACT_REPEAT abuse ? [ 53.367896][ T5089] IPVS: ip_vs_send_async error -101 [ 53.430159][ T5337] tc action pedit offset must be on 32 bit boundaries [ 53.441287][ T5339] tipc: Started in network mode [ 53.441300][ T5339] tipc: Node identity 1, cluster identity 4711 [ 53.441308][ T5339] tipc: Node number set to 1 [ 53.442059][ T5339] tipc: New replicast peer: 127.0.0.1 [ 53.442266][ T5339] tipc: Enabled bearer , priority 10 [ 53.775110][ T4729] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.798074][ T5343] loop3: detected capacity change from 0 to 512 [ 53.801683][ T5343] EXT4-fs error (device loop3): ext4_validate_block_bitmap:436: comm syz.3.120: bg 0: block 4: invalid block bitmap [ 53.801710][ T5343] loop3: lost filesystem error report for type 5 error -117 [ 53.802039][ T5343] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 53.802051][ T5343] loop3: lost filesystem error report for type 5 error -117 [ 53.802193][ T5343] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.120: invalid indirect mapped block 1 (level 1) [ 53.802256][ T5343] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 53.802633][ C1] EXT4-fs (loop3): error count since last fsck: 3 [ 53.802644][ C1] EXT4-fs (loop3): initial error at time 53: ext4_validate_block_bitmap:436 [ 53.802657][ C1] EXT4-fs (loop3): last error at time 53: ext4_free_branches:1023: inode 11 [ 53.804007][ T5343] EXT4-fs (loop3): 1 truncate cleaned up [ 53.840353][ T5343] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.888204][ T5348] netlink: 'syz.0.122': attribute type 1 has an invalid length. [ 53.910051][ T5348] 8021q: adding VLAN 0 to HW filter on device bond1 [ 53.917459][ T5348] netlink: 4 bytes leftover after parsing attributes in process `syz.0.122'. [ 53.920786][ T5348] bridge1: entered promiscuous mode [ 54.381594][ T5348] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 54.420195][ T5361] syzkaller0: entered promiscuous mode [ 54.420212][ T5361] syzkaller0: entered allmulticast mode [ 54.497014][ T5365] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 54.731065][ T5370] batman_adv: batadv0: Adding interface: netdevsim0 [ 54.731214][ T5370] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.731290][ T5370] batman_adv: batadv0: Interface activated: netdevsim0 [ 54.731360][ T5370] batadv0: mtu less than device minimum [ 54.733288][ T5370] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 54.734877][ T5370] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 54.736421][ T5370] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 54.737973][ T5370] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 54.739518][ T5370] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 54.741066][ T5370] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 54.742634][ T5370] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 54.744183][ T5370] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 54.745732][ T5370] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 54.866952][ T4729] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.918231][ T5372] netlink: 'syz.3.128': attribute type 3 has an invalid length. [ 54.918250][ T5372] netlink: 'syz.3.128': attribute type 3 has an invalid length. [ 54.920073][ T5372] netlink: 4 bytes leftover after parsing attributes in process `syz.3.128'. [ 54.931778][ T5372] team0: Port device team_slave_0 removed [ 55.016998][ T5379] loop4: detected capacity change from 0 to 1024 [ 55.017644][ T5379] EXT4-fs: Ignoring removed nomblk_io_submit option [ 55.040197][ T5379] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 55.042380][ T5379] EXT4-fs error (device loop4): ext4_readdir:280: inode #2: block 16: comm syz.4.130: path /26/file1: bad entry in directory: directory entry overrun - offset=876, inode=0, rec_len=1024, size=1024 fake=0 [ 55.051522][ T5379] EXT4-fs (loop4): Remounting filesystem read-only [ 55.995581][ T5400] netlink: 'syz.3.135': attribute type 1 has an invalid length. [ 56.000566][ T5400] 8021q: adding VLAN 0 to HW filter on device bond1 [ 56.006743][ T4723] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 56.006980][ T5406] netlink: 'syz.0.137': attribute type 1 has an invalid length. [ 56.010503][ T5400] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 56.012245][ T5400] netlink: 4 bytes leftover after parsing attributes in process `syz.3.135'. [ 56.027495][ T5406] 8021q: adding VLAN 0 to HW filter on device bond2 [ 56.043465][ T5400] bridge1: entered promiscuous mode [ 56.044112][ T5412] netlink: 'syz.4.136': attribute type 1 has an invalid length. [ 56.046774][ T5400] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 56.053223][ T5406] 8021q: adding VLAN 0 to HW filter on device bond2 [ 56.053440][ T5406] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 56.053848][ T5406] bond2: (slave gre1): Error -95 calling set_mac_address [ 56.070640][ T5412] 8021q: adding VLAN 0 to HW filter on device bond1 [ 56.076326][ T5412] netlink: 4 bytes leftover after parsing attributes in process `syz.4.136'. [ 56.078413][ T5412] bridge1: entered promiscuous mode [ 56.080448][ T5412] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 56.117484][ T5406] gretap1: entered promiscuous mode [ 56.120779][ T5406] bond2: (slave gretap1): making interface the new active one [ 56.122303][ T5406] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 56.157623][ T5406] 8021q: adding VLAN 0 to HW filter on device bond3 [ 56.159624][ T5406] bond2: (slave bond3): Enslaving as an active interface with a down link [ 56.228380][ T5406] bond2 (unregistering): (slave gretap1): Releasing active interface [ 56.305129][ T5406] bond2 (unregistering): (slave bond3): Releasing active interface [ 56.592542][ T5406] bond2 (unregistering): Released all slaves [ 56.601640][ T5430] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 57.611779][ T5456] syz_tun: entered allmulticast mode [ 58.328415][ T5477] loop0: detected capacity change from 0 to 8192 [ 58.381095][ T5477] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 58.736903][ T5491] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 59.846945][ T5510] net_ratelimit: 11 callbacks suppressed [ 59.846960][ T5510] ip_tables: iptables: counters copy to user failed while replacing table [ 60.902058][ T5510] loop2: detected capacity change from 0 to 8192 [ 60.918760][ T5510] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 60.990584][ T5520] loop1: detected capacity change from 0 to 8192 [ 61.185953][ T5520] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 61.314302][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 61.405600][ T5525] syzkaller0: entered promiscuous mode [ 61.405617][ T5525] syzkaller0: entered allmulticast mode [ 61.728008][ T5525] tipc: Started in network mode [ 61.728034][ T5525] tipc: Node identity 7e8d6d09efb9, cluster identity 4711 [ 61.728167][ T5525] tipc: Enabled bearer , priority 0 [ 61.763270][ T5524] tipc: Resetting bearer [ 61.770821][ T5524] tipc: Disabling bearer [ 61.943890][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 62.142864][ T5541] syz.0.175 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 62.162874][ T5541] loop0: detected capacity change from 0 to 512 [ 62.221599][ T5541] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 62.221952][ T5541] EXT4-fs (loop0): Remounting filesystem read-only [ 62.222135][ T5541] EXT4-fs (loop0): 1 truncate cleaned up [ 62.222665][ T5541] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.303426][ T5547] netlink: 'syz.1.177': attribute type 8 has an invalid length. [ 62.303444][ T5547] netlink: 20 bytes leftover after parsing attributes in process `syz.1.177'. [ 62.348326][ T5547] v: renamed from veth0_vlan [ 62.583805][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 62.716900][ T4402] v: left promiscuous mode [ 62.724408][ T4474] v: entered promiscuous mode [ 62.784202][ T5541] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.913901][ T5580] loop1: detected capacity change from 0 to 1024 [ 62.914984][ T5580] EXT4-fs: Mount option(s) incompatible with ext3 [ 64.471995][ T5596] loop3: detected capacity change from 0 to 1024 [ 64.472353][ T5596] EXT4-fs: quotafile must be on filesystem root [ 64.475755][ T5616] loop1: detected capacity change from 0 to 1024 [ 64.478201][ T5616] EXT4-fs: Ignoring removed mblk_io_submit option [ 64.478215][ T5616] EXT4-fs: Ignoring removed oldalloc option [ 64.504174][ T1577] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.504212][ T1577] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.601430][ T1090] cfg80211: failed to load regulatory.db [ 64.843975][ T5616] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 65.119890][ T5625] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.189: bg 0: block 112: padding at end of block bitmap is not set [ 65.873538][ T4724] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 66.401015][ T5642] loop0: detected capacity change from 0 to 1024 [ 66.966991][ T5642] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 66.983176][ T5652] tc action pedit offset must be on 32 bit boundaries [ 67.039096][ T5656] tc action pedit offset must be on 32 bit boundaries [ 67.184171][ T1348] netdevsim netdevsim120 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.210348][ T5668] loop4: detected capacity change from 0 to 1024 [ 67.216455][ T5668] EXT4-fs (loop4): can't mount with commit=, fs mounted w/o journal [ 67.287695][ T5670] Injecting memory failure for pfn 0x158425 at process virtual address 0x20000000 [ 67.455341][ T5670] Memory failure: 0x158425: Sending SIGBUS to syz.2.201:5670 due to hardware memory corruption [ 67.455416][ T5670] Memory failure: 0x158425: recovery action for dirty LRU page: Recovered [ 67.455429][ T5670] Injecting memory failure for pfn 0x158426 at process virtual address 0x20001000 [ 67.455595][ T5670] Memory failure: 0x158426: unhandlable page. [ 67.455601][ T5670] Memory failure: 0x158426: recovery action for get hwpoison page: Ignored [ 67.531444][ T5668] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 67.812115][ T5668] md/raid10:md0: chunk size must be at least PAGE_SIZE(4096) and be a power of 2. [ 67.812134][ T5668] md: pers->run() failed ... [ 67.843272][ T5668] random: crng reseeded on system resumption [ 69.351494][ T5639] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 69.375914][ T4730] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 69.480303][ T5712] gadgetfs: bound to dummy_udc driver [ 70.203515][ T5725] loop3: detected capacity change from 0 to 512 [ 70.205859][ T5725] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 70.217401][ T5725] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.218: invalid indirect mapped block 4294967295 (level 0) [ 70.217427][ T5725] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 70.218372][ T5725] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.218: invalid indirect mapped block 4294967295 (level 1) [ 70.218403][ T5725] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 70.221908][ T5725] EXT4-fs (loop3): 1 orphan inode deleted [ 70.221921][ T5725] EXT4-fs (loop3): 1 truncate cleaned up [ 70.245801][ T5725] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.308213][ T5725] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.376979][ T5733] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 71.456666][ T5758] netlink: 1708 bytes leftover after parsing attributes in process `syz.1.225'. [ 71.457521][ T5758] netlink: 1708 bytes leftover after parsing attributes in process `syz.1.225'. [ 71.968458][ T5766] bond2: (slave veth0_to_bond): Releasing backup interface [ 71.996360][ T5767] syzkaller0: entered promiscuous mode [ 71.996379][ T5767] syzkaller0: entered allmulticast mode [ 71.998001][ T5766] netlink: 4 bytes leftover after parsing attributes in process `syz.2.228'. [ 72.001042][ T5766] bridge2: entered promiscuous mode [ 72.408760][ T5784] netlink: 'syz.2.235': attribute type 1 has an invalid length. [ 72.415091][ T5784] 8021q: adding VLAN 0 to HW filter on device bond4 [ 72.417750][ T5784] netlink: 4 bytes leftover after parsing attributes in process `syz.2.235'. [ 72.417816][ T5782] loop1: detected capacity change from 0 to 512 [ 72.421789][ T5782] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 72.422321][ T5784] bridge2: entered promiscuous mode [ 72.427279][ T5784] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 72.438698][ T5782] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.234: invalid indirect mapped block 4294967295 (level 0) [ 72.438718][ T5782] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 72.439516][ T5782] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.234: invalid indirect mapped block 4294967295 (level 1) [ 72.439548][ T5782] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 72.442624][ C0] EXT4-fs (loop1): error count since last fsck: 2 [ 72.442642][ C0] EXT4-fs (loop1): initial error at time 72: ext4_free_branches:1023: inode 16 [ 72.442659][ C0] EXT4-fs (loop1): last error at time 72: ext4_free_branches:1023: inode 16 [ 72.443982][ T5787] protocol 0000 is buggy, dev veth0_vlan [ 72.452042][ T5782] EXT4-fs (loop1): 1 orphan inode deleted [ 72.452056][ T5782] EXT4-fs (loop1): 1 truncate cleaned up [ 72.452509][ T5782] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.793357][ T5795] file system registered [ 73.061632][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.324312][ T5811] netlink: 'syz.2.244': attribute type 1 has an invalid length. [ 74.325289][ T5811] netlink: 4 bytes leftover after parsing attributes in process `syz.2.244'. [ 74.327377][ T5811] bridge3: entered promiscuous mode [ 75.287515][ T5834] netlink: 4 bytes leftover after parsing attributes in process `syz.2.249'. [ 75.291935][ T5834] bridge3: entered promiscuous mode [ 75.295856][ T5830] loop1: detected capacity change from 0 to 128 [ 75.309923][ T5830] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 75.364469][ T4724] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 75.369110][ T5846] loop3: detected capacity change from 0 to 512 [ 75.371578][ T5846] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 75.383612][ T5846] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.251: invalid indirect mapped block 4294967295 (level 0) [ 75.383640][ T5846] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 75.383841][ T5846] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.251: invalid indirect mapped block 4294967295 (level 1) [ 75.383864][ T5846] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 75.388786][ T5846] EXT4-fs (loop3): 1 orphan inode deleted [ 75.388801][ T5846] EXT4-fs (loop3): 1 truncate cleaned up [ 75.390844][ T5846] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.503729][ T5846] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.747724][ T30] audit: type=1326 audit(75.570:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5850 comm="syz.2.253" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94578868 code=0x7ffc0000 [ 75.747856][ T30] audit: type=1326 audit(75.570:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5850 comm="syz.2.253" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=167 compat=0 ip=0xffff94578868 code=0x7ffc0000 [ 75.747936][ T30] audit: type=1326 audit(75.570:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5850 comm="syz.2.253" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94578868 code=0x7ffc0000 [ 75.748090][ T30] audit: type=1326 audit(75.580:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5850 comm="syz.2.253" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff9455b72c code=0x7ffc0000 [ 75.748206][ T30] audit: type=1326 audit(75.580:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5850 comm="syz.2.253" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94578868 code=0x7ffc0000 [ 75.748294][ T30] audit: type=1326 audit(75.580:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5850 comm="syz.2.253" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=0 compat=0 ip=0xffff94578868 code=0x7ffc0000 [ 75.748360][ T30] audit: type=1326 audit(75.580:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5850 comm="syz.2.253" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94578868 code=0x7ffc0000 [ 75.748476][ T30] audit: type=1326 audit(75.580:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5850 comm="syz.2.253" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=2 compat=0 ip=0xffff94578868 code=0x7ffc0000 [ 75.748544][ T30] audit: type=1326 audit(75.580:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5850 comm="syz.2.253" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94578868 code=0x7ffc0000 [ 75.748599][ T30] audit: type=1326 audit(75.590:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5850 comm="syz.2.253" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94578868 code=0x7ffc0000 [ 75.840649][ T5868] ip_tables: iptables: counters copy to user failed while replacing table [ 75.855328][ T5868] loop1: detected capacity change from 0 to 128 [ 75.861577][ T5868] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 75.864843][ T5868] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 76.104530][ T4728] Bluetooth: hci4: command 0x0406 tx timeout [ 76.566367][ T5864] netlink: 4 bytes leftover after parsing attributes in process `syz.4.256'. [ 76.576618][ T5864] bridge2: entered promiscuous mode [ 76.645546][ T5876] loop3: detected capacity change from 0 to 512 [ 76.757426][ T5876] EXT4-fs error (device loop3): ext4_iget_extra_inode:5210: inode #15: comm syz.3.258: corrupted in-inode xattr: invalid ea_ino [ 76.757450][ T5876] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 76.759082][ T5876] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.258: couldn't read orphan inode 15 (err -117) [ 76.759103][ T5876] loop3: lost filesystem error report for type 5 error -117 [ 76.762484][ T5876] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.172355][ T5900] loop0: detected capacity change from 0 to 512 [ 77.210863][ T5906] netlink: 4 bytes leftover after parsing attributes in process `syz.2.264'. [ 77.221237][ T5906] bridge3: entered promiscuous mode [ 77.274814][ T5903] loop4: detected capacity change from 0 to 1024 [ 77.289928][ T5903] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.630413][ T4729] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.103877][ T4723] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.113954][ T5925] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.131163][ T5930] loop0: detected capacity change from 0 to 256 [ 78.156082][ T5932] netlink: 'syz.4.271': attribute type 1 has an invalid length. [ 78.160710][ T5932] netlink: 4 bytes leftover after parsing attributes in process `syz.4.271'. [ 78.167208][ T5932] bridge2: entered promiscuous mode [ 78.218140][ T5925] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.241975][ T5936] loop4: detected capacity change from 0 to 512 [ 78.245152][ T5936] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 78.248402][ T5936] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.272: invalid indirect mapped block 4294967295 (level 0) [ 78.248422][ T5936] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 78.248929][ T5936] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.272: invalid indirect mapped block 4294967295 (level 1) [ 78.248956][ T5936] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 78.249516][ T5936] EXT4-fs (loop4): 1 orphan inode deleted [ 78.249528][ T5936] EXT4-fs (loop4): 1 truncate cleaned up [ 78.249970][ T5936] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.121379][ T5936] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.205885][ T5925] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.288253][ T5946] netlink: 4 bytes leftover after parsing attributes in process `syz.4.277'. [ 79.290288][ T5946] bridge2: entered promiscuous mode [ 79.462804][ T5925] batman_adv: batadv0: Interface deactivated: netdevsim0 [ 79.462827][ T5925] batadv0: mtu less than device minimum [ 79.464538][ T5925] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 79.466163][ T5925] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 79.467784][ T5925] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 79.469419][ T5925] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 79.471043][ T5925] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 79.472735][ T5925] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 79.474356][ T5925] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 79.475975][ T5925] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 79.477598][ T5925] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 79.732963][ T5960] netlink: 156 bytes leftover after parsing attributes in process `syz.0.276'. [ 79.905596][ T5925] batman_adv: batadv0: Removing interface: netdevsim0 [ 79.912117][ T5925] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.377723][ T5979] syzkaller0: entered promiscuous