last executing test programs: 34.107712836s ago: executing program 3 (id=11): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000001c40)=0x1) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000080)={0x21}) 33.978695735s ago: executing program 3 (id=15): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000016c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x3fffffc, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x1, 0x6}, {0xff}, 0x0, 0x1, 0x3}}, @TCA_TBF_PTAB={0x404, 0x3, [0x9, 0x5, 0x227, 0x6, 0x401, 0x5, 0x8000, 0x4, 0x0, 0x2, 0x9, 0xffff, 0x5, 0x7, 0x6f4c, 0x8, 0x7, 0x9, 0x3, 0x9, 0x3, 0x139f, 0x0, 0x2, 0xb19a, 0x0, 0x80000000, 0xec4, 0x7, 0x4529f901, 0x7f, 0x3, 0xc645, 0x15, 0x200, 0x6, 0x20000, 0x9, 0x4, 0x0, 0x6, 0x3432, 0x9, 0x5, 0xa, 0x4, 0x3, 0x1, 0x4, 0x7fffffff, 0x1, 0xfffffff8, 0x7, 0x2, 0x281, 0x80000001, 0x9, 0x3, 0x9, 0x3, 0x8, 0x843f, 0x6, 0xffffffff, 0x2, 0x58, 0x5, 0x7, 0x8001, 0x7, 0x0, 0x7, 0x0, 0x1, 0xffffff6b, 0x2, 0x7fffffff, 0xef35, 0x3, 0x5, 0x52ee, 0x1ff, 0x60cb, 0x8, 0xdb, 0xf0000000, 0x9, 0x1, 0x0, 0x4, 0xb212, 0x7fffffff, 0x6, 0x6, 0x3, 0x3420, 0x0, 0x4, 0x8d35, 0x7f, 0xfffffe01, 0x401, 0x1, 0x2, 0x44, 0x3, 0x826c, 0x6, 0x0, 0x71, 0x8e, 0x401, 0x1, 0xfffffffa, 0x32, 0x7ff, 0xd, 0x9, 0x0, 0x6, 0xd, 0x0, 0x3, 0x6ddd, 0x3, 0x9, 0x1, 0x1, 0x10, 0x1, 0x1, 0x3, 0x38, 0x80000001, 0xfffffffc, 0x10000, 0x7fff, 0xffffffe6, 0x2, 0x0, 0x2, 0x12ee, 0xeeda, 0x9, 0xffffffff, 0x8965ec62, 0x4, 0x200, 0x1ff, 0xfffffffe, 0x5, 0x8, 0x30000, 0x7f, 0x1, 0x7f, 0x8, 0x8, 0x0, 0x3, 0x9, 0x10001, 0x4, 0x800, 0x2, 0xfff, 0x6, 0xe, 0x3, 0xd1, 0x2c3, 0x8, 0xb6cfdb4, 0x400, 0x9, 0x9, 0x80000000, 0x3, 0x4, 0x9, 0xd, 0x368b, 0x2, 0x8, 0x3ff, 0x8001, 0xd, 0x5, 0x3, 0x545, 0x7, 0x3, 0xc9b300, 0x1000, 0x0, 0x3, 0xb985, 0x9, 0x8, 0x1, 0x0, 0x8000, 0x6, 0xffff1634, 0x7, 0x5d2213b8, 0x0, 0x7, 0x4, 0x0, 0x7, 0x2, 0x9, 0x6, 0x1, 0x8, 0x0, 0x1, 0x200, 0x0, 0x8, 0x3d, 0x0, 0x2, 0xffffffff, 0xd, 0xfffffff9, 0x5, 0x5e2aa758, 0x3, 0x3, 0x5, 0x7, 0x2, 0x9, 0x9e40, 0x5e, 0x9, 0x3, 0x1, 0x9, 0x1, 0x200, 0x7, 0x9, 0x0, 0x80000000, 0x56c, 0x800, 0xb0, 0x4, 0x3, 0xff, 0x3, 0x1, 0x2]}]}}]}, 0x45c}}, 0x0) 33.908891921s ago: executing program 3 (id=19): ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000280)=0x7e) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000005300)=[{0x28, 0x0, 0xfb, 0xfffff034}, {0x80000006, 0x66}]}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x68, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {0xfffe, 0x4e24, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d", "4bbef5e4007898221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42", "ef7c9d5d98e3943f6892078bab09000000fe4dddd2e7c0ce70a4ac7d", {"a851525b16af17fe87acbae2ab0b233d", "01422d01cd53c3abe94331d0b7918724"}}}}}}}, 0x0) 33.805896682s ago: executing program 3 (id=26): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./file2\x00', 0x20048a, &(0x7f0000000300), 0x12, 0x51a, &(0x7f0000001200)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) removexattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=@known='system.posix_acl_default\x00') 33.695838128s ago: executing program 1 (id=31): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x8000, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008004}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x8, {{@in6=@private1, @in6=@rand_addr=' \x01\x00', 0x4e20, 0x5, 0x0, 0x0, 0x2}}, [@migrate={0x50, 0x11, [{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private1, @in=@local, @in6=@initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}}, 0x0) 33.543298679s ago: executing program 1 (id=34): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x0, 0x20e}, &(0x7f0000ff0000), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001400)=[{0x0}, {&(0x7f0000000640)=""/220, 0xdc}], 0x2) 33.542143515s ago: executing program 3 (id=35): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15010100000000001c0012800b0001006d616373656300000c00028005000f000100000008000500", @ANYRES32=r1], 0x44}}, 0x40) 33.363316482s ago: executing program 1 (id=42): openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) io_cancel(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x0) 33.297479096s ago: executing program 1 (id=46): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./file2\x00', 0x20048a, &(0x7f0000000300), 0x12, 0x51a, &(0x7f0000001200)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) removexattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=@known='system.posix_acl_default\x00') 33.169577121s ago: executing program 1 (id=52): r0 = socket(0x1e, 0x1, 0x0) listen(r0, 0x7f) shutdown(r0, 0x2) recvmsg(r0, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000000080)=""/101, 0x65}], 0x1}, 0x2) 32.373004621s ago: executing program 3 (id=90): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000340)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000040)={r2, 0x487d60c11958e32, 0x1, 0x3fea9ca6e82fab4f, &(0x7f0000000000)=[{0x2, 0x42, 0xb, 0x6}, {0x86, 0x40, 0x8bd3, 0x89}, {0x1ff, 0xdd2, 0x401, 0x8}, {0x6, 0xa, 0xfff6, 0x4}, {0x8, 0x38, 0xe, 0x9}, {0xfffc, 0x39, 0x4, 0x7}]}) 32.32018732s ago: executing program 32 (id=90): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000340)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000040)={r2, 0x487d60c11958e32, 0x1, 0x3fea9ca6e82fab4f, &(0x7f0000000000)=[{0x2, 0x42, 0xb, 0x6}, {0x86, 0x40, 0x8bd3, 0x89}, {0x1ff, 0xdd2, 0x401, 0x8}, {0x6, 0xa, 0xfff6, 0x4}, {0x8, 0x38, 0xe, 0x9}, {0xfffc, 0x39, 0x4, 0x7}]}) 32.085173751s ago: executing program 1 (id=99): r0 = syz_ublk_setup_io_uring(0x21, &(0x7f0000000240)={0x0, 0xfc6e, 0x0, 0x3, 0x186}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_setup(0x538, &(0x7f0000000300)={0x0, 0xbe35, 0x10, 0x3, 0x344, 0x0, r0}, &(0x7f0000000380)=0x0, &(0x7f00000003c0), &(0x7f0000000480)) syz_io_uring_submit(r4, r2, r3, &(0x7f0000000400)=@IORING_OP_NOP={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x3, 0xffffffff, 0x1, 0x1, {0x4}}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000140)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000100)=@new_dev={0x4, 0x90b, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f00000001c0)) 32.043783697s ago: executing program 33 (id=99): r0 = syz_ublk_setup_io_uring(0x21, &(0x7f0000000240)={0x0, 0xfc6e, 0x0, 0x3, 0x186}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_setup(0x538, &(0x7f0000000300)={0x0, 0xbe35, 0x10, 0x3, 0x344, 0x0, r0}, &(0x7f0000000380)=0x0, &(0x7f00000003c0), &(0x7f0000000480)) syz_io_uring_submit(r4, r2, r3, &(0x7f0000000400)=@IORING_OP_NOP={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x3, 0xffffffff, 0x1, 0x1, {0x4}}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000140)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000100)=@new_dev={0x4, 0x90b, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f00000001c0)) 27.005090865s ago: executing program 0 (id=264): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x609, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88aefe86, 0x40000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}]}, 0x3c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32, @ANYBLOB="10005e01"], 0x2c}}, 0x800) 26.950659322s ago: executing program 0 (id=269): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240)={[{@dioread_nolock}, {@resuid}, {@barrier_val={'barrier', 0x3d, 0x9}}]}, 0x1, 0x4b2, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x103042, 0x41) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r0, 0x500, 0x0, 0x4, 0x1000000000000}) 26.818805004s ago: executing program 0 (id=276): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000000)={0x18, r1, 0x2, 0x0, &(0x7f0000000140)=[{0x12df, 0x2000000000000003}, {0x7ff, 0x1080}]}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000440)={0x28, 0x4, r1, 0x0, &(0x7f0000000200)="bcb2", 0x2, 0x3eb8}) 26.663048607s ago: executing program 0 (id=286): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000040)={[{@test_dummy_encryption}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@norecovery}]}, 0x3, 0x470, &(0x7f0000000dc0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r0, &(0x7f0000000400)=""/4096, 0xc00) 26.483077134s ago: executing program 0 (id=294): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000540), 0x1, 0x79e, &(0x7f00000007c0)="$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") setresuid(0x0, 0xee00, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x142) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x3) 26.095936563s ago: executing program 0 (id=310): r0 = io_uring_setup(0x3454, &(0x7f0000000180)) close(r0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x2300) 26.062474194s ago: executing program 34 (id=310): r0 = io_uring_setup(0x3454, &(0x7f0000000180)) close(r0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x2300) 11.987874976s ago: executing program 5 (id=919): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x400, 0x70bd2e, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008000}, 0x40090) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000304000000000000000000000400", @ANYRES32=r1, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) 11.911026605s ago: executing program 5 (id=922): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="01012abd7000000008002b00000008000300", @ANYRES32=r2, @ANYBLOB="040046000a0034000202020202020000080026006c0900004c0051802c0000800800030009ac0f00040005000500020003000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x4804) 11.787996216s ago: executing program 5 (id=924): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0xb0}, 0x20008890) 11.722618925s ago: executing program 5 (id=928): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x40, &(0x7f00000001c0)={[{@abort}, {@debug}, {@grpjquota}, {@grpid}, {@quota}]}, 0x1, 0x4f7, &(0x7f0000000cc0)="$eJzs3c9vI1cdAPDvTOJNmqZNCpUKCOhSCgtarZ1426jqqVxAqKqEqDhxSEPijaLYcRQ7pQkrNfkfkKjEAcGJMwckDpV64ojgBre9LAekBVagDRIHo/GPbHZjJ2HXsVX785FGM2/eeL7vrTXveb9J/AIYW1cj4iAirkTEexEx1z6ftLd4q7Vl1z24f3v16P7t1SQajXf/kTTrs3Nx4jWZZ9v3nI6I738n4kfJ6bi1vf3NlXK5tNMuF+qV7UJtb//GRmVlvbRe2ioWlxaXFt64+Xqxb319ufKbe9/eePsHH//uS3f/dPDNn2TNmm3XnexHP7W6njuOk5mMiLcvI9gQTLT7c2XYDeGJpBHxmYh4pfn8z8VE8928mC6PNQDwKdBozEVj7mQZABh1aTMHlqT5di5gNtI0n2/l8F6MmbRcrdWv36rubq21cmXzkUtvbZRLC+1c4Xzkkqy8+GF2/LBcjEfLNyPihYj46dQzzXJ+9eJ5BgCgv559bP7/91Rr/gcARtz0eRcsD6YdAMDgnDv/AwAjx/wPAOPH/A8A48f8DwDjx/wPAOPmTmf+nxh2SwCAgfjeO+9kW+Oo/f3Xa+/v7W5W37+xVqpt5iu7q/nV6s52fr1aXS+X8qvVynn3K1er24uvxe4HhXqpVi/U9vaXK9Xdrfpy83u9l0u5gfQKADjLCy9/8pckIg7efKa5xYm1HMzVMNrSYTcAGBo5fxhfvoUbxpf/4wPnreXZ81eEP3qCYI0Pn+BFQL9d+7z8P4wr+X8YX/L/ML7k/2F8NRpJrzX/0+NLAICRIscPDPTn/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAiZpvb/IlymubzEc9FxHzkklsb5dJCRDwfEX+eyk1l5cWhthgAeHrp35L2+l/X5l6dfbz2SvKfqeY+In7883d/9sFKvb6zmJ3/5/H5+kft88VhtB8AOE9nnu7M4x0P7t9e7WyDbM+9b7UWF83iHrW3Vs1kTGa7P05HLiJm/pW0ym3Z55WJPsQ/OIyIz3Xrf9LMjcy3Vz59PH4W+7mBxk8fiZ8261r77N/is6fuPNUz5nlrvcK4+CQbf97q9vylcbW5n+66+PF0c4R6ep3x7+jU+Nd53qebY0238e/qRWO89vvv9qw7jPjCZLf4yXH8pEf8Vy8Y/84Xv/xKr7rGLyOuRff4J2MV6pXtQm1v/8ZGZWW9tF7aKhaXFpcW3rj5erHQzFEXOpnq0/7+5vXne/b/1xEzPeJPn9P/r53Z68bxAPyr/773w6/0in8Y8Y2vdn//XzwjfjYnfv3M+A+tzPy25/LdWfy1Vv8P/9/3//oF49/96/7aBS8FAAagtre/uVIul3b6epCLPt/wxEFySW12MOIH2efxp73PS+2UWddr/vCLj1/KKofe074cDHlgAi7dw4d+2C0BAAAAAAAAAAAAAAB6ufQ/J0qH3UMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABG2f8CAAD//zwQyy8=") syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000340), 0x0, 0x0, 0x1) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) 11.544105424s ago: executing program 5 (id=932): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) sendto$inet(r0, &(0x7f0000001400)="e3", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom$inet(r0, &(0x7f0000000080)=""/72, 0x48, 0x14123, 0x0, 0x0) 10.986121547s ago: executing program 5 (id=950): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 10.952039021s ago: executing program 35 (id=950): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 10.195627956s ago: executing program 2 (id=986): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@bridge_dellink={0x2c, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x5, 0x0, 0x1, {0x4, 0x6}}]}]}, 0x2c}}, 0x20004080) 10.125874628s ago: executing program 2 (id=989): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) recvmsg$unix(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{0x0}, {0x0}, {&(0x7f00000006c0)=""/229, 0xffffff8d}], 0x3}, 0x42) 10.042838208s ago: executing program 2 (id=995): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), r1) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x38, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x9}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x1}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000050) 9.984109107s ago: executing program 2 (id=996): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/sctp\x00') r1 = open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000056, &(0x7f00000000c0)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@inlinecrypt}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$eJzs3T1sG3UbAPDnznHTj7xv+krvK72gDhUgFamqk/QDClO7IipV6oDEApHjRlWcuIodaKJIpHuF6IAAdSkbDIwgBgbEwsjKwseMVNEIpKYDGDk+p2nqFCfEMcS/n3TJ/3939vP8fX7OvtOdHEDfOtr4k0Y8EREXk4jhdcsGIlt4tLneyvJi8f7yYjGJev3Sz0kkEXFvebHYWj/J/h+KiKWI+H9EfJWPOJ6uPeW+VqM6vzA1Xi6XZrP+SG366kh1fuHElenxydJkaebU8y+cOXv6zNjJsfXp3q+v7+W3NtYb3998+8Y3L92++fEnR5aK744ncS6GsmXrx7GTmq9JPs5tmH+6G8F6KOl1AmxLLqvzRin9L4Yjl1V9O/X1O4fBXUkP6KL6YER9zbom0AcSRQ99qvU9oHH825p28/vHnfPNA5BG3JXlxeJb0Yo/0Dw3EftXj00O/pI8dGTSON48vJuJsictXY+I0YGBR9//Sfb+277RnUiQrvryfHNDPbr907X9T7TZ/wy1zp3+Ra3930q2/1tpEz+3yf7vYocxfnv1xw82jX99MJ5sGz9Zi5+0iZ9GxOsdxr/1yudnN1tW/zDiWLSP35I8/vzwyOUr5dJo82/bGF8cO/Li5uOPOLhJ/OY52/2riawf/74sp7TD8X/29adPLT0m/rNPP377t3v9D0TEOx3G/8+9j17ebNmd68ndxreArW7/JPJxu8P4z507+l3WdNYQAAAAAAAAAAB2ULp6LVuSFtbaaVooNO/h/W8cTMuVau345crczETzmrfDkU9bV1oNN/tJoz+WXY/b6p/c0D+VywLmDqz2C8VKeaLHYwcAAAAAAAAAAAAAAAAAAIC/i0Mb7v//Nbd6///Gn6sG9qrNf/Ib2OvUP/Svh+s/6VkewO7z+Q99q67+oX+pf+hf6h/6l/qH/tW2/g/sfh7A7vP5D/1L/QMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChMdXvLy8WG/2Jgfm5qcobJyZK1anC9FyxUKzMXi1MViqT5VKhWJn+s+dLKpWrozEzd22kVqrWRqrzC69NV+ZmWr8pWsp3fUQAAAAAAAAAAAAAAAAAAADwzzO0OiVpISLf7KdpoRDxr4g4nERy+Uq5NBoR/46Ib3P5wUZ/rNdJAwAAAAAAAAAAAAAAAAAAwB5TnV+YGi+XS7PdawxkoTp71A+1ruYzsJWVI2JpZ9NoPOOWH5XPXsDubqY+aeQ6fB/2faOHOyUAAAAAAAAAAAAAAAAAAOhTD2767fQRv3c3IQAAAAAAAAAAAAAAAAAAAOhL6U9JRDSmY8PPDG1cui9Zya3+j4g3b11679p4rTY71ph/d21+7f1s/sle5A90qlWnaUQ06hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4oDq/MDVeLpdmt9kY7GCdXo8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDv+CAAA//9bQM66") move_mount(r1, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 9.843086744s ago: executing program 2 (id=998): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000180)=0xffff7b6e, 0x4) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f00000001c0)=0x7, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000240)=0x60) 9.279639896s ago: executing program 2 (id=1009): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) socket(0x2, 0xa, 0x300) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@local, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x1, 0x0, 0x1c, 0x66, 0x0, 0x8, 0x1, 0x0, @rand_addr=0x64010102, @local}, @info_request={0xf, 0x0, 0x0, 0x401}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 9.246166315s ago: executing program 36 (id=1009): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) socket(0x2, 0xa, 0x300) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@local, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x1, 0x0, 0x1c, 0x66, 0x0, 0x8, 0x1, 0x0, @rand_addr=0x64010102, @local}, @info_request={0xf, 0x0, 0x0, 0x401}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 4.936170814s ago: executing program 4 (id=1188): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f000000f240)=ANY=[@ANYBLOB="3400000013000100000000000000000807000000", @ANYRES32=r1, @ANYBLOB="000000200001000014001a80100005800c000a"], 0x34}, 0x1, 0x0, 0x0, 0x20040090}, 0x0) 4.843706102s ago: executing program 4 (id=1193): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) r0 = timerfd_create(0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f00000002c0)=0xc6c) 4.788616201s ago: executing program 4 (id=1197): r0 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) fsetxattr$trusted_overlay_upper(r1, &(0x7f00000000c0), 0x0, 0x0, 0x0) fremovexattr(r1, &(0x7f0000000080)=@known='trusted.overlay.upper\x00') 4.608031639s ago: executing program 4 (id=1204): r0 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0xf, r0, 0x2) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x2, 0xc, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0xfffffffffffffffe, 0x100, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4, 0x0, 0x1000, 0x3, 0x0, 0x100001, 0x0, 0x7, 0x80000000000}) keyctl$unlink(0x9, r0, r0) 4.58515225s ago: executing program 4 (id=1207): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd706b00dbdf255c00000008000300", @ANYRES32=r2], 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x800) 4.521897944s ago: executing program 4 (id=1210): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='mem\n', 0x4) 594.217592ms ago: executing program 7 (id=1416): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = socket$unix(0x1, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000040), 0x400, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 556.03127ms ago: executing program 7 (id=1420): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000400)={{}, {0x1, 0x4}, [], {}, [], {0x10, 0x5}, {0x20, 0x7}}, 0x24, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40000, 0x10) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 500.280896ms ago: executing program 9 (id=1424): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@newtclass={0x34, 0x28, 0x200, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xffff}, {0xfff2, 0x7}, {0x2, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0xb, 0x17}}, @tclass_kind_options=@c_red={0x8}]}, 