last executing test programs: 48.817234735s ago: executing program 2 (id=271): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c01fff6003c7c5ccc02fd9fa91b93a6ce04c6d0327ebb5708d039e1cee40959c3b9d8920bdd02925fe68b35d9ca8806c3f6c5ae906804f962ae0e5f1baf03d19d6db520f333c75462e98e689b2290bcefb7ae071d83ab431738f229d08a6296b19b9847062d1ee63afad1c5242ec060836fc18abfffeee9e46ca500099de7da3c47edb6f2a0bba0caf48e19f68e5c8b0366e23c923257f7d59ce977441ca547dabfd4d4e0bbd5475c94763fe3d573be6ab2c1ae64f4bf510fd369b0adb78d43"], 0x30}}, 0x0) 48.769148565s ago: executing program 2 (id=273): r0 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e24, @private=0xa010101}}, 0x24) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) linkat(0xffffffffffffffff, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x0, 0x3400) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a00002806000100"], 0x1c}}, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRES32=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r2, @ANYBLOB=',group_id=', @ANYRESDEC=r2], 0xfd, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1c2800"/32], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfffff000, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0xfffffffe}, 0x50) close(0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10002, 0x9, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000040)}, 0x20) 48.76881259s ago: executing program 2 (id=274): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) (async) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000440)={0x1, 0x2}) syz_usb_connect(0x4, 0xf4, &(0x7f0000000100)={{0x12, 0x1, 0xa154873f10f18517, 0x33, 0x4b, 0x7e, 0xff, 0x257a, 0x161f, 0x3ed1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe2, 0x2, 0x6, 0x6, 0x80, 0x1, "", [{{0x9, 0x4, 0x37, 0x1, 0x0, 0xc0, 0xac, 0xe2, 0x2}}, {{0x9, 0x4, 0x15, 0x2, 0x2, 0x7c, 0x9d, 0xa3, 0x5, [@uac_as={[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x6, 0x3, 0x6, 0x28, "", 'a'}, @as_header={0x7, 0x24, 0x1, 0x75, 0xa3, 0x4}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x1, 0x4, 0x3, 0xe8, 'y', "8744f3"}]}, @generic={0x11, 0xe, "6aa09a5703810a6f6dc53b5d813e20"}], [{{0x9, 0x5, 0xf, 0xe, 0x40, 0x5}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x5, 0xc, 0x6, [@generic={0x88, 0x8, "a2e7032240c1a3ac5bc4b0d470f5a2be4b2e99b10f27e430aca7400fcf6d2ff00c339f256ed80fa435d24833d546c68c569cc14eaf43f607d21519828213cd586821862d6732b4ef8687178f414424a0c7347356feec2c81a779c622fa64af3285b3580914b34d2a512f51308039d46fcd6a60c7c40b0fd864122a63b4031db3a4d232da04fd"}]}}]}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x110, 0xb7, 0xd, 0x6, 0x40, 0x6}, 0x33, &(0x7f0000000240)={0x5, 0xf, 0x33, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0xf, 0x1, 0x6}, @ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0xf1, 0x6, 0x4, 0xf000, 0xe9, [0xff0030, 0xffc050, 0x100802f, 0xff00c0, 0xf0, 0xc000]}]}, 0x3, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x3022}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x140a}}, {0xb8, &(0x7f0000000300)=@string={0xb8, 0x3, "f4fea361a414b0eef30639ac7b19de827c542db387e8c1f26f383cb9a211f301fcf646f9e7e0dcc501a73fd9b5157908ec71fb2553f8e25c186481d52ca980eb0b8ed5bac38c45ca04f6617c493352d5d69d9cdec44ec4aed724ad8c5b0a8a9112ec22adc4fa61a74417a6507a14a40ba45177eea5ad289c10d70baf33e3a54160cf5e1d972c5b4b2e3c0edf5cd5eb4a002b8af451655c54a7d5d77fc56bc7c6924129ed9aaafa4aff790923a474619f9eb3623907c9"}}]}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x2e081) 47.960635523s ago: executing program 2 (id=280): syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x808080, &(0x7f0000000000), 0x2c, 0x525, &(0x7f0000000100)="$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") mount$bind(0x0, &(0x7f0000000640)='./file1\x00', 0x0, 0x104b006, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x3) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x403, &(0x7f00000006c0)='gid=1\x00n\xb5\x0e-\x1fvk]e\xb2}\x9c6\b\xc1\x04\xbb\xbe \x9f\xe7\x8c\xc6\x06y\x89sd\xeb\xf4\x94\x1f\xdf\x91A!\xf9}\xee\xe7\x89\xcf\x99\n[\'\xca\xb3\x84\xb6j\xb9\x8c#\xf4\xf0\x96\x8e\xaa\x04\x82\x99f7\xf3\xd8\x17\xfc\x00\x00\x00\x00\x9c$Nn\x13\x8f\xf7\b\x00\x00\x00/\xf5|H\xe1\xbd0\x0fz\xbat\x0e-\x95c.j\xdd\xbe\x1dc3\xca\xd5\x91\xc8\x12f\x90\xac\x97\xdb\x06\x10?]\")\xb4\xe7tD6G\"<&\x06TD`\xc61\xf6\x816H \xe9U\x05\xf9\x16\xc6\x7f\x95\x92ij\xbb\xb5\xfc\x185 e\xf5&ZONF4O!{\xffC\x7f$kr\x82\x13/\x0e\x1d\xdb\x9e\xf9\x1e\r\xc8\x9b\xbf\xbfd\xd1B3VK\x1f\x85\xec[*H\xaf\xc6\xbd\xe5\xda\xfffP\x8fi\'\x84@\x8aw\x83\x04\x1b\x7f$1E\xcd\x9d\xdd\x17\xa94\x82\xfe\xbd\xc3qJ\xb1\x81\x80V`\x1d\x04c4^`\x95\a\xa2I\xe6\xa6I\xa9\x1cv[\xcc\xdf \xcc\xc2\xe1\xb5,') r0 = syz_open_procfs(0x0, &(0x7f0000000680)='mountinfo\x00') lseek(r0, 0x10001, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0) 47.922283725s ago: executing program 2 (id=282): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a"], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) r3 = dup3(r1, r0, 0x80000) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x8800, &(0x7f0000000480)=ANY=[@ANYBLOB="73686f72746e616d653d6c737765722c756e695f786c6174653d302c756e695f786c6174653d302c756e695f786c6174653d312c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c696f6368617273657410a3d49c930ca36530027d3d63703836342c6e66733d6e6f7374616c655f726f2c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c696f636861727365743d63703836342c6e6f"], 0x2b, 0x365, &(0x7f0000000100)="$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") r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_ABS_SETUP(r6, 0x401c5504, &(0x7f00000000c0)={0x101, {0x6, 0x4, 0x40, 0xbb1e, 0x3ff, 0xf}}) write$tun(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43a"], 0x340a) r7 = eventfd2(0x57e9, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fanotify_mark(0xffffffffffffffff, 0x105, 0x5000003a, 0xffffffffffffffff, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x1208008, &(0x7f0000000540)=ANY=[@ANYRESHEX=r8, @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB="2c00f642e4d24b713a21ab9872762d771860f75c53b7a7682f6f0d0607a507cba2bb207da7c3624d4a61e56ccbe2c08b201408b3f563526782b5b9bab9bd91c3a1b239d57b23c23d8832ab03c76aa89cd7ce7f8de14b7bc3c29cda26c633ed4c72143cb6c57189b20801f025e61a9634043985aec4a3595ed28353585ea28ad2d22710123dfe337e4ee62e78ae73efb12f2a67cad687c8be6a5237b9b0ec00b0a5f8ad92fc"]) 47.293350555s ago: executing program 2 (id=292): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x80045438, 0xffffffffffffffff) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r4, 0x0, 0xcf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000001200000008000800000000000800090003000000180001801400020076657468305f746f5f626f"], 0x4c}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_usbip_server_init(0x1) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0xff, 0x4a1, &(0x7f00000004c0)="$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") r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r10, &(0x7f0000000280)='2', 0x1, 0x8080c61) syz_emit_ethernet(0x46, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) socket$nl_route(0x10, 0x3, 0x0) 47.186104533s ago: executing program 32 (id=292): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x80045438, 0xffffffffffffffff) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r4, 0x0, 0xcf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000001200000008000800000000000800090003000000180001801400020076657468305f746f5f626f"], 0x4c}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_usbip_server_init(0x1) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0xff, 0x4a1, &(0x7f00000004c0)="$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") r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r10, &(0x7f0000000280)='2', 0x1, 0x8080c61) syz_emit_ethernet(0x46, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) socket$nl_route(0x10, 0x3, 0x0) 44.804533681s ago: executing program 3 (id=319): r0 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e24, @private=0xa010101}}, 0x24) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) linkat(0xffffffffffffffff, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x0, 0x3400) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a00002806000100"], 0x1c}}, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRES32=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r2, @ANYBLOB=',group_id=', @ANYRESDEC=r2], 0xfd, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1c2800"/32], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xb9, 0x10001, 0x9, 0x1}, 0x48) close(r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10002, 0x9, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r4, &(0x7f0000000040)}, 0x20) 44.728298772s ago: executing program 3 (id=322): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300050018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r2}) 44.644544508s ago: executing program 3 (id=324): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) (async) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000940)={{0x8000, 0x2005, 0xa, 0x5}, 'syz0\x00', 0x10}) (async) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x12) ioctl$UI_DEV_CREATE(r4, 0x5501) (async) write$input_event(r4, &(0x7f0000000340)={{0x77359400}, 0x12, 0x2, 0x9}, 0x18) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) socket$l2tp6(0xa, 0x2, 0x73) (async) preadv(r3, &(0x7f0000000300)=[{&(0x7f0000000380)=""/183, 0xb7}], 0x1, 0x0, 0x0) (async) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001380)=""/261, 0x105}], 0x1}, 0x1f00) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_io_uring_setup(0x414d, &(0x7f0000000400)={0x0, 0x287d, 0x400, 0x3, 0x4e}, &(0x7f0000002200)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000002280)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r5, 0x0, 0x0, 0x0, 0x800}) (async) io_uring_enter(r6, 0x2003, 0xfffffffd, 0x9, 0x0, 0x0) (async) close(r1) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x100000009, &(0x7f0000000380)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6(0xa, 0x6, 0x1000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000440)="$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") (async) setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) (async) setsockopt$inet6_int(r10, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) (async) sendmmsg$inet6(r10, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r10, &(0x7f0000000800), 0x62, 0x12141, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$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") r11 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r11, 0x40806685, &(0x7f00000003c0)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x20, 0x0}) 44.560810457s ago: executing program 3 (id=325): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socket(0x21, 0x2, 0x10000000000002) openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) setgroups(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000780)='./bus\x00', 0x41, &(0x7f0000000840)={[{@delalloc}, {@noload}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}, {@noblock_validity}, {@nogrpid}, {@mblk_io_submit}, {@dioread_lock}, {@stripe={'stripe', 0x3d, 0x65cf}}], [], 0x3d}, 0x65, 0x51c, &(0x7f0000000200)="$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") r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x40400, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000020800de9c00000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="0000004001"], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) sendmsg$can_bcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="050000009a0c00000100000000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000004001"], 0x80}}, 0x4) sendfile(r4, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000280)=0x0) io_submit(r7, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r6, 0x0}]) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') 43.977037563s ago: executing program 3 (id=327): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000300)=0x28, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$TIOCL_BLANKSCREEN(r0, 0x560f, &(0x7f0000000000)) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x113082, 0x0) syz_open_dev$I2C(&(0x7f0000000040), 0x9, 0x40) ioctl$TCXONC(r3, 0x540a, 0x3) 43.410670084s ago: executing program 3 (id=332): r0 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e24, @private=0xa010101}}, 0x24) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) linkat(0xffffffffffffffff, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x0, 0x3400) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a00002806000100"], 0x1c}}, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRES32=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r2, @ANYBLOB=',group_id=', @ANYRESDEC=r2], 0xfd, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1c2800"/32], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfffff000, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0xfffffffe}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xb9, 0x10001, 0x9, 0x1}, 0x48) close(r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10002, 0x9, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r4, &(0x7f0000000040)}, 0x20) 43.337035402s ago: executing program 33 (id=332): r0 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e24, @private=0xa010101}}, 0x24) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) linkat(0xffffffffffffffff, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x0, 0x3400) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a00002806000100"], 0x1c}}, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRES32=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r2, @ANYBLOB=',group_id=', @ANYRESDEC=r2], 0xfd, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1c2800"/32], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfffff000, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0xfffffffe}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xb9, 0x10001, 0x9, 0x1}, 0x48) close(r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10002, 0x9, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r4, &(0x7f0000000040)}, 0x20) 11.51931049s ago: executing program 0 (id=665): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) (async) socket$kcm(0xa, 0x3, 0x3a) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)={0x28, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x135, 0x0, 0x0, @u64}]}, @nested={0x8, 0x31, 0x0, 0x1, [@nested={0x4, 0x4a}]}]}, 0x28}], 0x1}, 0x0) syz_clone(0x4000000, &(0x7f0000000180)="f6698fa207556f9194f546f14bc15738dc2a6c39d8cd4812d0c3f9e9a3fe0c080639c320a870fdf00106646e6c06ca5667548871914007edf2ea6383b6a63585baadefe888559343335c6788df69bb793a55c2", 0x53, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000340)="f833580fad3ef1c1618fd410a5212dadb8b6e70f691755ee905910e660182b785b405c0ac16817042486a1cd4f6bdab929ca810488b355761a933c6f03ecc79544203b9353c98851eae6f8a91247874f82a138b5488569c1bddc2d835e0af94715505959e45e59cb16a2b8520e4b829e4673e671f99ac247fe4cea5158770825fddb670665ddac0b15d6b045fdd0dff978e7bb2c161f928f9d088c0f33cb7a13e513684d669e65e74aa393678fee34b239a7d47ce1858d3f5958d995c3b0478c5c0b470ea3adee") writev(r1, &(0x7f0000000300)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000003000100030c100000000000224e0000", 0x58}], 0x1) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r1) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000005e0009042abd7000ffdbdf2500000000", @ANYRES32=r4, @ANYBLOB="cf658fe7"], 0x1c}, 0x1, 0x0, 0x0, 0x4048913}, 0x8010) (async) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='attr\x00') unshare(0x2a020480) (async) fchdir(r5) getcwd(&(0x7f0000000100)=""/115, 0x73) (async, rerun: 32) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f0000000000)) (async, rerun: 32) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@local, 0x8, 0x2, 0x0, 0x2, 0x0, 0x8004}, 0x20) (async) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r6, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r8 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40041}, 0x4040010) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup=r8, r7, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) (async) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r11, 0x8b32, &(0x7f0000000040)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x6, 0x60, 0x0, 0x0, 0xf, 0x6, 0x2, 0x4f30, 0x9917, 0x0}) 11.388862144s ago: executing program 0 (id=671): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x28) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1}, 0x4) syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x10000, &(0x7f0000000000)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c00f7a98a6f3da4519f4b38d9450092aac2c7cefa"], 0x1, 0x1cf, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x100, 0x140) open_by_handle_at(r0, &(0x7f00000004c0)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x0, 0x8, 0xfffffffffffff4cd, 0x8}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000005c0)={'vxcan1\x00', 0x0}) timer_create(0x7, &(0x7f00000003c0)={0x0, 0xfffffffc, 