mode [ 80.377740][ T5979] syzkaller0: entered allmulticast mode [ 81.564639][ T6022] netlink: 'syz.4.289': attribute type 1 has an invalid length. [ 81.565447][ T6022] netlink: 4 bytes leftover after parsing attributes in process `syz.4.289'. [ 81.567647][ T6022] bridge2: entered promiscuous mode [ 82.170713][ T6072] loop0: detected capacity change from 0 to 512 [ 82.179671][ T6072] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 82.179789][ T6072] EXT4-fs (loop0): orphan cleanup on readonly fs [ 82.180807][ T6072] EXT4-fs warning (device loop0): ext4_enable_quotas:7304: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 82.194704][ T6072] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 82.194942][ T6072] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #13: comm syz.0.298: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 82.194970][ T6072] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 82.195894][ T6072] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.298: couldn't read orphan inode 13 (err -117) [ 82.195980][ T6072] loop0: lost filesystem error report for type 5 error -117 [ 82.198666][ T6072] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 83.041922][ T4730] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.570018][ T6092] Zero length message leads to an empty skb [ 86.556615][ T6146] loop0: detected capacity change from 0 to 512 [ 86.560443][ T6146] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 86.571961][ T6146] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.319: invalid indirect mapped block 4294967295 (level 0) [ 86.571986][ T6146] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 86.572226][ T6146] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.319: invalid indirect mapped block 4294967295 (level 1) [ 86.572246][ T6146] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 86.572611][ C0] EXT4-fs (loop0): error count since last fsck: 2 [ 86.572621][ C0] EXT4-fs (loop0): initial error at time 86: ext4_free_branches:1023: inode 16 [ 86.572641][ C0] EXT4-fs (loop0): last error at time 86: ext4_free_branches:1023: inode 16 [ 86.591003][ T6146] EXT4-fs (loop0): 1 orphan inode deleted [ 86.591082][ T6146] EXT4-fs (loop0): 1 truncate cleaned up [ 86.600163][ T6146] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.626328][ T6146] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.775303][ T6156] loop4: detected capacity change from 0 to 1024 [ 88.022369][ T6182] loop0: detected capacity change from 0 to 512 [ 88.027436][ T6182] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 88.056488][ T6182] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.331: invalid indirect mapped block 4294967295 (level 0) [ 88.056529][ T6182] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 88.056798][ T6182] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.331: invalid indirect mapped block 4294967295 (level 1) [ 88.056822][ T6182] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 88.057827][ T6182] EXT4-fs (loop0): 1 orphan inode deleted [ 88.057838][ T6182] EXT4-fs (loop0): 1 truncate cleaned up [ 88.059079][ T6182] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.099278][ T6182] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.454783][ T6193] syzkaller0: entered promiscuous mode [ 88.454802][ T6193] syzkaller0: entered allmulticast mode [ 88.717000][ T6198] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 88.753516][ T6198] md: array md0 already has disks! [ 88.787628][ T6198] md/raid10:md0: chunk size must be at least PAGE_SIZE(4096) and be a power of 2. [ 88.787647][ T6198] md: pers->run() failed ... [ 88.823625][ C1] net_ratelimit: 10 callbacks suppressed [ 88.823642][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 88.842231][ T6201] loop4: detected capacity change from 0 to 256 [ 88.860597][ T6201] netlink: 112 bytes leftover after parsing attributes in process `syz.4.336'. [ 90.007299][ T6225] Unknown status report in ack skb [ 90.008213][ T6225] syz_tun: left allmulticast mode [ 90.031184][ T6226] loop4: detected capacity change from 0 to 512 [ 90.048345][ T6226] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 90.060257][ T6226] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.344: invalid indirect mapped block 4294967295 (level 0) [ 90.060289][ T6226] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 90.060926][ T6226] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.344: invalid indirect mapped block 4294967295 (level 1) [ 90.060949][ T6226] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 90.061601][ T6226] EXT4-fs (loop4): 1 orphan inode deleted [ 90.061613][ T6226] EXT4-fs (loop4): 1 truncate cleaned up [ 90.062060][ T6226] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.095791][ T6226] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.460482][ T6231] syzkaller0: entered promiscuous mode [ 90.460502][ T6231] syzkaller0: entered allmulticast mode [ 90.511044][ T6240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.347'. [ 90.516422][ T6234] loop1: detected capacity change from 0 to 512 [ 90.523907][ T6234] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.558474][ T6234] ext4: Unknown parameter '0' [ 90.792994][ T6234] EXT4-fs error (device loop1): ext4_validate_inode_bitmap:107: comm syz.1.347: Corrupt inode bitmap - block_group = 0, inode_bitmap = 3 [ 90.879843][ T4724] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.040743][ T6271] loop4: detected capacity change from 0 to 512 [ 92.052961][ T6271] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 92.057843][ T6271] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.358: invalid indirect mapped block 4294967295 (level 0) [ 92.057867][ T6271] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 92.058939][ T6271] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.358: invalid indirect mapped block 4294967295 (level 1) [ 92.058964][ T6271] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 92.061752][ T6271] EXT4-fs (loop4): 1 orphan inode deleted [ 92.061763][ T6271] EXT4-fs (loop4): 1 truncate cleaned up [ 92.062193][ T6271] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.449765][ T6271] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.560387][ T6283] syzkaller0: entered promiscuous mode [ 92.560404][ T6283] syzkaller0: entered allmulticast mode [ 93.844304][ T6282] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 93.844396][ T6282] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 94.111803][ T6282] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 94.112954][ T6282] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 94.112978][ T6282] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 94.115822][ T6282] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 94.117671][ T6282] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 94.117694][ T6282] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 94.122803][ T6282] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 94.124011][ T6282] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 94.124150][ T6282] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 94.124707][ T6282] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 94.124726][ T6282] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 94.243080][ T4737] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 94.450788][ T6327] netlink: 147896 bytes leftover after parsing attributes in process `syz.4.370'. [ 94.451749][ T6327] netlink: zone id is out of range [ 94.451887][ T6327] netlink: zone id is out of range [ 94.583571][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 94.636609][ T6337] loop3: detected capacity change from 0 to 512 [ 94.640041][ T6337] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 94.650595][ T6337] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.372: invalid indirect mapped block 4294967295 (level 0) [ 94.650649][ T6337] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 94.650836][ T6337] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.372: invalid indirect mapped block 4294967295 (level 1) [ 94.650860][ T6337] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 94.651877][ T6337] EXT4-fs (loop3): 1 orphan inode deleted [ 94.651890][ T6337] EXT4-fs (loop3): 1 truncate cleaned up [ 94.652354][ T6337] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.662819][ T4737] Bluetooth: hci0: command 0x0c1a tx timeout [ 94.689305][ T6337] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.224400][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 95.891274][ T6361] loop0: detected capacity change from 0 to 8 [ 95.897972][ T5393] wacom 0003:056A:003F.0001: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 95.985553][ T6366] fido_id[6366]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 96.207709][ T4737] Bluetooth: hci4: command 0x0406 tx timeout [ 96.207746][ T4737] Bluetooth: hci3: command 0x2016 tx timeout [ 96.207767][ T4737] Bluetooth: hci2: command 0x0c1a tx timeout [ 96.207785][ T4737] Bluetooth: hci1: command 0x0c1a tx timeout [ 96.459227][ T6379] loop2: detected capacity change from 0 to 512 [ 96.461045][ T6379] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 96.512499][ T6379] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.383: invalid indirect mapped block 4294967295 (level 0) [ 96.512528][ T6379] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 96.512638][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 96.512649][ C0] EXT4-fs (loop2): initial error at time 96: ext4_free_branches:1023: inode 16 [ 96.512675][ C0] EXT4-fs (loop2): last error at time 96: ext4_free_branches:1023: inode 16 [ 96.522859][ T6379] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.383: invalid indirect mapped block 4294967295 (level 1) [ 96.522882][ T6379] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 96.523344][ T6379] EXT4-fs (loop2): 1 orphan inode deleted [ 96.523355][ T6379] EXT4-fs (loop2): 1 truncate cleaned up [ 96.523928][ T6379] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.545588][ T6379] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.752809][ T4728] Bluetooth: hci0: command 0x0c1a tx timeout [ 97.570851][ T6403] loop4: detected capacity change from 0 to 8 [ 98.392679][ T4728] Bluetooth: hci1: command 0x0c1a tx timeout [ 98.392714][ T4728] Bluetooth: hci2: command 0x0c1a tx timeout [ 98.392734][ T4728] Bluetooth: hci3: command 0x2016 tx timeout [ 98.392753][ T4728] Bluetooth: hci4: command 0x0406 tx timeout [ 98.832778][ T4737] Bluetooth: hci0: command 0x0c1a tx timeout [ 98.973978][ T6418] netlink: 'syz.4.394': attribute type 1 has an invalid length. [ 98.982363][ T6411] 8021q: adding VLAN 0 to HW filter on device bond2 [ 98.987388][ T6416] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 98.998979][ T6418] 8021q: adding VLAN 0 to HW filter on device bond2 [ 99.001997][ T6418] netlink: 4 bytes leftover after parsing attributes in process `syz.4.394'. [ 99.005280][ T6418] bridge2: entered promiscuous mode [ 99.062881][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 99.063041][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 99.295635][ T6435] 9pnet_virtio: no channels available for device 127.0.0.1 [ 100.465849][ T6449] netlink: 11 bytes leftover after parsing attributes in process `syz.2.399'. [ 100.473722][ T6453] Option 'äÇ©?oÈ냟W½ÎƒÞ(ödîðÌ›ÔÏpø^ï8Æ ÝõXKÒtÔ..