0x34}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="340000001300050000000000feffffff07000000", @ANYRES32=r1, @ANYBLOB="003000000000000014001a80100004800c000980"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) 452.144653ms ago: executing program 9 (id=1426): r0 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)=""/174, 0xae}], 0x1, &(0x7f0000001fc0)=""/67, 0x43}, 0x1}], 0x1, 0x40002122, 0x0) sendmsg$tipc(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="009b", 0x2}], 0x1, 0x0, 0x0, 0x1}, 0x4800) 449.854616ms ago: executing program 7 (id=1427): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}}], 0x2, 0x20010021, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) 367.085228ms ago: executing program 9 (id=1432): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x954, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000b00)={0xa, 0x4e23, 0x7, @local}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0x81}, 0xdb31}], 0x1, 0x40002102, 0x0) 324.311883ms ago: executing program 8 (id=1434): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x54, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x41}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x83}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x667}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0xe9}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x4814) 291.717661ms ago: executing program 6 (id=1435): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r1, 0x1, 0xfffbff80, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x30}}, 0x4080) 280.331176ms ago: executing program 9 (id=1436): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r2, &(0x7f0000009840)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x40000, @empty, 0x1}, 0x1c, 0x0}}, {{&(0x7f0000001840)={0xa, 0x4e23, 0x0, @private1, 0xbf}, 0x1c, 0x0, 0x0, &(0x7f0000003100)=[@pktinfo={{0x24, 0x29, 0x32, {@local, r1}}}], 0x28}}], 0x2, 0x0) 266.732485ms ago: executing program 7 (id=1437): syz_mount_image$vfat(&(0x7f0000001140), &(0x7f0000001280)='./file1\x00', 0x2a18c46, &(0x7f0000001080)={[{@fat=@gid}, {@uni_xlateno}, {@fat=@flush}, {@uni_xlate}, {@numtail}, {@fat=@codepage={'codepage', 0x3d, '860'}}, {@utf8no}, {@shortname_win95}, {@shortname_lower}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@shortname_win95}, {@uni_xlate}]}, 0x7f, 0x2c1, &(0x7f0000001880)="$eJzs3b2KY2UYAOD3ZJKZZBWSwkoED2hhFXb3CibICIuplFNoo4s7C5KEhQkE/MHsVvaClZU3YOcFeAE23oGFpWLnFuKR5OTkP7MbycwO8jzNeXO+7z3fz3xkhkDe+fi1Qe/Bo+HDJ1/+GvV6EpXTOI2nSbSiEqXHsUt9ZwsAcHM9zfP4My88q+/xyqtq5SrnBQBcnef+/X90bVMCAK7Y+x98+G6n2z17L03rEYOvR1kSxbVo7zyMT6Mf53E7mvF3RD5XxC/f655FM03LDwNGjcgiBh/9PHvd+T1imn8nmtFazy8/UUin4s3BeJRNRp5ca3EriejkSdHlbjTjlYi8FrOHFJd37nXP7qab+ZEdx1tvfDeb/z/n0Y5m/PJJPIp+PJg+YpH/1Z00fTv/9q8vihVkEcl4lJ1M+y3k/gICAAAAAAAAAAAAAAAAAAAAAOBg2ulca7l+TlkNsN1eb69mEX8MyvxFfaDTmNYHmlX4GS/V17mdpmlZxmeU1aKo71ONV6tRfVHrBgAAAAAAAAAAAAAAAAAAgJtk+Nnnvfv9/vnFSvBTPgkal/ZZD6pLd8qv9T87a3vQ+yFifuf72Df9kiCOZlPrJ0tDFEFSNu3xwB93NJ3sM7HGtkGjsmsPq/0oJv/N/pvw+r4LfP6gtZhqebp695OY7/zj2e6uZtW3H5KlU1cew4thsseBzLds3VER3NrMOj7QJhy/9F/TG7GtabLi2nwzV7Pqa5tZO+zPdP2dIjnsGw8AAAAAAAAAAAAAAAAAALBh8aXf+G2j8ckLmRIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXLvF//+fB9Fav7MejGfJ0zuVyzufXAy3DNu65mUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwP/dvAAAA//+PLU+w") write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"a2e3ad214fc752f91b25060987f70e06d038e7ff7fc6e5539b325d078b089b3b08386e090890e0878f0e1ac6e7049b334d959b429a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31303b305d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c0428918246d9e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff13d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1ccab2689bee59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae23034202210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ecdf5e08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0) 266.475939ms ago: executing program 8 (id=1438): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000400000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) 227.173961ms ago: executing program 9 (id=1439): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000100)=0x6, 0x4) recvfrom(r0, 0x0, 0x0, 0x32, 0x0, 0x0) 201.110861ms ago: executing program 6 (id=1440): r0 = socket$inet(0x2, 0x3, 0x9) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x4e1f, @broadcast}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x4a, {0x2, 0xff, @remote}, 'ip6gretap0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d0008000c0000000005000000", 0x29}], 0x1) 196.373911ms ago: executing program 7 (id=1441): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000100), 0x0, 0x246, &(0x7f0000000a00)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) unshare(0x26020480) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000700)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) 169.861577ms ago: executing program 8 (id=1442): add_key$keyring(&(0x7f0000000300), 0x0, 0x0, 0x0, 0xfffffffffffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) 162.347529ms ago: executing program 6 (id=1443): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x34, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x10, 0x2, 0x0, 0xe7, {[@timestamp={0x8, 0xa, 0x5}]}}}}}}}, 0x0) 134.141062ms ago: executing program 6 (id=1444): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00001700000000001c0037000c0002"], 0x44}, 0x1, 0x0, 0x0, 0x240080d8}, 0x0) 106.350675ms ago: executing program 7 (id=1445): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040), 0x0) unshare(0x6020600) r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f0000000080)={[{@data_err_ignore}]}, 0x0, 0x236, &(0x7f0000000300)="$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") ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40e8662e, &(0x7f0000000000)={0xc550, 0x40000000000002, 0x6, 0xb, 0xa6, 0x1}) 104.662421ms ago: executing program 6 (id=1446): pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) close(r1) socket$inet_smc(0x2b, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x121484b, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 81.781138ms ago: executing program 8 (id=1447): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x20000000, @loopback}, 0x1c) listen(r0, 0x7f) 60.286359ms ago: executing program 6 (id=1448): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x30, 0x1, 0x81, 0xfffff024}, {0x6}]}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xfe, 0x10000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x6}, 0x2c) 54.162742ms ago: executing program 8 (id=1449): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) 35.293893ms ago: executing program 8 (id=1450): unshare(0x6020400) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {&(0x7f00000010c0), r1, r0}}, 0x18) 0s ago: executing program 9 (id=1451): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002c00)=@delchain={0x66c, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x640, 0x2, [@TCA_BPF_ACT={0x63c, 0x1, [@m_bpf={0x130, 0x11, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_NAME={0x5, 0x6, '\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xffffffff, 0x3, 0xffffffffffffffff, 0x10001, 0x6}}]}, {0xd1, 0x6, "a41f25d22b1bae1b6bfb4a42ad5ba9db462fca41280c331f630e2c9f0be1093117392575082305ebc27660464ef802792ce06133244235023f0f4882fc0a47f4d5e499a8857cd81b0e6fda422cbc53ad098872214190756df6bbd0e760248aa97e200702fd569bd27d4a70df1d4a123ffc42d2592c81751e15e260622f14aeaaca5dc8acab93651fdd1d5614d98f28fc76d402e1028d91028270a2722b141a9140c47e37d068e7193d463a6444e424bc792ab1295f79842a501700a5cc2f71eefaf131a98821e712b03d552c87"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0x144, 0x5, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x2a, 0x6, {0x7, 'raw\x00', 0x7, 0x100}}]}, {0xed, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbc2d2bd3a2d1e27de283017ecf9fca6b2cd8a119dee59702830717b694625f60f5c81f688775c5e292f76a0ffa39e1d2cabd639d1c111c01e0d2f9faa220154db33399242bca9f4fac65c74cb6264c28ac7a50037564c7b417fb61d617d212ab3243c30e0e82d9a12651b74553d539b991a302489af94626e5aac41c53b2"}, {0xc, 0x7, {0x1, 0xeb0757422c733451}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_bpf={0xbc, 0x8, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}]}, {0x81, 0x6, "5d3aee85a6264cff4a2163adaec321e008985cfa435b8922eeb16f1932265618158a3fe72c442a68b182e8f673f9251a03dc831c5947be17ca906c3dcb99adb55bc5f0ad8886f235f45d7e29bb727715f2e7a3200ac63eb79f7a023835874514b60b0177c40370157c0c21b37875e7e4a2e75b3cc54be7d719fa695469"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_tunnel_key={0xb8, 0x8, 0x0, 0x0, {{0xf}, {0x4}, {0x85, 0x6, "51719d53a2b05eda58a80a40d29b01394b8749d7d9ef9f47cce75187b6f333f4bfe797fa4227bf38cf0b71e1b4888d8d1ed410a788c182ba498076ca9ab3d63a8f29175d44a2e8364296c34ac0cdb8972288ecf6515bec4861a53e1e18e54679f5666b0536d0a008aa9b3be1f5e00c4c72460249c372de16eb2cfc15714543d6f3"}, {0xc}, {0xc, 0x8, {0x3, 0xddc47d017e85c037}}}}, @m_xt={0x250, 0x13, 0x0, 0x0, {{0x7}, {0x228, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xc9, 0x6, {0x9, 'nat\x00', 0xef, 0x7, "859b467c76be5255b2d4f6101cf6d6cb72c6b46512ecba82df24523b07075e859fd68154d7171a2ca3415ec79cc8ff85b058dae9f1d49e867787957d80637320c0378f6dd94a52c2fc850929bb787aaf6e604a1f57d44fa7775cf7a4a456f808f135c349fb4aefe7e2bc180a4665f5c90321659b9d7722c18c63d8c5ac244a1245b6673adcb794eced4f5288970c153c5b1cd1be29cd924c9446734f9e4568"}}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0x105, 0x6, {0x8, 'filter\x00', 0xd, 0x6ccd, "51100666dd78f1337c421065ba00caa97aaa8e1aa207a78c6d7e2a3e620334de1a64a8d40af7536c5a07a1997c6fd28e7ed1f866f9454e1014a5129fbeaf1a76cb7b54d80907f7d86c39ff782b12b0422666997d539a25e55b0591b44929ef0dcea5434727f1d8aa8d1ec3a7d56965dae69f90f152f907a0ab28fc8d30bcdb763cd5f45e6a19be6dae4c5659ea76f0641d19c50157b11a5d9f8f9f5d0efd5d7395e68091c82db3f276f07384e742f6eb8057fef83bef07c6aa6d1f59fcb13c45fc7005a222e6fa0e7c9c3fe6e6ce9aa661d734ae3b49d5dbf79888"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x66c}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) kernel console output (not intermixed with test programs): HW filter on device netdevsim2 [ 29.621312][ T4719] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.623790][ T4714] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 29.625861][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 29.634010][ T3994] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.634043][ T3994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.638124][ T4716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.641509][ T3994] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.641547][ T3994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.664181][ T4716] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.679392][ T4151] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.679430][ T4151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.685546][ T3994] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.685587][ T3994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.721721][ T4717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.751084][ T4717] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.760463][ T4714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.765163][ T4714] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.775521][ T4717] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.777431][ T4717] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.783667][ T3994] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.783710][ T3994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.784088][ T3994] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.784109][ T3994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.784701][ T3994] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.784721][ T3994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.785413][ T3994] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.785430][ T3994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.816238][ T4714] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.816269][ T4714] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.826561][ T4711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.872775][ T4711] veth0_vlan: entered promiscuous mode [ 29.876701][ T4711] veth1_vlan: entered promiscuous mode [ 29.887646][ T4711] veth0_macvtap: entered promiscuous mode [ 29.890115][ T4711] veth1_macvtap: entered promiscuous mode [ 29.895268][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.902200][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.905185][ T4151] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.905386][ T4151] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.905404][ T4151] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.905420][ T4151] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.977553][ T4719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.996408][ T1365] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.996439][ T1365] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.004499][ T4719] veth0_vlan: entered promiscuous mode [ 30.014664][ T4250] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.014693][ T4250] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.018471][ T4719] veth1_vlan: entered promiscuous mode [ 30.034969][ T4716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.062867][ T4719] veth0_macvtap: entered promiscuous mode [ 30.065084][ T4719] veth1_macvtap: entered promiscuous mode [ 30.068520][ T4717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.072328][ T4716] veth0_vlan: entered promiscuous mode [ 30.076741][ T4711] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.082996][ T4719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.086286][ T4719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.094768][ T4714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.099837][ T39] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.099886][ T39] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.099909][ T39] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.099925][ T39] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.102580][ T4716] veth1_vlan: entered promiscuous mode [ 30.132536][ T4716] veth0_macvtap: entered promiscuous mode [ 30.144541][ T4714] veth0_vlan: entered promiscuous mode [ 30.146595][ T4714] veth1_vlan: entered promiscuous mode [ 30.189231][ T4714] veth0_macvtap: entered promiscuous mode [ 30.190357][ T4714] veth1_macvtap: entered promiscuous mode [ 30.198056][ T3821] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.198093][ T3821] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.201902][ T4716] veth1_macvtap: entered promiscuous mode [ 30.205313][ T4716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.209390][ T4716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.212141][ T39] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.212196][ T39] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.212220][ T39] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.212236][ T39] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.224133][ T4714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.227415][ T4714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.233364][ T39] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.233420][ T39] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.233441][ T39] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.233458][ T39] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.238442][ T4151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.238451][ T4151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.283752][ T4717] veth0_vlan: entered promiscuous mode [ 30.302658][ T4717] veth1_vlan: entered promiscuous mode [ 30.317741][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.317762][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.334921][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.334947][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.344353][ T4717] veth0_macvtap: entered promiscuous mode [ 30.347260][ T4717] veth1_macvtap: entered promiscuous mode [ 30.357716][ T3821] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.357749][ T3821] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.375426][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.376468][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.404840][ T1059] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.404900][ T1059] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.404920][ T1059] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.404937][ T1059] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.429800][ T1059] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.429826][ T1059] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.504546][ T4151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.504576][ T4151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.534903][ T4917] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 30.540443][ T4151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.540471][ T4151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.659524][ T50] Bluetooth: hci0: command tx timeout [ 30.687923][ T4938] loop1: detected capacity change from 0 to 8192 [ 30.693460][ T4942] loop3: detected capacity change from 0 to 512 [ 30.695197][ T4938] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 30.729055][ T50] Bluetooth: hci3: command tx timeout [ 30.729932][ T50] Bluetooth: hci4: command tx timeout [ 30.729997][ T4729] Bluetooth: hci1: command tx timeout [ 30.730234][ T4729] Bluetooth: hci2: command tx timeout [ 30.761782][ T4942] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 30.790705][ T4729] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 30.790739][ T4729] CPU: 0 UID: 0 PID: 4729 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT [ 30.790753][ T4729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 30.790758][ T4729] Workqueue: hci3 hci_rx_work [ 30.790778][ T4729] Call trace: [ 30.790781][ T4729] show_stack+0x2c/0x3c (C) [ 30.790796][ T4729] __dump_stack+0x30/0x40 [ 30.790808][ T4729] dump_stack_lvl+0xd8/0x12c [ 30.790820][ T4729] dump_stack+0x1c/0x28 [ 30.790831][ T4729] sysfs_warn_dup+0x9c/0xb8 [ 30.790843][ T4729] sysfs_create_dir_ns+0x190/0x1f4 [ 30.790854][ T4729] kobject_add_internal+0x290/0x6f0 [ 30.790864][ T4729] kobject_add_varg+0x9c/0xe8 [ 30.790877][ T4729] kobject_add+0x110/0x1c8 [ 30.790889][ T4729] device_add+0x394/0x9e0 [ 30.790902][ T4729] hci_conn_add_sysfs+0xbc/0x1e8 [ 30.790913][ T4729] le_conn_complete_evt+0xc68/0x10f8 [ 30.790922][ T4729] hci_le_enh_conn_complete_evt+0x114/0x3d8 [ 30.790931][ T4729] hci_le_meta_evt+0x2b0/0x46c [ 30.790942][ T4729] hci_event_packet+0x4c0/0x9c8 [ 30.790951][ T4729] hci_rx_work+0x2f4/0xd78 [ 30.790964][ T4729] process_scheduled_works+0x788/0x10b8 [ 30.790975][ T4729] worker_thread+0x798/0xbd0 [ 30.790985][ T4729] kthread+0x304/0x3d4 [ 30.790993][ T4729] ret_from_fork+0x10/0x20 [ 30.791019][ T4729] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 30.791038][ T4729] Bluetooth: hci3: failed to register connection device [ 30.856532][ T4955] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 30.856615][ T4955] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 30.865438][ T4955] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 30.867341][ T4956] Quota error (device loop3): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 30.871282][ T4956] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 30.871346][ T4956] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.26: Failed to acquire dquot type 0 [ 30.874760][ T4956] overlayfs: failed to set uuid (/file0, err=-117); falling back to uuid=null. [ 30.883170][ T4955] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 30.883230][ T4955] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 30.892640][ T4955] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 30.902844][ T4955] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 30.902904][ T4955] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 30.910221][ T4942] Quota error (device loop3): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 30.910294][ T4942] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 30.910315][ T4942] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.26: Failed to acquire dquot type 0 [ 30.933215][ T4955] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 30.941959][ T4955] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 30.942016][ T4955] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 30.952231][ T4955] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 30.953513][ T4719] Quota error (device loop3): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 30.954016][ T4719] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 30.954049][ T4719] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz-executor: Failed to acquire dquot type 0 [ 30.967832][ T4955] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 30.989264][ T30] audit: type=1400 audit(30.960:2): lsm=SMACK fn=smack_inode_getattr action=denied subject="_" object="lowerdir" requested=r pid=4968 comm="syz.0.37" path="/16/file1" dev="tmpfs" ino=99 [ 31.101903][ T4976] netlink: 8 bytes leftover after parsing attributes in process `syz.0.40'. [ 31.126113][ T4978] loop4: detected capacity change from 0 to 256 [ 31.141231][ T4978] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00007372) [ 31.195197][ T4988] loop1: detected capacity change from 0 to 512 [ 31.229529][ T4988] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 31.257213][ T4988] Quota error (device loop1): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 31.257275][ T4988] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 31.257309][ T4988] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.46: Failed to acquire dquot type 0 [ 31.264244][ T4988] overlayfs: failed to set uuid (/file0, err=-117); falling back to uuid=null. [ 31.276641][ T4988] Quota error (device loop1): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 31.279992][ T4988] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.46: Failed to acquire dquot type 0 [ 31.313138][ T4716] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz-executor: Failed to acquire dquot type 0 [ 31.338023][ T5005] loop4: detected capacity change from 0 to 512 [ 31.341080][ T5005] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 31.364848][ T5005] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.53: bad orphan inode 13 [ 31.364914][ T5005] loop4: lost filesystem error report for type 5 error -117 [ 31.365920][ T5005] ext4_test_bit(bit=12, block=18) = 1 [ 31.365937][ T5005] is_bad_inode(inode)=0 [ 31.365942][ T5005] NEXT_ORPHAN(inode)=0 [ 31.365948][ T5005] max_ino=32 [ 31.365953][ T5005] i_nlink=1 [ 31.366429][ T5005] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 31.396131][ T5011] loop0: detected capacity change from 0 to 256 [ 31.396195][ T5005] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 31.396840][ T5005] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.53: bg 0: block 248: padding at end of block bitmap is not set [ 31.397410][ T5005] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.53: Failed to acquire dquot type 1 [ 31.414303][ T4717] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 31.548498][ T5025] warning: `syz.2.62' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 31.576054][ T5029] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 31.577887][ T5029] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 31.577945][ T5029] Zero length message leads to an empty skb [ 31.597041][ T5031] netlink: 36 bytes leftover after parsing attributes in process `syz.4.65'. [ 31.675979][ T5039] loop4: detected capacity change from 0 to 512 [ 31.677768][ T5039] ======================================================= [ 31.677768][ T5039] WARNING: The mand mount option has been deprecated and [ 31.677768][ T5039] and is ignored by this kernel. Remove the mand [ 31.677768][ T5039] option from the mount to silence this warning. [ 31.677768][ T5039] ======================================================= [ 31.711855][ T5039] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.782634][ T4717] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.893883][ T5064] bridge0: port 3(syz_tun) entered blocking state [ 31.895304][ T5064] bridge0: port 3(syz_tun) entered disabled state [ 31.896728][ T5064] syz_tun: entered allmulticast mode [ 31.899176][ T5064] syz_tun: entered promiscuous mode [ 31.900517][ T5064] bridge0: port 3(syz_tun) entered blocking state [ 31.900563][ T5064] bridge0: port 3(syz_tun) entered forwarding state [ 31.986686][ T5074] loop2: detected capacity change from 0 to 256 [ 32.009406][ C1] syz_tun: tun_net_xmit 110 [ 32.016591][ T5077] loop2: detected capacity change from 0 to 512 [ 32.018144][ T5077] EXT4-fs (loop2): bad s_min_extra_isize: 65535 [ 32.080234][ T5083] »»»»»»: renamed from vlan0 (while UP) [ 32.094180][ T4719] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 32.131020][ T3821] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.168261][ T5088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.93'. [ 32.168296][ T5088] netlink: 28 bytes leftover after parsing attributes in process `syz.2.93'. [ 32.171678][ T5088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.93'. [ 32.171693][ T5088] netlink: 28 bytes leftover after parsing attributes in process `syz.2.93'. [ 32.198418][ T4729] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 32.200294][ T4729] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 32.200880][ T4729] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 32.201377][ T4729] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 32.201596][ T4729] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 32.353922][ T5109] i2c i2c-0: delete_device: Can't parse I2C address [ 32.374259][ T4716] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 32.396820][ T5091] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.402458][ T5091] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.402561][ T5091] bridge_slave_0: entered allmulticast mode [ 32.403014][ T5091] bridge_slave_0: entered promiscuous mode [ 32.403763][ T5091] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.403791][ T5091] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.403860][ T5091] bridge_slave_1: entered allmulticast mode [ 32.404272][ T5091] bridge_slave_1: entered promiscuous mode [ 32.433654][ T5091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.436644][ T5091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.445567][ T5091] team0: Port device team_slave_0 added [ 32.447832][ T5091] team0: Port device team_slave_1 added [ 32.457027][ T5091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.458538][ T5091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.463769][ T4729] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 32.464150][ T4729] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 32.464350][ T4729] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 32.464670][ T4729] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 32.464871][ T4729] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 32.472718][ T5091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.476648][ T5091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.478412][ T5091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.484287][ T5091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.484554][ T5102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.484782][ T5102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.501622][ T5091] hsr_slave_0: entered promiscuous mode [ 32.503173][ T5091] hsr_slave_1: entered promiscuous mode [ 32.504771][ T5091] debugfs: 'hsr0' already exists in 'hsr' [ 32.505995][ T5091] Cannot create hsr debugfs directory [ 32.601814][ T5091] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 32.605176][ T5091] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.605626][ T5091] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 32.609093][ T5091] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.611525][ T5091] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 32.620533][ T5091] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.622983][ T5091] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 32.625325][ T5091] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.659642][ T5091] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.659685][ T5091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.659771][ T5091] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.659806][ T5091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.712014][ T5091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.717943][ T4250] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.720235][ T4250] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.734052][ T5091] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.785496][ T4151] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.785536][ T4151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.807157][ T4151] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.807196][ T4151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.834310][ T5118] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.835961][ T5118] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.838142][ T5118] bridge_slave_0: entered allmulticast mode [ 32.840709][ T5118] bridge_slave_0: entered promiscuous mode [ 32.850411][ T5118] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.851865][ T5118] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.851955][ T5118] bridge_slave_1: entered allmulticast mode [ 32.854939][ T5118] bridge_slave_1: entered promiscuous mode [ 32.879808][ T5118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.890254][ T5091] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.892238][ T5091] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.893588][ T5118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.893720][ T4721] Bluetooth: hci1: command 0x040f tx timeout [ 32.893746][ T4721] Bluetooth: hci0: command 0x040f tx timeout [ 32.922653][ T5118] team0: Port device team_slave_0 added [ 32.925262][ T5118] team0: Port device team_slave_1 added [ 32.933174][ T5118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.934512][ T5118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.939179][ T5118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.942147][ T5118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.943427][ T5118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.949743][ T5118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.968980][ T4729] Bluetooth: hci3: command 0x040f tx timeout [ 32.985764][ T5170] Injecting memory failure for pfn 0x11ff93 at process virtual address 0x20000000 [ 32.988457][ T5118] hsr_slave_0: entered promiscuous mode [ 32.990152][ T5170] Memory failure: 0x11ff93: Sending SIGBUS to syz.0.114:5170 due to hardware memory corruption [ 32.990210][ T5170] Memory failure: 0x11ff93: recovery action for dirty LRU page: Recovered [ 32.990235][ T5170] Injecting memory failure for pfn 0x219250 at process virtual address 0x20001000 [ 32.997295][ T5118] hsr_slave_1: entered promiscuous mode [ 32.997537][ T5118] debugfs: 'hsr0' already exists in 'hsr' [ 32.997548][ T5118] Cannot create hsr debugfs directory [ 33.001742][ T5170] Memory failure: 0x219250: unhandlable page. [ 33.001760][ T5170] Memory failure: 0x219250: recovery action for get hwpoison page: Ignored [ 33.101463][ T5118] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 33.105346][ T5118] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.108329][ T5118] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 33.111260][ T5118] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 33.113371][ T5118] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 33.116113][ T5118] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.121116][ T5118] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 33.123549][ T5118] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 33.190381][ T5199] Injecting memory failure for pfn 0x1137ca at process virtual address 0x20036000 [ 33.194519][ T5199] Memory failure: 0x1137ca: recovery action for clean LRU page: Recovered [ 33.194559][ T5199] Injecting memory failure for pfn 0x1122a5 at process virtual address 0x20037000 [ 33.194953][ T5199] Memory failure: 0x1122a5: recovery action for clean LRU page: Recovered [ 33.194966][ T5199] Injecting memory failure for pfn 0x11d602 at process virtual address 0x20038000 [ 33.195008][ T5199] Memory failure: 0x11d602: recovery action for clean LRU page: Recovered [ 33.195018][ T5199] Injecting memory failure for pfn 0x122f97 at process virtual address 0x20039000 [ 33.195052][ T5199] Memory failure: 0x122f97: recovery action for clean LRU page: Recovered [ 33.223282][ T5118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.228546][ T5118] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.232136][ T5091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.251702][ T1059] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.251744][ T1059] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.260368][ T1059] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.260411][ T1059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.445468][ T3821] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.454117][ T5237] loop0: detected capacity change from 0 to 512 [ 33.462493][ T5091] veth0_vlan: entered promiscuous mode [ 33.467124][ T5091] veth1_vlan: entered promiscuous mode [ 33.479328][ T5237] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.483209][ T5091] veth0_macvtap: entered promiscuous mode [ 33.484259][ T5091] veth1_macvtap: entered promiscuous mode [ 33.497265][ T5091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.498287][ T5091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.509401][ T39] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.509618][ T1059] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.509705][ T1059] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.509766][ T1059] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.592159][ T3821] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.617037][ T5118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.630979][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.631009][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.652963][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.652989][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.660871][ T4711] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.677307][ T3821] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.746948][ T5262] process 'syz.0.139' launched './file2' with NULL argv: empty string added [ 33.826787][ T5118] veth0_vlan: entered promiscuous mode [ 33.836806][ T5118] veth1_vlan: entered promiscuous mode [ 33.863947][ T5118] veth0_macvtap: entered promiscuous mode [ 33.877405][ T5118] veth1_macvtap: entered promiscuous mode [ 33.892927][ T5118] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.894848][ T5118] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.897905][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.915978][ T5276] EXT4-fs: Ignoring removed nobh option [ 33.943054][ T5276] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.996505][ T5291] netlink: 200 bytes leftover after parsing attributes in process `syz.2.148'. [ 34.012899][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.012950][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.012981][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.060354][ T4711] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.066806][ T3821] bridge_slave_1: left allmulticast mode [ 34.066846][ T3821] bridge_slave_1: left promiscuous mode [ 34.067244][ T3821] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.130266][ T3821] bridge_slave_0: left allmulticast mode [ 34.130305][ T3821] bridge_slave_0: left promiscuous mode [ 34.130408][ T3821] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.248754][ T4729] Bluetooth: hci2: command tx timeout [ 34.301283][ T5314] /dev/nullb0: Can't open blockdev [ 34.357913][ T3821] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 34.377337][ T3821] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 34.392366][ T5324] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 34.412157][ T3821] bond0 (unregistering): Released all slaves [ 34.424533][ T4401] 8021q: adding VLAN 0 to HW filter on device eth0 [ 34.490137][ T4729] Bluetooth: hci4: command tx timeout [ 34.590667][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.592312][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.615420][ T5348] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.617633][ T4250] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.617654][ T4250] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.679557][ T5348] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #2: comm syz.4.167: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 34.729658][ C1] syz_tun: tun_net_xmit 70 [ 34.732524][ T4717] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.823321][ T4401] 8021q: adding VLAN 0 to HW filter on device eth1 [ 34.846018][ T5378] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.889402][ C1] syz_tun: tun_net_xmit 70 [ 34.912541][ T5378] netlink: 20 bytes leftover after parsing attributes in process `syz.4.177'. [ 34.958013][ T4717] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.968273][ T3821] hsr_slave_0: left promiscuous mode [ 34.969068][ C1] syz_tun: tun_net_xmit 70 [ 34.969905][ T4729] Bluetooth: hci0: command 0x040f tx timeout [ 34.969928][ T4729] Bluetooth: hci1: command 0x040f tx timeout [ 34.996590][ T3821] hsr_slave_1: left promiscuous mode [ 34.996930][ T3821] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 34.996967][ T3821] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 35.001483][ T3821] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 35.002902][ T3821] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 35.030592][ T3821] veth1_macvtap: left promiscuous mode [ 35.031926][ T3821] veth0_macvtap: left promiscuous mode [ 35.032997][ T3821] veth1_vlan: left promiscuous mode [ 35.034159][ T3821] veth0_vlan: left promiscuous mode [ 35.049468][ T4721] Bluetooth: hci3: command 0x040f tx timeout [ 35.055549][ T5407] EXT4-fs (loop0): Test dummy encryption mode enabled [ 35.055584][ T5407] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 35.055606][ T5407] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 35.076167][ T5407] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.183: bad orphan inode 131072 [ 35.076202][ T5407] loop0: lost filesystem error report for type 5 error -117 [ 35.076895][ T5407] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.106596][ T5407] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 35.154254][ T4711] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.235653][ T5426] netlink: 16 bytes leftover after parsing attributes in process `syz.0.185'. [ 35.271040][ T5430] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 35.283305][ T5430] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 35.394375][ T3821] team0 (unregistering): Port device team_slave_1 removed [ 35.412099][ T3821] team0 (unregistering): Port device team_slave_0 removed [ 35.637319][ T4401] 8021q: adding VLAN 0 to HW filter on device eth2 [ 35.802857][ T5459] set_capacity_and_notify: 8 callbacks suppressed [ 35.806414][ T5459] loop6: detected capacity change from 0 to 1024 [ 35.806817][ T5459] EXT4-fs: Ignoring removed i_version option [ 35.806858][ T5459] EXT4-fs: inline encryption not supported [ 35.811135][ T5459] EXT4-fs (loop6): Test dummy encryption mode enabled [ 35.812584][ T5459] EXT4-fs (loop6): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 35.821962][ T5459] EXT4-fs error (device loop6): ext4_ext_check_inode:521: inode #4: comm syz.6.200: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 35.825400][ T5459] loop6: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 35.828471][ T5459] EXT4-fs error (device loop6): ext4_quota_enable:7235: comm syz.6.200: Bad quota inode: 4, type: 1 [ 35.828509][ T5459] loop6: lost filesystem error report for type 5 error -117 [ 35.828612][ C0] EXT4-fs (loop6): error count since last fsck: 2 [ 35.828632][ C0] EXT4-fs (loop6): initial error at time 35: ext4_ext_check_inode:521: inode 4 [ 35.828672][ C0] EXT4-fs (loop6): last error at time 35: ext4_quota_enable:7235 [ 35.843668][ T5459] EXT4-fs warning (device loop6): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 35.846670][ T5459] EXT4-fs (loop6): mount failed [ 35.875032][ T5459] netlink: 20 bytes leftover after parsing attributes in process `syz.6.200'. [ 35.922215][ T5471] loop6: detected capacity change from 0 to 256 [ 35.978259][ T4401] 8021q: adding VLAN 0 to HW filter on device eth3 [ 36.005807][ T3821] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.115829][ T3821] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.147775][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 36.147814][ T30] audit: type=1400 audit(36.120:3): lsm=SMACK fn=smack_inode_get_acl action=denied subject="_" object="lowerdir" requested=r pid=5495 comm="syz.6.210" name="file0" dev="tmpfs" ino=82 [ 36.211357][ T3821] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.215334][ T5505] netlink: 4 bytes leftover after parsing attributes in process `syz.2.215'. [ 36.322215][ T3821] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.328928][ T4721] Bluetooth: hci2: command tx timeout [ 36.490748][ T3821] bridge_slave_1: left allmulticast mode [ 36.490778][ T3821] bridge_slave_1: left promiscuous mode [ 36.491287][ T3821] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.493760][ T3821] bridge_slave_0: left allmulticast mode [ 36.493772][ T3821] bridge_slave_0: left promiscuous mode [ 36.493832][ T3821] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.568686][ T4721] Bluetooth: hci4: command tx timeout [ 36.634318][ T3821] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 36.660877][ T3821] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 36.699999][ T3821] bond0 (unregistering): Released all slaves [ 36.703570][ T5538] netlink: 56 bytes leftover after parsing attributes in process `syz.5.229'. [ 36.851866][ T5565] netlink: 76 bytes leftover after parsing attributes in process `syz.0.240'. [ 36.851934][ T5565] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 36.981117][ T5583] netlink: 24 bytes leftover after parsing attributes in process `syz.5.244'. [ 36.990417][ T4401] 8021q: adding VLAN 0 to HW filter on device eth4 [ 37.048680][ T4721] Bluetooth: hci1: command 0x040f tx timeout [ 37.048705][ T4729] Bluetooth: hci0: command 0x040f tx timeout [ 37.106641][ T5606] af_packet: tpacket_rcv: packet too big, clamped from 46 to 4294967286. macoff=82 [ 37.108513][ T3821] hsr_slave_0: left promiscuous mode [ 37.111912][ T3821] hsr_slave_1: left promiscuous mode [ 37.112226][ T3821] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 37.112253][ T3821] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 37.114865][ T3821] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 37.114877][ T3821] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 37.128731][ T4729] Bluetooth: hci3: command 0x040f tx timeout [ 37.144155][ T3821] veth1_macvtap: left promiscuous mode [ 37.144196][ T3821] veth0_macvtap: left promiscuous mode [ 37.144245][ T3821] veth1_vlan: left promiscuous mode [ 37.144279][ T3821] veth0_vlan: left promiscuous mode [ 37.149508][ T5614] loop0: detected capacity change from 0 to 128 [ 37.151105][ T5614] EXT4-fs: Ignoring removed nobh option [ 37.174153][ T5614] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 37.205603][ T5614] fscrypt (loop0, inode 12): Reserved bits set in encryption policy [ 37.245707][ T4711] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 37.348779][ T3821] team0 (unregistering): Port device team_slave_1 removed [ 37.358834][ T3821] team0 (unregistering): Port device team_slave_0 removed [ 37.438750][ T5625] netlink: 60 bytes leftover after parsing attributes in process `syz.0.257'. [ 37.446455][ T4401] 8021q: adding VLAN 0 to HW filter on device eth5 [ 37.539386][ T5652] loop0: detected capacity change from 0 to 512 [ 37.566230][ T5652] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.653555][ T5668] loop5: detected capacity change from 0 to 512 [ 37.664485][ T4711] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.677651][ T5668] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.273: bad orphan inode 15 [ 37.677682][ T5668] loop5: lost filesystem error report for type 5 error -117 [ 37.679738][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 37.679752][ C0] EXT4-fs (loop5): initial error at time 37: ext4_orphan_get:1425 [ 37.679765][ C0] EXT4-fs (loop5): last error at time 37: ext4_orphan_get:1425 [ 37.687794][ T5668] ext4_test_bit(bit=14, block=5) = 0 [ 37.688385][ T5668] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.706187][ T5668] EXT4-fs error (device loop5): __ext4_new_inode:1081: comm syz.5.273: reserved inode found cleared - inode=1 [ 37.731543][ T5668] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 37.797634][ T5091] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.838366][ T5695] netlink: 'syz.2.284': attribute type 2 has an invalid length. [ 37.889112][ T5702] loop0: detected capacity change from 0 to 512 [ 37.890565][ T5702] EXT4-fs (loop0): Test dummy encryption mode enabled [ 37.890605][ T5702] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 37.906449][ T5702] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.286: bad orphan inode 131083 [ 37.906479][ T5702] loop0: lost filesystem error report for type 5 error -117 [ 37.907061][ T5702] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.923240][ T5702] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 37.930302][ T5702] EXT4-fs error (device loop0): ext4_lookup:1785: inode #14: comm syz.0.286: invalid fast symlink length 39 [ 37.939975][ T5702] overlayfs: failed to look up (file1) for ino (-117) [ 37.943038][ T5709] loop4: detected capacity change from 0 to 128 [ 37.953898][ T5713] Bluetooth: MGMT ver 1.23 [ 37.963789][ T5709] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 38.006261][ T4717] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 38.032515][ T5717] usb usb8: selecting invalid altsetting 2147483647 [ 38.035475][ T4401] 8021q: adding VLAN 0 to HW filter on device eth6 [ 38.151544][ T5737] capability: warning: `syz.4.299' uses deprecated v2 capabilities in a way that may be insecure [ 38.303663][ T5383] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.333100][ T4250] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.378002][ T4401] 8021q: adding VLAN 0 to HW filter on device eth7 [ 38.397541][ T4250] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.410666][ T4729] Bluetooth: hci2: command tx timeout [ 38.450733][ T4250] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.470121][ T4721] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 38.471195][ T4721] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 38.471603][ T4721] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 38.471914][ T4721] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 38.472137][ T4721] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 38.552505][ T4250] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.645258][ T5814] loop2: detected capacity change from 0 to 4096 [ 38.649189][ T4729] Bluetooth: hci4: command tx timeout [ 38.680200][ T5814] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.725547][ T5814] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 38.740926][ T4714] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.744057][ T4250] bridge_slave_1: left allmulticast mode [ 38.744099][ T4250] bridge_slave_1: left promiscuous mode [ 38.744189][ T4250] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.751471][ T4250] bridge_slave_0: left allmulticast mode [ 38.751497][ T4250] bridge_slave_0: left promiscuous mode [ 38.751577][ T4250] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.850510][ T4250] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 38.863161][ T4250] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 38.891151][ T4250] bond0 (unregistering): Released all slaves [ 38.922369][ T4401] 8021q: adding VLAN 0 to HW filter on device eth8 [ 39.069594][ T4401] 8021q: adding VLAN 0 to HW filter on device eth9 [ 39.073042][ T30] audit: type=1400 audit(39.050:4): lsm=SMACK fn=smack_task_setnice action=denied subject="w" object="_" requested=w pid=5874 comm="syz.6.326" opid=5118 ocomm="syz-executor" [ 39.075444][ T30] audit: type=1400 audit(39.050:5): lsm=SMACK fn=smack_task_setnice action=denied subject="w" object="_" requested=w pid=5874 comm="syz.6.326" opid=5874 ocomm="syz.6.326" [ 39.095261][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.096231][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.096325][ T5783] bridge_slave_0: entered allmulticast mode [ 39.096773][ T5783] bridge_slave_0: entered promiscuous mode [ 39.138632][ T4729] Bluetooth: hci1: command 0x040f tx timeout [ 39.210111][ T4729] Bluetooth: hci3: command 0x040f tx timeout [ 39.219586][ T4830] atkbd serio0: keyboard reset failed on [ 39.500864][ T5900] loop4: detected capacity change from 0 to 128 [ 39.503766][ T5900] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 39.539470][ T4717] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 39.579759][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.579807][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.579932][ T5783] bridge_slave_1: entered allmulticast mode [ 39.580422][ T5783] bridge_slave_1: entered promiscuous mode [ 39.596483][ T4401] 8021q: adding VLAN 0 to HW filter on device eth10 [ 39.597509][ T5903] netlink: 'syz.4.331': attribute type 12 has an invalid length. [ 39.597528][ T5903] netlink: 'syz.4.331': attribute type 29 has an invalid length. [ 39.597536][ T5903] netlink: 148 bytes leftover after parsing attributes in process `syz.4.331'. [ 39.604567][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.608054][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.640136][ T5783] team0: Port device team_slave_0 added [ 39.640890][ T5783] team0: Port device team_slave_1 added [ 39.646838][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.665211][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.665422][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.671844][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.671873][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.671890][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.673330][ T24] kernel read not supported for file /video7 (pid: 24 comm: kworker/1:0) [ 39.724579][ T5783] hsr_slave_0: entered promiscuous mode [ 39.724908][ T5783] hsr_slave_1: entered promiscuous mode [ 39.725141][ T5783] debugfs: 'hsr0' already exists in 'hsr' [ 39.725153][ T5783] Cannot create hsr debugfs directory [ 39.883719][ T5927] netlink: 232 bytes leftover after parsing attributes in process `syz.4.338'. [ 39.885612][ T5923] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 39.894320][ T4250] hsr_slave_0: left promiscuous mode [ 39.897920][ T4250] hsr_slave_1: left promiscuous mode [ 39.898231][ T4250] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.898243][ T4250] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 39.902457][ T4250] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.902470][ T4250] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 39.917563][ T4250] veth1_macvtap: left promiscuous mode [ 39.917640][ T4250] veth0_macvtap: left promiscuous mode [ 39.917689][ T4250] veth1_vlan: left promiscuous mode [ 39.917721][ T4250] veth0_vlan: left promiscuous mode [ 39.983808][ T5940] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 40.039881][ T5947] loop2: detected capacity change from 0 to 256 [ 40.063073][ T5947] FAT-fs (loop2): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 40.063111][ T5947] FAT-fs (loop2): Filesystem has been set read-only [ 40.184909][ T4250] team0 (unregistering): Port device team_slave_1 removed [ 40.208538][ T4250] team0 (unregistering): Port device team_slave_0 removed [ 40.250407][ T5954] netlink: 4 bytes leftover after parsing attributes in process `syz.2.347'. [ 40.297519][ T4401] 8021q: adding VLAN 0 to HW filter on device eth11 [ 40.473929][ T5970] syz_tun: tun_net_xmit 1510 [ 40.474011][ T5970] syz_tun: tun_net_xmit 1510 [ 40.474050][ T5970] syz_tun: tun_net_xmit 1510 [ 40.474091][ T5970] syz_tun: tun_net_xmit 1510 [ 40.474127][ T5970] syz_tun: tun_net_xmit 1510 [ 40.474163][ T5970] syz_tun: tun_net_xmit 1510 [ 40.474197][ T5970] syz_tun: tun_net_xmit 1510 [ 40.474229][ T5970] syz_tun: tun_net_xmit 1510 [ 40.474261][ T5970] syz_tun: tun_net_xmit 1510 [ 40.474324][ T5970] syz_tun: tun_net_xmit 1510 [ 40.474355][ T5970] syz_tun: tun_net_xmit 1510 [ 40.474386][ T5970] syz_tun: tun_net_xmit 1510 [ 40.474417][ T5970] syz_tun: tun_net_xmit 1510 [ 40.476117][ T5970] syz_tun: tun_net_xmit 694 [ 40.488837][ T4729] Bluetooth: hci0: command tx timeout [ 40.489099][ T4729] Bluetooth: hci2: command tx timeout [ 40.553864][ T5783] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 40.575841][ T5783] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 40.576178][ T5783] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 40.587086][ T5783] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 40.587439][ T5980] mmap: syz.2.356 (5980) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 40.591653][ T5783] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 40.601069][ T5783] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 40.601419][ T5783] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 40.608188][ T5783] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 40.729502][ T4721] Bluetooth: hci4: command tx timeout [ 40.741400][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.757563][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.764855][ T3994] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.764899][ T3994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.772448][ T3994] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.772491][ T3994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.787401][ T5783] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 40.787435][ T5783] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.994136][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.052160][ T6034] Illegal XDP return value 4294967274 on prog (id 20) dev N/A, expect packet loss! [ 41.172550][ T5783] veth0_vlan: entered promiscuous mode [ 41.179895][ T5783] veth1_vlan: entered promiscuous mode [ 41.203532][ T5783] veth0_macvtap: entered promiscuous mode [ 41.205859][ T5783] veth1_macvtap: entered promiscuous mode [ 41.208810][ T4721] Bluetooth: hci1: command 0x040f tx timeout [ 41.215411][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.222274][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.225364][ T3821] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.225423][ T3821] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.225450][ T3821] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.225468][ T3821] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.261625][ T4250] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.261652][ T4250] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.288847][ T4721] Bluetooth: hci3: command 0x040f tx timeout [ 41.295881][ T3994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.295907][ T3994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.414329][ T6073] set_capacity_and_notify: 1 callbacks suppressed [ 41.415656][ T6073] loop5: detected capacity change from 0 to 4096 [ 41.438831][ T6073] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.447797][ T6079] netlink: 16 bytes leftover after parsing attributes in process `syz.2.388'. [ 41.457413][ T6073] EXT4-fs error (device loop5): ext4_get_first_dir_block:3548: inode #12: comm syz.5.386: directory missing '.' [ 41.492122][ T6082] loop2: detected capacity change from 0 to 128 [ 41.495118][ T5091] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.505562][ T6082] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 41.581643][ T4714] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 41.616186][ T6099] tmpfs: Too few inodes for current use [ 41.622788][ T6100] netlink: 48 bytes leftover after parsing attributes in process `syz.7.396'. [ 41.712948][ T30] audit: type=1326 audit(41.690:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6092 comm="syz.6.397" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb7f79028 code=0x7ffc0000 [ 41.712986][ T30] audit: type=1326 audit(41.690:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6092 comm="syz.6.397" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffb7f5aeec code=0x7ffc0000 [ 41.723747][ T30] audit: type=1326 audit(41.700:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6092 comm="syz.6.397" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb7f79028 code=0x7ffc0000 [ 41.727677][ T30] audit: type=1326 audit(41.700:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6092 comm="syz.6.397" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffb7f5aeec code=0x7ffc0000 [ 41.733040][ T30] audit: type=1326 audit(41.710:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6092 comm="syz.6.397" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffb7f5aeec code=0x7ffc0000 [ 41.737636][ T30] audit: type=1326 audit(41.710:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6092 comm="syz.6.397" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffb7f5aeec code=0x7ffc0000 [ 41.744513][ T30] audit: type=1326 audit(41.720:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6092 comm="syz.6.397" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffb7f5aeec code=0x7ffc0000 [ 41.748983][ T30] audit: type=1326 audit(41.730:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6092 comm="syz.6.397" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffb7f5aeec code=0x7ffc0000 [ 41.753827][ T30] audit: type=1326 audit(41.730:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6092 comm="syz.6.397" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffb7f5aeec code=0x7ffc0000 [ 41.757887][ T30] audit: type=1326 audit(41.730:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6092 comm="syz.6.397" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffb7f5aeec code=0x7ffc0000 [ 42.095697][ T6150] netlink: 'syz.4.419': attribute type 2 has an invalid length. [ 42.301286][ T6181] loop7: detected capacity change from 0 to 1024 [ 42.315209][ T6181] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 42.365314][ T3821] EXT4-fs error (device loop7): ext4_map_blocks:833: inode #15: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 5) [ 42.370617][ T3821] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 5 with error 117 [ 42.370649][ T3821] EXT4-fs (loop7): This should not happen!! Data will be lost [ 42.370649][ T3821] [ 42.456868][ T3821] EXT4-fs error (device loop7): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:6: lblock 8 mapped to illegal pblock 8 (length 8) [ 42.462116][ T3821] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 42.465029][ T3821] EXT4-fs (loop7): This should not happen!! Data will be lost [ 42.465029][ T3821] [ 42.471442][ T5783] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 42.472281][ T5783] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 42.542844][ T6204] netlink: 12 bytes leftover after parsing attributes in process `syz.7.443'. [ 42.569151][ T4721] Bluetooth: hci0: command tx timeout [ 42.591095][ T6207] netlink: 28 bytes leftover after parsing attributes in process `syz.6.442'. [ 42.600725][ T6208] Injecting memory failure for pfn 0x12372f at process virtual address 0x20162000 [ 42.603831][ T6208] Memory failure: 0x12372f: recovery action for clean LRU page: Recovered [ 42.605461][ T6208] Injecting memory failure for pfn 0x123730 at process virtual address 0x20163000 [ 42.607397][ T6208] Memory failure: 0x123730: recovery action for clean LRU page: Recovered [ 42.609193][ T6208] Injecting memory failure for pfn 0x123731 at process virtual address 0x20164000 [ 42.610990][ T6208] Memory failure: 0x123731: recovery action for clean LRU page: Recovered [ 42.712832][ T6220] netlink: 12 bytes leftover after parsing attributes in process `syz.7.450'. [ 42.713401][ T6220] netlink: 12 bytes leftover after parsing attributes in process `syz.7.450'. [ 42.729312][ C1] syz_tun: tun_net_xmit 70 [ 42.730725][ C1] syz_tun: tun_net_xmit 70 [ 43.017632][ T6269] bridge0: port 3(syz_tun) entered blocking state [ 43.017707][ T6269] bridge0: port 3(syz_tun) entered disabled state [ 43.018220][ T6269] syz_tun: entered allmulticast mode [ 43.025949][ T6269] syz_tun: entered promiscuous mode [ 43.027916][ T6269] bridge0: port 3(syz_tun) entered blocking state [ 43.027959][ T6269] bridge0: port 3(syz_tun) entered forwarding state [ 43.203128][ T6291] loop5: detected capacity change from 0 to 256 [ 43.321461][ T6310] tipc: Started in network mode [ 43.322421][ T6310] tipc: Node identity ac14140f, cluster identity 4711 [ 43.324353][ T6310] tipc: New replicast peer: 172.30.0.6 [ 43.325532][ T6310] tipc: Enabled bearer , priority 10 [ 43.328118][ T6310] netlink: 12 bytes leftover after parsing attributes in process `syz.5.491'. [ 43.330510][ T6310] tipc: Disabling bearer [ 43.370356][ T4721] Bluetooth: hci3: command 0x040f tx timeout [ 43.370882][ C1] syz_tun: tun_net_xmit 70 [ 43.490615][ T6329] netlink: 16 bytes leftover after parsing attributes in process `syz.5.501'. [ 43.490652][ T6329] netlink: 16 bytes leftover after parsing attributes in process `syz.5.501'. [ 43.495118][ T6334] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.500'. [ 43.499673][ T6336] loop6: detected capacity change from 0 to 128 [ 43.500107][ T6336] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 43.606014][ T6346] loop5: detected capacity change from 0 to 4096 [ 43.633666][ T6346] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.667319][ T6346] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #15: comm syz.5.508: corrupted inode contents [ 43.671059][ T6346] EXT4-fs error (device loop5): ext4_dirty_inode:6639: inode #15: comm syz.5.508: mark_inode_dirty error [ 43.674842][ T6346] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #15: comm syz.5.508: corrupted inode contents [ 43.677029][ T6346] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #15: comm syz.5.508: mark_inode_dirty error [ 43.680722][ T6346] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #15: comm syz.5.508: corrupted inode contents [ 43.683227][ T6346] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #15: comm syz.5.508: mark_inode_dirty error [ 43.685363][ T6346] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #15: comm syz.5.508: corrupted inode contents [ 43.689408][ T6346] EXT4-fs error (device loop5): ext4_truncate:4691: inode #15: comm syz.5.508: mark_inode_dirty error [ 43.693470][ T6346] EXT4-fs error (device loop5) in ext4_setattr:6172: Corrupt filesystem [ 43.714464][ T6367] loop2: detected capacity change from 0 to 512 [ 43.721455][ T6346] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #15: comm syz.5.508: corrupted inode contents [ 43.740138][ T5091] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 43.745426][ T5091] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 43.747453][ T5091] EXT4-fs warning (device loop5): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 43.764060][ T5091] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.780527][ T6367] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.840010][ T4714] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.895202][ T6384] batadv_slave_0: entered promiscuous mode [ 43.900496][ T6384] batman_adv: batadv0: Adding interface: macsec1 [ 43.900531][ T6384] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 43.900561][ T6384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.900576][ T6384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.900590][ T6384] batman_adv: batadv0: Interface activated: macsec1 [ 43.938475][ T6396] syz_tun: tun_net_xmit 58 [ 44.051353][ T6408] loop4: detected capacity change from 0 to 4096 [ 44.051680][ T6408] EXT4-fs: inline encryption not supported [ 44.054405][ T6408] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 44.058270][ T6408] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=84ec018, mo2=0003] [ 44.059126][ T6408] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.092706][ T6408] evm: overlay not supported [ 44.140974][ T4717] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.485359][ T6470] loop4: detected capacity change from 0 to 512 [ 44.500383][ T6470] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 44.507955][ T6470] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 1024: comm syz.4.566: invalid block [ 44.507995][ T6470] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 44.512012][ T6470] EXT4-fs (loop4): 1 truncate cleaned up [ 44.512494][ T6470] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.545311][ T6470] EXT4-fs error (device loop4): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.4.566: bad entry in directory: directory entry overrun - offset=108, inode=4294901777, rec_len=1024, size=1024 fake=0 [ 44.567361][ T4717] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.650428][ T4721] Bluetooth: hci0: command tx timeout [ 44.722840][ T6500] tap0: tun_chr_ioctl cmd 1074025681 [ 44.820332][ T6512] loop9: detected capacity change from 0 to 524287936 [ 44.842706][ T6507] binder: 6506:6507 ioctl 40046205 0 returned -22 [ 44.842983][ T6507] binder: 6506:6507 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 44.842996][ T6507] binder: 6507 RLIMIT_NICE not set [ 45.022243][ T6525] FAT-fs (loop6): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 45.022277][ T6525] FAT-fs (loop6): Filesystem has been set read-only [ 45.223056][ T6555] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 45.227600][ T6555] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 45.227673][ T6555] System zones: 1-12 [ 45.229370][ T6555] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 45.231532][ T6555] EXT4-fs (loop6): 1 truncate cleaned up [ 45.231983][ T6555] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.269158][ T5118] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.593835][ T6592] syz.6.619 uses obsolete (PF_INET,SOCK_PACKET) [ 45.821501][ T10] hid-generic 0005:0C45:5AF3.0001: unknown main item tag 0x0 [ 45.827639][ T10] hid-generic 0005:0C45:5AF3.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 45.872366][ T6611] tipc: Started in network mode [ 45.872400][ T6611] tipc: Node identity ac14140f, cluster identity 4711 [ 45.872483][ T6611] tipc: New replicast peer: 255.255.255.255 [ 45.872844][ T6611] tipc: Enabled bearer , priority 10 [ 46.434977][ T6654] set_capacity_and_notify: 2 callbacks suppressed [ 46.435012][ T6654] loop7: detected capacity change from 0 to 512 [ 46.443555][ T6654] EXT4-fs (loop7): bad s_min_extra_isize: 65535 [ 46.464624][ T6656] loop4: detected capacity change from 0 to 512 [ 46.492800][ T6656] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.506006][ T6656] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #2: comm syz.4.641: corrupted inode contents [ 46.506952][ T6656] EXT4-fs error (device loop4): ext4_dirty_inode:6639: inode #2: comm syz.4.641: mark_inode_dirty error [ 46.507574][ T6656] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #2: comm syz.4.641: corrupted inode contents [ 46.507726][ T6656] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.641: mark_inode_dirty error [ 46.533758][ T4717] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.644680][ T6674] loop5: detected capacity change from 0 to 512 [ 46.646275][ T6674] EXT4-fs: Ignoring removed bh option [ 46.651668][ T6674] EXT4-fs: Ignoring removed oldalloc option [ 46.653138][ T6674] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 46.663345][ T6674] EXT4-fs (loop5): 1 truncate cleaned up [ 46.669910][ T6674] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.730693][ T4721] Bluetooth: hci0: command tx timeout [ 46.775856][ T5091] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.839043][ T6692] TCP: tcp_parse_options: Illegal window scaling value 251 > 14 received [ 46.846074][ T6689] loop4: detected capacity change from 0 to 1024 [ 46.848216][ T6689] EXT4-fs: Ignoring removed oldalloc option [ 46.848246][ T6689] EXT4-fs: Ignoring removed orlov option [ 46.875837][ T9] tipc: Node number set to 2886997007 [ 46.883080][ T6689] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a042c118, mo2=0002] [ 46.883138][ T6689] System zones: 0-1, 3-12 [ 46.883752][ T6689] EXT4-fs (loop4): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.935269][ T6701] loop6: detected capacity change from 0 to 256 [ 46.938167][ T6703] __nla_validate_parse: 6 callbacks suppressed [ 46.940842][ T6703] netlink: 24 bytes leftover after parsing attributes in process `syz.5.659'. [ 46.946200][ T6703] netlink: 24 bytes leftover after parsing attributes in process `syz.5.659'. [ 46.960110][ T6701] FAT-fs (loop6): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 46.960135][ T6701] FAT-fs (loop6): Filesystem has been set read-only [ 46.991789][ T6707] loop5: detected capacity change from 0 to 512 [ 47.002582][ T4717] EXT4-fs (loop4): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 47.038174][ T6713] loop2: detected capacity change from 0 to 128 [ 47.045962][ T6707] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.156132][ T6720] loop6: detected capacity change from 0 to 256 [ 47.238280][ T5091] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.382619][ T6734] loop5: detected capacity change from 0 to 8192 [ 47.741721][ T6781] loop2: detected capacity change from 0 to 1024 [ 47.744467][ T6781] EXT4-fs: Ignoring removed bh option [ 47.762349][ T6781] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2842c028, mo2=0002] [ 47.762394][ T6781] System zones: 0-1, 3-8 [ 47.767948][ T6781] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 47.830109][ T6781] EXT4-fs (loop2): re-mounted 00000000-0000-0006-0000-000000000000. [ 47.832404][ T6797] netlink: 40 bytes leftover after parsing attributes in process `syz.7.696'. [ 47.846579][ T4714] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 47.882721][ T6805] netlink: 4 bytes leftover after parsing attributes in process `syz.7.699'. [ 47.999633][ T6818] serio: Serial port ttynull [ 48.033541][ T6827] batman_adv: batadv0: Adding interface: ip6gretap1 [ 48.034855][ T6827] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.038719][ T6827] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 48.431662][ T6886] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 48.463478][ T5783] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 48.512679][ T6899] tmpfs: Invalid uid '0x00000000ffffffff' [ 48.634080][ T6919] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.747: inode has both inline data and extents flags [ 48.634117][ T6919] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 48.638114][ T6919] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.747: couldn't read orphan inode 15 (err -117) [ 48.638151][ T6919] loop2: lost filesystem error report for type 5 error -117 [ 48.640055][ C0] EXT4-fs (loop2): error count since last fsck: 2 [ 48.640070][ C0] EXT4-fs (loop2): initial error at time 48: ext4_orphan_get:1399: inode 15 [ 48.640087][ C0] EXT4-fs (loop2): last error at time 48: ext4_orphan_get:1404 [ 48.650741][ T6919] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.739394][ T4714] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.000974][ T6987] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 49.000974][ T6987] The task syz.4.762 (6987) triggered the difference, watch for misbehavior. [ 49.073846][ T6994] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.093156][ T6994] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 49.095832][ T6994] EXT4-fs (loop7): Remounting filesystem read-only [ 49.115395][ T5783] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.150814][ T7006] netlink: 8 bytes leftover after parsing attributes in process `syz.5.779'. [ 