0x0, @thr={&(0x7f0000000200)="eb92905e6f293f322476091e22ff71f9411ada672f00d7a0024a6683eca2c1dcef29ee33b48ab05c08e44f43146b9547172c26e06519d159d7c844a52d189170cdcf592414b9b5de3a2b9f91ba4eceecc1c225e3f50c694495535d539232923dc5a04aee10b4bb974f5ce950c46400c58c2b3c89325366a634c35a1516ebb8e0e8571fc72c73fc805fc358a706bb8794087e945948a56d3aa92b98e459219dffbab1616ff5686c14c53bc338f7537169d102baa7670cf541fe6941d1c8ad4bb1d34ec4e714110734200a5d79115ea31c76f8b90bd511c627", &(0x7f0000000300)="9c5aae74cd05f70747fb114efaa4bb11226ae0f1c38e3e25a4f47123df48ee3a04e7b71332c4db25a7d753c896d6ba24567ca1fe8b8079dd6e844c9b85a2fc1a7f64fb7ad7ab998420a10b939899969748b5725b76bb942d018a2baef505f4611d87e302fa2da192"}}, &(0x7f0000000400)=0x0) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r6}, &(0x7f0000000880), &(0x7f00000008c0)=r5}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x32) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_settime(r2, 0x0, &(0x7f0000000140)={{r8, r9+10000000}, {r3, r4+10000000}}, &(0x7f0000000100)) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="090000000900000000000000a60c000001100000", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=r1, @ANYRES32, @ANYBLOB="0500000002000086dec859deb51a95c07900030000000000dd0000000000000000000000000024889f4e2e75ee645374406980b1a4b669f627a94697536a9d529afbe721669b7945e8806fee541985bbf6c20a40f931b6bb9229547413d3a83558cbba116682"], 0x50) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="a25733f02a0f172e33850000bf212548d5c0f9ca", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r10}, &(0x7f0000000a00), &(0x7f0000000a40)=r13}, 0x20) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r14, 0x18000000000002a0, 0xce8, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x4fe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{0x3}, {0xac, 0x0, 0x80}, {0x6, 0x0, 0xff}]}) 10.961001269s ago: executing program 0 (id=676): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x40, r1, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xac, 0x10}}}}, [@NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_PMKID={0x14, 0x55, "3be779733800294eee8ac3390ca814ed"}]}, 0x40}}, 0x2204c804) 10.918258948s ago: executing program 0 (id=678): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x86, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x50, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x3, 0x2, 0x0, 0x0, {0x0, 0x6, "020810", 0x0, 0x11, 0x0, @private1, @empty, [@dstopts={0x0, 0x0, '\x00', [@ra={0x5, 0x2f, 0x1}]}], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0) r2 = dup3(r1, r0, 0x80000) recvfrom(r2, 0x0, 0x0, 0x40, &(0x7f0000001380)=@xdp={0x2c, 0xf, 0x0, 0x12}, 0x80) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) setpgid(r3, r4) setpgid(0x0, r3) wait4(r3, 0x0, 0x2, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000280)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r5, 0x3b85, &(0x7f0000000100)={0x28, 0x2, r6, 0x0, &(0x7f0000000900)="15", 0x1, 0x9}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r5, 0x3b87, &(0x7f00000000c0)={0x18, 0x1, 0x0, 0x0, r6}) ioprio_get$pid(0x1, r3) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000100)={'\x00', 0xfff7, 0x9, 0x9, 0x1, 0x0, r3}) fcntl$lock(r1, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0xa, 0x2, r7}) read$smackfs_cipsonum(r2, &(0x7f0000000000), 0x14) 10.690652677s ago: executing program 0 (id=682): syz_emit_ethernet(0x3a, &(0x7f0000000800)={@link_local, @random="1d5da714014b", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @multicast1}, {0x0, 0x6e21, 0x18, 0x0, @wg=@data}}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xfffe}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x1e}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x14, 0x1, 0x0, 0x0, {0x5}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) semget(0x1, 0x71469f76ec64c31d, 0x115) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket(0x10, 0x803, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r3, 0x40086602, &(0x7f0000000000)) fstat(r3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x1}}) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x4b3d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0xb0}, [@ldst={0x5, 0x0, 0x0, 0x0, 0x0, 0x80}]}, &(0x7f0000003ff6)='GPL\x00', 0x79, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) 10.605919435s ago: executing program 0 (id=685): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002b80)={0x6, 0x4, &(0x7f0000001a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@alu={0x7, 0x0, 0x3, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f0000001a40)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdd5}, 0x94) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001080)={0x4, 0x0, &(0x7f0000000040)=[@exit_looper], 0x1000, 0x0, &(0x7f0000000080)="adb61ae9307bcbad58a3c15bc8d1394f46e275d545812ca2e49bf02b1cabacaa74bcf3b1acf4b656052e047cccc9fa460596a44680ec0266abd473cd79ca47650e8b023dc9e79f6ffdee3c03926aeddc94f2bf73c18f8388999f2e2d23d6c60a3f5851a5a85953fc88cbde1ff1422e57be28accc97a3eb1ec03dc5f3617e6609d42d6e23b39770c86111e37c5d2f4e634f58758fd4571e8e8375da50e498f7707b4c37c8d8f469e0c51a30987e03d8a24c90702ed3846a5fff7453750f7d00d74d31f4aa63bd4df510f9404295c88f8c3039b3370d4576def2caaa66f22df342ce668f90dde939cedec473728540dc3263f90cf4f79dfe79a30f10af542fd34fd54f65d3ccb9b32ca98e26b1bbf1d5a86c255deddffad7387272894371b50fb639b67ebad54af4f486ee1739bc0aa564e0d843c3810089a21a7163979e0fc0078f47d60c05dcbddabb3eca5ee190abf6837d29d8ca64a5aadb4c3e62d4700685e7eac26f6881ba4d54e0355e8759ee15b5ba20da951a6244c2c29e9b05b2e7e9ce5add56d2a0cf6b2b395c0efae97655face1dc689aea7fdbb149e40af318ebff2d4d7bad84c54c146d71a7a2d69d293fbcb9e6c60b8a92a11d601368ef8a842244b7636b8cdc8a5409e2708d5a5babba1880f5338f7a741e5b0dff7cf2c99f39ab876e1725483f7e81fe6ed9903419561c6fae007e36154aff8bd829d622c42095b378c47ac276f2fd644e7f37d486ea45e099028715699592822ff70bc29a3d8033af80fde10639222512633b65e9c1a7748f97eb8a5125d26f63abc5712ed5bf256c70d0db4eec95f30bd3ce606504be74d37215e53aa16ce8e43f5c76159ac9d6759539511fe4d9da706330ec04d675cc008f094239ee8440c510a330463d1a86cccce4c706872c63e6b6500f8ed7f72a05e43d4077a409e07d6d9414e84e0fd0be6ad281da5ecf81731ab9d0e22b1b247984a5cd5ed6075043e50f47412eb4c7147c6b4b531f5f0f5f378bc50676ad0180dd9a4ec88e2059189863caf8ee80facc2eaa9c00852c82d3d271e8fe84c10484a3991e3066cc26fcb869074bde1998ed2d570c4266ee0903c85760479d279890b10b10b27e3834c5465f355969f99096c4e756766929a6ab8c7004859dd8b3b483d85bc022d3d89445326f82c03a90826e3b88684d6d1997b7b998a75e768e74e640b8658feda0e84ed1035db9fb1bb19f1d48afc383c7f4a34ca70cd7e098b46532bce8470d6e018bc42c5f903e6179552e589aa8d007ec85bb098e53b156ceecd57ee8ad9d65ddc7a25078834567ea53a00aec2b80bfde9678438d2020ad5d64b53d2f8f12a5aeca1b123f50d7422b01904a929ce95d48b983f0929cc0c26066128f877f4948bfba560a51ec14827eaada90f17c23f148c72fd91a95d05d6357092a67b1cf109dc6eb5dd82bd23ca20978d532ade873c9d35582370887f05ef8b7e9bd6fd70171e342eb829c548b041d8d9564cc50b8b22f91faff61faeec4164f5b64c1772913ae461f4e312536dae9dc17da422142a224895bb5af3fd890f0a440c367c945336dda7db93d11ef52ffa8c7ab62f42c20101367eda3aa941e48b476de4255a3cf0065d6e48d1b9019a24648e60a7c2fc13cf1adfdf714ce0954ef8f7e6d0833a3b206e9ef4d792dc79fb8245b8ea09949ac381765370828ea0048eabc590474ef2b0c8dee4706963296c5d52209699318efb62fe8a52cd7c12443da3926edae6debf9ca3dbd239d9f452d2916b3d32fff0fb9e4d259062a66bbeb4234fb5c916edcec18272a669ec835e8d3892743422b47a7dd88e3504bb157c6c7bb49fe3c68d92a96a0fbcf9c6cca340b090c6f36390db849523f9dd558ae6c46239525794125ea8ae9706cc70d7eb24fd091544afb858734a40f35a9da63f80c8ea6792e0b0b2bd529cf382d05e80ce6a7b170dd1d8ade221ae0d5a2906e006b35e397b9727f556cd1e7344169059f3adff7e901203f04fb74bd30c023f20e166bc9e3007503ac747e2897972c34ed47cceb769ffb5d5abe4855cbfe1418481da4492f88d81abf85d15042c9b7f748e8ae302109282bd21965ceefbafb7543ae2c3f676b2edd1c05c02716963cef8cee73092eda3428f5881dff13e27a64c415d6a419b0f7a160327827b0f08e16b6d77dc5ab3b37d720694847c7c4038d731862abcce21c4669d72e50257b4d51926964949746f5ecc9cd2371be30028f59bb7a42452ee09f081a2576c21c70333f5dc247967e4070fef510b9ddc01e16991a01afa1e211e6e35f60763be7b343493aaa772a32f1509d52ddb1cf9715bdd1ba467eb2e2c0507660ce6f6be9c02df37537969c49d9046a44deccc5f867a85103fc57110caf765e432ca9e40ba9f019e8589d1c8524fe6f5223bdf13897c075a0bf9620ba0dd5db03eb5a451eedbceff38098755fa8fb82ad298bf461027c6e273b03e3e0098e02b696716ef96d41be39b8a85f38a8108b0a0cd4e51ffb1c6efb5b7b4cd28c4b12d4c5971cdb7222892f94774d536d2fc8c5797040aaf0c6f16320724a9a6644650eb04ede0a6ac9629511dc3ee5d1c266528c4b27f6af912bcb8052330522ffb6f77a470f5d853fa8606f4d62443eaa83ea633b9128c85b7574591ee8f54b2c99162f8758a60606fa224144e1dd39b9b46c42b0b1fd3f8a1af474a8a3931c2be74e4e9d4e2c5149c8dac6b5b4fbe088a9c8905c34c4882c74170a5d0fed7fc38f53c53b93d36719f8319540921c8226aaf2426253ce7fa20c988ec1bb179050c399215bdb072094a71d5220733e44dbf7f5f4c0fce58cee2825e71851e7cf0e5854845dcd5d6691a74e2f1405142f1e797763d73182fb7b582a039ba8c44c54950922946c1144d8543bd6d21b483fd6f95b2a818520f3ca403d68c400257e1ca5aa25cc3a089249afafa3418b62b6385dcadd9ff9d97fae778ed489476db2edc8268992e154d62c7faed4bf2c673e1877d4e69e2979b249457f14890e59e59eecfc02243c1f4f8f22f34a045a10dc7b95d15df75b5c33791f6cce0e370e13a390d2bc782c0f4ed1e38f890bef997fe5e91ac00cdd50abbb05331d1be4958af892df3f6278a4f7c78a366ea0cb406e6ec8a00da30ba1ea0023f9d14732a3f365861b688e5a0711b8dcb70fb904bc683da3a14af0f2f0b4f25efd9c1513439ebb4cb65560aacd1370635fbc73623afc394337215a562505c7a5a3954010b48a7d61a61157d2eb731553b0b71020ddc2aba6b8b723dcf3d1ba7913d2078c291e1aeae4a57fa072edd3bdc0c5ee13a91100b9df261a2d4c850070eab3872194f0b8fee43c3c99572b2de8202723c1ff7e4de7c4fb6eb2dc614527db2a2191a8b240ed3d7c0369abac4b68d9f651ec6b79be64567c52cf3cd630e25365949eb055418a56103bf1b625961e2138fcf408c079f61d2de46edba07a9d73d1cc11128936ed6361cf5a5280541b74807f5023401ed2f61ad08b31007d4bd35547a6167cf774e837665901b8e432754ec3147c6da7d1d8cc2a7b99812cad415fb34c10d85f7bf23e991d543a8ddd25b35110f3cc4873ed129a2532f987977dacbc60e1fe7b8d1872c52dcd4efdf93af4375ca2eb357fb4186516528d7fade2726227c13e9634d814922afd9888d7db344545c0f51600dfa5a2652d6105f994e927d5e2a779654e3cf37793de2c5e900eb8ab50a37a3052bb7dbf94c28347ebcbdff80e4413571a69677ff7a4c5810ead3569c17fabac17cf01346d65ec88d1adf6775a882f588a12b65b517685e09594f0f754e8a31c67e60a0561649d14f2ba706ab6f688908fb00f4944f820196232fe335f3b010bd3f19b491c9bc5c33ffd9ed945c22d1ae51a46efcab0336085d7af68829212c8d2df82b28c8ac840f08375c1381ffe8a8e40f839ca6b74bc365d4f5ccbf6b16a3c0f0be9c90f4fb0ea3197f69bfc5f27b34f8b3f2cfa73ce061e680ccf40b72b9acb7e6717dd72e7da8226eb40187140e832627c280b6a26bd9b871e9ffee2378fc91782effff78673f04788e47c41dc5630507f78adc455a6185b52c21bfaa0969883287d6b73dfe3d02f7d25ce152041ba9e6932aa2633fefbecbdbab9eacc0e3e366b51b22de95306295e77dc6a8041977f74224123bd4ebfb1af986b320e7ea44ff2d061e770942cc685f80dd79758948f61209f4cbd4c167c6fd8f4ee5d9bee72ebba9a1ffb3383c4a6e5a0283e77d76b36e56804afb981d9fa52f426839737d973c60ba286d61a765fcdc41c68e90ec138d812a8f989fd778e81a2161ba872bfc3da34f8f88df27e51d5f2d414dc0b596e6a2d2ab4416981cb36badf453283dabc4f9a3657135db48e89b6c59f52f114802ffc0fe836ada69348f7ea4a0d12be0c0d54b8bb8670d797e6ef7ad47618e66bcd6dcd1d39c5014b452cf02eeee0658369004531f262793d413d9913135bc640676b54bec42b3cc2585b4dc938b6c0e0e6b25808a66123bdec50fec2e090592403da9a091d985bfa538ded4a35f40cacd5283ac8a67695945701c0803b621be3d10cb0877f5cc81739624e3a42c6541433a3e738891c1e8ab3ec4bf8b7036e6a80801b1e9878fd8626814c300d891bc89cd1e0d65db0093472724cb0a65d833afa5bfc382bc711cb4860d0745ef304329d65279bb40a582e851a4295dbb7bc04cc0a5e6b2b7c25cd8ce70eb816675475fa3fe05aa1d032d78d63c5b46f7973957c730acc3ec2c647109c8fa87ed5b3910ae84cf06bbc7edeb34772789b054c78677200ef08c5cd939ea859b6d381f2bf7b0d2ea75ed1bbad479444a36e7a2f828decce5b506a7f488df86923de91c2de2dda533f40fb068ceac9ac260bab22f8fc50e905943d8fb3acce887e8c08133913fb510df965213066955a437a9663754aa97de0d0f1c957b051a25718ce9a994f54dca4679ec9ede54e828fe4e13f96be59d7e63475d9d944aeb85a26ed6ec02cbe696e24c1c7656281118dd77cfd3e09c09f3f961f5fa19fb470cb54e65063acd1cc8054e24d09d92ff83918de5434c1ea2273b2207a31136377de844ea3669edbf581fee0130b6da525868f719e39ee0eefa9ec8bda85cba3e76cec48fd39a11f09d0d6a522840b3cf568a7401e8ba3b3e1c6edd33b0070c9532aeb4ac926bd507a8ed18727a39672cd25b23ce06cdca5c16010e09cf25816e9873739367f2cb433e1a914f8f8ff4397bc24e311e2da2db289ece79e4f74c513b948c9a7204db50c6f867bd576a317a2fe877263e096d1189ad30aa0665d66b44923e019cc859fdb70535a3f1a955964c5b2df0ef1f4a413a0cf945112492317bb36b5c2164906628e475823b62a3361a8fa8001629ab6b7770670bc2af34fcb4781d419c266448935a62bb3b6a36034bc3d70ca21705d694bdd1d09766c175a4b0f7cf297e8a922bb8fc0bb2e2d6f6c2ed1f2b933e6a9fa9dfaec76498ca9e5230fab4a3b1bcee54d69f5c04d0818549dba7f73e7959d5725a7f8606af4eba1545bbb72bbf0db4f95d135f1c01ac35f3ed2a74f95210bcb960b0744b48a952ad39d06b2da9cccf0734053b81a562dcb48f0aadea2f2277072a46f5c09957efc1691d8842cdb171e2e365bc64186e74daebe95420e924e941535441f741f0cce86708a21eeedb588676c9ea7e80aa21a22b3536297b953fb3beac292bd12fe7d336775bd2ccc57d3549bc6114bebe559236659aece77221c06bbc71bd084a2b1fda11dc9256dfbc4b0dc27a122b04d8345ede55"}) 3.316895854s ago: executing program 1 (id=745): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=@newtaction={0x168, 0x30, 0xffff, 0x70bd2c, 0x25dfdbfb, {}, [{0x154, 0x1, [@m_ct={0x120, 0x15, 0x0, 0x0, {{0x7}, {0x64, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xc, 0x2, 0x10000000, 0x8, 0x3}}, @TCA_CT_LABELS={0x14, 0x7, "550f609a55b7401c91a1f47d1983db94"}, @TCA_CT_PARMS={0x18, 0x1, {0xcc5, 0xe00000, 0x10000000, 0xff, 0x2}}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x6}, @TCA_CT_LABELS_MASK={0x14, 0x8, "61aa282a38fd4413f2a1faff74d40af5"}]}, {0x95, 0x6, "09bfd3830c1b4b79896c789c605122efba8bbaa2c2b0f7be28b62aed3fe26eef06a7ee2b90b28279739dff43df3179a4a765cca9047b98c148a5f8f166dba4a7764101a43d04ae352229630b1b093b27d8b82e057ced32239d940df7e207a25314b2f704e34de135e859763ef2af79e949101ccc52c5f932165420bfae0385cdf880ca0ccab063491d99f3e9dd008947a3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0x26}, {0xc}}}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x24004040}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYRES16=r3], 0x10b8}, 0x106) r4 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r4, &(0x7f0000000000)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e20, 0xd25b, @ipv4={'\x00', '\xff\xff', @local}, 0xda}}, 0x24) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x2000c0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000100)={0x1, "fa02c8098000"}) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000003d40), 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r7, 0x84, 0x19, &(0x7f0000000080)={r9, 0x6}, 0x8) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x4000) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./bus\x00', 0x210c00, &(0x7f0000000000)=ANY=[@ANYRES64=0x0, @ANYRESHEX], 0x0, 0x1ab, &(0x7f00000009c0)="$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") r10 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x62800) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x5, 0x12, r10, 0x0) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r5, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16=r11, @ANYBLOB="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"], 0x158}, 0x1, 0x0, 0x0, 0x240480d4}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r1}) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r12, @ANYBLOB=',wfdno=', @ANYRESHEX=r13, @ANYBLOB="2cbcf56e6f78617474722c00be30eca7842f890686130a3942d8bc1fdf3f9642ad231eee78ade61ee0b2d1fa701c236ee1a0edaa99e7dc24bb8f76b5c6cc7c562aa71f77fd8f8ff3eb01c94d1b1d913030dd5a79fd5a29fd40c8"]) 2.428109171s ago: executing program 1 (id=755): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x40000) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000040)) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f0000000080)={0x1}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) quotactl_fd$Q_SYNC(r1, 0xffffffff80000101, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r1) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x7) ioctl$TIOCSERGETLSR(r2, 0x5459, &(0x7f00000001c0)) bind$bt_hci(r1, &(0x7f0000000200)={0x1f, 0x0, 0x1}, 0x6) ioctl$BLKCRYPTOGENERATEKEY(r1, 0xc030128a, &(0x7f00000002c0)={&(0x7f0000000240)=""/103, 0x67}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000300)=0x7f) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000340)={0x8000000000000001, 0x0, 0x1}) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$sock_buf(r4, 0x1, 0x1f, &(0x7f0000000380)=""/87, &(0x7f0000000400)=0x57) quotactl_fd$Q_SYNC(r2, 0xffffffff80000102, 0x0, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000440)=0x6) symlinkat(&(0x7f0000000480)='./file0\x00', r1, &(0x7f00000004c0)='./file0\x00') ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) r5 = syz_open_dev$dvb_dvr(&(0x7f0000000500), 0x4, 0x0) ioctl$DVB_DVR_DMX_QBUF(r5, 0xc0186f3f, &(0x7f0000000540)={0x7, 0x2, 0x2, 0x0, 0x4, 0x6}) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000580)={0x0, @bt={0x44b, 0x4, 0x1, 0x0, 0x81, 0x800, 0xfffffff7, 0x1, 0x0, 0x902b, 0x8000, 0x6, 0xffff, 0x5, 0x6, 0x20, {0x5, 0xd99341f9}, 0x7f, 0x2}}) r6 = syz_open_dev$cec(&(0x7f0000000640), 0x0, 0x2) ioctl$CEC_TRANSMIT(r6, 0xc0386105, &(0x7f0000000680)={0x1, 0xa, 0x6e80, 0x32000, 0xffffffd9, 0x6, "d328e607e95c570a3910ab2cd9932c5d", 0x0, 0x0, 0x6, 0x6, 0xcf, 0x80, 0x9}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r4, {0x3}}, './file0\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000740)={0x0, 0x6}, &(0x7f0000000780)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f00000007c0)={r8, 0x1000}, &(0x7f0000000800)=0x8) landlock_create_ruleset(&(0x7f0000000840)={0x8002, 