+jXpsízÑÔû¸ÔÿgˆH{“é&·}–(Ú)“eÒÓH/ Ïk;REÁŠ¨ãÂÉ<' to dns_resolver key: bad/missing value [ 100.479022][ T6453] x_tables: duplicate underflow at hook 3 [ 100.652812][ T4736] Bluetooth: hci1: command 0x0c1a tx timeout [ 100.652965][ T4728] Bluetooth: hci2: command 0x0c1a tx timeout [ 100.826946][ T6458] loop1: detected capacity change from 0 to 8 [ 101.153450][ T6466] loop3: detected capacity change from 0 to 128 [ 101.359103][ T6465] 8021q: adding VLAN 0 to HW filter on device bond3 [ 101.360589][ T6466] FAT-fs (loop3): data area starts beyond volume (414 > 128) [ 101.360614][ T6466] FAT-fs (loop3): Can't find a valid FAT filesystem [ 101.380872][ T6465] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 101.401489][ T6476] netlink: 'syz.4.408': attribute type 1 has an invalid length. [ 101.407778][ T6476] 8021q: adding VLAN 0 to HW filter on device bond4 [ 101.415624][ T6476] bond3: (slave veth0_to_bond): Releasing backup interface [ 101.610448][ T6476] netlink: 4 bytes leftover after parsing attributes in process `syz.4.408'. [ 101.785461][ T6476] bridge2: entered promiscuous mode [ 103.306173][ T6506] Unknown status report in ack skb [ 103.349751][ T6506] dvmrp8: entered allmulticast mode [ 103.363491][ T6506] dvmrp8: left allmulticast mode [ 103.659280][ T6519] 8021q: adding VLAN 0 to HW filter on device bond5 [ 103.664892][ T6519] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 103.668170][ T6522] loop0: detected capacity change from 0 to 512 [ 103.671572][ T6522] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 103.687333][ T6522] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4223: comm syz.0.420: Allocating blocks 41-42 which overlap fs metadata [ 103.687355][ T6522] loop0: lost filesystem error report for type 5 error -117 [ 103.689112][ T6522] EXT4-fs (loop0): Remounting filesystem read-only [ 103.689183][ T6522] Quota error (device loop0): write_blk: dquota write failed [ 103.689195][ T6522] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 103.689243][ T6522] Quota error (device loop0): write_blk: dquota write failed [ 103.689277][ T6522] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 103.689333][ T6522] EXT4-fs (loop0): 1 truncate cleaned up [ 103.689794][ T6522] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.098373][ T6538] netlink: 'syz.2.424': attribute type 1 has an invalid length. [ 104.104355][ T6538] 8021q: adding VLAN 0 to HW filter on device bond6 [ 104.111849][ T6538] bond5: (slave veth0_to_bond): Releasing backup interface [ 104.136280][ T6538] netlink: 4 bytes leftover after parsing attributes in process `syz.2.424'. [ 104.138760][ T6538] bridge3: entered promiscuous mode [ 104.577833][ T4730] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.598617][ T6554] loop0: detected capacity change from 0 to 512 [ 104.603220][ T6554] EXT4-fs error (device loop0): ext4_validate_block_bitmap:436: comm syz.0.429: bg 0: block 4: invalid block bitmap [ 104.603240][ T6554] loop0: lost filesystem error report for type 5 error -117 [ 104.603428][ T6554] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 104.603438][ T6554] loop0: lost filesystem error report for type 5 error -117 [ 104.606273][ T6554] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.429: invalid indirect mapped block 1 (level 1) [ 104.606297][ T6554] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 104.606893][ T6554] EXT4-fs (loop0): 1 truncate cleaned up [ 104.607657][ T6554] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.677110][ T6557] netlink: 'syz.4.430': attribute type 3 has an invalid length. [ 104.677279][ T6557] netlink: 'syz.4.430': attribute type 3 has an invalid length. [ 104.695972][ T6557] netlink: 4 bytes leftover after parsing attributes in process `syz.4.430'. [ 104.716431][ T6557] team0: Port device team_slave_0 removed [ 106.599206][ T4730] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.629976][ T6580] netlink: 'syz.1.447': attribute type 1 has an invalid length. [ 106.638939][ T6581] loop3: detected capacity change from 0 to 512 [ 106.642875][ T6581] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 106.677304][ T6580] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.680580][ T6580] netlink: 4 bytes leftover after parsing attributes in process `syz.1.447'. [ 106.684072][ T6580] bridge1: entered promiscuous mode [ 106.711442][ T6581] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.438: invalid indirect mapped block 4294967295 (level 0) [ 106.711468][ T6581] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 106.711669][ T6581] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.438: invalid indirect mapped block 4294967295 (level 1) [ 106.711700][ T6581] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 106.712757][ C1] EXT4-fs (loop3): error count since last fsck: 2 [ 106.712770][ C1] EXT4-fs (loop3): initial error at time 106: ext4_free_branches:1023: inode 16 [ 106.712787][ C1] EXT4-fs (loop3): last error at time 106: ext4_free_branches:1023: inode 16 [ 106.763143][ T6581] EXT4-fs (loop3): 1 orphan inode deleted [ 106.763162][ T6581] EXT4-fs (loop3): 1 truncate cleaned up [ 106.969859][ T6581] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.002085][ T6581] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.310802][ T6598] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 107.925065][ T6616] netlink: 'syz.1.457': attribute type 1 has an invalid length. [ 107.931526][ T6616] 8021q: adding VLAN 0 to HW filter on device bond2 [ 107.937218][ T6616] netlink: 4 bytes leftover after parsing attributes in process `syz.1.457'. [ 107.939185][ T6616] bridge1: entered promiscuous mode [ 108.392532][ T6623] tc action pedit offset must be on 32 bit boundaries [ 108.458954][ T6630] netlink: 'syz.3.452': attribute type 1 has an invalid length. [ 108.460886][ T6630] bond1: (slave veth0_to_bond): Releasing backup interface [ 108.460899][ T6630] bond1: (slave veth0_to_bond): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 108.498271][ T6630] netlink: 4 bytes leftover after parsing attributes in process `syz.3.452'. [ 108.513154][ T6630] bridge2: entered promiscuous mode [ 110.047887][ T6654] loop0: detected capacity change from 0 to 128 [ 110.057940][ T6654] FAT-fs (loop0): data area starts beyond volume (414 > 128) [ 110.057960][ T6654] FAT-fs (loop0): Can't find a valid FAT filesystem [ 110.240921][ T6650] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 110.367565][ T6664] netlink: 'syz.4.461': attribute type 1 has an invalid length. [ 110.395831][ T6664] 8021q: adding VLAN 0 to HW filter on device bond5 [ 110.587033][ T6664] netlink: 4 bytes leftover after parsing attributes in process `syz.4.461'. [ 110.589238][ T6664] bridge2: entered promiscuous mode [ 111.465779][ T6689] No such timeout policy "syz1" [ 112.947095][ T6728] loop1: detected capacity change from 0 to 512 [ 112.949548][ T6728] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 113.249713][ T6728] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4223: comm syz.1.477: Allocating blocks 41-42 which overlap fs metadata [ 113.249736][ T6728] loop1: lost filesystem error report for type 5 error -117 [ 113.250348][ T6728] EXT4-fs (loop1): Remounting filesystem read-only [ 113.250408][ T6728] Quota error (device loop1): write_blk: dquota write failed [ 113.250421][ T6728] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 113.250478][ T6728] Quota error (device loop1): write_blk: dquota write failed [ 113.250513][ T6728] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 113.250575][ T6728] EXT4-fs (loop1): 1 truncate cleaned up [ 113.251034][ T6728] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.611374][ T6734] tipc: Enabling of bearer rejected, failed to enable media [ 113.764386][ T6758] loop4: detected capacity change from 0 to 512 [ 113.766135][ T6758] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 113.774922][ T6758] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.482: invalid indirect mapped block 4294967295 (level 0) [ 113.774951][ T6758] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 113.776011][ T6758] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.482: invalid indirect mapped block 4294967295 (level 1) [ 113.776035][ T6758] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 113.777279][ T6758] EXT4-fs (loop4): 1 orphan inode deleted [ 113.777292][ T6758] EXT4-fs (loop4): 1 truncate cleaned up [ 113.778254][ T6758] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.056423][ T4724] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.081948][ T4723] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.136049][ T6766] loop0: detected capacity change from 0 to 2048 [ 114.156601][ T6766] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.161150][ T6766] EXT4-fs error (device loop0): ext4_validate_block_bitmap:436: comm syz.0.485: bg 0: block 2: invalid block bitmap [ 114.162015][ T6766] fs-verity (loop0, inode 13): ext4_end_enable_verity() failed with err -28 [ 114.252057][ T4730] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.567071][ T6781] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 115.221996][ T6790] loop1: detected capacity change from 0 to 512 [ 115.246787][ T6790] EXT4-fs warning (device loop1): dx_probe:801: inode #2: comm syz.1.490: Unrecognised inode hash code 255 [ 115.246812][ T6790] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.490: Corrupt directory, running e2fsck is recommended [ 115.267442][ T6790] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 115.267510][ T6790] EXT4-fs error (device