last executing test programs: 26.98993398s ago: executing program 0 (id=566): setns(0xc9, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x25, 0x0, &(0x7f0000000040)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf250000", @ANYRES32, @ANYBLOB="001000008000000008000f002000"], 0xe8}}, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002700)={0xffffffffffffffff}) close(0x3) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000000380)={0x30, r4, 0x1, 0x70bd25, 0x25dfdc02, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1000100000001}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040001}, 0x0) sendmmsg$inet(r2, &(0x7f0000003b00)=[{{&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, 0x0}}], 0x1, 0x0) 26.62074737s ago: executing program 0 (id=570): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000500000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x4, 0x1}, 0x50) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x6) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f00000002c0)="cc", 0x1, 0x4000, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) sendto$inet6(r3, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0x0, 0x4b1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x2, 0x9}, 0x8) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}, 0x0, 0x0, 0x0) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x4002, 0x0) sched_setscheduler(0xffffffffffffffff, 0x0, &(0x7f0000000540)=0x5) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791000000000000063130000000000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x4, &(0x7f0000000300)=""/202, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x3c) ppoll(&(0x7f00000003c0)=[{r3, 0x1004}, {r4, 0x40}], 0x2, &(0x7f0000000400)={0x0, 0x3938700}, &(0x7f0000000500)={[0x2]}, 0x8) statx(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x100, 0x0, &(0x7f0000000280)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x5, [@func={0x3, 0x0, 0x0, 0xc, 0x1}, @enum={0x3, 0x1, 0x0, 0x6, 0x4, [{0x2, 0x1}]}]}, {0x0, [0x30, 0x2e, 0x5f]}}, &(0x7f0000000640)=""/170, 0x3d, 0xaa, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x2e, 0x0, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 25.773249485s ago: executing program 0 (id=590): r0 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r0, &(0x7f0000000000), 0x40000000, &(0x7f00000000c0)) (async) unshare(0x28000600) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0x6, &(0x7f0000000900)=@raw=[@generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x5}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x45}, @generic={0x95}], &(0x7f0000001180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000021c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000002240)="0011223344550011223344560800", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000040)) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) eventfd2(0x4, 0x800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) fsopen(&(0x7f0000000080)='binfmt_misc\x00', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r4 = socket(0x400000000010, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xc, 0xe}, {0x0, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x24041080) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) (async) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pivot_root(&(0x7f0000000340)='.\x00', &(0x7f0000000180)='.\x00') (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 25.76174047s ago: executing program 0 (id=591): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x204092, &(0x7f0000000200), 0x6, 0x515, &(0x7f0000000c00)="$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") syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaa7274f07c8de900a65695e55e2c6d4aae4a243a686f3adaaaaaa6cf6566994c6080045b4003300000000a3069078ac1414bbac", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5010000090780000"], 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000001, 0x32, 0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x6]}, 0x8, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r2, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}}, 0xc004) futex(&(0x7f000000cffc), 0xb, 0x0, 0x0, &(0x7f0000048000)=0x1, 0x0) (async) futex(&(0x7f000000cffc), 0xb, 0x0, 0x0, &(0x7f0000048000)=0x1, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) (async) r3 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000000)={0xa, @sliced={0x3, [0xf, 0x100, 0x7, 0x9, 0x5, 0x8, 0xf01b, 0x9, 0x3, 0x8, 0x4, 0x1000, 0x3, 0x49bd, 0xffff, 0x5, 0x6, 0xf711, 0xff81, 0x0, 0x7092, 0x6, 0x0, 0x2, 0x5, 0x7ff, 0x78c6, 0xc, 0x9, 0xfff9, 0x40, 0x8, 0x1, 0x7ff, 0x9, 0x0, 0x2, 0x6, 0x8001, 0x7ff, 0x400, 0x2, 0x2, 0x4, 0x0, 0x3, 0x9, 0x4], 0x56e}}) (async) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000000)={0xa, @sliced={0x3, [0xf, 0x100, 0x7, 0x9, 0x5, 0x8, 0xf01b, 0x9, 0x3, 0x8, 0x4, 0x1000, 0x3, 0x49bd, 0xffff, 0x5, 0x6, 0xf711, 0xff81, 0x0, 0x7092, 0x6, 0x0, 0x2, 0x5, 0x7ff, 0x78c6, 0xc, 0x9, 0xfff9, 0x40, 0x8, 0x1, 0x7ff, 0x9, 0x0, 0x2, 0x6, 0x8001, 0x7ff, 0x400, 0x2, 0x2, 0x4, 0x0, 0x3, 0x9, 0x4], 0x56e}}) ppoll(&(0x7f0000000100)=[{r0, 0x2}, {r3, 0x200}, {r3, 0x5c00}, {r0, 0x1080}, {r0, 0xc000}, {r0, 0x8}, {0xffffffffffffffff, 0x400}], 0x7, &(0x7f0000000140), &(0x7f0000000180)={[0x1]}, 0x8) (async) ppoll(&(0x7f0000000100)=[{r0, 0x2}, {r3, 0x200}, {r3, 0x5c00}, {r0, 0x1080}, {r0, 0xc000}, {r0, 0x8}, {0xffffffffffffffff, 0x400}], 0x7, &(0x7f0000000140), &(0x7f0000000180)={[0x1]}, 0x8) 25.22063517s ago: executing program 0 (id=596): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffb, @empty, 0x5e}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x3) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff8, @ipv4}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000040)) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0xa7ba) r5 = socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000000), 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) listen(0xffffffffffffffff, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r10, 0x1, 0x42, &(0x7f0000000000)={0x0, 0xea60}, 0xfd00) io_submit(r9, 0x2, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r10, &(0x7f0000000240)="00fb", 0x2, 0x0, 0x0, 0x2}, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x5, 0x2, r10, 0x0, 0xffffffb4}]) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1080000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002cbd7000ffdbdf25010000000c000600030000000000000008000300", @ANYRES32=0x0, @ANYBLOB="08000d88", @ANYRES32=0x0, @ANYRESDEC=r0, @ANYRES32=0x0, @ANYBLOB="0c0006000200000002000000080001000000000008000100010000000c000600030000000300000008000300", @ANYRES32=r6, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001f0001fdff1f000000000000070000002b25f4e30b497664529baf109e0234c5c7eafeb2d73422e75e920ab9d904b6bdc84eaa7804f11ce6038658c15e9502c059902ec69f3f73d9d1848ccb7abff11e270110"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4000080) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r8) 25.04755543s ago: executing program 0 (id=607): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x129942, 0x18) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x40, 0x10, 0xfffffffe, 0xd968d5b908ac0cde, 0x0, {0x0, 0x9}, {0x350, 0x20002}, {0xf4ef}, {0x0, 0x0, 0x7fe}, 0x1, 0x100, 0x9, 0x3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) fcntl$setlease(r0, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x400, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80000, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) 24.985963654s ago: executing program 32 (id=607): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x129942, 0x18) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x40, 0x10, 0xfffffffe, 0xd968d5b908ac0cde, 0x0, {0x0, 0x9}, {0x350, 0x20002}, {0xf4ef}, {0x0, 0x0, 0x7fe}, 0x1, 0x100, 0x9, 0x3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) fcntl$setlease(r0, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x400, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80000, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) 3.560721664s ago: executing program 3 (id=968): r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13b}], 0x2}, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB='uni_xlate=1,iocharset=iso8859-5,shortname=winnt,nonumtail=0,uni_xlate=1,utf8=0,iocharset=maccroatian,iocharset=macgaelic,allow_utime=00000000000000000000527,nfs,nonumtail=0,iocharset=cp865,uid=', @ANYRES8, @ANYBLOB="2c636f6465706167653d3835352c004c87a56b54e381762bf87fb98d86d772421a964d437fff01c5e125acb191c125f8030000000000009dba05feee081e91fc61a0fef5511251"], 0x11, 0x238, &(0x7f0000000500)="$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") ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fefdffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000000404000001000000b70500002a0000006a0a00fe00000000850000000b000000b70000005920000095000000000000006c8457920ba0fad478e86823cc07b88f5d76781dcb7729f41726a067818b990b13bfdd5db1b7ef826f015cd03018d546fa9b6827767c171a4f0720596bb3b4d821d976f5843061cc2e3afbae82d7932d4f91f718f0e56315040148e11bac31821236192321fa3b3042"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000880}, 0xc0d0) openat(0xffffffffffffffff, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x58) unshare(0x6a040000) 3.443381752s ago: executing program 3 (id=972): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mydev\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='devtmpfs\x00', &(0x7f0000000000)='./mydev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x47, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002ff0000405e04750700010102000109023500010100a0320904000005ff0000000705810200020007058202000200070583020002000705840200020007058602000200"], 0x0) nanosleep(&(0x7f0000000200)={0x1}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mydev/v4l-touch0\x00', 0x2, 0x0) r1 = openat(r0, &(0x7f0000000300)='./mydev/v4l-touch0\x00', 0x2, 0x0) ioctl(r0, 0xc0145608, &(0x7f0000000400)="03000000010000000100"/20) ioctl(r0, 0xc0405610, &(0x7f0000000500)="0100"/64) ioctl(r1, 0xc0145708, &(0x7f0000000600)="03000000010000000400"/20) ioctl(r1, 0xc058560f, &(0x7f0000000700)="000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000400"/88) ioctl(r1, 0xc058560f, &(0x7f0000000800)="000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000500"/88) ioctl(r1, 0xc058560f, &(0x7f0000000900)="000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000600"/88) ioctl(r1, 0xc058560f, &(0x7f0000000a00)="000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000700"/88) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000380)='./bus\x00', 0x800804, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1, 0x275, &(0x7f00000003c0)="$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") r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="70020000", @ANYRES16=r3, @ANYBLOB="0f0700000000000000006700000048000e00"], 0x270}, 0x1, 0x0, 0x0, 0x44810}, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCNXCL(r4, 0x540d) ioctl(r1, 0xc0145608, &(0x7f0000000b00)="00000000010000000400"/20) 3.087407339s ago: executing program 5 (id=978): set_mempolicy(0x1, 0x0, 0x7) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1c, 0x9, 0x400, 0x3, 0x8100, 0x1, 0x2, '\x00', r0, r1, 0x4, 0x5, 0x5}, 0x50) unshare(0x6a040000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x403, 0x2, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0xfa}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x8044) 3.023367497s ago: executing program 5 (id=979): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) (async) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0x19, 0x0, &(0x7f00000001c0)) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) (async) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={0x0, 0x3, r3, 0x3, 0x80000}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x99) getdents64(r4, &(0x7f0000000000)=""/134, 0x86) recvmsg$can_raw(r4, &(0x7f00000004c0)={&(0x7f0000000180)=@sco={0x1f, @none}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000280)=""/117, 0x75}, {&(0x7f0000000380)=""/181, 0xb5}], 0x2}, 0x40012000) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd000}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x24}}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}]}}}]}, 0x50}}, 0x20000040) (async, rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01022abd7000ffdbdf0500000008000900010000000500070002009f521ada2f5abf35dac300000000000000000000000021255f1c4ec933d5c356712d78404a1a86838a6d9e13a635f30f03f051d420f3e74448ee94a77947c7bc0303eb73fd843a98c1e00f94da102b830ed482eaf8abc1c8bb7fefada7cd9ec596dc44bcd8ea42d590c81fafa0d24d5135c078d5f8ca513e55c9c4f4dde36386a59eadaec8572fb76b233733b845a65a776c2874339a346c19186346aae23f13f93a75fb859718e5b392d970f632aa2af2a8ed5846e58baed701f29d7fc272f1bb06b1a21765659802df9d2993e985505b1b"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) (async) r9 = fanotify_init(0x8, 0x40000) (async) r10 = syz_open_procfs(0x0, &(0x7f0000001040)='limits\x00') fanotify_mark(r9, 0x1, 0x8100011, r10, 0x0) (async, rerun: 64) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r7, 0x20, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40090}, 0x2000000) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0500000000000000e64e9da5000008000300", @ANYRES32=r11, @ANYBLOB="080005"], 0x24}}, 0x200400c4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) (async) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) (async) sendmsg$NFT_BATCH(r12, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async) sendmsg$NFT_BATCH(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000db1c00000a2c000000050a010100000000000000000a00000a0900010073797a31000000000900030073797a320000004014000000020a030000000000000000000a00000314000000110001000000000000000002000000003e5565715065dad927c3f0ead59cf4335824688517db194bc038656aad9fb5f323f972af66029ee409d07887556f32fd796215ea7e3129928b34235f60dfd0482d1838f7ff45ba47628d7d83c8677ea708f783d05013875d1e464ad20e96aeef244db68cf53ec0308df96a791ce63211de96e9ccb0e9ddc1ea8016e5be1bd365e77116f99b"], 0x68}, 0x1, 0x0, 0x0, 0x10008034}, 0x20008890) 2.961795394s ago: executing program 5 (id=980): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$sock_buf(r3, 0x1, 0x4b, 0x0, &(0x7f00000001c0)) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x65) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000000)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) pwrite64(r5, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) ioctl$EXT4_IOC_MIGRATE(r5, 0x6609) getrlimit(0x8, &(0x7f00000001c0)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r6 = openat$smackfs_revoke_subject(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$smackfs_label(r6, 0x0, 0x2) syz_usbip_server_init(0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000004900)={0xffffffffffffffff, 0x0, 0x980, 0xa1, &(0x7f00000037c0)="055998d44cbe03b71fed2a075cc14670276b9e4a3af909ef47c64b7d9c42fc51f8b41e61b8bd784a320446cf5d88a77726fdcf62ac29b044dbda197221e602324eae8feb1dddb483379c5f5aaea795f196a63285a1a5443b54b9e6dd81d0df2127d12c5f0057db124077ca2e2883472bf24e8ba0cc5013f413371a18274c4ef89e9641470962474d0c71eecd9a64be672b86643a5c0fc79a6d787e0bc8007df67860bbf077c71a7deea7eb3913e604a142d7aa3cc75c04ac14d0741e212dec6d9a45d4152452dfbcabbb87c71bb6fb1bb020a159206d1411c4b77e1a9f6fb5f94b53d4e1d2e08efcd3f7762b314020a60f76ab545e92b47289f227d4f13dd5021b269ca3b8d66df34394f079b6b99d6f4412707a5d10feca7391b39c76ed61183844bd1622c40b974ee8ea4f2d95881952e31d844fcc2949b9c8bfd71d2603d132f1c395636ce61ddf058b2e7b7132656a472775e8ab5a64408a58057aaa701dba415ed5b71c93e748c4a370c8e7b025e150ea3889e3352aa9cd0de180555e990f16e8a8f68a3c54a9b3d1d1bd07144a1531ad9cb1e88cf9802fe30d6e1f29adb6ceb9aad9aa65729de3d87cdf751620239bb6ba1c4f9a1406dd1987faa56ccc9b5f6365fed312375bcca2c3ef6f8bbb880418c162c589168e58fb14a10a0baa36be9589adeca96ecec00f4f951852d899eef4b880baca639dab32a5388191695928f66f5c8b5a22e9d05f62e095493644a00dbf0bdf9ebe1b1b4a8b7dfe423f2e05765cd161940d849ed3023b45debd4d91db857a365e05167bc44aa09064b5f6cf0300cefa585f4f8174960da2e3bcb02b9976f358e0fbb5592c040df34438bf021b7334ec627a516a91b5c6c01b9788588c98cfc00cdaad94423fb3c538a9da00b1a3f5012e682fef9c6a6a28cd8496df7994d1a7ce172fc225f2b7bf3a63f8a51dca79656cc396df8a91b50311c053e8545a501ee5b92c84c15a4cbe973ef250fab611f862db8cd10c410a41d05e1b26ff30b612c8266e75e5ca103d682952c94c2123aa1295877d2595795f7136309bf8f198758616e64dcbd74f120ecb3855de6c7f9b37b90b89e5458c3d22d4400465bdcc60376ff25def808fcc02e47b18b63112eb9b4a79a2e365427819f35fd05e97cae57259c503b97271f13e29102272ae66083232fd8da7f68ac036732ba2236193836de251775566d4e3a5ffe24dce514c614c2490a5d3e3bdaa62894a307d798433b7d60c050708a228d954dc466eaf5cda575bc398e370d53bdf8b8cf784016f1e4be830efc7ba916df9ff765a75dc01b8c5ae1dbaf1a164ea25a4ab201a0576d4c9ac4eefe5053c2621cb01b1be0b77e4052d7ecff58942fce3788edd88849a47220ba89ab38d9768dae07403cff6baf26671d93f46a2d125877e5bff66fd0ab0a493c56a8b93b5a30d2705ea46d29cfde824fabfc9ab4d66333266ef0ffbbb1ab03e962410dfebf809bd33a46a6491df98923b9520def01b888be993da19f69b012aa274b784704d2250b2f5590c8373534119d4524f8bc4cad81804daf368306cd0de2f33e0771c29909b221280edeea556b3b1da35fb1e19e9a0ef0cda31eb1f683fda3150e100ea918ec08c4eda18403c75df07434d81e527e6b8cbe8e5bbdf6ed788e2830039f1d55a90f853fbc87d9b69a485d55d752aaa2b0fd06835e2b37a084abffe94a822e5a7c6934ff2d94e1b17e0a5abc558bda9238e4a8dcc83bfb3c1c10ea84e7ba5bd783f807e86c8af51fb45051db564ed71bfed98a19d890a9634fe32fe610b88802378cae06276733a7250fc4197c66360105a4596f081b714a9bb1a1569e5a4268361a620f31ef63c0fa3661a21bb5624e433d4217659050707215f301b5844da5536b5fec3083189a7c80a31e4e28453ebabe7f1810a8a3a8ee5aca262998f032df6705a8ea0ea7759c375bf1d99f16a9401e0dee1245e98b3a2316a02fe02950256211fc6cc35990b234074c9faf44a61ec5756344d72053f2f5279348cabf549596631f118eeddfb7e7e6d4436ac1c787ef28cd668aacf12be0b5ab802740df7fa611dc982064320db2d7ca9f7316c15243f1882a9af5a201fe848d39fad9af0913da66723df824ba531e4e32e0632b5fd40f09cd1b1df40c2ff978aaf6463cb34ca995962372850259f96e887b033a03e7e40b42c23c22a57553967b8916512ce65bc7af6af36e49e455c124d5d33030ce64067152a9ed7c230fd83fc9bcb28b3298e14ddcbde464ec33155a3d6a0d9bb33bfae679bf7f3335cc0d4f20a8a3d327d83ef6a2f84fa5790fa0895ccf6f23cf22c753edf809c6aa360b82757250eff6572bd79b79a2ed48122858a89ec29dc6f17bbc8f6d80ec2a8b1c1ec4ba73fbaf8dbca888e8bda917edd3efe64c3fa244ccf625de9cc0c2e5ff58a6ec7483f8affdf7a7bbe5d80ecf30778d2ec14fc04d59209e8ea461e522c0e7d9389bf2da2731930c3e5243a286236c9b9c69352bb7a22624792b60b2d29321dd40461c3ad503cb81a6c1a84c6985c0cb55990729c9c007b0ddd3f720f23343e0b6c57fa348d701903473ba2cf031b922562b5f35c5c324039a971f7f34694d7b80bd673838a6c09176725e3dce0e662706d5bb9c055c7181e73ffdd794c253dde23fa18a39c963522a20e47f074f38737521ae483c86e04a67fd840156cfadfadbb5058985de54a6c7bef240284c41b0e4c3b59e220dbccc380bfbb8e059d7bca64de22dedb3220ec519ea118f38c93463f365227ac7ae554c31c718733e077cd0191ba6b7fda704cd5438f81ee7c8f7bd85c491f69e004d9147200b256f6057b67ee6a1e239b5e3e81f66a5fc6f60971ddebab84f8a867a3c825548da296c274af0fecb8ed6b3b51248e358a9a6e69caf17ce0b53a26a462e97ed89020505f81c2518ad4b966828250fe1b9f8ccc2c7078817b394c0f1ac85e685a8b17d7ba3fbf52473003c35520bcf41629d72ac2deebc0d4b474263dbaf6a7e8e3736a95c6d33990835aae2a4f46c4247c1035aced12c43897e351c258e4cc669c2adbac199c65e949404364b4dc637685717e473ce0bf5c3ed9c5fb740a52b155ff08c1b7da75ef837034b997a1c70d7ebf5b41526a3e9a569d8a9abce445d1fdd9c77f9dd07d69cfaa9ce414d9be7302813c7644c4f4ceac98f4194fcd72ad33e1a6a4e6a1e75bae92265abc73434782d4dc808f6790cbda36df6355178fb8121088e254181da6a35fc330f52ea3b6d26be0952738aa34388850c9241d30bd948025dc30123106e094b5a263c0696bcc9798234c96bf566066c24e6dc96f5148ae0960b62fa523ef537dd200ed9990bcc1e09081d2120ec153660ae8d6c822405bf5ffc640ae6e24f02c40aad47b6e80408020ee5646d52c84d6bb078fb9d347b14f4018440c", &(0x7f00000047c0)=""/161, 0x0, 0x0, 0x18, 0x0, &(0x7f0000004880)="e4f1c7b40e80d3df0ae5d6a958903eeb4ed1608156f69538", 0x0, 0x0, 0x0, 0x5}, 0x50) r7 = openat(0xffffffffffffff9c, 0x0, 0x490042, 0x0) pwrite64(r7, 0x0, 0x0, 0x8080c61) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000f40)={'vlan0\x00', &(0x7f0000000e40)=@ethtool_drvinfo={0x3, "ad2d53b155f55222074ac545b0b526834451f5c63771cddd30b1de1aee81de2a", "7d774b76005c8846835ae47ff6ba275800", "07ffda7e8037293db8c178f1f44bc1156e55e87a9c45eef2eef7630542683565", "70df1710d3518991326dbd966869e5a5a02f091c53bc8045071241d866110bdb", "c6eda83fa7ff6dedb263ae5efc60938baa18c9acce190528f7c8b31464be1e81", "183f19e71e9dc3962aa67400"}}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x1, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xa5a1, 0x42001}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x4, 0x9}}]}]}, @IFLA_CARRIER={0x5, 0x21, 0xfe}]}, 0x50}}, 0x4000844) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x120, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.40998398s ago: executing program 1 (id=989): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x1340, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f00000000c0)={0x3}) r2 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) lseek(r2, 0x0, 0x3) ioctl$DRM_IOCTL_PANTHOR_VM_GET_STATE(r2, 0xc0086444, &(0x7f0000000100)) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x150, 0x18, 0x713, 0x0, 0x25dfdbff, {{@in=@multicast1, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x37}, 0x4d2, 0x32}, @in6=@private2, {0x5, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x100, 0x1}, {}, 0x70bd2c, 0x3505, 0xa, 0x4, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 2.404981853s ago: executing program 1 (id=991): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x9a190f4b9fa2fb7d, 0x80000, 0x0) mmap(&(0x7f0000ff6000/0x2000)=nil, 0x2000, 0x2000001, 0x30, r1, 0xe4ed3000) r2 = socket(0x10, 0x80003, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa, 0x2012, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b407000000000000dd0a00000000000073014000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x22, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x19, &(0x7f0000000000)={0x0, 0x1}, 0x21, 0x10, &(0x7f0000000000), 0x7}, 0x48) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010025bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="100000000300002008ea1b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x24044000) 2.347886226s ago: executing program 1 (id=992): shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000353000/0x1000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0xa00, 0x12) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x40000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff1}, 0x94) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000c80)={r3, r5, 0xa, 0x0, @void}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x8001, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x800, 0x7}, {0x0, 0x0, 0xe6}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@remote, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe8) socket$key(0xf, 0x3, 0x2) sendmmsg$inet6(r9, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f00000003c0)="14a48160efe2f8a167381342b462ea61b414d9ae18bb95b6754b89019d33dd01dd44ed6c2ca6fb3d42a1aee253f965ec92904502d70e8a1aaf050f323104016014488558b640100bac8d6edcdd3f2da19611d8eb07a7d202450250e426916f164604617250b987a4c34ff23188ce00b5b4997d9485b3fafeabc3c7c6b300b50761e6b3d6de88d297695df717bf38d4763c9b12", 0x93}, {&(0x7f0000000600)="144b8dc006534f88c178ef042e51927a5cc4efcbb5f1df71136e4ef7adc55e303e9dc060f42bf3b2f898a492e957dfb63390f072c1e185f21a68bbd8ae29aa49579909019e84", 