last executing test programs: 55.073554406s ago: executing program 32 (id=140): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f00000000c0)=0xd95, 0x4019e2060d4e3ac7) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d80), 0x36f, 0x20102, 0x0) 44.054047212s ago: executing program 3 (id=477): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x44000, 0x0) 43.183896141s ago: executing program 3 (id=507): setns(0xc9, 0x0) socket(0x8, 0x5, 0x5) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 43.053516956s ago: executing program 3 (id=513): unshare(0x2a020480) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x12, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 43.031806166s ago: executing program 3 (id=515): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000500)='./file0/../file0/file0\x00', 0x0, 0x2127099, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x84000, 0x0) 43.001389333s ago: executing program 3 (id=517): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv-cbc-aes-sha256-neon\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288d3aaea2bc0000def1260a0000", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000005e40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000002300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x4004) read$alg(r1, &(0x7f0000002340)=""/4120, 0x1018) 42.704024018s ago: executing program 3 (id=519): pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r3 = fanotify_init(0x0, 0x0) fanotify_mark(r3, 0x1, 0x800002b, r2, 0x0) splice(r0, 0x0, r2, 0x0, 0x3, 0x8) write$FUSE_INIT(r1, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x20200, 0x0, 0x0, 0xffff}}, 0x50) 42.690515878s ago: executing program 33 (id=519): pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r3 = fanotify_init(0x0, 0x0) fanotify_mark(r3, 0x1, 0x800002b, r2, 0x0) splice(r0, 0x0, r2, 0x0, 0x3, 0x8) write$FUSE_INIT(r1, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x20200, 0x0, 0x0, 0xffff}}, 0x50) 39.517139644s ago: executing program 0 (id=589): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60e98dc258ded60aee45b04b15db386", 0x30) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000002940)=[{0x0, 0x0, &(0x7f0000003dc0)=[{&(0x7f0000000500)="1b54beefdb37f75318510ca6025213c6788499c98b9f0e44fbf86f9f5723d4dd85b291e05f5e2aff1bf823e761dd38fed3c9d4fd078734acf85dae7e65c031996462d8dd5a15a1ca018d2caf853034fa56ca2546e93a459f675d2eb87a6a770800000000000000f27e32f6198656ad1152d7fd310000000000", 0x79}, {&(0x7f0000002b40)="fb1add96eb5c4c", 0x7}], 0x2, 0x0, 0x0, 0x20000800}], 0x1, 0x4054) recvmsg(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000000)=""/100, 0x64}, {&(0x7f0000000680)=""/133, 0x85}], 0x2, 0x0, 0xfffffffffffffdcf}, 0x40000190) 38.643585079s ago: executing program 0 (id=608): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) socket(0x1d, 0x2, 0x6) socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x8}, {0x7, 0xf}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98) 38.455286925s ago: executing program 0 (id=614): openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x109882, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000080)=0x4, 0x4) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x9) 38.419294697s ago: executing program 0 (id=616): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x380000c, &(0x7f0000000340)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@debug}, {@data_journal}]}, 0x1, 0x437, &(0x7f0000000900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10042, 0x0) r1 = syz_io_uring_setup(0x7db0, &(0x7f0000000540)={0x0, 0xd52b, 0x1, 0x5, 0x2400051, 0x0, r0}, &(0x7f0000000040)=0x0, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) 38.28994544s ago: executing program 0 (id=618): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) mmap$xdp(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x300000b, 0x11, r1, 0x180000000) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000ff8000/0x4000)=nil, 0x4000}) 38.029066721s ago: executing program 0 (id=627): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0xb27, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendmmsg(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)='\"', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)="92dba7cc4e4fe50a93d5de1baaf50bbbf2eabd1d9a34aa9072af6fee1096e10f7d3457909b2d05533e04734c882101a130479f1f2fb09b39bb384f5d03b064388215c1f38cd1e8e12bdb765610e6cc54c60abc2b594784cd1396f265db0c", 0x5e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000c80)="eff38aa2e3f2", 0x6}], 0x1}}], 0x3, 0x4080) 37.954335043s ago: executing program 34 (id=627): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0xb27, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendmmsg(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)='\"', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)="92dba7cc4e4fe50a93d5de1baaf50bbbf2eabd1d9a34aa9072af6fee1096e10f7d3457909b2d05533e04734c882101a130479f1f2fb09b39bb384f5d03b064388215c1f38cd1e8e12bdb765610e6cc54c60abc2b594784cd1396f265db0c", 0x5e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000c80)="eff38aa2e3f2", 0x6}], 0x1}}], 0x3, 0x4080) 28.264834129s ago: executing program 2 (id=994): setgroups(0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454ce, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 28.177331532s ago: executing program 2 (id=999): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0xffff, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) sendmmsg$unix(r3, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000080)="18", 0xfe37}], 0x1}}], 0x1, 0x0) read$FUSE(r0, &(0x7f0000001600)={0x2020}, 0x2020) 28.056712411s ago: executing program 2 (id=1006): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @rand_addr=0x1}, 0x2, 0x4}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r2, 0x8004745a, &(0x7f0000005280)) 28.030732324s ago: executing program 2 (id=1007): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000040), 0x2, 0xbdb, &(0x7f0000002380)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x8000200000000000, 0x0, 0x85c, 0x2}) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000380)='./bus\x00', 0x322020, &(0x7f0000000140)=ANY=[], 0xfe, 0x0, 0x0) 27.830818311s ago: executing program 2 (id=1016): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000002cc0)="099ccccf84f531d9ec214606c11430c1", 0x10) sendmmsg$alg(r1, &(0x7f0000000b40)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001c00)="5985d20392d0e83101f02653a3db12a8", 0x10}], 0x1, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x8000}], 0x1, 0x20049001) recvmsg(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000004cc0)=""/4106, 0x100a}], 0x1}, 0x2) 27.257525751s ago: executing program 2 (id=1038): setns(0xc9, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900038073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x6000000, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) 27.155832322s ago: executing program 35 (id=1038): setns(0xc9, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900038073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x6000000, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) 22.787712181s ago: executing program 8 (id=1155): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r1 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f00000020c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r2}}, 0x0, 0x0, 0x0) ioctl$FUSE_DEV_IOC_BACKING_OPEN(r0, 0x4010e501, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x1000000}) 22.707283536s ago: executing program 8 (id=1161): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000000840)="9bd5890f84099a963b5170cc052b2c83baac716b0a131f1b7e39d1f870c4b1c1db76efd6c07370686735e68bdebdbe24bdb4c8dc9ae769ee425d6de86979cc7a34f87bde416225f72ba43f0457f85fab1c41974da4ca381fba20f9fd8c2372f0715d44a0cddb6dd48d670756d570ec7fb28fef0c4cdfe9f43c26396e3178ca01bfb4821fa74be8f533704768bb9a8bf5784774af854349b08ed2e40e2e449b8e6dde3c7922e3ce48bebf52c7bd7db250d1f03f3fb50408cc6af7bff6ea37298d718bdb3fa1bd5fc2f0114b60e43bdfcb283b10ea909fd78ba27d6bf64d639e6ce1818c8ccb776e569bc0b622c065cb7322bf705cc5cc2daf49108b5d07a9de92215f86adab4c719476996ad687fc6c81a61d265d7dd90203c49669958e667d1e13d5e4c1cf4843364bf27c4ba2e9841b5f73e66b964ea123f86ca62a17bd1ccf21c15252316d6a785c8d6422ff22a23df5b2429a82e6ca9978775aceedeecc853d1bceee40b4365bfe1ebfebb3ab697e25aeb51a91c74757373080c33e136af4c1023ed0af13eb4f344f48f658a2706715d149840995ebd5f6d70234230d53c5a032815bcde8280cbc95600ac2628519c832666c890d4f75d3b7e947d80263b56c2491dec9996fc64851cb56ff1ec13dfed3ccf0ef2ebe0e80903aa69220f49e9f4698f38e10512f7dd7f87a70f9e2ed6e40d401e4ba9200a19f0813abd88c058b780dbdfa5dffdfaa451b16eb7a411119253d6cd4984526926983d292fe7a4e7ef67aef9cfee32b914053c0de100eed73f94aab68d3ccac3e1df45d471fecea0de8a154f9d0a95b197a0118999f6761f2fe2abef0204acb6147e54abf85db3d137fc2c7a41c7d05eae94460f919728732af86d9015fcfb594d01730b0656c45f41585768e0230af8c1ebc5e80fc3727a98aded8b718022eaca137b270241ca46091af8ae72f8c177936dc5a2d82b86f06387f25250507e22cb693ec2e3553f6770cd23447f6e2ddddda0ebeb8c58116455b30ddbdb28dabec81c0fccec92081f180f2733bd724f27fc8f8f6401d156ce613f61d37d7c0df0262e627be0b884fccabbaf7e4b30350bff367c5915d295df6cbb7c3c1022a69d6693c064e1508b29cf565df29345a3537deca680e72c9a38a8fe10b8f738985a8fc36a0237d7cf06eff861522d629676cf43fb5c212930ea97d4466212680f26ba5d809c2773288c178abd60a62b4c164cc1e6c462b06815b39dc3fa0a61f419c537ed3c77737855c1770562145951ba8111bba193481cbb8da811bc42f26281c3248d31b9dcc59e9fbdc104621905ebb10c437d512621156a22b3271b1c8058fd404c948f908f68bd426bfda5c610501eca2479797b379a52c2664fb8f4d1a0d5d9e4cd223ba4318842be0f1a902c1fa3577189f3e3135533a05fc0827ad1bc981fc1b0393e3b69f676ec4055fe47d74636ca98a44255082331743043428d608a83b3fc8f513958187a9805c30c873bba2bf3b240f52068569e5540de842dbc572845c89021169ea22826f1ce0a3075da177a79a066beb3143016ad0b5d6ca067508eb8e4f181f86b63b3ec420052b3787bcc38403884baeffe4806e4f88472ae89fb16bc17a8478d629783e84d2b181ef135de3d664aa7fa7c3d829edf1d4389d6e63d9051e8eb3592f7aec6d8b3fa31d4be17283ffbf5713b9cd3091edf2a6a05b83bcb1507591186acf4eeeb7b2eed334fde2bb813ba611ad281fa912f5d5191c52ac04dca78e2aa2b5662c3eda38cabc1f490a4b63cdf65de3f8f3d7ae6332e7e73dbce391c602c5ec2b953e2651a5db299ebc03e9ee1e8d94ca0d421133084f9adede3b9c5c54675f39e71106b11667f305490b58f0b2656733eadcb4f47b9f8e044491438778dd212c32dac2a3be68c57a9f6ff87ce03fb947dcbfa56944c936b222563796eb3ae51ed30695be6d3b9949b7ac0feb3e79fc40ef8adc94738d0ad88cb5254113de0eb4c885bf25f551ad243465051359e2b8ecc80a7badb89037da60c6d3aa06bce5af53545ec9785231766d14c70cf8c050a16d5ff7e57b270e58a50cc03702e9c32fe45252bfc40da1afc332acaf6d580b766e2f54066ca6fc741a41dd521667cf6db5c4ba06f1d335862dd095820f4667e58c545a0d819dd8bc1663345eaa06a405895292bf2769bcfaa0cd3a34f234369ef39bcdfb556f2423a6b38ebe14dd67f12b1343fdd54fe7329257e0c983b863ee86011f6450633a17c08d23dd1c92571035acd7e96c943ecc367ae47d8c74e648d94da4439fda6b595e550e60eba545182b593408d5ed537bd872d86aae2e3f1a46aa0e3efaad038e5d4c2e9695bed52d0962457f54afb21a2b923b8f2668ecf7f7a34b31aa52dbb0359d4f2796c9fe998fcf671d255f2a3e454bf817ab718d9b851e5bd3d163e0808f8d9b7d47378570a798967fa13fab11e1f1bbbf1c825713b72c7d3b5f7578632a48ab83d9e6978f491fb1441aca8ad2d9c5c08416ef91bc5e89fd587554ad3ba5bc83efb18932d470ccf7785863105cbbd5ba4717783735f27cf8331aab266d4a165e539ec2832556a689a1305352dfa4e259a06b3dfd110421e95d1928fbeb0f3ae60b6c381f8f2d603ae92070ad4462235b1a3a008b4ae7e30f09d154d1fab0c741e643799f7b87009f4a1fc978285c47442dee806f535a3c8c3c586fcc31b674ce2cd10e67262c4d5c25a6eeb34d99b63de1fcfcf2bf09be57c01ee2b4f7ab6e19b36c47951ed2b947099970cc7a202e1a30674f10da583538abe65b124c947de2e351918f61a11bddc90e6bad972d9e78d9f7437874fb842d0a0cab1738c70732cf9e2b3720997751728c0d99adc82f5b056592d35f99c5cd6ad451a5ea98ad6fc741fb9ee511bd5375aaa6ca1b4f6dc87cb0012b9f3367b1739f66bbb6687c0cbd30dba71c87453cbc40bc5ae9a0f7c6ccaba939f255aaacf6482cc86c20823570073baab2d6bf27da304faf29bba4bcf551d31dabe4876ebb87f92cc3a796820521de05149c7aa337738d4f72c8eafb331b7918931655fcf4b944ed1fdceb05590b56729a669e3a628b40a25e89973d51e534fcee284cb1ac88e00573dabd935974530c276be1a8c3545cafea718feca62852906f6c76fde6e405c92bd02f8f06d5ac683c348c3e0e9939d7eabe6ce7901291acd60cb05ad77712f90ae45c350d98cc7081d7400381b9bfc543ca029658388a222fc4e4a9fcc468becf4b1756f2ce632b622f01e2f3cafe90eb3690c41b38cf9623036d9024d98b2659a8ebea0fb33572d238cae652b24b789da7243c294088ef5e4804809b32b91f84314c7a9fb24239821106eec6c0d2fea131e1074b5f99f7093cd3179d2fde8a54e63f936e7f83a78e77db00c71e9855e89862dd9a7d5813f89195adbde29afb9a88273d9af69f9e6f39a0f62c470b239201358b7196086776bb50fb548a872cb1996fa2aa8a04c42a4f6235d21c3624679735d7cd5aff9ef30b7beb791826575fb1b2762f20c8ce176f0bc01db05c2e2672155c7d8744ffc379c1c9977e656b8d5f8d99b99f7ab8d82368d500c62b6093c0213d31098a8c7a3f2e0021646db671b1e4b602a0cda9f4e90bee436c91e2defe6548bd41df3e849868acc84fdd4b2468187416acc730383fe1379f8f862354f820c5e1522baa6e5665d5f3feca833fa4d9f3da5478a888d69a770ca9cb66e7b48d51df3286a2d248df71c31865bd974fa1a84947fd7e09c68f49c143faf9dac1aebc4370ab23dbf6284fa02eda4ebe65a5200e7625749b3dcd51ee7a3d849c914ef3e9442f91f41ae5963e590f78441436a593ac40bb3e35e32b2ca339b1e8555665f37da8afa8b2bd1ebdcc49f9ccfd193bf9ac5f133b6eaeb35f0767981f4aade692a9395be56c6c007a619e7c0a11786e67d3f9df6661b32355d720c4f5259ddf7eee9b68e024d5155ee1cb9f3a50537bb18516b2f85be7f2557e135727009e8bde54303c156ae7f2d24835bcb30d8d6c1d6aaa1b7311d776460226c8099050a986a7589d3de899b9aeb2899007b02d2d5eaec3ad82ae59e78eb3c40d4e423b312b6476a76c6d7f963b74679bb1ff0a8020435ee9d1d32ad23bc1a850f32813bde018dd21827657b4224d6a54a2c6acbd6f79e37d5ba6dd7b01eba678f5e3a1ce60966584bca0bd6884a799c2b6e80beea62c7db2a3fb08ab571157b1aa251c81052ca44af7114c805a0a2e8e9727e9c4e57725362784b2843d562132912fdbb4b951bf58a4d01b6c95f9030120478748dd3148a895856398478584307d409dea046f3b709bb65d07aedc04d15d65c7476983b2c6b8435aa83294053236702821d5b1230abd7346610b7bd57309da77ceaba62348ac212b04a22e775c2fc8690af362696d9434da6ef5ab6eb42797290948015f31c1a5be9a7fda121c5129ee5e37e93b3eedb1af7a4bfc6935bf33f93dd2f90e6b91775bc203cd5745991747c8c2ff82e2813980f221190dccb90c9c2969a849166164adf644a970be4cc28b8e109b2351d3c17bd179cb6fe61dced67b23d83eee5a5717ca11500d81764339eb202cce4ffa826cccc3bdceef004bce65c802abad10875b0ec45504094f46e42c34909a012d50d352b218a4e097374fe92adec65b96722209e7d37d9f926f3b708c0dc23cc27b1ca2f257fdc944b4e63096452a79a57ee189abe88eec27b4cbbac511335a78766218747b8ed23050ac21cd35c45f786c26a5697313f5bdb7c10978e50208b51821a56540ab826ea736d1deec42cfcf48582f46157063d9c476a8f7e469405597bb1d7b4b794d6da5a4a0e44d9b339ad5a304f95f5491365dbfd792033623d578692d0b39890b52278365326c1bf5f359b0c6f548e1175d09b523d0c24686fffa1d5ca8cd3a786f79f0ea3dd448a6ff2da80a843dd8be29580002e09980ab5bd9ed533f78ebbf8181c3592e7e169f232555a88e6c0ec2171409af7ea6242d24673b7d5c2ea9a6d0fb0353a6170ef6a70acbd43e59909ac33806af7f906383fb54dba6b1809633879e5de29c0abf6637cb2773b34909a8ee6035eb5d3b90228bf2ff3c94da7625141078b031eb485adf2bfa9f6e96ae1f010b0465738d8d692f93d9bc9f6c74343c44ff9e3ac08d988d18b1692bea7028c20b913b41195cdd862c50070c4ae7cec8a00cdf2baaaa2284b03fedb2817dafbd95c67a51085759a7e136af80ced25e6cad2c6b7eb54be244017c0c5c8295b8d3bc3176c89bd9b02acdc7a57263fc08ae8712fe2430f4072cbd959d36baea8ba25ed828d378123557aea8f406ed7297f22296d3fcee041123b69bf12097be85d6c9498559b16197d9a31777c19b38c7ceb43d7357c8bd8592d25e8027cdedf5695c8a14efca68e1b722dc449fae3fad699ab42988be7ebdda131fecf6be020d77c0897e0f6b59bae9a497eb30823909f4bcc6feee08e9a0a9e601c39199e4c56bf83dac41ccec75abb27dadb71377455751f42e443ae824dc529dc0901d0b07a378b58cacfdfd5013aabba3c029b3b5dca83c28816b92025b67b5fcef9a370e82935bd1f15e052398e6c8b3694054ae006ab793af1667cfc6ce879f2293c490152db6a45081bd01fb65a7e24d0704035f0a8d10630a6ba9f982fd0ebae2c6d5cd242f0ae28e714a9ee7db10e8b008573047febd756fabac0afab2a1535a7fa8f5b1fa28d73212da898de3a62aaaa211ac592f7bf275a654f089690dbfa2b296d083d70e369e4fbc80af2f074e61465d6f5a46c7", 0x1000}, {&(0x7f0000001840)="670e", 0x2}, {&(0x7f00000018c0)="a44a", 0x2}], 0x3}}], 0x1, 0x4000000) 22.643732928s ago: executing program 8 (id=1163): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000240)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000000)={[{@test_dummy_encryption_v1}, {@acl}, {@oldalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}]}, 0x1, 0x5c2, &(0x7f0000001f80)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) ioprio_set$pid(0x1, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10042, 0x0) sendfile(r0, r0, 0x0, 0x1000000000007) 22.493734086s ago: executing program 8 (id=1166): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x201899, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 22.434637964s ago: executing program 8 (id=1168): openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140), 0x1000, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x22080, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/3\x00') r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd_index=0x5, 0xc, 0x0, 0x0, 0x4, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x7211, 0x3a1a, 0x1, 0x0, 0x0) 21.316236138s ago: executing program 8 (id=1203): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x2, 0x0) close(r1) socket(0x1d, 0x2, 0x6) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x10009, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000002c0)={0xa002a014}) 21.274648708s ago: executing program 36 (id=1203): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x2, 0x0) close(r1) socket(0x1d, 0x2, 0x6) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x10009, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000002c0)={0xa002a014}) 14.779493658s ago: executing program 7 (id=1421): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) syz_fuse_handle_req(r0, &(0x7f0000009b40)="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", 0x2000, &(0x7f00000003c0)={&(0x7f0000006400)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x9, 0x4e93e32f7c580046, 0xdcf, 0x4005, 0xb, 