loop1): ext4_iget_extra_inode:5210: inode #15: comm syz.1.490: corrupted in-inode xattr: invalid ea_ino [ 115.267529][ T6790] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 115.267766][ T6790] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.490: couldn't read orphan inode 15 (err -117) [ 115.267781][ T6790] loop1: lost filesystem error report for type 5 error -117 [ 115.268304][ T6790] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.501361][ T6801] EXT4-fs warning (device loop1): dx_probe:801: inode #2: comm syz.1.490: Unrecognised inode hash code 255 [ 115.502333][ T6801] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.490: Corrupt directory, running e2fsck is recommended [ 115.503126][ T6801] EXT4-fs error (device loop1): ext4_readdir:280: inode #2: block 4: comm syz.1.490: path /94/file0: bad entry in directory: directory entry overrun - offset=512, inode=4294967295, rec_len=1024, size=1024 fake=0 [ 115.578269][ T6789] tipc: Enabling of bearer rejected, failed to enable media [ 115.605126][ T6807] loop0: detected capacity change from 0 to 512 [ 115.612691][ T6807] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 115.750511][ T6814] netlink: 'syz.2.495': attribute type 1 has an invalid length. [ 115.751468][ T6814] netlink: 4 bytes leftover after parsing attributes in process `syz.2.495'. [ 115.758456][ T6814] bridge3: entered promiscuous mode [ 116.746355][ T4724] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.797254][ T5089] IPVS: ip_vs_send_async error -101 [ 117.988296][ T6835] netlink: 'syz.4.500': attribute type 1 has an invalid length. [ 117.998201][ T6835] 8021q: adding VLAN 0 to HW filter on device bond6 [ 118.007080][ T6835] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 118.071393][ T6845] loop1: detected capacity change from 0 to 512 [ 118.083298][ T6845] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 118.087504][ T6845] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.504: invalid indirect mapped block 4294967295 (level 0) [ 118.087527][ T6845] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 118.087678][ T6845] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.504: invalid indirect mapped block 4294967295 (level 1) [ 118.087695][ T6845] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 118.088212][ T6845] EXT4-fs (loop1): 1 orphan inode deleted [ 118.088220][ T6845] EXT4-fs (loop1): 1 truncate cleaned up [ 118.088680][ T6845] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.116948][ T6845] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.525210][ T6860] ip_tables: iptables: counters copy to user failed while replacing table [ 119.789386][ T6860] loop4: detected capacity change from 0 to 8192 [ 119.794317][ T6860] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 120.445037][ C1] wlan0: beacon TX faster than countdown (channel/color switch) completion [ 120.517812][ T4737] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 121.526399][ T6867] syzkaller0: entered promiscuous mode [ 121.526417][ T6867] syzkaller0: entered allmulticast mode [ 121.530486][ T6867] tipc: Enabled bearer , priority 0 [ 121.537198][ T6867] tipc: Resetting bearer [ 121.541680][ T6866] tipc: Resetting bearer [ 121.743090][ T6866] tipc: Disabling bearer [ 122.232127][ T5402] IPVS: starting estimator thread 0... [ 122.258250][ T6873] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 122.275803][ T6889] netlink: 'syz.2.514': attribute type 1 has an invalid length. [ 122.280908][ T6889] 8021q: adding VLAN 0 to HW filter on device bond7 [ 122.293672][ T6889] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 122.372816][ T6886] IPVS: using max 61 ests per chain, 146400 per kthread [ 122.750147][ T6899] syzkaller0: entered promiscuous mode [ 122.750165][ T6899] syzkaller0: entered allmulticast mode [ 124.254219][ T6927] loop2: detected capacity change from 0 to 128 [ 124.270065][ T6927] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 125.157024][ T4732] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 125.296028][ T6957] ip6gretap1: entered allmulticast mode [ 125.297038][ T6957] batman_adv: batadv0: Adding interface: ip6gretap1 [ 125.297046][ T6957] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 125.297060][ T6957] batman_adv: batadv0: Interface activated: ip6gretap1 [ 125.563515][ T30] audit: type=1326 audit(125.330:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6950 comm="syz.4.532" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e578868 code=0x7ffc0000 [ 125.563615][ T30] audit: type=1326 audit(125.330:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6950 comm="syz.4.532" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=167 compat=0 ip=0xffff8e578868 code=0x7ffc0000 [ 125.563676][ T30] audit: type=1326 audit(125.330:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6950 comm="syz.4.532" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e578868 code=0x7ffc0000 [ 125.563744][ T30] audit: type=1326 audit(125.330:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6950 comm="syz.4.532" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff8e55b72c code=0x7ffc0000 [ 125.563772][ T30] audit: type=1326 audit(125.330:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6950 comm="syz.4.532" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e578868 code=0x7ffc0000 [ 125.563840][ T30] audit: type=1326 audit(125.330:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6950 comm="syz.4.532" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=0 compat=0 ip=0xffff8e578868 code=0x7ffc0000 [ 125.563892][ T30] audit: type=1326 audit(125.340:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6950 comm="syz.4.532" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e578868 code=0x7ffc0000 [ 125.563958][ T30] audit: type=1326 audit(125.340:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6950 comm="syz.4.532" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=2 compat=0 ip=0xffff8e578868 code=0x7ffc0000 [ 125.564011][ T30] audit: type=1326 audit(125.340:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6950 comm="syz.4.532" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e578868 code=0x7ffc0000 [ 125.564065][ T30] audit: type=1326 audit(125.340:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6950 comm="syz.4.532" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e578868 code=0x7ffc0000 [ 125.839303][ T6964] netlink: 'syz.0.535': attribute type 1 has an invalid length. [ 125.848040][ T6964] 8021q: adding VLAN 0 to HW filter on device bond4 [ 125.854304][ T6964] bond2: (slave veth0_to_bond): Releasing backup interface [ 125.874795][ T6964] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 125.959963][ T1577] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.959995][ T1577] ieee802154 phy1 wpan1: encryption failed: -22 [ 128.257478][ T7013] loop1: detected capacity change from 0 to 512 [ 128.262795][ T7013] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 128.263011][ T7013] EXT4-fs (loop1): Remounting filesystem read-only [ 128.263543][ T7013] EXT4-fs (loop1): 1 truncate cleaned up [ 128.276383][ T7013] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.108855][ T7013] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.153454][ T7023] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 129.273913][ T7029] netlink: 'syz.1.552': attribute type 1 has an invalid length. [ 129.353094][ T7029] netlink: 4 bytes leftover after parsing attributes in process `syz.1.552'. [ 129.355598][ T7029] bridge1: entered promiscuous mode [ 131.211762][ T7074] tipc: Started in network mode [ 131.211784][ T7074] tipc: Node identity 4625b0a6ee94, cluster identity 4711 [ 131.211880][ T7074] tipc: Enabled bearer , priority 0 [ 131.218588][ T7074] tipc: Resetting bearer [ 131.221995][ T7073] tipc: Disabling bearer [ 132.208015][ T7085] syzkaller0: entered promiscuous mode [ 132.208033][ T7085] syzkaller0: entered allmulticast mode [ 132.692386][ T7100] loop2: detected capacity change from 0 to 128 [ 132.733538][ T7100] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 133.191332][ T4732] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 134.756582][ T7126] loop1: detected capacity change from 0 to 8 [ 135.035563][ T7143] syzkaller0: entered promiscuous mode [ 135.035580][ T7143] syzkaller0: entered allmulticast mode [ 136.921500][ T7184] loop1: detected capacity change from 0 to 512 [ 136.927488][ T7184] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 136.943080][ T7184] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.606: invalid indirect mapped block 4294967295 (level 0) [ 136.943100][ T7184] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 136.943231][ T7184] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.606: invalid indirect mapped block 4294967295 (level 1) [ 136.943244][ T7184] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 136.944251][ T7184] EXT4-fs (loop1): 1 orphan inode deleted [ 136.944265][ T7184] EXT4-fs (loop1): 1 truncate cleaned up [ 136.944797][ T7184] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.957601][ T7184] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.072875][ T7188] loop2: detected capacity change from 0 to 8 [ 138.083806][ T7187] netlink: 1708 bytes leftover after parsing attributes in process `syz.4.595'. [ 138.083827][ T7187] netlink: 1708 bytes leftover after parsing attributes in process `syz.4.595'. [ 138.651294][ T7209] syzkaller0: entered promiscuous mode [ 138.651311][ T7209] syzkaller0: entered allmulticast mode [ 139.433467][ T7225] netlink: 156 bytes leftover after parsing attributes in process `syz.1.607'. [ 140.320009][ T7242] loop1: detected capacity change from 0 to 512 [ 140.510622][ T7242] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.813556][ T4724] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.996797][ T7266] loop3: detected capacity change from 0 to 512 [ 142.063845][ T7271] bond7: (slave veth0_to_bond): Releasing backup interface [ 142.065485][ T7266] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 142.065529][ T7266] System zones: 1-12 [ 142.066028][ T7266] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: inode #12: comm syz.3.621: missing EA_INODE flag [ 142.066043][ T7266] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 142.066921][ T7266] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.621: error while reading EA inode 12 err=-117 [ 142.066936][ T7266] loop3: lost filesystem error