0x46}, {&(0x7f0000000680)="166ce73b26a28e609c28cc83375d5481e40aa5cbb74265d3154d7c9bc298ecdeb8fcaca0f9b0ee5c89f2dbd0e324b30943d02d7ef617b3977ebd654c2db7d422491ce5d947c0c899c2674563a91f027d18", 0x51}, {&(0x7f0000000700)="bf7153ed5eaa3a6ac31d7afaa73595643e725e75e561c4f88c7b3522c96ee80c6c0a88136658360687d04b6ad95505f2652219f906623b7d7aadb56f47c0c48da2c352244a0bb5dc620d2a6fc7bb17605dfb0d38b7de5e4a74d8fe6e6de401913639acbec5e337", 0x67}, {&(0x7f0000000780)="c332c67094b93bb2fc8f03b0c7c8372868973e2b467215b120e9a1700f836083ceee25d1245892b025225dddaf70b6694409ea4c8ee5b95e12852d30634295c8567e43b60f7d390fbd46f452b672487864bc4226ddf6600fc684852f349831b4e9d9dcf2c9c15fdf51169e92502f9f403018f046252666d6c273b5403b2a7b789dd0fc9e9e736d13adc1708c70d29b856ba4a936b3c2fa07362eac6f26554b813fb62154dd99be47ba05ebbd4a862d", 0xaf}, {&(0x7f0000000840)="865b3102b2fe130616bf38106bb9fec8376eef49fb4f022a7a9e6c79baeabaac1eee2eb30a20b7cf6e52ec3c1aad8bb64c8bad31b949bf8f67ebba982f5c731602570019386c8627e7bded907b78d95f83b5695947764ab76b525213ad9bdc64c9d84880c1e285fed50601acefc9977edd428db9c2cf39c5adf163410c2f8484a2be4eb9dd46aa24cd20a57523b61f4b6ad0ff65c44231a9ee8b287a02cd9ccdbadec8a574802408d4b45809c2d13adcac47542e88db6c8b7351e52578a2c75727d3a08e208f1defd7ff877c235139c9bd832f7d051d09526427011caf6e92058bd54dc81eb76b46ca722af5e29cd682109072da648868d35779f35eb29f0223c0c71f94db231ad05368590c1f198a53a132fb2bb2a05b9df9f1901b341fc3419964ede561aee680e7dfea99308e0c04c904c87673d2ba7937b3b5955c1d2aa35662f26da20d371d39a1567eb5aa561a4c98bc3f8c97e16c89acb5790cb09ba3cd6cc1d663d089b010a159d9e3f905b6bacecbaea2dadc8b6110837b59a438df3fa1d02f7c14f483d163cdc64e379f4b3fba1fabb5ea7f62022c6a1a4e22258c306b62359f7000f68c255b842ac500633d4f980358700f27b99b7c90322a687808f2b96adfa9c40dfb82d546a94791ed294c2b323f46b27bcd86703de6685a23154c69e9db17a23783c76a96e506ecd5bb9a5287d8dbfd5f9881e5726e465919a8ed86d3e92b0ced038c1224129b78df168a897f742c3ab863a497f94d4f327a99c7586202741410dd341c0c94d2efbfe038d75af90e6f570c58b2861e9c32b63b7cc6c27daa0166e95d0900169cd34cf833fbb1b45d1222db842883294f4fdd767d9a6e3da09ef82cc1bc21330a78d211bdb5bd2565fa044e7c1a13c39ea524a4e982d5ce59aa4bdd4d4d9e29e45a856bedd389793ca45b6f8cfbfd22c24da1a240d458183b126620efbde5922881a84299c5a9abe9286b49de390920062aca3b86d059e6dd6fe52dba486b59caa945bb95ab7c3a186e71ff5ec3e1762dcc33ab78050978e96a7f9b72fc94f405b4c4f414b22d2b0cc090c2ab426c6481d3a7b48440c707fce3d213f18ba743a8220661fd1c0fae55b67f3fe9b18ac7daf39fb2b618a90f921c11b8ea21bb4a8618f0fec9445d800cc77938df51cb7a27d77b942d00f51165543ac9364d9422f51e4347ae562a4ae57e59e0dcbbbb9f19bf941318c8d7d5ce2e668a3590479db3a3f00f72a94d0f993d97eabcddf041f64b1137fea3166b0ce6e2e339154ba1d0a36e286c5ff6a888d3e1fe93e3a9bb5488b0e85e5a7596b05adefcc50ab0a879dc99395f7f60eff9a89b13d669c9952ecb4f14036f2879359a390da2b81c0225bde59906347234c368d0f5b136a10f92a9e8e78bc528902e9c3fd5cc24121815780beeca24baf4f74c6cab068d4ab61992e430564a519e2c034db61e306c3165e411f64c88983817239d6e9081bdd2ac202bf81a68fbb87263b202142f5ad258c81cecdde858efc10de99728270723a5aa2e3c67b2207522434a41a27636d267fd9316e7b5d8d10fc4edbcafa9bbda7c0fc731cd81405657d381e5f201ce5718f8d51e9c973c030f87910a222ede97cf2e3db868d4acc224aa1bcc06c971c231b52b490e599c25db63f23a96bf34e7d486deebee2fdda0aaefbd3e0893fa458fa181e4e40f0fd3a9d2366225493300f7565317d4cebd018df2d45ccff79dd40e01dd0dcac0958e7439e9b527b57bbba84a62ce1bdc03ccde0e461e42505f866a1815d5ba143e6535890bccd0ca47d466b71b4cc2233cf6065e6c5c68ec207238c2d47ef5fff63bc6974c2cef2750735c2f1f97c7a56f76a7fc5158b6fcda887bf1dcc1a497a31427e46211c6f5a6889e8c7395f1e761425940a95b94bc1b0cd76a9e43ee94de2d36b306f6830fdbb7a50eb11856aebcd4b5e1d8de4756ed64fd8270c54ddd2f960cd6136b967dc8a94ab7aa8c3746a6ce1f21407b2bdd7864b0bf2c06fcc555b8899ee2fa1dd244989aac4a5949046b027a162d29882ae2290617cd8c421979c31e03d099fac333130523b499acbbe5de010f5d6bf36ce6e6a4e866c5c122dd563e25dc913ac03993202038dcb0e12ca174561d22cb73574c5e1672cf2e11858ca0bf0dd902ec0cb40f1a00733030aaeebf1386d1d68172c1b1fff17acb2312369ea27142c632814e3e88d7d8ed1e792cd5ffa5eee40c29763041c926cc3ad932de78f2028e570c6c3264d86786cc28d1b067b92f35d80ebb00aa7a3eb9acdb598ec6ecafe8de73359ebc9af48d40320a30836a2426ef41409bb605fda0efe7d4f8524f695f05299985297b8b2e4996a2fabfd9279bf150207167a388748f3568dc09b968a333011d0edefc94b91c3b78fcd3df857053a4ab952ec2320e22d57ac667d2dcd244055e39cd489b0e836fd097a0e8c29bc81a4b0cdb415131e9bff465931a8099d104b615e1a0ce9a6de402005af1e35aab836a494c6946354d0608056791b4e2005a2bd23c0261fe0cb22f7b5dfd156dfc329b5590fee4833f0354c1f675ab1a09826a180417c5488824a02873ff413a6307904f1b95a29983aced65beb5cda460c7d1c09310e503cf06b84025973553eede7684473a937cc4325d5bbc338afa7dad74731bf63d61f5a3e2b7fb22559b0851acf7723a90f4847cf9a27cb0594b77639d70bb4ecda30f658ed149ab05653a8da58b61ea1f22d15dbd865dd09f1d4179eeace4fc9570d6d18fa885644d25be3fd888ac22eb29984a712b02ca63944b0a4aba474618e1cbf68a5c9f461933c0a803e1a99396783d197ca7aa0c7f4063716503b7677898d8b7df16a60e455d1235b57641e89c94ef256ea0e3540eb69e441e1693a5b34ba04f801e339019dfc42a60439fc9457a78d0d1334bf7f8d8a01037be0a2aab9f681d04631f61681801f026527ecad9e726df63c60504390174f627b087f74683c525214383e18140fbac25e833623ef6885ba6774dfe9a215fa2ed9185bb6ac327b3f170e28d090b6d3e5f746495c261742b4184293ee8881d578f34cf4a28ae6db051f9476b946575ee94de39e21a077d414407c34c395d71a7bf0964c870ec4aa30e24408d05782bfd7a992723b5414b2f5f5595344d2c98f4de9522a1b02c5ba37af49527f052d68ca600c044e608c8a0eeddac09a61f5c592d2c5c34c1df0edf143b80d1a7719084e2cca73fdc07ce4093e8d00eb2785f30449472d6a2b9cf6722428068c5625b4ada4cd8c6b4d5211b16e8f110635de423632e8c3ad7c8ea4867711c0e92c0f3ec1c13ff5b5b945f5d83977d9ffb3a1db70608f24d6446cc28dfbdb7e95ee584de3f731ace2c938ace2b88d437c3829a277f62ea94604ba9b8d70475626c9654faf87d8f6a3eaac67b74e8e68ea7138dd757648c2add4b851454b4836a784c8fada6aaca71e3ab5b5b1610af150ff52c46ae27ee1fe5ea0e35816a9ff8a0283be82c0644f744351ea7fecb58ca878325a07095906585abe42de75a78ebd0567d44eb50cfb39634a85545f7a4ef7368b673fc624e8de8f66e57713888b26fe1ac01e48e167c57933dcc66710b20efe8eb7f31c7c93cb0b2d85de9194d1e3370b838b8f1b65dff3a034093250ce3fd116da5042192f1a780ccac77b52f0b432306e7040cc122b315e267f0127e9b4ff63259efd37a77f3344c3e7429a6c3fd0e70d22d48f08fe1546c3ac9c212c69ffc2aa2f4d319cd19cde20bec5e19ee1688acfa6a1e2c300fd81b7aeb23fb6d3b0ca78bb802a73b09a7c7cbde93494fa7a904b32ad62e6512032ae9da59b8bc6ced42b65e2ea210f5a9d17d9e9af231550ba2522fe2892d156d46b5adcf69391affcb2879b1c1afba6be81018e05861d6f4c28415d42b52c6f9d626b111986173eeae0c79bb9bf76203e5fa4e8d633955e8564a52364568956637b35f3585c20fe0886c0b48578768a1364cf0a7fe11981ae5651858eb7f7efbe238b37e4d9a4acc6496cddb9366895bdd7e35294cfc36d39d14a5c56679fa6f20bb8924bfd62aa07c341361418302c2f5f6a371e3250cdf7a15269713577fc174e0264438583c5c3eb466a01e9349b1bc8e7c4a2bd829fa4604efcd99cea33ae8f8f4dd6e7c4cfbab1029f75903f8fa2183ec07318d2e2ff9c39fb85d03d069044a635c334589c4600abc1c2393abde2c0aa7924317a1f0cb822a78fccfa47f77fc0573d1b5b3ef3221b41a76ea79bf261db92231d5d06ef9c3a6091b005980e75df8fe6f007563cc19e8a1ff099e4c0e2bdb347b11ad029b54b7442d7fa3bd5ffb0bfea3722f812f057141552a53a39cb91dfe2d25eb4bc9b4734f409cbc8749341748728695bdbb55fba8be702a6329c9932c691ef1c71150e79c8e299b32b02376da18c065ec479a76f3534f6f69c791f412d62eb7d7a161c329dd98173f8e5c68af91d20df85eabddefd4c309571f5df973626cc9f594f7a51dfe1dcd4cf24fb4892d28e9969f4b2681bf414e6fe660ae23e8b29f53e2b01deb190c19da6112956aa381836088e896192f51371ca778740a203053f9978e52acac05e81819f6cdba59e213cb93c0554445159c878a645b1f62e83e60ea9c40e04a86c294391140b48f6de177fab2c54e4425a7204cc5f1424d16a97917f6f01707110dc835e88494f1e7fef0b9f98359552229743bfe95fd2ff87ed1d45ee7fa6f6b989958498886384825b674426635fefa08a59761156faa487a5742d02a26fb8469018adada2b8ddd0c9fd48b0c8393f02c802cffb1d9146ea9bb3799d1bb5ce8b5a71c26c779d5e60f4043adaa1ab1463a4d8b7f0367c029edf35d7704c86e52bfeb90d2dc470eac382e8b61d338838778abcb2779018664fc86aa45118cfbb9b06e2a70846efa13521c87f6115f6f1bce0fd10483798fb060fe76af80aa70af13acfdcebdac625c8c92adfe2e703ff5b6a4a79640f89282dd5ad0828eef12e95085807f42c99bafe3e971139399e44280e41725197242be9cda3b996a2352148eac6baf222487d6da0a84d31313aab3f039d3dd7bc8ab93d8ca72e4727f29f9a2a171417167b3e3e8b0f389785ee5e82abeb6126bba5c09b61f7a1b4b8235587aef03905f847020ac47712b72293099d0772c650f563d3bdfa8f48bcf390336ae8c7b37fd544c43f0d9c0a8db27e6af8c51613a25f49fc032d8f4b6fdeab66dcd8382a2c875ed56e7a8495820c23998b6e8b523ff466600744a7f73fd61621eba29cf410292c1eb504321213964dc6a2277001e825b9cb1eaf47e4a20eff7865b5d6b3ab3154b9da8bfaa539e546d7a063209f7411f182c522189531b2c8e0d42a8f45b1f6d217c197da6f6044d30605836e52fa22b7c3b02c6998efeada6fe1de1f6ad8fbdf3c61e25c3d1b39a7589313624e0b94255dacf7198d680bf1992cb092fa098d5aabf5f6c8ac828b795c5812d05cc60d44ff144d24d3369c3e4a77d64d0f7c6fb273d80b1d1406990a7dd79c6b5f4d2ad9b1999c43d6143793b3d620660b0fa013e3c2b99a277e5255c2cabe98a11342c4dca15c438a8a34a937e48e59aeac15d3dc477a61a5bebfce5bf1365e5981272be68ad2a79747f1b47a39940c38f4e8c2372a048d68bf691528f9fe628801a16006ba788ddf3dd954d91123f9ec7985741abf12da12965d13532d3e6dc6ea1743e39900536af1c0da62c669705e63e50cc515ade835c8c9fb407b90dd06e5ca5d11e03c4c2b783ff07e1ce83a6699d9c3ece5889bdabed6dc975", 0x1000}, {&(0x7f0000001840)="7a261f6d54c495d4437c244989352e04e18c1c9fe26c7d70c647c0b4cf3773a070992a5788192fee19b73aa1e54a01ac4796fc8333dab5e6e1cc4e05648c9589e96a09b9c318bb4a3c64bba43689e476d7195a8375231e985075ed2c2b7736e4dc79a59417069e7d14f60e1ffecd1d2bfb78e710357a084db1068832be3dfff706a41d66f4e4f1c266dd21545fae16f5451d83936baf1f56ec9dafb5171ac6a6d2e68cc8031b94d4a6c5f9c8011b1a1e25d56759f0446831b81ac445dae3737ac3bc38177483e6e49f141c3f02b55689a4e48fca26e2da5e567155a65d141bba052da450409b", 0xe6}, {&(0x7f0000001940)="beeebe6e30884ed2001e91226124e5fc1c606a2959cfa229c5394e28c2d7d4dd9ae5f424d27829998f72bc16136ee97297e99e50bb3f264601a549f103f6d18bf3d6cef7782bcebfddbba67106bf26f366e79bfa1b2f304e72133785fa7443e58e724c2346824219a65dcfd8e9dc8dfed7d945d66caec5301a6e3453e7bcf518", 0x80}, {&(0x7f00000019c0)="f834a7d77cb12365f4839166a6cc8cd4a02bd3e98bd0c8d95407c73bb774ea30af220df6bd01cc5be7a5b5322bf684fecd26640bc8f2b89c2c2fed809965d9ec181e7b76a1d424c8f49dbd0cbacb212673eba52c525222316eb47c10d403ad428ebf7d5e3b20f9fc8f1b9e41d09bf9db52679bee9c17a3f778505c4edd72b9f9", 0x80}], 0x9, &(0x7f0000001b00)=[@pktinfo={{0x24, 0x29, 0x32, {@private1={0xfc, 0x1, '\x00', 0x1}, r8}}}, @tclass={{0x14, 0x29, 0x43, 0x3}}, @dontfrag={{0x14, 0x29, 0x3e, 0xe}}, @rthdrdstopts={{0x70, 0x29, 0x37, {0x87, 0xa, '\x00', [@hao={0xc9, 0x10, @private0}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x14}}, @calipso={0x7, 0x30, {0x2, 0xa, 0x6, 0x5, [0x6, 0x7, 0x4, 0x8000, 0x1]}}]}}}, @dstopts={{0x90, 0x29, 0x37, {0x5e, 0xe, '\x00', [@pad1, @pad1, @generic={0x7, 0x58, "e85a122cfc683914b2946dbd20092220627b057090514dba51a0d157833cd9c55eb86bd41770a609ac7f2472aa1ee16d711fa1d81a808753fcb309eea90805794fbd44abf761c7bb9074a3f0f296e79bbb88b29d3c242276"}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @enc_lim={0x4, 0x1, 0x74}]}}}, @rthdr={{0x68, 0x29, 0x39, {0x16, 0xa, 0x0, 0x5, 0x0, [@private1, @empty, @remote, @ipv4={'\x00', '\xff\xff', @local}, @private0={0xfc, 0x0, '\x00', 0x1}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x6}}], 0x1d8}}, {{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001d00)="0c1faa0ea797a748ec8c27d1130645aa91955a5432855e182b42da129978737eded042f1cea0dbf83287d744d4f0e3ba5273997b68263b031556eed2cd1e9553cc59d8f48e277aa08f5b279c2a20a1c75309e70e927e2107114de9160d0f521b9a4af6d23ace1bc5930a5d97223920ec5e073adaa467e394ba17477dbad33bc68bdaf62ac5035730b8f3c1711ebb2bb691f696ac5496a3e37612a7bcd6e43a94f52b4d7ab23f4b6510067c678d4ed2278d93bfd9f6284dd3377b529d953f87c59ebe9693795031eec9702c71273677cd569356c9157c40e04e84078b390a267e", 0xe0}, {&(0x7f0000001e00)="5dbf61f9c19e8f9d8b4cc67aa1716e13b75f74b3b9a1008ee68e8d857485cfb46e9396b208faa3f0be80ee7425d2c4bcd73e951840aec57940ef8f7de67eb65e4ff2f09118e34d694efe3ea4c6d10102b1a64ab0b0fbdfca6603524e1edb4c70289606680b9f0e31403a690d326a70515145ea7558124854673a02ccab59a421d79804e46a1a23cb466c6619bc049bd32f7d7ae6df57fdfcd90019d05c6d65eb7a3008681d448a2f0f8969ba", 0xac}, {&(0x7f0000001ec0)="8643460f205db0f709c659e0e1904d5fed3a7cdbe9010e1ef02fc0207e66faa405f7b07bb6f5587ecfe7e54fe8a0123e754fe8ae487f279063adafc23ceffeb2702a0136713b11ead2a87698c6c91a10e4f79b6d007cba14e2", 0x59}, {&(0x7f0000001f40)="22962513c02b81310b18a30b00", 0xd}, {&(0x7f0000001f80)="e1fb29c56ac7c04d1dbbbf1b504b2a3985e63b41602812838949f0955f78701d2a984748", 0x24}], 0x5}}, {{&(0x7f0000002040)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x7}, 0x1c, &(0x7f0000002580)=[{&(0x7f0000002080)="28a878c70e324b4af5b9d65178623a51a8730b87fc8f68bca997491952157ff9e9ec3262e53a19686e80ad5e40b3f9535df61c0fadf43564bfdfe4f78c478da2cf597318662f41d1cae4d423d006e054a06b0c7d73325dfc2d1ebc875fad4e146bc1afb0b9d79334e7faa73599346e7fb99ee3fb4ef835fd3f133b18b0f0773fc6cb414900b516f120063c47a74c1919b7cc4303966e0d1e80ea88c8caf4dd362d5867292ed25cf163a14f58c0b1", 0xae}, {&(0x7f0000002140)="3e51768f62d0b9a431a217c2738d736acc971c1e1f738d0bff4b6f8fe99f61f00e21553712b8e58bb2ff23a5d2d4da79437253b91d0787aee8eb812c9e1208fa62e72293cecc02e8b570f181da45b18fdbcf5f247f59b92359b651b814ebb822db6219c89d18d9d87a2d5c212cd1cde85b7c062bec4de8aa1dbc1bdd0fecbd8e022ce0275e7a09f8eb662c159f02", 0x8e}, {&(0x7f0000002200)="0fff5c164334a264a5b6f88ef833ec800a6ff7319644231903b06f402f765a0977ab8ca57397663a5127f7b1ff93ffe119c2f90e3fce37b4a600daba0c07839d09fd1e193fa16358d040b3841ff4baacab9847fd8f160bf062a9ad93c749211fe9878ec57e96873af05d22503824464eb617213899b5d245319cb8adec3915783f60957f9191d922989cbbc76b3eef21c2ef9bed0659ddf4a05eae0439870f398d49e59abf67a8c8a1fed516fcd610eb7e833e8cc57d1f74b206921096ad76fadfa136758ec3100a4b96044206c6e29af3726b253c87de0555e01623dcac063f97223518e843135d60699d8255e451", 0xef}, {&(0x7f0000002300)="9c8a64be06d5b60464d08c0fc46211f321f03c09fbdf59941407cde4f90584f1ceca73224882aea6ea513d21dc644718a1437b8bfefa6b7b13aa92d7ea6690733bf4611d2eaf53a33c76aae87f3143fefc1376ad4ee412e6b4d30e69fea0adb6f2547efe8148505c874126ef", 0x6c}, {&(0x7f0000002380)="12c888ce5afae01433b08de767b52e9d5cb9ecc2acb544c24f0a7065a4e5f6ff6fefb46d81b07a7acbd1262da5d7f8748e59ca7dd0a5153a488d3207310a306bc3a5b1df275f193b47abc71ef054533c23b7f2b83f5230906cf2b34c2a2f7814ac559a7e291f6fcd73b74f4a25ecc8716f03072e32f5b2210e0a91b571927ab71192deb247872975e5c9b585ccbb2894ce34eefe74f51280053b725ccf27c3c55e8aa31113a7f156e2a376d88771ac85a4c2eef324be6cd0da6e59b85cc0c965a9712883", 0xc4}, {&(0x7f0000002480)="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", 0xff}], 0x6, &(0x7f0000002600)=ANY=[@ANYBLOB="200000000000000029000000370000003c0000000000000000010000000000001400000000000000290000000b00000000000081000000001400290000003e0000005ca5000000000000200000000000000029000000360000001d00000000000000c20452cb48f0000014000000000000002900000043000000ffffffff00000000"], 0x88}}, {{&(0x7f00000026c0)={0xa, 0x4e22, 0xfffffffd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x88b1}, 0x1c, &(0x7f0000003cc0)=[{&(0x7f0000002700)="e99b28a25177b7703dffbfe9cbecde79a32e06b7efa801a0141e634ab2d73aaaa830abf28496c9fcb50cf4ddd189473d2f2895472c51f097e9e72596ed2979d2dd2ff29c75f0a1c7913a8e8fc2cb2cf57377c1dac66ead9a94b7ace23d843c91982422cfbc8979547fea527000cae81dddac4e49605811ba82d16c663f1d8fd5dc10dea6dad5fd180f03dfc097a9786e32ea08f392e8426c296c2232a8d7cc030409686378e5cf529d9e697940a055ccaf373d5e1017f2c052c34883a6b650190d66d2e5b215afc6cdaf80f5", 0xcc}, {&(0x7f0000002800)="b7a9a010643e39346395a22612f143326b", 0x11}, {&(0x7f0000002840)="ccf08db2375dab57d8eed537d493a6dac7aaa520a062224ebd3e841fceb87fe8b05c83be86709657d7d5d0767787c0a5889f90f6c826f71c13eff7436b2088a781eb5514bd009dfb6e859ea36c5dd164e4dd30a933592b296377869a6fc3e7e8e8a03af1fa641f6f46f9", 0x6a}, {&(0x7f00000028c0)="be5ea4050ccd8c5d0aef078003c05bb069537c034bf347d79cc13bd4c944f0f592a2288754bb4172d2af6df6a557453da3bbdaff8b414ea4621a3e4d8fb5727ea28937a0848f9eafd845cbcad8596c6148a5fc4803cfc20e565ff462acea6580c02fe1fbdc5d7504378ceeb9e792addaed53c09cfc3c40f9b0e75d50d833052def83367678077f01c566e710315e1335a1acdea56987aaaecd88f8cd4e8854888708afd78696d5b622aecd896048cc1fc7cdcb2a48fbf3dcbab3d352ec4888f4ea2c", 0xc2}, {&(0x7f00000029c0)="10be8f541d46b974a7b061021f43b62835f2aaf0c5f34cc5558c377a1e51716ec4291d03c6e4df4f778ed26e9d095e7fd9d0de8ff3ab41b26acfc09e1783a2417e3a5fcea57840e909e1115de700f57dc43dca5dcad9d36de239ffdf6f0a6bac4c935cf6ff0cedac03ef98263d94ac1e1db8f67ec68c3f80ed947565390206507cd9378b87b12b76088850ad9526ac90255730ea67d48e95054fdfd80a7fc2b6b16a56c5024132e7", 0xa8}, {&(0x7f0000002a80)="a4e3ff9e8455b2f4ef8afcef83d0b08a863b9c21f50ef6c2cb1c4d9d6e6809e23dce29114c75208f05a4277eb9a9cd4620a99f708dacf3d41befbba1a41b8c5892ef6b27bd55e872548b270e2ab6157c57052cdc413bbc45a003367a083c61955bbd12529a57d68c3fd5127d45865e5901128382ef5c99874c17d7e58ff7c05d9ee5ea42ff21fb87c95b9ed3b4864c21794864b303a0793200deb0eac6d238873f87c7e025ff05aaf5267d4d11608169d1036fa086738c64c179ddc8cab04d5a8886f0f5c0c00994faf16e928c4f704c698a2172ddc7511222a72a03c51b5c585c4e21a34141763e57faceaa409ecb47af529b32791d836120f1e7d84ff1", 0xfe}, {&(0x7f0000002b80)="540ecab5fe89061801d60a77d7de0ea0cd6b5359c6c784a35d81a246c90d5445613b286343b258dd0969dd53e1e6ab6c746fae", 0x33}, {&(0x7f0000002bc0)="f8d4d16effd8260a16eb1cf1a33f50bb4a330f52678b0a9c4d8874eb4885325a20fe43440f", 0x25}, {&(0x7f0000002c00)="03cf18a2281882346c2cfe540fad0e69511892348b5919599cf326e644db58bcff05dfb8ed099a0b661044e5266ee37f48664dbd71d8d4d71e3596e4ff1b81a614ef4473adaff77c33e5d4309c324ec723b4df0b70f0e48f59c83be0f2f5c1c1848815b997d5781d7d29b5c5a21d57e8c878daf75fb9eade0c5adfd0bd0a1a22deea73e9a14baea5e105cee9dd6e95db", 0x90}, {&(0x7f0000002cc0)="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", 0x1000}], 0xa, &(0x7f0000003d80)=[@flowinfo={{0x14, 0x29, 0xb, 0x8}}, @dontfrag={{0x14, 0x29, 0x3e, 0x7}}, @rthdr={{0x88, 0x29, 0x39, {0x29, 0xe, 0x0, 0xf5, 0x0, [@private1, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, @ipv4={'\x00', '\xff\xff', @multicast1}, @ipv4={'\x00', '\xff\xff', @remote}, @dev={0xfe, 0x80, '\x00', 0x20}]}}}], 0xb8}}], 0x4, 0x10000081) 1.797821135s ago: executing program 3 (id=993): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r3 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82, 0x0, 0x0}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) write(0xffffffffffffffff, &(0x7f0000000040)=':', 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0xb, 0x4004, @fd, 0xf8, 0x0, 0x0, 0x11, 0x1}) io_uring_enter(r3, 0x1, 0x1, 0x1, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r9, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r10, 0xc040ff0b, 0xfffffffffffffffe) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000007c0)={0x0, 0xfffffe01}, &(0x7f0000000800)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000880)={r11, 0x2c, &(0x7f0000000840)=[@in6={0xa, 0x4e20, 0x6, @dev={0xfe, 0x80, '\x00', 0x28}, 0x3}, @in={0x2, 0x4e24, @loopback}]}, &(0x7f00000008c0)=0x10) fcntl$getownex(r8, 0x10, &(0x7f00000005c0)={0x0, 0x0}) syz_clone3(&(0x7f0000000640)={0x40080000, &(0x7f0000000000), &(0x7f0000000340), &(0x7f0000000380), {0xc}, &(0x7f00000003c0)=""/124, 0x7c, &(0x7f0000000440)=""/111, &(0x7f0000000600)=[r12, 0xffffffffffffffff, r0, r0], 0x4}, 0x58) mount(&(0x7f00000006c0)=@rnullb, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740)='sysv\x00', 0x81000, &(0x7f0000000780)='\x00') syz_emit_vhci(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.679847512s ago: executing program 2 (id=996): ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000000)={0x5, 0xe0, 0x401}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)="e0", 0x1, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)) add_key$user(&(0x7f00000000c0), &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000002c0)='(', 0x1, r1) timer_create(0x3, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r3 = socket(0x15, 0x5, 0x0) setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) recvmsg(r3, &(0x7f0000003780)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x2c, r5, 0x1, 0x8, 0xfffffffe, {0x1e}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000002a0012800b00010067656e65766500000c00028008001100ff"], 0x50}}, 0x8000) 1.621125531s ago: executing program 5 (id=997): r0 = memfd_create(&(0x7f0000000000)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\x1c\xe4\xd8\xb58\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\x00\b\x00\x00X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31\xb0\x87O\xc3\xa3AW\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]~\xfc1\xe5w\"\xa3\x8d\xe7\xd4x\xb3\xfa(\xc9\xc2bb\xb1\xa8\xe1\xc2\xec\xca\x7f\xe1\x1e\xb9\xd4\x80-6L\x91\x9b\xad\x85`\xf2+\xfbN+\x0e\xa6\xc4M\xda\xfc\xa1gZ)STB\xd1\xd1\xf1', 0x1) pwrite64(r0, &(0x7f0000000380)="2eb4413958e803fddea37c293d80b282e01fc5e2f7cb01f7c15ee931bb58578abb886ef11c229a686130fe4f6522dc78171aa4aab95de70c105aafadebf9533dae932d1b12f3316bd68436203198a40e594b46501e1e93aae0c2c53a3e938aad3242c6bad2847cd25f4d3bd81592fdbd6998bfd0c865e82e0a9704576ea1dec83fef71e4769a8f4a639e8eb35a1f9cb0b6dbb6f8531e121962e783669089e244b3f2f980fe2719ea64ed3ec9ef5c7b431f25f97826bb054ca98f5354a80edccd876d09da7e4859719f", 0xc9, 0x2) 1.616648722s ago: executing program 5 (id=998): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000080)={[{@discard}, {@orlov}, {@user_xattr}]}, 0x25, 0x4ae, &(0x7f0000000540)="$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") r0 = socket(0x40000000015, 0x805, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000380)) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-384-generic\x00'}, 0x58) quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0xee00, 0x0) 1.553852321s ago: executing program 5 (id=999): syz_usb_connect(0x6, 0x36, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/sockstat6\x00') r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000001500)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/65, 0x0, 0xeeef0000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000002980)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000740)=""/183, 0x0, 0x9000}) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 1.553506058s ago: executing program 2 (id=1000): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r2 = getpid() r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r2, r3, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r4 = syz_io_uring_setup(0x49, &(0x7f0000000300)={0x0, 0x22d0, 0x40, 0x0, 0x28d}, &(0x7f00000000c0), &(0x7f0000000040), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r4, 0xb, &(0x7f0000000100), 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x200}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "0e57b3d487e2db32", "a9df7ccffde8899f914d4f2c3e263509", "3c36a51c", "6775c975b6b15e11"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) writev(r1, &(0x7f0000000240)=[{&(0x7f00000005c0)="c800b66cf7e6a5", 0xff57}, {&(0x7f0000000140)="e2b5de1b04c03054271995b320812ed7ded5ec71d0c57c5f11366f435a79a10e509bdfc4425719a03d2647f06c09e0a6dfc63acef45296e824c5c25945387c1840340d7203c4bc7f6228a7b0388ba698f8e8bb15ee5762f41d1f8953e00ef286a2426181912541e43bb71a016fd7cffaccd2cf79da80b0c67a87e82dfa52ac31dac584f37ebe1a25c62d9b55b678598cf69428a806b8fc096bb97053e0099600d4bc78e717b612c96807e519cb7300"/188, 0xbc}, {&(0x7f0000000300)="1c7e6b9e688e6270cf440480946456f950e37af773e53874c663dd2a336df10d2d1187d48719ed7fd17ca09b6bdaa49710183eb991f93aef84adb0a2dad9bb05b690e65758d5c66e64d6fdd07ce5771e98a47f7756a093c6e8b0fbf8cb95f4f6df7f227ef95f7f5f56b2e239c2e17453daf057527e74136084dba4b9572f8e4f383e8bc24757e5b7c0f1c45fcf0308bc40cb43c41a47e18b7b4bc100a4ebe7d2bfd31fc526da97e4b202fe79ddce36ec2f00627d3b86c3fa66bcbf6ec036aef16e0c4f39b441abda436dd5e85adfdd0720a51c91106b737750335c2697", 