49.150848][ T7006] netlink: 12 bytes leftover after parsing attributes in process `syz.5.779'. [ 49.432325][ T7048] tap0: tun_chr_ioctl cmd 1074025677 [ 49.432419][ T7048] tap0: linktype set to 780 [ 49.593410][ T7065] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.620750][ T5783] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.900142][ T7108] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 49.900191][ T7108] System zones: 1-3, 19-19, 35-36 [ 49.900767][ T7108] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 49.935412][ T7101] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 49.950116][ T7101] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.001700][ T5783] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 50.022545][ T7121] netlink: 88 bytes leftover after parsing attributes in process `syz.5.820'. [ 50.169627][ T4721] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 50.169674][ T4721] Bluetooth: hci2: Injecting HCI hardware error event [ 50.170234][ T4721] Bluetooth: hci2: hardware error 0x00 [ 50.245622][ T4717] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.252606][ T7156] tipc: Started in network mode [ 50.252648][ T7156] tipc: Node identity 78563412785634122143658721436587, cluster identity 4711 [ 50.422035][ T7186] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.491827][ T7186] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #18: comm syz.4.843: corrupted inode contents [ 50.491888][ T7186] loop4: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 50.492612][ T7186] EXT4-fs error (device loop4): ext4_dirty_inode:6639: inode #18: comm syz.4.843: mark_inode_dirty error [ 50.492643][ T7186] loop4: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 50.493589][ T7186] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #18: comm syz.4.843: corrupted inode contents [ 50.493614][ T7186] loop4: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 50.493756][ T7186] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3001: inode #18: comm syz.4.843: mark_inode_dirty error [ 50.493778][ T7186] loop4: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 50.493893][ T7186] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3004: inode #18: comm syz.4.843: mark inode dirty (error -117) [ 50.493915][ T7186] loop4: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 50.494690][ T7186] EXT4-fs warning (device loop4): ext4_evict_inode:287: xattr delete (err -117) [ 50.526665][ T4717] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.690775][ T7225] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.747654][ T5783] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.751006][ T7238] netlink: 12 bytes leftover after parsing attributes in process `syz.6.863'. [ 50.792933][ T7241] EXT4-fs: Ignoring removed oldalloc option [ 50.818355][ T7241] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #12: comm syz.4.864: corrupted in-inode xattr: e_name out of bounds [ 50.818817][ T7241] EXT4-fs (loop4): Remounting filesystem read-only [ 50.935867][ T7262] netlink: 8 bytes leftover after parsing attributes in process `syz.6.873'. [ 51.133142][ T7289] netlink: 'syz.6.877': attribute type 1 has an invalid length. [ 51.133171][ T7289] netlink: 'syz.6.877': attribute type 2 has an invalid length. [ 51.324644][ T7316] FAULT_INJECTION: forcing a failure. [ 51.324644][ T7316] name fail_futex, interval 1, probability 0, space 0, times 1 [ 51.327068][ T7316] CPU: 0 UID: 0 PID: 7316 Comm: syz.6.884 Tainted: G L syzkaller #0 PREEMPT [ 51.327091][ T7316] Tainted: [L]=SOFTLOCKUP [ 51.327095][ T7316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 51.327101][ T7316] Call trace: [ 51.327105][ T7316] show_stack+0x2c/0x3c (C) [ 51.327126][ T7316] __dump_stack+0x30/0x40 [ 51.327138][ T7316] dump_stack_lvl+0xd8/0x12c [ 51.327148][ T7316] dump_stack+0x1c/0x28 [ 51.327157][ T7316] should_fail_ex+0x41c/0x590 [ 51.327168][ T7316] should_fail+0x14/0x24 [ 51.327178][ T7316] get_futex_key+0x1ec/0x12b0 [ 51.327187][ T7316] futex_wait_setup+0x58/0x674 [ 51.327195][ T7316] __futex_wait+0x108/0x25c [ 51.327204][ T7316] futex_wait+0x108/0x2c0 [ 51.327212][ T7316] do_futex+0x358/0x3b0 [ 51.327220][ T7316] __arm64_sys_futex+0x2dc/0x410 [ 51.327229][ T7316] invoke_syscall+0x98/0x244 [ 51.327239][ T7316] el0_svc_common+0xec/0x23c [ 51.327248][ T7316] do_el0_svc+0x4c/0x5c [ 51.327258][ T7316] el0_svc+0x64/0x260 [ 51.327268][ T7316] el0t_64_sync_handler+0x48/0x148 [ 51.327277][ T7316] el0t_64_sync+0x198/0x19c [ 51.417972][ T7330] netlink: 44 bytes leftover after parsing attributes in process `syz.7.888'. [ 51.500531][ T7350] set_capacity_and_notify: 11 callbacks suppressed [ 51.500564][ T7350] loop2: detected capacity change from 0 to 256 [ 51.628469][ T7366] bond1: option ad_user_port_key: invalid value (65535) [ 51.628500][ T7366] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 51.634840][ T7366] bond1 (unregistering): Released all slaves [ 51.651262][ T7373] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 51.652920][ T7328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.653165][ T7328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.655575][ T7372] loop2: detected capacity change from 0 to 512 [ 51.659262][ T7372] EXT4-fs (loop2): orphan cleanup on readonly fs [ 51.660869][ T7372] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.905: ea_inode with extended attributes [ 51.663586][ T7372] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 51.666982][ T7372] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.905: error while reading EA inode 11 err=-117 [ 51.667019][ T7372] loop2: lost filesystem error report for type 5 error -117 [ 51.669019][ C0] EXT4-fs (loop2): error count since last fsck: 2 [ 51.669033][ C0] EXT4-fs (loop2): initial error at time 51: ext4_xattr_inode_iget:441: inode 11 [ 51.669050][ C0] EXT4-fs (loop2): last error at time 51: ext4_xattr_inode_iget:446 [ 51.688770][ T7372] EXT4-fs (loop2): 1 orphan inode deleted [ 52.197187][ T7408] loop6: detected capacity change from 0 to 8192 [ 52.328996][ T4721] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 52.488718][ T4721] Bluetooth: hci0: command tx timeout [ 52.526947][ T7424] netlink: 'syz.5.919': attribute type 11 has an invalid length. [ 52.526979][ T7424] netlink: 20 bytes leftover after parsing attributes in process `syz.5.919'. [ 52.527016][ T7424] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 52.599408][ T7428] loop2: detected capacity change from 0 to 1024 [ 52.642516][ T7428] EXT4-fs error (device loop2): ext4_generic_delete_entry:2673: inode #12: block 7: comm syz.2.921: bad entry in directory: rec_len is smaller than minimal - offset=16, inode=14, rec_len=8, size=56 fake=0 [ 52.655382][ T7428] EXT4-fs error (device loop2) in ext4_delete_inline_entry:1705: Corrupt filesystem [ 52.800839][ T7449] loop5: detected capacity change from 0 to 512 [ 52.824197][ T7449] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 52.831433][ T7449] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a84ec01c, mo2=0102] [ 52.832820][ T7449] System zones: 0-2, 18-18, 34-35 [ 52.890872][ T5091] EXT4-fs error (device loop5): ext4_ext_check_inode:521: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 52.895074][ T5091] EXT4-fs error (device loop5): ext4_ext_check_inode:521: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 53.332034][ T30] kauditd_printk_skb: 537 callbacks suppressed [ 53.333236][ T30] audit: type=1400 audit(53.310:553): lsm=SMACK fn=smack_inode_permission action=denied subject="y" object="_" requested=wx pid=7478 comm="syz.6.940" name="181" dev="tmpfs" ino=958 [ 53.474115][ T30] audit: type=1400 audit(53.440:554): lsm=SMACK fn=smack_inode_getxattr action=denied subject="_" object="lowerdir" requested=r pid=7495 comm="syz.6.948" name="file1" dev="tmpfs" ino=978 [ 53.541347][ T30] audit: type=1400 audit(53.520:555): lsm=SMACK fn=smack_inode_rmdir action=denied subject="_" object="lowerdir" requested=w pid=7504 comm="syz.4.953" name="file0" dev="tmpfs" ino=901 [ 53.545919][ T7500] loop7: detected capacity change from 0 to 4096 [ 53.561463][ T7500] EXT4-fs: inline encryption not supported [ 53.567987][ T4729] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 53.569550][ T4729] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 53.571053][ T4729] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 53.571475][ T7500] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 53.571493][ T7500] EXT4-fs (loop7): Test dummy encryption mode enabled [ 53.575117][ T7500] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 53.575154][ T7500] System zones: 0-5 [ 53.576002][ T4729] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 53.584667][ T4729] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 53.641038][ T1059] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.701210][ T7517] loop6: detected capacity change from 0 to 2048 [ 53.731047][ T30] audit: type=1326 audit(53.710:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7522 comm="syz.7.957" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8b79028 code=0x7ffc0000 [ 53.735539][ T30] audit: type=1326 audit(53.710:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7522 comm="syz.7.957" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8b79028 code=0x7ffc0000 [ 53.740246][ T30] audit: type=1326 audit(53.720:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7522 comm="syz.7.957" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8b79028 code=0x7ffc0000 [ 53.745119][ T30] audit: type=1326 audit(53.720:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7522 comm="syz.7.957" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8b79028 code=0x7ffc0000 [ 53.749864][ T30] audit: type=1326 audit(53.730:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7522 comm="syz.7.957" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffffb8b79028 code=0x7ffc0000 [ 53.754485][ T30] audit: type=1326 audit(53.730:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7522 comm="syz.7.957" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8b79028 code=0x7ffc0000 [ 53.758805][ T30] audit: type=1326 audit(53.740:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7522 comm="syz.7.957" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8b79028 code=0x7ffc0000 [ 53.815357][ T7517] Alternate GPT is invalid, using primary GPT. [ 53.815417][ T7517] loop6: p1 p2 p3 [ 53.836486][ T1059] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.926646][ T4705] udevd[4705]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 53.931852][ T7540] netlink: 'syz.6.965': attribute type 13 has an invalid length. [ 53.931881][ T7540] netlink: 20 bytes leftover after parsing attributes in process `syz.6.965'. [ 53.931910][ T7540] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 53.952761][ T5481] udevd[5481]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 53.991499][ T1059] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.997670][ T7552] loop2: detected capacity change from 0 to 128 [ 54.002479][ T7552] FAT-fs (loop2): invalid media value (0x00) [ 54.002514][ T7552] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 54.002541][ T7552] FAT-fs (loop2): Can't find a valid FAT filesystem [ 54.009871][ T4705] udevd[4705]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 54.081053][ T1059] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.151640][ T7565] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 54.158648][ T7569] netlink: 'syz.2.978': attribute type 7 has an invalid length. [ 54.195960][ T7581] netlink: 'syz.7.981': attribute type 2 has an invalid length. [ 54.214418][ T7506] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.230377][ T7506] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.234269][ T7506] bridge_slave_0: entered allmulticast mode [ 54.235893][ T7506] bridge_slave_0: entered promiscuous mode [ 54.242598][ T7506] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.246557][ T7506] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.248054][ T7506] bridge_slave_1: entered allmulticast mode [ 54.254949][ T7506] bridge_slave_1: entered promiscuous mode [ 54.301801][ T7506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.302754][ T7506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.307041][ T7590] loop7: detected capacity change from 0 to 2048 [ 54.371691][ T7600] overlayfs: invalid origin (0000) [ 54.376841][ T7603] netlink: 64 bytes leftover after parsing attributes in process `syz.6.990'. [ 54.399844][ T7506] team0: Port device team_slave_0 added [ 54.400697][ T7506] team0: Port device team_slave_1 added [ 54.482300][ T7617] loop7: detected capacity change from 0 to 128 [ 54.484588][ T1059] bridge_slave_1: left allmulticast mode [ 54.484628][ T1059] bridge_slave_1: left promiscuous mode [ 54.484717][ T1059] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.487037][ T1059] bridge_slave_0: left allmulticast mode [ 54.487049][ T1059] bridge_slave_0: left promiscuous mode [ 54.487118][ T1059] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.532798][ T7617] fscrypt (loop7, inode 12): Direct key flag not allowed with different contents and filenames modes [ 54.548177][ T7622] EXT4-fs: inline encryption not supported [ 54.614070][ T1059] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 54.630952][ T4714] EXT4-fs error (device loop2): ext4_readdir:265: inode #2: block 16: comm syz-executor: path /209/file1: bad entry in directory: directory entry overrun - offset=876, inode=0, rec_len=1024, size=1024 fake=0 [ 54.636696][ T1059] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 54.644518][ T4714] EXT4-fs error (device loop2): ext4_readdir:265: inode #11: block 37: comm syz-executor: path /209/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 54.649162][ T4714] EXT4-fs error (device loop2): ext4_empty_dir:3125: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 54.654239][ T4714] EXT4-fs error (device loop2): ext4_readdir:265: inode #11: block 37: comm syz-executor: path /209/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 54.659578][ T1059] bond0 (unregistering): Released all slaves [ 54.660972][ T4714] EXT4-fs error (device loop2): ext4_empty_dir:3125: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 54.665443][ T4714] EXT4-fs error (device loop2): ext4_readdir:265: inode #11: block 37: comm syz-executor: path /209/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 54.674302][ T7506] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.674332][ T7506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.674352][ T7506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.674970][ T7506] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.674984][ T7506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.675003][ T7506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.693167][ T4714] EXT4-fs error (device loop2): ext4_empty_dir:3125: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 54.698819][ T4714] EXT4-fs error (device loop2): ext4_readdir:265: inode #11: block 37: comm syz-executor: path /209/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 54.707718][ T4714] EXT4-fs error (device loop2): ext4_empty_dir:3125: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 54.718777][ T7629] EXT4-fs (loop7): Test dummy encryption mode enabled [ 54.720206][ T4714] EXT4-fs error (device loop2): ext4_readdir:265: inode #11: block 37: comm syz-executor: path /209/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 54.732648][ T1059] tipc: Left network mode [ 54.733155][ T4401] 8021q: adding VLAN 0 to HW filter on device eth12 [ 54.756164][ T7506] hsr_slave_0: entered promiscuous mode [ 54.756507][ T7506] hsr_slave_1: entered promiscuous mode [ 54.762459][ T7629] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 54.906986][ T7647] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1004'. [ 54.907387][ T7647] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1004'. [ 54.989609][ T7652] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 55.030505][ T4714] bridge0: port 3(syz_tun) entered disabled state [ 55.051490][ T4714] syz_tun (unregistering): left allmulticast mode [ 55.051520][ T4714] syz_tun (unregistering): left promiscuous mode [ 55.051556][ T4714] bridge0: port 3(syz_tun) entered disabled state [ 55.102246][ T1059] hsr_slave_0: left promiscuous mode [ 55.103386][ T1059] hsr_slave_1: left promiscuous mode [ 55.103830][ T1059] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.103843][ T1059] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.107010][ T1059] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.107169][ T1059] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.117701][ T1059] veth1_macvtap: left promiscuous mode [ 55.117743][ T1059] veth0_macvtap: left promiscuous mode [ 55.117814][ T1059] veth1_vlan: left promiscuous mode [ 55.117852][ T1059] veth0_vlan: left promiscuous mode [ 55.128478][ T7661] Injecting memory failure for pfn 0x123403 at process virtual address 0x20003000 [ 55.135703][ T7661] Memory failure: 0x123403: recovery action for dirty LRU page: Recovered [ 55.264072][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 55.266007][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 55.268366][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 55.270244][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 55.271783][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 55.275063][ T1059] team0 (unregistering): Port device team_slave_1 removed [ 55.290677][ T1059] team0 (unregistering): Port device team_slave_0 removed [ 55.355856][ T4401] 8021q: adding VLAN 0 to HW filter on device eth13 [ 55.365996][ T7506] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 55.369532][ T7506] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 55.369887][ T7506] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 55.376868][ T7506] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 55.380616][ T7506] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 55.384731][ T7506] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 55.386426][ T7506] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 