0x32a, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000007b40)="308f4f94771584351b85c5532a9cb3f13986e87863cfd608f17cb38bfda319b1b6d9db268133fddb02793b3a1b7181dc6313dc41ecafbf1ea3019af5ba74c41b3541d155925411d9cb3b4f2d7ef7c0c0a388f683aefdd9cc0c02cd972c6c47ce2751d7a1b6934222cb3096aabe72040ee4133e86c0217bdeedf7f8579e7026eba71d2bd71cad8e39e9c27dae9d321037e38158ac3bc8efddd849a3ecd08d51a09e670f0e7fd2246c268f23192ff644711e285eb6a0651797189819bd1e7d53c12f1d3da1249901cb1f7eb2078555a4537658cb0ea50b7da2bfffd71e3e476fd61a341ae840b184e2f0010f3a306ea794392992c2dc2eabb74eff7c97831b1241ff7e31e37898bbdc99362c73da8d1f215434ca06420ea62fb997f8a67bb02f1139ac96e04bbe07628156f37d94777b3402e46189855ae041e716a0cd828533972db242ebbb1b6dc7dc39ddcc8d869a3bf4c341329cf806cb22d31953f5184f1f23d67381ea29b23ed37d2318bd92b525be93d275e09b9fb5856aab08d9cb87e858673025a4cfcf534cf2becca10e2334d1051dda98f9f63ab2093559ba2d6778d4f502bb51e5a73841fa436cef7fd217b3767cf9e09d01a6887a15f73d6296771119262b319d4e4291325461fff02678d8bc059a47820111c3ca3fdb5d2bd45d6629728e999374b312cb81bdb9d4c53b0cb2a442b987a968f78e3387796fc1016f67b8250fc8c98adeaac1f44da1d35faaa50b9329ec998f5e0ec2ba75f8c44ab8ffc944c0c6473f25c2f05ee289089317b06f2704d00af5ef3efde2fe9ff0933f14fad803e923d207e24a0d999bc5e34b1c1c292cd2a8278346cbf3c8f826cbcb4457b947212e2150e82743f0a90989a50b4ed751c131a3ba860921bcd7446bff9ab953a9de76a22fc0a5c6795ba7eafb35a91dd464ee7354e6e8784166295976a25aaf2eaad3c2750137b3507aee0a01cb79b0b92ab1b33b0e916fd8364dfa688b17328c23bfcdd61f24d36942707a8a4fa0e74cad7c3b3a898af2d225dbce9604933248d6bbebd34178dd0e6e63b8debed6ad5688704cfdb6b8514b0a7463a21cc02315def4d0f81aa7627ebde1e02acd1e598a265fe122f868e072a163037de847302d2ab8b80d10154810194b3ba3830e6e4f3d68063ffde12fa6515f23c83299afd889b3fbf6ff782e51a5342abcd1d6d707aea071d18479cd28abdcc4617d0094c1e7af425dafb9a580e71a7aff964b9ac8ed50e7b9498ea3f420ba43353ceb9a965824b3faad049d98370b465061243fae891f5eb9cf8e284cadf3d49c3e216438422bcaad32b275ffdba21e1cb8d4f7a83576f5968e552dcca09a11e1744c63d96b6884315e274f028e5c0c8d3b00f8cee700000000000000f02ac9e2bb7544b61c00c82ef8552b01f55aadd3b3de2c2c3e106ef4099a320b76e637ade07a2792fdc0b1464022a7d11d2228d91f15a1c017847c4a0d12e5c51434f2fa50f94ff6d969f01b765a67d0991a3cbf93828eb32e3c7c824dec7374e576b1651511a702c3f07ad2c0ba9a046b8d6cd56c74523682f1aa892986f29e13a7a49175f6e59fd0387f1b9279c76ffc0b87696d112a815a770d50206a2e9d4532d37ac9da0b600f2d75a9aaa7702cfcb4d2f4a463f06ba14d13f1f890033d89ca4a5b4b392828d25b274003dd27c311903ef1b8674d37e169af1078257b6d25a76d6374711c18d656c6ddbed246d6d629401d304c9d240b0f230b3a80e42646f95ba6468faad645cf0805de47a05a45db26ff8bd949a8a49055ae167196922b4fd0502e630dd6ff0186702bbdebadf981e7022691335144b1fcc0d8b0fade1f178bb3f052a2c480e55b9b6fe17b27368ebf429a3745fd7314a3799e692c8cac67b04053c5cb656e190fbdfb2afbe1d79d546f3bc268307210ee318b1205a579cf308995908a302b52eac5318c04af7ff3d172b0ce810cffb15b778472eb68d3ff886fb09d3e553912851e66687b48e881d55689382a48c8166c738ad94ec28c1f7c048d543c791e9c43136a26e2a871b3871c312240d6c9432cacbad105d3a0d5f2bcf24d2835e624c65fca1da66388a0a603ae0e3a0969bd100f6c61c766901a5f7d08cae2f648be0ad00fd7191b318d4abccb863e33f5a389d89306934e4d1a786420ef118bd46f3d87618b707234496b8825250b424cf49714c5598a8c480b625c4f8a6a9fbac9e25ae827b2883a2ba4c7b4e920cf9dc51edcc26d7f6c5200717bb7deee62fe3c439ccfca6b22e6593a631f7ff20975dd0e19582d3571c80e4b34ea625566f124562e5332e323c7a1a8509e3650a2b5a79df7d7165219e471ee226bffc55a75efc5d2d2eb4384820fbf1cf23f506d91b59592c86d1761be99e6ea68303aee3943e82c2d25deba50f9f5e979e08bbf6bc9266d9a5cc5f5501645fc1217c1110f495fbf25814102de273f5fcd1cce82acf474e7caf8baec955b1a6fdeba6e4937df67bab7dd8ec33684435caf02611214a2e57ce895f6f3af108e1de38db5bbcaa4df8c0c31cb6e26f3f5837fb5acddf99619a1addffa413ee29913d255e70b2f60b6882892a9ecaf76aeddd41cdacc4df88295d2eb565fbf659fa5cafc2463c8c54878fffc54008693f253eb590d665c9671b7a969c72d56f10bfb4d3ad644db2ff2b01172c51db49917ede52edf4e11023a525599a241fad18710430cd9533e88a8a3b3885ab1fd396f1969633bfe77efeb325013e2bda4bf87a17290bbb3ff120922acd161acfe2774733f33ca578981828a790311b611558e58fa9f0b44e92288f5cb9324c0c26ac1e33210e914026797f0fd0b7207953112da4f4541a36d6ab2a3a80903375fa352f19306a01be396679c581d72542087701a2943bb86556c991ab736ca7954bbc99d5ebb8e6a7ad148fe7ef4a30d17bce34ad252408236c0a55cee344ba79fa9233fb7ae72c07b1505305d8ce2f834b9aee3f4f3e77f86cc529d729592b509287d5e03b8b215e0c0dd20ec668c5b022fda4de57ed890e0dd3fcf8fd370a2e6a210139361d0233a550c60fd30bc6f62f948cd5691d64b2ddf1a0a82c3109896a5ed057a59bf9089191f6b664913fb75b2b5392da6205e4926967092d4c71a9c95bacbbe327783c24a47f385023752d05556c7a6225692f931d121c1caa6c75dae4d656e4cb8f0b6d745f3f590ee9ab0883d93ce76956c24c1838a2f4e7903bc2a041db42ba7ff3c54541ad4e2f83c7b47d07f1672c0f014d87fe17de3dcde1e47f50a76ef390c9d9b69ab317948dac2b47aef1fa0bd6c92ba31151b4c774f018ca3ad428d3fd6dd503084165d7e82860763db1c45728c238a18e62a93102655e4bc10f60996cdfc6e62489021a521d2edb63319cd5d91a2ecf2a98e125a82df82e5872adf15f2328dbd3a10cdb509b6b8f8f81fc2c286ac62e8b64daca66b4d36152399a38a59e100cb70694228b03d60a21269421f07088815736ceddc054e610bc3a08a3c9215ec905e9de9c5d216ead0910f99616a33d4bd0d11399b4e3fb5843515b72591e44fcb7462bc9b2dd8a0bb26b8add560946a609fa5f2c95db31aec78924665819f75d56547d40d00a42fbb01236fdfa612467601eb358ef664efbb10b2e1c9497297e3f8e58f99ee33ac9fefa98234232e2590343f563a0b458497adff08b4bfd42aaa2e218e540c811467f2f28430ac408f88ac8e1a94dd26d8f8f7e1bc6055228b2772049ce830adc5fee653b28fec3a9588197f5b9afadc9c8a14eea738d863ebeb709d3120713ec2ccb7da6b614bb2d8eaab6e5b7455b3d9f8afa691823d9cb293454230a5db24fc17091781231026339d3d05fcf731d9bbbfa5cb1b58ffc8e5a801daf948df3529aef142791b1d6f54c21f310d8bac7527fd63f2dfbd9cc03f34ba3ecda9fe478883dac7ec025370ff594d37735431d3c5a63580783d5e79b3d5c6e9b8ee3f0f69541a1fb2a4afa836e5683a0fefaa965ffa79349bf2a2f15a3afb0322885f4cbbb761320973c27a44b924c38b56f79d81120e3c6272eafb741986c52ef0eb93821866239574d98157b4da7c9a91113785311b1e99836d0195aac8ba8606000000580f69a1ad752ea26ca555e17a0678a2d075d58dbe2d87a441ba92c7355dae578ba9b5ac14cb92950107bd148122fee16f0f4519423e9ce25d0108ecdefb5c17b414f5191da6c8b699bdd95257fac0e00c1112ad4f1f7e887b2e5eab1dca1e8feed87328adfbecbb8e3614347b28621ab0d9d0576b4daa2c8fd3ede61742656d1f1c26b46669fea8f58267e439f6355dab1d7e5146e3533c6fc3906023919275d810789f8046e78f2741b4c6be3ca01b2df4a45c45b9a338948351ffe2059566f1091396062576ae674b359f71c815d0f1cd18579a581146b81ce05eb92e9758a8cbbb11c206555b14be788f8ba3057ffbaaad8916144e56bdfcae8a9b3640f387558afe4095b4779696fe497dbbffe0070bf133eb1f0d929b5134efd0aeb317927af709b0ed5218d88110cdd27ae146048bb26a6ce8f53cc422951221023765d4629375c582ce90baeb1b9dca05d3550e96d1556e4031f0289e5ac18304bfbfc75fc4a2998ab507a1fa89f9a5fa67a9a4dd80ab0011e6d72c2c6835a6b9ea2ed28a4431a31e2695d7fd2f613bca1b5d1dc6ada9f2031c92ed38b30cc05ef25067c29fa1616c16f17975c08792fc4d521aa32cd09e492c8f90023afda5f4664f0c706dbf79b40e6558c691ddac572c92cae3e9d132c665ab8ca519df9eb85098abb8ba1baa0b576b93ef8f34908cf43e8d2843f8703cba2a22fd7667ce9b0d5a9a1a5d5138be4a34bef70b9e3531963b6cbbf07da131efee739ab887a8c976b7423a1464f56563c6b65edc8ae66d2fc526cedc6af4ac616c9e9daf00b865fcfaac28202743ed40aa1641bd272358886981f3fc17e3c6187959757172adeffc2c6578387fcb9de29d957e7fd4c8fba790349ced82cf212ef6c234c1bf565451f353598a957793a6e7dfe940e957a49b593e17a387703f008396e0ea0d5d98e1d07212dfcb4fbab9b54fc78a0a07803ffe62796feec1e0f59220d821dd52b18c3b2a8eccd9cc8a04bac6a536b625070e1628dcc8d90d24e19d3945aca91f11c54caff198503a316e5b2ed18a52d5d416fbb5290900fffe47c72f2350b3c62202cc4e0600000000000000d7c335a46fb43b4e3e77a20bdcf7deb810f7eda4ca9787458052f7a317e05739a93a2a4fbd9967855a91afbc07ab1ce297bd95b97ec5d890e1e09e704908752a172c3ba4bee5f7a459b1373b9244fea7c5cc585e644b0fbe0cf13cad973eaf0e58beee2dadd0033756ab239fd92f7defc96d4f837b133a0a2ca59e70223a0677d2019439389a567e06c3f67e6dcf4a0a74fc61eb8e0a70bbd28d69093ecfbb6eb27eb51230edf06743684d0b81aae253a9880d0fc73f065e261c097876e8978daad1c7d7ba5b3019ab39cdebb26230e72fdadc6f1036e1a06d0e6bf733b9b89b68a7e8743a6ee2125d9a8b5357c35c93e1de4ab1c8247dbd55cb6b6d16efc03cefabe2b013741d707ad7650d6be75be3a7d469290abec3abbcfef1561a424fa54aeda345d15d626b2f5184bd08c349fd5288d9e39f5645203f763cba13733f0c72cb4d22adbc5300d3da50db2b732a72a17efbd6b2187f1201abeaf686c703f6b364018af4a0b8cbaf89936d9d85b24ac7df66b7a464123d4bbaa189039fe6dccb5454bdb3403909e6969a4ad18ed8a427d3b9fa3532467e9f2e07e4bf17e6acc89c1fba74f78b63b7e9713022b62930e0242ba50f5c52699fc333ebed1e4061d37e5109b75774a24ba9ec2ba76daacb4f69281b29adaf89a440b060929a411a281832810b6975f944f47eaaf8b6509986760480550be0f5f128ea460d0d12231eebe5cbf0c787f72d438d4c62a80f995dcdfe933c4f9fab3c54a3f01126ae011a5dfa703820e7a073950b1537b77b9551f30cb50a1d0c53047f8cb62c64f11b87a55eadf99a0c6e2a40753a02daa2633b269170247a0a59c7971aa7a60ce00236d6226b8ded67be89a3b7c6ed658013eea108cc227ce5391da62caa4df4bf5c84f12e24510cea6dcffa77a9351f827d99610ed2838bd01be98507e35246b9f0d1627877df2dd7a030d6699a29bdbfac7821fa840683b69755f496086fd1c481eece51d8751394a815c2620c1b6b0d0ace2301cc1cf161a048ea190f65ade47dcde3a261b5802bb54d9abe1d30fda5b6168a04c08b7b254787adfebc7ab32502173b88356e4672245d3f336bf1ef61bcac2bfaac1bf626ad1437bc0434f935b96a24a5b8ee6c684be40a3f5552410ddddbf6cc0aa719c154aede8d3ecff053e33d3a674623ed2f69ee8fd2e37989f8d3fad25627d17658613a95ae8b29c317920f3ed6a5e541eb85312da5858e02f087d79f002c2a509823bc7bfad1093d0acb0092e6d92984e7148aa264356e97f112e55dd4cd7b962c29e40cb58b1c752bf549e683bb8ed68ba4f6396032577db95a6fcd382a905f3fd84c1accef612cb4721079abee24bf4e6621e861338e211b8c605586f63d8851df63b64c65ac0148d95e23e0b40c55fa4736e234ea9d3e520c5187ddd894fcfecae3547f7d3516a96d52364478b816dedd31f8de2072a3e4052742e09892c1af11e7912a218a3150343afd34b2047f99725600636371dfc584229239cf669df60c8b956ad1f0945c35f60d78d8741d1205482c8985f5208ad95a41bbbd5204e22192d8d6dff18cac16bedf9e47ef596e86a5c7e11133395c755f0dd213f484ec28d9d41db6ab3d030ae4d110384d11f00cb9c791318884d35bbf0d47f1f735d7ec931758919a5fb379b7430acd688705566a5946b766bed8881bdb57a8369930533c10e1063f377ff0319238c517f71ec97b03e1b954e240a2131845cd6a0af86c0c4e93af284d7da07d8e7ad80227f620dadb5f81852f7fe23a6cf56340dd71e3cd3dc68731562ebd056b9c2ea14deea83bf4c2218e4cba4bfc6fae34d1c8004df23724d3d4781b55ab266ac4d44a9d468d983b1f583cc951a3651fe25c6f0fc811565d9268c5f4f54f915343a74ab39ace954a72bfface0353996599b346e903391b23a114e2772a04c4294060c644c7cf52485942b98ca93d150682be61cb160a69f2c69a05c6c1805dd0d132182a70f8b81ade01b1dcb8520e659feb46066122db68109627546adf269fc67c66fad21a9232ad4c0e6bdc44c1e93fec19e4707a7d51e7c7f2803ce9211e6280e195700830bf578f31be6316b01bda4475d4eaf75fad4134faf16f51521e830e718401461a5f62fe515cf56e2f51da2c8f667cf6b124c8c8be28843acc82671d2d701d05ebb19df1a6f48f1d4543e9496d3d50d5ef67d29b393bdf0a4bd5d01c32fc8e6f0dc384285b6f58defc06cd7b20b04a47d6719a4238f0d6a69ead55c5905aad066362ae1a459d88f14d5c379726c8e9b177029ca80473871a3176969291675ca61d214ae4f47b09ebb3d610d18be8cef820868356776b9129d7875d8221c53cf5d0ee1559dad42c5f776a5b679dea1a0454ee10ec7a8950d56513aecc74ccfc81acb4c25252e4a66fc248329e5246eb5fc7a8f18deb555a36b2488e07ce2a18a9d7f3b0f5990675c1d64af8369e9840ad0c3ba428a0690c7407bdd4a2d5a75d6ecaba6c4e7bebe8a5293fb29a67021e61f99417a6081fc47d7486bb337347cc3bcf3940a320675f1e6b1fbf78fe34af5485dbe22f2a6c0c863b0ebfec2a27923215917aebe107a6e902b7e21eafe124dcecad4112a3337280d41de0a8dba13679c6b8ac07389c31b418827a938b188b043587d0781903a3f38e7cfe8486cf03de749991e9634f70f6c966475f92de5993caf0f5c3ff4a26305578aa5b6fd17567343fdebf20c80ff648b9e3cc92ead693526356da4dcf23beb2ba12a61a38b8b04ec7ad0bba7dddea3affc7f4b5770517a44ec8a5c97ce96b9802a8f8e319153da820ebab0394936f3c6e8befd2e435829c9e8db5bc5a86d291a87c10600e91f9c7ea3c550558bb1adaa6a81bb836ca38d7da5194a2e6cb0f45efbb19953a1db093a7e02512e5638666b372d518e3c24a8cb60032235c51813dcda0a10d6e3ddf14dc6b13ee8d82bda2155335c0151ef1e056c675dd5059f80885c653a2b1283e3b4fab926e98a2a1d1af4a700e5798e79e8f816b30bdd7fd377f9fa803a81d76b5d378776ca820e836cb99827a5b214d66574e1951325828233622f4cb0cb9194bd8ce8217b0f76faea49e7f742640f039f5017d9c77d6c1711bea52396e04e930b3eb70b27f41980f61d191585b111d2338ef32bd20d3679d41a9d434e0b21235c42b776217aabe6bf69ab728b40fda0570b1f7688ae9b9fd3ded0f19fa7b12e5e7d8d7b7df562d212e88721ce8a5b877ed992ca37948558d57778e0d5f809ae4598534cb7b6c1b16cef5ba41ff318d993d3dac9a39981d27cb35043e394e1c491ab8050b7dfb02897a77b728dd1e84e9ac4da54160c6f68238ba1f2e56c01222d252f6b4b2331516288de3bdb8db926721de32a1d28fdb431df6f79edcb3fda2529703a2e3792f5bf6f664f1935409ba85c03215d2ca2c5c72adb7325c7ffd3a149860bc84a4d8fd4017cbcf6d4233e00485d6bbb4e1ac87301f320a8cb24426c1c67a96a01ac90500196fd90872e25ec944d4d301ef386175a9302437b4a5e7142eb232074703bc15ec04430656194675a3ea982b26a10625da6649128ba32d69c78b4538ada76cb84f932a51b32c61ad95e49134bd416820f57d2894edbc5dc5b63ff61f62b3ee8f006f722675be420544304e600fdc584bd4e58d2534b32937caf369f4bf6bafd04746654dca48e434570e0a633915dc302292605fa7575bc4fde147282cd63b72f3d3b4697371a6c9b378089a16b97cca9b62fca17a251e1e221156fd23101811be97050d1a92117fbdabf1306636d1714a2b2406b246e9104b350f662bc334e239015ae384be398ac02bcf552646a9ad8a88da27052ad16f85f006788cdfe307d0c736b3a929f9f9393de73fc00300c7b38531afad6627a5fd0ff8165baa03faf8238c45851bfc362d7fe58b306a3ade0ab711fd1fa203c5982ee664031bf91ec3560a88022e3be3df4c1d4764d3cccca239b14dd839b110f54cf8745fc986fff5976334502439ab836e7ca747f91e7ad3f202fd999d003a24db2f337d52aebda89cdf6141e05fb030bd0b0eee61915a4364a33f7a05181e44f5f1a15a907eb92eb2000033350357ca2bfd7ff375b62d877185dc612d2f14625ccbbc4aee1b4bdc4e15fdd1532963adc984c929ec32f0b048287308438a9bf237b58d96d65caefbef0267581bf6a7918b8175dd026b3d6f37904840b5ba6c4bb0a226c39554cffdd9fe6ea4e9b04c7b91fcdc21606e1cfaf62ba41886b967ebe7d813e2c342b71db1b22b7f0c43c0309497ea038a632eaa51aada24533000a677ebb46f7c3c210565d7aeda40ce29865fa97d051ee5490bdcc6e491751099ac2320f049530b2d414b6ad5858dde992423ff2a7ba7cc4315e19ca73aa63d8020275915d26e9a259fad594c0f25402da3ec66756b2af91b76f7300ab3f40cc15ec6a19c43aba2f97a38e1cbd368c275e4fb34e7c1bc436c482e217227a8f4465c0f5c4cdf03510f785c56120196e1594b2d4f34b10a5acb1b23947a4a9c9c0d9704d88f2c62020e20d3db89d2b09ae560f018fdb6c2ac9720eec3b6d0cb8c9c7144048910f4bbe7070a998deabbdbd98b6dc1f824e6a66ce0bb71037cbe7cc2cb393cee0c87963f8d442150abcacca378371ce8790e86769956b30c0e04ca7c4af0c066402ad10ddb35d984012a7d02702b67712cfb5c1f28d52d0d618469c722bf9c90bcc521e510bf61f7933edb383faa331907a4fe0f283a6ef71b0ba9dacf52a2e4b6ac1106211f99ada45a48309519e2f4a56d43e1ca43fbe7d612ead95c8a516a916448bc7281803338eed8eb0d7b0d06700f7745332c86ba048579b7c2dc6f94b048bc3903ac637296605378b4d9b7a445fe7d24027a59f0af02d006347b61cc8660c80268fa85d65baa4ccccaa213c6f0bebd4673c312558febcededb5192738d347bda4920eff6ecd42357c86fc3f8ffc72143598ce6faba1acf3e35562a0ce73f3182bbf5b84257a522298c500265db3e774788b5b72a933566bfda2dc4b3bed6bc81669bbe0b2705ac5b08cb669e69ab6740456c7e1a3abb96c9b212512a8780cb59f82744d1f712d1e5591f9cbdf02be119dc3b647a7e4da5c62017bd16dc495b1cc0da65ee035ecbd96f673da66e1adabb58ccfabd01d55beea781cd5270e18e4846a2f2d527a43b70380507568876ad5499386511a94988840f2e6c565a7b3db9909e010c48e31e9ddbc107eb3b7d8bd11aa0549e18d4e0749f0dee8913e0231dd25bc66915f02f74f29af0ccf67f7b3efa990538cb676baa926c3f567193b7387e548ee6be5161b2da1039532fd1a0c4096b93179ee11a806724bba3fb50d699a0b09fe8919c731b6c848adb17410b4da64f6f03def4b3b92e64df2fc8dd4c981a633f8ada2d1bc6b0f32b7a756a6edd7029528fd6b4a11da00c55769224936f4adef968d516952137740b75112dedab146a2bc09073d49d1e960da845876a6e60fd8b0f444af01dfd3c00372462c0f57273e774f3cddb16ca2fcd7dd13f28b6f13251fbe77ed7cb190f73fa4ecc40b71e73b0545a906c5e30d495c41ba95bbe14fb30f9508482c82e434873fb588a65f3ff951d17f1beeef07da5bd974d84adf1b34df8f96005768e810194f756c1ee60cd429c7b00c98cfe430581313f3ceebf7bcc3e27a3537926a072af66e9d8eb64050f936b3709238f4aa4e99bec0aa4716cdd2a77f259cf591ec900a17875d813faa04eea61a2a796cd51103cdf4473472b26caae2bc07e5b422ad0ee8523c05c2db9ce75a90cf6174366b8aff045b8fd601f3f63fa0b698c6305543eb468edfb30d9b482a554ca786181f2b543b0a8a1cdad8366b29d60ed21fce9e7bdcef32417281e45aa0acb4bc2f0be0de1e42691317e0e799f29e3e230ce3629397f6d236f4c8bb77e488ade6b39fa7b1925f9df6245a7662b75c57dcc9286effdc537f97875ae46f54ba2e0ec5924bc56754a4058ee987be3ca2d552d2414d77209dc79eb714ecd544facf85bd37275859e079153a36a41b7700192069a8df7df93d527258d7587b02863a892f7cc2aa4a26989661257768ad5e4e49635e06726bd2544c50bf6ff5867f9dc48a8dce0c5954734da63b63f1ad6954286994790b81e3f0c4d64f1321ad652ea9a989c63a5bda214ea147720d65ce6075096968a4fb54e239177be207e7a728e480600a5144d089d9a196a50f6c0c04f023d9834c09056f811d18c771a6bcbc4cc51c4c63455e95664a2034b6171bbbf763d65297bbe5550e3c055c21abcc9f038a76000", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x78, 0x0, 0x400000001, {0x400000000001, 0x7, 0x0, {0x2, 0x2000000000000003, 0x4, 0xc, 0x6, 0x3, 0xfffffffa, 0x80000001, 0x3, 0x1000, 0x5, 0x0, 0x0, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', 0x0, 0x51) 13.890102737s ago: executing program 7 (id=1436): unshare(0x400) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r1, 0x0, 0x0}, 0x10) 12.740468785s ago: executing program 7 (id=1446): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) 12.323806186s ago: executing program 7 (id=1455): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="756e695f786c6174653d312c73686f72746e616d653d77696e39352c636865636b3d72656c617865642c757466383d312c756e695f786c6174653d302c6e6f6e756d7461696c3d302c756e695f786c6174653d302c73686f77657865632c757466383d302c752835e27a638a1fea3d312c73606f72746e616d653d77696e6e742c696f636861727365743d6d6163726f6d616e2c696f636861727365743d6d616363656c7469632c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c00"/209], 0x7, 0x2a6, &(0x7f0000000740)="$eJzs3c2KI1UUAOBT+ekkukgWrkSYAl24GqZ9gm5kBLVBULJQF9o4GZBUGOhAIK0YZ+UT+AQ+jxtx6cYHUNw5C7GkUpWYzFR6TDvTPTTft+nDuffU/amia1U3n782Gd97ML3/8Otfo9tNonEUR/EoiUE0YuXbqPXz7/V5AOAF9yjP44+81ClT8+0e7R2VrcZznxwA8Fxsvv+3GrzdAeDG+ujjT94/Pjm5+2GadiMm382GSZR/y/bj+/FlZDGKO9GPvyLytTJ+592Tu9FKC4N4Y7KYDYvKyWc/Vtc//i1iWX8Y/RjU1x+mpY36xWzYjpeq8Y+yGH3wQ/TjlaLml/dWc1/Vv1VTH8ODePP1jfnfjn789EU8iCzuPVb/zWGavp1//+dXnxbZoj5ZzIaddb+qd/Oq7gkAAAAAAAAAAAAAAAAAAAAAADff7XRtsH3+zurg/wvanzwfqLc64Gexcb7PnTRN86Ts/299K15tRes61w4AAAAAAAAAAAAAAAAAAAAviun8fHya9SJiGWSjszKTzSNiO7NHsPqsv6Yp/t7OdCLiMkOUwa19q6JZTS1LiiW347+Xt6OzrHx65+aeqyi2PxudJa247IY/GSTrTK8MohFxNr0V5VhFplcGG5n/PXo3yrEq49PkaTe3W/eQPIMgr3n8mjurDh7P9KoV1HTuXTD6wcuXmnPe39GURER7vZkXX6f9bPfw6v4HAQAAAAAAAAAAAAAAAAAApen8fNxYfvRb0/jwGiYEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANdgOj8fny5//3+PYFEV7+qTN4ugFVWmZtiDK14mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN9w/AQAA//8XQlpx") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4) 12.241176435s ago: executing program 7 (id=1459): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) mremap(&(0x7f000004f000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f000016c000/0x2000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x64) 10.41501113s ago: executing program 7 (id=1530): r0 = syz_ublk_setup_io_uring(0x21, &(0x7f0000000240)={0x0, 0x8be, 0x400, 0x1024002, 0x8004d}, &(0x7f0000000380)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x1, 0x40, 0x1}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000001c0)={0x2e, 0x4d, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000100)=@any_dev={0x3, 0x9ad, 0x0, 0x0, 0x1000, 0x800, 0x0, 0x0, 0x62}}}, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000800)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x98c8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@new_dev={0x1, 0x618, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc}}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r4, &(0x7f0000000340), 0x8) 10.282365549s ago: executing program 37 (id=1530): r0 = syz_ublk_setup_io_uring(0x21, &(0x7f0000000240)={0x0, 0x8be, 0x400, 0x1024002, 0x8004d}, &(0x7f0000000380)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x1, 0x40, 0x1}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000001c0)={0x2e, 0x4d, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000100)=@any_dev={0x3, 0x9ad, 0x0, 0x0, 0x1000, 0x800, 0x0, 0x0, 0x62}}}, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000800)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x98c8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@new_dev={0x1, 0x618, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc}}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r4, &(0x7f0000000340), 0x8) 1.63051418s ago: executing program 1 (id=1744): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000a80)=@updpolicy={0x1b0, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, [@algo_crypt={0xf7, 0x2, {{'fpu(pcbc(aes))\x00'}, 0x578, "d3abff4600f446a5fde3fc44368c27d27291bc63a618040220a8efe8e714a748d05bc84d32f5282aceb69324dce5821a11935a83d3ee5c62df2d5451395ddda71347d921a9426232a45e040d7ecaeaec4659c653ad8cdd4800e73df923556fb945d10d02b0d29464e839850fefb93382e01d67554cc3d102ef3b9e69064a6963ebf4814e2012351934d2d262a0effe1177df2bd92b5cae876d196d0324b104223bc2507fc4f1e25d3bcd1ccc79c204"}}]}, 0x1b0}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="b80000001900674c000000000000000000000000000000000000000000000000e000000200000000000000000000000000000000000000000a"], 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=@updpolicy={0xb8, 0x14, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 1.43772157s ago: executing program 5 (id=1750): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000040)={0x39, 0x0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 1.366764231s ago: executing program 1 (id=1751): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0xfffffff9, 0x6, 0x16, "0062007d8200f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000009c0)=0x56) 1.365125418s ago: executing program 9 (id=1752): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82, 0x0, 0x0}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0xb, 0x4004, @fd, 0xf8, 0x0, 0x0, 0x11, 0x1}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 1.269869854s ago: executing program 5 (id=1753): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, '\x00', "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "9b1f80001b00"}, 0x38) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="e400000000000000000000000700000094040000865400000003051005c3e45b3e088e6f722b0df22b3c00126eacb1ceb7f260dab33486c73af20b59020788c2fdffc9060c47629611bad4427b49310104076002042a03051106b63d39a9a516678325f283800b5d83237b00000000ac1414aaac1414bbe0000002ffffffff00000000ac14142de0000002890327440c7b302e7dc6a00000000807174bac1414aae00000027f0000017f000001ac1e10018317eaac1e0101ac1414aaffffffff64010101e0000001831b0b640101017f00000164010102ffffffffac1414aae000000100000000001400"], 0x110}, 0x0) 1.263421779s ago: executing program 9 (id=1754): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[], 0x0, 0x257, &(0x7f00000000c0)="$eJzs3c9qG0ccB/DfSrIttwf50FMpdKE99GRsP4FMcaHUpxYd2h5aU9tQJGGwQWC3VPjUJ8hr5JLnyCVvkAcI5JaADRPWkiwryIkV609wPp+Lhp357m9md5FOO/rzq3Zz/+jk8Pzf51GtZlGqRz27eBwDKwEAPDSvU4qXqWeyZKU0qzkBALN1x9//1TlOCQCYsV9+/e2n7d3dnZ/zvBrR/r/TyKL32evfPoy/oxUHsRG1uIxI13rtH37c3YlKXliLb9vdTqNItv942j//9ouIq/xm1GJtfH4z77mR73YaS/FZv369yG9FLb4Yn98ak4/Gcnz3zY35r0ctnv0VR9GK/Siyw/x/m3n+fXr06p/fixkX+azbaaxcjRtK5bnfHAAAAAAAAAAAAAAAAAAAAAAAHqz1PM/zlJ6klFJ3ZP+d8uVV/3o+sDa6P08vf9v+QN0b++tsFCWy3vhhvhJfVqKyyLUDAAAAAAAAAAAAAAAAAADAx+Lk9Ky512odHN+vkcXIkcFr/SNjVvsHP6jEIHzfqUZ5cKIsYjprv3+jWNycan0dE9aqT1giSqdnzcHT1dzL3ne7qzGblaa3H7/jk9PyranlKRS9SCktfz7dVWQRsXR9Md81uBRL072Gc/sKAgAAAAAAAAAAAAAAAAAA+oYv/Y7pPF/AhAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgAYb//z9Bo9sP3zG14CUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwCXgTAAD//zbXdlQ=") syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000200)=ANY=[], 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$EVIOCRMFF(r0, 0x40085507, &(0x7f00000000c0)=0x18) 1.073911363s ago: executing program 5 (id=1765): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x5c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000010000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 