0x6, 0x3}, 0x18, 0x6) 2.260695983s ago: executing program 1 (id=758): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0x1e}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x4) write$tun(r0, &(0x7f0000000140)={@val, @void, @eth={@multicast, @local, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x3}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x2, 0x14, 0xe4, 0x0, 0x8, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}, @loopback}}}}}}, 0x2e) 2.192192182s ago: executing program 6 (id=759): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_io_uring_setup(0x88f, &(0x7f0000002280)={0x0, 0xa2a4, 0x473, 0x2, 0x73, 0x0, r1}, 0x0, 0x0, &(0x7f0000000000)) (async) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x10840, &(0x7f0000000900)={[{@shortname_lower}, {@uni_xlate}, {@numtail}, {@rodir}, {@utf8}, {@shortname_winnt}, {@utf8no}, {@rodir}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp862'}}, {@shortname_mixed}, {@uni_xlate}]}, 0x1, 0x26c, &(0x7f00000005c0)="$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") (async) syz_read_part_table(0x5d9, &(0x7f0000000000)="$eJzs3D2rHFUYB/D/vOzLhcj1AwheSCMKRrETL2qhMV0Q7QRtLS5ILMTq7qIi+PIBbEULoxBiraAgQYyVpXCJlV/BNOHInp2ZFdRqgxL4/Yp9zvOc85wzw0w7G+5t5TApTXKzZp92NfTt49vB78l7s2T96rPJYtswGxqbJC9ffe75S0eXm8VU21RXw+xid8p8iH2OajzIN30+vnrx/Zqt0uQ0wzCzr+bpN2vLtu+Tv1/07SZdXcP/rP9uesq/5OskJ023efiLZJ3Pk/uzrJMXknSllPqYV5sXIN30Vuzh2vGN9dPD+CDDmzbbZqcfdHlsmJullFLanJ4fO7vkgacuXPmnTWv/ut7eWCqlzM6Nve1u4uTOvB+yJ3787TTr5bR7Srvb8uwgeePsxUfrlTTbPWb73z4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHfZQ28+/H07Js/U32Yav/BF2t3SVR6cxkfLu3T+teMbh++8e6XN28evt1mN5a7LxXPJYlr32jZc/7CGfpvN9z//5E47//KzHw6mwrB1k/x0/tfbpRvKZ0N868m/NB+3+18AAAAAAAAAAAAAAAAAAAAAJLmeS0eX27z07a0mr2T3uX/JMmmaMV0mpZTyR6nGj/9/7sf5m7fSbJpSml1HdXhfUhYfPVL/VmBbLKX09Yjmv7lH/t2fAQAA//9BcV1/") (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) (async, rerun: 32) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x8, 0x0, 0x9, 0xc, 0x11, "c8e2127ea0af3d7f91eb7cba0959d81fa44e06"}) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="180800002d98afeb000000000000000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf9700000000000017080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007d98f0ff0000000056080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.117142296s ago: executing program 6 (id=760): syz_emit_ethernet(0x86, &(0x7f0000000080)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0xc, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @rand_addr, {[@rr={0x7, 0x1b, 0x8d, [@multicast1, @remote, @multicast2, @remote, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x806, 0x0, 0x0, [0x4, 0x276]}}}}}}, 0x0) 2.110513516s ago: executing program 6 (id=762): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x80, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_SYMLINKAT={0x26, 0x13, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) r4 = socket$inet_sctp(0x2, 0x1, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000480)=ANY=[], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000a40)='.pending_reads\x00', 0x842, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r5, &(0x7f0000000f80)=""/4096, 0x1000) personality(0x5000004) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @remote, 0x4e21, 0x3, 'wrr\x00', 0x5, 0x81, 0x8000002e}, {@rand_addr=0xac1414aa, 0x4e24, 0x3, 0x1cb, 0x12d5c, 0x12d5a}}, 0x44) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) 1.475674024s ago: executing program 4 (id=767): sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00080000053ec7da0001000000000008000400"/30], 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x1, 0x0, &(0x7f0000000000)='%', 0x0, 0x0, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000180)=0xfffffffd, 0x4) (async) r1 = socket$kcm(0x11, 0x3, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f00000000c0)=0xddd7) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) (async) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000100)=@caif=@rfm={0x25, 0x5, "cdfaaf7254f4ef6249f068fcdd7e1cbd"}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000001280)="27050200340f14000600002fb96dbcf706e10500000086ddff48601969ff1145ee162fd4b8bf", 0x26}], 0x1}, 0x800) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e20, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000}]}, &(0x7f0000000180)=0x10) (async) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000006800010000000000000000000a000100000000000600070008000000100008801e000100000000000000000508000500", @ANYRES32=r4, @ANYBLOB="3aa8bd7541181ca5c026cde4a6c89a727ec7057d2ff7bdd6e519b0542f81fc48eb11fe90422f80129267b417b0d04b08c2d8971f01b72edf923a62675fad39f1e0bd95aaaea820"], 0x38}}, 0x20040000) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x85, &(0x7f00000002c0)={r5, 0x88, "0200000000000000703fcd09bdf0b493d4323725cdcff2eae49f89843a5318d5ba093aa761132b512e8c4eb4ec42ea38be0721115142ca827429fec4eb76aa3f3069d1d5a64a2c75a2d59986feff48dc51b23de50b4c052630642b3348c700b558041310b18d364b87808f6ec3b597fae6ac116b5bc6c564f98676e592103c268225b716a73e48c8"}, &(0x7f0000000000)=0x90) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x18, &(0x7f00000001c0), 0x4) (async) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1dab342b9a4f70fdce3ac321ad13ec3344174225bd7000fbcbdf250a801400ff02000400360000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x24040884) (async) sendmmsg$inet(r0, &(0x7f0000001d80)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000480)="b3", 0x1}], 0x1, &(0x7f0000000180)=ANY=[], 0xf0}}], 0x1, 0x24044c41) (async) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f00000002c0)) (async) r8 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r8, 0x6b, 0x4, &(0x7f0000000400), &(0x7f0000000000)=0xffffffffffffffe8) (async) move_pages(0x0, 0x1, &(0x7f0000010180)=[&(0x7f0000075000/0x4000)=nil], &(0x7f0000000000), 0x0, 0x0) (async) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='cmdline\x00') bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r9}, &(0x7f0000000080), &(0x7f00000000c0)='%+9llu \x00'}, 0x20) (async) syz_open_dev$loop(&(0x7f0000000280), 0x6, 0x3b5381) 1.356989513s ago: executing program 4 (id=768): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="0002020100000008ff", @ANYRES16=r1], 0x18) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x28}, 0x5}, 0x1c) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x9, @remote, 0x5}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000300)="e2", 0x1}], 0x1}}], 0x1, 0x14) shutdown(r2, 0x1) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x85, &(0x7f00000061c0)={r4, 0x88, "0200000000000000703fe6153c598ae93aa83725cdcff2eae49f89843a5318d5ba093aa761132b512e8c4eb4eb76aa3f3069d1d5a64a2c75a2d59986feff48dc51b23de50b4c052630642b3348c700b558041310b18d364b87808f8a7494c5de7f7ba36ec3b597fae6ac116b5bc6c564f98676e592103c268225b716a73e48c8c8f8ec21e15e7a5d"}, &(0x7f0000000040)=0x90) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={r4, 0x3, 0x5ea9, 0x80000000, 0x10000, 0x8e}, 0x14) 1.343087498s ago: executing program 4 (id=769): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="180200e7140000ff0000000000000000850000004300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) (async) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)=0x20) (async) r1 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82, 0x0, 0x0}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={r6, 0x3}, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r1}) (async) io_uring_enter(r1, 0x2, 0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x2f, 0xf7, 0x1, 0x0, 0x8, @loopback, @private0, 0x10, 0x700, 0xfffffff7, 0x7f}}) (async) r8 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x800) (async) r9 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEYRING(r9, 0x110, 0x2, 0x0, 0xfdc5) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) r11 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r11, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_ERR(r11, 0x4008af22, &(0x7f0000000080)={0x1, r10}) ioctl$EVIOCGMASK(r8, 0x80104592, &(0x7f0000000300)={0x0, 0xfe72, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) (async) r12 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r13 = dup(r12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r13, 0x0) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x14) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) (async) getrandom(&(0x7f0000001880)=""/4096, 0x1000, 0x3) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x20, &(0x7f0000001680)={&(0x7f0000000480)=""/69, 0x45, 0x0, &(0x7f0000000680)=""/4096, 0x1000}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1d, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="85100000010000000578100001000000"], &(0x7f0000000100)='syzkaller\x00', 0x10001, 0xa2, &(0x7f0000000200)=""/162, 0x41000, 0x0, '\x00', r7, @fallback=0x15, r10, 0x8, &(0x7f00000003c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0xd, 0xfffffff7, 0x5}, 0x10, r14, 0xffffffffffffffff, 0x6, &(0x7f0000001700), &(0x7f0000001740)=[{0x4, 0x22, 0xf, 0xa}, {0x2, 0x5, 0x2, 0x2}, {0x3, 0x4, 0x3, 0x2}, {0x5, 0x3, 0xa, 0xb}, {0x4, 0x5, 0x2, 0x9}, {0x3, 0x4, 0xa, 0x2}], 0x10, 0x8000}, 0x94) 1.175234326s ago: executing program 6 (id=770): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x2}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500074108"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000) 612.436352ms ago: executing program 4 (id=772): sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)='X', 0x1, 0xe0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) r0 = openat2(0xffffffffffffff9c, &(0x7f0000000700)='./file1\x00', &(0x7f0000000740)={0x210a00, 0x10c}, 0x18) fsetxattr$smack_xattr_label(r0, &(0x7f0000000780)='security.SMACK64IPOUT\x00', &(0x7f00000007c0)={'nl80211\x00'}, 0x9, 0x1) sched_setscheduler(0xffffffffffffffff, 0x1, &(0x7f0000000880)=0xd06e) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000180)='./file0\x00', 0x0, 0x4004}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r1, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xd8, &(0x7f0000000200)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0xf2, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x6e22, 0x209, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x80000001}, 0x1c) r3 = epoll_create1(0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000800)={'nat\x00', 0x3, [{}, {}, {}]}, 0x58) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_BLACKHOLE={0x4}, @NHA_FDB={0x4}]}, 0x20}}, 0x0) getsockopt(r4, 0x3, 0xead, &(0x7f00000005c0)=""/226, &(0x7f00000006c0)=0xe2) r5 = inotify_init1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r5, &(0x7f0000000380)={0xa0000008}) r6 = fcntl$dupfd(r1, 0x406, r1) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r9, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5193bb672965593497c186a80e00", '\x00\x00=*', "1202000000040030"}, 0x38) setsockopt$inet6_tcp_TCP_MD5SIG(r9, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x8, @loopback}}, 0x0, 0x0, 0x41, 0x0, "b208405cce4456e4fc8f2dabd194ff3763f799f91cf7e5e8260998f956ec57c24451db07550335ebf4a3d0168ccaa268e928f39cd7494c2b19ebef230a3373685fbacfcf3b6e9633bd997a9bfcf08f67"}, 0xd8) setsockopt$inet6_tcp_int(r9, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r9, &(0x7f00000001c0)={0xa, 0x0, 0x5, @loopback}, 0x1c) sendmsg$NL80211_CMD_PROBE_CLIENT(r6, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, r7, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x40001) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@cgroup, 0xffffffffffffffff, 0x32, 0x0, 0x0, @void, @value=r6}, 0x20) 554.767581ms ago: executing program 1 (id=773): pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r1, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x189802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x24) mount$binder(0x0, &(0x7f0000000780)='./file0\x00', &(0x7f0000000680), 0x8001, &(0x7f0000000700)={[{@stats}, {@max={'max', 0x3d, 0x2}}]}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000060c0)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbf9, {0x0, 0x0, 0x0, r10, {0xfff3, 0xfff3}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x2000c804) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20004014) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x114}}, 0x0) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f00000000c0)=0x450) syz_io_uring_setup(0x5877, &(0x7f0000000280)={0x0, 0x33af, 0x2, 0x2, 0x3a5, 0x0, r0}, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000040", 0x42}], 0x1, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b000028951c7d0500000000000000000000000000000002000000000000000b42aa40553d87ccd56b411c75d593d377ed08a273a98d64f700003b47cf4ce706ba295398a8332a82da89ea5e7ccee339db00000000226a53527e3c44645c4a407829424a432b23d91a9d877cd2ca4575911d5068685e73bdd4672c79d83617a4838636bba1ab1ed8163b36a36d2ed5ba928d2f46c93c2ed0c476939ec1c521195870fdc62a210542a95ad318e1ab6ceed88320d3769aeab2103e7ec676af955e8680903647b140e6b9c984a94a2a187f846e364b8665e7df731a8339b416d5b486c9cfed3b5ac9dd25c8a6e57a780a4754afd9acfb1cfc0c841c660dae15b39556190be3c135feb03b77e1cb0fc5fd019727e9b4ebd54f797aabeafecd1e2ad2f952d900000000000000000000000000277ac8c5eaf1b566472412e27556d9056ef31315fb3e33069d1559fd5bd1bb27f6ce458145b2cfd448ab8873d3e34ba1f5d2cb05246a8fc9cb7abd3d9e90659cf1337234830a47572c79d0c26d5167994adedfa758cb56723a616d7c3322c803c77b8695626c305f72fc16d825c4", @ANYRES32=r0, @ANYBLOB='1k\x00'/20, @ANYRES32=r2, @ANYRES32=r0, @ANYBLOB="04000000020000000100"/28], 0x50) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000400)={0x0, 0x1}, 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@ignoreqv}]}}) 488.4329ms ago: executing program 4 (id=774): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) getresgid(&(0x7f0000000100)=0x0, &(0x7f0000000140), &(0x7f0000000180)) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x8040, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2af5d4f78f041004}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@allow_other}], [{@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@smackfsroot}]}}) splice(r1, &(0x7f0000000280)=0x3ff, r1, &(0x7f00000002c0)=0x100000001, 0x6, 0x9) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x83014800}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x8c, 0x4, 0x8, 0x801, 0x0, 0x0, {0x1, 0x0, 0x7}, [@CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x22eb}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6002}, @CTA_TIMEOUT_DATA={0x54, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffffe}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x401}]}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20001004}, 0x4010) (async) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000480)={0x3, @sliced={0x80, [0x0, 0x8, 0x7, 0xbd0, 0x1, 0x1, 0x5, 0x8e, 0x5, 0xd0d, 0x401, 0x3, 0x3ff, 0x2, 0x7f, 0x0, 0x3, 0x8, 0x3fe, 0x9, 0x3, 0x3, 0x7, 0x6, 0x2, 0x5, 0x8, 0x8, 0x400, 0x8, 0x6, 0x7, 0x909, 0x0, 0x1, 0x10, 0x0, 0x2, 0x40, 0x4, 0x2, 0xfff8, 0x5, 0x6, 0x1, 0xbe, 0x96d], 0x9ea6}}) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000580)=0x4, 0x4) (async) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r1, 0x3b71, &(0x7f0000000600)={0x20, 0x1, &(0x7f00000005c0)="3a798781b1b768bbbd9f3d8d28e3b3891b5a6a222e76dc0b35160ec1", 0x2b9, 0x9}) (async) ioctl$HIDIOCGREPORTINFO(r1, 0xc00c4809, &(0x7f0000000640)={0x1, 0x0, 0x5}) (async) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000680)) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000006c0)={0x3}, 0x4) (async, rerun: 64) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000700)={0x0, 0x4, 0x3}) (rerun: 64) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000840)={&(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x6, 0x4, 0x3, 0x4}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000008c0)={&(0x7f0000000880)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000980)={0x0, r7, r8, 0x0, 0x0, 0x4, &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0]}) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f00000009c0)={0xc, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r1, 0x3b83, &(0x7f0000000a00)={0x28, 0x10000, 0x0, r9, 0x3e7a41, 0x2, 0x5, 0x3f4f9e}) (async) ioctl$XFS_IOC_FD_TO_HANDLE(r6, 0xc038586a, &(0x7f0000000b40)={r5, &(0x7f0000000a40)='\x00', 0x2, &(0x7f0000000a80)={@align=0x9c24, {0x9, 0x7, 0x2d2, 0x7}}, 0x8001, &(0x7f0000000ac0), &(0x7f0000000b00)=0x6}) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000b80)=0xffffffffffffffff) ioctl$VIDIOC_TRY_EXT_CTRLS(r10, 0xc0205649, &(0x7f0000000c40)={0x980000, 0x10001, 0x7fffffff, r11, 0x0, &(0x7f0000000c00)={0xa2095b, 0x1, '\x00', @p_u8=&(0x7f0000000bc0)=0x81}}) (async, rerun: 32) connect$unix(r10, &(0x7f0000000c80)=@file={0x1, './file0\x00'}, 0x6e) (async, rerun: 32) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r1, 0x3b65, 0xa) (async) ioctl$NILFS_IOCTL_GET_VINFO(r5, 0xc0186e86, &(0x7f0000000d40)={&(0x7f0000000d00)=[{0x3, 0x2, 0x4, 0x6}], 0x1, 0x20, 0x1, 0x7}) (async) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r12) (async) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000d80)=0xe760, 0x4) 384.922728ms ago: executing program 4 (id=775): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x7, 0x0, {0xfffffffffffffffd, 0xc3, 0xfffffffffffffffc, 0x7, 0x8, 