report for type 5 error -117 [ 142.067288][ T7266] EXT4-fs (loop3): 1 orphan inode deleted [ 142.067766][ T7266] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.595196][ T7276] No such timeout policy "syz1" [ 142.885513][ T7271] netlink: 4 bytes leftover after parsing attributes in process `syz.2.622'. [ 142.887544][ T7271] bridge3: entered promiscuous mode [ 142.896299][ T4729] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.925644][ T7283] loop4: detected capacity change from 0 to 512 [ 142.945209][ T7285] tipc: Enabled bearer , priority 0 [ 142.946696][ T7285] tipc: Resetting bearer [ 142.982685][ T7283] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 142.984244][ T7283] EXT4-fs (loop4): 1 truncate cleaned up [ 142.988494][ T7283] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.005329][ T7284] tipc: Disabling bearer [ 143.099228][ T7292] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 143.416221][ T7294] EXT4-fs error (device loop4): ext4_generic_delete_entry:2675: inode #2: block 13: comm syz.4.625: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 143.416889][ T7294] EXT4-fs (loop4): Remounting filesystem read-only [ 143.416905][ T7294] EXT4-fs warning (device loop4): ext4_rename_delete:3741: inode #2: comm syz.4.625: Deleting old file: nlink 4, error=-117 [ 144.090404][ T4723] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.661803][ T7309] null_blk: disk nullb1 created [ 145.800525][ T7335] syzkaller0: entered promiscuous mode [ 145.800543][ T7335] syzkaller0: entered allmulticast mode [ 145.802259][ T7335] tipc: Started in network mode [ 145.802276][ T7335] tipc: Node identity 8a450e845d72, cluster identity 4711 [ 145.809330][ T7335] tipc: Enabled bearer , priority 0 [ 145.814998][ T7335] tipc: Resetting bearer [ 145.818366][ T7334] tipc: Resetting bearer [ 145.822110][ T7334] tipc: Disabling bearer [ 146.813495][ T7338] loop1: detected capacity change from 0 to 512 [ 146.823929][ T7338] journal_path: Lookup failure for './file1' [ 146.823947][ T7338] EXT4-fs: error: could not find journal device path [ 147.291238][ T7353] trusted_key: encrypted_key: keylen parameter is missing [ 147.368368][ T7357] loop3: detected capacity change from 0 to 512 [ 147.368780][ T7357] ext3: Unknown parameter 'context' [ 147.718666][ T7359] infiniband syz0: set active [ 147.718690][ T7359] infiniband syz0: added veth1_to_bridge [ 147.728178][ T7359] RDS/IB: syz0: added [ 147.728269][ T7359] smc: adding ib device syz0 with port count 1 [ 147.728298][ T7359] smc: ib device syz0 port 1 has no pnetid [ 147.788268][ T7366] bond4: (slave veth0_to_bond): Releasing backup interface [ 147.822811][ T7369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.647'. [ 147.844614][ T7369] bridge2: entered promiscuous mode [ 148.326869][ T7374] loop3: detected capacity change from 0 to 1024 [ 148.327898][ T7374] EXT4-fs: Mount option(s) incompatible with ext3 [ 148.337740][ T7376] loop1: detected capacity change from 0 to 1024 [ 148.340188][ T7376] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 148.401640][ T7376] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #3: block 2: comm syz.1.648: lblock 2 mapped to illegal pblock 2 (length 1) [ 148.401674][ T7376] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 148.402162][ T7376] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 148.402180][ T7376] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #3: block 48: comm syz.1.648: lblock 0 mapped to illegal pblock 48 (length 1) [ 148.402194][ T7376] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 148.402272][ T7376] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 148.402280][ T7376] EXT4-fs error (device loop1): ext4_acquire_dquot:7069: comm syz.1.648: Failed to acquire dquot type 0 [ 148.402290][ T7376] loop1: lost filesystem error report for type 5 error -117 [ 148.402618][ C0] EXT4-fs (loop1): error count since last fsck: 3 [ 148.402629][ C0] EXT4-fs (loop1): initial error at time 148: ext4_map_blocks:790: inode 3: block 2 [ 148.402649][ C0] EXT4-fs (loop1): last error at time 148: ext4_acquire_dquot:7069 [ 148.403323][ T7376] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 148.403334][ T7376] loop1: lost filesystem error report for type 5 error -117 [ 148.435685][ T7376] EXT4-fs error (device loop1): ext4_evict_inode:269: inode #11: comm syz.1.648: mark_inode_dirty error [ 148.435718][ T7376] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 148.440545][ T7376] EXT4-fs warning (device loop1): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 148.440615][ T7376] EXT4-fs (loop1): 1 orphan inode deleted [ 148.441100][ T7376] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.452955][ T40] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 148.457990][ T40] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 148.458021][ T40] EXT4-fs error (device loop1): ext4_release_dquot:7105: comm kworker/u8:2: Failed to release dquot type 0 [ 148.854197][ T4724] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.855377][ T4724] EXT4-fs error (device loop1): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 148.855397][ T4724] loop1: lost filesystem error report for type 5 error -117 [ 148.856732][ T4724] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 148.857225][ T4724] loop1: lost filesystem error report for type 5 error -117 [ 148.857763][ T4724] EXT4-fs error (device loop1): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 148.857785][ T4724] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 148.857947][ T4724] EXT4-fs error (device loop1): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 148.857959][ T4724] loop1: lost filesystem error report for type 5 error -117 [ 149.740423][ T7406] tipc: New replicast peer: 255.255.255.255 [ 149.740758][ T7406] tipc: Enabled bearer , priority 10 [ 149.749092][ T7406] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 149.749092][ T7406] Please contact the netfilter-devel mailing list or update your nftables rules. [ 151.229088][ T7424] binder: 7423:7424 ioctl c0306201 20000080 returned -14 [ 151.236005][ T7424] binder: 7423:7424 tried to acquire reference to desc 0, got 1 instead [ 151.236025][ T7424] binder: 7423:7424 ioctl c0306201 200003c0 returned -14 [ 151.259279][ T7426] netlink: 28 bytes leftover after parsing attributes in process `syz.0.663'. [ 151.270376][ T7426] netlink: 4 bytes leftover after parsing attributes in process `syz.0.663'. [ 151.276091][ T7424] binder: 7423:7424 got transaction with fd, 0, but target does not allow fds [ 151.276168][ T7424] binder: 7424:7423 translate fd failed [ 151.276211][ T7424] binder: 7423:7424 transaction call to 7423:0 failed 5/29201/-1, code 0 size 112-24 line 3594 [ 151.276246][ T7424] FAULT_INJECTION: forcing a failure. [ 151.276246][ T7424] name fail_futex, interval 1, probability 0, space 0, times 1 [ 151.276260][ T7424] CPU: 1 UID: 0 PID: 7424 Comm: syz.3.662 Not tainted syzkaller #0 PREEMPT [ 151.276272][ T7424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 151.276277][ T7424] Call trace: [ 151.276280][ T7424] show_stack+0x2c/0x3c (C) [ 151.276300][ T7424] __dump_stack+0x30/0x40 [ 151.276314][ T7424] dump_stack_lvl+0xd8/0x12c [ 151.276325][ T7424] dump_stack+0x1c/0x28 [ 151.276336][ T7424] should_fail_ex+0x418/0x58c [ 151.276350][ T7424] should_fail+0x14/0x24 [ 151.276361][ T7424] get_futex_key+0x1ec/0x12b0 [ 151.276373][ T7424] futex_wait_setup+0x58/0x674 [ 151.276385][ T7424] __futex_wait+0x108/0x25c [ 151.276396][ T7424] futex_wait+0x108/0x2c0 [ 151.276407][ T7424] do_futex+0x320/0x378 [ 151.276417][ T7424] __arm64_sys_futex+0x2e4/0x418 [ 151.276427][ T7424] invoke_syscall+0x98/0x244 [ 151.276439][ T7424] el0_svc_common+0xec/0x23c [ 151.276450][ T7424] do_el0_svc+0x4c/0x5c [ 151.276462][ T7424] el0_svc+0x60/0x1d8 [ 151.276474][ T7424] el0t_64_sync_handler+0x44/0x104 [ 151.276485][ T7424] el0t_64_sync+0x198/0x19c [ 151.280212][ T7426] bridge2: entered promiscuous mode [ 151.281745][ T4840] binder: undelivered TRANSACTION_ERROR: 29201 [ 151.323674][ T7431] syzkaller0: entered promiscuous mode [ 151.323692][ T7431] syzkaller0: entered allmulticast mode [ 151.324822][ T7431] tipc: Enabled bearer , priority 0 [ 151.326239][ T7431] tipc: Resetting bearer [ 151.327099][ T7430] tipc: Resetting bearer [ 151.330268][ T7430] tipc: Disabling bearer [ 151.353418][ T7434] loop2: detected capacity change from 0 to 256 [ 151.354378][ T7434] vfat: Unknown parameter 'u' [ 151.447873][ T7429] syzkaller0: entered promiscuous mode [ 151.447893][ T7429] syzkaller0: entered allmulticast mode [ 151.546279][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 152.773839][ T7455] tipc: Enabling of bearer rejected, failed to enable media [ 153.975919][ T7486] syzkaller0: entered promiscuous mode [ 153.975936][ T7486] syzkaller0: entered allmulticast mode [ 153.977509][ T7486] tipc: Enabled bearer , priority 0 [ 153.979063][ T7486] tipc: Resetting bearer [ 153.979929][ T7485] tipc: Resetting bearer [ 154.201645][ T7485] tipc: Disabling bearer [ 154.279556][ T7496] loop3: detected capacity change from 0 to 512 [ 154.306468][ T7496] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.155375][ T4729] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.416264][ T7557] netlink: 4 bytes leftover after parsing attributes in process `syz.0.696'. [ 157.418859][ T7557] bridge2: entered promiscuous mode [ 158.762351][ T7576] loop2: detected capacity change from 0 to 1024 [ 158.766135][ T7576] EXT4-fs: quotafile must be on filesystem root [ 159.310278][ T7586] loop2: detected capacity change from 0 to 128 [ 159.496624][ T7591] xt_CT: You must specify a L4 protocol and not use inversions on it [ 159.743075][ T7586] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 159.759057][ T7585] EXT4-fs (loop2): shut down requested (1) [ 159.953438][ T7600] FAULT_INJECTION: forcing a failure. [ 159.953438][ T7600] name failslab, interval 1, probability 0, space 0, times 1 [ 159.953646][ T7600] CPU: 1 UID: 0 PID: 7600 Comm: syz.1.706 Not tainted syzkaller #0 PREEMPT [ 159.953658][ T7600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 159.953664][ T7600] Call trace: [ 159.953667][ T7600] show_stack+0x2c/0x3c (C) [ 159.953699][ T7600] __dump_stack+0x30/0x40 [ 159.953711][ T7600] dump_stack_lvl+0xd8/0x12c [ 159.953722][ T7600] dump_stack+0x1c/0x28 [ 159.953733][ T7600] should_fail_ex+0x418/0x58c [ 159.953746][ T7600] should_failslab+0xc4/0x120 [ 159.953759][ T7600] kmem_cache_alloc_noprof+0x94/0x5d4 [ 159.953768][ T7600] ipmr_mfc_add+0x3f0/0x1fa8 [ 159.953778][ T7600] ip_mroute_setsockopt+0xb0c/0xd28 [ 159.953787][ T7600] do_ip_setsockopt+0xa6c/0x2628 [ 159.953799][ T7600] ip_setsockopt+0x80/0x128 [ 159.953810][ T7600] raw_setsockopt+0xd8/0x294 [ 159.953819][ T7600] sock_common_setsockopt+0xb0/0xcc [ 159.953830][ T7600] do_sock_setsockopt+0x1f0/0x330 [ 159.953841][ T7600] __sys_setsockopt+0x104/0x170 [ 159.953851][ T7600] __arm64_sys_setsockopt+0xc8/0xe4 [ 159.953862][ T7600] invoke_syscall+0x98/0x244 [ 159.953874][ T7600] el0_svc_common+0xec/0x23c [ 159.953885][ T7600] do_el0_svc+0x4c/0x5c [ 159.953896][ T7600] el0_svc+0x60/0x1d8 [ 159.953908][ T7600] el0t_64_sync_handler+0x44/0x104 [ 159.953919][ T7600] el0t_64_sync+0x198/0x19c [ 160.172987][ T4732] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 160.397378][ T7608] loop2: detected capacity change from 0 to 8 [ 160.454750][ T7608] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 160.455045][ T7608] unable to read xattr id index table [ 160.761997][ T7613] tipc: Enabling of bearer rejected, failed to enable media [ 160.787000][ T7624] loop1: detected capacity change from 0 to 512 [ 160.791391][ T7624] EXT4-fs (loop1): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 160.798823][ T7577] udevd[7577]: incorrect ext4 checksum on /dev/loop1 [ 161.786432][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 162.040063][ T7633] loop1: detected capacity change from 0 to 512 [ 162.042408][ T7632] loop4: detected capacity change from 0 to 512 [ 162.118733][ T7632] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 162.118773][ T7632] System zones: 1-12 [ 162.119282][ T7632] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: inode #12: comm syz.4.716: missing EA_INODE flag [ 162.119295][ T7632] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 162.119422][ T7632] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.716: error while reading EA inode 12 err=-117 [ 162.119435][ T7632] loop4: lost filesystem error report for type 5 error -117 [ 162.119543][ T7632] EXT4-fs (loop4): 1 orphan inode deleted [ 162.124225][ T7633] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 162.130967][ T7632] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.413713][ T7633] loop1: detected capacity change from 0 to 1024 [ 162.442019][ T4723] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.839230][ T7673] loop1: detected capacity change from 0 to 128 [ 163.846346][ T7675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.846527][ T7675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.848907][ T7675] Trying to write to read-only block-device nullb0 [ 163.920242][ T7678] gadgetfs expected dummy_udc controller not usbip-vudc [ 163.920318][ T7678] udc usbip-vudc.0: failed to start USB Gadget filesystem: -19 [ 163.923212][ T7678] UDC core: USB Gadget filesystem: couldn't find an available UDC [ 164.117745][ T7673] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 164.611774][ T7689] netlink: 28 bytes leftover after parsing attributes in process `syz.2.731'. [ 164.618359][ T7689] netlink: 4 bytes leftover after parsing attributes in process `syz.2.731'. [ 164.625031][ T7689] bridge3: entered promiscuous mode [ 165.242206][ T4737] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 165.316883][ T4724] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 165.346488][ T7704] syzkaller0: entered promiscuous mode [ 165.346504][ T7704] syzkaller0: entered allmulticast mode [ 165.348315][ T7704] tipc: Enabled bearer , priority 0 [ 165.350126][ T7704] tipc: Resetting bearer [ 165.351111][ T7702] tipc: Resetting bearer [ 165.366991][ T7702] tipc: Disabling bearer [ 166.232478][ T7709] fuse: Unknown parameter '6zœ2‹N“PAn0†P†Ó·Ôgê±Öaiê¾v¶D.K½måè‚"¦S•Ö[-ç}‘ªHfËK„…£;l„ Œ¶{' [ 166.269592][ T7714] loop3: detected capacity change from 0 to 512 [ 166.363216][ T7714] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 166.363274][ T7714] System zones: 1-12 [ 166.364559][ T7714] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: inode #12: comm syz.3.738: missing EA_INODE flag [ 166.364577][ T7714] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 166.364721][ T7714] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.738: error while reading EA inode 12 err=-117 [ 166.364737][ T7714] loop3: lost filesystem error report for type 5 error -117 [ 166.364842][ T7714] EXT4-fs (loop3): 1 orphan inode deleted [ 166.365291][ T7714] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.459442][ T7721] loop2: detected capacity change from 0 to 1024 [ 166.460259][ T7721] EXT4-fs: quotafile must be on filesystem root [ 166.905070][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 166.964873][ T7728] netlink: 8 bytes leftover after parsing attributes in process `syz.0.742'. [ 167.463614][ T7729] loop2: detected capacity change from 0 to 128 [ 167.516233][ T7729] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 167.517343][ T4729] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.533137][ T7735] netlink: 28 bytes leftover after parsing attributes in process `syz.0.743'. [ 167.534056][ T7729] EXT4-fs (loop2): shut down requested (1) [ 167.580252][ T7733] loop4: detected capacity change from 0 to 512 [ 167.587217][ T7735] netlink: 4 bytes leftover after parsing attributes in process `syz.0.743'. [ 167.591424][ T7735] bridge2: entered promiscuous mode [ 167.617445][ T7733] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 167.645691][ T7733] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.744: invalid indirect mapped block 4294967295 (level 0) [ 167.645720][ T7733] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 167.645978][ T7733] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.744: invalid indirect mapped block 4294967295 (level 1) [ 167.645998][ T7733] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 167.647563][ T7733] EXT4-fs (loop4): 1 orphan inode deleted [ 167.647580][ T7733] EXT4-fs (loop4): 1 truncate cleaned up [ 167.648782][ T7733] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.677625][ T7733] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.955215][ T4732] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 168.442838][ T7756] loop2: detected capacity change from 0 to 1024 [ 168.443194][ T7756] EXT4-fs: quotafile must be on filesystem root [ 168.819556][ T7759] loop2: detected capacity change from 0 to 128 [ 169.062395][ T7759] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 169.066669][ T7759] EXT4-fs (loop2): shut down requested (1) [ 169.147303][ T7772] loop1: detected capacity change from 0 to 512 [ 169.152860][ T7772] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 169.163659][ T7772] loop1: detected capacity change from 0 to 1024 [ 169.424586][ T4732] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 170.518869][ T7788] loop3: detected capacity change from 0 to 8 [ 170.981332][ T7790] netlink: 12 bytes leftover after parsing attributes in process `syz.2.758'. [ 170.990305][ T7790] netlink: 4 bytes leftover after parsing attributes in process `syz.2.758'. [ 170.992397][ T7790] bridge3: entered promiscuous mode [ 171.392091][ T7797] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 171.401185][ T7799] loop2: detected capacity change from 0 to 512 [ 171.406170][ T7799] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.761: attempt to clear invalid blocks 2 len 1 [ 171.406193][ T7799] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 171.406552][ T7799] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 171.407113][ T7799] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.761: invalid indirect mapped block 1819239214 (level 0) [ 171.407131][ T7799] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 171.407444][ T7799] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.761: invalid indirect mapped block 1819239214 (level 1) [ 171.407464][ T7799] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 171.409336][ T7799] EXT4-fs (loop2): 1 truncate cleaned up [ 171.409802][ T7799] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.961309][ T4732] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.073057][ T7824] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 173.077084][ T7816] syzkaller0: entered promiscuous mode [ 173.077097][ T7816] syzkaller0: entered allmulticast mode [ 173.340988][ T7822] tipc: Enabling of bearer rejected, failed to enable media [ 173.355097][ T7816] 0: reclassify loop, rule prio 0, protocol 700 [ 173.480322][ T7841] syzkaller0: entered promiscuous mode [ 173.480332][ T7841] syzkaller0: entered allmulticast mode [ 173.484381][ T7841] tipc: Enabled bearer , priority 0 [ 173.547160][ T7841] tipc: Resetting bearer [ 173.549481][ T7840] tipc: Resetting bearer [ 173.561592][ T7840] tipc: Disabling bearer [ 173.578898][ T7848] netlink: 12 bytes leftover after parsing attributes in process `syz.0.771'. [ 173.590232][ T7848] netlink: 4 bytes leftover after parsing attributes in process `syz.0.771'. [ 173.598988][ T7848] bridge2: entered promiscuous mode [ 174.078701][ T7859] 8021q: adding VLAN 0 to HW filter on device bond8 [ 174.104468][ T7859] netlink: 8 bytes leftover after parsing attributes in process `syz.4.774'. [ 174.104484][ T7859] netlink: 4 bytes leftover after parsing attributes in process `syz.4.774'. [ 174.114092][ T7859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.120696][ T7859] bond8: (slave bond0): making interface the new active one [ 174.122116][ T7859] bond8: (slave bond0): Enslaving as an active interface with an up link [ 174.140011][ T7859] netlink: 'syz.4.774': attribute type 4 has an invalid length. [ 174.140028][ T7859] netlink: 152 bytes leftover after parsing attributes in process `syz.4.774'. [ 174.143702][ T7859] .`: renamed from bond0 (while UP) [ 174.247670][ T7864] syzkaller0: entered promiscuous mode [ 174.247681][ T7864] syzkaller0: entered allmulticast mode [ 174.251242][ T7864] tipc: Enabled bearer , priority 0 [ 174.256457][ T7864] tipc: Resetting bearer [ 174.261093][ T7863] tipc: Resetting bearer [ 174.271188][ T7863] tipc: Disabling bearer [ 174.365844][ T7868] loop3: detected capacity change from 0 to 512 [ 174.376765][ T7869] bond8: (slave .