987.931157ms ago: executing program 1 (id=1756): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) listen(r0, 0x5) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "12"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "12"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "1234"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) 963.725477ms ago: executing program 1 (id=1757): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)="0bbb", 0x2) sendmsg$inet(r0, &(0x7f0000002500)={0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000200)="bbcf7ba972fed643abcc5d175ee6b3cb564814db74269220a189212f56e95eddcc9df19d73078ef2a06d64e9f4ff01de7a869015d53951e7fdf4288de52e4dee13a65cdd7f549226a30627a75fefc67fd19d2f4f3f96435d034ddee6d5c0de2c1593d850dd1c61171856ad7fc66029d1032758b95745e623bdf5728d03deae9d2f06b46ea39a91bec7b3e694f44a1dbde3b0b2ffa742e4b047fa6b2e04a84f48524a5e2677a470888f0e7de7d3b4c4ddaee586028f9ef9dd1a94658ec3", 0xbd}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 933.04051ms ago: executing program 1 (id=1758): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) syz_clone3(0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000000)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r1, 0x1, r0, 0x4}) 904.653117ms ago: executing program 5 (id=1760): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="120000"], 0x48) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02"], 0x18}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="020300090e000000ff000e000a004e22"], 0x70}}, 0x8810) r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r1}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}}) 790.047362ms ago: executing program 5 (id=1761): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmsg$can_raw(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/197, 0xc5}], 0x1}, 0x1) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000700)={0x28, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xa7, 0x73}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x804c}, 0x4000080) 653.364069ms ago: executing program 5 (id=1766): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x21c1, &(0x7f0000000340)={0x0, 0xca23, 0x200, 0xfffffff7, 0x182}, &(0x7f0000000300), &(0x7f0000ff4000), 0x0) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000280)={{&(0x7f0000ff0000/0xd000)=nil, 0xd000}}) 545.818031ms ago: executing program 4 (id=1769): mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x100) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x111) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x4}}, './file1\x00'}) 497.266575ms ago: executing program 4 (id=1772): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000700)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv-cbc-aes-sha256-neon\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ab04000000248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000140)={'#! ', './file0', [], 0xa, "d3b6167d1d709c45abc07e5cc2492f31fecd07818909a2bdcac3108e93cbb811297afe5ec4be5c5e703860743f97d850f22d464b598e7594059a55727bd2b5660600c81a2f780d094c8ffb5faaff6997c85c218f671b86fa35f5de71aafaf84a7a03098dd01201af03ef2978f50bc904baa9176a1873b5f31715801623899f2952a8f11d7d79aff78e2ba7f80feb7689f34b73561cb489c31252a1ce"}, 0xa7) recvmmsg(r1, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/166, 0xa6}], 0x1}, 0x3}], 0x1, 0x400020a0, 0x0) 435.629943ms ago: executing program 4 (id=1773): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f0000000080)=ANY=[], 0xfc, 0x2c7, &(0x7f0000000740)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x2028009, 0x0, 0x1, 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1d3142, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x2) 392.844746ms ago: executing program 4 (id=1775): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x40, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 361.223114ms ago: executing program 9 (id=1776): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x200, 0x0, 0x2, 0x3}, 0x10) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='w', 0x1}], 0x1) 339.361771ms ago: executing program 6 (id=1777): r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143042, 0xf2) pwritev2(r0, &(0x7f0000002580)=[{&(0x7f00000002c0)="ff", 0x1}], 0x1, 0x5405, 0x0, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x141042, 0x8) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x4000) madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x64) sendfile(r0, r1, 0x0, 0xe3aa6ea) 330.180599ms ago: executing program 4 (id=1778): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2007, &(0x7f0000000980)=0x0) r2 = eventfd2(0x3, 0x80000) io_pgetevents(r1, 0x2, 0x2, &(0x7f0000000080)=[{}, {}], 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) io_destroy(r1) 275.150768ms ago: executing program 9 (id=1779): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x30, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24000000190001000000000000c3b2000a0000000003c8000000000008000600ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r0, &(0x7f0000000040), 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40300, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 250.063594ms ago: executing program 6 (id=1780): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000002c0)="e4", 0x1, 0x40, &(0x7f0000000000)={0xa, 0x4e20, 0x8000, @private1, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{&(0x7f0000000200)={0xa, 0x0, 0x80, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f0000000a00)=[{&(0x7f0000000280)=':', 0x1}], 0x1}}], 0x1, 0x40088d5) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000200)={0x0, 0x0, 0x20, 0x10000000000000}, &(0x7f0000000340)=0x18) 225.478918ms ago: executing program 6 (id=1781): pipe2(0x0, 0x80) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = socket(0x11, 0xa, 0x5) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @loopback}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendto$inet(r0, &(0x7f0000000000)="cf3a19d02404e49cf90a0a4363d1", 0x5ee, 0x800, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10) 186.734856ms ago: executing program 6 (id=1782): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000100)=0x4, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x11, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r1, &(0x7f0000000440), &(0x7f0000000480)=@udp=r0}, 0x20) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x6, &(0x7f0000000600)=@raw=[@map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xb7, 0x2}, @generic={0xb7, 0x3}, @generic={0x85, 0x0, 0x0, 0x0, 0x33}, @generic={0x95}], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000800)={r2, 0x0, 0xf, 0x0, &(0x7f0000000900)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) 162.025811ms ago: executing program 9 (id=1783): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/mcfilter\x00') write$tun(0xffffffffffffffff, 0x0, 0x42) pread64(r1, &(0x7f0000000a00)=""/143, 0x8f, 0x10005) 106.0312ms ago: executing program 4 (id=1784): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x80, 0x2, 0x27e}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000980)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x44, 0x0, r0, 0x0, 0x0, 0x0, 0x40000000}) r5 = syz_clone(0x44000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000180)={0x2e, 0x20, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x40000000, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000100)=@any_dev={0x5, 0x31, 0x0, 0x0, 0x1000, 0x4, r5, 0x0, 0x13}}}, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000080)={0x9, 0xffffffffffffffff, 0xc, {0xfff, 0x7}}, 0x1) 105.804027ms ago: executing program 6 (id=1785): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="000088a2020100000800faff0700d06d6558b77daaaaaaaaaaaa81000000080046810078006103000506"], 0x98) 90.731468ms ago: executing program 9 (id=1786): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, 0x0, 0x0, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x34}, 0x60) listen(r0, 0xf5f) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x80800) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x1000001, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 37.797693ms ago: executing program 1 (id=1787): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) 0s ago: executing program 6 (id=1788): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x1}, 0x10, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) kernel console output (not intermixed with test programs): ed from eth3 [ 40.141216][ T5216] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 40.166954][ T5350] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 40.195882][ T5216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.204422][ T5216] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.217571][ T1240] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.217621][ T1240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.221144][ T5350] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: block 3: comm syz.3.186: lblock 3 mapped to illegal pblock 3 (length 3) [ 40.228461][ T1240] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.228522][ T1240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.233647][ T5350] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 40.236523][ T5350] EXT4-fs (loop3): This should not happen!! Data will be lost [ 40.236523][ T5350] [ 40.264225][ T5350] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: comm syz.3.186: lblock 0 mapped to illegal pblock 0 (length 1) [ 40.297360][ T40] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:3: lblock 8 mapped to illegal pblock 8 (length 8) [ 40.298401][ T40] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 40.298418][ T40] EXT4-fs (loop3): This should not happen!! Data will be lost [ 40.298418][ T40] [ 40.299174][ T4713] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 40.300050][ T4713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 40.347438][ T4405] 8021q: adding VLAN 0 to HW filter on device eth1 [ 40.473483][ T4717] Bluetooth: hci2: command tx timeout [ 40.507023][ T5216] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.552487][ T5413] input: syz0 as /devices/virtual/input/input2 [ 40.648641][ T5431] syz_tun: entered allmulticast mode [ 40.649975][ T5433] netlink: 8 bytes leftover after parsing attributes in process `syz.4.201'. [ 40.660215][ T5431] pim6reg: entered allmulticast mode [ 40.662728][ T5216] veth0_vlan: entered promiscuous mode [ 40.669941][ T5216] veth1_vlan: entered promiscuous mode [ 40.671898][ T5431] pim6reg: left allmulticast mode [ 40.671985][ T5431] syz_tun: left allmulticast mode [ 40.694395][ T5216] veth0_macvtap: entered promiscuous mode [ 40.699293][ T5216] veth1_macvtap: entered promiscuous mode [ 40.709406][ T5216] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.715837][ T5216] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.763133][ T5440] netlink: 20 bytes leftover after parsing attributes in process `syz.0.203'. [ 40.765846][ T5440] netlink: 20 bytes leftover after parsing attributes in process `syz.0.203'. [ 40.767590][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.767603][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.797849][ T4405] 8021q: adding VLAN 0 to HW filter on device eth2 [ 40.798354][ T1240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.798366][ T1240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.816808][ T1310] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.816871][ T1310] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.816895][ T1310] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.816912][ T1310] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.002675][ T4405] 8021q: adding VLAN 0 to HW filter on device eth3 [ 41.200645][ T5491] input: syz1 as /devices/virtual/input/input3 [ 41.244832][ T5495] loop5: detected capacity change from 0 to 512 [ 41.247987][ T5495] EXT4-fs (loop5): Test dummy encryption mode enabled [ 41.249499][ T5495] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 41.252454][ T5495] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 41.264917][ T5495] EXT4-fs (loop5): 1 truncate cleaned up [ 41.265935][ T5495] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.356515][ T5216] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.389998][ T5513] tls_set_device_offload: netdev not found [ 41.434230][ T5517] loop5: detected capacity change from 0 to 512 [ 41.434611][ T5517] EXT4-fs: Ignoring removed oldalloc option [ 41.445104][ T5517] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 41.462558][ T5517] EXT4-fs (loop5): 1 orphan inode deleted [ 41.463980][ T5517] EXT4-fs (loop5): 1 truncate cleaned up [ 41.465584][ T5517] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.486182][ T5523] loop3: detected capacity change from 0 to 1024 [ 41.499650][ T5523] EXT4-fs: Ignoring removed bh option [ 41.500053][ T5523] EXT4-fs: Ignoring removed bh option [ 41.500671][ T5523] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 41.518129][ T5523] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.551384][ T5216] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.561967][ T5523] EXT4-fs error (device loop3): ext4_find_dest_de:2050: inode #12: block 7: comm syz.3.229: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 41.573466][ T5523] EXT4-fs (loop3): Remounting filesystem read-only [ 41.630874][ T4713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.669530][ T5544] loop0: detected capacity change from 0 to 512 [ 41.735394][ T5544] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.746246][ T5544] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.239: corrupted xattr block 33: invalid header [ 41.748984][ T5544] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.239: corrupted xattr block 33: invalid header [ 41.749175][ T5544] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.239: corrupted xattr block 33: invalid header [ 41.831430][ T5544] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.239: corrupted xattr block 33: invalid header [ 41.860430][ T5544] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.239: corrupted xattr block 33: invalid header [ 41.863967][ T5544] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 41.866128][ T5544] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 8 with error 28 [ 41.866149][ T5544] EXT4-fs (loop0): This should not happen!! Data will be lost [ 41.866149][ T5544] [ 41.866159][ T5544] EXT4-fs (loop0): Total free blocks count 0 [ 41.866354][ T5544] EXT4-fs (loop0): Free/Dirty block details [ 41.866372][ T5544] EXT4-fs (loop0): free_blocks=65280 [ 41.866386][ T5544] EXT4-fs (loop0): dirty_blocks=8 [ 41.866393][ T5544] EXT4-fs (loop0): Block reservation details [ 41.866400][ T5544] EXT4-fs (loop0): i_reserved_data_blocks=8 [ 41.870109][ T5544] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 41.879656][ T5567] binder: 5566:5567 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 41.888768][ T4712] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 41.904313][ T5570] netlink: 'syz.4.249': attribute type 1 has an invalid length. [ 41.906411][ T5570] netlink: 224 bytes leftover after parsing attributes in process `syz.4.249'. [ 42.134867][ T5591] loop4: detected capacity change from 0 to 128 [ 42.136939][ T5591] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 42.140570][ T5591] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 42.175357][ T5591] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 42.175397][ T5591] FAT-fs (loop4): Filesystem has been set read-only [ 42.204290][ T4721] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 42.448450][ T5616] loop0: detected capacity change from 0 to 1024 [ 42.458098][ T5616] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 42.467264][ T5616] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.266: bg 0: block 112: padding at end of block bitmap is not set [ 42.472066][ T5616] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 42.472115][ T5616] EXT4-fs (loop0): This should not happen!! Data will be lost [ 42.472115][ T5616] [ 42.472125][ T5616] EXT4-fs (loop0): Total free blocks count 0 [ 42.472134][ T5616] EXT4-fs (loop0): Free/Dirty block details [ 42.472144][ T5616] EXT4-fs (loop0): free_blocks=0 [ 42.472153][ T5616] EXT4-fs (loop0): dirty_blocks=16 [ 42.472161][ T5616] EXT4-fs (loop0): Block reservation details [ 42.472167][ T5616] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 42.498825][ T39] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: comm kworker/u8:2: lblock 32 mapped to illegal pblock 0 (length 1) [ 42.502507][ T39] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 1 with error 117 [ 42.509072][ T4712] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 42.553646][ T4717] Bluetooth: hci2: command tx timeout [ 42.635885][ T5638] xt_hashlimit: size too large, truncated to 1048576 [ 42.729407][ T5648] loop4: detected capacity change from 0 to 128 [ 42.740003][ T5648] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 42.760720][ T4721] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 42.796598][ T5653] loop2: detected capacity change from 0 to 512 [ 42.799842][ T5653] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 42.817662][ T5653] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.281: bad orphan inode 13 [ 42.817775][ T5653] loop2: lost filesystem error report for type 5 error -117 [ 42.819753][ T5653] ext4_test_bit(bit=12, block=18) = 1 [ 42.819772][ T5653] is_bad_inode(inode)=0 [ 42.819778][ T5653] NEXT_ORPHAN(inode)=0 [ 42.819783][ T5653] max_ino=32 [ 42.819789][ T5653] i_nlink=1 [ 42.820288][ T5653] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 42.846845][ T5653] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 42.853796][ T5653] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.281: bg 0: block 248: padding at end of block bitmap is not set [ 42.856838][ T5653] Quota error (device loop2): write_blk: dquota write failed [ 42.856900][ T5653] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 42.856929][ T5653] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.281: Failed to acquire dquot type 1 [ 42.868737][ T5653] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 42.871103][ T5653] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 42.873121][ T5653] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.281: Failed to acquire dquot type 1 [ 42.895324][ T4720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 42.897348][ T12] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-5 [ 42.897449][ T12] EXT4-fs error (device loop2): ext4_release_dquot:7077: comm kworker/u8:0: Failed to release dquot type 1 [ 42.897463][ T12] loop2: lost filesystem error report for type 5 error -117 [ 43.360349][ T5697] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 43.363218][ T5697] overlayfs: failed to set xattr on upper [ 43.363252][ T5697] overlayfs: ...falling back to redirect_dir=nofollow. [ 43.363266][ T5697] overlayfs: ...falling back to uuid=null. [ 43.363280][ T5697] overlayfs: ...falling back to xino=off. [ 43.363308][ T5697] overlayfs: conflicting lowerdir path [ 43.482152][ T5710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.482364][ T5710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.126928][ T5738] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 44.126970][ T5738] FAT-fs (loop2): Filesystem has been set read-only [ 44.127008][ T5738] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 44.127021][ T5738] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 44.128003][ T5738] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 44.128025][ T5738] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 44.128048][ T5738] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 44.128060][ T5738] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 44.128082][ T5738] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 44.128093][ T5738] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 44.128113][ T5738] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 44.230220][ T5748] ublk0: read batch cmd buffer failed [ 44.230288][ T5748] ublk0: read batch cmd buffer failed [ 44.423542][ T5762] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 44.423580][ T5762] unable to read xattr id index table [ 44.428071][ T5762] SQUASHFS error: zlib decompression failed, data probably corrupt [ 44.428110][ T5762] SQUASHFS error: Failed to read block 0x9b: -5 [ 44.428119][ T5762] SQUASHFS error: Unable to read metadata cache entry [99] [ 44.428128][ T5762] SQUASHFS error: Unable to read inode 0x127 [ 44.714671][ T4717] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 45.125550][ T5807] syzkaller1: entered promiscuous mode [ 45.125589][ T5807] syzkaller1: entered allmulticast mode [ 45.599657][ T5853] set_capacity_and_notify: 2 callbacks suppressed [ 45.601935][ T5853] loop0: detected capacity change from 0 to 512 [ 45.607302][ T5853] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 45.616148][ T5853] EXT4-fs (loop0): 1 truncate cleaned up [ 45.619103][ T5853] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.711030][ T5858] EXT4-fs (loop0): shut down requested (2) [ 45.736559][ T5860] loop2: detected capacity change from 0 to 256 [ 45.751299][ T5860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.367'. [ 45.788128][ T4712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.840110][ T5081] kernel read not supported for file task/181/net/mcfilter (pid: 5081 comm: kworker/0:8) [ 45.970053][ T5868] loop2: detected capacity change from 0 to 4096 [ 45.974859][ T5870] loop0: detected capacity change from 0 to 128 [ 45.979444][ T5870] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 45.980887][ T5868] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.059324][ T4712] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 46.073816][ T4716] Bluetooth: hci2: command tx timeout [ 46.079152][ T4720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.305072][ T5886] loop2: detected capacity change from 0 to 4096 [ 46.324762][ T5886] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.423049][ T4720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.601361][ T5906] loop5: detected capacity change from 0 to 8192 [ 46.645542][ T5906] loop5: p1 p2 p3 [ 46.646659][ T5906] loop5: partition table partially beyond EOD, truncated [ 46.646868][ T5906] loop5: p1 start 51379968 is beyond EOD, truncated [ 46.649551][ T5906] loop5: p3 size 100663552 extends beyond EOD, truncated [ 46.718507][ T4704] udevd[4704]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 46.719468][ T4900] udevd[4900]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 46.749771][ T5914] loop5: detected capacity change from 0 to 512 [ 46.758379][ T5914] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.765698][ T5914] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.390: corrupted xattr block 33: invalid header [ 46.766928][ T5914] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.390: corrupted xattr block 33: invalid header [ 46.767213][ T5914] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.390: corrupted xattr block 33: invalid header [ 46.808200][ T5914] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.390: corrupted xattr block 33: invalid header [ 46.810059][ T5914] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 46.811077][ T5914] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 31 with error 28 [ 46.811098][ T5914] EXT4-fs (loop5): This should not happen!! Data will be lost [ 46.811098][ T5914] [ 46.811107][ T5914] EXT4-fs (loop5): Total free blocks count 0 [ 46.811116][ T5914] EXT4-fs (loop5): Free/Dirty block details [ 46.811126][ T5914] EXT4-fs (loop5): free_blocks=65280 [ 46.811137][ T5914] EXT4-fs (loop5): dirty_blocks=31 [ 46.811144][ T5914] EXT4-fs (loop5): Block reservation details [ 46.811151][ T5914] EXT4-fs (loop5): i_reserved_data_blocks=31 [ 46.905901][ T5216] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.481172][ T5970] netlink: 'syz.2.415': attribute type 83 has an invalid length. [ 47.524749][ T4716] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 47.524799][ T4716] Bluetooth: hci0: Injecting HCI hardware error event [ 47.525380][ T4716] Bluetooth: hci0: hardware error 0x00 [ 47.589244][ T5976] loop0: detected capacity change from 0 to 512 [ 47.639458][ T5976] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 47.641814][ T5976] EXT4-fs (loop0): Remounting filesystem read-only [ 47.643308][ T5976] EXT4-fs (loop0): 1 truncate cleaned up [ 47.643401][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 47.643411][ C1] EXT4-fs (loop0): initial error at time 47: ext4_mb_generate_buddy:1317 [ 47.643423][ C1] EXT4-fs (loop0): last error at time 47: ext4_mb_generate_buddy:1317 [ 47.644824][ T5976] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.666435][ T4717] Bluetooth: hci0: unexpected cc 0x200b length: 2 > 1 [ 47.666472][ T4717] Bluetooth: hci0: unexpected event for opcode 0x200b [ 47.671191][ T1240] Quota error (device loop0): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 47.671310][ T1240] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 47.671333][ T1240] Quota error (device loop0): write_blk: dquota write failed [ 47.671345][ T1240] Quota error (device loop0): remove_free_dqentry: Can't write block (5) with free entries [ 47.671358][ T1240] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 47.671370][ T1240] Quota error (device loop0): write_blk: dquota write failed [ 47.671380][ T1240] Quota error (device loop0): free_dqentry: Can't move quota data block (5) to free list [ 47.671415][ T1240] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 47.688918][ T4712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.772279][ T5991] netlink: 52 bytes leftover after parsing attributes in process `syz.3.424'. [ 47.780756][ T5991] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.781178][ T5991] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.809519][ T5993] loop5: detected capacity change from 0 to 2048 [ 47.857862][ T5993] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.882585][ T5999] loop2: detected capacity change from 0 to 128 [ 47.882973][ T5999] EXT4-fs: Ignoring removed nobh option [ 47.905721][ T5999] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 47.943211][ T5216] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.162881][ T4720] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 48.347406][ T6029] tipc: Started in network mode [ 48.348495][ T6029] tipc: Node identity 887766554433221100ffeeddccbbaa99, cluster identity 1 [ 48.751551][ T6052] hugetlbfs: syz.0.449 (6052): Using mlock ulimits for SHM_HUGETLB is obsolete [ 48.844679][ T39] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 48.859895][ T6060] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 49.007549][ T6079] EXT4-fs: Ignoring removed nomblk_io_submit option [ 49.018229][ T6079] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.096091][ T6086] netlink: 'syz.0.465': attribute type 1 has an invalid length. [ 49.118801][ T4720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.134512][ T6086] 8021q: adding VLAN 0 to HW filter on device bond1 [ 49.169920][ T6089] input: syz1 as /devices/virtual/input/input6 [ 49.214000][ T6086] bond1: (slave gretap1): making interface the new active one [ 49.216280][ T6086] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 49.229870][ T6098] EXT4-fs: Ignoring removed bh option [ 49.254943][ T6098] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.270665][ T6098] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 49.290723][ T6104] Dev loop8: unable to read RDB block 7 [ 49.295065][ T6104] loop8: unable to read partition table [ 49.296595][ T6104] loop8: partition table beyond EOD, truncated [ 49.296635][ T6104] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 49.354986][ T4721] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.684232][ T4716] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 49.755496][ T6140] typec_fusb302 0-0022: I2C/SMBus block functionality not supported! [ 49.758064][ T6140] i2c i2c-0: new_device: Instantiated device typec_fusb302 at 0x22 [ 49.824969][ T6148] EXT4-fs: inline encryption not supported [ 49.828698][ T6148] EXT4-fs: old and new quota format mixing [ 49.908131][ T6155] Injecting memory failure for pfn 0x139200 at process virtual address 0x20000000 [ 49.922983][ T6155] Memory failure: 0x139200: recovery action for dirty LRU page: Recovered [ 50.011697][ T4891] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 50.013287][ T4891] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 50.090377][ T6171] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.122726][ T4712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.214248][ T1240] netdevsim netdevsim120 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.214290][ T1240] netdevsim netdevsim120 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.295081][ T6188] netlink: 'syz.2.508': attribute type 1 has an invalid length. [ 50.325972][ T6190] Mass Storage Function, version: 2009/09/11 [ 50.327608][ T6190] LUN: removable file: (no medium) [ 50.732758][ T1240] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 50.732808][ T1240] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.798352][ T6214] bridge1: entered promiscuous mode [ 50.798453][ T4717] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 50.799098][ T4717] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 50.799369][ T4717] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 50.799702][ T4717] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 50.799934][ T4717] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 50.801017][ T6214] bridge1: entered allmulticast mode [ 50.822330][ T1240] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 50.825580][ T1240] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.885629][ T1240] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 50.885681][ T1240] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.964109][ T1240] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 50.964152][ T1240] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.985425][ T6239] vxcan0: tx drop: invalid sa for name 0x0000000000000001 [ 50.989469][ T6237] set_capacity_and_notify: 5 callbacks suppressed [ 50.989814][ T6237] loop8: detected capacity change from 0 to 7 [ 50.991043][ T6237] Dev loop8: unable to read RDB block 7 [ 50.991059][ T6237] loop8: unable to read partition table [ 50.991122][ T6237] loop8: partition table beyond EOD, truncated [ 50.991132][ T6237] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 51.096677][ T6215] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.096883][ T6215] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.096952][ T6215] bridge_slave_0: entered allmulticast mode [ 51.097422][ T6215] bridge_slave_0: entered promiscuous mode [ 51.102719][ T6215] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.102789][ T6215] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.102888][ T6215] bridge_slave_1: entered allmulticast mode [ 51.103339][ T6215] bridge_slave_1: entered promiscuous mode [ 51.136609][ T1240] bridge_slave_1: left allmulticast mode [ 51.136648][ T1240] bridge_slave_1: left promiscuous mode [ 51.136755][ T1240] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.142118][ T1240] bridge_slave_0: left allmulticast mode [ 51.144263][ T1240] bridge_slave_0: left promiscuous mode [ 51.145776][ T1240] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.149242][ T1240] bridge0: left allmulticast mode [ 51.169382][ T6256] loop4: detected capacity change from 0 to 1024 [ 51.194159][ T6256] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.207792][ T6256] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 51.215305][ T6256] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 51.215346][ T6256] EXT4-fs (loop4): This should not happen!! Data will be lost [ 51.215346][ T6256] [ 51.215369][ T6256] EXT4-fs (loop4): Total free blocks count 0 [ 51.215382][ T6256] EXT4-fs (loop4): Free/Dirty block details [ 51.215395][ T6256] EXT4-fs (loop4): free_blocks=20480 [ 51.215405][ T6256] EXT4-fs (loop4): dirty_blocks=80 [ 51.215411][ T6256] EXT4-fs (loop4): Block reservation details [ 51.215417][ T6256] EXT4-fs (loop4): i_reserved_data_blocks=5 [ 51.232498][ T6256] EXT4-fs (loop4): shut down requested (2) [ 51.368663][ T1240] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 51.385976][ T1240] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 51.411365][ T6283] 9pnet_fd: p9_fd_create_unix (6283): problem connecting socket: ./file0: -111 [ 51.414487][ T1240] bond0 (unregistering): Released all slaves [ 51.419451][ T6215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.436760][ T6269] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.436838][ T6269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.471596][ T6215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.482880][ T4405] 8021q: adding VLAN 0 to HW filter on device eth5 [ 51.550930][ T6215] team0: Port device team_slave_0 added [ 51.553061][ T6215] team0: Port device team_slave_1 added [ 51.577367][ T6215] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.578786][ T6215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 51.583974][ T6215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.607109][ T6215] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.607144][ T6215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 51.607175][ T6215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.622516][ T6297] Illegal XDP return value 32768 on prog (id 48) dev syz_tun, expect packet loss! [ 51.709330][ T6215] hsr_slave_0: entered promiscuous mode [ 51.711874][ T6215] hsr_slave_1: entered promiscuous mode [ 51.714378][ T6215] debugfs: 'hsr0' already exists in 'hsr' [ 51.714407][ T6215] Cannot create hsr debugfs directory [ 52.564590][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 52.564631][ T30] audit: type=1326 audit(52.550:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6352 comm="syz.4.561" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ab781a8 code=0x0 [ 52.594517][ T1240] hsr_slave_0: left promiscuous mode [ 52.603702][ T1240] hsr_slave_1: left promiscuous mode [ 52.604355][ T1240] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.604369][ T1240] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.611205][ T1240] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.611244][ T1240] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.616343][ T6359] loop5: detected capacity change from 0 to 512 [ 52.627208][ T1240] veth1_macvtap: left promiscuous mode [ 52.627271][ T1240] veth0_macvtap: left promiscuous mode [ 52.627326][ T1240] veth1_vlan: left promiscuous mode [ 52.627363][ T1240] veth0_vlan: left promiscuous mode [ 52.651861][ T6359] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 52.656073][ T6359] EXT4-fs (loop5): 1 truncate cleaned up [ 52.656557][ T6359] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.686176][ T5216] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.722306][ T6371] loop5: detected capacity change from 0 to 512 [ 52.751657][ T6371] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.565: inode has both inline data and extents flags [ 52.751703][ T6371] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 52.754370][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 52.754388][ C1] EXT4-fs (loop5): initial error at time 52: ext4_orphan_get:1399: inode 15 [ 52.754405][ C1] EXT4-fs (loop5): last error at time 52: ext4_orphan_get:1399: inode 15 [ 52.770786][ T6371] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.565: couldn't read orphan inode 15 (err -117) [ 52.770834][ T6371] loop5: lost filesystem error report for type 5 error -117 [ 52.860947][ T1240] team0 (unregistering): Port device team_slave_1 removed [ 52.865677][ T1240] team0 (unregistering): Port device team_slave_0 removed [ 52.873482][ T4717] Bluetooth: hci1: command tx timeout [ 52.969172][ T30] audit: type=1400 audit(52.960:4): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=6384 comm="syz.5.568" src=65532 dest=20002 netif=wpan0 [ 52.982341][ T6351] netlink: 20 bytes leftover after parsing attributes in process `syz.0.560'. [ 52.982477][ T6360] netlink: 20 bytes leftover after parsing attributes in process `syz.0.560'. [ 53.061055][ T6215] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 53.073141][ T6215] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 53.075368][ T6215] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 53.079066][ T6215] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 53.080872][ T6215] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 53.083272][ T6215] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 53.086841][ T6215] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 53.090530][ T6215] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 53.124119][ T6215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.131721][ T6215] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.140795][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.140846][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.152103][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.152156][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.152828][ T30] audit: type=1326 audit(53.140:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6391 comm="syz.0.570" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa7781a8 code=0x0 [ 53.391583][ T6215] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.542268][ T6215] veth0_vlan: entered promiscuous mode [ 53.555385][ T6215] veth1_vlan: entered promiscuous mode [ 53.574261][ T6215] veth0_macvtap: entered promiscuous mode [ 53.577615][ T6215] veth1_macvtap: entered promiscuous mode [ 53.586563][ T6215] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.590164][ T6215] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.656959][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.656994][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.663886][ T39] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.663937][ T39] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.663984][ T39] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.678614][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.678647][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.684103][ T1310] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.738867][ T4405] 8021q: adding VLAN 0 to HW filter on device eth4 [ 53.949955][ T6509] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.950736][ T6509] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.022068][ T6524] netlink: 16 bytes leftover after parsing attributes in process `syz.5.592'. [ 54.024302][ T6509] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.029725][ T6509] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.189164][ T6524] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 54.192462][ T6524] bond1 (unregistering): Released all slaves [ 54.210286][ T4405] 8021q: adding VLAN 0 to HW filter on device eth6 [ 54.224562][ T1240] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.224656][ T1240] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.224706][ T1240] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.224721][ T1240] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.495450][ T4405] 8021q: adding VLAN 0 to HW filter on device eth7 [ 54.578499][ T6570] netlink: 8 bytes leftover after parsing attributes in process `syz.4.600'. [ 54.578544][ T6570] netlink: 'syz.4.600': attribute type 5 has an invalid length. [ 54.578554][ T6570] netlink: 28 bytes leftover after parsing attributes in process `syz.4.600'. [ 54.584920][ T6570] geneve2: entered promiscuous mode [ 54.584953][ T6570] geneve2: entered allmulticast mode [ 54.808874][ T6589] netlink: 4 bytes leftover after parsing attributes in process `syz.0.608'. [ 54.954558][ T4717] Bluetooth: hci1: command tx timeout [ 55.024814][ T6610] loop0: detected capacity change from 0 to 512 [ 55.029793][ T6610] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 55.046770][ T6610] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 55.046829][ T6610] System zones: 1-12 [ 55.055098][ T6610] EXT4-fs (loop0): 1 truncate cleaned up [ 55.111125][ T4712] EXT4-fs error (device loop0): mb_free_blocks:2049: group 0, inode 11: block 54:freeing already freed block (bit 53); block bitmap corrupt. [ 55.118494][ T4712] EXT4-fs error (device loop0): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 55.126624][ T4712] EXT4-fs error (device loop0): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 55.254212][ T6627] loop5: detected capacity change from 0 to 128 [ 55.265281][ T6627] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 55.268969][ T6627] System zones: 1-3, 19-19, 35-36 [ 55.281521][ T6627] EXT4-fs warning (device loop5): verify_group_input:137: Cannot add at group 1986330625 (only 1 groups) [ 55.459562][ T1240] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 55.459616][ T1240] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.540985][ T4716] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 55.549073][ T4716] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 55.550845][ T4716] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 55.552287][ T1240] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 55.552309][ T1240] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.554148][ T4716] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 55.554945][ T4716] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 55.646947][ T1240] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 55.646994][ T1240] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.672482][ T6669] overlayfs: failed to clone upperpath [ 55.730608][ T1240] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 55.730647][ T1240] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.055114][ T1240] netdevsim netdevsim120 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 56.055169][ T1240] netdevsim netdevsim120 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.071047][ T6651] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.071112][ T6651] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.071281][ T6651] bridge_slave_0: entered allmulticast mode [ 56.071868][ T6651] bridge_slave_0: entered promiscuous mode [ 56.079291][ T6651] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.081967][ T6651] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.082076][ T6651] bridge_slave_1: entered allmulticast mode [ 56.082580][ T6651] bridge_slave_1: entered promiscuous mode [ 56.130174][ T6651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.131182][ T6651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.154978][ T6651] team0: Port device team_slave_0 added [ 56.157349][ T6651] team0: Port device team_slave_1 added [ 56.249705][ T1240] bridge_slave_1: left allmulticast mode [ 56.249742][ T1240] bridge_slave_1: left promiscuous mode [ 56.249861][ T1240] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.269255][ T1240] bridge_slave_0: left allmulticast mode [ 56.269308][ T1240] bridge_slave_0: left promiscuous mode [ 56.269418][ T1240] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.331904][ T6748] loop2: detected capacity change from 0 to 8 [ 56.458873][ T6732] SQUASHFS error: zlib decompression failed, data probably corrupt [ 56.458921][ T6732] SQUASHFS error: Failed to read block 0x4df: -5 [ 56.458953][ T6732] SQUASHFS error: Unable to read data cache entry [4df] [ 56.458969][ T6732] SQUASHFS error: Unable to read page, block 4df, size 1 [ 56.459305][ T6732] SQUASHFS error: Unable to read data cache entry [4df] [ 56.459318][ T6732] SQUASHFS error: Unable to read page, block 4df, size 1 [ 56.469984][ T6732] SQUASHFS error: zlib decompression failed, data probably corrupt [ 56.471675][ T6732] SQUASHFS error: Failed to read block 0x4de: -5 [ 56.479438][ T6732] SQUASHFS error: zlib decompression failed, data probably corrupt [ 56.481014][ T6732] SQUASHFS error: Failed to read block 0x4e0: -5 [ 56.485280][ T6732] SQUASHFS error: zlib decompression failed, data probably corrupt [ 56.486787][ T6732] SQUASHFS error: Failed to read block 0x4de: -5 [ 56.487872][ T6732] SQUASHFS error: Unable to read data cache entry [4de] [ 56.489139][ T6732] SQUASHFS error: Unable to read page, block 4de, size 1 [ 56.490439][ T6732] SQUASHFS error: Unable to read data cache entry [4de] [ 56.492096][ T6732] SQUASHFS error: Unable to read page, block 4de, size 1 [ 56.493570][ T6732] SQUASHFS error: Unable to read data cache entry [4de] [ 56.494863][ T6732] SQUASHFS error: Unable to read page, block 4de, size 1 [ 56.496157][ T6732] SQUASHFS error: Unable to read data cache entry [4de] [ 56.497337][ T6732] SQUASHFS error: Unable to read page, block 4de, size 1 [ 56.680081][ T1240] bond1 (unregistering): (slave gretap1): Releasing active interface [ 56.743187][ T1240] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 56.777272][ T1240] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 56.796850][ T1240] bond0 (unregistering): Released all slaves [ 56.800178][ T1240] bond1 (unregistering): Released all slaves [ 56.808749][ T6651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.808777][ T6651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.808793][ T6651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.809679][ T6651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.809686][ T6651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.809701][ T6651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.818796][ T4405] 8021q: adding VLAN 0 to HW filter on device eth8 [ 56.880791][ T6651] hsr_slave_0: entered promiscuous mode [ 56.895496][ T6651] hsr_slave_1: entered promiscuous mode [ 57.033473][ T4717] Bluetooth: hci1: command tx timeout [ 57.324480][ T1240] hsr_slave_0: left promiscuous mode [ 57.331842][ T1240] hsr_slave_1: left promiscuous mode [ 57.337931][ T1240] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.337969][ T1240] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 57.356403][ T1240] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.356444][ T1240] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 57.368599][ T1240] veth1_macvtap: left promiscuous mode [ 57.368659][ T1240] veth0_macvtap: left promiscuous mode [ 57.368710][ T1240] veth1_vlan: left promiscuous mode [ 57.368745][ T1240] veth0_vlan: left promiscuous mode [ 57.386103][ T6829] loop2: detected capacity change from 0 to 256 [ 57.474383][ T6837] binder: 6836:6837 got transaction to context manager from process owning it [ 57.476223][ T6837] binder: 6836:6837 transaction call to 6836:0 failed 4/29201/-22, code 0 size 88-24 line 3243 [ 57.490107][ T4723] binder: undelivered TRANSACTION_ERROR: 29201 [ 57.593621][ T4717] Bluetooth: hci0: command tx timeout [ 57.612632][ T1240] team0 (unregistering): Port device team_slave_1 removed [ 57.622154][ T1240] team0 (unregistering): Port device team_slave_0 removed [ 57.670167][ T6856] loop2: detected capacity change from 0 to 512 [ 57.672399][ T6856] EXT4-fs (loop2): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 57.674627][ T6856] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 57.676714][ T6856] EXT4-fs (loop2): The Hurd can't support 64-bit file systems [ 57.683066][ T6856] netlink: 16 bytes leftover after parsing attributes in process `syz.2.700'. [ 57.742377][ T4405] 8021q: adding VLAN 0 to HW filter on device eth9 [ 57.818580][ T6651] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 57.821285][ T6651] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 57.825490][ T6651] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 57.832787][ T6651] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 57.842768][ T6651] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 57.851775][ T6651] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 57.852155][ T6651] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 57.857125][ T6651] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 57.919801][ T6651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.929737][ T6651] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.932277][ T1310] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.932326][ T1310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.941379][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.941427][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.110836][ T6910] netlink: 8 bytes leftover after parsing attributes in process `syz.2.714'. [ 58.112726][ T6910] netlink: 4 bytes leftover after parsing attributes in process `syz.2.714'. [ 58.114573][ T1513] IPVS: starting estimator thread 0... [ 58.150579][ T6910] netlink: 8 bytes leftover after parsing attributes in process `syz.2.714'. [ 58.150626][ T6910] netlink: 4 bytes leftover after parsing attributes in process `syz.2.714'. [ 58.174697][ T15] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.175174][ T15] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.175237][ T15] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.175256][ T15] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.207565][ T6912] IPVS: using max 58 ests per chain, 139200 per kthread [ 58.219501][ T4405] 8021q: adding VLAN 0 to HW filter on device eth10 [ 58.271285][ T6651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.275699][ T6934] netlink: 24 bytes leftover after parsing attributes in process `syz.2.719'. [ 58.454673][ T6651] veth0_vlan: entered promiscuous mode [ 58.462014][ T6651] veth1_vlan: entered promiscuous mode [ 58.500907][ T6651] veth0_macvtap: entered promiscuous mode [ 58.507684][ T6651] veth1_macvtap: entered promiscuous mode [ 58.524288][ T6651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.530941][ T6651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.595598][ T4405] 8021q: adding VLAN 0 to HW filter on device eth11 [ 58.596933][ T6941] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.600292][ T6940] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.600471][ T6940] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.600491][ T6940] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.628330][ T6941] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.628365][ T6941] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.648411][ T6942] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.648443][ T6942] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.727488][ T6998] tipc: Started in network mode [ 58.728574][ T6998] tipc: Node identity ac14140f, cluster identity 4711 [ 58.729979][ T6998] tipc: New replicast peer: 255.255.255.255 [ 58.731179][ T6998] tipc: Enabled bearer , priority 10 [ 58.921939][ T4405] 8021q: adding VLAN 0 to HW filter on device eth12 [ 59.030671][ T7032] loop6: detected capacity change from 0 to 128 [ 59.117023][ T4717] Bluetooth: hci1: command tx timeout [ 59.585265][ T7101] netlink: 8 bytes leftover after parsing attributes in process `syz.4.776'. [ 59.674249][ T4717] Bluetooth: hci0: command tx timeout [ 59.739843][ T7117] loop6: detected capacity change from 0 to 2048 [ 59.818268][ T7123] netlink: 8 bytes leftover after parsing attributes in process `syz.4.783'. [ 59.854349][ T9] tipc: Node number set to 2886997007 [ 59.872856][ T7117] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 59.881385][ T7117] EXT4-fs (loop6): Remounting filesystem read-only [ 60.017794][ T7135] input: syz0 as /devices/virtual/input/input7 [ 60.211770][ T4717] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 60.211808][ T4717] CPU: 0 UID: 0 PID: 4717 Comm: kworker/u9:3 Tainted: G L syzkaller #0 PREEMPT [ 60.211823][ T4717] Tainted: [L]=SOFTLOCKUP [ 60.211826][ T4717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 60.211832][ T4717] Workqueue: hci1 hci_rx_work [ 60.211850][ T4717] Call trace: [ 60.211853][ T4717] show_stack+0x2c/0x3c (C) [ 60.211870][ T4717] __dump_stack+0x30/0x40 [ 60.211882][ T4717] dump_stack_lvl+0xd8/0x12c [ 60.211894][ T4717] dump_stack+0x1c/0x28 [ 60.211905][ T4717] sysfs_warn_dup+0x9c/0xb8 [ 60.211918][ T4717] sysfs_create_dir_ns+0x190/0x1f4 [ 60.211929][ T4717] kobject_add_internal+0x290/0x6f0 [ 60.211941][ T4717] kobject_add_varg+0x9c/0xe8 [ 60.211950][ T4717] kobject_add+0x110/0x1c8 [ 60.211959][ T4717] device_add+0x394/0x9e0 [ 60.211968][ T4717] hci_conn_add_sysfs+0xbc/0x1e8 [ 60.211980][ T4717] le_conn_complete_evt+0xc68/0x10f8 [ 60.211991][ T4717] hci_le_enh_conn_complete_evt+0x114/0x3d8 [ 60.212002][ T4717] hci_le_meta_evt+0x2b0/0x46c [ 60.212014][ T4717] hci_event_packet+0x4c0/0x9c8 [ 60.212026][ T4717] hci_rx_work+0x2f4/0xd78 [ 60.212034][ T4717] process_scheduled_works+0x788/0x10b8 [ 60.212046][ T4717] worker_thread+0x798/0xbd0 [ 60.212056][ T4717] kthread+0x304/0x3d4 [ 60.212064][ T4717] ret_from_fork+0x10/0x20 [ 60.212098][ T4717] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 60.212118][ T4717] Bluetooth: hci1: failed to register connection device [ 60.246444][ T7153] loop7: detected capacity change from 0 to 512 [ 60.256366][ T7153] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 60.259478][ T7153] EXT4-fs (loop7): corrupt root inode, run e2fsck [ 60.260868][ T7153] EXT4-fs (loop7): mount failed [ 60.287555][ T30] audit: type=1400 audit(60.280:6): lsm=SMACK fn=smack_inode_permission action=denied subject="_" object="l" requested=w pid=7152 comm="syz.7.797" name="file0" dev="tmpfs" ino=99 [ 60.306292][ T7158] pimreg: tun_chr_ioctl cmd 3229898328 [ 60.338593][ T7164] overlayfs: failed to clone lowerpath [ 60.425716][ T7178] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 60.428579][ T7178] overlayfs: failed to clone lowerpath [ 60.468793][ T7185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.810'. [ 60.471398][ T7185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.810'. [ 60.500260][ T7187] loop7: detected capacity change from 0 to 512 [ 60.502804][ T7187] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 60.507831][ T7187] EXT4-fs error (device loop7): ext4_orphan_get:1425: comm syz.7.811: bad orphan inode 131072 [ 60.507889][ T7187] loop7: lost filesystem error report for type 5 error -117 [ 60.698731][ T7208] evm: overlay not supported [ 60.803118][ T7221] capability: warning: `syz.2.824' uses 32-bit capabilities (legacy support in use) [ 61.190962][ T7254] netlink: 24 bytes leftover after parsing attributes in process `syz.7.840'. [ 61.377376][ T7276] netlink: 'syz.4.850': attribute type 7 has an invalid length. [ 61.377535][ T7276] netlink: 'syz.4.850': attribute type 7 has an invalid length. [ 61.402816][ T30] audit: type=1326 audit(61.390:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7279 comm="syz.4.852" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ab781a8 code=0x0 [ 61.551472][ T7294] gadgetfs expected dummy_udc controller not usbip-vudc [ 61.551511][ T7294] udc usbip-vudc.0: failed to start USB Gadget filesystem: -19 [ 61.552724][ T7294] UDC core: USB Gadget filesystem: couldn't find an available UDC [ 61.617948][ T7303] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 61.618238][ T7303] gretap1: entered promiscuous mode [ 61.731710][ T7312] process 'syz.7.865' launched './file0' with NULL argv: empty string added [ 61.750521][ T7315] trusted_key: syz.7.866 sent an empty control message without MSG_MORE. [ 61.753495][ T4716] Bluetooth: hci0: command tx timeout [ 61.886034][ T7317] loop6: detected capacity change from 0 to 1024 [ 61.886429][ T7317] EXT4-fs: Ignoring removed bh option [ 61.886884][ T7317] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 62.020685][ T7324] bridge0: port 3(veth0) entered blocking state [ 62.022018][ T7324] bridge0: port 3(veth0) entered disabled state [ 62.023695][ T7324] veth0: entered allmulticast mode [ 62.025551][ T7324] veth0: entered promiscuous mode [ 62.027134][ T7324] bridge0: port 3(veth0) entered blocking state [ 62.027181][ T7324] bridge0: port 3(veth0) entered forwarding state [ 62.166290][ T7332] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 62.166333][ T7332] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 62.166349][ T7332] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 62.166363][ T7332] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 62.166376][ T7332] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 62.166389][ T7332] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 62.166402][ T7332] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 62.166414][ T7332] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 62.166426][ T7332] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 62.166438][ T7332] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 62.296202][ T7338] loop2: detected capacity change from 0 to 4096 [ 62.302864][ T7338] EXT4-fs (loop2): Test dummy encryption mode enabled [ 62.306112][ T7338] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0103] [ 62.307911][ T7338] System zones: 0-5 [ 62.368743][ T7338] EXT4-fs error (device loop2): __ext4_remount:6844: comm syz.2.875: Abort forced by user [ 62.368929][ T7338] EXT4-fs (loop2): Remounting filesystem read-only [ 62.368939][ T7338] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 62.388021][ T7338] overlay: filesystem on ./bus is read-only [ 62.558485][ T7357] loop5: detected capacity change from 0 to 128 [ 62.796514][ T7382] loop2: detected capacity change from 0 to 1024 [ 62.808266][ T7382] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 62.817645][ T7382] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 2: comm syz.2.896: lblock 2 mapped to illegal pblock 2 (length 1) [ 62.817686][ T7382] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 62.823402][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 62.823430][ C0] EXT4-fs (loop2): initial error at time 62: ext4_map_blocks:791: inode 3: block 2 [ 62.823483][ C0] EXT4-fs (loop2): last error at time 62: ext4_map_blocks:791: inode 3: block 2 [ 62.834102][ T7382] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 62.834143][ T7382] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 48: comm syz.2.896: lblock 0 mapped to illegal pblock 48 (length 1) [ 62.834168][ T7382] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 62.839533][ T7382] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 62.839571][ T7382] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.896: Failed to acquire dquot type 0 [ 62.839600][ T7382] loop2: lost filesystem error report for type 5 error -117 [ 62.847596][ T7382] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 62.847625][ T7382] loop2: lost filesystem error report for type 5 error -117 [ 62.854229][ T7382] EXT4-fs error (device loop2): ext4_evict_inode:267: inode #11: comm syz.2.896: mark_inode_dirty error [ 62.858041][ T7382] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 62.859381][ T7382] EXT4-fs warning (device loop2): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 62.864687][ T7382] EXT4-fs (loop2): 1 orphan inode deleted [ 62.893869][ T1344] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 62.897680][ T1344] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 62.899516][ T1344] EXT4-fs error (device loop2): ext4_release_dquot:7077: comm kworker/u8:7: Failed to release dquot type 0 [ 62.970401][ T4720] EXT4-fs error (device loop2): __ext4_get_inode_loc:4886: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 62.970446][ T4720] loop2: lost filesystem error report for type 5 error -117 [ 62.974048][ T4720] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 62.974093][ T4720] loop2: lost filesystem error report for type 5 error -117 [ 62.977933][ T4720] EXT4-fs error (device loop2): ext4_quota_off:7325: inode #3: comm syz-executor: mark_inode_dirty error [ 62.977978][ T4720] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 63.032379][ T7412] loop2: detected capacity change from 0 to 128 [ 63.125008][ T7421] loop6: detected capacity change from 0 to 512 [ 63.142612][ T7421] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.910: bg 0: block 5: invalid block bitmap [ 63.142657][ T7421] loop6: lost filesystem error report for type 5 error -117 [ 63.154206][ T7421] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 63.154240][ T7421] loop6: lost filesystem error report for type 5 error -117 [ 63.160619][ T7421] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.910: invalid indirect mapped block 3 (level 2) [ 63.160673][ T7421] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 63.164548][ C0] EXT4-fs (loop6): error count since last fsck: 3 [ 63.164563][ C0] EXT4-fs (loop6): initial error at time 63: ext4_validate_block_bitmap:432 [ 63.164575][ C0] EXT4-fs (loop6): last error at time 63: ext4_free_branches:1023: inode 11 [ 63.173872][ T7421] EXT4-fs (loop6): 1 orphan inode deleted [ 63.173899][ T7421] EXT4-fs (loop6): 1 truncate cleaned up [ 63.187403][ T7435] loop5: detected capacity change from 0 to 128 [ 63.202069][ T7435] syz.5.916 (pid 7435) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 63.222813][ T7421] fscrypt (loop6, inode 11): Unsupported encryption flags (0x10) [ 63.575510][ T7477] binder: 7476:7477 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 63.575550][ T7477] binder: 7477 RLIMIT_NICE not set [ 63.616660][ T7483] loop7: detected capacity change from 0 to 512 [ 63.834760][ T4716] Bluetooth: hci0: command tx timeout [ 64.185832][ T7544] xt_hashlimit: size too large, truncated to 1048576 [ 64.307891][ T7550] loop7: detected capacity change from 0 to 8192 [ 64.336828][ T7550] loop7: p1 < > p3 p4 < > [ 64.341701][ T7550] loop7: p3 size 218103808 extends beyond EOD, truncated [ 64.377411][ T7569] netlink: 'syz.5.963': attribute type 22 has an invalid length. [ 64.379159][ T7569] netlink: 4 bytes leftover after parsing attributes in process `syz.5.963'. [ 64.388989][ T7569] netlink: 'syz.5.963': attribute type 22 has an invalid length. [ 64.390669][ T7569] netlink: 4 bytes leftover after parsing attributes in process `syz.5.963'. [ 64.403472][ T1460] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.403529][ T1460] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.403574][ T1460] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.403599][ T1460] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.459215][ T7574] netlink: 12 bytes leftover after parsing attributes in process `syz.7.965'. [ 64.459253][ T7574] block nbd0: Unsupported socket: should be TCP or UNIX. [ 64.465719][ T7577] fuse: Bad value for 'fd' [ 64.477586][ T26] cfg80211: failed to load regulatory.db [ 64.478173][ T1539] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.516191][ T7562] loop2: detected capacity change from 0 to 32768 [ 64.573758][ T7562] loop2: p1 p3 < > [ 64.592352][ T4705] udevd[4705]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 64.601502][ T4704] udevd[4704]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 64.609712][ T7125] udevd[7125]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 64.736710][ T7600] overlayfs: failed to clone upperpath [ 64.739853][ T7600] overlayfs: failed to clone upperpath [ 64.789592][ T7125] udevd[7125]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 64.792859][ T4900] udevd[4900]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 64.941089][ T7624] EXT4-fs: Ignoring removed nomblk_io_submit option [ 64.960534][ T7624] EXT4-fs mount: 28 callbacks suppressed [ 64.960568][ T7624] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 64.969044][ T7624] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: comm syz.2.986: lblock 0 mapped to illegal pblock 0 (length 1) [ 64.973030][ T7624] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 64.973067][ T7624] EXT4-fs (loop2): This should not happen!! Data will be lost [ 64.973067][ T7624] [ 65.070506][ T4720] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 65.071279][ T4720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 65.225346][ T7654] fuse: Bad value for 'fd' [ 65.318765][ T7667] batadv_slave_0: entered promiscuous mode [ 65.320676][ T7667] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1003'. [ 65.320790][ T7667] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.337888][ T7667] batadv_slave_0 (unregistering): left promiscuous mode [ 65.339254][ T7667] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.439762][ T7678] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.461702][ T7678] EXT4-fs (loop2): shut down requested (0) [ 65.487320][ T7685] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1010'. [ 65.541690][ T7687] overlayfs: failed to create directory ./bus/work (errno: 5); mounting read-only [ 65.541811][ T7687] overlayfs: failed to get uuid (/file0, err=-5); falling back to uuid=null. [ 65.639802][ T7702] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1017'. [ 65.675980][ T7705] Bluetooth: MGMT ver 1.23 [ 65.795460][ T7723] fuse: Bad value for 'fd' [ 65.821016][ T24] Process accounting resumed [ 65.838937][ T7712] Process accounting resumed [ 65.959731][ T7745] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1030'. [ 66.055166][ T7756] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1032'. [ 66.072593][ T7756] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1032'. [ 66.077043][ T7761] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1033'. [ 66.097048][ T7766] fuse: Bad value for 'fd' [ 66.149292][ T5621] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.214580][ T7775] netlink: 'syz.7.1039': attribute type 10 has an invalid length. [ 66.246424][ T1344] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 66.246479][ T1344] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.397122][ T4717] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 66.404334][ T4717] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 66.406135][ T4717] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 66.407843][ T4717] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 66.411689][ T7785] SQUASHFS error: Failed to read block 0x60: -5 [ 66.420968][ T4717] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 66.448657][ T1344] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 66.450959][ T1344] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.559406][ T7807] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.571737][ T1344] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 66.571783][ T1344] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.617150][ T6651] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.657056][ T5249] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 66.659155][ T5249] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 66.661680][ T1344] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 66.661722][ T1344] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.670065][ T867] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.684718][ T867] hid-generic 0000:0000:0000.0003: hidraw1: HID v0.00 Device [syz1] on syz0 [ 67.001405][ T1344] veth0: left allmulticast mode [ 67.001438][ T1344] veth0: left promiscuous mode [ 67.001536][ T1344] bridge0: port 3(veth0) entered disabled state [ 67.009294][ T1344] bridge_slave_1: left allmulticast mode [ 67.009331][ T1344] bridge_slave_1: left promiscuous mode [ 67.009443][ T1344] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.026331][ T1344] bridge_slave_0: left allmulticast mode [ 67.027434][ T1344] bridge_slave_0: left promiscuous mode [ 67.028559][ T1344] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.086156][ T7860] tls_set_device_offload_rx: netdev not found [ 67.188743][ T1344] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 67.201289][ T1344] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 67.227066][ T1344] bond0 (unregistering): Released all slaves [ 67.276506][ T4405] 8021q: adding VLAN 0 to HW filter on device eth13 [ 67.285466][ T1344] tipc: Disabling bearer [ 67.285935][ T7878] set_capacity_and_notify: 4 callbacks suppressed [ 67.285963][ T7878] loop7: detected capacity change from 0 to 4096 [ 67.286317][ T7878] EXT4-fs: inline encryption not supported [ 67.287391][ T1344] tipc: Left network mode [ 67.290215][ T7878] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 67.290236][ T7878] EXT4-fs (loop7): Test dummy encryption mode enabled [ 67.298513][ T7878] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 67.298607][ T7878] System zones: 0-5 [ 67.306153][ T7878] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.310552][ T7786] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.312212][ T7786] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.312305][ T7786] bridge_slave_0: entered allmulticast mode [ 67.312805][ T7786] bridge_slave_0: entered promiscuous mode [ 67.320279][ T7786] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.320347][ T7786] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.320449][ T7786] bridge_slave_1: entered allmulticast mode [ 67.320937][ T7786] bridge_slave_1: entered promiscuous mode [ 67.339817][ T7786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.348129][ T7786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.383517][ T6651] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.412926][ T7786] team0: Port device team_slave_0 added [ 67.420918][ T7786] team0: Port device team_slave_1 added [ 67.499497][ T7786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.499532][ T7786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.499814][ T7786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.530338][ T7903] fuse: Bad value for 'fd' [ 67.554443][ T7786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.554476][ T7786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.554495][ T7786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.628617][ T7919] input: syz1 as /devices/virtual/input/input8 [ 67.639577][ T4405] 8021q: adding VLAN 0 to HW filter on device eth14 [ 67.691958][ T1344] hsr_slave_0: left promiscuous mode [ 67.693215][ T1344] hsr_slave_1: left promiscuous mode [ 67.695996][ T1344] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.696032][ T1344] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.697817][ T1344] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.697829][ T1344] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.711032][ T1344] veth1_macvtap: left promiscuous mode [ 67.711088][ T1344] veth0_macvtap: left promiscuous mode [ 67.711142][ T1344] veth1_vlan: left promiscuous mode [ 67.711182][ T1344] veth0_vlan: left promiscuous mode [ 67.838344][ T1344] team0 (unregistering): Port device team_slave_1 removed [ 67.845376][ T1344] team0 (unregistering): Port device team_slave_0 removed [ 67.912281][ T7786] hsr_slave_0: entered promiscuous mode [ 67.914967][ T7786] hsr_slave_1: entered promiscuous mode [ 67.916515][ T7786] debugfs: 'hsr0' already exists in 'hsr' [ 67.917795][ T7786] Cannot create hsr debugfs directory [ 68.169209][ T7786] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 68.175621][ T7786] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 68.176069][ T7786] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 68.198925][ T7786] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 68.203231][ T7786] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 68.211206][ T7786] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 68.212002][ T7786] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 68.222416][ T7786] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 68.259691][ T7786] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.259757][ T7786] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.259851][ T7786] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.259886][ T7786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.431064][ T7786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.447522][ T6940] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.469425][ T6940] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.483499][ T4717] Bluetooth: hci3: command tx timeout [ 68.629406][ T4405] 8021q: adding VLAN 0 to HW filter on device eth15 [ 68.638960][ T8004] loop7: detected capacity change from 0 to 1024 [ 68.682784][ T7786] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.698490][ T1310] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.698545][ T1310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.705260][ T8004] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 68.754492][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.754541][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.760933][ T8004] EXT4-fs error (device loop7): ext4_map_blocks:833: inode #15: block 3: comm syz.7.1099: lblock 3 mapped to illegal pblock 3 (length 3) [ 68.766512][ T8004] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 68.769231][ T8004] EXT4-fs (loop7): This should not happen!! Data will be lost [ 68.769231][ T8004] [ 68.778328][ T8012] UHID_CREATE from different security context by process 453 (syz.5.1100), this is not allowed. [ 68.782455][ T8004] EXT4-fs error (device loop7): ext4_map_blocks:833: inode #15: comm syz.7.1099: lblock 0 mapped to illegal pblock 0 (length 1) [ 68.848770][ T1310] EXT4-fs error (device loop7): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:6: lblock 8 mapped to illegal pblock 8 (length 8) [ 68.849102][ T1310] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 68.849117][ T1310] EXT4-fs (loop7): This should not happen!! Data will be lost [ 68.849117][ T1310] [ 68.849811][ T6651] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 68.851123][ T6651] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 69.039169][ T7786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.055261][ T4405] 8021q: adding VLAN 0 to HW filter on device eth16 [ 69.219662][ T7786] veth0_vlan: entered promiscuous mode [ 69.223122][ T7786] veth1_vlan: entered promiscuous mode [ 69.234407][ T7786] veth0_macvtap: entered promiscuous mode [ 69.237415][ T7786] veth1_macvtap: entered promiscuous mode [ 69.241689][ T7786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.242897][ T7786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.263817][ T1310] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.263970][ T1310] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.264028][ T1310] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.264051][ T1310] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.278396][ T6942] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.278426][ T6942] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.293969][ T1412] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.294001][ T1412] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.362253][ T8093] loop7: detected capacity change from 0 to 1024 [ 69.382503][ T8103] 9p: Bad value for 'rfdno' [ 69.418495][ T8093] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.501235][ T6651] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.670208][ T5081] IPVS: starting estimator thread 0... [ 69.713045][ T8145] __nla_validate_parse: 3 callbacks suppressed [ 69.713087][ T8145] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1118'. [ 69.753527][ T8142] IPVS: using max 47 ests per chain, 112800 per kthread [ 69.766412][ T8155] overlayfs: failed to clone upperpath [ 69.912312][ T8173] loop7: detected capacity change from 0 to 1024 [ 69.921587][ T8173] EXT4-fs: Ignoring removed nobh option [ 69.928470][ T8173] EXT4-fs: Ignoring removed orlov option [ 69.931187][ T8173] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 69.951164][ T8173] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.006375][ T8186] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1131'. [ 70.006412][ T8186] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1131'. [ 70.010748][ T6651] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.267521][ T8208] loop8: detected capacity change from 0 to 512 [ 70.269611][ T8208] EXT4-fs: inline encryption not supported [ 70.269680][ T8204] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 70.271393][ T8204] bond1: (slave lo): Enslaving as an active interface with an up link [ 70.277077][ T8204] net_ratelimit: 3320 callbacks suppressed [ 70.277115][ T8204] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 70.287610][ T8208] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 70.294327][ T8208] EXT4-fs error (device loop8): ext4_iget_extra_inode:5180: inode #15: comm syz.8.1140: corrupted in-inode xattr: e_value size too large [ 70.294362][ T8208] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 70.300484][ T8208] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.1140: couldn't read orphan inode 15 (err -117) [ 70.300525][ T8208] loop8: lost filesystem error report for type 5 error -117 [ 70.305062][ C0] EXT4-fs (loop8): error count since last fsck: 2 [ 70.305075][ C0] EXT4-fs (loop8): initial error at time 70: ext4_iget_extra_inode:5180: inode 15 [ 70.305096][ C0] EXT4-fs (loop8): last error at time 70: ext4_orphan_get:1404 [ 70.307393][ T8208] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.339064][ T8208] EXT4-fs error (device loop8): ext4_check_dx_root:2201: inode #2: comm syz.8.1140: Corrupt dir, invalid name_len for '..', running e2fsck is recommended [ 70.378407][ T7786] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.553623][ T4717] Bluetooth: hci3: command tx timeout [ 70.631688][ T8250] loop7: detected capacity change from 0 to 8192 [ 70.635019][ T8250] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 70.738727][ T8267] loop6: detected capacity change from 0 to 256 [ 70.811233][ T8279] loop8: detected capacity change from 0 to 512 [ 70.816292][ T8279] EXT4-fs: Ignoring removed oldalloc option [ 70.818003][ T8279] EXT4-fs (loop8): Test dummy encryption mode enabled [ 70.845766][ T8279] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.876514][ T8287] Injecting memory failure for pfn 0x11e030 at process virtual address 0x20000000 [ 70.893727][ T8287] Memory failure: 0x11e030: Failed to invalidate [ 70.893760][ T8287] Memory failure: 0x11e030: dirty LRU page still referenced by 1 users [ 70.893777][ T8287] Memory failure: 0x11e030: recovery action for dirty LRU page: Failed [ 70.921677][ T8291] loop6: detected capacity change from 0 to 1024 [ 70.922080][ T8291] EXT4-fs: inline encryption not supported [ 70.951524][ T7786] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.968738][ T8291] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 71.005191][ T6215] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 71.053972][ T8303] loop6: detected capacity change from 0 to 256 [ 71.161747][ T8312] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1172'. [ 71.178042][ T8315] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1173'. [ 71.212621][ T8321] input: syz1 as /devices/virtual/input/input9 [ 71.403023][ T8341] syzkaller0: tun_chr_ioctl cmd 1074025676 [ 71.403063][ T8341] syzkaller0: owner set to 4294967294 [ 71.431928][ T8348] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 71.490998][ T8355] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.502141][ T8355] EXT4-fs error (device loop7): ext4_do_update_inode:5742: inode #2: comm syz.7.1182: corrupted inode contents [ 71.504255][ T8355] EXT4-fs error (device loop7): ext4_dirty_inode:6639: inode #2: comm syz.7.1182: mark_inode_dirty error [ 71.504482][ T8355] EXT4-fs error (device loop7): ext4_do_update_inode:5742: inode #2: comm syz.7.1182: corrupted inode contents [ 71.504632][ T8355] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #2: comm syz.7.1182: mark_inode_dirty error [ 71.508883][ T8355] EXT4-fs error (device loop7): ext4_do_update_inode:5742: inode #2: comm syz.7.1182: corrupted inode contents [ 71.509597][ T8355] EXT4-fs error (device loop7): ext4_setattr:5998: inode #2: comm syz.7.1182: mark_inode_dirty error [ 71.529312][ T6651] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.573064][ T8369] EXT4-fs: Ignoring removed mblk_io_submit option [ 71.589188][ T8369] EXT4-fs error (device loop7): ext4_iget_extra_inode:5180: inode #15: comm syz.7.1184: corrupted in-inode xattr: e_value size too large [ 71.589229][ T8369] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 71.589384][ T8369] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.1184: couldn't read orphan inode 15 (err -117) [ 71.589397][ T8369] loop7: lost filesystem error report for type 5 error -117 [ 71.589972][ T8369] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.661220][ T6651] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.815320][ T8401] EXT4-fs: inline encryption not supported [ 71.818824][ T8401] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 71.825730][ T8401] EXT4-fs (loop7): 1 truncate cleaned up [ 71.827519][ T8401] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.858064][ T6651] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.019824][ T8424] input: syz0 as /devices/virtual/input/input10 [ 72.211587][ T4716] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.220005][ T4716] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.222016][ T4716] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.229820][ T4716] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.231817][ T4716] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.568876][ T8444] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.568976][ T8444] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.569532][ T8444] bridge_slave_0: entered allmulticast mode [ 72.570192][ T8444] bridge_slave_0: entered promiscuous mode [ 72.571430][ T8444] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.571493][ T8444] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.571922][ T8444] bridge_slave_1: entered allmulticast mode [ 72.572580][ T8444] bridge_slave_1: entered promiscuous mode [ 72.581296][ T8444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.582752][ T8444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.590774][ T8444] team0: Port device team_slave_0 added [ 72.591730][ T8444] team0: Port device team_slave_1 added [ 72.601448][ T8444] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.601488][ T8444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.601503][ T8444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.602061][ T8444] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.602068][ T8444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.602080][ T8444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.617305][ T8444] hsr_slave_0: entered promiscuous mode [ 72.617646][ T8444] hsr_slave_1: entered promiscuous mode [ 72.617862][ T8444] debugfs: 'hsr0' already exists in 'hsr' [ 72.617875][ T8444] Cannot create hsr debugfs directory [ 72.648394][ T8478] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 72.663542][ T5249] IPVS: starting estimator thread 0... [ 72.763018][ T30] audit: type=1326 audit(72.750:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8487 