55.394375][ T7506] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 55.443357][ T7506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.447973][ T7506] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.454425][ T4250] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.454465][ T4250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.455001][ T4250] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.455019][ T4250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.497034][ T7506] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.608821][ T4729] Bluetooth: hci2: command tx timeout [ 55.699007][ T4401] 8021q: adding VLAN 0 to HW filter on device eth15 [ 55.790051][ T7506] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.835050][ T7754] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1024'. [ 55.890326][ T1059] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.972924][ T7757] tap0: tun_chr_ioctl cmd 1074025677 [ 55.974242][ T7757] tap0: linktype set to 776 [ 55.985488][ T7677] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.987027][ T7677] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.988548][ T7677] bridge_slave_0: entered allmulticast mode [ 55.990553][ T7677] bridge_slave_0: entered promiscuous mode [ 55.992783][ T7677] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.994122][ T7677] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.995568][ T7677] bridge_slave_1: entered allmulticast mode [ 55.999364][ T7677] bridge_slave_1: entered promiscuous mode [ 56.016103][ T1059] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.079796][ T7677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.086304][ T7677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.115120][ T7677] team0: Port device team_slave_0 added [ 56.122966][ T7677] team0: Port device team_slave_1 added [ 56.140042][ T7790] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1034'. [ 56.152336][ T1059] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.164859][ T4401] 8021q: adding VLAN 0 to HW filter on device eth14 [ 56.183366][ T7790] macvlan0: entered promiscuous mode [ 56.183489][ T7790] netlink: 'syz.6.1034': attribute type 1 has an invalid length. [ 56.183515][ T7790] netlink: 'syz.6.1034': attribute type 2 has an invalid length. [ 56.183529][ T7790] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1034'. [ 56.191189][ T7506] veth0_vlan: entered promiscuous mode [ 56.193329][ T7506] veth1_vlan: entered promiscuous mode [ 56.208815][ T7677] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.208842][ T7677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.208867][ T7677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.209467][ T7677] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.209475][ T7677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.209490][ T7677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.227396][ T7800] EXT4-fs: inline encryption not supported [ 56.230978][ T7677] hsr_slave_0: entered promiscuous mode [ 56.232429][ T7677] hsr_slave_1: entered promiscuous mode [ 56.233294][ T7800] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 56.233489][ T7800] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.1038: invalid indirect mapped block 2683928664 (level 1) [ 56.233505][ T7800] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 56.234692][ T7800] EXT4-fs (loop6): 1 truncate cleaned up [ 56.241712][ T7677] debugfs: 'hsr0' already exists in 'hsr' [ 56.242710][ T7677] Cannot create hsr debugfs directory [ 56.255109][ T7800] EXT4-fs error (device loop6): ext4_get_branch:178: inode #13: block 1803188595: comm syz.6.1038: invalid block [ 56.262882][ T7800] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.1038: invalid indirect mapped block 2054779762 (level 0) [ 56.274962][ T1059] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.343716][ T7808] EXT4-fs: Ignoring removed nomblk_io_submit option [ 56.380473][ T7506] veth0_macvtap: entered promiscuous mode [ 56.396118][ T7808] EXT4-fs: Ignoring removed bh option [ 56.407986][ T7814] can0: slcan on ttyS3. [ 56.411329][ T7808] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000. [ 56.420994][ T7506] veth1_macvtap: entered promiscuous mode [ 56.450142][ T7814] can0 (unregistered): slcan off ttyS3. [ 56.462904][ T7506] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.470340][ T7506] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.551753][ T4151] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.551806][ T4151] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.551828][ T4151] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.551845][ T4151] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.594494][ T7824] tun0: tun_chr_ioctl cmd 1074812118 [ 56.606823][ T1059] bridge_slave_1: left allmulticast mode [ 56.606854][ T1059] bridge_slave_1: left promiscuous mode [ 56.606935][ T1059] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.613749][ T1059] bridge_slave_0: left allmulticast mode [ 56.613780][ T1059] bridge_slave_0: left promiscuous mode [ 56.613857][ T1059] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.652408][ T7835] set_capacity_and_notify: 5 callbacks suppressed [ 56.653669][ T7835] loop7: detected capacity change from 0 to 2048 [ 56.664897][ T7839] loop6: detected capacity change from 0 to 128 [ 56.711630][ T1059] batman_adv: batadv0: Removing interface: ip6gretap1 [ 56.797094][ T1059] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 56.822040][ T1059] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 56.859826][ T1059] bond0 (unregistering): Released all slaves [ 56.903031][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.903062][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.903562][ T1059] tipc: Disabling bearer [ 56.903640][ T1059] tipc: Left network mode [ 56.908148][ T7677] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 56.927453][ T7677] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 56.927790][ T7677] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 56.942199][ T7677] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 56.943367][ T7677] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 56.947503][ T7677] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 56.957964][ T4151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.957994][ T4151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.960022][ T7867] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 57.010453][ T7876] fuse: fd is not a fuse device [ 57.049202][ T4721] Bluetooth: hci0: command 0x2016 tx timeout [ 57.053375][ T7677] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 57.055983][ T7677] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 57.195332][ T7906] netlink: 316 bytes leftover after parsing attributes in process `syz.8.952'. [ 57.227494][ T7912] nfs: Deprecated parameter 'nointr' [ 57.267888][ T1059] hsr_slave_0: left promiscuous mode [ 57.274339][ T1059] hsr_slave_1: left promiscuous mode [ 57.274616][ T1059] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.274643][ T1059] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 57.280796][ T1059] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.282086][ T1059] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 57.289136][ T4729] Bluetooth: hci1: command tx timeout [ 57.305640][ T1059] veth1_macvtap: left promiscuous mode [ 57.306754][ T1059] veth0_macvtap: left promiscuous mode [ 57.306826][ T1059] veth1_vlan: left promiscuous mode [ 57.306865][ T1059] veth0_vlan: left promiscuous mode [ 57.343099][ T7927] loop8: detected capacity change from 0 to 128 [ 57.360600][ T7927] fscrypt (loop8, inode 12): Can't use IV_INO_LBLK_64 policy on filesystem 'loop8' because it doesn't have stable inode numbers [ 57.454160][ T7937] loop8: detected capacity change from 0 to 512 [ 57.457402][ T7937] EXT4-fs: Ignoring removed i_version option [ 57.484319][ T1059] team0 (unregistering): Port device team_slave_1 removed [ 57.491609][ T1059] team0 (unregistering): Port device team_slave_0 removed [ 57.576507][ T4401] 8021q: adding VLAN 0 to HW filter on device eth16 [ 57.620234][ T7949] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1092'. [ 57.620269][ T7949] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1092'. [ 57.620296][ T7949] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1092'. [ 57.638785][ T7677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.644318][ T7677] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.647807][ T3821] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.647855][ T3821] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.657524][ T7677] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.658888][ T7677] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.661547][ T3821] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.661577][ T3821] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.689341][ T4729] Bluetooth: hci2: command tx timeout [ 57.810579][ T7973] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1100'. [ 57.848393][ T7983] loop8: detected capacity change from 0 to 256 [ 57.884119][ T7983] FAT-fs (loop8): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 57.884153][ T7983] FAT-fs (loop8): Filesystem has been set read-only [ 57.956555][ T7677] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.067325][ T7677] veth0_vlan: entered promiscuous mode [ 58.073977][ T7677] veth1_vlan: entered promiscuous mode [ 58.083581][ T7677] veth0_macvtap: entered promiscuous mode [ 58.084967][ T7677] veth1_macvtap: entered promiscuous mode [ 58.096570][ T7677] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.106827][ T7677] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.114976][ T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.115083][ T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.115150][ T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.115175][ T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.164516][ T4812] IPVS: starting estimator thread 0... [ 58.199547][ T1365] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.199573][ T1365] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.201218][ T4401] 8021q: adding VLAN 0 to HW filter on device eth18 [ 58.218322][ T3821] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.218354][ T3821] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.259095][ T8030] IPVS: using max 60 ests per chain, 144000 per kthread [ 58.276986][ T8041] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1120'. [ 58.305625][ T8047] loop8: detected capacity change from 0 to 512 [ 58.307566][ T8047] EXT4-fs (loop8): Test dummy encryption mode enabled [ 58.321707][ T8047] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #15: comm syz.8.1122: inode has both inline data and extents flags [ 58.321747][ T8047] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 58.324460][ T8047] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.1122: couldn't read orphan inode 15 (err -117) [ 58.324480][ T8047] loop8: lost filesystem error report for type 5 error -117 [ 58.372495][ T8052] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1123'. [ 58.377712][ T8058] loop9: detected capacity change from 0 to 256 [ 58.381827][ T8054] loop4: detected capacity change from 0 to 512 [ 58.383864][ T8054] EXT4-fs: Ignoring removed nobh option [ 58.396575][ T8058] FAT-fs (loop9): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 58.405583][ T8058] FAT-fs (loop9): Filesystem has been set read-only [ 58.506969][ T8069] loop7: detected capacity change from 0 to 8192 [ 58.548993][ T8069] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 58.575557][ T8079] loop4: detected capacity change from 0 to 1024 [ 58.836902][ T4401] 8021q: adding VLAN 0 to HW filter on device eth17 [ 58.948461][ T8139] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #15: comm syz.8.1156: inode has both inline data and extents flags [ 58.948499][ T8139] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 58.948610][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 58.948619][ C1] EXT4-fs (loop8): initial error at time 58: ext4_orphan_get:1399: inode 15 [ 58.948633][ C1] EXT4-fs (loop8): last error at time 58: ext4_orphan_get:1399: inode 15 [ 58.959331][ T8139] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.1156: couldn't read orphan inode 15 (err -117) [ 58.959354][ T8139] loop8: lost filesystem error report for type 5 error -117 [ 59.129103][ T4729] Bluetooth: hci0: command 0x2016 tx timeout [ 59.166501][ T8174] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1168'. [ 59.211409][ T4401] 8021q: adding VLAN 0 to HW filter on device eth19 [ 59.256080][ T8185] can0: slcan on ptm0. [ 59.299144][ T8191] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 59.301842][ T8191] EXT4-fs error (device loop7): ext4_ext_check_inode:521: inode #3: comm syz.7.1175: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 59.301889][ T8191] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 59.302001][ T8191] EXT4-fs error (device loop7): ext4_quota_enable:7235: comm syz.7.1175: Bad quota inode: 3, type: 0 [ 59.302014][ T8191] loop7: lost filesystem error report for type 5 error -117 [ 59.302323][ T8191] EXT4-fs warning (device loop7): ext4_enable_quotas:7276: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 59.302506][ T8191] EXT4-fs (loop7): mount failed [ 59.329884][ T8181] can0 (unregistered): slcan off ptm0. [ 59.369579][ T4721] Bluetooth: hci1: command tx timeout [ 59.710393][ T8240] EXT4-fs: inline encryption not supported [ 59.723526][ T8240] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 59.728102][ T8240] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.1196: invalid indirect mapped block 2683928664 (level 1) [ 59.728138][ T8240] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 59.731126][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 59.731139][ C1] EXT4-fs (loop7): initial error at time 59: ext4_free_branches:1023: inode 13 [ 59.731155][ C1] EXT4-fs (loop7): last error at time 59: ext4_free_branches:1023: inode 13 [ 59.742988][ T8240] EXT4-fs (loop7): 1 truncate cleaned up [ 59.768674][ T4721] Bluetooth: hci2: command tx timeout [ 59.772553][ T8240] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.1196: invalid indirect mapped block 4294967295 (level 0) [ 59.775861][ T8240] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.1196: invalid indirect mapped block 65536 (level 1) [ 59.796336][ T8251] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1199'. [ 59.806940][ T8252] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 59.815009][ T8252] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #16: comm syz.9.1200: invalid indirect mapped block 32768 (level 2) [ 59.817554][ T8252] loop9: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 59.817969][ T8252] EXT4-fs (loop9): Remounting filesystem read-only [ 59.819615][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 59.819632][ C1] EXT4-fs (loop9): initial error at time 59: ext4_free_branches:1023: inode 16 [ 59.819649][ C1] EXT4-fs (loop9): last error at time 59: ext4_free_branches:1023: inode 16 [ 59.828034][ T8252] EXT4-fs (loop9): 1 orphan inode deleted [ 59.828064][ T8252] EXT4-fs (loop9): 1 truncate cleaned up [ 59.864207][ T8252] EXT4-fs (loop9): shut down requested (2) [ 59.921957][ T8265] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1207'. [ 59.978049][ T8257] EXT4-fs: Cannot change journaled quota options when quota turned on [ 59.982093][ T8273] PM: suspend entry (deep) [ 59.992763][ T8274] EXT4-fs error (device loop9): dx_probe:791: inode #2: comm syz.9.1209: Attempting to read directory block (0) that is past i_size (256) [ 59.992803][ T8274] loop9: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 59.994022][ T8274] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117 [ 60.007814][ T3994] Filesystems sync: 0.025 seconds [ 60.028837][ T8276] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #15: comm syz.7.1211: inode has both inline data and extents flags [ 60.028869][ T8276] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 60.035559][ T8276] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.1211: couldn't read orphan inode 15 (err -117) [ 60.035600][ T8276] loop7: lost filesystem error report for type 5 error -117 [ 60.372110][ T8322] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 60.386911][ T8322] EXT4-fs error (device loop6): ext4_iget_extra_inode:5180: inode #15: comm syz.6.1231: corrupted in-inode xattr: e_value size too large [ 60.386940][ T8322] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 60.390024][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 60.390042][ C1] EXT4-fs (loop6): initial error at time 316: ext4_iget_extra_inode:5180: inode 15 [ 60.390058][ C1] EXT4-fs (loop6): last error at time 316: ext4_iget_extra_inode:5180: inode 15 [ 60.393232][ T8322] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.1231: couldn't read orphan inode 15 (err -117) [ 60.393255][ T8322] loop6: lost filesystem error report for type 5 error -117 [ 60.423624][ T8327] tun0: tun_chr_ioctl cmd 1074025680 [ 60.754501][ T8366] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1250'. [ 60.803829][ T8273] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 60.806970][ T8273] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 60.807055][ T8273] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 60.832657][ T8273] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 60.834458][ T8273] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 60.834551][ T8273] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 60.837781][ T8273] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 60.840700][ T8273] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 60.840768][ T8273] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 60.877588][ T8273] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 60.888427][ T8273] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 60.888486][ T8273] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 60.903264][ T8273] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 