`): Releasing backup interface [ 174.382485][ T7868] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.394427][ T7868] comedi comedi0: bad chanlist[0]=0x000000bf chan=191 range length=2 [ 174.405462][ T7869] bridge_slave_0: left allmulticast mode [ 174.405475][ T7869] bridge_slave_0: left promiscuous mode [ 174.405547][ T7869] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.415141][ T7869] bridge_slave_1: left allmulticast mode [ 174.415152][ T7869] bridge_slave_1: left promiscuous mode [ 174.415964][ T7869] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.420770][ T7869] bond6: (slave veth0_to_bond): Releasing backup interface [ 174.514870][ T7869] .`: (slave bond_slave_0): Releasing backup interface [ 174.809623][ T7869] .`: (slave bond_slave_1): Releasing backup interface [ 174.848039][ T7869] team0: Port device team_slave_1 removed [ 174.852216][ T7869] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.852229][ T7869] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.858932][ T7869] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.858939][ T7869] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.920510][ T7881] vlan2: entered promiscuous mode [ 174.920523][ T7881] hsr0: entered promiscuous mode [ 174.920650][ T7881] vlan2: entered allmulticast mode [ 174.920658][ T7881] hsr0: entered allmulticast mode [ 174.920664][ T7881] hsr_slave_0: entered allmulticast mode [ 174.920683][ T7881] hsr_slave_1: entered allmulticast mode [ 174.956433][ T7881] netlink: 4 bytes leftover after parsing attributes in process `syz.1.779'. [ 174.957783][ T7881] hsr_slave_0: left promiscuous mode [ 174.959325][ T7881] hsr_slave_1: left promiscuous mode [ 175.230279][ T4729] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.330071][ T7893] syzkaller0: entered promiscuous mode [ 175.330082][ T7893] syzkaller0: entered allmulticast mode [ 175.332255][ T7893] tipc: Enabled bearer , priority 0 [ 175.334121][ T7893] tipc: Resetting bearer [ 175.335835][ T7892] tipc: Resetting bearer [ 175.340643][ T7892] tipc: Disabling bearer [ 176.031248][ T7904] lo speed is unknown, defaulting to 1000 [ 176.031269][ T7904] lo speed is unknown, defaulting to 1000 [ 176.031907][ T7904] lo speed is unknown, defaulting to 1000 [ 176.049961][ T7904] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 176.056767][ T7904] lo speed is unknown, defaulting to 1000 [ 176.057233][ T7904] lo speed is unknown, defaulting to 1000 [ 176.057681][ T7904] lo speed is unknown, defaulting to 1000 [ 176.058077][ T7904] lo speed is unknown, defaulting to 1000 [ 176.058957][ T7904] lo speed is unknown, defaulting to 1000 [ 176.211772][ T7907] loop1: detected capacity change from 0 to 128 [ 176.308891][ T5402] IPVS: starting estimator thread 0... [ 176.326107][ T7907] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 176.355835][ T7912] loop4: detected capacity change from 0 to 512 [ 176.357314][ T7912] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 176.367743][ T7915] loop2: detected capacity change from 0 to 512 [ 176.368697][ T7912] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.788: invalid indirect mapped block 4294967295 (level 0) [ 176.368838][ T7915] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 176.368853][ T7912] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 176.369130][ T7912] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.788: invalid indirect mapped block 4294967295 (level 1) [ 176.369144][ T7912] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 176.372603][ C0] EXT4-fs (loop4): error count since last fsck: 2 [ 176.372616][ C0] EXT4-fs (loop4): initial error at time 176: ext4_free_branches:1023: inode 16 [ 176.372632][ C0] EXT4-fs (loop4): last error at time 176: ext4_free_branches:1023: inode 16 [ 176.375064][ T7915] loop2: detected capacity change from 0 to 1024 [ 176.394738][ T7908] IPVS: using max 61 ests per chain, 146400 per kthread [ 176.441895][ T7912] EXT4-fs (loop4): 1 orphan inode deleted [ 176.441911][ T7912] EXT4-fs (loop4): 1 truncate cleaned up [ 176.443087][ T7912] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.461775][ T7912] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.235429][ T4724] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. ** 3259 printk messages dropped ** [ 178.342670][ C1] net_ratelimit: 77 callbacks suppressed [ 179.301701][ T7963] 9p: Bad value for 'rfdno' [ 179.472001][ T7963] netlink: 36 bytes leftover after parsing attributes in process `syz.0.802'. [ 180.169488][ T7985] loop1: detected capacity change from 0 to 512 [ 180.191070][ T7985] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 180.223828][ T7985] loop1: detected capacity change from 0 to 1024 [ 180.293826][ T7988] loop2: detected capacity change from 0 to 512 [ 180.302454][ T7988] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 180.316471][ T7988] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.807: invalid indirect mapped block 4294967295 (level 0) [ 180.316492][ T7988] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 180.318528][ T7988] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.807: invalid indirect mapped block 4294967295 (level 1) [ 180.318565][ T7988] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 180.319165][ T7988] EXT4-fs (loop2): 1 orphan inode deleted [ 180.319178][ T7988] EXT4-fs (loop2): 1 truncate cleaned up [ 180.322341][ T7988] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.038282][ T7988] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.096368][ T8009] ================================================================== [ 182.096378][ T8009] BUG: KASAN: slab-out-of-bounds in soft_cursor+0x378/0x6bc [ 182.096395][ T8009] Read of size 68 at addr ffff0000c4ac7254 by task syz.3.812/8009 [ 182.096402][ T8009] [ 182.096407][ T8009] CPU: 1 UID: 0 PID: 8009 Comm: syz.3.812 Not tainted syzkaller #0 PREEMPT [ 182.096417][ T8009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 182.096431][ T8009] Call trace: [ 182.096433][ T8009] show_stack+0x2c/0x3c (C) [ 182.096448][ T8009] __dump_stack+0x30/0x40 [ 182.096460][ T8009] dump_stack_lvl+0xd8/0x12c [ 182.096472][ T8009] print_address_description+0xb0/0x238 [ 182.096481][ T8009] print_report+0x68/0x84 [ 182.096489][ T8009] kasan_report+0x8c/0xc4 [ 182.096499][ T8009] kasan_check_range+0x17c/0x1ac [ 182.096509][ T8009] __asan_memcpy+0x3c/0x84 [ 182.096520][ T8009] soft_cursor+0x378/0x6bc [ 182.096529][ T8009] cw_cursor+0xb18/0x11e4 [ 182.096538][ T8009] fbcon_cursor+0x344/0x498 [ 182.096545][ T8009] hide_cursor+0xdc/0x2d0 [ 182.096555][ T8009] con_font_op+0x900/0xc4c [ 182.096563][ T8009] vt_ioctl+0x1664/0x1d4c [ 182.096574][ T8009] tty_ioctl+0x828/0xcb8 [ 182.096583][ T8009] __arm64_sys_ioctl+0x154/0x1cc [ 182.096595][ T8009] invoke_syscall+0x98/0x244 [ 182.096608][ T8009] el0_svc_common+0xec/0x23c [ 182.096619][ T8009] do_el0_svc+0x4c/0x5c [ 182.096630][ T8009] el0_svc+0x60/0x1d8 [ 182.096643][ T8009] el0t_64_sync_handler+0x44/0x104 [ 182.096654][ T8009] el0t_64_sync+0x198/0x19c [ 182.096663][ T8009] [ 182.096665][ T8009] Allocated by task 7954: [ 182.096670][ T8009] kasan_save_track+0x40/0x78 [ 182.096684][ T8009] kasan_save_alloc_info+0x40/0x50 [ 182.096693][ T8009] __kasan_kmalloc+0x9c/0xb4 [ 182.096701][ T8009] __kmalloc_noprof+0x34c/0x6c8 [ 182.096708][ T8009] font_data_rotate+0x100/0x2f0 [ 182.096718][ T8009] fbcon_rotate_font+0x218/0x374 [ 182.096725][ T8009] fbcon_modechanged+0x19c/0x698 [ 182.096732][ T8009] rotate_store+0x1f4/0x334 [ 182.096739][ T8009] dev_attr_store+0x6c/0x90 [ 182.096748][ T8009] sysfs_kf_write+0xe0/0x108 [ 182.096759][ T8009] kernfs_fop_write_iter+0x260/0x3b8 [ 182.096769][ T8009] vfs_write+0x51c/0xa0c [ 182.096780][ T8009] ksys_write+0x12c/0x228 [ 182.096790][ T8009] __arm64_sys_write+0x84/0x98 [ 182.096801][ T8009] invoke_syscall+0x98/0x244 [ 182.096811][ T8009] el0_svc_common+0xec/0x23c [ 182.096821][ T8009] do_el0_svc+0x4c/0x5c [ 182.096831][ T8009] el0_svc+0x60/0x1d8 [ 182.096840][ T8009] el0t_64_sync_handler+0x44/0x104 [ 182.096850][ T8009] el0t_64_sync+0x198/0x19c [ 182.096856][ T8009] [ 182.096858][ T8009] The buggy address belongs to the object at ffff0000c4ac6000 [ 182.096858][ T8009] which belongs to the cache kmalloc-4k of size 4096 [ 182.096865][ T8009] The buggy address is located 596 bytes to the right of [ 182.096865][ T8009] allocated 4096-byte region [ffff0000c4ac6000, ffff0000c4ac7000) [ 182.096874][ T8009] [ 182.096876][ T8009] The buggy address belongs to the physical page: [ 182.096881][ T8009] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x104ac0 [ 182.096888][ T8009] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 182.096894][ T8009] flags: 0x5ffc00000000040(head|node=0|zone=2|lastcpupid=0x7ff) [ 182.096904][ T8009] page_type: f5(slab) [ 182.096912][ T8009] raw: 05ffc00000000040 ffff0000c0002140 dead000000000100 dead000000000122 [ 182.096919][ T8009] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 182.096927][ T8009] head: 05ffc00000000040 ffff0000c0002140 dead000000000100 dead000000000122 [ 182.096934][ T8009] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 182.096941][ T8009] head: 05ffc00000000003 fffffdffc312b001 00000000ffffffff 00000000ffffffff [ 182.096949][ T8009] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 182.096953][ T8009] page dumped because: kasan: bad access detected [ 182.096956][ T8009] [ 182.096958][ T8009] Memory state around the buggy address: [ 182.096963][ T8009] ffff0000c4ac7100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 182.096968][ T8009] ffff0000c4ac7180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 182.096974][ T8009] >ffff0000c4ac7200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 182.096978][ T8009] ^ [ 182.096983][ T8009] ffff0000c4ac7280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 182.096988][ T8009] ffff0000c4ac7300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 182.096993][ T8009] ================================================================== [ 182.096997][ T8009] Disabling lock debugging due to kernel taint [ 182.101195][ T8015] loop1: detected capacity change from 0 to 512 [ 182.107380][ T8015] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 182.109975][ T8015] EXT4-fs (loop1): 1 truncate cleaned up [ 182.110269][ T8015] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.681643][ T8022] atomic_op 000000007aa7fba8 conn xmit_atomic 0000000000000000 [ 182.956426][ T4724] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.462603][ C1] net_ratelimit: 64 callbacks suppressed [ 187.382961][ T1577] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.382989][ T1577] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.502603][ C0] net_ratelimit: 64 callbacks suppressed