0xffffffff, 0xfffffffe, 0x0, 0x80000, 0x8000, 0x0, 0x0, r2, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) write$vhost_msg(r3, 0x0, 0x0) 384.71896ms ago: executing program 5 (id=776): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000002c0)={0x2, 0x0, &(0x7f0000000280)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000003c0)={&(0x7f0000005980), 0x0, r1, 0x0, '\x00', 0x1, 0x41}) r2 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r2, r2, r2}, &(0x7f00000001c0)=""/188, 0xbc, &(0x7f0000000440)={&(0x7f0000000280)={'sm3-generic\x00'}, &(0x7f0000000340)="f1d950d54597c484c646b6ff3b4630c3de4e1038d229743ce31108c49caefe918b6211c895183a60a59b5a21b29bc0dd454e5d0cabfd992223a05423af8fee9c095dc13824496e1c727ce5236816f156d36ed398888c4177d48cda4aaf2ebd8ccc95f825cef7b512980a4ad6b0c39bd0bce687f6f37e105e374662fcf5500e8660a60fdffa3ab0a205cf7f6f9b8f1ad41623721551b6149960dbe319c7cefd179126d1aac73c56a15d4ec7e86b922878973e4512cf59efaec1ae6517826010426881a4c80f8cfffd757ebc648fda537c9bd919cbd6ad3888995aed3960b7d4f074b5c6f222f56917075c9011bcf818e32362", 0xf2}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000100)={0x3}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r4, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x2100, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) 374.953543ms ago: executing program 5 (id=777): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000180)={[{@barrier_val={'barrier', 0x3d, 0xfffffffffffffff8}}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@sysvgroups}, {@delalloc}]}, 0x5, 0x4fe, &(0x7f0000000c40)="$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") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000600)={'wlan1\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x7}}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0xc9100120, 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x29, 0x1a, 0x0, 0x0) setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(&(0x7f0000000080)='./file1\x00', 0x400000f030) 321.591152ms ago: executing program 5 (id=778): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000008b8db90e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = getpid() kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, 0xffffffffffffffff, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc018620b, &(0x7f000001ed80)) r3 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x21, &(0x7f0000000040)=0xffff, 0x4) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000540)=0x1, 0x100000000, 0x4) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendto$x25(r4, 0x0, 0x0, 0x24004850, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x2000c804, &(0x7f0000001100)={0xa, 0x4e22, 0x4, @loopback}, 0x1c) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x10102, 0x0) mremap(&(0x7f00009a1000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000fef000/0x4000)=nil) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000024c6", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000200000008500000083000000bc0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x100b, &(0x7f0000001e40)=""/4107}, 0x4c) r5 = socket$inet(0x2, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r5, 0x89f9, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@private1, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x5, 0xe}}) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r6, &(0x7f0000000280)={0x10, 0x30, 0xfa00, {0x0, 0x1, {0xa, 0x4e23, 0x9555, @private2={0xfc, 0x2, '\x00', 0x1}, 0x18}}}, 0x38) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, &(0x7f0000000400)={{r3, &(0x7f0000000500)='&^]\x00', 0x240000, &(0x7f0000000100)={@_ha_fsid={[0x7f, 0x8]}, {0x4, 0x111d, 0x80000001, 0x7}}, 0x5, &(0x7f0000000140), &(0x7f0000000180)=0x3}, 0x2, &(0x7f00000003c0)=[{0x2, 0x4, &(0x7f00000001c0)='(-*\x00', &(0x7f0000000240)="7ddd0e96ac940d12c4dc87dcabef2a12516a6c3669b59508bf61be9ce16a045a1dc86e2f4d06cc101e2d9a96c3c7cbbfcf28355dc3e32164b10fced85d53771cee60243e9f5036c56e87aff3228583df", 0x50, 0x4}, {0x2, 0x7, &(0x7f00000002c0)='.\x00', &(0x7f0000000300)="3bf2be4f000099e5c5", 0x9, 0x1a}]}) ioctl$UFFDIO_WAKE(r7, 0x8010aa02, &(0x7f00000004c0)={&(0x7f00009a2000/0x1000)=nil, 0x1000}) 232.456501ms ago: executing program 5 (id=779): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) close(r1) syz_clone(0x35200011, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) 210.557674ms ago: executing program 6 (id=780): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f00000003c0), &(0x7f00000004c0)=""/136}, 0x20) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x800, &(0x7f0000004140)=ANY=[], 0x1, 0x1c6, &(0x7f0000000780)="$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") 205.554674ms ago: executing program 1 (id=781): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x257, &(0x7f0000000740)="$eJzs3T9oJFUcB/DvzO4ac7fo6TWC+AdERAPh7ASbs1E4kOMQEVQ4EbFR7oTzgl1iZWOhtUoqmyB2RktJE20UwSpqitgIGiwMFlqs7M4G8mdNzG6yK5nPByYzk3kzvzfsfN9u83YD1Na5JBeTNJLMJGklKXY2uL9azvV3F6dXryadzjO/F7121X5l+7yzSRaSPJZkpSzyWjOZW35h48+1px5692brwY+Xn58e6032bW6sP7310eV3Prv06Ny33/96ucjFtHfd1/ErBvyvWSR3nkSx/4miOeke8F9ceevTH7q5P5/kgV7+WylTvXjv3bhlpZVHPvy3c9//7bu7x9lX4Ph1Oq3ue+BCB6idMkk7RTmbpNouy9nZ6jP8j40z5evXb7w58+r1m9demfRIBYzsq/PbW+tPfjH1+dk9+f+lUeUfOL3ayfqzV5Z+6m5vNSbdG2As7qlW3fzPvDT/cOQfakf+ob7kH+pL/qG+5B/qS/6hvuQfTrHWwYflH+pL/qG+5B/qa2f+AYB66UwNM2v49uOfiAyM3aTHHwAAAAAAAAAAAAAAAAAAYL/F6dWr28uw1yiO2P7rD5LNJ5I0B9Vv9H6POLm19/fMH0W32a5azWE72vfifSNeYESfTHj29W0/T7b+N/eecIGpgw/PX0sW3k5yodnc//wV/edveHcccrz18ogFjmhvPh9/brz19/p7abL1L60lX3bHnwuDxp8yd/XWg8ef9uFfsXyoN/4a8QIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACMzT8BAAD//9pxbTM=") openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x0, 0x148) 72.8392ms ago: executing program 6 (id=782): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x181) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x14a0, &(0x7f0000000700)=ANY=[], 0x1, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140ba}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x67}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = fanotify_init(0xf00, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000b40)={[{@data_err_ignore}, {@dioread_nolock}, {@nodelalloc}, {@nouid32}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x3a}}, {@dioread_lock}]}, 0x1, 0x47a, &(0x7f00000006c0)="$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") fanotify_mark(r2, 0x1, 0x5000003a, r1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x101000, 0x0) read$FUSE(r2, &(0x7f0000000f40)={0x2020}, 0x2020) getgroups(0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 69.990097ms ago: executing program 1 (id=783): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2f45849bedfa0de, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r3 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000a00ffffffffffffaaaaaaaaaa2588a82000810020000806aaaaaaaaa10f26c401d0710138fd3ea1f93e6e9608254c25e6a48d1d4c93840fbcdaf7553ef4f888f8757400"/85], 0x2e) 51.396487ms ago: executing program 5 (id=784): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}}, 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) clock_adjtime(0x5, 0xffffffffffffffff) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x18}, @in6=@mcast2, 0x0, 0x8, 0x0, 0xedf, 0xa, 0x0, 0x80, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x8000000000000001, 0x6, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000004, 0x800000000000002}, 0x5}}, 0xb8}}, 0x80) r2 = gettid() prlimit64(r2, 0x4c90a73dd5cbf0ec, &(0x7f0000000000)={0xaa5}, &(0x7f0000000040)) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, 0x0, &(0x7f0000000240)) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=@migrate={0xa0, 0x21, 0x1, 0x4, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x2, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x50, 0x11, [{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@multicast1, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000002500)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000000)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x240420c5}, 0x24000000) 0s ago: executing program 5 (id=785): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000300)=0x28, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$TIOCL_BLANKSCREEN(r0, 0x560f, &(0x7f0000000000)) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x113082, 0x0) syz_open_dev$I2C(&(0x7f0000000040), 0x9, 0x40) ioctl$TCXONC(r4, 0x540a, 0x3) kernel console output (not intermixed with test programs): ll for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 57.591421][ T5649] EXT4-fs (loop0): Remounting filesystem read-only [ 57.766815][ T5648] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 57.766881][ T5648] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 57.766906][ T5648] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.217: Failed to acquire dquot type 1 [ 57.766923][ T5648] loop3: lost filesystem error report for type 5 error -117 [ 57.773302][ T5648] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 57.773374][ T5648] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 57.773394][ T5648] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.217: Failed to acquire dquot type 1 [ 57.773409][ T5648] loop3: lost filesystem error report for type 5 error -117 [ 57.776836][ C0] EXT4-fs (loop3): error count since last fsck: 2 [ 57.776853][ C0] EXT4-fs (loop3): last error at time 524344: ext4_acquire_dquot:7034 [ 57.779863][ T5648] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.217: bg 0: block 248: padding at end of block bitmap is not set [ 57.779886][ T5648] loop3: lost filesystem error report for type 5 error -117 [ 57.782758][ T5648] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 57.782769][ T5648] loop3: lost filesystem error report for type 5 error -117 [ 57.785510][ T5648] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 57.785577][ T5648] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 57.785591][ T5648] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.217: Failed to acquire dquot type 1 [ 57.785601][ T5648] loop3: lost filesystem error report for type 5 error -117 [ 57.790396][ T5648] EXT4-fs (loop3): 1 orphan inode deleted [ 57.792563][ T5648] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.801285][ T5648] EXT4-fs (loop3): shut down requested (1) [ 57.837638][ T5655] loop1: detected capacity change from 0 to 128 [ 57.839564][ T5655] EXT4-fs: Ignoring removed oldalloc option [ 57.841979][ T5655] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 57.908117][ T5657] loop4: detected capacity change from 0 to 8192 [ 57.931272][ T4717] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.941260][ T5657] loop4: p1 p2 p4 [ 57.941353][ T5657] loop4: p1 size 65536 extends beyond EOD, truncated [ 57.943304][ T5657] loop4: p2 start 861536256 is beyond EOD, truncated [ 57.944820][ T5657] loop4: p4 size 65536 extends beyond EOD, truncated [ 57.962735][ T5660] loop3: detected capacity change from 0 to 1024 [ 58.025156][ T5660] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 58.259366][ T5660] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: comm syz.3.221: lblock 0 mapped to illegal pblock 0 (length 1) [ 58.266240][ T4712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.269857][ T5660] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 58.274209][ T5660] EXT4-fs (loop3): This should not happen!! Data will be lost [ 58.274209][ T5660] [ 58.276997][ T5660] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: comm syz.3.221: lblock 0 mapped to illegal pblock 0 (length 1) [ 58.282538][ T5665] netlink: 'syz.4.222': attribute type 1 has an invalid length. [ 58.294006][ T5660] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: block 3: comm syz.3.221: lblock 3 mapped to illegal pblock 3 (length 3) [ 58.345320][ T5660] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 58.345361][ T5660] EXT4-fs (loop3): This should not happen!! Data will be lost [ 58.345361][ T5660] [ 58.366561][ T5330] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:15: lblock 8 mapped to illegal pblock 8 (length 8) [ 58.367220][ T5330] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 58.367235][ T5330] EXT4-fs (loop3): This should not happen!! Data will be lost [ 58.367235][ T5330] [ 58.387990][ T4717] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 58.388764][ T4717] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 58.404838][ T5682] loop1: detected capacity change from 0 to 128 [ 58.406557][ T5682] vfat: Unknown parameter 'م;r_5h@\'w^ hORH!mLN@a6WH3Ы%Q'#x[I%XwfXȭW 8:>/ͺ"nj\`ugu:Cp<GWbesO1}Z-Ցx7bϗh@&WGTsG& [ 58.406557][ T5682] ɧx' [ 58.410709][ T5680] netlink: 'syz.0.228': attribute type 5 has an invalid length. [ 58.410721][ T5680] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.228'. [ 58.426740][ T5684] fuse: Bad value for 'fd' [ 58.442397][ T5687] netlink: 'syz.3.229': attribute type 5 has an invalid length. [ 58.442427][ T5687] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.229'. [ 58.455994][ T5316] udevd[5316]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 58.491013][ T4698] udevd[4698]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 58.514664][ T5696] loop3: detected capacity change from 0 to 1024 [ 58.519990][ T5696] EXT4-fs: Ignoring removed bh option [ 58.522175][ T5696] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 58.541307][ T5693] netlink: 'syz.4.232': attribute type 12 has an invalid length. [ 58.542230][ T5696] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.545054][ T5693] netlink: 'syz.4.232': attribute type 29 has an invalid length. [ 58.546470][ T5693] netlink: 148 bytes leftover after parsing attributes in process `syz.4.232'. [ 58.550036][ T5693] netlink: 59 bytes leftover after parsing attributes in process `syz.4.232'. [ 58.613227][ T5708] netlink: 'syz.4.232': attribute type 32 has an invalid length. [ 58.613262][ T5708] netlink: 8 bytes leftover after parsing attributes in process `syz.4.232'. [ 58.624207][ T5708] bond1: Setting coupled_control to off (0) [ 58.721916][ T5716] EXT4-fs error (device loop3): ext4_read_inline_dir:1494: inode #12: block 7: comm syz.3.234: path /: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 58.742523][ T5716] EXT4-fs (loop3): Remounting filesystem read-only [ 58.970329][ T5717] syz.0.239 uses obsolete (PF_INET,SOCK_PACKET) [ 59.521872][ T30] audit: type=1326 audit(524345.883:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5732 comm="syz.4.241" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d977aa8 code=0x0 [ 59.564264][ T5739] netlink: 'syz.0.244': attribute type 5 has an invalid length. [ 59.577502][ T5742] netlink: 'syz.1.245': attribute type 5 has an invalid length. [ 59.580650][ T5740] fuse: Bad value for 'fd' [ 59.582864][ T4717] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.632622][ T5751] trusted_key: syz.3.243 sent an empty control message without MSG_MORE. [ 59.645978][ T5752] Soft offlining pfn 0x11c500 at process virtual address 0x20000000 [ 59.654427][ T5752] Soft offline: 0x11c500: invalidated [ 59.655908][ T5752] Soft offlining pfn 0x11c060 at process virtual address 0x20010000 [ 59.657789][ T5752] Soft offline: 0x11c060: invalidated [ 59.657834][ T5752] Soft offlining pfn 0x132b90 at process virtual address 0x20020000 [ 59.660119][ T5752] Soft offline: 0x132b90: invalidated [ 59.660142][ T5752] Soft offlining pfn 0x130960 at process virtual address 0x20030000 [ 59.660226][ T5752] Soft offline: 0x130960: invalidated [ 59.660240][ T5752] Soft offlining pfn 0x149830 at process virtual address 0x20040000 [ 59.660281][ T5752] Soft offline: 0x149830: invalidated [ 59.660294][ T5752] Soft offlining pfn 0x149320 at process virtual address 0x20050000 [ 59.660331][ T5752] Soft offline: 0x149320: invalidated [ 59.664032][ T5752] Soft offlining pfn 0x149310 at process virtual address 0x20060000 [ 59.664204][ T5752] Soft offline: 0x149310: invalidated [ 59.664219][ T5752] Soft offlining pfn 0x1328c0 at process virtual address 0x20070000 [ 59.664259][ T5752] Soft offline: 0x1328c0: invalidated [ 59.664272][ T5752] Soft offlining pfn 0x149280 at process virtual address 0x20080000 [ 59.664311][ T5752] Soft offline: 0x149280: invalidated [ 59.664323][ T5752] Soft offlining pfn 0x149250 at process virtual address 0x20090000 [ 59.664360][ T5752] Soft offline: 0x149250: invalidated [ 59.664372][ T5752] Soft offlining pfn 0x1492b0 at process virtual address 0x200a0000 [ 59.664409][ T5752] Soft offline: 0x1492b0: invalidated [ 59.664420][ T5752] Soft offlining pfn 0x148e30 at process virtual address 0x200b0000 [ 59.664457][ T5752] Soft offline: 0x148e30: invalidated [ 59.664468][ T5752] Soft offlining pfn 0x149d00 at process virtual address 0x200c0000 [ 59.664505][ T5752] Soft offline: 0x149d00: invalidated [ 59.664516][ T5752] Soft offlining pfn 0x149d10 at process virtual address 0x200d0000 [ 59.664552][ T5752] Soft offline: 0x149d10: invalidated [ 59.664563][ T5752] Soft offlining pfn 0x1366c0 at process virtual address 0x200e0000 [ 59.664600][ T5752] Soft offline: 0x1366c0: invalidated [ 59.664611][ T5752] Soft offlining pfn 0x1366d0 at process virtual address 0x200f0000 [ 59.664652][ T5752] Soft offline: 0x1366d0: invalidated [ 59.664666][ T5752] Soft offlining pfn 0x1498c0 at process virtual address 0x20100000 [ 59.664705][ T5752] Soft offline: 