comm="syz.6.1217" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffba1781a8 code=0x0 [ 72.767178][ T8481] IPVS: using max 58 ests per chain, 139200 per kthread [ 72.836709][ T8444] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 72.845133][ T8444] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.845648][ T8444] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 72.847935][ T8444] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.849526][ T8444] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 72.855367][ T8444] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.857131][ T8444] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 72.864834][ T8444] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.909913][ T8444] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.909972][ T8444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.910051][ T8444] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.910084][ T8444] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.982467][ T8444] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.994635][ T6941] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.996934][ T6941] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.015525][ T8444] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.026984][ T6940] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.027046][ T6940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.035343][ T1412] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.035391][ T1412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.044345][ T8508] set_capacity_and_notify: 3 callbacks suppressed [ 73.045508][ T8508] loop7: detected capacity change from 0 to 8 [ 73.088343][ T8508] SQUASHFS error: zlib decompression failed, data probably corrupt [ 73.088403][ T8508] SQUASHFS error: Failed to read block 0x4de: -5 [ 73.088413][ T8508] SQUASHFS error: Unable to read data cache entry [4de] [ 73.088421][ T8508] SQUASHFS error: Unable to read page, block 4de, size 1 [ 73.088504][ T8508] SQUASHFS error: Unable to read data cache entry [4de] [ 73.088510][ T8508] SQUASHFS error: Unable to read page, block 4de, size 1 [ 73.088550][ T8508] SQUASHFS error: Unable to read data cache entry [4de] [ 73.088556][ T8508] SQUASHFS error: Unable to read page, block 4de, size 1 [ 73.088577][ T8508] SQUASHFS error: Unable to read data cache entry [4de] [ 73.088582][ T8508] SQUASHFS error: Unable to read page, block 4de, size 1 [ 73.228594][ T8444] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.325466][ T8444] veth0_vlan: entered promiscuous mode [ 73.328648][ T8444] veth1_vlan: entered promiscuous mode [ 73.345623][ T8444] veth0_macvtap: entered promiscuous mode [ 73.347568][ T8444] veth1_macvtap: entered promiscuous mode [ 73.361832][ T8444] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.367590][ T8444] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.370065][ T1412] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.370215][ T1412] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.370280][ T1412] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.370333][ T1412] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.417009][ T1412] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.417042][ T1412] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.428051][ T6941] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.428086][ T6941] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.435212][ C1] vcan0: j1939_tp_rxtimer: 0x00000000a0df60d4: rx timeout, send abort [ 73.627377][ T8493] Process accounting resumed [ 73.631584][ T8556] netlink: 'syz.6.1236': attribute type 12 has an invalid length. [ 73.633789][ T8556] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1236'. [ 73.639227][ T8556] netlink: 'syz.6.1236': attribute type 12 has an invalid length. [ 73.640840][ T8556] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1236'. [ 73.650716][ T8558] netlink: 'syz.9.1237': attribute type 27 has an invalid length. [ 73.666966][ T8558] bond0: (slave bond_slave_1): Releasing backup interface [ 73.699516][ T6940] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.701787][ T1412] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.701824][ T1412] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.701846][ T1412] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.868787][ T6942] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.935677][ C1] vcan0: j1939_tp_rxtimer: 0x00000000a0df60d4: abort rx timeout. Force session deactivation [ 73.946033][ T8589] netlink: 'syz.4.1251': attribute type 4 has an invalid length. [ 73.967890][ T8589] netlink: 'syz.4.1251': attribute type 4 has an invalid length. [ 73.987282][ T6942] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.076089][ T6942] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.148880][ T6942] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.294521][ T8616] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1264'. [ 74.302939][ T6942] bridge_slave_1: left allmulticast mode [ 74.302971][ T6942] bridge_slave_1: left promiscuous mode [ 74.303058][ T6942] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.305338][ T6942] bridge_slave_0: left allmulticast mode [ 74.305350][ T6942] bridge_slave_0: left promiscuous mode [ 74.305532][ T6942] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.318136][ T4717] Bluetooth: hci3: command tx timeout [ 74.381769][ T8623] loop6: detected capacity change from 0 to 1024 [ 74.387994][ T8623] EXT4-fs: Ignoring removed mblk_io_submit option [ 74.410293][ T8623] Quota error (device loop6): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 74.410361][ T8623] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 74.410388][ T8623] EXT4-fs error (device loop6): ext4_acquire_dquot:7041: comm syz.6.1267: Failed to acquire dquot type 0 [ 74.410408][ T8623] loop6: lost filesystem error report for type 5 error -5 [ 74.414382][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 74.414398][ C1] EXT4-fs (loop6): initial error at time 74: ext4_acquire_dquot:7041 [ 74.414414][ C1] EXT4-fs (loop6): last error at time 74: ext4_acquire_dquot:7041 [ 74.425402][ T8623] EXT4-fs (loop6): 1 truncate cleaned up [ 74.426192][ T8623] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.436866][ T6942] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 74.472272][ T6942] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 74.481978][ T6215] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.498269][ T6942] bond0 (unregistering): Released all slaves [ 74.521994][ T8616] vlan2: entered promiscuous mode [ 74.522038][ T8616] bond0: entered promiscuous mode [ 74.522050][ T8616] bond_slave_0: entered promiscuous mode [ 74.522150][ T8616] bond_slave_1: entered promiscuous mode [ 74.812916][ T6942] hsr_slave_0: left promiscuous mode [ 74.814336][ T6942] hsr_slave_1: left promiscuous mode [ 74.814703][ T6942] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.814775][ T6942] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.815588][ T6942] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.815606][ T6942] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.822593][ T6942] veth1_macvtap: left promiscuous mode [ 74.822655][ T6942] veth0_macvtap: left promiscuous mode [ 74.822721][ T6942] veth1_vlan: left promiscuous mode [ 74.822758][ T6942] veth0_vlan: left promiscuous mode [ 74.831203][ T8660] fuse: Bad value for 'fd' [ 74.891903][ T8666] fuse: Bad value for 'fd' [ 74.904275][ T8663] Injecting memory failure for pfn 0x13de03 at process virtual address 0x20003000 [ 74.947612][ T8663] Memory failure: 0x13de03: Sending SIGBUS to syz.5.1278:8663 due to hardware memory corruption [ 74.947732][ T8663] Memory failure: 0x13de03: recovery action for dirty LRU page: Recovered [ 75.087802][ T6942] team0 (unregistering): Port device team_slave_1 removed [ 75.106093][ T6942] team0 (unregistering): Port device team_slave_0 removed [ 75.210265][ T4405] 8021q: adding VLAN 0 to HW filter on device eth17 [ 75.225006][ T8683] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.1285'. [ 75.429696][ T6942] IPVS: stop unused estimator thread 0... [ 75.512038][ T4405] 8021q: adding VLAN 0 to HW filter on device eth18 [ 75.835196][ T4405] 8021q: adding VLAN 0 to HW filter on device eth19 [ 75.954729][ T8773] loop9: detected capacity change from 0 to 1024 [ 75.957640][ T8773] EXT4-fs: inline encryption not supported [ 75.961758][ T8773] EXT4-fs (loop9): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 75.978303][ T8773] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.090112][ T8444] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.136011][ T8798] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1316'. [ 76.140203][ T8798] hsr_slave_0: left promiscuous mode [ 76.142262][ T8798] hsr_slave_1: left promiscuous mode [ 76.247008][ T4405] 8021q: adding VLAN 0 to HW filter on device eth20 [ 76.337636][ T8819] loop5: detected capacity change from 0 to 2048 [ 76.339458][ T8819] EXT4-fs: Ignoring removed i_version option [ 76.369611][ T8819] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.393680][ T4717] Bluetooth: hci3: command tx timeout [ 76.421045][ T5216] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.569211][ T8845] input: syz1 as /devices/virtual/input/input11 [ 76.639630][ T6940] rpcbind: server 127.0.0.1 not responding, timed out [ 76.801373][ T8865] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 76.810155][ T8865] overlayfs: failed to set xattr on upper [ 76.810207][ T8865] overlayfs: ...falling back to redirect_dir=nofollow. [ 76.810226][ T8865] overlayfs: ...falling back to metacopy=off. [ 76.810240][ T8865] overlayfs: ...falling back to index=off. [ 76.810251][ T8865] overlayfs: ...falling back to uuid=null. [ 76.810279][ T8865] overlayfs: conflicting lowerdir path [ 76.924437][ T4389] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 76.926466][ T4389] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 77.099710][ T8889] netlink: 'syz.7.1352': attribute type 2 has an invalid length. [ 77.102773][ T8889] netlink: 'syz.7.1352': attribute type 2 has an invalid length. [ 77.106829][ T8889] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1352'. [ 77.544864][ T8943] binder: 8942:8943 ioctl c0306201 0 returned -14 [ 77.557085][ T5249] kernel read not supported for file /video9 (pid: 5249 comm: kworker/1:6) [ 77.626139][ T8949] loop5: detected capacity change from 0 to 512 [ 77.635324][ T8951] netlink: 332 bytes leftover after parsing attributes in process `syz.6.1379'. [ 77.637052][ T8951] netlink: 196 bytes leftover after parsing attributes in process `syz.6.1379'. [ 77.640271][ T8949] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.661411][ T8949] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.1378: corrupted xattr block 33: invalid header [ 77.661758][ T8949] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.1378: corrupted xattr block 33: invalid header [ 77.661968][ T8949] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.1378: corrupted xattr block 33: invalid header [ 77.712683][ T8949] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.1378: corrupted xattr block 33: invalid header [ 77.755765][ T8949] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.1378: corrupted xattr block 33: invalid header [ 77.781577][ T1310] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 77.786412][ T1310] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 8 with error 28 [ 77.786444][ T1310] EXT4-fs (loop5): This should not happen!! Data will be lost [ 77.786444][ T1310] [ 77.786468][ T1310] EXT4-fs (loop5): Total free blocks count 0 [ 77.786481][ T1310] EXT4-fs (loop5): Free/Dirty block details [ 77.786495][ T1310] EXT4-fs (loop5): free_blocks=65280 [ 77.786514][ T1310] EXT4-fs (loop5): dirty_blocks=9 [ 77.786525][ T1310] EXT4-fs (loop5): Block reservation details [ 77.786535][ T1310] EXT4-fs (loop5): i_reserved_data_blocks=9 [ 77.796418][ T6940] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 1 with error 28 [ 77.796870][ T8958] loop6: detected capacity change from 0 to 8192 [ 77.801923][ T5216] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 77.828959][ T8958] loop6: p1 p2 p3 p4[EZD] [ 77.828990][ T8958] loop6: partition table partially beyond EOD, truncated [ 77.829076][ T8958] loop6: p1 start 16384 is beyond EOD, truncated [ 77.829086][ T8958] loop6: p2 size 150994944 extends beyond EOD, truncated [ 77.832089][ T8958] loop6: p3 start 67108864 is beyond EOD, truncated [ 77.832104][ T8958] loop6: p4 size 33555584 extends beyond EOD, truncated [ 77.836875][ T8964] loop5: detected capacity change from 0 to 1024 [ 77.837203][ T8964] EXT4-fs: Ignoring removed mblk_io_submit option [ 77.839869][ T8958] overlayfs: failed lookup in lower (newroot/137, name='file0', err=-40): overlapping layers [ 77.844497][ T8964] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 77.844545][ T8964] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 77.844561][ T8964] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.1384: Failed to acquire dquot type 0 [ 77.844578][ T8964] loop5: lost filesystem error report for type 5 error -5 [ 77.852855][ T8964] EXT4-fs (loop5): 1 truncate cleaned up [ 77.853594][ T8964] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.874454][ T8967] netlink: 'syz.4.1385': attribute type 11 has an invalid length. [ 77.915980][ T5216] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.002353][ T7125] udevd[7125]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 78.011872][ T4900] udevd[4900]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 78.053263][ T8982] loop6: detected capacity change from 0 to 512 [ 78.070989][ T8982] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.117209][ T6215] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.259415][ T9006] input: syz1 as /devices/virtual/input/input12 [ 78.324535][ T9013] netlink: 'syz.6.1404': attribute type 11 has an invalid length. [ 78.411045][ T9024] loop9: detected capacity change from 0 to 1024 [ 78.425238][ T9024] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.484303][ T4717] Bluetooth: hci3: command tx timeout [ 78.586751][ T8444] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.694117][ T9049] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.694326][ T9049] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.751198][ T9059] loop6: detected capacity change from 0 to 4096 [ 78.754380][ T9059] EXT4-fs (loop6): Test dummy encryption mode enabled [ 78.756922][ T9059] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.760651][ T9049] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.765615][ T9049] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.770369][ T9059] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 78.856419][ T6215] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.973519][ T6941] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.973838][ T6941] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.973871][ T6941] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.973893][ T6941] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.198645][ T9075] netlink: 'syz.9.1430': attribute type 15 has an invalid length. [ 79.200191][ T9075] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1430'. [ 79.304800][ T9089] netlink: 264 bytes leftover after parsing attributes in process `syz.9.1435'. [ 79.307440][ T9089] netlink: 264 bytes leftover after parsing attributes in process `syz.9.1435'. [ 79.765547][ T9148] mmap: syz.5.1441 (9148) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 80.073743][ T4717] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 80.073904][ T4717] Bluetooth: hci0: Injecting HCI hardware error event [ 80.075218][ T4717] Bluetooth: hci0: hardware error 0x00 [ 80.553522][ T4716] Bluetooth: hci3: command tx timeout [ 80.569983][ T9154] netlink: 'syz.5.1442': attribute type 10 has an invalid length. [ 80.570020][ T9154] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1442'. [ 80.892649][ T9195] netlink: 'syz.4.1448': attribute type 11 has an invalid length. [ 80.909767][ T4716] block nbd9: Receive control failed (result -32) [ 80.947212][ T9192] block nbd9: shutting down sockets [ 81.131753][ T9222] loop7: detected capacity change from 0 to 256 [ 81.132467][ T9222] vfat: Unknown parameter 'u(5âzcŠê' [ 81.446898][ T9265] overlayfs: failed to clone upperpath [ 81.752440][ T9307] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1479'. [ 81.851088][ T9316] loop6: detected capacity change from 0 to 128 [ 81.958787][ T9321] overlayfs: failed to resolve './file0': -2 [ 81.961157][ T9319] loop5: detected capacity change from 0 to 8192 [ 82.096495][ T9337] netlink: 'syz.6.1492': attribute type 11 has an invalid length. [ 82.096529][ T9337] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1492'. [ 82.096874][ T9337] netlink: 'syz.6.1492': attribute type 11 has an invalid length. [ 82.096884][ T9337] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1492'. [ 82.112781][ T9339] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1490'. [ 82.172182][ T9347] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1496'. [ 82.172224][ T9347] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1496'. [ 82.174367][ T9347] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1496'. [ 82.174379][ T9347] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1496'. [ 82.282191][ T9358] loop5: detected capacity change from 0 to 2048 [ 82.282617][ T9358] EXT4-fs: Ignoring removed i_version option [ 82.299295][ T9358] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.327158][ T5216] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.383963][ T9369] netlink: 'syz.6.1504': attribute type 4 has an invalid length. [ 82.401018][ T9369] netlink: 'syz.6.1504': attribute type 4 has an invalid length. [ 82.714095][ T30] audit: type=1326 audit(82.710:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9409 comm="syz.6.1522" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffba1781a8 code=0x0 [ 82.815152][ T9419] could not open pipe file descriptor [ 82.953669][ T4717] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 83.073974][ T6940] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.180188][ T6940] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.266305][ T4716] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.278613][ T4716] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.283092][ T4716] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.289196][ T4716] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.291358][ T4716] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.293679][ T6940] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.430658][ T6940] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.516794][ T9462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.517018][ T9462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.636764][ T6940] bridge_slave_1: left allmulticast mode [ 83.636810][ T6940] bridge_slave_1: left promiscuous mode [ 83.636927][ T6940] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.655833][ T6940] bridge_slave_0: left allmulticast mode [ 83.655881][ T6940] bridge_slave_0: left promiscuous mode [ 83.655999][ T6940] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.658388][ T9468] loop6: detected capacity change from 0 to 128 [ 83.669139][ T9468] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 83.715641][ T6215] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 83.809980][ T6940] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.829675][ T6940] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.855272][ T6940] bond0 (unregistering): Released all slaves [ 83.923961][ T6940] tipc: Disabling bearer [ 83.924084][ T6940] tipc: Left network mode [ 83.965848][ T9441] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.965975][ T9441] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.970032][ T9441] bridge_slave_0: entered allmulticast mode [ 83.974546][ T9441] bridge_slave_0: entered promiscuous mode [ 83.982429][ T9441] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.984282][ T9441] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.984422][ T9441] bridge_slave_1: entered allmulticast mode [ 84.001479][ T9441] bridge_slave_1: entered promiscuous mode [ 84.035921][ T9441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.041138][ T9441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.068229][ T9441] team0: Port device team_slave_0 added [ 84.079329][ T9441] team0: Port device team_slave_1 added [ 84.127193][ T9499] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 84.127227][ T9499] IPv6: NLM_F_CREATE should be set when creating new route [ 84.219544][ T9499] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 84.230895][ T9441] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.230937][ T9441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.230954][ T9441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.231670][ T9441] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.231678][ T9441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.231694][ T9441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.306929][ T4405] 8021q: adding VLAN 0 to HW filter on device eth21 [ 84.381564][ T9441] hsr_slave_0: entered promiscuous mode [ 84.381974][ T9441] hsr_slave_1: entered promiscuous mode [ 84.382743][ T9441] debugfs: 'hsr0' already exists in 'hsr' [ 84.382769][ T9441] Cannot create hsr debugfs directory [ 84.390418][ T9522] loop6: detected capacity change from 0 to 512 [ 84.390988][ T9522] EXT4-fs: Ignoring removed bh option [ 84.394383][ T9522] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 84.400976][ T9522] EXT4-fs (loop6): 1 truncate cleaned up [ 84.402046][ T9522] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.478438][ T6940] hsr_slave_0: left promiscuous mode [ 84.481164][ T6215] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.484749][ T6940] hsr_slave_1: left promiscuous mode [ 84.490430][ T6940] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.490474][ T6940] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.504972][ T6940] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.505009][ T6940] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.513087][ T6940] veth1_macvtap: left promiscuous mode [ 84.513148][ T6940] veth0_macvtap: left promiscuous mode [ 84.513202][ T6940] veth1_vlan: left promiscuous mode [ 84.513240][ T6940] veth0_vlan: left promiscuous mode [ 84.697749][ T9541] loop5: detected capacity change from 0 to 1024 [ 84.698286][ T9541] EXT4-fs: Ignoring removed nomblk_io_submit option [ 84.745743][ T9541] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 84.826366][ T5216] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 85.057428][ T6940] team0 (unregistering): Port device team_slave_1 removed [ 85.075032][ T6940] team0 (unregistering): Port device team_slave_0 removed [ 85.222728][ T9583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.224255][ T9583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.353481][ T4717] Bluetooth: hci0: command tx timeout [ 85.485078][ T9583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.485292][ T9583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.639728][ T9619] loop9: detected capacity change from 0 to 512 [ 85.642219][ T9611] 9pnet: p9_errstr2errno: server reported unknown error  [ 85.648234][ T9619] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 85.651405][ T9619] EXT4-fs (loop9): 1 truncate cleaned up [ 85.652526][ T9619] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.670721][ T4405] 8021q: adding VLAN 0 to HW filter on device eth23 [ 85.750302][ T8444] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.914498][ T9649] fuse: Bad value for 'fd' [ 86.095985][ T9441] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.101141][ T9441] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.102207][ T9441] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.105971][ T9668] loop9: detected capacity change from 0 to 4096 [ 86.108334][ T9668] EXT4-fs: inline encryption not supported [ 86.112852][ T9441] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.115488][ T9441] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.116254][ T9668] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 86.116272][ T9668] EXT4-fs (loop9): Test dummy encryption mode enabled [ 86.118529][ T9668] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 86.118581][ T9668] System zones: 0-5 [ 86.134452][ T9668] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.136387][ T9441] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.136767][ T9441] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.149597][ T9441] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.165824][ T4405] 8021q: adding VLAN 0 to HW filter on device eth22 [ 86.237699][ T8444] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.256789][ T9441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.299986][ T9441] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.308527][ T6940] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.308584][ T6940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.320924][ T830] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.320977][ T830] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.357857][ T9441] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 86.357898][ T9441] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.438791][ T9707] loop6: detected capacity change from 0 to 512 [ 86.466070][ T9707] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.481013][ T9707] EXT4-fs warning (device loop6): verify_group_input:137: Cannot add at group 1601862003 (only 1 groups) [ 86.509164][ T6215] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.569320][ T9723] loop6: detected capacity change from 0 to 512 [ 86.573124][ T4405] 8021q: adding VLAN 0 to HW filter on device eth24 [ 86.589352][ T9728] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1616'. [ 86.615425][ T9723] EXT4-fs error (device loop6): ext4_iget_extra_inode:5180: inode #15: comm syz.6.1615: corrupted in-inode xattr: e_value size too large [ 86.615481][ T9723] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 86.617357][ T9723] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.1615: couldn't read orphan inode 15 (err -117) [ 86.617377][ T9723] loop6: lost filesystem error report for type 5 error -117 [ 86.618049][ T9723] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.661617][ T9723] EXT4-fs warning (device loop6): dx_probe:801: inode #2: comm syz.6.1615: Unrecognised inode hash code 4 [ 86.661660][ T9723] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.1615: Corrupt directory, running e2fsck is recommended [ 86.662597][ T9723] EXT4-fs warning (device loop6): dx_probe:801: inode #2: comm syz.6.1615: Unrecognised inode hash code 4 [ 86.662611][ T9723] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.1615: Corrupt directory, running e2fsck is recommended [ 86.691228][ T6215] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.772372][ T9747] loop6: detected capacity change from 0 to 512 [ 86.815407][ T9747] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.838232][ T9441] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.899803][ T9441] veth0_vlan: entered promiscuous mode [ 86.906278][ T9441] veth1_vlan: entered promiscuous mode [ 86.923893][ T9441] veth0_macvtap: entered promiscuous mode [ 86.925701][ T9441] veth1_macvtap: entered promiscuous mode [ 86.956971][ T9441] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.959971][ T9760] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.960051][ T6215] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.988723][ T9441] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.004526][ T15] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.005199][ T15] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.005230][ T15] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.005253][ T15] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.121989][ T830] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.122034][ T830] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.160534][ T830] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.160572][ T830] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.249260][ T9788] [ 87.433620][ T4717] Bluetooth: hci0: command tx timeout [ 87.472871][ T9814] loop6: detected capacity change from 0 to 128 [ 87.481230][ T9814] EXT4-fs (loop6): Test dummy encryption mode enabled [ 87.486021][ T9814] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 87.592079][ T6215] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 87.672034][ T9828] loop6: detected capacity change from 0 to 2048 [ 87.712362][ T9828] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.837248][ T9848] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 87.846878][ T9848] EXT4-fs (loop9): 1 truncate cleaned up [ 87.847367][ T9848] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.162695][ T9877] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1652'. [ 88.186732][ T15] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.186807][ T15] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.477816][ T9910] binder: 9909:9910 BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 88.477853][ T9910] binder: 9909:9910 ioctl c0306201 20000640 returned -22 [ 88.868097][ T9951] set_capacity_and_notify: 1 callbacks suppressed [ 88.868151][ T9951] loop5: detected capacity change from 0 to 128 [ 89.051350][ T9956] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 89.051396][ T9956] syzkaller0: Linktype set failed because interface is up [ 89.308502][ T9992] loop5: detected capacity change from 0 to 2048 [ 89.524688][ T4717] Bluetooth: hci0: command tx timeout [ 89.548122][T10018] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1704'. [ 89.675608][T10023] loop9: detected capacity change from 0 to 256 [ 89.696120][T10023] FAT-fs (loop9): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 89.696158][T10023] FAT-fs (loop9): Filesystem has been set read-only [ 89.853007][T10030] input: syz0 as /devices/virtual/input/input15 [ 90.318052][ T9964] veth3: entered allmulticast mode [ 90.408846][T10046] loop6: detected capacity change from 0 to 256 [ 90.438183][T10046] binder: 10045:10046 ioctl c0306201 20000180 returned -14 [ 90.541512][T10062] loop6: detected capacity change from 0 to 512 [ 90.556956][T10062] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1718: invalid indirect mapped block 4294967295 (level 1) [ 90.556997][T10062] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 90.562833][T10061] syzkaller1: entered allmulticast mode [ 90.566776][T10062] EXT4-fs (loop6): Remounting filesystem read-only [ 90.566932][T10062] EXT4-fs (loop6): 2 truncates cleaned up [ 90.637829][T10068] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1721'. [ 90.788546][T10083] loop6: detected capacity change from 0 to 128 [ 91.096339][T10103] 9pnet: p9_errstr2errno: server reported unknown error 0x0 [ 91.474291][T10124] loop5: detected capacity change from 0 to 512 [ 91.476281][T10124] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 91.482536][T10124] EXT4-fs (loop5): 1 truncate cleaned up [ 91.593484][ T4717] Bluetooth: hci0: command tx timeout [ 91.805232][T10157] netlink: 'syz.5.1742': attribute type 11 has an invalid length. [ 91.805265][T10157] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1742'. [ 91.805354][T10157] netlink: 'syz.5.1742': attribute type 11 has an invalid length. [ 91.805367][T10157] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1742'. [ 91.850933][T10161] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 91.850964][T10161] IPv6: NLM_F_CREATE should be set when creating new route [ 92.041268][T10180] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1744'. [ 92.043003][T10177] loop5: detected capacity change from 0 to 512 [ 92.400616][T10203] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1765'. [ 92.402619][T10203] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1765'. [ 92.431271][T10203] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1765'. [ 92.431335][T10203] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1765'. [ 92.487320][T10195] loop9: detected capacity change from 0 to 256 [ 92.511016][T10195] FAT-fs (loop9): data area starts beyond volume (350 > 320) [ 92.512630][T10195] FAT-fs (loop9): Can't find a valid FAT filesystem [ 93.061293][T10276] overlayfs: failed to clone upperpath [ 93.070229][T10276] overlayfs: failed to clone upperpath [ 93.134120][T10286] Injecting memory failure for pfn 0x15e6ea at process virtual address 0x20001000 [ 93.147744][T10286] Memory failure: 0x15e6ea: Sending SIGBUS to syz.6.1777:10286 due to hardware memory corruption [ 93.150680][T10286] Memory failure: 0x15e6ea: recovery action for dirty LRU page: Recovered [ ** replaying previous printk message ** [ 93.480284][T10323] ------------[ cut here ]------------ [ 93.480335][T10323] do not call blocking ops when !TASK_RUNNING; state=2 set at [<000000001a5c1d8c>] prepare_to_wait_event+0x2e4/0x3ac [ 93.480405][T10323] WARNING: kernel/sched/core.c:9124 at __might_sleep+0xc0/0xdc, CPU#1: syz.1.1787/10323 [ 93.486169][T10323] Modules linked in: [ 93.486861][T10323] CPU: 1 UID: 0 PID: 10323 Comm: syz.1.1787 Tainted: G L syzkaller #0 PREEMPT [ 93.488707][T10323] Tainted: [L]=SOFTLOCKUP [ 93.489483][T10323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 93.491227][T10323] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 93.492655][T10323] pc : __might_sleep+0xc0/0xdc [ 93.493492][T10323] lr : __might_sleep+0xc0/0xdc [ 93.494319][T10323] sp : ffff800090fd7930 [ 93.494996][T10323] x29: ffff800090fd7930 x28: ffff8000805a9ec8 x27: ffff800090fd7a00 [ 93.496381][T10323] x26: 0000000000000000 x25: ffff800090fd7a08 x24: 0000000000000000 [ 93.497778][T10323] x23: ffff7000121faf3c x22: ffff0000d423d150 x21: 0000000000000002 [ 93.499162][T10323] x20: ffff8000869ca160 x19: 000000000000026f x18: 0000000000000000 [ 93.500580][T10323] x17: ffff800080168534 x16: ffff80008034b12c x15: ffff8000805a7e34 [ 93.502090][T10323] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 93.503574][T10323] x11: 0000000000000000 x10: 0000000000080000 x9 : ac1426981c34ea00 [ 93.505042][T10323] x8 : ac1426981c34ea00 x7 : ffff80008048ea5c x6 : 0000000000000000 [ 93.506591][T10323] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000802f8870 [ 93.508097][T10323] x2 : 0000000100000000 x1 : ffff0000d423ba80 x0 : 0000000000000001 [ 93.509530][T10323] Call trace: [ 93.510092][T10323] __might_sleep+0xc0/0xdc (P) [ 93.510916][T10323] __mutex_lock+0xf8/0xf14 [ 93.511689][T10323] mutex_lock_nested+0x24/0x30 [ 93.512541][T10323] futex_pivot_pending+0x30/0xa4 [ 93.513402][T10323] futex_hash_allocate+0x73c/0xc20 [ 93.514297][T10323] futex_hash_prctl+0xd0/0x324 [ 93.515088][T10323] __arm64_sys_prctl+0x9c0/0x14e8 [ 93.515981][T10323] invoke_syscall+0x98/0x244 [ 93.516812][T10323] el0_svc_common+0xec/0x23c [ 93.517645][T10323] do_el0_svc+0x4c/0x5c [ 93.518387][T10323] el0_svc+0x64/0x260 [ 93.519092][T10323] el0t_64_sync_handler+0x48/0x148 [ 93.519979][T10323] el0t_64_sync+0x198/0x19c [ 93.520782][T10323] irq event stamp: 194 [ 93.521496][T10323] hardirqs last enabled at (193): [] __arm64_exit_to_kernel_mode+0x64/0x78 [ 93.523322][T10323] hardirqs last disabled at (194): [] el1_brk64+0x20/0x54 [ 93.524903][T10323] softirqs last enabled at (192): [] handle_softirqs+0xc28/0xd98 [ 93.526553][T10323] softirqs last disabled at (187): [] __do_softirq+0x14/0x20 [ 93.528142][T10323] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 94.055143][ T8238] bond0: (slave syz_tun): Releasing backup interface [ 94.192799][ T830] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.321437][ T830] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.578818][ T830] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.641111][ T830] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.929832][ T830] bridge_slave_1: left allmulticast mode [ 94.930990][ T830] bridge_slave_1: left promiscuous mode [ 94.932274][ T830] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.935143][ T830] bridge_slave_0: left allmulticast mode [ 94.936143][ T830] bridge_slave_0: left promiscuous mode [ 94.937342][ T830] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.019025][ T830] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.046025][ T830] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.084551][ T830] bond0 (unregistering): Released all slaves [ 95.250927][ T4405] 8021q: adding VLAN 0 to HW filter on device eth0 [ 95.389125][ T830] hsr_slave_0: left promiscuous mode [ 95.390693][ T830] hsr_slave_1: left promiscuous mode [ 95.390993][ T830] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.391013][ T830] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.395557][ T830] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.395583][ T830] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.403083][ T830] veth1_macvtap: left promiscuous mode [ 95.403163][ T830] veth0_macvtap: left promiscuous mode [ 95.403226][ T830] veth1_vlan: left promiscuous mode [ 95.403269][ T830] veth0_vlan: left promiscuous mode [ 95.534796][ T830] team0 (unregistering): Port device team_slave_1 removed [ 95.540145][ T830] team0 (unregistering): Port device team_slave_0 removed [ 95.605476][ T4405] 8021q: adding VLAN 0 to HW filter on device eth1 [ 95.784088][ T4405] 8021q: adding VLAN 0 to HW filter on device eth2 [ 95.823032][ T830] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 95.823087][ T830] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.903088][ T830] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 95.906063][ T830] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.944073][ T4405] 8021q: adding VLAN 0 to HW filter on device eth3 [ 96.002079][ T830] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 96.004452][ T830] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.091935][ T830] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 96.091977][ T830] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.297594][ T830] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 96.360317][ T830] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 96.377856][ T4405] 8021q: adding VLAN 0 to HW filter on device eth25 [ 96.421614][ T830] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 96.483273][ T830] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 96.533339][ T4405] 8021q: adding VLAN 0 to HW filter on device eth26 [ 96.618702][ T830] bridge_slave_1: left allmulticast mode [ 96.618823][ T830] bridge_slave_1: left promiscuous mode [ 96.618981][ T830] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.625972][ T830] bridge_slave_0: left allmulticast mode [ 96.626031][ T830] bridge_slave_0: left promiscuous mode [ 96.626141][ T830] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.644257][ T830] bridge_slave_1: left allmulticast mode [ 96.644304][ T830] bridge_slave_1: left promiscuous mode [ 96.644397][ T830] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.646414][ T830] bridge_slave_0: left allmulticast mode [ 96.646425][ T830] bridge_slave_0: left promiscuous mode [ 96.646497][ T830] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.743223][ T830] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.757469][ T830] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.784470][ T830] bond0 (unregistering): Released all slaves [ 96.851284][ T830] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.884241][ T830] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.913909][ T830] bond0 (unregistering): Released all slaves [ 96.919237][ T4405] 8021q: adding VLAN 0 to HW filter on device eth27 [ 96.972203][ T830] tipc: Left network mode [ 97.086679][ T4405] 8021q: adding VLAN 0 to HW filter on device eth28 [ 97.285331][ T4405] 8021q: adding VLAN 0 to HW filter on device eth29 [ 97.442878][ T830] hsr_slave_0: left promiscuous mode [ 97.444424][ T830] hsr_slave_1: left promiscuous mode [ 97.444687][ T830] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.444699][ T830] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.445671][ T830] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.445683][ T830] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.450133][ T830] hsr_slave_0: left promiscuous mode [ 97.451755][ T830] hsr_slave_1: left promiscuous mode [ 97.452203][ T830] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.453512][ T830] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.458233][ T830] veth1_macvtap: left promiscuous mode [ 97.458277][ T830] veth0_macvtap: left promiscuous mode [ 97.458358][ T830] veth1_vlan: left promiscuous mode [ 97.458394][ T830] veth0_vlan: left promiscuous mode [ 97.578108][ T830] team0 (unregistering): Port device team_slave_1 removed [ 97.582019][ T830] team0 (unregistering): Port device team_slave_0 removed [ 97.693800][ T830] team0 (unregistering): Port device team_slave_1 removed [ 97.697848][ T830] team0 (unregistering): Port device team_slave_0 removed [ 97.760595][ T4405] 8021q: adding VLAN 0 to HW filter on device eth30 [ 97.919522][ T4405] 8021q: adding VLAN 0 to HW filter on device eth32 [ 98.057545][ T4405] 8021q: adding VLAN 0 to HW filter on device eth31 [ 98.227056][ T830] IPVS: stop unused estimator thread 0... [ 98.227818][ T830] IPVS: stop unused estimator thread 0...