0xdd}], 0x3) readv(r1, &(0x7f00000006c0)=[{&(0x7f0000001980)=""/4089, 0xff1}], 0x59) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0xa0}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0xb4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x400}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xb4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xc, 0x16, &(0x7f0000000080)=ANY=[@ANYRESOCT=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x4, 0x5a, 0xf7, 0x1, 0x4, @mcast1, @loopback, 0x10, 0x7f01, 0x75, 0x5}}) 1.531473771s ago: executing program 2 (id=1003): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"/3002], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x3f) syz_read_part_table(0x1092, &(0x7f00000010c0)="$eJzs0D9KxEAUB+A3kZndgKJs4Tm8gXsCLyQigqWtva2H8ATewitY2AhPJps1ayuCzfcVySR5f34k+FdX12c17qNk5u38qq2Xz2W+5+nPtho1xt3xqUU/zk+XmTl+l2XmW59yt54KLo53lZkt+pKcN5RtRG29YTW1bWL1kTdtmROf/fL8ENHKEGWIejQl3acsEQehH18i3oclfIvxMPv2/OR1s8/3u78GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH/rKwAA//9dgRyx") bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x7a, &(0x7f0000002f40)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @gre_packet={0x8, 0x6, "6f52c3", 0x44, 0x2f, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0xfe}, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x4}, {0x0, 0x0, 0x1}, {}, {0x8, 0x88be, 0x1, {{0x9, 0x1, 0xcf, 0x2, 0x0, 0x1, 0x4, 0x6}, 0x1, {0x400}}}, {0x8, 0x22eb, 0x1, {{0xd, 0x2, 0x9, 0x2, 0x0, 0x0, 0x1, 0x6}, 0x2, {0x41, 0x800, 0x0, 0x2, 0x0, 0x0, 0x3, 0x0, 0x1}}}}}}}}}, 0x0) 1.433516195s ago: executing program 1 (id=1004): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDGETKEYCODE(r0, 0x4b4c, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c643c, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=r4, 0x1c) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000100)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f0000000140)={r5}) keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, 0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000006640)='/proc/bus/input/devices\x00', 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r3, 0x8010}, {r6, 0x40b}, {r4, 0x8003}, {r2, 0x2080}, {r3, 0x6202}, {r3, 0x713}, {r3, 0x8}], 0x7, &(0x7f0000000040)={0x0, 0x3938700}, 0x0, 0x0) ioctl$NBD_SET_SIZE(r6, 0xab02, 0x1) connect$inet(r3, &(0x7f0000000000)={0x2, 0xe22, @multicast1}, 0x10) r7 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r8, 0x10e, 0x4, 0x0, &(0x7f00000001c0)) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(r7, 0xe, &(0x7f00000000c0)={0x8, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) 1.413701469s ago: executing program 2 (id=1005): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) (async) r1 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001640)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfc, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x5}}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc5}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 1.205724909s ago: executing program 1 (id=1008): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@private1, @multicast1, 0x1e, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@rand_addr=' \x01\x00', @local, 0x7, 0x8}}) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$SIOCX25CALLACCPTAPPRV(r1, 0x89e8) r2 = syz_open_dev$dri(&(0x7f0000000100), 0xa, 0x102) setsockopt$MRT_PIM(r1, 0x0, 0xcf, &(0x7f0000000140)=0x1, 0x4) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000180)=0x190, &(0x7f00000001c0)=0x2) r3 = syz_io_uring_setup(0x3794, &(0x7f0000000200)={0x0, 0x1f53, 0x8000, 0x1, 0xd6, 0x0, r1}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000340)={0x0, 0x6, 0x1, [0x0, 0x9, 0x10000, 0x8, 0xf0fd], [0xfffffffffffffffa, 0x8, 0x4, 0x10, 0x5, 0x10001, 0x80000001, 0x6000000, 0xbc0, 0x6, 0xc5e, 0x4, 0xb42, 0x800, 0x5, 0x1, 0x6346, 0x7ff, 0x7757c2bd, 0x3e4a, 0x8000, 0xffff, 0x3, 0x9c2, 0x6, 0x0, 0x7, 0x9, 0x9, 0xfbb2, 0x27, 0x3, 0xcd3a, 0x0, 0x401, 0x3, 0x7, 0x5, 0x5, 0x7, 0xdcf, 0x3, 0x9, 0x5, 0x8, 0x2, 0x5, 0x2, 0x10001, 0x34d, 0x8, 0x7, 0x0, 0x100000001, 0xf, 0xca2, 0x2, 0x10, 0x2, 0xc450, 0xd, 0x0, 0x10001, 0x9, 0x8001, 0x10001, 0x7, 0x7, 0x0, 0x0, 0xb, 0x1712ab4, 0x1, 0x0, 0x8, 0x7fff, 0xffffffffffffffff, 0x6, 0x96, 0x1, 0x8, 0x6, 0x1, 0x9, 0x10000, 0x1, 0xff, 0x6f, 0x38bb, 0x9, 0x80000000, 0x4, 0x3, 0x2, 0xffffffffffffffff, 0x2, 0x8d8, 0x0, 0x1000000000000000, 0x5, 0x7, 0x2c0e, 0xb, 0x1, 0x6, 0x3, 0x5, 0x5, 0x9, 0x9, 0x3, 0x3, 0x401, 0x5, 0x6, 0x16d9, 0x6, 0x5, 0x7, 0x0, 0xffffffffa84f82fc]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000000780)={{r1}, 0x0, 0x10, @unused=[0x4, 0xb3, 0x3, 0x6], @devid=r4}) r5 = socket(0x18, 0x5, 0xffff) ioctl$KDFONTOP_COPY(r2, 0x4b72, &(0x7f0000001b80)={0x3, 0x0, 0x4, 0x3, 0x125, &(0x7f0000001780)}) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000001bc0)={'security\x00', 0x3, [{}, {}, {}]}, 0x58) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000001c80), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000001cc0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f0000001dc0)={&(0x7f0000001c40), 0xc, &(0x7f0000001d80)={&(0x7f0000001d00)={0x44, r6, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffffff8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008085}, 0x2800) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001e00)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = syz_mount_image$fuse(&(0x7f0000001e40), &(0x7f0000001e80)='./file0\x00', 0x20000, &(0x7f0000001ec0)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@default_permissions}], [{@fsname={'fsname', 0x3d, '/proc/asound/timers\x00'}}, {@obj_type={'obj_type', 0x3d, '\x00'}}, {@appraise}, {@subj_user={'subj_user', 0x3d, '##-'}}]}}, 0x0, 0x0, &(0x7f0000001fc0)="b0710e2307b3d7f4defbebc3877219ef516ddabe65ed3ee97623ff8fb42bc9b06687a194e89f052c7601be8d369fb298d0a2f992139ed0333bb922650c0f32e8") mkdirat(r9, &(0x7f0000002000)='./file0\x00', 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000002040)={0x6, {0x1b, 0x1000, 0x0, 0xb, 0x9}}) r10 = socket$nl_generic(0x10, 0x3, 0x10) write$P9_RXATTRWALK(r1, &(0x7f0000002080)={0xf, 0x1f, 0x2, 0x5}, 0xf) accept$inet6(r10, &(0x7f00000020c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000002100)=0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000002140)='./file0\x00', 0x50000, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002180)={@ifindex=r7, r1, 0x2d, 0x8, 0x0, @void, @value=r8}, 0x20) ioctl$VIDIOC_DQEVENT(r1, 0x80885659, &(0x7f00000021c0)={0x0, @motion_det}) mount$9p_fd(0x0, &(0x7f0000002280)='./file0\x00', &(0x7f00000022c0), 0x2008400, &(0x7f0000002380)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {}, 0x2c, {[{@access_any}, {@mmap}, {@cache_readahead}], [{@uid_eq}]}}) 1.205225583s ago: executing program 4 (id=1009): r0 = memfd_create(&(0x7f0000000000)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\x1c\xe4\xd8\xb58\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\x00\b\x00\x00X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31\xb0\x87O\xc3\xa3AW\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]~\xfc1\xe5w\"\xa3\x8d\xe7\xd4x\xb3\xfa(\xc9\xc2bb\xb1\xa8\xe1\xc2\xec\xca\x7f\xe1\x1e\xb9\xd4\x80-6L\x91\x9b\xad\x85`\xf2+\xfbN+\x0e\xa6\xc4M\xda\xfc\xa1gZ)STB\xd1\xd1\xf1', 0x1) pwrite64(r0, &(0x7f0000000380)="2eb4413958e803fddea37c293d80b282e01fc5e2f7cb01f7c15ee931bb58578abb886ef11c229a686130fe4f6522dc78171aa4aab95de70c105aafadebf9533dae932d1b12f3316bd68436203198a40e594b46501e1e93aae0c2c53a3e938aad3242c6bad2847cd25f4d3bd81592fdbd6998bfd0c865e82e0a9704576ea1dec83fef71e4769a8f4a639e8eb35a1f9cb0b6dbb6f8531e121962e783669089e244b3f2f980fe2719ea64ed3ec9ef5c7b431f25f97826bb054ca98f5354a80edccd876d09da7e4859719fb6c97bdb34cf60003bc75f599708", 0xd7, 0x2) 1.190246254s ago: executing program 4 (id=1010): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0xd031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = fsopen(&(0x7f0000000100)='efivarfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f00000000c0)) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x64) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x80) getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@grpid}]}, 0x1, 0x521, &(0x7f0000000640)="$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") 1.184034056s ago: executing program 1 (id=1011): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000480)={[{@nonumtail}, {@uni_xlateno}, {@uni_xlateno}, {@fat=@discard}, {@uni_xlateno}, {@fat=@check_normal}, {@utf8no}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}, {@uni_xlateno}, {@fat=@dos1xfloppy}, {@rodir}]}, 0x0, 0x29f, &(0x7f0000000840)="$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") r1 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) getrusage(0x1, &(0x7f0000000780)) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) syz_emit_ethernet(0x0, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r3 = userfaultfd(0x80001) r4 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r4, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x608}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_io_uring_setup(0xf01, &(0x7f0000000580)={0x0, 0x595f, 0x40, 0x5, 0x51, 0x0, r0}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0, &(0x7f00000003c0)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r6, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) read$FUSE(r1, &(0x7f0000002c00)={0x2020}, 0x2020) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8b0f, &(0x7f0000000280)={'wlan1\x00', @random="26e9b23d7d00"}) 884.961627ms ago: executing program 3 (id=1012): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4002, &(0x7f0000000180), 0x1, 0xbdd, &(0x7f0000001140)="$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") socket$l2tp6(0xa, 0x2, 0x73) socket$l2tp6(0xa, 0x2, 0x73) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xb41, 0x8) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x13}, @hci_ev_le_conn_complete={{}, {0x0, 0x2a, 0x8, 0x0, @any, 0x0, 0x0, 0x9}}}}, 0x16) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) socket$inet6(0xa, 0x6, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="022a000a0006000500150102000000"], 0xf) socket$nl_route(0x10, 0x3, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0xd, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000feffffff00000000feffffff180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008001000b70300000400000085000000ba00000095"], &(0x7f0000000300)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdffffffa}, 0x94) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x5, 0x5d6, [0x20000280, 0x0, 0x0, 0x2000038e, 0x200005ea], 0x0, &(0x7f0000000000), &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000000500000010000000892f76657468315f746f5f626f6e6400000076657468305f746f5f62726964676500776732000000000000000000000000007866726d300000000000000001000000aaaaaaaaaabbffff00ff0000aaaaaaaaaabb0000800000006e000000a6000000de0000006172707265706c790000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaabb0000fdffffff00000000736e61740000000000000000000000000000000000000000000000000000000010000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff02000000090000004000000088a870696d72656700000000000000000000726f736530000000000000000000000076657468305f746f5f62617461647600776c616e300000000000000000000000aaaaaaaaaa35ff00ff000000aaaaaaaaaa32ffff00ffffffe6000000160100004e0100006367726f757000000000000000000000000000000000000000000000000000000800000000000000252200000100000069700000000000000000000000000000000000000000000000000000000000002000000000000000ac14142f00000000000000ff000000ff0829181c4e244e214e234e21000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000006172707265706c7900000000000000000000000000000000000000000000000010000000000000000180c200000e0000feffffff00000000030000001000000000156d6163766c616e31000000000000000067656e65766530000000000000000000626f6e643000000000000000000000006e657470636930000000000000000000ffffffffffffffff00ff0000aaaaaaaaaa0d00ffffff00ff6e000000a6000000de000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000bbbbbbbbbbbb0000feffffff00000000736e61740000000000000000000000000000000000000000000000000000000010000000000000000000000000000000fdffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000003000000fcffffff02000000060000004400000000f76970766c616e310000000000000000006e723000000000000000000000000000677265300000000000000000000000006e696376663000000000000000000000aaaaaaaaaabb00ffff00ff00bbbbbbbbbbbbff0000ffffffbe000000be0000000601000069707673000000000000000000000000000000000000000000000000000000002800000000000000e0000002000000000000000000000000ff000000ffffff0000000000ffffffff4e2389044e230a024552524f520000000000000000000000000000000000000000000000000000002000000000000000cbd5a3ea34e59fcc1b9556733bfe5bcfa8543f6426e12eaf65f44e30813100000300000011000000886476657468305f746f5f6873720000000064766d72703100000000000000000000766972745f77696669300000000000007465616d5f736c6176655f3000000000bbbbbbbbbbbbff00ffffff00aaaaaaaaaaaa00ffff000000ae000000e600000036010000636f6e6e6279746573000000000000000000000000000000000000000000000018000000000000000800000000000000000000000000000001020000000000006172707265706c790000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaabb0000feffffff000000006c6f670000000000000000000000000000000000000000000000000000000000280000000000000003432de83b6c9eec39423771ce0a6366744543a72055a2e6f18f2d11e973d3000700000000000000"]}, 0x64e) clock_nanosleep(0x1, 0x1, &(0x7f00000000c0)={0x77359400}, &(0x7f00000001c0)) 814.133042ms ago: executing program 4 (id=1013): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x3}, 0x94) r1 = socket$igmp(0x2, 0x3, 0x2) flistxattr(r1, &(0x7f0000000080)=""/75, 0x4b) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xc3, &(0x7f0000000340)=[{&(0x7f0000000280)="2e00000010008188040f80ec59acbc0413a1f848130000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x40044) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x3}, 0x94) (async) socket$igmp(0x2, 0x3, 0x2) (async) flistxattr(r1, &(0x7f0000000080)=""/75, 0x4b) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xc3, &(0x7f0000000340)=[{&(0x7f0000000280)="2e00000010008188040f80ec59acbc0413a1f848130000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x40044) (async) 769.772167ms ago: executing program 4 (id=1014): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = memfd_create(&(0x7f00000002c0)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b\xeeC0\xa3\xa6\xcf\x00\x00\xac\xc5h&+\t\x98\'\xfd|\x11\x99\xa2*6{\xd2C>2\x0e\"\xbc\xda\xee\xb0\xd8\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xcb\x9b\xbdn\x8e\x98m\x10L\xec\xfdWF\x7fj\x19\xb8<\xd2\x9d\xf0\xe9Qy\xe32\xed\x16f\xfe&\x1a\xdb\xeb\xad\xaaE\b\xa9\xf8\xa9s\xc4d\xd4\x03\xf1\xb7xO\x99\x804m[Ai\x13\x02\xf0\x84c2s\xd5P\t`\x9b\x12&\x8cx\x8eg\x9d\xe6g', 0x0) ftruncate(r3, 0x80079a0) splice(r3, 0x0, r2, 0x0, 0x100002, 0x9) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r4, 0x4000001, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000280)={@my=0x1}) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f0000000140)={@my=0x1}) 652.503694ms ago: executing program 4 (id=1015): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d00)=ANY=[@ANYBLOB="340000001000000100000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0b00000018100200140012800b00010067656e657665000004000280"], 0x34}}, 0x80) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d00)=ANY=[@ANYBLOB="340000001000000100000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0b00000018100200140012800b00010067656e657665000004000280"], 0x34}}, 0x80) (async) 651.903014ms ago: executing program 4 (id=1016): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_ublk_setup_io_uring(0x5b20, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) syz_ublk_setup_queues(r7, r5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x257}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x20, 0x1000000, 0x4, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8, 0x0, 0x146, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x8c, 0x2, 0x0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2, 0x1, 0x9d7c}}], 0x1, &(0x7f0000001000)={0x2e, 0x4c, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r4, '\x00', {0xffff, 0x5, 0x0, 0x0}}, 0x0) 515.948993ms ago: executing program 2 (id=1017): r0 = memfd_create(&(0x7f0000000000)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\x1c\xe4\xd8\xb58\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\x00\b\x00\x00X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31\xb0\x87O\xc3\xa3AW\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]~\xfc1\xe5w\"\xa3\x8d\xe7\xd4x\xb3\xfa(\xc9\xc2bb\xb1\xa8\xe1\xc2\xec\xca\x7f\xe1\x1e\xb9\xd4\x80-6L\x91\x9b\xad\x85`\xf2+\xfbN+\x0e\xa6\xc4M\xda\xfc\xa1gZ)STB\xd1\xd1\xf1', 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwrite64(r0, &(0x7f0000000380)="2eb4413958e803fddea37c293d80b282e01fc5e2f7cb01f7c15ee931bb58578abb886ef11c229a686130fe4f6522dc78171aa4aab95de70c105aafadebf9533dae932d1b12f3316bd68436203198a40e594b46501e1e93aae0c2c53a3e938aad3242c6bad2847cd25f4d3bd81592fdbd6998bfd0c865e82e0a9704576ea1dec83fef71e4769a8f4a639e8eb35a1f9cb0b6dbb6f8531e121962e783669089e244b3f2f980fe2719ea64ed3ec9", 0xac, 0x2) 515.024379ms ago: executing program 2 (id=1018): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80940, 0xd2) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20503, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='yeah', 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) faccessat2(r0, &(0x7f0000000000)='./file1\x00', 0x70, 0x1000) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) shutdown(r3, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000004500), 0x800, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 25.828261ms ago: executing program 3 (id=1019): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x7, 0x30}, 0xc) sendto$inet(r0, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) sendmmsg(r0, &(0x7f0000001540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001580)='(', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001180)="cb", 0x1}], 0x1}}], 0x2, 0x40800) sendmmsg(r0, &(0x7f0000007dc0)=[{{0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000005c0)="a7", 0x1}], 0x1}}], 0x1, 0x4054) sendto$inet(r0, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) r1 = socket$kcm(0x10, 0x0, 0x4) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x80) sendmsg$kcm(r1, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000000000)="4613b5e57f748a59f82f112d53f50777a7e9a01f45c014c8", 0x18}, {&(0x7f0000000200)="53b437a59d6d7f617f9b78700feb4375d8a45c3aa2e9b2ba3395ccdea6bbeb67b6c7801e8b975eae02d4481ed51151e4027d8ce8a73f90c61816211903a10511246c6013c2131cc88c1c9467db440e450ac88b456799e766fbec367e45a388c44125a97dc4c4064359bf7f7b6ecb64601703b0104bec97cd968218ef1c6dc28c990ae56120621037a7674e7935ff141295d8cc8121032eac81e37ec015dcc7150d19153fad2c8a23eb1b363068daa52df81575783b4cac00877125b0d1c03de6a101729ea4de8ea3cc64517bcb650d3c194a234e5ae4bcb40a9ad107abbc90dd975aefb0ed8aac", 0xe7}, {&(0x7f00000003c0)="deddfb36490f0d3e84fe88077d2460cd1de383870380b23da75a6b3169253d2278694614e2b0ff43b23a296f228a2152ec08d2628e0c34d0de5cad63e0c6536cbc6cdaa0ddb8e5d0cbae97935cbf2cb85c042be65d52", 0x56}, {&(0x7f00000015c0)="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", 0x1000}, {&(0x7f00000025c0)="276118f2c74bb2305dc9b5a8c6547f409758d2ed31d55a58f94941c597c1fecc15e9a6672bfd734b123bea0cf32294364c56ae47d6a06cf0d6813ed887c7bf4ebae2f61d149533bd92962930a406a8305848184764d2a0668dcc20a39ff7ce60d2a554cc50b914fefbfaee11bc60adb701ed7dc3db78255e4db063ce23b2efdc548a22fa58d9c573528551c889fbb6857ba7b56577b4d82083b2dc7ccefed77871470d1791fd789ae0c3311cbd2cf4ae7061bca67a8da8fd32f4fa0f826ccde1", 0xc0}, {&(0x7f0000002680)="f210a5fedc061b1bb70284a03df3877e46fc273e6a6307aa5bff16d1f3ded9a08232874d02b2df1afc14006ed54eebfe49630fe09b719b0681fbb2d48e92f8cac88571fb943f125709c7de63b7c1dea42cda7344949ed72572431e0d9ae46d4d218d1181ca7a98124c9fb6584f5e89e7dc51fac944878c9a72379a1a1b6fce872b57eaef55aec2ab6a5ae7b60563a8c102adb5358924edf250dbf81205068c3933e0c8cd2626c81e772b5ad57436604d8b105ecf31b4b4bd99ff4e99f8b092b58341661852c547b40212a578933d896ded660e735a1a61b92855b118bed33f0d44d0bcfd8f3af64267115455d23d9673aafd792c4d7e8e7a2a182973e462ea", 0xff}, {&(0x7f0000002780)="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", 0xfc}, {&(0x7f0000002880)="64127828476c9f378bc6e074d1dfad6f2022bc97abc178cdb780ded0eac02ab780be1ea2d80083f0c46576b466c5681067beaac0dd1cafe2929663857566aee96a5411d61c5d7273bdbcb9f4a6e026fb5aa8cbe46887a1d750f66ebfa475d9455ef362d20fb39a012874373fb7fe07716883391553d30849f820a37ef5e0eae764b101a94413eea9bc2a84a7d8b14b7e2e92bfc67fdf332bd29aa8fa8dcb563ec76c9a1c8b235a472596cd6abd0ba976fc92f48469784dd8d8b2f51d16aafa087b8a069a", 0xc4}], 0x8, &(0x7f0000002a00)}, 0x20000040) 0s ago: executing program 3 (id=1020): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x14, 0x32, 0x300, 0x70bd25, 0x25dfdbff}, 0x14}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0xd}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x2000}]}}]}, 0x3c}}, 0x20004055) socket(0x18, 0x80000, 0x1) socket$inet6(0xa, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) r0 = epoll_create1(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r1], 0x54}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000b40)={[{@data_err_ignore}, {@dioread_nolock}, {@nodelalloc}, {@nouid32}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x3a}}, {@dioread_lock}]}, 0x1, 0x47a, &(0x7f00000006c0)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/i2c-dev/i2c-0/device/new_device\x00', 0x1, 0x0) write(r3, &(0x7f0000000600)='anx7411 0x2c\x00', 0xd) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, &(0x7f0000000040), &(0x7f0000000140)=0x30) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): upper inode bits. [ 35.755871][ T5060] netlink: 8 bytes leftover after parsing attributes in process `syz.3.48'. [ 35.770855][ T4734] udevd[4734]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 35.804597][ T4704] udevd[4704]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 35.939221][ T5090] loop3: detected capacity change from 0 to 256 [ 35.939616][ T5090] vfat: Bad value for 'uid' [ 35.939624][ T5090] vfat: Bad value for 'uid' [ 36.746623][ T5097] loop1: detected capacity change from 0 to 1024 [ 36.748260][ T5097] EXT4-fs: Ignoring removed bh option [ 36.749428][ T5097] EXT4-fs: inline encryption not supported [ 36.779169][ T5097] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 36.809456][ T5097] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 2: comm syz.1.57: lblock 2 mapped to illegal pblock 2 (length 1) [ 36.809538][ T5097] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 36.812812][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 36.812826][ C0] EXT4-fs (loop1): initial error at time 36: ext4_map_blocks:791: inode 3: block 2 [ 36.812845][ C0] EXT4-fs (loop1): last error at time 36: ext4_map_blocks:791: inode 3: block 2 [ 36.820648][ T5097] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 36.820693][ T5097] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 48: comm syz.1.57: lblock 0 mapped to illegal pblock 48 (length 1) [ 36.820738][ T5097] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 36.825627][ T5097] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 36.825660][ T5097] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.57: Failed to acquire dquot type 0 [ 36.825727][ T5097] loop1: lost filesystem error report for type 5 error -117 [ 36.832035][ T5097] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 36.832063][ T5097] loop1: lost filesystem error report for type 5 error -117 [ 36.840981][ T5097] EXT4-fs error (device loop1): ext4_evict_inode:267: inode #11: comm syz.1.57: mark_inode_dirty error [ 36.841031][ T5097] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 36.848685][ T5097] EXT4-fs warning (device loop1): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 36.848817][ T5097] EXT4-fs (loop1): 1 orphan inode deleted [ 36.863397][ T5097] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.889603][ T5097] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #2: block 16: comm syz.1.57: lblock 0 mapped to illegal pblock 16 (length 1) [ 36.895816][ T12] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 36.910168][ T12] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 36.910205][ T12] EXT4-fs error (device loop1): ext4_release_dquot:7077: comm kworker/u8:0: Failed to release dquot type 0 [ 36.930048][ T4714] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.959491][ T40] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 2: comm kworker/u8:3: lblock 2 mapped to illegal pblock 2 (length 1) [ 36.964990][ T40] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 36.965021][ T40] EXT4-fs error (device loop1): ext4_write_dquot:7021: comm kworker/u8:3: Failed to commit dquot type 0 [ 36.969221][ T40] Quota error (device loop1): dquot_write_dquot: Can't write quota structure (error -117). Quota may get out of sync! [ 36.978291][ T5105] netlink: 24 bytes leftover after parsing attributes in process `syz.3.61'. [ 37.067796][ T4713] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.067887][ T4713] EXT4-fs error (device loop1): __ext4_get_inode_loc:4886: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 37.067918][ T4713] loop1: lost filesystem error report for type 5 error -117 [ 37.072509][ T4713] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 37.072547][ T4713] loop1: lost filesystem error report for type 5 error -117 [ 37.076530][ T4713] EXT4-fs error (device loop1): ext4_quota_off:7325: inode #3: comm syz-executor: mark_inode_dirty error [ 37.092114][ T5119] binder: 5118 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 37.092146][ T5119] binder: 5118:5119 ioctl c018620c 200000c0 returned -22 [ 37.093516][ T4713] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 37.124603][ T5126] bond1: option mode: invalid value (234) [ 37.161055][ T4718] Bluetooth: hci3: command tx timeout [ 37.161089][ T4718] Bluetooth: hci1: command tx timeout [ 37.169503][ T5126] bond1 (unregistering): Released all slaves [ 37.196943][ T5136] loop0: detected capacity change from 0 to 256 [ 37.197335][ T5136] vfat: Bad value for 'uid' [ 37.197350][ T5136] vfat: Bad value for 'uid' [ 37.322921][ T4716] Bluetooth: hci4: command tx timeout [ 37.323032][ T4718] Bluetooth: hci0: command tx timeout [ 37.323122][ T4721] Bluetooth: hci2: command tx timeout [ 37.513331][ T5143] loop0: detected capacity change from 0 to 256 [ 37.557368][ T5148] overlayfs: missing 'lowerdir' [ 37.760725][ T5176] loop0: detected capacity change from 0 to 256 [ 37.761099][ T5176] vfat: Bad value for 'uid' [ 37.761108][ T5176] vfat: Bad value for 'uid' [ 38.521273][ T5173] mmap: syz.1.80 (5173): VmData 37625856 exceed data ulimit 10. Update limits or use boot option ignore_rlimit_data. [ 38.629962][ T5183] overlayfs: missing 'lowerdir' [ 39.126480][ T5181] netlink: 104 bytes leftover after parsing attributes in process `syz.0.84'. [ 39.357791][ T5192] cgroup: fork rejected by pids controller in /syz4 [ 39.692555][ T5253] loop3: detected capacity change from 0 to 256 [ 39.693472][ T5253] vfat: Bad value for 'uid' [ 39.693488][ T5253] vfat: Bad value for 'uid' [ 39.709306][ T5255] overlayfs: missing 'lowerdir' [ 40.691887][ T5270] loop4: detected capacity change from 0 to 256 [ 40.696615][ T5269] netlink: 12 bytes leftover after parsing attributes in process `syz.1.101'. [ 40.697298][ T5270] vfat: Unknown parameter 'utfal' [ 40.710173][ T5269] binder: 5267:5269 context manager tried to acquire desc 0 [ 40.711938][ T5269] binder: 5267:5269 ioctl c0306201 200004c0 returned -22 [ 40.717065][ T5269] binder: 5267:5269 got reply transaction with no transaction stack [ 40.717135][ T5269] binder: 5267:5269 transaction reply to 0:0 failed 4/29201/-71, code 0 size 104-24 line 3155 [ 40.726142][ T10] binder: undelivered TRANSACTION_ERROR: 29201 [ 40.756266][ T5276] loop2: detected capacity change from 0 to 1024 [ 40.756586][ T5276] EXT4-fs: Ignoring removed nomblk_io_submit option [ 40.762867][ T5276] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 40.769266][ T5276] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e054c018, mo2=0002] [ 40.769310][ T5276] System zones: 0-1, 3-36 [ 40.782843][ T5276] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.819241][ T4714] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.844970][ T5284] loop0: detected capacity change from 0 to 512 [ 40.858476][ T5284] EXT4-fs: Ignoring removed i_version option [ 40.866534][ T5284] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 40.885764][ T5290] loop3: detected capacity change from 0 to 256 [ 40.886132][ T5290] vfat: Bad value for 'uid' [ 40.886140][ T5290] vfat: Bad value for 'uid' [ 40.953385][ T5292] netlink: 'syz.1.109': attribute type 10 has an invalid length. [ 41.066830][ T5303] loop0: detected capacity change from 0 to 512 [ 41.070048][ T5303] EXT4-fs: Conflicting test_dummy_encryption options [ 41.289240][ T5292] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 41.295067][ T5292] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 41.334804][ T5310] overlayfs: missing 'lowerdir' [ 41.369105][ T5317] loop2: detected capacity change from 0 to 512 [ 41.384838][ T5317] fuse: fd is not a fuse device [ 41.404287][ T5319] ip_tables: iptables: counters copy to user failed while replacing table [ 41.482228][ T5317] loop2: detected capacity change from 0 to 512 [ 41.485007][ T5317] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 41.485037][ T5317] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 41.485064][ T5317] EXT4-fs (loop2): bad geometry: first data block 2147483649 is beyond end of filesystem (256) [ 41.573538][ T5329] netlink: 'syz.2.118': attribute type 31 has an invalid length. [ 41.630152][ T5332] loop2: detected capacity change from 0 to 8192 [ 41.738721][ T5343] capability: warning: `syz.0.123' uses deprecated v2 capabilities in a way that may be insecure [ 41.740404][ T5338] loop1: detected capacity change from 0 to 512 [ 41.745444][ T5338] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 41.753428][ T5338] EXT4-fs (loop1): 1 truncate cleaned up [ 41.759284][ T5338] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.789773][ T5349] overlayfs: missing 'lowerdir' [ 41.845793][ T5355] loop3: detected capacity change from 0 to 256 [ 41.878932][ T5360] Invalid source name [ 41.888911][ T4713] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.016257][ T5379] overlayfs: missing 'lowerdir' [ 42.030917][ T5382] netlink: 20 bytes leftover after parsing attributes in process `syz.0.138'. [ 42.030949][ T5382] netlink: 20 bytes leftover after parsing attributes in process `syz.0.138'. [ 42.050437][ T5386] loop3: detected capacity change from 0 to 2048 [ 42.067243][ T5386] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.152091][ T5395] syz.1.141 uses obsolete (PF_INET,SOCK_PACKET) [ 42.176591][ T5398] loop2: detected capacity change from 0 to 256 [ 42.610721][ T5423] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 42.610763][ T5423] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 42.895073][ T5481] sctp: [Deprecated]: syz.4.155 (pid 5481) Use of struct sctp_assoc_value in delayed_ack socket option. [ 42.895073][ T5481] Use struct sctp_sack_info instead [ 42.898891][ T5481] sctp: [Deprecated]: syz.4.155 (pid 5481) Use of struct sctp_assoc_value in delayed_ack socket option. [ 42.898891][ T5481] Use struct sctp_sack_info instead [ 42.967923][ T5454] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 42.968359][ T5454] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 42.968377][ T5454] EXT4-fs (loop3): This should not happen!! Data will be lost [ 42.968377][ T5454] [ 42.968385][ T5454] EXT4-fs (loop3): Total free blocks count 0 [ 42.968392][ T5454] EXT4-fs (loop3): Free/Dirty block details [ 42.968402][ T5454] EXT4-fs (loop3): free_blocks=4096 [ 42.968412][ T5454] EXT4-fs (loop3): dirty_blocks=32 [ 42.968418][ T5454] EXT4-fs (loop3): Block reservation details [ 42.968423][ T5454] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 42.969219][ T5454] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 42.969991][ T4712] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 42.990797][ T5487] loop1: detected capacity change from 0 to 512 [ 42.996333][ T5487] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 42.999833][ T5490] syzkaller1: entered promiscuous mode [ 42.999861][ T5490] syzkaller1: entered allmulticast mode [ 43.023459][ T5487] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.060330][ T4713] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.160370][ T5506] loop3: detected capacity change from 0 to 1024 [ 43.180037][ T5506] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 43.255752][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 43.266716][ T5490] netlink: 20 bytes leftover after parsing attributes in process `syz.0.156'. [ 43.647180][ T5528] netlink: 14 bytes leftover after parsing attributes in process `syz.2.169'. [ 43.648242][ T5529] netlink: 14 bytes leftover after parsing attributes in process `syz.2.169'. [ 43.668731][ T5528] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 43.688455][ T5528] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 43.977514][ T5528] bond0 (unregistering): Released all slaves [ 44.117218][ T5552] tipc: Started in network mode [ 44.120044][ T5552] tipc: Node identity 1000001, cluster identity 4369 [ 44.121598][ T5552] tipc: Node number set to 16777217 [ 44.124768][ T5552] tipc: Cannot configure node identity twice [ 44.131003][ T5559] EXT4-fs: Ignoring removed nobh option [ 44.161313][ T5559] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 44.168388][ T5556] EXT4-fs: inline encryption not supported [ 44.178269][ T5556] EXT4-fs (loop1): Test dummy encryption mode enabled [ 44.178304][ T5556] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 44.188118][ T5552] tipc: New replicast peer: 127.0.0.1 [ 44.188994][ T5552] tipc: Enabled bearer , priority 10 [ 44.372188][ T4723] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 44.501902][ T5596] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.525037][ T5596] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #2: comm syz.1.180: corrupted inode contents [ 44.533067][ T5596] EXT4-fs error (device loop1): ext4_dirty_inode:6639: inode #2: comm syz.1.180: mark_inode_dirty error [ 44.534051][ T5596] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #2: comm syz.1.180: corrupted inode contents [ 44.534230][ T5596] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.180: mark_inode_dirty error [ 44.585019][ T5604] netlink: 4 bytes leftover after parsing attributes in process `syz.2.182'. [ 44.585056][ T5604] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 44.597209][ T4713] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.599019][ T5609] EXT4-fs: Ignoring removed bh option [ 44.611908][ T5609] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 44.619418][ T5609] EXT4-fs (loop3): 1 truncate cleaned up [ 44.619913][ T5609] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.980481][ T5634] netlink: 8 bytes leftover after parsing attributes in process `syz.3.183'. [ 44.991357][ T5620] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.183: bg 0: block 465: padding at end of block bitmap is not set [ 44.994600][ T5620] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 44.997374][ T5620] EXT4-fs (loop3): This should not happen!! Data will be lost [ 44.997374][ T5620] [ 45.018528][ T5637] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 45.440034][ T5459] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 45.440070][ T5459] EXT4-fs (loop3): This should not happen!! Data will be lost [ 45.440070][ T5459] [ 45.440080][ T5459] EXT4-fs (loop3): Total free blocks count 0 [ 45.440089][ T5459] EXT4-fs (loop3): Free/Dirty block details [ 45.440098][ T5459] EXT4-fs (loop3): free_blocks=0 [ 45.440107][ T5459] EXT4-fs (loop3): dirty_blocks=64 [ 45.440114][ T5459] EXT4-fs (loop3): Block reservation details [ 45.444425][ T4712] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 45.946121][ T5661] loop0: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p225 p22 [ 45.994978][ T5671] netlink: 32 bytes leftover after parsing attributes in process `syz.3.194'. [ 45.995015][ T5671] netlink: 12 bytes leftover after parsing attributes in process `syz.3.194'. [ 45.995035][ T5671] netlink: 20 bytes leftover after parsing attributes in process `syz.3.194'. [ 45.995935][ T5671] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 46.902044][ T5682] set_capacity_and_notify: 8 callbacks suppressed [ 46.905551][ T5682] loop2: detected capacity change from 0 to 2048 [ 47.021954][ T5682] loop2: p1 p3 < > p4 < p5 > [ 47.021975][ T5682] loop2: partition table partially beyond EOD, truncated [ 47.022053][ T5682] loop2: p1 size 33024 extends beyond EOD, truncated [ 47.030158][ T5682] loop2: p3 start 4284289 is beyond EOD, truncated [ 47.030786][ T5691] loop3: detected capacity change from 0 to 512 [ 47.034870][ T5677] loop1: unable to read partition table [ 47.034962][ T5677] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) [ 47.043778][ T5682] loop2: p5 size 33024 extends beyond EOD, truncated [ 47.058338][ T5691] EXT4-fs (loop3): 1 truncate cleaned up [ 47.058864][ T5691] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.106210][ T5698] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 47.110509][ T5698] overlayfs: failed to set xattr on upper [ 47.110558][ T5698] overlayfs: ...falling back to redirect_dir=nofollow. [ 47.110572][ T5698] overlayfs: ...falling back to uuid=null. [ 47.144401][ T5705] __nla_validate_parse: 1 callbacks suppressed [ 47.145985][ T5705] netlink: 72 bytes leftover after parsing attributes in process `syz.0.206'. [ 47.174902][ T4734] udevd[4734]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 47.178140][ T4702] udevd[4702]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 47.179093][ T4705] udevd[4705]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 47.213278][ T5691] netlink: 'syz.3.202': attribute type 21 has an invalid length. [ 47.213309][ T5691] IPv6: NLM_F_CREATE should be specified when creating new route [ 47.213431][ T5691] netlink: 12 bytes leftover after parsing attributes in process `syz.3.202'. [ 47.271660][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.295903][ T4702] udevd[4702]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 47.304558][ T5715] netlink: 56 bytes leftover after parsing attributes in process `syz.4.210'. [ 47.308781][ T4706] udevd[4706]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 47.320861][ T4734] udevd[4734]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 47.323685][ T5717] loop1: detected capacity change from 0 to 256 [ 47.324086][ T5717] vfat: Bad value for 'uid' [ 47.324103][ T5717] vfat: Bad value for 'uid' [ 47.365881][ T5720] loop3: detected capacity change from 0 to 512 [ 47.381754][ T5720] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.461912][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.513647][ T5733] syzkaller0: entered promiscuous mode [ 47.513678][ T5733] syzkaller0: entered allmulticast mode [ 47.516534][ T5736] netlink: 12 bytes leftover after parsing attributes in process `syz.3.214'. [ 47.520388][ T5735] netlink: 12 bytes leftover after parsing attributes in process `syz.3.214'. [ 47.547057][ T5735] overlay: filesystem on ./file0 not supported as upperdir [ 47.582241][ T5741] loop2: detected capacity change from 0 to 2048 [ 47.582567][ T5741] ext4: Unknown parameter 'obj_type' [ 47.595010][ T5744] netlink: 27 bytes leftover after parsing attributes in process `syz.4.217'. [ 47.609956][ T5746] loop1: detected capacity change from 0 to 1024 [ 47.624909][ T5746] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 47.624939][ T5746] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 47.624985][ T5746] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 47.632147][ T5746] EXT4-fs error (device loop1): ext4_get_journal_inode:5900: inode #5: comm syz.1.221: unexpected bad inode w/o EXT4_IGET_BAD [ 47.632195][ T5746] loop1: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 47.632635][ T5746] EXT4-fs (loop1): no journal found [ 47.632645][ T5746] EXT4-fs (loop1): can't get journal size [ 47.632798][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 47.632810][ C1] EXT4-fs (loop1): initial error at time 47: ext4_get_journal_inode:5900: inode 5 [ 47.632825][ C1] EXT4-fs (loop1): last error at time 47: ext4_get_journal_inode:5900: inode 5 [ 47.634257][ T5746] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 47.649945][ T5748] loop2: detected capacity change from 0 to 4096 [ 47.667067][ T4713] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.667528][ T5748] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.721878][ T4714] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.749412][ T5760] loop1: detected capacity change from 0 to 256 [ 47.749811][ T5760] vfat: Bad value for 'uid' [ 47.749819][ T5760] vfat: Bad value for 'uid' [ 47.815262][ T5765] syzkaller0: entered promiscuous mode [ 47.815292][ T5765] syzkaller0: entered allmulticast mode [ 47.817456][ T5765] TC_ACT_REPEAT abuse ? [ 47.819317][ T5769] loop4: detected capacity change from 0 to 512 [ 47.819646][ T5765] netlink: 92 bytes leftover after parsing attributes in process `syz.2.227'. [ 47.821000][ T5769] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 47.837326][ T5773] loop3: detected capacity change from 0 to 256 [ 47.838924][ T5769] EXT4-fs error (device loop4): ext4_init_orphan_info:618: comm syz.4.228: orphan file block 0: bad magic [ 47.838949][ T5769] loop4: lost filesystem error report for type 5 error -117 [ 47.842668][ T5769] EXT4-fs (loop4): mount failed [ 47.842801][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 47.842817][ C0] EXT4-fs (loop4): initial error at time 47: ext4_init_orphan_info:618 [ 47.842837][ C0] EXT4-fs (loop4): last error at time 47: ext4_init_orphan_info:618 [ 48.032223][ T5773] bridge1: entered promiscuous mode [ 48.035810][ T5775] netlink: 'syz.1.230': attribute type 13 has an invalid length. [ 48.035846][ T5775] netlink: 4 bytes leftover after parsing attributes in process `syz.1.230'. [ 48.049475][ T5775] netlink: 'syz.1.230': attribute type 13 has an invalid length. [ 48.049507][ T5775] netlink: 4 bytes leftover after parsing attributes in process `syz.1.230'. [ 48.081305][ T15] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 48.081356][ T15] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 48.081388][ T15] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 48.081410][ T15] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 48.179580][ T5807] xt_hashlimit: size too large, truncated to 1048576 [ 48.405117][ T4721] Bluetooth: hci0: Unable to find connection for big 0x00 [ 48.441278][ T5810] EXT4-fs: Ignoring removed nobh option [ 48.441313][ T5817] vfat: Bad value for 'uid' [ 48.441324][ T5817] vfat: Bad value for 'uid' [ 48.456248][ T5810] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.503487][ T4714] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.595266][ T5827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.242'. [ 48.615170][ T5076] udevd[5076]: inotify_add_watch(7, /dev/loop0p8, 10) failed: No such file or directory [ 48.621128][ T4734] udevd[4734]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 48.623326][ T4705] udevd[4705]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 48.626543][ T4704] udevd[4704]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 48.654330][ T5837] syz.0.209: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 48.655721][ T5837] CPU: 0 UID: 0 PID: 5837 Comm: syz.0.209 Tainted: G L syzkaller #0 PREEMPT [ 48.655742][ T5837] Tainted: [L]=SOFTLOCKUP [ 48.655747][ T5837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 48.655753][ T5837] Call trace: [ 48.655757][ T5837] show_stack+0x2c/0x3c (C) [ 48.655780][ T5837] __dump_stack+0x30/0x40 [ 48.655794][ T5837] dump_stack_lvl+0xd8/0x12c [ 48.655806][ T5837] dump_stack+0x1c/0x28 [ 48.655818][ T5837] warn_alloc+0x1bc/0x1d0 [ 48.655828][ T5837] __vmalloc_node_range_noprof+0x120/0x105c [ 48.655840][ T5837] vmalloc_user_noprof+0xe4/0x140 [ 48.655851][ T5837] xskq_create+0xbc/0x16c [ 48.655861][ T5837] xsk_init_queue+0x9c/0xf8 [ 48.655870][ T5837] xsk_setsockopt+0x49c/0x6c4 [ 48.655879][ T5837] do_sock_setsockopt+0x1f0/0x330 [ 48.655891][ T5837] __sys_setsockopt+0x104/0x170 [ 48.655901][ T5837] __arm64_sys_setsockopt+0xc8/0xe4 [ 48.655911][ T5837] invoke_syscall+0x98/0x244 [ 48.655924][ T5837] el0_svc_common+0xec/0x23c [ 48.655935][ T5837] do_el0_svc+0x4c/0x5c [ 48.655947][ T5837] el0_svc+0x64/0x260 [ 48.655959][ T5837] el0t_64_sync_handler+0x48/0x148 [ 48.655970][ T5837] el0t_64_sync+0x198/0x19c [ 48.655981][ T5837] Mem-Info: [ 48.655986][ T5837] active_anon:20 inactive_anon:12695 isolated_anon:0 [ 48.655986][ T5837] active_file:2466 inactive_file:4564 isolated_file:0 [ 48.655986][ T5837] unevictable:768 dirty:30 writeback:0 [ 48.655986][ T5837] slab_reclaimable:9078 slab_unreclaimable:88870 [ 48.655986][ T5837] mapped:35915 shmem:6668 pagetables:1193 [ 48.655986][ T5837] sec_pagetables:0 bounce:0 [ 48.655986][ T5837] kernel_misc_reclaimable:0 [ 48.655986][ T5837] free:1477912 free_pcp:15671 free_cma:7616 [ 48.656010][ T5837] Node 0 active_anon:80kB inactive_anon:50780kB active_file:9864kB inactive_file:18256kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:143660kB dirty:120kB writeback:0kB shmem:26672kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9768kB pagetables:4772kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 48.656031][ T5837] Node 0 DMA free:3077888kB boost:0kB min:20356kB low:25444kB high:30532kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:30464kB [ 48.656056][ T5837] lowmem_reserve[]: 0 0 3651 3651 3651 [ 48.656075][ T5837] Node 0 Normal free:2833760kB boost:0kB min:24696kB low:30868kB high:37040kB reserved_highatomic:0KB free_highatomic:0KB active_anon:80kB inactive_anon:50780kB active_file:9864kB inactive_file:18256kB unevictable:3072kB writepending:120kB zspages:0kB present:5242880kB managed:3739372kB mlocked:0kB bounce:0kB free_pcp:62684kB local_pcp:29332kB free_cma:0kB [ 48.656100][ T5837] lowmem_reserve[]: 0 0 0 0 0 [ 48.656118][ T5837] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 1*1024kB (C) 0*2048kB 751*4096kB (MC) = 3077888kB [ 48.656183][ T5837] Node 0 Normal: 796*4kB (UM) 287*8kB (UM) 265*16kB (UM) 20*32kB (ME) 8*64kB (ME) 5*128kB (UME) 6*256kB (ME) 13*512kB (ME) 12*1024kB (UM) 4*2048kB (UME) 682*4096kB (UM) = 2833656kB [ 48.656264][ T5837] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 48.656271][ T5837] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 