0x1498c0: invalidated [ 59.664716][ T5752] Soft offlining pfn 0x1498d0 at process virtual address 0x20110000 [ 59.664752][ T5752] Soft offline: 0x1498d0: invalidated [ 59.664763][ T5752] Soft offlining pfn 0x136460 at process virtual address 0x20120000 [ 59.664800][ T5752] Soft offline: 0x136460: invalidated [ 59.664811][ T5752] Soft offlining pfn 0x136470 at process virtual address 0x20130000 [ 59.669028][ T5752] Soft offline: 0x136470: invalidated [ 59.669063][ T5752] Soft offlining pfn 0x11ad20 at process virtual address 0x20140000 [ 59.673385][ T5752] Soft offline: 0x11ad20: invalidated [ 59.673404][ T5752] Soft offlining pfn 0x11ad30 at process virtual address 0x20150000 [ 59.673516][ T5752] Soft offline: 0x11ad30: invalidated [ 59.673533][ T5752] Soft offlining pfn 0x149840 at process virtual address 0x20160000 [ 59.673577][ T5752] Soft offline: 0x149840: invalidated [ 59.673590][ T5752] Soft offlining pfn 0x149850 at process virtual address 0x20170000 [ 59.673628][ T5752] Soft offline: 0x149850: invalidated [ 59.673640][ T5752] Soft offlining pfn 0x149260 at process virtual address 0x20180000 [ 59.673690][ T5752] Soft offline: 0x149260: invalidated [ 59.673702][ T5752] Soft offlining pfn 0x149270 at process virtual address 0x20190000 [ 59.673740][ T5752] Soft offline: 0x149270: invalidated [ 59.673751][ T5752] Soft offlining pfn 0x138d20 at process virtual address 0x201a0000 [ 59.673789][ T5752] Soft offline: 0x138d20: invalidated [ 59.673801][ T5752] Soft offlining pfn 0x138d30 at process virtual address 0x201b0000 [ 59.673837][ T5752] Soft offline: 0x138d30: invalidated [ 59.673848][ T5752] Soft offlining pfn 0x1492c0 at process virtual address 0x201c0000 [ 59.673885][ T5752] Soft offline: 0x1492c0: invalidated [ 59.673896][ T5752] Soft offlining pfn 0x1492d0 at process virtual address 0x201d0000 [ 59.673932][ T5752] Soft offline: 0x1492d0: invalidated [ 59.673944][ T5752] Soft offlining pfn 0x1492e0 at process virtual address 0x201e0000 [ 59.673980][ T5752] Soft offline: 0x1492e0: invalidated [ 59.673991][ T5752] Soft offlining pfn 0x1492f0 at process virtual address 0x201f0000 [ 59.674027][ T5752] Soft offline: 0x1492f0: invalidated [ 59.674038][ T5752] Soft offlining pfn 0x148e40 at process virtual address 0x20200000 [ 59.674075][ T5752] Soft offline: 0x148e40: invalidated [ 59.674086][ T5752] Soft offlining pfn 0x148e50 at process virtual address 0x20210000 [ 59.674122][ T5752] Soft offline: 0x148e50: invalidated [ 59.674132][ T5752] Soft offlining pfn 0x148e60 at process virtual address 0x20220000 [ 59.674169][ T5752] Soft offline: 0x148e60: invalidated [ 59.674180][ T5752] Soft offlining pfn 0x148e70 at process virtual address 0x20230000 [ 59.674216][ T5752] Soft offline: 0x148e70: invalidated [ 59.674227][ T5752] Soft offlining pfn 0x138d40 at process virtual address 0x20240000 [ 59.674264][ T5752] Soft offline: 0x138d40: invalidated [ 59.674274][ T5752] Soft offlining pfn 0x138d50 at process virtual address 0x20250000 [ 59.674310][ T5752] Soft offline: 0x138d50: invalidated [ 59.674321][ T5752] Soft offlining pfn 0x138d60 at process virtual address 0x20260000 [ 59.674358][ T5752] Soft offline: 0x138d60: invalidated [ 59.674368][ T5752] Soft offlining pfn 0x138d70 at process virtual address 0x20270000 [ 59.674404][ T5752] Soft offline: 0x138d70: invalidated [ 59.674415][ T5752] Soft offlining pfn 0x138d80 at process virtual address 0x20280000 [ 59.674451][ T5752] Soft offline: 0x138d80: invalidated [ 59.674462][ T5752] Soft offlining pfn 0x138d90 at process virtual address 0x20290000 [ 59.682749][ T5752] Soft offline: 0x138d90: invalidated [ 59.682789][ T5752] Soft offlining pfn 0x138da0 at process virtual address 0x202a0000 [ 59.682874][ T5752] Soft offline: 0x138da0: invalidated [ 59.682887][ T5752] Soft offlining pfn 0x138db0 at process virtual address 0x202b0000 [ 59.682926][ T5752] Soft offline: 0x138db0: invalidated [ 59.682938][ T5752] Soft offlining pfn 0x138dc0 at process virtual address 0x202c0000 [ 59.682976][ T5752] Soft offline: 0x138dc0: invalidated [ 59.682988][ T5752] Soft offlining pfn 0x138dd0 at process virtual address 0x202d0000 [ 59.683025][ T5752] Soft offline: 0x138dd0: invalidated [ 59.683036][ T5752] Soft offlining pfn 0x138de0 at process virtual address 0x202e0000 [ 59.683073][ T5752] Soft offline: 0x138de0: invalidated [ 59.683086][ T5752] Soft offlining pfn 0x138df0 at process virtual address 0x202f0000 [ 59.683122][ T5752] Soft offline: 0x138df0: invalidated [ 59.683133][ T5752] Soft offlining pfn 0x138e00 at process virtual address 0x20300000 [ 59.683169][ T5752] Soft offline: 0x138e00: invalidated [ 59.683180][ T5752] Soft offlining pfn 0x138e10 at process virtual address 0x20310000 [ 59.683214][ T5752] Soft offline: 0x138e10: invalidated [ 59.683224][ T5752] Soft offlining pfn 0x138e20 at process virtual address 0x20320000 [ 59.683259][ T5752] Soft offline: 0x138e20: invalidated [ 59.683270][ T5752] Soft offlining pfn 0x138e30 at process virtual address 0x20330000 [ 59.683304][ T5752] Soft offline: 0x138e30: invalidated [ 59.683314][ T5752] Soft offlining pfn 0x138e40 at process virtual address 0x20340000 [ 59.683349][ T5752] Soft offline: 0x138e40: invalidated [ 59.683359][ T5752] Soft offlining pfn 0x138e50 at process virtual address 0x20350000 [ 59.683392][ T5752] Soft offline: 0x138e50: invalidated [ 59.683403][ T5752] Soft offlining pfn 0x138e60 at process virtual address 0x20360000 [ 59.683437][ T5752] Soft offline: 0x138e60: invalidated [ 59.683447][ T5752] Soft offlining pfn 0x138e70 at process virtual address 0x20370000 [ 59.683480][ T5752] Soft offline: 0x138e70: invalidated [ 59.683491][ T5752] Soft offlining pfn 0x138e80 at process virtual address 0x20380000 [ 59.683525][ T5752] Soft offline: 0x138e80: invalidated [ 59.683535][ T5752] Soft offlining pfn 0x138e90 at process virtual address 0x20390000 [ 59.683568][ T5752] Soft offline: 0x138e90: invalidated [ 59.683579][ T5752] Soft offlining pfn 0x138ea0 at process virtual address 0x203a0000 [ 59.683613][ T5752] Soft offline: 0x138ea0: invalidated [ 59.683623][ T5752] Soft offlining pfn 0x138eb0 at process virtual address 0x203b0000 [ 59.683666][ T5752] Soft offline: 0x138eb0: invalidated [ 59.683679][ T5752] Soft offlining pfn 0x138ec0 at process virtual address 0x203c0000 [ 59.683713][ T5752] Soft offline: 0x138ec0: invalidated [ 59.683723][ T5752] Soft offlining pfn 0x138ed0 at process virtual address 0x203d0000 [ 59.693611][ T5752] Soft offline: 0x138ed0: invalidated [ 59.693629][ T5752] Soft offlining pfn 0x138ee0 at process virtual address 0x203e0000 [ 59.693883][ T5752] Soft offline: 0x138ee0: invalidated [ 59.693895][ T5752] Soft offlining pfn 0x138ef0 at process virtual address 0x203f0000 [ 59.693932][ T5752] Soft offline: 0x138ef0: invalidated [ 59.693944][ T5752] Soft offlining pfn 0x138f00 at process virtual address 0x20400000 [ 59.693980][ T5752] Soft offline: 0x138f00: invalidated [ 59.693991][ T5752] Soft offlining pfn 0x138f10 at process virtual address 0x20410000 [ 59.694026][ T5752] Soft offline: 0x138f10: invalidated [ 59.694036][ T5752] Soft offlining pfn 0x138f20 at process virtual address 0x20420000 [ 59.694071][ T5752] Soft offline: 0x138f20: invalidated [ 59.694082][ T5752] Soft offlining pfn 0x138f30 at process virtual address 0x20430000 [ 59.694116][ T5752] Soft offline: 0x138f30: invalidated [ 59.694126][ T5752] Soft offlining pfn 0x138f40 at process virtual address 0x20440000 [ 59.694161][ T5752] Soft offline: 0x138f40: invalidated [ 59.694172][ T5752] Soft offlining pfn 0x138f50 at process virtual address 0x20450000 [ 59.694205][ T5752] Soft offline: 0x138f50: invalidated [ 59.694216][ T5752] Soft offlining pfn 0x138f60 at process virtual address 0x20460000 [ 59.694250][ T5752] Soft offline: 0x138f60: invalidated [ 59.694260][ T5752] Soft offlining pfn 0x138f70 at process virtual address 0x20470000 [ 59.694294][ T5752] Soft offline: 0x138f70: invalidated [ 59.694304][ T5752] Soft offlining pfn 0x138f80 at process virtual address 0x20480000 [ 59.694338][ T5752] Soft offline: 0x138f80: invalidated [ 59.694349][ T5752] Soft offlining pfn 0x138f90 at process virtual address 0x20490000 [ 59.694382][ T5752] Soft offline: 0x138f90: invalidated [ 59.696631][ T5752] Soft offlining pfn 0x138fa0 at process virtual address 0x204a0000 [ 59.696728][ T5752] Soft offline: 0x138fa0: invalidated [ 59.696745][ T5752] Soft offlining pfn 0x138fb0 at process virtual address 0x204b0000 [ 59.696786][ T5752] Soft offline: 0x138fb0: invalidated [ 59.696799][ T5752] Soft offlining pfn 0x138fc0 at process virtual address 0x204c0000 [ 59.696836][ T5752] Soft offline: 0x138fc0: invalidated [ 59.696848][ T5752] Soft offlining pfn 0x138fd0 at process virtual address 0x204d0000 [ 59.696883][ T5752] Soft offline: 0x138fd0: invalidated [ 59.696894][ T5752] Soft offlining pfn 0x138fe0 at process virtual address 0x204e0000 [ 59.697103][ T5752] Soft offline: 0x138fe0: invalidated [ 59.697114][ T5752] Soft offlining pfn 0x138ff0 at process virtual address 0x204f0000 [ 59.697149][ T5752] Soft offline: 0x138ff0: invalidated [ 59.697159][ T5752] Soft offlining pfn 0x138800 at process virtual address 0x20500000 [ 59.697194][ T5752] Soft offline: 0x138800: invalidated [ 59.697205][ T5752] Soft offlining pfn 0x138810 at process virtual address 0x20510000 [ 59.697239][ T5752] Soft offline: 0x138810: invalidated [ 59.697249][ T5752] Soft offlining pfn 0x138820 at process virtual address 0x20520000 [ 59.697284][ T5752] Soft offline: 0x138820: invalidated [ 59.697294][ T5752] Soft offlining pfn 0x138830 at process virtual address 0x20530000 [ 59.697328][ T5752] Soft offline: 0x138830: invalidated [ 59.697338][ T5752] Soft offlining pfn 0x138840 at process virtual address 0x20540000 [ 59.697373][ T5752] Soft offline: 0x138840: invalidated [ 59.697383][ T5752] Soft offlining pfn 0x138850 at process virtual address 0x20550000 [ 59.697417][ T5752] Soft offline: 0x138850: invalidated [ 59.697427][ T5752] Soft offlining pfn 0x138860 at process virtual address 0x20560000 [ 59.697461][ T5752] Soft offline: 0x138860: invalidated [ 59.697471][ T5752] Soft offlining pfn 0x138870 at process virtual address 0x20570000 [ 59.697505][ T5752] Soft offline: 0x138870: invalidated [ 59.697515][ T5752] Soft offlining pfn 0x138880 at process virtual address 0x20580000 [ 59.706165][ T5752] Soft offline: 0x138880: invalidated [ 59.706189][ T5752] Soft offlining pfn 0x138890 at process virtual address 0x20590000 [ 59.706429][ T5752] Soft offline: 0x138890: invalidated [ 59.706442][ T5752] Soft offlining pfn 0x1388a0 at process virtual address 0x205a0000 [ 59.706480][ T5752] Soft offline: 0x1388a0: invalidated [ 59.706492][ T5752] Soft offlining pfn 0x1388b0 at process virtual address 0x205b0000 [ 59.706528][ T5752] Soft offline: 0x1388b0: invalidated [ 59.706539][ T5752] Soft offlining pfn 0x1388c0 at process virtual address 0x205c0000 [ 59.706575][ T5752] Soft offline: 0x1388c0: invalidated [ 59.706586][ T5752] Soft offlining pfn 0x1388d0 at process virtual address 0x205d0000 [ 59.706620][ T5752] Soft offline: 0x1388d0: invalidated [ 59.706631][ T5752] Soft offlining pfn 0x1388e0 at process virtual address 0x205e0000 [ 59.706676][ T5752] Soft offline: 0x1388e0: invalidated [ 59.706687][ T5752] Soft offlining pfn 0x1388f0 at process virtual address 0x205f0000 [ 59.706917][ T5752] Soft offline: 0x1388f0: invalidated [ 59.709057][ T5755] loop2: detected capacity change from 0 to 4096 [ 59.720451][ T5755] EXT4-fs (loop2): Test dummy encryption mode enabled [ 59.737124][ T5760] overlayfs: missing 'lowerdir' [ 59.751877][ T5755] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.794774][ T5752] EXT4-fs error (device loop0): __ext4_new_inode:1079: comm syz.0.248: reserved inode found cleared - inode=2 [ 59.940283][ T5773] EXT4-fs: Ignoring removed bh option [ 59.951977][ T5773] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 60.004864][ T5782] fuse: Bad value for 'group_id' [ 60.005886][ T5782] fuse: Bad value for 'group_id' [ 60.036829][ T5784] netlink: 'syz.0.257': attribute type 11 has an invalid length. [ 60.162486][ T5795] EXT4-fs error (device loop4): ext4_read_inline_dir:1494: inode #12: block 7: comm syz.4.253: path /: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 60.186895][ T5795] EXT4-fs (loop4): Remounting filesystem read-only [ 60.370141][ T5800] fuse: Bad value for 'fd' [ 60.615598][ T30] audit: type=1326 audit(524347.311:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5809 comm="syz.0.264" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff94777aa8 code=0x0 [ 60.994416][ T5831] netlink: 'syz.2.270': attribute type 1 has an invalid length. [ 60.994770][ T5831] Soft offlining pfn 0x21cf58 at process virtual address 0x20ffe000 [ 61.001131][ T5831] Memory failure: 0x21cf58: unhandlable page. [ 61.036507][ T5837] fuse: Bad value for 'fd' [ 61.191296][ T5851] fuse: Bad value for 'group_id' [ 61.191324][ T5851] fuse: Bad value for 'group_id' [ 61.343766][ T5857] EXT4-fs: Ignoring removed bh option [ 61.346433][ T5857] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 61.551795][ T5862] __nla_validate_parse: 7 callbacks suppressed [ 61.551845][ T5862] netlink: 4 bytes leftover after parsing attributes in process `syz.0.278'. [ 61.560617][ T5862] EXT4-fs error (device loop0): ext4_read_inline_dir:1494: inode #12: block 7: comm syz.0.278: path /: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 61.569996][ T5862] EXT4-fs (loop0): Remounting filesystem read-only [ 61.849038][ T5864] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.279'. [ 61.854006][ T5866] set_capacity_and_notify: 3 callbacks suppressed [ 61.854037][ T5866] loop2: detected capacity change from 0 to 512 [ 61.855449][ T5866] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 61.855464][ T5866] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 61.857092][ T5866] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 61.857235][ T5866] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 61.857260][ T5866] System zones: 0-2, 18-18, 34-35 [ 61.888801][ T5866] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 61.890843][ T5866] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.280: bg 0: block 353: padding at end of block bitmap is not set [ 61.893822][ T5866] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 61.902088][ T5869] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.281'. [ 61.905091][ T4716] EXT4-fs error (device loop2): ext4_readdir:265: inode #2: block 3: comm syz-executor: path /49/file0: bad entry in directory: inode out of bounds - offset=24, inode=134217739, rec_len=20, size=2048 fake=0 [ 61.981427][ T5878] fuse: Bad value for 'fd' [ 62.077089][ T5886] loop4: detected capacity change from 0 to 512 [ 62.083305][ T5888] tipc: Enabling of bearer rejected, failed to enable media [ 62.086748][ T5886] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 62.091026][ T5886] EXT4-fs (loop4): 1 truncate cleaned up [ 62.103172][ T5888] bond1: entered promiscuous mode [ 62.104393][ T5888] 8021q: adding VLAN 0 to HW filter on device bond1 [ 62.304697][ T30] audit: type=1326 audit(524348.909:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5883 comm="syz.3.288" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ab77aa8 code=0x0 [ 62.566133][ T5326] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.599796][ T5900] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.291'. [ 62.648765][ T5326] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.667168][ T5905] fuse: Bad value for 'fd' [ 62.676996][ T5903] loop0: detected capacity change from 0 to 512 [ 62.677362][ T5903] EXT4-fs: Ignoring removed nomblk_io_submit option [ 62.681931][ T5903] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 62.685683][ T5903] EXT4-fs (loop0): mount failed [ 62.695692][ T4711] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.697159][ T4711] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.701014][ T4711] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.704851][ T4711] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.708935][ T4711] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 62.734454][ T5326] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.780944][ T5923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.299'. [ 62.795503][ T5923] ip6erspan0: entered promiscuous mode [ 62.803771][ T5326] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.850174][ T5927] fuse: Bad value for 'group_id' [ 62.850200][ T5927] fuse: Bad value for 'group_id' [ 63.046727][ T5937] loop3: detected capacity change from 0 to 1024 [ 63.051224][ T5937] EXT4-fs: Ignoring removed bh option [ 63.057097][ T5937] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 63.179397][ T5326] bridge_slave_1: left allmulticast mode [ 63.180777][ T5326] bridge_slave_1: left promiscuous mode [ 63.182439][ T5326] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.188265][ T5326] bridge_slave_0: left allmulticast mode [ 63.189310][ T5326] bridge_slave_0: left promiscuous mode [ 63.190430][ T5326] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.275620][ T5962] netlink: 4 bytes leftover after parsing attributes in process `syz.3.301'. [ 63.331173][ T5963] EXT4-fs error (device loop3): ext4_read_inline_dir:1494: inode #12: block 7: comm syz.3.301: path /: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 