61.003163][ T8390] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 61.206263][ T8423] EXT4-fs: inline encryption not supported [ 61.216368][ T8423] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 61.217362][ T8423] EXT4-fs error (device loop8): ext4_iget_extra_inode:5180: inode #15: comm syz.8.1277: corrupted in-inode xattr: e_value size too large [ 61.217378][ T8423] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 61.217901][ T8423] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.1277: couldn't read orphan inode 15 (err -117) [ 61.217920][ T8423] loop8: lost filesystem error report for type 5 error -117 [ 61.304684][ T8427] FAT-fs (loop8): Directory bread(block 1285) failed [ 61.304723][ T8427] FAT-fs (loop8): Directory bread(block 1286) failed [ 61.304869][ T8427] FAT-fs (loop8): Directory bread(block 1287) failed [ 61.304913][ T8427] FAT-fs (loop8): Directory bread(block 1288) failed [ 61.308189][ T8427] FAT-fs (loop8): Directory bread(block 1285) failed [ 61.308204][ T8427] FAT-fs (loop8): Directory bread(block 1286) failed [ 61.308215][ T8427] FAT-fs (loop8): Directory bread(block 1287) failed [ 61.308240][ T8427] FAT-fs (loop8): Directory bread(block 1288) failed [ 61.308263][ T8427] FAT-fs (loop8): Directory bread(block 1285) failed [ 61.308275][ T8427] FAT-fs (loop8): Directory bread(block 1286) failed [ 61.446367][ T8443] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 61.449801][ T8443] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 61.449849][ T8443] System zones: 1-12 [ 61.452530][ T8443] EXT4-fs error (device loop6): ext4_orphan_get:1425: comm syz.6.1286: bad orphan inode 16 [ 61.452560][ T8443] loop6: lost filesystem error report for type 5 error -117 [ 61.454354][ T8443] ext4_test_bit(bit=15, block=4) = 0 [ 61.457022][ T8443] EXT4-fs (loop6): 1 orphan inode deleted [ 61.624123][ T8467] EXT4-fs: Ignoring removed nobh option [ 61.685601][ T8475] set_capacity_and_notify: 14 callbacks suppressed [ 61.685640][ T8475] loop6: detected capacity change from 0 to 512 [ 61.737213][ T8481] loop6: detected capacity change from 0 to 512 [ 61.848513][ T8497] loop7: detected capacity change from 0 to 128 [ 61.907525][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 61.907809][ T30] audit: type=1400 audit(317.875:573): lsm=SMACK fn=smack_inode_set_acl action=denied subject="_" object="lowerdir" requested=w pid=8504 comm="syz.7.1310" name="file1" dev="tmpfs" ino=1231 [ 61.924355][ T8507] loop6: detected capacity change from 0 to 4096 [ 61.925137][ T8507] EXT4-fs (loop6): Test dummy encryption mode enabled [ 62.027100][ T8518] loop7: detected capacity change from 0 to 1024 [ 62.029467][ T8518] EXT4-fs: Ignoring removed bh option [ 62.030949][ T8518] EXT4-fs: Ignoring removed bh option [ 62.049150][ T8518] EXT4-fs (loop7): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 62.068897][ T8518] EXT4-fs error (device loop7): empty_inline_dir:1778: inode #12: block 7: comm syz.7.1317: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 62.074421][ T8518] EXT4-fs (loop7): Remounting filesystem read-only [ 62.076063][ T8518] EXT4-fs warning (device loop7): empty_inline_dir:1785: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 62.088846][ T4729] Bluetooth: hci3: command 0x040f tx timeout [ 62.107703][ T4729] Bluetooth: hci0: unexpected event for opcode 0x0c5b [ 62.201103][ T8536] loop7: detected capacity change from 0 to 8 [ 62.217359][ T4729] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 62.379951][ T8556] loop6: detected capacity change from 0 to 2048 [ 62.418065][ T8560] netlink: 'syz.8.1336': attribute type 34 has an invalid length. [ 62.520548][ T8569] loop8: detected capacity change from 0 to 2048 [ 62.557351][ T8552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.558342][ T8569] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.1340: bg 0: block 345: padding at end of block bitmap is not set [ 62.560823][ T8573] loop6: detected capacity change from 0 to 256 [ 62.561677][ T8552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.565386][ T8569] fs-verity (loop8, inode 13): Error -28 writing Merkle tree block 0 [ 62.565415][ T8569] fs-verity (loop8, inode 13): Error -28 building Merkle tree [ 62.710648][ T8588] netlink: 'syz.8.1347': attribute type 6 has an invalid length. [ 62.808675][ T4721] Bluetooth: hci4: command 0x0c1a tx timeout [ 62.821743][ T8603] __nla_validate_parse: 4 callbacks suppressed [ 62.821782][ T8603] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1354'. [ 62.823879][ T8603] bridge0: port 3(batadv1) entered blocking state [ 62.823947][ T8603] bridge0: port 3(batadv1) entered disabled state [ 62.824006][ T8603] batadv1: entered allmulticast mode [ 62.824556][ T8603] batadv1: entered promiscuous mode [ 62.900641][ T4721] Bluetooth: hci2: command 0x0c1a tx timeout [ 63.031885][ T8630] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1366'. [ 63.125106][ T30] audit: type=1400 audit(319.095:574): lsm=SMACK fn=smack_inode_permission action=denied subject="_" object="lo" requested=r pid=8638 comm="syz.7.1371" name="file1" dev="tmpfs" ino=1299 [ 63.142411][ T8641] netlink: 'syz.8.1370': attribute type 3 has an invalid length. [ 63.275237][ T8659] xt_hashlimit: size too large, truncated to 1048576 [ 63.327883][ T8666] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1382'. [ 63.341969][ T3994] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 63.341998][ T3994] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 63.348952][ T8666] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.349719][ T8666] bridge_slave_1: left allmulticast mode [ 63.349735][ T8666] bridge_slave_1: left promiscuous mode [ 63.349801][ T8666] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.438341][ T8677] loop7: detected capacity change from 0 to 8192 [ 63.447508][ T8680] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1389'. [ 63.462206][ T8681] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 63.462243][ T8681] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 63.463447][ T8681] jbd2_journal_init_inode: Cannot locate journal superblock [ 63.463455][ T8681] EXT4-fs (loop8): Could not load journal inode [ 63.521071][ T30] audit: type=1400 audit(319.495:575): lsm=SMACK fn=smack_inode_permission action=denied subject="y" object="_" requested=rw pid=8684 comm="syz.6.1391" name="video7" dev="devtmpfs" ino=836 [ 63.778640][ T8727] syz_tun: entered allmulticast mode [ 63.779318][ T8726] syz_tun: left allmulticast mode [ 63.844929][ T8735] EXT4-fs: Ignoring removed nomblk_io_submit option [ 63.999988][ T8758] EXT4-fs: Ignoring removed nobh option [ 64.000234][ T8758] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 64.007923][ T8758] EXT4-fs (loop8): 1 truncate cleaned up [ 64.133701][ T8775] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 64.133756][ T8775] System zones: 1-12 [ 64.136275][ T8775] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #12: comm syz.6.1431: missing EA_INODE flag [ 64.136301][ T8775] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 64.138825][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 64.138854][ C1] EXT4-fs (loop6): initial error at time 576: ext4_xattr_inode_iget:441: inode 12 [ 64.138893][ C1] EXT4-fs (loop6): last error at time 576: ext4_xattr_inode_iget:441: inode 12 [ 64.146879][ T8775] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.1431: error while reading EA inode 12 err=-117 [ 64.147786][ T8775] loop6: lost filesystem error report for type 5 error -117 [ 64.158201][ T8775] EXT4-fs (loop6): 1 orphan inode deleted [ 64.173859][ T8775] fscrypt (loop6, inode 15): Unsupported log2_data_unit_size in encryption policy: 227 [ 64.241586][ T8785] FAT-fs (loop7): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 64.241617][ T8785] FAT-fs (loop7): Filesystem has been set read-only [ 64.245420][ T8791] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1438'. [ 64.281444][ T8791] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1438'. [ 64.291724][ T8794] netlink: 'syz.6.1440': attribute type 8 has an invalid length. [ 64.353565][ T8806] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1444'. [ 64.355644][ T8806] macvlan0: left promiscuous mode [ 64.356813][ T8806] netlink: 'syz.6.1444': attribute type 2 has an invalid length. [ 64.358379][ T8806] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1444'. [ 64.432303][ T8817] ip_tables: iptables: counters copy to user failed while replacing table [ 64.493345][ T1595] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.494615][ T1595] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.499834][ T8273] Freezing user space processes [ 64.504794][ T866] cfg80211: failed to load regulatory.db [ 64.523510][ T8273] Freezing user space processes completed (elapsed 0.023 seconds) [ 64.523588][ T8273] OOM killer disabled. [ 64.523593][ T8273] Freezing remaining freezable tasks [ 64.525821][ T8273] Freezing remaining freezable tasks completed (elapsed 0.002 seconds) [ 64.525834][ T8273] printk: Suspending console(s) (use no_console_suspend to debug) [ 64.653009][ T8273] vhci_hcd vhci_hcd.15: suspend vhci_hcd [ 64.653061][ T8273] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 64.653116][ T8273] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 64.653161][ T8273] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 64.653206][ T8273] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 64.653250][ T8273] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 64.653292][ T8273] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 64.653335][ T8273] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 64.653378][ T8273] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 64.653420][ T8273] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 64.653462][ T8273] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 64.653504][ T8273] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 64.653544][ T8273] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 64.653586][ T8273] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 64.653627][ T8273] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 64.653669][ T8273] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 64.866563][ T8273] Disabling non-boot CPUs ... [ 64.873816][ T8273] psci: CPU1 killed (polled 0 ms) [ 64.880687][ T8273] ------------[ cut here ]------------ [ 64.880687][ T8273] WARNING: kernel/context_tracking.c:120 at ct_kernel_exit+0x1b4/0x1f4, CPU#0: syz.4.1210/8273 [ 64.880687][ T8273] Modules linked in: [ 64.880687][ T8273] CPU: 0 UID: 0 PID: 8273 Comm: syz.4.1210 Tainted: G L syzkaller #0 PREEMPT [ 64.880687][ T8273] Tainted: [L]=SOFTLOCKUP [ 64.880687][ T8273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 64.880687][ T8273] pstate: 634003c5 (nZCv DAIF +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 64.880687][ T8273] pc : ct_kernel_exit+0x1b4/0x1f4 [ 64.880687][ T8273] lr : ct_kernel_exit+0x13c/0x1f4 [ 64.880687][ T8273] sp : ffff80009ad075f0 [ 64.880687][ T8273] x29: ffff80009ad075f0 x28: dfff800000000000 x27: ffff80009ad07660 [ 64.880687][ T8273] x26: 00000000000000c0 x25: ffff7000135a0ecc x24: ffff800088abf998 [ 64.880687][ T8273] x23: ffff800088b0b6a0 x22: ffff0001ade38998 x21: ffff0001ade38998 [ 64.880687][ T8273] x20: 0000000000000000 x19: 0000000000000005 x18: 00000000ffffffff [ 64.880687][ T8273] x17: ffff80008a791000 x16: 0000000000000006 x15: ffff80008a31ada0 [ 64.880687][ T8273] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 64.880687][ T8273] x11: 0000000000000000 x10: ffff600035bc7135 x9 : dfff800000000000 [ 64.880687][ T8273] x8 : 0000000000000040 x7 : 0000000000000000 x6 : 000000000000003f [ 64.880687][ T8273] x5 : 0000000000000040 x4 : 0000000000000008 x3 : ffff8000868e6858 [ 64.880687][ T8273] x2 : 0000000000000000 x1 : 0000000000000004 x0 : 0000000000000001 [ 64.880687][ T8273] Call trace: [ 64.880687][ T8273] ct_kernel_exit+0x1b4/0x1f4 (P) [ 64.880687][ T8273] ct_idle_enter+0x24/0x38 [ 64.880687][ T8273] cpu_suspend+0x264/0x474 [ 64.880687][ T8273] psci_system_suspend_enter+0x4c/0x80 [ 64.880687][ T8273] suspend_devices_and_enter+0x88c/0xd0c [ 64.880687][ T8273] pm_suspend+0x498/0x698 [ 64.880687][ T8273] state_store+0x14c/0x1fc [ 64.880687][ T8273] kobj_attr_store+0x6c/0x90 [ 64.880687][ T8273] sysfs_kf_write+0xe0/0x108 [ 64.880687][ T8273] kernfs_fop_write_iter+0x260/0x3b8 [ 64.880687][ T8273] vfs_write+0x51c/0xa0c [ 64.880687][ T8273] ksys_write+0x12c/0x228 [ 64.880687][ T8273] __arm64_sys_write+0x7c/0x90 [ 64.880687][ T8273] invoke_syscall+0x98/0x244 [ 64.880687][ T8273] el0_svc_common+0xec/0x23c [ 64.880687][ T8273] do_el0_svc+0x4c/0x5c [ 64.880687][ T8273] el0_svc+0x64/0x260 [ 64.880687][ T8273] el0t_64_sync_handler+0x48/0x148 [ 64.880687][ T8273] el0t_64_sync+0x198/0x19c [ 64.880687][ T8273] irq event stamp: 77682 [ 64.880687][ T8273] hardirqs last enabled at (77681): [] _raw_spin_unlock_irq+0x30/0x80 [ 64.880687][ T8273] hardirqs last disabled at (77682): [] arch_suspend_disable_irqs+0x34/0x4c [ 64.880687][ T8273] softirqs last enabled at (76926): [] handle_softirqs+0xc28/0xd98 [ 64.880687][ T8273] softirqs last disabled at (76303): [] __do_softirq+0x14/0x20 [ 64.880687][ T8273] ---[ end trace 0000000000000000 ]--- [ 64.880687][ T8273] ------------[ cut here ]------------ [ 64.880687][ T8273] WARNING: kernel/context_tracking.c:165 at ct_kernel_enter+0x138/0x170, CPU#0: syz.4.1210/8273 [ 64.880687][ T8273] Modules linked in: [ 64.880687][ T8273] CPU: 0 UID: 0 PID: 8273 Comm: syz.4.1210 Tainted: G W L syzkaller #0 PREEMPT [ 64.880687][ T8273] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 64.880687][ T8273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 64.880687][ T8273] pstate: 600003c5 (nZCv DAIF -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 64.880687][ T8273] pc : ct_kernel_enter+0x138/0x170 [ 64.880687][ T8273] lr : ct_kernel_enter+0xc8/0x170 [ 64.880687][ T8273] sp : ffff80009ad075e0 [ 64.880687][ T8273] x29: ffff80009ad075e0 x28: dfff800000000000 x27: ffff80009ad07660 [ 64.880687][ T8273] x26: 00000000000000c0 x25: ffff7000135a0ecc x24: 0000000100000000 [ 64.880687][ T8273] x23: ffff800088b0b6a0 x22: ffff800088abf998 x21: ffff0001ade38998 [ 64.880687][ T8273] x20: ffff0001ade38998 x19: 0000000000000000 x18: 00000000ffffffff [ 64.880687][ T8273] x17: 000000040044ffff x16: 041000f5b5503510 x15: 0000000000000000 [ 64.880687][ T8273] x14: ffff0000d28d8000 x13: 0000000000000001 x12: 0000000000000000 [ 64.880687][ T8273] x11: 0000000000000000 x10: ffff600035bc7135 x9 : dfff800000000000 [ 64.880687][ T8273] x8 : 0000000000000040 x7 : 0000000000000000 x6 : 000000000000003f [ 64.880687][ T8273] x5 : 0000000000000040 x4 : 0000000000000000 x3 : ffff8000868e6a20 [ 64.880687][ T8273] x2 : 0000000000000000 x1 : 0000000000000004 x0 : 0000000000000001 [ 64.880687][ T8273] Call trace: [ 64.880687][ T8273] ct_kernel_enter+0x138/0x170 (P) [ 64.880687][ T8273] ct_idle_exit+0x24/0x48 [ 64.880687][ T8273] cpu_suspend+0x2dc/0x474 [ 64.880687][ T8273] psci_system_suspend_enter+0x4c/0x80 [ 64.880687][ T8273] suspend_devices_and_enter+0x88c/0xd0c [ 64.880687][ T8273] pm_suspend+0x498/0x698 [ 64.880687][ T8273] state_store+0x14c/0x1fc [ 64.880687][ T8273] kobj_attr_store+0x6c/0x90 [ 64.880687][ T8273] sysfs_kf_write+0xe0/0x108 [ 64.880687][ T8273] kernfs_fop_write_iter+0x260/0x3b8 [ 64.880687][ T8273] vfs_write+0x51c/0xa0c [ 64.880687][ T8273] ksys_write+0x12c/0x228 [ 64.880687][ T8273] __arm64_sys_write+0x7c/0x90 [ 64.880687][ T8273] invoke_syscall+0x98/0x244 [ 64.880687][ T8273] el0_svc_common+0xec/0x23c [ 64.880687][ T8273] do_el0_svc+0x4c/0x5c [ 64.880687][ T8273] el0_svc+0x64/0x260 [ 64.880687][ T8273] el0t_64_sync_handler+0x48/0x148 [ 64.880687][ T8273] el0t_64_sync+0x198/0x19c [ 64.880687][ T8273] irq event stamp: 77684 [ 64.880687][ T8273] hardirqs last enabled at (77683): [] psci_system_suspend_enter+0x4c/0x80 [ 64.880687][ T8273] hardirqs last disabled at (77684): [] psci_system_suspend_enter+0x4c/0x80 [ 64.880687][ T8273] softirqs last enabled at (76926): [] handle_softirqs+0xc28/0xd98 [ 64.880687][ T8273] softirqs last disabled at (76303): [] __do_softirq+0x14/0x20 [ 64.880687][ T8273] ---[ end trace 0000000000000000 ]--- [ 64.880765][ T8273] Enabling non-boot CPUs ... [ 64.881265][ T0] Detected PIPT I-cache on CPU1 [ 64.881298][ T0] GICv3: CPU1: found redistributor 1 region 0:0x00000000080c0000 [ 64.881468][ T0] CPU1: Booted secondary processor 0x0000000001 [0x410fd4f1] [ 64.884908][ T8273] CPU1 is up [ 64.889031][ T4721] Bluetooth: hci4: command 0x0c1a tx timeout [ 65.115689][ T4721] Bluetooth: hci2: command 0x0c1a tx timeout [ 65.131709][ T39] nvme nvme0: 2/0/0 default/read/poll queues [ 65.150047][ T8826] gve 0000:00:00.0 enp0s0: Device link is up. [ 65.418668][ T8273] OOM killer enabled. [ 65.418686][ T8273] Restarting tasks: Starting [ 65.442309][ T8273] Restarting tasks: Done [ 65.442576][ T8273] random: crng reseeded on system resumption [ 65.442697][ T8273] PM: suspend exit [ 65.446159][ T8892] EXT4-fs: Ignoring removed nomblk_io_submit option [ 65.490522][ T8892] EXT4-fs mount: 90 callbacks suppressed [ 65.491947][ T8892] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.503383][ T8892] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.1452: bg 0: block 112: padding at end of block bitmap is not set [ 65.506854][ T8892] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 65.511151][ T8892] EXT4-fs (loop8): This should not happen!! Data will be lost [ 65.511151][ T8892] [ 65.514039][ T8892] EXT4-fs (loop8): Total free blocks count 0 [ 65.514070][ T8892] EXT4-fs (loop8): Free/Dirty block details [ 65.514098][ T8892] EXT4-fs (loop8): free_blocks=0 [ 65.514118][ T8892] EXT4-fs (loop8): dirty_blocks=16 [ 65.514130][ T8892] EXT4-fs (loop8): Block reservation details [ 65.514141][ T8892] EXT4-fs (loop8): i_reserved_data_blocks=1 [ 65.528003][ T7506] EXT4-fs warning (device loop8): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 65.531220][ T7506] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 66.978608][ T4721] Bluetooth: hci4: command 0x0c1a tx timeout [ 67.138595][ T4721] Bluetooth: hci2: command 0x0c1a tx timeout