48.656278][ T5837] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 48.656285][ T5837] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 48.656291][ T5837] 13743 total pagecache pages [ 48.656295][ T5837] 0 pages in swap cache [ 48.656299][ T5837] Free swap = 124996kB [ 48.656302][ T5837] Total swap = 124996kB [ 48.656306][ T5837] 2097152 pages RAM [ 48.656313][ T5837] 0 pages HighMem/MovableOnly [ 48.657726][ T5837] 392261 pages reserved [ 48.657734][ T5837] 8192 pages cma reserved [ 48.657739][ T5837] 0 pages hwpoisoned [ 48.739656][ T5841] vfat: Unknown parameter 'nnonumtail' [ 49.166992][ T5847] EXT4-fs: Ignoring removed orlov option [ 49.169416][ T5847] EXT4-fs (loop0): Test dummy encryption mode enabled [ 49.175409][ T5847] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.197426][ T5847] Cannot find add_set index 2 as target [ 49.226743][ T5847] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 49.266343][ T5865] netlink: 'syz.4.251': attribute type 1 has an invalid length. [ 49.269652][ T5865] netlink: 'syz.4.251': attribute type 2 has an invalid length. [ 49.270286][ T4715] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.324302][ T5873] 9p: Bad value for 'rfdno' [ 49.705856][ T5881] EXT4-fs: Ignoring removed nomblk_io_submit option [ 49.740643][ T5881] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.773038][ T5886] tmpfs: Bad value for 'mpol' [ 49.831418][ T4715] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.879572][ T4721] Bluetooth: hci0: unexpected subevent 0x12 length: 31 > 5 [ 49.907886][ T5899] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.953605][ T5912] netlink: 'syz.0.266': attribute type 10 has an invalid length. [ 49.966237][ T5914] vfat: Bad value for 'uid' [ 49.968548][ T5912] team0: Device vxcan0 is of different type [ 49.970431][ T5914] vfat: Bad value for 'uid' [ 50.090575][ T4713] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.153849][ T5919] loop3: p1 < > p3 p4 < > [ 50.155520][ T5919] loop3: p3 size 218103808 extends beyond EOD, truncated [ 50.163030][ T4345] loop3: p1 < > p3 p4 < > [ 50.185480][ T4345] loop3: p3 size 218103808 extends beyond EOD, truncated [ 50.517756][ T5947] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.627690][ T5952] Injecting memory failure for pfn 0x135d53 at process virtual address 0x20001000 [ 50.639888][ T5952] Memory failure: 0x135d53: recovery action for clean LRU page: Recovered [ 50.641796][ T5952] Injecting memory failure for pfn 0x134d2b at process virtual address 0x20002000 [ 50.645929][ T5952] Memory failure: 0x134d2b: recovery action for clean LRU page: Recovered [ 50.647680][ T5952] Injecting memory failure for pfn 0x135043 at process virtual address 0x20003000 [ 50.649898][ T5952] Memory failure: 0x135043: recovery action for clean LRU page: Recovered [ 50.728293][ T4713] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.892134][ T5968] Injecting memory failure for pfn 0x134dc8 at process virtual address 0x20276000 [ 50.898900][ T5978] vfat: Bad value for 'uid' [ 50.898927][ T5978] vfat: Bad value for 'uid' [ 50.904892][ T5968] Memory failure: 0x134dc8: keeping poisoned page in swap cache [ 50.906698][ T5968] Memory failure: 0x134dc8: recovery action for clean swapcache page: Recovered [ 50.908522][ T5968] Injecting memory failure for pfn 0x134dc7 at process virtual address 0x20277000 [ 50.908624][ T5968] Memory failure: 0x134dc7: keeping poisoned page in swap cache [ 50.908659][ T5968] Memory failure: 0x134dc7: recovery action for clean swapcache page: Recovered [ 51.038091][ T5981] ext4: Unknown parameter 'obj_user' [ 51.175314][ T5988] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.289: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 51.175352][ T5988] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 51.178707][ T5988] EXT4-fs (loop1): Remounting filesystem read-only [ 51.179205][ T5988] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.316435][ T5999] syzkaller0: entered promiscuous mode [ 51.318116][ T5999] syzkaller0: entered allmulticast mode [ 51.330258][ T5999] EXT4-fs: Ignoring removed nomblk_io_submit option [ 51.357244][ T5999] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.487146][ T4714] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.512359][ T6024] vfat: Bad value for 'uid' [ 51.512388][ T6024] vfat: Bad value for 'uid' [ 51.925552][ T6078] loop2: p1 p2 p4[EZD] [ 51.929326][ T6078] loop2: p4 start 201326592 is beyond EOD, truncated [ 51.957505][ T4713] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.027297][ T6098] set_capacity_and_notify: 19 callbacks suppressed [ 52.031386][ T6098] loop1: detected capacity change from 0 to 128 [ 52.213244][ T6119] loop3: detected capacity change from 0 to 256 [ 52.215860][ T6119] vfat: Bad value for 'uid' [ 52.215880][ T6119] vfat: Bad value for 'uid' [ 52.292491][ T6121] loop3: detected capacity change from 0 to 256 [ 52.855186][ T6142] loop2: detected capacity change from 0 to 1024 [ 52.855555][ T6142] EXT4-fs: Ignoring removed bh option [ 52.858312][ T6142] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 52.858332][ T6142] EXT4-fs (loop2): group descriptors corrupted! [ 52.912368][ T6146] loop1: detected capacity change from 0 to 512 [ 52.916101][ T6146] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 52.919444][ T6146] EXT4-fs (loop1): 1 truncate cleaned up [ 52.921092][ T6146] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.315602][ T6151] loop2: detected capacity change from 0 to 256 [ 53.342159][ T6153] loop4: detected capacity change from 0 to 1024 [ 53.353940][ T6153] EXT4-fs: Ignoring removed bh option [ 53.364848][ T6153] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.374904][ T6153] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 53.379676][ T6155] loop3: detected capacity change from 0 to 512 [ 53.385999][ T6155] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal [ 53.399818][ T4723] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.725166][ T6191] loop3: detected capacity change from 0 to 256 [ 54.015509][ T4713] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.039498][ T6194] loop3: detected capacity change from 0 to 1024 [ 54.040876][ T6194] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 54.042445][ T6194] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 54.046339][ T6194] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 54.050058][ T6194] EXT4-fs error (device loop3): ext4_free_blocks:6718: comm syz.3.329: Freeing blocks not in datazone - block = 0, count = 4096 [ 54.050113][ T6194] loop3: lost filesystem error report for type 5 error -117 [ 54.052253][ T6194] EXT4-fs (loop3): Remounting filesystem read-only [ 54.052331][ T6194] EXT4-fs (loop3): 1 orphan inode deleted [ 54.052851][ T6194] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.064126][ T1288] EXT4-fs (loop3): Quota write (off=3072, len=1024) cancelled because transaction is not started [ 54.064153][ T1288] Quota error (device loop3): write_blk: dquota write failed [ 54.064177][ T1288] Quota error (device loop3): free_dqentry: Can't move quota data block (2) to free list [ 54.094257][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.121417][ T6199] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.331: attempt to clear invalid blocks 2 len 1 [ 54.121458][ T6199] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 54.122209][ T6199] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 54.122797][ C1] EXT4-fs (loop3): error count since last fsck: 2 [ 54.122813][ C1] EXT4-fs (loop3): initial error at time 54: ext4_clear_blocks:876: inode 13 [ 54.122829][ C1] EXT4-fs (loop3): last error at time 54: ext4_mb_generate_buddy:1317 [ 54.124968][ T6199] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.331: invalid indirect mapped block 1819239214 (level 0) [ 54.124993][ T6199] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 54.125995][ T6199] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.331: invalid indirect mapped block 1819239214 (level 1) [ 54.126023][ T6199] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 54.145422][ T6199] EXT4-fs (loop3): 1 truncate cleaned up [ 54.145886][ T6199] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.166365][ T6203] Bluetooth: MGMT ver 1.23 [ 54.211248][ T6209] overlayfs: upper fs does not support tmpfile. [ 54.231220][ T6212] EXT4-fs: Ignoring removed bh option [ 54.232482][ T6209] tipc: Can't bind to reserved service type 0 [ 54.236321][ T6212] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 54.238567][ T6212] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 54.247698][ T6212] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 54.253595][ T6212] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 54.260645][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.262686][ T6212] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.274843][ T6212] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.342479][ T6224] __nla_validate_parse: 2 callbacks suppressed [ 54.347150][ T6224] netlink: 12 bytes leftover after parsing attributes in process `syz.0.339'. [ 54.370694][ T6224] syzkaller0: entered promiscuous mode [ 54.371784][ T6224] syzkaller0: entered allmulticast mode [ 54.545586][ T6251] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 54.551954][ T6251] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.347: invalid indirect mapped block 9 (level 0) [ 54.551991][ T6251] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 54.552814][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 54.552834][ C0] EXT4-fs (loop0): initial error at time 54: ext4_free_branches:1023: inode 11 [ 54.552866][ C0] EXT4-fs (loop0): last error at time 54: ext4_free_branches:1023: inode 11 [ 54.569148][ T6251] EXT4-fs (loop0): 1 truncate cleaned up [ 54.570917][ T6251] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.633451][ T6251] tipc: Enabling of bearer rejected, failed to enable media [ 54.655499][ T6260] x_tables: duplicate underflow at hook 1 [ 54.773312][ T6270] random: crng reseeded on system resumption [ 54.780916][ T6270] syz_tun: entered allmulticast mode [ 54.794860][ T6270] syz_tun: left allmulticast mode [ 54.805783][ T4715] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.824075][ T6242] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 54.931158][ T6284] netlink: 'syz.2.358': attribute type 62 has an invalid length. [ 54.975780][ T6289] Driver unsupported XDP return value 0 on prog (id 47) dev N/A, expect packet loss! [ 54.976881][ T6287] : renamed from veth0_vlan (while UP) [ 54.989613][ T6287] netlink: 12 bytes leftover after parsing attributes in process `syz.4.359'. [ 55.072293][ T6299] vfat: Bad value for 'uid' [ 55.073447][ T6299] vfat: Bad value for 'uid' [ 55.105372][ T6306] netlink: 8 bytes leftover after parsing attributes in process `syz.4.359'. [ 55.107146][ T6306] netlink: 24 bytes leftover after parsing attributes in process `syz.4.359'. [ 55.125595][ T4721] Bluetooth: hci2: ACL packet for unknown connection handle 1151 [ 55.177994][ T6320] EXT4-fs: inline encryption not supported [ 55.181919][ T6320] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 55.197497][ T6320] EXT4-fs (loop2): 1 truncate cleaned up [ 55.215753][ T6320] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.220853][ T6333] EXT4-fs: Ignoring removed nobh option [ 55.221929][ T6333] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 55.244298][ T6333] EXT4-fs (loop1): 1 truncate cleaned up [ 55.245456][ T6333] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.283898][ T4713] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.298909][ T4714] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.398429][ T6340] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.406520][ T6340] EXT4-fs error (device loop1): __ext4_new_inode:1081: comm syz.1.373: reserved inode found cleared - inode=2 [ 55.417158][ T30] audit: type=1326 audit(55.390:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6351 comm="syz.2.377" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffad57a168 code=0x0 [ 55.445351][ T6340] netlink: 'syz.1.373': attribute type 10 has an invalid length. [ 55.447118][ T6340] syz_tun: entered promiscuous mode [ 55.454655][ T6340] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 55.470906][ T6358] vfat: Bad value for 'uid' [ 55.470935][ T6358] vfat: Bad value for 'uid' [ 55.474286][ T5434] bond0: (slave bond_slave_0): interface is now down [ 55.476160][ T5434] bond0: (slave bond_slave_1): interface is now down [ 55.476202][ T5434] bond0: (slave netdevsim1): interface is now down [ 55.476223][ T5434] bond0: (slave syz_tun): interface is now down [ 55.477461][ T5434] bond0: now running without any active interface! [ 55.613965][ T6380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.616787][ T6380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.709497][ T4401] veth0_vlan: left promiscuous mode [ 55.715977][ T868] veth0_vlan: entered promiscuous mode [ 55.898458][ T6412] netlink: 'syz.4.389': attribute type 6 has an invalid length. [ 55.901253][ T6412] IPv6: NLM_F_CREATE should be specified when creating new route [ 55.947065][ T6420] trusted_key: syz.4.391 sent an empty control message without MSG_MORE. [ 56.486233][ T6387] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 56.486386][ T6387] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 56.490170][ T6387] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 56.492611][ T6387] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 56.492746][ T6387] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 56.495662][ T6387] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 56.497913][ T6387] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 56.498027][ T6387] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 56.501039][ T6387] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 56.503599][ T6387] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 56.505390][ T6387] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 56.505453][ T6387] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 56.509947][ T6387] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 56.584763][ T6438] vfat: Bad value for 'uid' [ 56.584790][ T6438] vfat: Bad value for 'uid' [ 56.588005][ T30] audit: type=1326 audit(56.560:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6439 comm="syz.4.395" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e77a168 code=0x0 [ 56.691546][ T6451] netlink: 'syz.0.399': attribute type 1 has an invalid length. [ 56.701019][ T6451] netlink: 12 bytes leftover after parsing attributes in process `syz.0.399'. [ 56.709329][ T6454] netlink: 4 bytes leftover after parsing attributes in process `syz.2.400'. [ 56.709779][ T6455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.400'. [ 56.709836][ T6455] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.721425][ T6455] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.760095][ T6454] netlink: 'syz.2.400': attribute type 10 has an invalid length. [ 56.809527][ T6456] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 56.809639][ T6456] EXT4-fs (loop2): orphan cleanup on readonly fs [ 56.810669][ T6456] Quota error (device loop2): dq_insert_tree: Quota tree root isn't allocated! [ 56.810681][ T6456] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota [ 56.810696][ T6456] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.400: Failed to acquire dquot type 1 [ 56.810706][ T6456] loop2: lost filesystem error report for type 5 error -5 [ 56.811417][ T6456] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.400: bg 0: block 40: padding at end of block bitmap is not set [ 56.811435][ T6456] loop2: lost filesystem error report for type 5 error -117 [ 56.811582][ T6456] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 56.811592][ T6456] loop2: lost filesystem error report for type 5 error -117 [ 56.811761][ T6456] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #16: comm syz.2.400: data will be lost [ 56.811906][ T6456] EXT4-fs (loop2): 1 truncate cleaned up [ 56.812800][ C1] EXT4-fs (loop2): error count since last fsck: 3 [ 56.812818][ C1] EXT4-fs (loop2): initial error at time 56: ext4_acquire_dquot:7041 [ 56.812832][ C1] EXT4-fs (loop2): last error at time 56: ext4_mb_clear_bb:6679 [ 56.814791][ T6456] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 56.864501][ T4714] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.883402][ T6462] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 56.905742][ T4714] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 57.112513][ T6480] set_capacity_and_notify: 14 callbacks suppressed [ 57.112538][ T6480] loop2: detected capacity change from 0 to 256 [ 57.123907][ T5449] Bluetooth: Error in BCSP hdr checksum [ 57.150050][ T6482] loop2: detected capacity change from 0 to 256 [ 57.150432][ T6482] vfat: Bad value for 'uid' [ 57.150440][ T6482] vfat: Bad value for 'uid' [ 57.383050][ T5454] Bluetooth: Error in BCSP hdr checksum [ 57.473763][ T6493] netlink: 20 bytes leftover after parsing attributes in process `syz.4.411'. [ 57.474097][ T6493] netlink: 20 bytes leftover after parsing attributes in process `syz.4.411'. [ 57.513254][ T6495] trusted_key: encrypted_key: key trusted:syz not found [ 57.526669][ T6497] binder: 6496:6497 BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 57.526696][ T6497] binder: 6496:6497 ioctl c0306201 20000640 returned -22 [ 57.526797][ T6497] netlink: 8 bytes leftover after parsing attributes in process `syz.3.413'. [ 57.671809][ T6516] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 57.763405][ T6521] loop4: detected capacity change from 0 to 256 [ 57.782897][ T4718] Bluetooth: hci1: command 0x0c1a tx timeout [ 57.796199][ T6523] loop4: detected capacity change from 0 to 256 [ 57.796566][ T6523] vfat: Bad value for 'uid' [ 57.796573][ T6523] vfat: Bad value for 'uid' [ 58.095945][ T4718] Bluetooth: hci4: unexpected event for opcode 0x0c03 [ 58.513197][ T4716] Bluetooth: hci2: command 0x0c1a tx timeout [ 58.513298][ T4718] Bluetooth: hci3: command 0x0c1a tx timeout [ 58.619070][ T6565] loop3: detected capacity change from 0 to 256 [ 58.625887][ T6565] vfat: Bad value for 'uid' [ 58.625920][ T6565] vfat: Bad value for 'uid' [ 58.637237][ T6568] loop4: detected capacity change from 0 to 256 [ 58.641606][ T6568] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 58.655417][ T6569] syz_tun: entered allmulticast mode [ 58.801884][ T6584] gre1: entered promiscuous mode [ 58.807744][ T6580] loop4: detected capacity change from 0 to 256 [ 58.809415][ T6580] vfat: Unknown parameter 'u(5âzcŠê' [ 58.852253][ T4718] Bluetooth: hci4: unexpected event for opcode 0x0c57 [ 58.880776][ T6592] loop4: detected capacity change from 0 to 512 [ 58.885463][ T6592] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 58.885525][ T6592] System zones: 1-12 [ 58.885865][ T6592] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #12: comm syz.4.443: missing EA_INODE flag [ 58.885881][ T6592] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 58.890190][ T6592] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.443: error while reading EA inode 12 err=-117 [ 58.890231][ T6592] loop4: lost filesystem error report for type 5 error -117 [ 58.890404][ T6592] EXT4-fs (loop4): 1 orphan inode deleted [ 58.890851][ T6592] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.913131][ T4721] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 59.049915][ T6601] bond0 (unregistering): Released all slaves [ 59.054076][ T6605] loop3: detected capacity change from 0 to 256 [ 59.054474][ T6605] vfat: Bad value for 'uid' [ 59.054497][ T6605] vfat: Bad value for 'uid' [ 59.508311][ T6572] syz_tun: left allmulticast mode [ 59.623767][ T6660] loop2: detected capacity change from 0 to 1024 [ 59.752610][ T6674] vfat: Bad value for 'uid' [ 59.752641][ T6674] vfat: Bad value for 'uid' [ 59.796842][ T6671] can0: slcan on ttyS3. [ 59.862958][ T4718] Bluetooth: hci1: command 0x0c1a tx timeout [ 59.961261][ T6687] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.464: bg 0: block 217: padding at end of block bitmap is not set [ 60.024183][ T5771] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 60.100681][ T6670] can0 (unregistered): slcan off ttyS3. [ 60.194974][ T6728] EXT4-fs (loop4): Test dummy encryption mode enabled [ 60.583020][ T4718] Bluetooth: hci3: command 0x0c1a tx timeout [ 60.583287][ T4718] Bluetooth: hci2: command 0x0c1a tx timeout [ 60.905674][ T6803] x_tables: duplicate underflow at hook 1 [ 60.909199][ T6803] netlink: 'syz.3.483': attribute type 1 has an invalid length. [ 60.909233][ T6803] netlink: 'syz.3.483': attribute type 2 has an invalid length. [ 61.072647][ T6817] vfat: Unknown parameter 'uni_xlaôe' [ 61.467494][ T6872] ext4: Unknown parameter 'fowner>00000000000000000000' [ 61.808822][ T6892] EXT4-fs: Ignoring removed nobh option [ 61.808886][ T6892] EXT4-fs: Ignoring removed orlov option [ 61.808928][ T6892] EXT4-fs: Ignoring removed nomblk_io_submit option [ 62.167094][ T4721] Bluetooth: hci1: command 0x0c1a tx timeout [ 62.181457][ T6892] EXT4-fs (loop4): Cannot use DAX on a filesystem that may contain inline data [ 62.658245][ T6907] set_capacity_and_notify: 7 callbacks suppressed [ 62.658283][ T6907] loop0: detected capacity change from 0 to 128 [ 62.667915][ T4721] Bluetooth: hci2: command 0x0c1a tx timeout [ 62.667949][ T4721] Bluetooth: hci3: command 0x0c1a tx timeout [ 62.776698][ T6918] loop0: detected capacity change from 0 to 512 [ 62.778597][ T6918] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 62.798176][ T6919] tmpfs: Bad value for 'mpol' [ 62.850745][ T6923] loop4: detected capacity change from 0 to 512 [ 62.903497][ T4718] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 62.903543][ T4718] Bluetooth: hci4: Injecting HCI hardware error event [ 62.904305][ T4718] Bluetooth: hci4: hardware error 0x00 [ 63.001005][ T6940] loop3: detected capacity change from 0 to 256 [ 63.036026][ T6942] loop4: detected capacity change from 0 to 256 [ 63.037721][ T6942] vfat: Bad value for 'uid' [ 63.038619][ T6942] vfat: Bad value for 'uid' [ 63.130357][ T6946] loop0: detected capacity change from 0 to 128 [ 63.131011][ T6946] ext4: Unknown parameter 'fowner>00000000000000000000' [ 63.131550][ T6947] __nla_validate_parse: 4 callbacks suppressed [ 63.131561][ T6947] netlink: 104 bytes leftover after parsing attributes in process `syz.2.512'. [ 63.476644][ T6959] loop0: detected capacity change from 0 to 128 [ 64.022179][ T7000] netlink: 4 bytes leftover after parsing attributes in process `syz.3.524'. [ 64.026906][ T7002] loop0: detected capacity change from 0 to 128 [ 64.075006][ T7007] tmpfs: Cannot enable quota on remount [ 64.111847][ T7018] netlink: 16 bytes leftover after parsing attributes in process `syz.2.523'. [ 64.169422][ T7025] loop3: detected capacity change from 0 to 256 [ 64.173590][ T7025] vfat: Bad value for 'uid' [ 64.173623][ T7025] vfat: Bad value for 'uid' [ 64.177667][ T7030] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 64.235333][ T7035] loop0: detected capacity change from 0 to 512 [ 64.250920][ T7035] EXT4-fs error (device loop0): dx_probe:791: inode #2: comm syz.0.531: Attempting to read directory block (0) that is past i_size (256) [ 64.258736][ T7035] loop0: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 64.260210][ T7035] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 