63.337322][ T5963] EXT4-fs (loop3): Remounting filesystem read-only [ 63.555398][ T5326] team0: Port device bond0 removed [ 63.557305][ T5326] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 63.574729][ T5326] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 63.616109][ T5326] bond0 (unregistering): Released all slaves [ 63.622606][ T4394] 8021q: adding VLAN 0 to HW filter on device eth0 [ 63.709623][ T5908] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.713349][ T5908] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.713436][ T5908] bridge_slave_0: entered allmulticast mode [ 63.713906][ T5908] bridge_slave_0: entered promiscuous mode [ 63.723469][ T5908] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.725057][ T5908] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.725156][ T5908] bridge_slave_1: entered allmulticast mode [ 63.725612][ T5908] bridge_slave_1: entered promiscuous mode [ 63.770560][ T5980] fuse: Bad value for 'fd' [ 63.855123][ T5908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.859196][ T5908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.873517][ T5908] team0: Port device team_slave_0 added [ 63.874465][ T5908] team0: Port device team_slave_1 added [ 63.888492][ T5908] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.896222][ T5908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.909311][ T5908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.910037][ T5908] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.910053][ T5908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.910075][ T5908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.959263][ T6009] netlink: 'syz.0.310': attribute type 11 has an invalid length. [ 63.968257][ T4394] 8021q: adding VLAN 0 to HW filter on device eth3 [ 64.029230][ T5908] hsr_slave_0: entered promiscuous mode [ 64.029577][ T5908] hsr_slave_1: entered promiscuous mode [ 64.029785][ T5908] debugfs: 'hsr0' already exists in 'hsr' [ 64.029800][ T5908] Cannot create hsr debugfs directory [ 64.291169][ T30] audit: type=1326 audit(524350.744:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6014 comm="syz.3.311" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ab77aa8 code=0x0 [ 64.584023][ T5326] hsr_slave_0: left promiscuous mode [ 64.585620][ T5326] hsr_slave_1: left promiscuous mode [ 64.585976][ T5326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.585998][ T5326] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.592740][ T5326] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.594232][ T5326] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.604295][ T5326] veth1_macvtap: left promiscuous mode [ 64.606594][ T5326] veth0_macvtap: left promiscuous mode [ 64.606689][ T5326] veth1_vlan: left promiscuous mode [ 64.606785][ T5326] veth0_vlan: left promiscuous mode [ 64.767989][ T6061] validate_nla: 5 callbacks suppressed [ 64.769287][ T6061] netlink: 'syz.4.314': attribute type 10 has an invalid length. [ 64.796213][ T5326] team0 (unregistering): Port device team_slave_1 removed [ 64.810777][ T5326] team0 (unregistering): Port device team_slave_0 removed [ 64.908415][ T4723] Bluetooth: hci3: command tx timeout [ 64.922579][ T6069] loop3: detected capacity change from 0 to 512 [ 64.951546][ T6061] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.952332][ T6061] bond0: (slave team0): Enslaving as an active interface with an up link [ 64.952764][ T4394] 8021q: adding VLAN 0 to HW filter on device eth1 [ 65.050947][ T6080] fuse: Bad value for 'fd' [ 65.090961][ T6083] loop1: detected capacity change from 0 to 1024 [ 65.091350][ T6083] EXT4-fs: Ignoring removed bh option [ 65.095793][ T6083] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 65.114397][ T6094] netlink: 'syz.3.322': attribute type 5 has an invalid length. [ 65.116055][ T6094] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.322'. [ 65.119878][ T5908] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 65.132886][ T5908] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 65.133755][ T5908] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 65.147427][ T5908] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 65.147727][ T5908] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 65.151642][ T5908] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 65.155555][ T5908] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 65.158646][ T5908] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 65.169196][ T6099] loop4: detected capacity change from 0 to 4096 [ 65.249269][ T5908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.256949][ T5908] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.261731][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.261783][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.262349][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.262373][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.331562][ T6115] netlink: 4 bytes leftover after parsing attributes in process `syz.1.320'. [ 65.387820][ T6116] EXT4-fs error (device loop1): ext4_read_inline_dir:1494: inode #12: block 7: comm syz.1.320: path /: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 65.407908][ T6116] EXT4-fs (loop1): Remounting filesystem read-only [ 65.734278][ T6120] loop3: detected capacity change from 0 to 512 [ 65.734666][ T6120] EXT4-fs: Ignoring removed mblk_io_submit option [ 65.738111][ T6120] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 65.755630][ T6120] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 65.755754][ T6120] EXT4-fs (loop3): orphan cleanup on readonly fs [ 65.756212][ T6120] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.325: Invalid block bitmap block 0 in block_group 0 [ 65.756227][ T6120] loop3: lost filesystem error report for type 5 error -117 [ 65.757301][ T6120] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.325: Invalid block bitmap block 0 in block_group 0 [ 65.757318][ T6120] loop3: lost filesystem error report for type 5 error -117 [ 65.757459][ T6120] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.325: Invalid block bitmap block 0 in block_group 0 [ 65.757470][ T6120] loop3: lost filesystem error report for type 5 error -117 [ 65.757611][ T6120] Quota error (device loop3): write_blk: dquota write failed [ 65.757637][ T6120] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 65.757655][ T6120] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.325: Failed to acquire dquot type 1 [ 65.757664][ T6120] loop3: lost filesystem error report for type 5 error -28 [ 65.758053][ T6120] EXT4-fs (loop3): 1 orphan inode deleted [ 65.760385][ C0] EXT4-fs (loop3): error count since last fsck: 4 [ 65.760398][ C0] EXT4-fs (loop3): last error at time 524352: ext4_acquire_dquot:7034 [ 65.768067][ T1462] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-5 [ 65.768094][ T1462] EXT4-fs error (device loop3): ext4_release_dquot:7070: comm kworker/u8:6: Failed to release dquot type 1 [ 65.768105][ T1462] loop3: lost filesystem error report for type 5 error -117 [ 65.782725][ T6120] EXT4-fs error (device loop3): ext4_lookup:1789: inode #2: comm syz.3.325: deleted inode referenced: 12 [ 65.785172][ T6120] EXT4-fs error (device loop3): ext4_lookup:1789: inode #2: comm syz.3.325: deleted inode referenced: 12 [ 65.786248][ T6120] EXT4-fs error (device loop3): ext4_lookup:1789: inode #2: comm syz.3.325: deleted inode referenced: 12 [ 65.806981][ T4717] EXT4-fs error (device loop3): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 12 [ 65.809841][ T4717] EXT4-fs error (device loop3): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 12 [ 65.841781][ T4394] 8021q: adding VLAN 0 to HW filter on device eth2 [ 66.033112][ T1596] ieee802154 phy0 wpan0: encryption failed: -22 [ 66.034397][ T1596] ieee802154 phy1 wpan1: encryption failed: -22 [ 66.042195][ T30] audit: type=1326 audit(524352.445:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6131 comm="syz.4.326" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d977aa8 code=0x0 [ 66.052441][ T867] cfg80211: failed to load regulatory.db [ 66.384903][ T5908] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.390740][ T6155] syzkaller0: tun_chr_ioctl cmd 1074025672 [ 66.392011][ T6155] syzkaller0: ignored: set checksum disabled [ 66.471567][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.510490][ T6164] netlink: 'syz.1.335': attribute type 5 has an invalid length. [ 66.510526][ T6164] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.335'. [ 66.536230][ T5908] veth0_vlan: entered promiscuous mode [ 66.541506][ T4711] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 66.543885][ T5908] veth1_vlan: entered promiscuous mode [ 66.552820][ T4711] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 66.554890][ T5908] veth0_macvtap: entered promiscuous mode [ 66.555512][ T4711] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 66.563725][ T4711] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 66.567621][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.570056][ T4711] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 66.582810][ T5908] veth1_macvtap: entered promiscuous mode [ 66.594814][ T5908] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.599405][ T5908] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.607326][ T5326] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.607372][ T5326] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.607439][ T5326] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.607489][ T5326] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.651650][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.661129][ T1462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.661155][ T1462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.678234][ T1462] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.678265][ T1462] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.755975][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.765206][ T6187] loop0: detected capacity change from 0 to 1024 [ 66.767860][ T6187] EXT4-fs: Ignoring removed bh option [ 66.768819][ T6187] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 66.801850][ T6187] EXT4-fs mount: 21 callbacks suppressed [ 66.801884][ T6187] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.985041][ T6208] netlink: 4 bytes leftover after parsing attributes in process `syz.0.339'. [ 66.994129][ T6208] EXT4-fs error (device loop0): ext4_read_inline_dir:1494: inode #12: block 7: comm syz.0.339: path /: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 66.995415][ T6208] EXT4-fs (loop0): Remounting filesystem read-only [ 67.141033][ T4723] Bluetooth: hci3: command tx timeout [ 67.463722][ T30] audit: type=1326 audit(524353.817:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6213 comm="syz.1.346" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e577aa8 code=0x0 [ 67.528641][ T12] bridge_slave_1: left allmulticast mode [ 67.528682][ T12] bridge_slave_1: left promiscuous mode [ 67.528863][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.547333][ T12] bridge_slave_0: left allmulticast mode [ 67.548984][ T12] bridge_slave_0: left promiscuous mode [ 67.551611][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.746575][ T4712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.789981][ T6222] loop0: detected capacity change from 0 to 512 [ 67.827427][ T6222] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 67.832606][ T6222] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 67.832724][ T6222] EXT4-fs (loop0): orphan cleanup on readonly fs [ 67.836049][ T6222] EXT4-fs warning (device loop0): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 67.836079][ T6222] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 67.849399][ T6222] EXT4-fs (loop0): 1 orphan inode deleted [ 67.851110][ T6222] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 67.877976][ T4712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.134247][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 68.140823][ T6230] loop0: detected capacity change from 0 to 512 [ 68.145324][ T6230] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 68.147130][ T6230] EXT4-fs (loop0): invalid journal inode [ 68.148471][ T6230] EXT4-fs (loop0): can't get journal size [ 68.152236][ T6230] EXT4-fs (loop0): 1 truncate cleaned up [ 68.152847][ T6230] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.164949][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 68.177535][ T12] bond0 (unregistering): Released all slaves [ 68.288242][ T12] tipc: Disabling bearer [ 68.289234][ T12] tipc: Left network mode [ 68.296545][ T6167] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.297431][ T6167] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.297501][ T6167] bridge_slave_0: entered allmulticast mode [ 68.297979][ T6167] bridge_slave_0: entered promiscuous mode [ 68.303029][ T6167] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.303148][ T6167] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.303218][ T6167] bridge_slave_1: entered allmulticast mode [ 68.303654][ T6167] bridge_slave_1: entered promiscuous mode [ 68.320090][ T6167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.322588][ T6167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.331217][ T6167] team0: Port device team_slave_0 added [ 68.332201][ T6167] team0: Port device team_slave_1 added [ 68.343006][ T6167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.343027][ T6167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.343041][ T6167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.343986][ T6167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.343995][ T6167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.344010][ T6167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.356185][ T6167] hsr_slave_0: entered promiscuous mode [ 68.356572][ T6167] hsr_slave_1: entered promiscuous mode [ 68.356766][ T6167] debugfs: 'hsr0' already exists in 'hsr' [ 68.356777][ T6167] Cannot create hsr debugfs directory [ 68.442842][ T4394] 8021q: adding VLAN 0 to HW filter on device eth4 [ 68.581392][ T6167] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 68.617432][ T6167] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 68.617769][ T6167] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 68.620036][ T6167] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 68.632857][ T6270] loop1: detected capacity change from 0 to 1024 [ 68.634443][ T6270] EXT4-fs: Ignoring removed bh option [ 68.635889][ T6270] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 68.646382][ T6167] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 68.648949][ T6167] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 68.653161][ T6167] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 68.659224][ T6270] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.660698][ T6167] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 68.670837][ T12] hsr_slave_0: left promiscuous mode [ 68.672102][ T12] hsr_slave_1: left promiscuous mode [ 68.672433][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.672450][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.677105][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.678585][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.688806][ T12] veth1_macvtap: left promiscuous mode [ 68.688842][ T12] veth0_macvtap: left promiscuous mode [ 68.688888][ T12] veth1_vlan: left promiscuous mode [ 68.688918][ T12] veth0_vlan: left promiscuous mode [ 68.738746][ T6276] overlay: filesystem on ./file0 not supported as upperdir [ 68.748020][ T6276] overlay: filesystem on ./file0 not supported as upperdir [ 68.749713][ T6276] overlay: filesystem on ./file0 not supported as upperdir [ 68.751203][ T6276] overlay: filesystem on ./file0 not supported as upperdir [ 68.753032][ T6276] overlay: filesystem on ./file0 not supported as upperdir [ 68.754503][ T6276] overlay: filesystem on ./file0 not supported as upperdir [ 68.756027][ T6276] overlay: filesystem on ./file0 not supported as upperdir [ 68.757549][ T6276] overlay: filesystem on ./file0 not supported as upperdir [ 68.759055][ T6276] overlay: filesystem on ./file0 not supported as upperdir [ 68.760504][ T6276] overlay: filesystem on ./file0 not supported as upperdir [ 68.762410][ T6276] overlay: filesystem on ./file0 not supported as upperdir [ 68.764738][ T4723] Bluetooth: hci4: command tx timeout [ 68.766715][ T6276] overlay: filesystem on ./file0 not supported as upperdir [ 68.768137][ T6276] overlay: filesystem on ./file0 not supported as upperdir [ 68.768317][ T6276] overlay: filesystem on ./file0 not supported as upperdir [ 68.768599][ T6276] overlay: filesystem on ./file0 not supported as upperdir [ 68.768792][ T6276] overlay: filesystem on ./file0 not supported as upperdir [ 68.769653][ T6276] overlay: filesystem on ./file0 not supported as upperdir [ 68.770281][ T6276] overlay: filesystem on ./file0 not supported as upperdir [ 68.770483][ T6276] overlay: filesystem on ./file0 not supported as upperdir [ 68.771087][ T6276] overlay: filesystem on ./file0 not supported as upperdir [ 68.772299][ T6276] overlay: filesystem on ./file0 not supported as upperdir [ 68.773256][ T6276] overlay: filesystem on ./file0 not supported as upperdir [ 68.776348][ T6276] overlay: filesystem on ./file0 not supported as upperdir [ 68.776991][ T6276] overlay: filesystem on ./file0 not supported as upperdir [ 68.779093][ T6276] overlay: filesystem on ./file0 not supported as upperdir [ 68.780367][ T6276] overlay: filesystem on ./file0 not supported as upperdir [ 68.780767][ T6276] overlay: filesystem on ./file0 not supported as upperdir [ 68.782082][ T6276] overlay: filesystem on ./file0 not supported as upperdir [ 68.787320][ T6276] overlay: filesystem on ./file0 not supported as upperdir [ 68.789627][ T6276] overlay: filesystem on ./file0 not supported as upperdir [ 68.790449][ T6276] overlay: filesystem on ./file0 not supported as upperdir [ 68.793431][ T6276] overlay: filesystem on ./file0 not supported as upperdir [ 68.794278][ T6276] overlay: filesystem on ./file0 not supported as upperdir [ 68.797172][ T6276] overlay: filesystem on ./file0 not supported as upperdir [ 68.875840][ T12] team0 (unregistering): Port device team_slave_1 removed [ 68.880180][ T12] team0 (unregistering): Port device team_slave_0 removed [ 68.933509][ T4394] 8021q: adding VLAN 0 to HW filter on device eth5 [ 68.944964][ T4705] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2860: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 68.962467][ T6167] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.962509][ T6167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.962588][ T6167] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.962623][ T6167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.973119][ T4705] EXT4-fs error (device loop1): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /77/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 68.973859][ T4705] EXT4-fs (loop1): Remounting filesystem read-only [ 68.978824][ T4705] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.001430][ T6301] loop1: detected capacity change from 0 to 1024 [ 69.001990][ T6301] EXT4-fs: Ignoring removed bh option [ 69.002320][ T6301] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 69.025665][ T6301] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.088537][ T6167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.099890][ T6167] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.136765][ T6167] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.136801][ T6167] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.144703][ T4712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.206272][ T6320] netlink: 40 bytes leftover after parsing attributes in process `syz.1.356'. [ 69.263353][ T6321] EXT4-fs error (device loop1): ext4_read_inline_dir:1494: inode #12: block 7: comm syz.1.356: path /: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 69.268238][ T6321] EXT4-fs (loop1): Remounting filesystem read-only [ 69.472052][ T4394] 8021q: adding VLAN 0 to HW filter on device eth6 [ 69.493248][ T12] IPVS: stop unused estimator thread 0... [ 69.615444][ T6167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.648266][ T4394] 8021q: adding VLAN 0 to HW filter on device eth7 [ 69.705698][ T6167] veth0_vlan: entered promiscuous mode [ 69.707962][ T6167] veth1_vlan: entered promiscuous mode [ 69.722679][ T6167] veth0_macvtap: entered promiscuous mode [ 69.725997][ T6167] veth1_macvtap: entered promiscuous mode [ 69.737392][ T6167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.741983][ T6167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.745881][ T5324] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.746299][ T5324] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.746327][ T5324] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.746345][ T5324] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.796201][ T3439] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.802804][ T5326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.802831][ T5326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.818162][ T5325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.818185][ T5325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.894210][ T4711] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.928854][ T4711] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.931381][ T4711] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.936543][ T4711] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.939764][ T4711] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.958873][ T4705] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.569371][ T30] audit: type=1326 audit(524356.632:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6418 comm="syz.1.371" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e577aa8 code=0x0 [ 70.790798][ T6442] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 70.793271][ T6374] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.793346][ T6374] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.793578][ T6374] bridge_slave_0: entered allmulticast mode [ 70.794154][ T6374] bridge_slave_0: entered promiscuous mode [ 70.795844][ T6442] overlayfs: failed to set xattr on upper [ 70.795861][ T6442] overlayfs: ...falling back to redirect_dir=nofollow. [ 70.795867][ T6442] overlayfs: ...falling back to uuid=null. [ 70.796459][ T6374] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.796512][ T6374] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.796585][ T6374] bridge_slave_1: entered allmulticast mode [ 70.797038][ T6374] bridge_slave_1: entered promiscuous mode [ 70.801692][ T6441] loop6: detected capacity change from 0 to 1024 [ 70.808303][ T6374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.810970][ T6374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.815302][ T6441] EXT4-fs: Ignoring removed bh option [ 70.818031][ T6442] netlink: 'syz.0.374': attribute type 5 has an invalid length. [ 70.818063][ T6442] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.374'. [ 70.822495][ T6441] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 70.826391][ T6374] team0: Port device team_slave_0 added [ 70.828266][ T6374] team0: Port device team_slave_1 added [ 70.838011][ T6441] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.845865][ T6374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.847250][ T6374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.851879][ T6374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.856340][ T6374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.856360][ T6374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.856383][ T6374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.891063][ T6374] hsr_slave_0: entered promiscuous mode [ 70.892641][ T6374] hsr_slave_1: entered promiscuous mode [ 70.894281][ T6374] debugfs: 'hsr0' already exists in 'hsr' [ 70.895620][ T6374] Cannot create hsr debugfs directory [ 71.011562][ T4711] Bluetooth: hci4: command tx timeout [ 71.017215][ T6449] netlink: 4 bytes leftover after parsing attributes in process `syz.6.375'. [ 71.017356][ T6449] bridge: renamed from macsec0 (while UP) [ 71.032026][ T6449] EXT4-fs error (device loop6): ext4_read_inline_dir:1494: inode #12: block 7: comm syz.6.375: path /: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 71.231673][ T6449] EXT4-fs (loop6): Remounting filesystem read-only [ 71.272990][ T6453] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.377'. [ 71.276829][ T6454] loop4: detected capacity change from 0 to 512 [ 71.282400][ T6454] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.378: ea_inode with extended attributes [ 71.285208][ T6454] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 71.285631][ C0] EXT4-fs (loop4): initial error at time 524357: ext4_xattr_inode_iget:441: inode 11 [ 71.285688][ C0] EXT4-fs (loop4): last error at time 524357: ext4_xattr_inode_iget:441: inode 11 [ 71.296685][ T6454] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.378: error while reading EA inode 11 err=-117 [ 71.296713][ T6454] loop4: lost filesystem error report for type 5 error -117 [ 71.299500][ T6454] EXT4-fs (loop4): 1 orphan inode deleted [ 71.304280][ T6454] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.321947][ T6457] 9p: Bad value for 'wfdno' [ 71.325711][ T4708] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.406763][ T6467] loop4: detected capacity change from 0 to 512 [ 71.411033][ T6467] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.382: corrupted in-inode xattr: invalid ea_ino [ 71.413448][ T6467] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 71.413875][ T6467] EXT4-fs (loop4): Remounting filesystem read-only [ 71.415791][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 71.415801][ C0] EXT4-fs (loop4): initial error at time 524357: ext4_iget_extra_inode:5128: inode 15 [ 71.415816][ C0] EXT4-fs (loop4): last error at time 524357: ext4_iget_extra_inode:5128: inode 15 [ 71.422452][ T6467] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.431265][ T4708] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.461079][ T6468] netlink: 24 bytes leftover after parsing attributes in process `syz.1.381'. [ 71.671307][ T3439] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.730138][ T6167] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.773438][ T3439] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.777730][ T6481] netlink: 'syz.6.386': attribute type 5 has an invalid length. [ 71.777926][ T6481] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.386'. [ 71.802057][ T6483] Injecting memory failure for pfn 0x14cec3 at process virtual address 0x20000000 [ 71.811240][ T6483] Memory failure: 0x14cec3: Sending SIGBUS to syz.6.388:6483 due to hardware memory corruption [ 71.811336][ T6483] Memory failure: 0x14cec3: recovery action for dirty LRU page: Recovered [ 71.811985][ T6483] Injecting memory failure for pfn 0x14cec1 at process virtual address 0x20001000 [ 72.074156][ T30] audit: type=1326 audit(524358.013:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6478 comm="syz.4.387" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d977aa8 code=0x0 [ 72.113694][ T6483] Memory failure: 0x14cec1: recovery action for clean LRU page: Recovered [ 72.138682][ T4711] Bluetooth: hci3: command tx timeout [ 72.153150][ T6483] Injecting memory failure for pfn 0x14cec2 at process virtual address 0x20002000 [ 72.212667][ T6483] Memory failure: 0x14cec2: recovery action for clean LRU page: Recovered [ 72.212714][ T6483] Injecting memory failure for pfn 0x21cf58 at process virtual address 0x20003000 [ 72.223107][ T6483] Memory failure: 0x21cf58: unhandlable page. [ 72.223131][ T6483] Memory failure: 0x21cf58: recovery action for get hwpoison page: Ignored [ 72.238325][ T3439] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.539684][ T6502] No such timeout policy "syz1" [ 72.541224][ T6502] random: crng reseeded on system resumption [ 72.560825][ T3439] bridge_slave_1: left allmulticast mode [ 72.562048][ T3439] bridge_slave_1: left promiscuous mode [ 72.563306][ T3439] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.566920][ T3439] bridge_slave_0: left allmulticast mode [ 72.568216][ T3439] bridge_slave_0: left promiscuous mode [ 72.569550][ T3439] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.640480][ T6505] loop6: detected capacity change from 0 to 512 [ 72.642328][ T6505] EXT4-fs: Ignoring removed orlov option [ 72.645118][ T6505] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 72.677592][ T6505] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.391: corrupted in-inode xattr: e_value size too large [ 72.677630][ T6505] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 72.678435][ T6505] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.391: couldn't read orphan inode 15 (err -117) [ 72.678471][ T6505] loop6: lost filesystem error report for type 5 error -117 [ 72.679939][ T6505] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.710917][ T6167] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.729968][ T6511] loop6: detected capacity change from 0 to 1024 [ 72.732162][ T6511] EXT4-fs: Ignoring removed orlov option [ 72.745582][ T6511] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002] [ 72.745662][ T6511] System zones: 0-1, 3-12 [ 72.746222][ T6511] EXT4-fs (loop6): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.751433][ T3439] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.778389][ T3439] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.809805][ T3439] bond0 (unregistering): Released all slaves [ 72.825363][ T6511] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 72.832624][ T6511] syzkaller0: entered promiscuous mode [ 72.832658][ T6511] syzkaller0: entered allmulticast mode [ 72.867298][ T6523] mmap: syz.4.394 (6523) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 72.997775][ T6167] EXT4-fs (loop6): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 73.200994][ T6548] loop0: detected capacity change from 0 to 1024 [ 73.203374][ T6548] EXT4-fs: Ignoring removed bh option [ 73.205982][ T6548] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 73.272787][ T4711] Bluetooth: hci4: command tx timeout [ 73.294958][ T4394] 8021q: adding VLAN 0 to HW filter on device eth8 [ 73.301670][ T6548] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.325292][ T6557] fuse: Unknown parameter '000000000000000000000460x0000000000000003' [ 73.494750][ T6566] netlink: 4 bytes leftover after parsing attributes in process `syz.0.398'. [ 73.552238][ T6567] EXT4-fs error (device loop0): ext4_read_inline_dir:1494: inode #12: block 7: comm syz.0.398: path /: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 73.670463][ T6567] EXT4-fs (loop0): Remounting filesystem read-only [ 73.677188][ T3439] hsr_slave_0: left promiscuous mode [ 73.678606][ T3439] hsr_slave_1: left promiscuous mode [ 73.679987][ T3439] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.681466][ T3439] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.683117][ T3439] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.684709][ T3439] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.695461][ T3439] veth1_macvtap: left promiscuous mode [ 73.695546][ T3439] veth0_macvtap: left promiscuous mode [ 73.695580][ T3439] veth1_vlan: left promiscuous mode [ 73.695603][ T3439] veth0_vlan: left promiscuous mode [ 73.796138][ T3439] team0 (unregistering): Port device team_slave_1 removed [ 73.801325][ T3439] team0 (unregistering): Port device team_slave_0 removed [ 73.919551][ T6374] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 73.922054][ T6374] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.923453][ T6374] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 73.925857][ T6374] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.926614][ T6374] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 73.928726][ T6374] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.929085][ T6374] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 73.930123][ T6374] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.969214][ T6374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.978254][ T6374] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.985133][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.985184][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.000355][ T5326] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.000399][ T5326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.207921][ T30] audit: type=1326 audit(524360.067:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6587 comm="syz.4.403" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d977aa8 code=0x0 [ 74.376602][ T4711] Bluetooth: hci3: command tx timeout [ 74.461263][ T4712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.479551][ T6609] loop1: detected capacity change from 0 to 256 [ 74.498179][ T6609] FAT-fs (loop1): Directory bread(block 64) failed [ 74.498210][ T6609] FAT-fs (loop1): Directory bread(block 65) failed [ 74.498248][ T6609] FAT-fs (loop1): Directory bread(block 66) failed [ 74.498265][ T6609] FAT-fs (loop1): Directory bread(block 67) failed [ 74.498291][ T6609] FAT-fs (loop1): Directory bread(block 68) failed [ 74.498306][ T6609] FAT-fs (loop1): Directory bread(block 69) failed [ 74.498331][ T6609] FAT-fs (loop1): Directory bread(block 70) failed [ 74.498346][ T6609] FAT-fs (loop1): Directory bread(block 71) failed [ 74.498372][ T6609] FAT-fs (loop1): Directory bread(block 72) failed [ 74.498386][ T6609] FAT-fs (loop1): Directory bread(block 73) failed [ 74.692904][ T6374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.697512][ T6641] loop0: detected capacity change from 0 to 512 [ 74.708124][ T6641] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.748378][ T4712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.859022][ T6374] veth0_vlan: entered promiscuous mode [ 74.862424][ T6374] veth1_vlan: entered promiscuous mode [ 74.869101][ T6374] veth0_macvtap: entered promiscuous mode [ 74.870161][ T6374] veth1_macvtap: entered promiscuous mode [ 74.873264][ T6374] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.877553][ T6374] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.879650][ T5326] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.879779][ T5326] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.879823][ T5326] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.879872][ T5326] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.955572][ T6658] loop4: detected capacity