64.263306][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 64.263316][ C0] EXT4-fs (loop0): initial error at time 64: dx_probe:791: inode 2 [ 64.263331][ C0] EXT4-fs (loop0): last error at time 64: dx_probe:791: inode 2 [ 64.271667][ T30] audit: type=1326 audit(64.240:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7034 comm="syz.0.531" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffac97a168 code=0x0 [ 64.327591][ T7039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.531'. [ 64.329474][ T7039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.531'. [ 64.373942][ T7046] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.533: iget: bad extended attribute block 1 [ 64.373975][ T7046] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 64.374149][ T7046] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.533: couldn't read orphan inode 15 (err -117) [ 64.374167][ T7046] loop3: lost filesystem error report for type 5 error -117 [ 64.393570][ T7046] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #2: block 13: comm syz.3.533: lblock 0 mapped to illegal pblock 13 (length 1) [ 64.395836][ T7046] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #2: block 13: comm syz.3.533: lblock 0 mapped to illegal pblock 13 (length 1) [ 64.509125][ T1598] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.509173][ T1598] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.552998][ T26] cfg80211: failed to load regulatory.db [ 64.735732][ T7049] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #2: block 13: comm syz.3.533: lblock 0 mapped to illegal pblock 13 (length 1) [ 64.737045][ T7049] EXT4-fs warning (device loop3): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz.3.533: error -EUCLEAN reading directory block [ 64.742989][ T4721] Bluetooth: hci3: command 0x0c1a tx timeout [ 64.896217][ T7059] netlink: 32 bytes leftover after parsing attributes in process `syz.1.535'. [ 64.982898][ T4718] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 65.813950][ T4712] EXT4-fs unmount: 13 callbacks suppressed [ 65.816878][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.822213][ T4715] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.874759][ T7077] netlink: 80 bytes leftover after parsing attributes in process `syz.3.540'. [ 65.894876][ T7079] netlink: 'syz.4.541': attribute type 2 has an invalid length. [ 65.894904][ T7079] netlink: 'syz.4.541': attribute type 8 has an invalid length. [ 65.894925][ T7079] netlink: 132 bytes leftover after parsing attributes in process `syz.4.541'. [ 65.976145][ T7083] vfat: Bad value for 'uid' [ 65.978712][ T7083] vfat: Bad value for 'uid' [ 66.092636][ T7101] FAULT_INJECTION: forcing a failure. [ 66.092636][ T7101] name failslab, interval 1, probability 0, space 0, times 1 [ 66.092674][ T7101] CPU: 0 UID: 0 PID: 7101 Comm: syz.3.549 Tainted: G L syzkaller #0 PREEMPT [ 66.092688][ T7101] Tainted: [L]=SOFTLOCKUP [ 66.092692][ T7101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 66.092698][ T7101] Call trace: [ 66.092702][ T7101] show_stack+0x2c/0x3c (C) [ 66.092727][ T7101] __dump_stack+0x30/0x40 [ 66.092740][ T7101] dump_stack_lvl+0xd8/0x12c [ 66.092752][ T7101] dump_stack+0x1c/0x28 [ 66.092766][ T7101] should_fail_ex+0x41c/0x590 [ 66.092778][ T7101] should_failslab+0xc4/0x120 [ 66.092788][ T7101] __kmalloc_noprof+0x108/0x6b8 [ 66.092798][ T7101] kernfs_fop_write_iter+0x144/0x3b8 [ 66.092808][ T7101] vfs_write+0x51c/0xa0c [ 66.092815][ T7101] ksys_write+0x12c/0x228 [ 66.092822][ T7101] __arm64_sys_write+0x84/0x98 [ 66.092829][ T7101] invoke_syscall+0x98/0x244 [ 66.092839][ T7101] el0_svc_common+0xec/0x23c [ 66.092849][ T7101] do_el0_svc+0x4c/0x5c [ 66.092858][ T7101] el0_svc+0x64/0x260 [ 66.092868][ T7101] el0t_64_sync_handler+0x48/0x148 [ 66.092878][ T7101] el0t_64_sync+0x198/0x19c [ 66.096957][ T7103] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 66.098924][ T7103] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 66.126174][ T7103] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 66.126205][ T7103] FAT-fs (loop0): Filesystem has been set read-only [ 66.128424][ T7103] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 66.138914][ T7096] syz_tun: entered allmulticast mode [ 66.145426][ T7104] pim6reg: entered allmulticast mode [ 66.148979][ T7096] pim6reg: left allmulticast mode [ 66.149061][ T7096] syz_tun: left allmulticast mode [ 66.167657][ T7110] Injecting memory failure for pfn 0x219250 at process virtual address 0x20001000 [ 66.183853][ T7110] Memory failure: 0x219250: unhandlable page. [ 66.183884][ T7110] Memory failure: 0x219250: recovery action for get hwpoison page: Ignored [ 66.272912][ T7116] SQUASHFS error: Failed to read block 0x4e8: -5 [ 66.296440][ T7122] netlink: 56 bytes leftover after parsing attributes in process `syz.0.557'. [ 66.344521][ T7124] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 66.352485][ T7124] EXT4-fs (loop2): 1 truncate cleaned up [ 66.355146][ T7124] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.368350][ T7124] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.558: invalid indirect mapped block 2185560079 (level 0) [ 66.377076][ T7124] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.558: invalid indirect mapped block 65535 (level 2) [ 66.379617][ T7124] EXT4-fs error (device loop2): __ext4_get_inode_loc:4886: comm syz.2.558: Invalid inode table block 0 in block_group 0 [ 66.381154][ T7124] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 66.381335][ T7124] EXT4-fs error (device loop2): ext4_splice_branch:479: inode #13: comm syz.2.558: mark_inode_dirty error [ 66.381594][ T7124] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.558: bg 0: block 46: invalid block bitmap [ 66.381753][ T7124] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 66.381973][ T7124] EXT4-fs error (device loop2): __ext4_get_inode_loc:4886: comm syz.2.558: Invalid inode table block 0 in block_group 0 [ 66.383816][ T7124] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 66.383985][ T7124] EXT4-fs error (device loop2): ext4_truncate:4691: inode #13: comm syz.2.558: mark_inode_dirty error [ 67.149639][ T4714] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.289672][ T7141] FAULT_INJECTION: forcing a failure. [ 67.289672][ T7141] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 67.292749][ T7141] CPU: 0 UID: 0 PID: 7141 Comm: syz.3.562 Tainted: G L syzkaller #0 PREEMPT [ 67.292777][ T7141] Tainted: [L]=SOFTLOCKUP [ 67.292784][ T7141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 67.292794][ T7141] Call trace: [ 67.292799][ T7141] show_stack+0x2c/0x3c (C) [ 67.292818][ T7141] __dump_stack+0x30/0x40 [ 67.292830][ T7141] dump_stack_lvl+0xd8/0x12c [ 67.292840][ T7141] dump_stack+0x1c/0x28 [ 67.292849][ T7141] should_fail_ex+0x41c/0x590 [ 67.292860][ T7141] should_fail+0x14/0x24 [ 67.292870][ T7141] should_fail_usercopy+0x20/0x30 [ 67.292880][ T7141] _copy_from_iter+0x188/0x1064 [ 67.292888][ T7141] kernfs_fop_write_iter+0x17c/0x3b8 [ 67.292898][ T7141] vfs_write+0x51c/0xa0c [ 67.292906][ T7141] ksys_write+0x12c/0x228 [ 67.292912][ T7141] __arm64_sys_write+0x84/0x98 [ 67.292919][ T7141] invoke_syscall+0x98/0x244 [ 67.292929][ T7141] el0_svc_common+0xec/0x23c [ 67.292938][ T7141] do_el0_svc+0x4c/0x5c [ 67.292948][ T7141] el0_svc+0x64/0x260 [ 67.292959][ T7141] el0t_64_sync_handler+0x48/0x148 [ 67.292968][ T7141] el0t_64_sync+0x198/0x19c [ 67.329011][ T7144] netlink: 8 bytes leftover after parsing attributes in process `syz.4.564'. [ 67.374202][ T7148] vfat: Bad value for 'uid' [ 67.374228][ T7148] vfat: Bad value for 'uid' [ 67.388077][ T7150] netlink: 'syz.0.566': attribute type 32 has an invalid length. [ 67.443620][ T7154] fuse: Bad value for 'fd' [ 67.476162][ T4718] block nbd0: Receive control failed (result -32) [ 67.478120][ T4418] block nbd0: Dead connection, failed to find a fallback [ 67.478157][ T4418] block nbd0: shutting down sockets [ 67.478188][ T4418] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 67.478220][ T4418] Buffer I/O error on dev nbd0, logical block 0, async page read [ 67.479206][ T4418] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 67.479238][ T4418] Buffer I/O error on dev nbd0, logical block 0, async page read [ 67.479488][ T4418] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 67.479516][ T4418] Buffer I/O error on dev nbd0, logical block 0, async page read [ 67.479776][ T4418] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 67.479799][ T4418] Buffer I/O error on dev nbd0, logical block 0, async page read [ 67.480087][ T4418] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 67.480111][ T4418] Buffer I/O error on dev nbd0, logical block 0, async page read [ 67.480377][ T4418] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 67.480400][ T4418] Buffer I/O error on dev nbd0, logical block 0, async page read [ 67.481074][ T4418] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 67.481094][ T4418] Buffer I/O error on dev nbd0, logical block 0, async page read [ 67.481141][ T4418] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 67.481154][ T4418] Buffer I/O error on dev nbd0, logical block 0, async page read [ 67.481172][ T5829] ldm_validate_partition_table(): Disk read failed. [ 67.481204][ T4418] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 67.481214][ T4418] Buffer I/O error on dev nbd0, logical block 0, async page read [ 67.481254][ T4418] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 67.481264][ T4418] Buffer I/O error on dev nbd0, logical block 0, async page read [ 67.481347][ T5829] Dev nbd0: unable to read RDB block 0 [ 67.481505][ T5829] nbd0: unable to read partition table [ 67.715204][ T5829] ldm_validate_partition_table(): Disk read failed. [ 67.717102][ T5829] Dev nbd0: unable to read RDB block 0 [ 67.719587][ T5829] nbd0: unable to read partition table [ 68.030536][ T7216] FAULT_INJECTION: forcing a failure. [ 68.030536][ T7216] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 68.030579][ T7216] CPU: 1 UID: 0 PID: 7216 Comm: syz.2.577 Tainted: G L syzkaller #0 PREEMPT [ 68.030595][ T7216] Tainted: [L]=SOFTLOCKUP [ 68.030600][ T7216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 68.030605][ T7216] Call trace: [ 68.030608][ T7216] show_stack+0x2c/0x3c (C) [ 68.030628][ T7216] __dump_stack+0x30/0x40 [ 68.030638][ T7216] dump_stack_lvl+0xd8/0x12c [ 68.030648][ T7216] dump_stack+0x1c/0x28 [ 68.030658][ T7216] should_fail_ex+0x41c/0x590 [ 68.030669][ T7216] should_fail+0x14/0x24 [ 68.030678][ T7216] should_fail_usercopy+0x20/0x30 [ 68.030688][ T7216] simple_read_from_buffer+0xc4/0x238 [ 68.030699][ T7216] proc_fail_nth_read+0x1a8/0x248 [ 68.030707][ T7216] vfs_read+0x230/0x8c8 [ 68.030718][ T7216] ksys_read+0x12c/0x228 [ 68.030731][ T7216] __arm64_sys_read+0x84/0x98 [ 68.030738][ T7216] invoke_syscall+0x98/0x244 [ 68.030749][ T7216] el0_svc_common+0xec/0x23c [ 68.030759][ T7216] do_el0_svc+0x4c/0x5c [ 68.030770][ T7216] el0_svc+0x64/0x260 [ 68.030781][ T7216] el0t_64_sync_handler+0x48/0x148 [ 68.030790][ T7216] el0t_64_sync+0x198/0x19c [ 68.173779][ T7220] set_capacity_and_notify: 13 callbacks suppressed [ 68.175283][ T7220] loop2: detected capacity change from 0 to 256 [ 68.177892][ T7220] vfat: Bad value for 'uid' [ 68.179482][ T7220] vfat: Bad value for 'uid' [ 68.255291][ T7225] loop2: detected capacity change from 0 to 256 [ 68.437927][ T7247] binder: 7237:7247 tried to acquire reference to desc 0, got 1 instead [ 68.440636][ T7247] binder: 7237:7247 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 68.485099][ T7254] netlink: 12 bytes leftover after parsing attributes in process `syz.1.588'. [ 68.647762][ T7264] loop0: detected capacity change from 0 to 512 [ 68.649807][ T7264] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 68.671547][ T7264] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #17: comm syz.0.591: inode has both inline data and extents flags [ 68.671584][ T7264] loop0: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 68.674568][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 68.674583][ C0] EXT4-fs (loop0): initial error at time 68: ext4_orphan_get:1399: inode 17 [ 68.674598][ C0] EXT4-fs (loop0): last error at time 68: ext4_orphan_get:1399: inode 17 [ 68.680954][ T7264] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.591: couldn't read orphan inode 17 (err -117) [ 68.680977][ T7264] loop0: lost filesystem error report for type 5 error -117 [ 68.683874][ T7264] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.821979][ T7281] loop4: detected capacity change from 0 to 512 [ 68.827543][ T7281] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.595: iget: bad extended attribute block 1 [ 68.827827][ T7281] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 68.830455][ T7281] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.595: couldn't read orphan inode 15 (err -117) [ 68.830477][ T7281] loop4: lost filesystem error report for type 5 error -117 [ 68.833733][ T7281] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.835942][ T4715] EXT4-fs error (device loop0): ext4_readdir:265: inode #11: block 4: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=65, rec_len=12, size=4096 fake=1 [ 68.846642][ T7281] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #2: block 13: comm syz.4.595: lblock 0 mapped to illegal pblock 13 (length 1) [ 68.849805][ T7281] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #2: block 13: comm syz.4.595: lblock 0 mapped to illegal pblock 13 (length 1) [ 68.852642][ T7284] loop3: detected capacity change from 0 to 1024 [ 68.859403][ T4715] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 65: padding at end of block bitmap is not set [ 68.860534][ T7284] EXT4-fs: Ignoring removed nomblk_io_submit option [ 68.883648][ T4715] Quota error (device loop0): write_blk: dquota write failed [ 68.883716][ T4715] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 68.883763][ T4715] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz-executor: Failed to acquire dquot type 0 [ 68.924257][ T7284] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 68.929171][ T7284] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.597: bg 0: block 112: padding at end of block bitmap is not set [ 68.931533][ T7284] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 21 with max blocks 1 with error 28 [ 68.931551][ T7284] EXT4-fs (loop3): This should not happen!! Data will be lost [ 68.931551][ T7284] [ 68.931560][ T7284] EXT4-fs (loop3): Total free blocks count 0 [ 68.931567][ T7284] EXT4-fs (loop3): Free/Dirty block details [ 68.931581][ T7284] EXT4-fs (loop3): free_blocks=0 [ 68.931591][ T7284] EXT4-fs (loop3): dirty_blocks=16 [ 68.931598][ T7284] EXT4-fs (loop3): Block reservation details [ 68.931604][ T7284] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 68.943668][ T5578] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.953774][ T7284] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: comm syz.3.597: lblock 0 mapped to illegal pblock 0 (length 1) [ 69.135326][ T7293] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #2: block 13: comm syz.4.595: lblock 0 mapped to illegal pblock 13 (length 1) [ 69.139601][ T7293] EXT4-fs warning (device loop4): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz.4.595: error -EUCLEAN reading directory block [ 69.204568][ T7284] EXT4-fs error (device loop3): ext4_ext_remove_space:2969: inode #15: comm syz.3.597: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 69.224076][ T26] binder: release 7237:7247 transaction 11 out, still active [ 69.226108][ T26] binder: undelivered TRANSACTION_COMPLETE [ 69.230075][ T4816] binder: send failed reply for transaction 11, target dead [ 69.260117][ T7302] netlink: 44 bytes leftover after parsing attributes in process `syz.1.601'. [ 69.265836][ T7301] netlink: 44 bytes leftover after parsing attributes in process `syz.1.601'. [ 69.299488][ T4712] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #16: comm syz-executor: data will be lost [ 69.300255][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 69.352718][ T7316] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 69.357314][ T7316] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 69.360482][ T7316] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3) [ 69.370083][ T7317] mmap: syz.1.603 (7317) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 69.431452][ T7322] loop3: detected capacity change from 0 to 128 [ 69.450638][ T7322] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 69.457100][ T7322] EXT4-fs error (device loop3): ext4_validate_block_bitmap:423: comm syz.3.610: bg 0: bad block bitmap checksum [ 69.457652][ T4721] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.461182][ T4721] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.462594][ T4721] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.465528][ T4721] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.467041][ T4721] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.471473][ T7322] input: syz0 as /devices/virtual/input/input7 [ 69.497577][ T7328] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input8 [ 69.530579][ T4712] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 69.812231][ T4723] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.815539][ T7345] netlink: 8 bytes leftover after parsing attributes in process `syz.3.612'. [ 69.937567][ T7361] syz.4.614: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0 [ 69.939008][ T7361] CPU: 0 UID: 0 PID: 7361 Comm: syz.4.614 Tainted: G L syzkaller #0 PREEMPT [ 69.939023][ T7361] Tainted: [L]=SOFTLOCKUP [ 69.939027][ T7361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 69.939033][ T7361] Call trace: [ 69.939036][ T7361] show_stack+0x2c/0x3c (C) [ 69.939056][ T7361] __dump_stack+0x30/0x40 [ 69.939069][ T7361] dump_stack_lvl+0xd8/0x12c [ 69.939081][ T7361] dump_stack+0x1c/0x28 [ 69.939092][ T7361] warn_alloc+0x1bc/0x1d0 [ 69.939102][ T7361] __vmalloc_node_range_noprof+0x120/0x105c [ 69.939113][ T7361] __vmalloc_node_noprof+0xec/0x14c [ 69.939124][ T7361] vmalloc_noprof+0x3c/0x4c [ 69.939135][ T7361] dvb_dmxdev_set_buffer_size+0xc8/0x1b0 [ 69.939145][ T7361] dvb_demux_do_ioctl+0x3e0/0x4bc [ 69.939154][ T7361] dvb_usercopy+0x2a4/0x4d4 [ 69.939161][ T7361] dvb_demux_ioctl+0x3c/0x54 [ 69.939170][ T7361] __arm64_sys_ioctl+0x154/0x1cc [ 69.939182][ T7361] invoke_syscall+0x98/0x244 [ 69.939195][ T7361] el0_svc_common+0xec/0x23c [ 69.939206][ T7361] do_el0_svc+0x4c/0x5c [ 69.939218][ T7361] el0_svc+0x64/0x260 [ 69.939230][ T7361] el0t_64_sync_handler+0x48/0x148 [ 69.939242][ T7361] el0t_64_sync+0x198/0x19c [ 69.939256][ T7361] Mem-Info: [ 69.939266][ T7361] active_anon:75 inactive_anon:10676 isolated_anon:24 [ 69.939266][ T7361] active_file:2638 inactive_file:4609 isolated_file:0 [ 69.939266][ T7361] unevictable:768 dirty:344 writeback:0 [ 69.939266][ T7361] slab_reclaimable:9185 slab_unreclaimable:89616 [ 69.939266][ T7361] mapped:29343 shmem:1287 pagetables:1165 [ 69.939266][ T7361] sec_pagetables:0 bounce:0 [ 69.939266][ T7361] kernel_misc_reclaimable:0 [ 69.939266][ T7361] free:1483087 free_pcp:11052 free_cma:7616 [ 69.939294][ T7361] Node 0 active_anon:300kB inactive_anon:42704kB active_file:10552kB inactive_file:18436kB unevictable:3072kB isolated(anon):96kB isolated(file):0kB mapped:117372kB dirty:1376kB writeback:0kB shmem:5148kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9800kB pagetables:4660kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 69.939320][ T7361] Node 0 DMA free:3077888kB boost:0kB min:20356kB low:25444kB high:30532kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:30464kB [ 69.939352][ T7361] lowmem_reserve[]: 0 0 3651 3651 3651 [ 69.939396][ T7361] Node 0 Normal free:2854460kB boost:0kB min:24696kB low:30868kB high:37040kB reserved_highatomic:0KB free_highatomic:0KB active_anon:300kB inactive_anon:42704kB active_file:10552kB inactive_file:18436kB unevictable:3072kB writepending:1376kB zspages:0kB present:5242880kB managed:3739372kB mlocked:0kB bounce:0kB free_pcp:44204kB local_pcp:18036kB free_cma:0kB [ 69.939428][ T7361] lowmem_reserve[]: 0 0 0 0 0 [ 69.939488][ T7361] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 1*1024kB (C) 0*2048kB 751*4096kB (MC) = 3077888kB [ 69.939617][ T7361] Node 0 Normal: 485*4kB (UME) 621*8kB (UM) 432*16kB (UM) 340*32kB (UME) 175*64kB (UME) 82*128kB (UME) 29*256kB (UM) 16*512kB (UME) 7*1024kB (UM) 2*2048kB (ME) 679*4096kB (UM) = 2854460kB [ 69.939796][ T7361] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 69.939807][ T7361] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 69.939817][ T7361] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 69.939828][ T7361] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 69.939838][ T7361] 8499 total pagecache pages [ 69.939845][ T7361] 0 pages in swap cache [ 69.939852][ T7361] Free swap = 124996kB [ 69.939859][ T7361] Total swap = 124996kB [ 69.939866][ T7361] 2097152 pages RAM [ 69.939873][ T7361] 0 pages HighMem/MovableOnly [ 69.939880][ T7361] 392261 pages reserved [ 69.939887][ T7361] 8192 pages cma reserved [ 69.939895][ T7361] 6 pages hwpoisoned [ 70.027958][ T7324] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.029273][ T7324] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.030563][ T7324] bridge_slave_0: entered allmulticast mode [ 70.032056][ T7324] bridge_slave_0: entered promiscuous mode [ 70.034001][ T7324] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.034041][ T7324] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.034105][ T7324] bridge_slave_1: entered allmulticast mode [ 70.034755][ T7324] bridge_slave_1: entered promiscuous mode [ 70.050492][ T7324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.053978][ T7324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.061236][ T7367] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 70.063754][ T7324] team0: Port device team_slave_0 added [ 70.065691][ T7324] team0: Port device team_slave_1 added [ 70.075082][ T7324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.076458][ T7324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.081696][ T7324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.084517][ T7324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.086008][ T7324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.091130][ T7324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.106576][ T7324] hsr_slave_0: entered promiscuous mode [ 70.108020][ T7324] hsr_slave_1: entered promiscuous mode [ 70.109392][ T7324] debugfs: 'hsr0' already exists in 'hsr' [ 70.110490][ T7324] Cannot create hsr debugfs directory [ 70.158260][ T7324] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 70.164306][ T7324] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 70.166297][ T7324] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 70.168568][ T7324] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 70.170296][ T7324] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 70.177743][ T7324] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 70.183266][ T7324] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 70.186371][ T7324] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 70.198983][ T7324] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.199024][ T7324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.199108][ T7324] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.199141][ T7324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.220666][ T7324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.225555][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.227220][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.233995][ T7324] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.236590][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.236614][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.242160][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.242205][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.346908][ T7402] netlink: 8 bytes leftover after parsing attributes in process `syz.2.625'. [ 70.357365][ T7402] bond0: entered allmulticast mode [ 70.424553][ T7324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.478804][ T7419] bond1: option primary_reselect: invalid value (21) [ 70.481869][ T7419] bond1 (unregistering): Released all slaves [ 70.549789][ T7324] veth0_vlan: entered promiscuous mode [ 70.553973][ T7324] veth1_vlan: entered promiscuous mode [ 70.559801][ T7324] veth0_macvtap: entered promiscuous mode [ 70.560835][ T7324] veth1_macvtap: entered promiscuous mode [ 70.571478][ T7324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.607054][ T7324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.608643][ T40] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.611507][ T40] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.617072][ T40] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.618991][ T40] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.910767][ T5440] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.912756][ T5440] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.920727][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.922349][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.944220][ T7456] loop4: detected capacity change from 0 to 512 [ 70.961732][ T7456] EXT4-fs (loop4): 1 truncate cleaned up [ 70.963426][ T7456] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.009605][ T7469] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 71.368977][ T7488] loop3: detected capacity change from 0 to 8192 [ 71.383268][ T7464] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 71.497313][ T7492] netlink: 28 bytes leftover after parsing attributes in process `syz.3.650'. [ 71.543836][ T4718] Bluetooth: hci3: command tx timeout [ 71.573209][ T7502] netlink: 'syz.2.652': attribute type 1 has an invalid length. [ 71.718413][ T7502] 8021q: adding VLAN 0 to HW filter on device bond1 [ 71.725858][ T7504] bond1: (slave geneve2): making interface the new active one [ 71.728428][ T7504] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 71.771562][ T7511] loop3: detected capacity change from 0 to 128 [ 71.818141][ T4723] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.845727][ T7509] netlink: 56 bytes leftover after parsing attributes in process `syz.5.654'. [ 71.878155][ T7511] bond0: (slave bond_slave_1): Releasing backup interface [ 71.917869][ T7515] Injecting memory failure for pfn 0x11e67a at process virtual address 0x20001000 [ 71.952134][ T7515] Memory failure: 0x11e67a: Sending SIGBUS to syz.5.654:7515 due to hardware memory corruption [ 71.952930][ T7515] Memory failure: 0x11e67a: recovery action for dirty LRU page: Recovered [ 71.952980][ T7515] Injecting memory failure for pfn 0x133e7b at process virtual address 0x20002000 [ 71.961470][ T7515] Memory failure: 0x133e7b: recovery action for clean LRU page: Recovered [ 71.964049][ T7515] Injecting memory failure for pfn 0x13493e at process virtual address 0x20003000 [ 71.966094][ T7515] Memory failure: 0x13493e: recovery action for clean LRU page: Recovered [ 72.324666][ T7552] loop2: detected capacity change from 0 to 512 [ 72.326303][ T7552] EXT4-fs: Ignoring removed i_version option [ 72.327787][ T7552] EXT4-fs: Ignoring removed bh option [ 72.337688][ T7552] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.665: inode #13: comm syz.2.665: iget: illegal inode # [ 72.337721][ T7552] loop2: lost filesystem error report for type 5 error -117 [ 72.340258][ T7552] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.665: couldn't read orphan inode 13 (err -117) [ 72.340297][ T7552] loop2: lost filesystem error report for type 5 error -117 [ 72.344056][ C0] EXT4-fs (loop2): error count since last fsck: 2 [ 72.344069][ C0] EXT4-fs (loop2): initial error at time 72: ext4_orphan_get:1399 [ 72.344085][ C0] EXT4-fs (loop2): last error at time 72: ext4_orphan_get:1404 [ 72.357636][ T7552] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.361736][ T7551] vhci_hcd vhci_hcd.3: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 72.377154][ T7556] random: crng reseeded on system resumption [ 72.385485][ T4714] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.444326][ T7568] Unable to extract alua_access_type [ 72.444397][ T7567] Unable to extract alua_access_type [ 72.501580][ T7581] FAT-fs (loop2): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 72.501612][ T7581] FAT-fs (loop2): Filesystem has been set read-only [ 72.686022][ T7591] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 72.686042][ T7591] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 72.686707][ T7591] vhci_hcd vhci_hcd.0: Device attached [ 72.796268][ T7591] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 73.213928][ T26] usb 12-1: new low-speed USB device number 2 using vhci_hcd [ 73.427230][ T7592] vhci_hcd: connection reset by peer [ 73.434124][ T3762] vhci_hcd vhci_hcd.5: stop threads [ 73.435741][ T3762] vhci_hcd vhci_hcd.5: release socket [ 73.437610][ T3762] vhci_hcd vhci_hcd.5: disconnect device [ 73.622859][ T4718] Bluetooth: hci3: command tx timeout [ 73.629665][ T7597] netlink: 8 bytes leftover after parsing attributes in process `syz.3.678'. [ 73.629702][ T7597] netlink: 'syz.3.678': attribute type 10 has an invalid length. [ 73.629719][ T7597] netlink: 12 bytes leftover after parsing attributes in process `syz.3.678'. [ 73.631313][ T7597] geneve2: entered promiscuous mode [ 73.631325][ T7597] geneve2: entered allmulticast mode [ 73.678882][ T7610] set_capacity_and_notify: 3 callbacks suppressed [ 73.680349][ T7610] loop3: detected capacity change from 0 to 512 [ 73.715447][ T7610] EXT4-fs (loop3): 1 truncate cleaned up [ 73.715904][ T7610] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.749141][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.762247][ T7618] loop4: detected capacity change from 0 to 256 [ 73.866416][ T30] audit: type=1326 audit(73.840:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7625 comm="syz.4.687" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e77a168 code=0x0 [ 73.959668][ T7632] loop2: detected capacity change from 0 to 128 [ 73.971706][ T7631] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 73.980473][ T7631] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 74.006478][ T7634] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 74.023536][ T7324] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 74.056436][ T7634] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 74.095537][ T7634] bond0 (unregistering): Released all slaves [ 74.139270][ T7641] loop2: detected capacity change from 0 to 512 [ 74.142508][ T7641] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 74.147333][ T7641] EXT4-fs (loop2): 1 truncate cleaned up [ 74.149915][ T7641] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.251763][ T4714] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.331414][ T7650] FAULT_INJECTION: forcing a failure. [ 74.331414][ T7650] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 74.331448][ T7650] CPU: 0 UID: 0 PID: 7650 Comm: syz.5.690 Tainted: G L syzkaller #0 PREEMPT [ 74.331465][ T7650] Tainted: [L]=SOFTLOCKUP [ 74.331469][ T7650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 74.331475][ T7650] Call trace: [ 74.331479][ T7650] show_stack+0x2c/0x3c (C) [ 74.331497][ T7650] __dump_stack+0x30/0x40 [ 74.331508][ T7650] dump_stack_lvl+0xd8/0x12c [ 74.331518][ T7650] dump_stack+0x1c/0x28 [ 74.331528][ T7650] should_fail_ex+0x41c/0x590 [ 74.331539][ T7650] should_fail+0x14/0x24 [ 74.331548][ T7650] should_fail_usercopy+0x20/0x30 [ 74.331558][ T7650] _copy_from_iter+0x188/0x1064 [ 74.331566][ T7650] kernfs_fop_write_iter+0x17c/0x3b8 [ 74.331576][ T7650] vfs_write+0x51c/0xa0c [ 74.331584][ T7650] ksys_write+0x12c/0x228 [ 74.331590][ T7650] __arm64_sys_write+0x84/0x98 [ 74.331597][ T7650] invoke_syscall+0x98/0x244 [ 74.331607][ T7650] el0_svc_common+0xec/0x23c [ 74.331616][ T7650] do_el0_svc+0x4c/0x5c [ 74.331625][ T7650] el0_svc+0x64/0x260 [ 74.331636][ T7650] el0t_64_sync_handler+0x48/0x148 [ 74.331645][ T7650] el0t_64_sync+0x198/0x19c [ 74.422606][ T7654] netlink: 48 bytes leftover after parsing attributes in process `syz.4.696'. [ 74.430475][ T7655] loop4: detected capacity change from 0 to 1024 [ 74.458329][ T7653] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 74.458352][ T7653] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 74.462113][ T7653] vhci_hcd vhci_hcd.0: Device attached [ 74.463651][ T7656] vhci_hcd: cannot find a urb of seqnum 6 max seqnum 1 [ 74.465765][ T3762] vhci_hcd vhci_hcd.5: stop threads [ 74.465787][ T3762] vhci_hcd vhci_hcd.5: release socket [ 74.465820][ T3762] vhci_hcd vhci_hcd.5: disconnect device [ 74.472591][ T7655] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.554027][ T7670] loop3: detected capacity change from 0 to 256 [ 74.594718][ T4723] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.677002][ T7679] loop4: detected capacity change from 0 to 4096 [ 74.685721][ T7679] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.692478][ T7679] EXT4-fs (loop4): shut down requested (2) [ 74.711532][ T4723] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.730560][ T7685] loop2: detected capacity change from 0 to 256 [ 74.730862][ T7685] vfat: Unknown parameter 'iochaRset' [ 74.788322][ T7696] binder: 7684:7696 tried to acquire reference to desc 0, got 1 instead [ 74.789736][ T7696] binder: 7684:7696 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 74.850980][ T7700] binder: 7698:7700 tried to acquire reference to desc 0, got 1 instead [ 74.852618][ T7702] FAULT_INJECTION: forcing a failure. [ 74.852618][ T7702] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 74.852635][ T7702] CPU: 0 UID: 0 PID: 7702 Comm: syz.4.706 Tainted: G L syzkaller #0 PREEMPT [ 74.852646][ T7702] Tainted: [L]=SOFTLOCKUP [ 74.852650][ T7702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 74.852654][ T7702] Call trace: [ 74.852657][ T7702] show_stack+0x2c/0x3c (C) [ 74.852675][ T7702] __dump_stack+0x30/0x40 [ 74.852686][ T7702] dump_stack_lvl+0xd8/0x12c [ 74.852695][ T7702] dump_stack+0x1c/0x28 [ 74.852705][ T7702] should_fail_ex+0x41c/0x590 [ 74.852722][ T7702] should_fail+0x14/0x24 [ 74.852731][ T7702] should_fail_usercopy+0x20/0x30 [ 74.852742][ T7702] simple_read_from_buffer+0xc4/0x238 [ 74.852753][ T7702] proc_fail_nth_read+0x1a8/0x248 [ 74.852764][ T7702] vfs_read+0x230/0x8c8 [ 74.852775][ T7702] ksys_read+0x12c/0x228 [ 74.852782][ T7702] __arm64_sys_read+0x84/0x98 [ 74.852789][ T7702] invoke_syscall+0x98/0x244 [ 74.852800][ T7702] el0_svc_common+0xec/0x23c [ 74.852809][ T7702] do_el0_svc+0x4c/0x5c [ 74.852819][ T7702] el0_svc+0x64/0x260 [ 74.852830][ T7702] el0t_64_sync_handler+0x48/0x148 [ 74.852839][ T7702] el0t_64_sync+0x198/0x19c [ 74.857212][ T7700] binder: 7698:7700 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 74.857230][ T7700] binder: 7700 RLIMIT_NICE not set [ 74.857307][ T7700] binder: 7700 RLIMIT_NICE not set [ 74.859701][ T7700] binder: release 7698:7700 transaction 40 out, still active [ 74.859720][ T7700] binder: release 7698:7700 transaction 33 in, still active [ 74.859734][ T7700] binder: undelivered TRANSACTION_COMPLETE [ 74.860361][ T7700] binder: 7700 RLIMIT_NICE not set [ 74.861503][ T7700] binder: release 7698:7700 transaction 40 in, still active [ 74.861516][ T7700] binder: release 7698:7700 transaction 33 out, still active [ 74.861526][ T7700] binder: send failed reply for transaction 40, target dead [ 74.861540][ T7700] binder: send failed reply for transaction 33, target dead [ 74.928153][ T7709] binder: 7708:7709 tried to acquire reference to desc 0, got 1 instead [ 74.929305][ T10] binder: release 7708:7709 transaction 45 out, still active [ 74.929322][ T10] binder: undelivered TRANSACTION_COMPLETE [ 74.938826][ T10] binder: send failed reply for transaction 45, target dead [ 75.030601][ T7724] loop4: detected capacity change from 0 to 256 [ 75.035465][ T7724] vfat: Unknown parameter 'nnonumtail' [ 75.110417][ T7727] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 75.116239][ T7727] team0 (unregistering): Port device team_slave_0 removed [ 75.124661][ T7727] team0 (unregistering): Failed to send options change via netlink (err -105) [ 75.128466][ T7727] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 75.131281][ T7727] team0 (unregistering): Port device team_slave_1 removed [ 75.159952][ T7730] loop4: detected capacity change from 0 to 2048 [ 75.188857][ T7730] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.208189][ T7736] netlink: 4 bytes leftover after parsing attributes in process `syz.2.719'. [ 75.220658][ T7730] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 75.222285][ T7730] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 482 with error 28 [ 75.222301][ T7730] EXT4-fs (loop4): This should not happen!! Data will be lost [ 75.222301][ T7730] [ 75.222310][ T7730] EXT4-fs (loop4): Total free blocks count 0 [ 75.222317][ T7730] EXT4-fs (loop4): Free/Dirty block details [ 75.222328][ T7730] EXT4-fs (loop4): free_blocks=4096 [ 75.222337][ T7730] EXT4-fs (loop4): dirty_blocks=512 [ 75.222344][ T7730] EXT4-fs (loop4): Block reservation details [ 75.222350][ T7730] EXT4-fs (loop4): i_reserved_data_blocks=32 [ 75.243910][ T5440] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 16 with error 28 [ 75.245814][ T4723] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 75.262296][ T7738] bridge1: entered promiscuous mode [ 75.263541][ T7738] bridge1: entered allmulticast mode [ 75.266332][ T7738] netlink: 'syz.2.720': attribute type 21 has an invalid length. [ 75.267875][ T7738] netlink: 132 bytes leftover after parsing attributes in process `syz.2.720'. [ 75.269557][ T7738] netlink: 'syz.2.720': attribute type 1 has an invalid length. [ 75.405445][ T7745] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.407650][ T7745] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.723: corrupted xattr block 6: invalid header [ 75.411398][ T7745] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.723: corrupted xattr block 6: invalid header [ 75.413105][ T7745] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.723: corrupted xattr block 6: invalid header [ 75.415202][ T7745] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.723: corrupted xattr block 6: invalid header [ 75.667989][ T7745] bridge1: entered promiscuous mode [ 75.668022][ T7745] bridge1: entered allmulticast mode [ 75.674245][ T7745] netlink: 'syz.4.723': attribute type 1 has an invalid length. [ 75.703712][ T4718] Bluetooth: hci3: command tx timeout [ 75.718113][ T4723] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.829729][ T7762] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.870285][ T4723] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.981027][ T7770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.731'. [ 76.218125][ T7783] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8 [ 76.221948][ T7784] i2c i2c-0: delete_device: Can't parse I2C address [ 76.224371][ T7783] i2c i2c-0: delete_device: Can't parse I2C address [ 76.246432][ T7778] Injecting memory failure for pfn 0x133c01 at process virtual address 0x20001000 [ 76.259020][ T7778] Memory failure: 0x133c01: Sending SIGBUS to syz.3.733:7778 due to hardware memory corruption [ 76.259078][ T7778] Memory failure: 0x133c01: recovery action for unsplit thp: Failed [ 76.282156][ T7788] input: syz1 as /devices/virtual/input/input10 [ 76.458296][ T7799] syzkaller1: entered promiscuous mode [ 76.459366][ T7799] syzkaller1: entered allmulticast mode [ 76.578206][ T7805] netlink: 24 bytes leftover after parsing attributes in process `syz.2.743'. [ 76.582601][ T7804] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 76.637031][ T7804] netlink: 76 bytes leftover after parsing attributes in process `syz.3.744'. [ 76.640026][ T7804] EXT4-fs: Ignoring removed nomblk_io_submit option [ 76.640311][ T7804] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 76.643894][ T7804] EXT4-fs (loop3): 1 truncate cleaned up [ 76.644334][ T7804] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.738446][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.925925][ T7824] netlink: 48 bytes leftover after parsing attributes in process `syz.2.748'. [ 77.061379][ T7823] EXT4-fs (loop5): Test dummy encryption mode enabled [ 77.065925][ T7823] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.750: inode has both inline data and extents flags [ 77.065958][ T7823] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 77.068742][ T7823] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.750: couldn't read orphan inode 15 (err -117) [ 77.068772][ T7823] loop5: lost filesystem error report for type 5 error -117 [ 77.072818][ C0] EXT4-fs (loop5): error count since last fsck: 2 [ 77.072841][ C0] EXT4-fs (loop5): initial error at time 77: ext4_orphan_get:1399: inode 15 [ 77.072882][ C0] EXT4-fs (loop5): last error at time 77: ext4_orphan_get:1404 [ 77.080264][ T7823] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.198648][ T7838] binder: 7837:7838 tried to acquire reference to desc 0, got 1 instead [ 77.206709][ T7838] binder: 7837:7838 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 77.290227][ T7324] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.296308][ T7849] nfs: Unknown parameter 'smackfstransmuteC' [ 77.374727][ T7857] siw: device registration error -23 [ 77.386622][ T7860] random: crng reseeded on system resumption [ 77.406686][ T7860] netlink: 'syz.3.762': attribute type 4 has an invalid length. [ 77.415141][ T7864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.415338][ T7864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.752360][ T7872] syzkaller1: entered promiscuous mode [ 77.752401][ T7872] syzkaller1: entered allmulticast mode [ 77.783570][ T4718] Bluetooth: hci3: command tx timeout [ 77.800400][ T7880] netlink: 36 bytes leftover after parsing attributes in process `syz.5.767'. [ 77.893454][ T7885] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 77.898947][ T7885] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 78.296827][ T7898] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 78.306135][ T7898] EXT4-fs (loop4): 1 truncate cleaned up [ 78.306562][ T7898] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.334830][ T26] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 78.334924][ T4723] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.406288][ T7912] vfat: Unknown parameter 'rodiñ' [ 79.320814][ T7929] trusted_key: encrypted_key: insufficient parameters specified [ 79.514824][ T7937] syzkaller0: entered promiscuous mode [ 79.514898][ T7937] syzkaller0: entered allmulticast mode [ 79.736275][ T7934] set_capacity_and_notify: 9 callbacks suppressed [ 79.736286][ T7934] loop2: detected capacity change from 0 to 8192 [ 80.001490][ T7940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.001782][ T7940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.017883][ T7934] loop2: p1 p3 p4 [ 80.017913][ T7934] loop2: partition table partially beyond EOD, truncated [ 80.018015][ T7934] loop2: p1 start 393225 is beyond EOD, truncated [ 80.018037][ T7934] loop2: p3 start 16777216 is beyond EOD, truncated [ 80.018057][ T7934] loop2: p4 start 4294967295 is beyond EOD, truncated [ 80.127579][ T7951] fuse: Bad value for 'fd' [ 80.157848][ T30] audit: type=1400 audit(80.130:6): lsm=SMACK fn=smack_inode_setattr action=denied subject="w" object="_" requested=w pid=7950 comm="syz.5.788" name=6D656D66643A791035FBF77583253A72C2B978A471C1EA5F8C5A37E7619B11780EA1CF1A985337C9 dev="hugetlbfs" ino=18614 [ 80.163121][ T30] audit: type=1400 audit(80.140:7): lsm=SMACK fn=smack_key_permission action=denied subject="w" object="_" requested=w pid=7950 comm="syz.5.788" key_serial=804081597 key_desc="_uid_ses.0" [ 80.463107][ T7956] loop5: detected capacity change from 0 to 2048 [ 80.463447][ T7956] ext4: Unknown parameter 'defcontext' [ 80.571074][ T7964] loop3: detected capacity change from 0 to 256 [ 80.572135][ T7964] vfat: Bad value for 'uid' [ 80.572145][ T7964] vfat: Bad value for 'uid' [ 80.871373][ T7966] can0: slcan on ttyS3. [ 80.913475][ T7973] __nla_validate_parse: 2 callbacks suppressed [ 80.913506][ T7973] netlink: 28 bytes leftover after parsing attributes in process `syz.4.794'. [ 80.924102][ T7967] can0 (unregistered): slcan off ttyS3. [ 80.932138][ T7973] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.937123][ T7973] bridge_slave_1: left allmulticast mode [ 80.937154][ T7973] bridge_slave_1: left promiscuous mode [ 80.937249][ T7973] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.960478][ T7973] netlink: 8 bytes leftover after parsing attributes in process `syz.4.794'. [ 80.982057][ T7978] loop3: detected capacity change from 0 to 256 [ 81.260223][ T8000] loop2: detected capacity change from 0 to 512 [ 81.261451][ T8000] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (1966!=2687) [ 81.261466][ T8000] EXT4-fs (loop2): group descriptors corrupted! [ 81.435265][ T8013] veth2: entered allmulticast mode [ 81.629477][ T8015] ip6erspan0: entered allmulticast mode [ 81.664974][ T8017] loop3: detected capacity change from 0 to 256 [ 81.665455][ T8017] vfat: Bad value for 'uid' [ 81.665463][ T8017] vfat: Bad value for 'uid' [ 81.760484][ T30] audit: type=1326 audit(81.730:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8021 comm="syz.3.808" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8db7a168 code=0x7ffe0000 [ 82.002895][ T4718] Bluetooth: hci3: Unable to find connection for big 0x00 [ 82.184599][ T8029] loop2: detected capacity change from 0 to 256 [ 82.355099][ T8038] netlink: 84 bytes leftover after parsing attributes in process `syz.2.814'. [ 82.589731][ T8053] loop5: detected capacity change from 0 to 512 [ 82.592476][ T8053] EXT4-fs: Ignoring removed i_version option [ 82.596040][ T8053] EXT4-fs: Ignoring removed bh option [ 82.677168][ T8053] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.685834][ T8053] EXT4-fs error (device loop5): ext4_resize_begin:60: comm syz.5.820: resize_inode disabled but reserved GDT blocks non-zero [ 82.724697][ T8066] netlink: 20 bytes leftover after parsing attributes in process `syz.3.821'. [ 82.725128][ T7324] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.757009][ T8073] loop5: detected capacity change from 0 to 256 [ 82.784125][ T8077] netlink: 24 bytes leftover after parsing attributes in process `syz.3.825'. [ 82.788472][ T8077] ip6erspan0: entered allmulticast mode [ 82.839271][ T8081] netlink: 'syz.5.826': attribute type 1 has an invalid length. [ 82.883067][ T8081] bond1: entered promiscuous mode [ 82.884345][ T8081] 8021q: adding VLAN 0 to HW filter on device bond1 [ 82.932678][ T8091] ip6erspan0: entered allmulticast mode [ 82.977124][ T8094] nfs: Bad value for 'port' [ 83.049435][ T8101] evm: overlay not supported [ 83.199935][ T8118] loop5: detected capacity change from 0 to 256 [ 83.478702][ T8134] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 83.891531][ T8156] netlink: 12 bytes leftover after parsing attributes in process `syz.4.850'. [ 83.906707][ T8158] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.984420][ T8167] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.992024][ T8167] overlayfs: failed to resolve './bus': -2 [ 84.036345][ T4723] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.060797][ T8173] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.617641][ T8183] netlink: 8 bytes leftover after parsing attributes in process `syz.1.857'. [ 84.779028][ T8195] netlink: 20 bytes leftover after parsing attributes in process `syz.4.861'. [ 84.842691][ T8200] set_capacity_and_notify: 5 callbacks suppressed [ 84.849045][ T8200] loop5: detected capacity change from 0 to 2048 [ 84.934029][ T8200] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.947562][ T8221] fuse: Bad value for 'fd' [ 84.959945][ T8200] EXT4-fs error (device loop5): __ext4_new_inode:1081: comm syz.5.862: reserved inode found cleared - inode=1 [ 85.236990][ T8228] netlink: 'syz.5.862': attribute type 10 has an invalid length. [ 85.241679][ T8228] syz_tun: entered promiscuous mode [ 85.265404][ T8230] fuse: Bad value for 'fd' [ 85.267751][ T8228] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 85.291791][ T8232] loop3: detected capacity change from 0 to 1024 [ 85.293426][ T8232] EXT4-fs: Ignoring removed i_version option [ 85.296254][ T5449] bond0: (slave bond_slave_0): interface is now down [ 85.296291][ T5449] bond0: (slave bond_slave_1): interface is now down [ 85.296303][ T5449] bond0: (slave syz_tun): interface is now down [ 85.308323][ T4714] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.312997][ T5449] bond0: (slave bond_slave_0): interface is now down [ 85.313506][ T5449] bond0: (slave bond_slave_1): interface is now down [ 85.313522][ T5449] bond0: (slave syz_tun): interface is now down [ 85.318763][ T8232] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 85.324513][ T5449] bond0: now running without any active interface! [ 85.338271][ T8232] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.874: corrupted xattr block 128: overlapping e_value [ 85.342973][ T8232] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.874: corrupted xattr block 128: overlapping e_value [ 85.345767][ T8232] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.874: corrupted xattr block 128: overlapping e_value [ 85.377664][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 85.412296][ T8244] overlay: Unknown parameter 'context' [ 85.504625][ T8250] binder_user_error: 3 callbacks suppressed [ 85.504871][ T8250] binder: 8249:8250 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 85.900255][ T8280] loop2: detected capacity change from 0 to 2048 [ 85.934087][ T8280] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.947027][ T8280] EXT4-fs error (device loop2): __ext4_new_inode:1081: comm syz.2.888: reserved inode found cleared - inode=1 [ 85.954959][ T8280] bond0: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 85.963511][ T8280] netlink: 'syz.2.888': attribute type 10 has an invalid length. [ 85.975532][ T8285] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:20004 [ 85.979256][ T8280] syz_tun: entered promiscuous mode [ 85.997588][ T8280] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 86.125345][ T8301] netlink: 'syz.1.892': attribute type 10 has an invalid length. [ 86.125375][ T8301] netlink: 40 bytes leftover after parsing attributes in process `syz.1.892'. [ 86.125455][ T8301] erspan0: entered promiscuous mode [ 86.901709][ T8328] loop3: detected capacity change from 0 to 256 [ 86.966907][ T8332] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 87.009372][ T8334] netlink: 'syz.2.904': attribute type 3 has an invalid length. [ 87.067866][ T8337] loop4: detected capacity change from 0 to 256 [ 87.087526][ T8337] vcan0: tx drop: invalid sa for name 0xfffffffffffffffc [ 87.354650][ T8062] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 88.016124][ T8347] loop4: detected capacity change from 0 to 256 [ 88.722962][ T8382] loop3: detected capacity change from 0 to 128 [ 88.839381][ T8382] overlay: filesystem on ./bus not supported [ 89.008933][ T8385] fuse: Unknown parameter 'ÉJ²øÃK’fd' [ 89.029482][ T8385] loop4: detected capacity change from 0 to 4096 [ 89.032001][ T8385] EXT4-fs: inline encryption not supported [ 89.034685][ T8385] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 89.034707][ T8385] EXT4-fs (loop4): Test dummy encryption mode enabled [ 89.036069][ T8385] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 89.036103][ T8385] System zones: 0-5 [ 89.036969][ T8385] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.057579][ T8385] overlay: Unknown parameter 'rootcontext' [ 89.165821][ T4723] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.268557][ T8408] netlink: 16 bytes leftover after parsing attributes in process `syz.2.930'. [ 89.288943][ T8415] loop4: detected capacity change from 0 to 256 [ 89.289340][ T8415] vfat: Bad value for 'uid' [ 89.289348][ T8415] vfat: Bad value for 'uid' [ 89.709674][ T8062] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 89.821647][ T8457] loop4: detected capacity change from 0 to 512 [ 89.827003][ T8457] journal_path: Non-blockdev passed as './file0' [ 89.827037][ T8457] EXT4-fs: error: could not find journal device path [ 90.006185][ T8463] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 90.006229][ T8463] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.076916][ T8471] netlink: 16 bytes leftover after parsing attributes in process `syz.3.949'. [ 90.107212][ T8463] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 90.109593][ T8463] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.165655][ T8463] bond0: (slave netdevsim1): Releasing backup interface [ 90.167057][ T8475] loop3: detected capacity change from 0 to 1024 [ 90.167723][ T8475] EXT4-fs: Ignoring removed mblk_io_submit option [ 90.168479][ T8475] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 90.168866][ T8475] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 90.175673][ T8475] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #11: comm syz.3.951: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 90.175708][ T8475] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 90.175836][ T8475] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.951: couldn't read orphan inode 11 (err -117) [ 90.175849][ T8475] loop3: lost filesystem error report for type 5 error -117 [ 90.176360][ T8475] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.181661][ T8475] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.951: Invalid block bitmap block 0 in block_group 0 [ 90.190355][ T8475] Quota error (device loop3): write_blk: dquota write failed [ 90.190376][ T8475] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 90.190407][ T8475] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.951: Failed to acquire dquot type 0 [ 90.191629][ T8475] EXT4-fs error (device loop3): ext4_read_inode_bitmap:141: comm syz.3.951: Invalid inode bitmap blk 137438953472 in block_group 0 [ 90.204316][ T8463] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 90.204357][ T8463] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.209428][ T3762] EXT4-fs error (device loop3): __ext4_get_inode_loc:4886: comm kworker/u8:10: Invalid inode table block 8589934593 in block_group 0 [ 90.214863][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.256626][ T8484] loop3: detected capacity change from 0 to 1024 [ 90.256925][ T8484] EXT4-fs: inline encryption not supported [ 90.258782][ T8484] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 90.258850][ T8484] EXT4-fs (loop3): stripe (7) is not aligned with cluster size (4096), stripe is disabled [ 90.270277][ T8484] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 90.270403][ T8484] EXT4-fs (loop3): orphan cleanup on readonly fs [ 90.270680][ T8484] EXT4-fs error (device loop3): ext4_quota_enable:7228: comm syz.3.953: Bad quota inum: 9, type: 2 [ 90.270706][ T8484] loop3: lost filesystem error report for type 5 error -117 [ 90.270893][ T8484] EXT4-fs (loop3): Remounting filesystem read-only [ 90.270910][ T8484] EXT4-fs warning (device loop3): ext4_enable_quotas:7276: Failed to enable quota tracking (type=2, err=-117, ino=9). Please run e2fsck to fix. [ 90.270968][ T8484] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 90.271438][ T8484] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 90.285665][ T8463] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 90.285705][ T8463] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.297208][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.399595][ T8491] loop4: detected capacity change from 0 to 8192 [ 90.407940][ T39] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.407982][ T39] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.408037][ T39] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.408051][ T39] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.409714][ T8491] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 90.419923][ T5449] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.420398][ T5449] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.423612][ T3762] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.423635][ T3762] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.443635][ T8493] loop3: detected capacity change from 0 to 256 [ 90.445876][ T8493] vfat: Bad value for 'uid' [ 90.445906][ T8493] vfat: Bad value for 'uid' [ 90.472240][ T8495] loop4: detected capacity change from 0 to 512 [ 90.476822][ T8495] EXT4-fs (loop4): Test dummy encryption mode enabled [ 90.484845][ T8495] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e064e09d, mo2=0002] [ 90.484900][ T8495] System zones: 1-12 [ 90.488510][ T8495] EXT4-fs (loop4): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.499543][ T8495] netlink: 28 bytes leftover after parsing attributes in process `syz.4.957'. [ 90.511465][ T4723] EXT4-fs (loop4): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 90.623086][ T4382] hid-generic 0000:FFFFFFFE:0800.0001: unknown main item tag 0x0 [ 90.623117][ T4382] hid-generic 0000:FFFFFFFE:0800.0001: unknown main item tag 0x0 [ 90.625952][ T8508] netlink: 56 bytes leftover after parsing attributes in process `syz.4.961'. [ 90.634792][ T4382] hid-generic 0000:FFFFFFFE:0800.0001: hidraw0: HID v0.02 Device [syz1] on syz1 [ 90.675998][ T8511] fido_id[8511]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 90.685106][ T8515] loop4: detected capacity change from 0 to 1024 [ 90.687717][ T8515] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 90.689703][ T8515] EXT4-fs (loop4): The Hurd can't support 64-bit file systems [ 90.726866][ T8519] loop4: detected capacity change from 0 to 128 [ 90.732701][ T8519] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 90.762445][ T4723] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 90.782573][ T8527] loop4: detected capacity change from 0 to 128 [ 90.784802][ T8527] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 90.787795][ T8527] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 90.797805][ T8527] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 90.797831][ T8527] FAT-fs (loop4): Filesystem has been set read-only [ 90.851835][ T8531] loop3: detected capacity change from 0 to 256 [ 90.858052][ T8531] vfat: Bad value for 'uid' [ 90.862826][ T8531] vfat: Bad value for 'uid' [ 90.888812][ T8539] netlink: 80 bytes leftover after parsing attributes in process `syz.5.970'. [ 90.917034][ T8542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.919239][ T8542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.935872][ T4723] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 91.021796][ T8549] loop3: detected capacity change from 0 to 256 [ 91.186751][ T8559] overlayfs: missing 'lowerdir' [ 91.553251][ T8573] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 91.553278][ T8573] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 91.553342][ T8573] vhci_hcd vhci_hcd.0: Device attached [ 91.556118][ T8572] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.822948][ T24] usb 12-1: new low-speed USB device number 3 using vhci_hcd [ 91.965718][ T8597] netlink: 88 bytes leftover after parsing attributes in process `syz.1.989'. [ 92.025764][ T8601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.991'. [ 92.256579][ T8574] vhci_hcd: connection reset by peer [ 92.287894][ T3762] vhci_hcd vhci_hcd.5: stop threads [ 92.289144][ T3762] vhci_hcd vhci_hcd.5: release socket [ 92.290427][ T3762] vhci_hcd vhci_hcd.5: disconnect device [ 92.690129][ T8614] netlink: 80 bytes leftover after parsing attributes in process `syz.2.994'. [ 92.690164][ T8614] tipc: Enabling of bearer rejected, already enabled [ 92.883698][ T867] Process accounting resumed [ 92.995413][ T8642] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 93.032745][ T8636] Process accounting resumed [ 93.118760][ T8653] EXT4-fs: Ignoring removed bh option [ 93.121084][ T8653] EXT4-fs: Conflicting test_dummy_encryption options [ 93.127134][ T8653] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1007'. [ 93.138024][ T8653] bond0: entered allmulticast mode [ 93.138200][ T8653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.187724][ T8663] 9p: Bad value for 'rfdno' [ 93.262965][ T4401] : left promiscuous mode [ 93.278298][ T867] : entered promiscuous mode [ 93.326474][ T8669] Injecting memory failure for pfn 0x147a01 at process virtual address 0x20001000 [ 93.330250][ T8669] Memory failure: 0x147a01: Sending SIGBUS to syz.4.1010:8669 due to hardware memory corruption [ 93.330305][ T8669] Memory failure: 0x147a01: recovery action for unsplit thp: Failed [ 93.523941][ T8686] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.540255][ T8686] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #15: comm syz.3.1012: corrupted inode contents [ 93.549248][ T8686] EXT4-fs error (device loop3): ext4_dirty_inode:6639: inode #15: comm syz.3.1012: mark_inode_dirty error [ 93.559855][ T8686] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #15: comm syz.3.1012: corrupted inode contents [ 93.563422][ T8686] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #15: comm syz.3.1012: mark_inode_dirty error [ 93.566427][ T8686] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #15: comm syz.3.1012: corrupted inode contents [ 93.569093][ T8686] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #15: comm syz.3.1012: mark_inode_dirty error [ 93.569306][ T8686] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #15: comm syz.3.1012: corrupted inode contents [ 93.575619][ T8686] EXT4-fs error (device loop3): ext4_truncate:4691: inode #15: comm syz.3.1012: mark_inode_dirty error [ 93.581976][ T8686] EXT4-fs error (device loop3) in ext4_setattr:6172: Corrupt filesystem [ 93.603973][ T8693] netlink: 'syz.4.1013': attribute type 10 has an invalid length. [ 94.331386][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.423100][ T8719] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 94.498160][ T8720] [ 94.498539][ T8720] ====================================================== [ 94.499696][ T8720] WARNING: possible circular locking dependency detected [ 94.501082][ T8720] syzkaller #0 Tainted: G L [ 94.502254][ T8720] ------------------------------------------------------ [ 94.503525][ T8720] syz.3.1020/8720 is trying to acquire lock: [ 94.504656][ T8720] ffff0000c99a4c18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x170/0x2dc [ 94.506475][ T8720] [ 94.506475][ T8720] but task is already holding lock: [ 94.507793][ T8720] ffff0000e01280c0 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x32c/0x828 [ 94.509669][ T8720] [ 94.509669][ T8720] which lock already depends on the new lock. [ 94.509669][ T8720] [ 94.511613][ T8720] [ 94.511613][ T8720] the existing dependency chain (in reverse order) is: [ 94.513223][ T8720] [ 94.513223][ T8720] -> #1 (&ei->xattr_sem){++++}-{4:4}: [ 94.514604][ T8720] down_write+0x50/0xc0 [ 94.515459][ T8720] ext4_destroy_inline_data+0x30/0x114 [ 94.516536][ T8720] ext4_do_writepages+0x3e4/0x3bc0 [ 94.517715][ T8720] ext4_writepages+0x198/0x2dc [ 94.518831][ T8720] do_writepages+0x284/0x47c [ 94.519868][ T8720] __writeback_single_inode+0x140/0x1880 [ 94.521113][ T8720] writeback_sb_inodes+0x798/0x1720 [ 94.522196][ T8720] wb_writeback+0x3bc/0x10cc [ 94.523152][ T8720] wb_workfn+0x318/0xda8 [ 94.524047][ T8720] process_scheduled_works+0x788/0x10b8 [ 94.525164][ T8720] worker_thread+0x798/0xbd0 [ 94.526032][ T8720] kthread+0x304/0x3d4 [ 94.526853][ T8720] ret_from_fork+0x10/0x20 [ 94.527687][ T8720] [ 94.527687][ T8720] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 94.529157][ T8720] __lock_acquire+0x17c0/0x2ebc [ 94.530087][ T8720] lock_acquire+0x140/0x364 [ 94.530975][ T8720] percpu_down_read_internal+0x5c/0x294 [ 94.532037][ T8720] ext4_writepages+0x170/0x2dc [ 94.532963][ T8720] do_writepages+0x284/0x47c [ 94.533890][ T8720] __writeback_single_inode+0x140/0x1880 [ 94.534991][ T8720] writeback_single_inode+0x400/0xb20 [ 94.536005][ T8720] write_inode_now+0x170/0x208 [ 94.536951][ T8720] iput+0x7cc/0xc2c [ 94.537692][ T8720] ext4_xattr_block_set+0x1b1c/0x21e8 [ 94.538697][ T8720] ext4_expand_extra_isize_ea+0xaf4/0x1384 [ 94.539760][ T8720] __ext4_expand_extra_isize+0x2a4/0x378 [ 94.540811][ T8720] __ext4_mark_inode_dirty+0x394/0x828 [ 94.541839][ T8720] ext4_evict_inode+0x798/0xfb8 [ 94.542765][ T8720] evict+0x4c0/0x74c [ 94.543511][ T8720] iput+0x8f0/0xc2c [ 94.544261][ T8720] ext4_process_orphan+0x24c/0x2c0 [ 94.545245][ T8720] ext4_orphan_cleanup+0x7d4/0xd20 [ 94.546227][ T8720] ext4_fill_super+0x4628/0x4e14 [ 94.547188][ T8720] get_tree_bdev_flags+0x388/0x43c [ 94.548170][ T8720] get_tree_bdev+0x2c/0x3c [ 94.549036][ T8720] ext4_get_tree+0x28/0x38 [ 94.549913][ T8720] vfs_get_tree+0x90/0x28c [ 94.550741][ T8720] fc_mount+0x24/0xac [ 94.551509][ T8720] do_new_mount+0x2a4/0x538 [ 94.552371][ T8720] path_mount+0x5f0/0xa88 [ 94.553227][ T8720] do_mount+0xe8/0x148 [ 94.554038][ T8720] __arm64_sys_mount+0x33c/0x388 [ 94.554995][ T8720] invoke_syscall+0x98/0x244 [ 94.555868][ T8720] el0_svc_common+0xec/0x23c [ 94.556766][ T8720] do_el0_svc+0x4c/0x5c [ 94.557630][ T8720] el0_svc+0x64/0x260 [ 94.558483][ T8720] el0t_64_sync_handler+0x48/0x148 [ 94.559543][ T8720] el0t_64_sync+0x198/0x19c [ 94.560479][ T8720] [ 94.560479][ T8720] other info that might help us debug this: [ 94.560479][ T8720] [ 94.562362][ T8720] Possible unsafe locking scenario: [ 94.562362][ T8720] [ 94.563677][ T8720] CPU0 CPU1 [ 94.564649][ T8720] ---- ---- [ 94.565592][ T8720] lock(&ei->xattr_sem); [ 94.566387][ T8720] lock(&sbi->s_writepages_rwsem); [ 94.567781][ T8720] lock(&ei->xattr_sem); [ 94.569023][ T8720] rlock(&sbi->s_writepages_rwsem); [ 94.569949][ T8720] [ 94.569949][ T8720] *** DEADLOCK *** [ 94.569949][ T8720] [ 94.571371][ T8720] 3 locks held by syz.3.1020/8720: [ 94.572261][ T8720] #0: ffff0000c9b940d8 (&type->s_umount_key#27/1){+.+.}-{4:4}, at: sget_fc+0x788/0x13e8 [ 94.574076][ T8720] #1: ffff0000c9b94640 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x360/0xfb8 [ 94.575747][ T8720] #2: ffff0000e01280c0 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x32c/0x828 [ 94.577557][ T8720] [ 94.577557][ T8720] stack backtrace: [ 94.578571][ T8720] CPU: 1 UID: 0 PID: 8720 Comm: syz.3.1020 Tainted: G L syzkaller #0 PREEMPT [ 94.580390][ T8720] Tainted: [L]=SOFTLOCKUP [ 94.581148][ T8720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 94.582860][ T8720] Call trace: [ 94.583457][ T8720] show_stack+0x2c/0x3c (C) [ 94.584288][ T8720] __dump_stack+0x30/0x40 [ 94.585069][ T8720] dump_stack_lvl+0xd8/0x12c [ 94.585907][ T8720] dump_stack+0x1c/0x28 [ 94.586668][ T8720] print_circular_bug+0x328/0x330 [ 94.587597][ T8720] check_noncircular+0x158/0x174 [ 94.588520][ T8720] __lock_acquire+0x17c0/0x2ebc [ 94.589416][ T8720] lock_acquire+0x140/0x364 [ 94.590241][ T8720] percpu_down_read_internal+0x5c/0x294 [ 94.591272][ T8720] ext4_writepages+0x170/0x2dc [ 94.592126][ T8720] do_writepages+0x284/0x47c [ 94.592950][ T8720] __writeback_single_inode+0x140/0x1880 [ 94.593953][ T8720] writeback_single_inode+0x400/0xb20 [ 94.594893][ T8720] write_inode_now+0x170/0x208 [ 94.595707][ T8720] iput+0x7cc/0xc2c [ 94.596369][ T8720] ext4_xattr_block_set+0x1b1c/0x21e8 [ 94.597290][ T8720] ext4_expand_extra_isize_ea+0xaf4/0x1384 [ 94.598310][ T8720] __ext4_expand_extra_isize+0x2a4/0x378 [ 94.599288][ T8720] __ext4_mark_inode_dirty+0x394/0x828 [ 94.600229][ T8720] ext4_evict_inode+0x798/0xfb8 [ 94.601021][ T8720] evict+0x4c0/0x74c [ 94.601658][ T8720] iput+0x8f0/0xc2c [ 94.602319][ T8720] ext4_process_orphan+0x24c/0x2c0 [ 94.603201][ T8720] ext4_orphan_cleanup+0x7d4/0xd20 [ 94.604090][ T8720] ext4_fill_super+0x4628/0x4e14 [ 94.604963][ T8720] get_tree_bdev_flags+0x388/0x43c [ 94.605837][ T8720] get_tree_bdev+0x2c/0x3c [ 94.606627][ T8720] ext4_get_tree+0x28/0x38 [ 94.607401][ T8720] vfs_get_tree+0x90/0x28c [ 94.608202][ T8720] fc_mount+0x24/0xac [ 94.608919][ T8720] do_new_mount+0x2a4/0x538 [ 94.609692][ T8720] path_mount+0x5f0/0xa88 [ 94.610455][ T8720] do_mount+0xe8/0x148 [ 94.611180][ T8720] __arm64_sys_mount+0x33c/0x388 [ 94.612030][ T8720] invoke_syscall+0x98/0x244 [ 94.612844][ T8720] el0_svc_common+0xec/0x23c [ 94.613641][ T8720] do_el0_svc+0x4c/0x5c [ 94.614370][ T8720] el0_svc+0x64/0x260 [ 94.615085][ T8720] el0t_64_sync_handler+0x48/0x148 [ 94.616002][ T8720] el0t_64_sync+0x198/0x19c [ 94.660537][ T8720] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.1020: iget: bad extra_isize 58 (inode size 256) [ 94.812868][ T8720] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 94.828454][ T8720] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.1020: error while reading EA inode 11 err=-117 [ 94.828486][ T8720] loop3: lost filesystem error report for type 5 error -117 [ 94.828622][ T8720] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.1020: iget: bad extra_isize 58 (inode size 256) [ 94.828636][ T8720] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 94.828740][ T8720] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.1020: error while reading EA inode 11 err=-117 [ 94.828750][ T8720] loop3: lost filesystem error report for type 5 error -117 [ 94.828847][ T8720] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #18: comm syz.3.1020: iget: bad extra_isize 58 (inode size 256) [ 94.828858][ T8720] loop3: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 94.828952][ T8720] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.1020: error while reading EA inode 18 err=-117 [ 94.828962][ T8720] loop3: lost filesystem error report for type 5 error -117 [ 94.829058][ T8720] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #18: comm syz.3.1020: iget: bad extra_isize 58 (inode size 256) [ 94.829069][ T8720] loop3: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 94.829161][ T8720] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.1020: error while reading EA inode 18 err=-117 [ 94.829171][ T8720] loop3: lost filesystem error report for type 5 error -117 [ 94.829307][ T8720] EXT4-fs (loop3): 1 orphan inode deleted [ 94.829510][ T8720] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.884650][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.972799][ T24] vhci_hcd vhci_hcd.5: vhci_device speed not set