change from 0 to 128 [ 74.965505][ T3439] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.965527][ T3439] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.971974][ T6658] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 74.981829][ T3439] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.981860][ T3439] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.995361][ T4708] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 75.053059][ T6662] netlink: 'syz.4.412': attribute type 5 has an invalid length. [ 75.053090][ T6662] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.412'. [ 75.065833][ T6664] futex_wake_op: syz.5.362 tries to shift op by -1; fix this program [ 75.066534][ T6664] --map-set only usable from mangle table [ 75.087156][ T6665] --map-set only usable from mangle table [ 75.149711][ T6673] netlink: 24 bytes leftover after parsing attributes in process `syz.4.414'. [ 75.207245][ T6676] loop5: detected capacity change from 0 to 1024 [ 75.207702][ T6676] EXT4-fs: Ignoring removed bh option [ 75.218041][ T6676] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 75.225064][ T6676] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.233359][ T6678] ./file0: Can't lookup blockdev [ 75.416893][ T6683] netlink: 4 bytes leftover after parsing attributes in process `syz.5.415'. [ 75.425192][ T6683] EXT4-fs error (device loop5): ext4_read_inline_dir:1494: inode #12: block 7: comm syz.5.415: path /: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 75.501852][ T4711] Bluetooth: hci4: command tx timeout [ 75.593141][ T6683] EXT4-fs (loop5): Remounting filesystem read-only [ 75.659896][ T6685] xt_hashlimit: size too large, truncated to 1048576 [ 75.749727][ T6689] evm: overlay not supported [ 75.755662][ T6691] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 75.795235][ T6690] netlink: 27 bytes leftover after parsing attributes in process `syz.1.419'. [ 75.823525][ T6696] loop0: detected capacity change from 0 to 128 [ 75.829561][ T6696] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 75.858237][ T6701] netlink: 'syz.4.423': attribute type 12 has an invalid length. [ 75.858268][ T6701] netlink: 'syz.4.423': attribute type 29 has an invalid length. [ 75.858278][ T6701] netlink: 148 bytes leftover after parsing attributes in process `syz.4.423'. [ 75.858291][ T6701] netlink: 59 bytes leftover after parsing attributes in process `syz.4.423'. [ 75.912379][ T4712] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 76.055396][ T30] audit: type=1326 audit(524361.749:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6698 comm="syz.6.422" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f577aa8 code=0x0 [ 76.323007][ T6374] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.348866][ T6716] loop4: detected capacity change from 0 to 1024 [ 76.352800][ T6717] netlink: 12 bytes leftover after parsing attributes in process `syz.4.428'. [ 76.354835][ T6717] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 76.372744][ T6720] loop5: detected capacity change from 0 to 512 [ 76.374426][ T6720] EXT4-fs: Ignoring removed bh option [ 76.405473][ T6720] EXT4-fs error (device loop5): ext4_iget_extra_inode:5128: inode #15: comm syz.5.426: corrupted in-inode xattr: e_value size too large [ 76.405518][ T6720] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 76.405989][ T6720] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.426: couldn't read orphan inode 15 (err -117) [ 76.406020][ T6720] loop5: lost filesystem error report for type 5 error -117 [ 76.407237][ T6720] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.433543][ T6720] EXT4-fs error (device loop5): ext4_iget_extra_inode:5128: inode #15: comm syz.5.426: corrupted in-inode xattr: e_value size too large [ 76.474825][ T6724] netlink: 'syz.4.430': attribute type 10 has an invalid length. [ 76.477933][ T6724] syz_tun: entered promiscuous mode [ 76.478931][ T6374] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.489498][ T6724] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 76.499524][ T6726] fuse: Unknown parameter 'grou00000000000000000000' [ 76.639642][ T4711] Bluetooth: hci3: command tx timeout [ 76.714154][ T6736] block nbd4: NBD_DISCONNECT [ 76.813082][ T6748] loop6: detected capacity change from 0 to 1024 [ 76.816209][ T6748] EXT4-fs: Ignoring removed bh option [ 76.818741][ T6745] loop1: detected capacity change from 0 to 1024 [ 76.819087][ T6745] EXT4-fs: Ignoring removed bh option [ 76.822818][ T6745] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 76.822846][ T6745] EXT4-fs (loop1): group descriptors corrupted! [ 76.832464][ T6748] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 76.851290][ T6748] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.047861][ T6754] netlink: 4 bytes leftover after parsing attributes in process `syz.6.437'. [ 77.056740][ T6754] EXT4-fs error (device loop6): ext4_read_inline_dir:1494: inode #12: block 7: comm syz.6.437: path /: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 77.218687][ T6754] EXT4-fs (loop6): Remounting filesystem read-only [ 77.474184][ T6732] block nbd4: Disconnected due to user request. [ 77.474212][ T6732] block nbd4: shutting down sockets [ 77.528565][ T6765] Bluetooth: MGMT ver 1.23 [ 77.534312][ T6764] netlink: 156 bytes leftover after parsing attributes in process `syz.4.441'. [ 77.551108][ T6753] netlink: 'syz.1.438': attribute type 1 has an invalid length. [ 77.631012][ T6782] netlink: 'syz.1.444': attribute type 1 has an invalid length. [ 77.638256][ T6782] bond2: entered promiscuous mode [ 77.639516][ T6782] 8021q: adding VLAN 0 to HW filter on device bond2 [ 77.744266][ T6167] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.915136][ T30] audit: type=1326 audit(524363.467:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6789 comm="syz.0.447" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff94777aa8 code=0x0 [ 78.147717][ T6800] fuse: Unknown parameter 'grou00000000000000000000' [ 78.796032][ T6829] loop0: detected capacity change from 0 to 1024 [ 78.803733][ T6829] EXT4-fs: Ignoring removed bh option [ 78.805160][ T6829] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 78.828019][ T6829] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.920604][ T4711] Bluetooth: hci3: command tx timeout [ 79.036560][ T6840] __nla_validate_parse: 6 callbacks suppressed [ 79.036608][ T6840] netlink: 4 bytes leftover after parsing attributes in process `syz.0.458'. [ 79.044576][ T6840] EXT4-fs error (device loop0): ext4_read_inline_dir:1494: inode #12: block 7: comm syz.0.458: path /: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 79.054931][ T6840] EXT4-fs (loop0): Remounting filesystem read-only [ 79.317462][ T6849] Invalid ELF header magic: != ELF [ 79.318841][ T4711] Bluetooth: hci3: SCO packet too small [ 79.371218][ T6855] loop6: detected capacity change from 0 to 512 [ 79.371573][ T6855] EXT4-fs: Ignoring removed i_version option [ 79.382307][ T6855] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 79.386917][ T6855] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e12c, mo2=0002] [ 79.386977][ T6855] System zones: 1-12 [ 79.387081][ T6855] EXT4-fs (loop6): orphan cleanup on readonly fs [ 79.387328][ T6855] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.462: invalid indirect mapped block 12 (level 1) [ 79.387349][ T6855] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 79.395320][ T6855] EXT4-fs (loop6): Remounting filesystem read-only [ 79.395449][ T6855] EXT4-fs (loop6): 1 truncate cleaned up [ 79.395920][ T6855] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 79.418991][ T6855] EXT4-fs warning (device loop6): dx_probe:791: inode #2: lblock 0: comm syz.6.462: error -117 reading directory block [ 79.442488][ T6167] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 79.611136][ T30] audit: type=1326 audit(524365.056:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6861 comm="syz.5.464" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf177aa8 code=0x0 [ 79.864642][ T6867] netlink: 24 bytes leftover after parsing attributes in process `syz.4.465'. [ 79.906800][ T4712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.909070][ T6871] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 79.958378][ T6885] netlink: 48 bytes leftover after parsing attributes in process `syz.6.469'. [ 79.975442][ T6888] fuse: Unknown parameter 'grou00000000000000000000' [ 80.007345][ T6885] loop6: detected capacity change from 0 to 512 [ 80.014190][ T6893] netlink: 20 bytes leftover after parsing attributes in process `syz.4.471'. [ 80.048588][ T6885] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.056275][ T6885] Quota error (device loop6): find_block_dqentry: Quota for id 0 referenced but not present [ 80.056354][ T6885] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 80.056365][ T6885] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.469: Failed to acquire dquot type 1 [ 80.095634][ T6167] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.127545][ T6910] IPVS: Error connecting to the multicast addr [ 80.262015][ T6919] netlink: 48 bytes leftover after parsing attributes in process `syz.6.474'. [ 80.369569][ T6928] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 80.401466][ T6928] tap0: tun_chr_ioctl cmd 1074025675 [ 80.401517][ T6928] tap0: persist disabled [ 80.456341][ T6937] loop5: detected capacity change from 0 to 1024 [ 80.458386][ T6937] EXT4-fs: Ignoring removed bh option [ 80.469131][ T6937] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 80.509820][ T6937] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.732102][ T6955] netlink: 28 bytes leftover after parsing attributes in process `syz.5.477'. [ 80.789421][ T6956] EXT4-fs error (device loop5): ext4_read_inline_dir:1494: inode #12: block 7: comm syz.5.477: path /: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 80.796903][ T6956] EXT4-fs (loop5): Remounting filesystem read-only [ 80.987967][ T6967] loop6: detected capacity change from 0 to 512 [ 80.993340][ T6967] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 80.996996][ T6967] EXT4-fs (loop6): orphan cleanup on readonly fs [ 80.998281][ T6967] EXT4-fs error (device loop6): __ext4_iget:5481: inode #11: block 8: comm syz.6.482: invalid block [ 80.998313][ T6967] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 81.000424][ T6967] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.482: couldn't read orphan inode 11 (err -117) [ 81.001964][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 81.001974][ C1] EXT4-fs (loop6): initial error at time 524366: __ext4_iget:5481: inode 11: block 8 [ 81.001992][ C1] EXT4-fs (loop6): last error at time 524366: __ext4_iget:5481: inode 11: block 8 [ 81.010115][ T6967] loop6: lost filesystem error report for type 5 error -117 [ 81.012545][ T6967] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 81.043969][ T6167] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.256828][ T6997] loop0: detected capacity change from 0 to 128 [ 81.471641][ T30] audit: type=1326 audit(524366.774:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6996 comm="syz.1.487" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e577aa8 code=0x0 [ 81.652103][ T6374] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.778137][ T7008] netlink: 'syz.0.486': attribute type 13 has an invalid length. [ 81.788792][ T39] kworker/u8:2: attempt to access beyond end of device [ 81.788792][ T39] loop0: rw=1, sector=145, nr_sectors = 624 limit=128 [ 81.797910][ T39] kworker/u8:2: attempt to access beyond end of device [ 81.797910][ T39] loop0: rw=2049, sector=769, nr_sectors = 8 limit=128 [ 81.799084][ T7009] netlink: 'syz.5.488': attribute type 1 has an invalid length. [ 81.809235][ T7009] netlink: 28 bytes leftover after parsing attributes in process `syz.5.488'. [ 81.903247][ T7012] loop5: detected capacity change from 0 to 128 [ 81.918448][ T7012] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 81.926009][ T7012] syz.5.489 (pid 7012) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 81.928644][ T7012] Smack: duplicate mount options [ 81.951303][ T7019] netlink: 12 bytes leftover after parsing attributes in process `syz.4.491'. [ 81.971170][ T7022] fuse: Unknown parameter 'group_i00000000000000000000' [ 81.979801][ T6374] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 81.981796][ T7019] 8021q: adding VLAN 0 to HW filter on device bond2 [ 82.104623][ T7034] binder: tried to use weak ref as strong ref [ 82.104654][ T7034] binder: 7032:7034 Acquire 1 refcount change on invalid ref 0 ret -22 [ 82.104742][ T7035] binder: 7032:7035 got transaction to invalid handle, 1 [ 82.104773][ T7035] binder: 7032:7035 cannot find target node [ 82.104790][ T7035] binder: 7032:7035 transaction call to 0:0 failed 3/29201/-22, code 0 size 0-0 line 3236 [ 82.114382][ T26] binder: undelivered TRANSACTION_ERROR: 29201 [ 82.116168][ T7037] loop5: detected capacity change from 0 to 1024 [ 82.117989][ T7037] EXT4-fs: Ignoring removed bh option [ 82.119888][ T7037] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 82.131348][ T7037] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.207387][ T7048] fuse: Unknown parameter 'rootmod' [ 82.318819][ T7052] netlink: 4 bytes leftover after parsing attributes in process `syz.5.498'. [ 82.328413][ T7052] EXT4-fs error (device loop5): ext4_read_inline_dir:1494: inode #12: block 7: comm syz.5.498: path /: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 82.379141][ T7052] EXT4-fs (loop5): Remounting filesystem read-only [ 82.950506][ T7061] erspan1: entered promiscuous mode [ 82.952513][ T7063] netlink: 68 bytes leftover after parsing attributes in process `syz.0.503'. [ 83.045552][ T6374] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.400053][ T30] audit: type=1326 audit(524368.491:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7082 comm="syz.1.510" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e577aa8 code=0x0 [ 83.613769][ T7085] syz_tun: left promiscuous mode [ 83.617983][ T7085] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.618394][ T7085] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.664897][ T7115] fuse: Unknown parameter 'group_i00000000000000000000' [ 83.678385][ T7117] loop6: detected capacity change from 0 to 8 [ 83.973130][ T7124] netlink: 'syz.6.516': attribute type 10 has an invalid length. [ 84.752749][ T7085] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.757655][ T7128] loop0: detected capacity change from 0 to 1024 [ 84.760945][ T7128] EXT4-fs: Ignoring removed bh option [ 84.761885][ T7085] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.767921][ T7128] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 84.797191][ T7128] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.988830][ T7133] __nla_validate_parse: 1 callbacks suppressed [ 84.988878][ T7133] netlink: 4 bytes leftover after parsing attributes in process `syz.0.517'. [ 85.045685][ T7134] EXT4-fs error (device loop0): ext4_read_inline_dir:1494: inode #12: block 7: comm syz.0.517: path /: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 85.046311][ T7134] EXT4-fs (loop0): Remounting filesystem read-only [ 85.349712][ T7085] erspan1: left promiscuous mode [ 85.369191][ T7124] bridge0: port 3(team0) entered blocking state [ 85.369243][ T7124] bridge0: port 3(team0) entered disabled state [ 85.369357][ T7124] team0: entered allmulticast mode [ 85.369371][ T7124] team_slave_0: entered allmulticast mode [ 85.369388][ T7124] team_slave_1: entered allmulticast mode [ 85.370157][ T7124] team0: entered promiscuous mode [ 85.370172][ T7124] team_slave_0: entered promiscuous mode [ 85.370246][ T7124] team_slave_1: entered promiscuous mode [ 85.370554][ T7124] bridge0: port 3(team0) entered blocking state [ 85.370589][ T7124] bridge0: port 3(team0) entered forwarding state [ 85.421511][ T5330] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.421579][ T5330] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.421610][ T5330] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.421632][ T5330] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.451239][ T7144] netlink: 'syz.1.518': attribute type 10 has an invalid length. [ 85.470062][ T7144] syz_tun: entered promiscuous mode [ 85.476772][ T7144] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 85.538213][ T7160] fuse: Bad value for 'fd' [ 85.538312][ T7160] fuse: Bad value for 'fd' [ 85.538396][ T7160] fuse: Bad value for 'fd' [ 85.538485][ T7160] fuse: Bad value for 'fd' [ 85.538564][ T7160] fuse: Bad value for 'fd' [ 85.703043][ T7181] loop6: detected capacity change from 0 to 2048 [ 85.703383][ T7181] EXT4-fs: Ignoring removed mblk_io_submit option [ 85.703395][ T7181] EXT4-fs: Ignoring removed mblk_io_submit option [ 85.719353][ T4712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.725139][ T7181] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.731781][ T7187] fuse: Unknown parameter 'group_i00000000000000000000' [ 85.770086][ T7196] loop5: detected capacity change from 0 to 512 [ 85.796125][ T7196] EXT4-fs (loop5): 1 truncate cleaned up [ 85.797737][ T7196] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.812814][ T7184] Injecting memory failure for pfn 0x11149f at process virtual address 0x202cf000 [ 85.837343][ T7184] Memory failure: 0x11149f: recovery action for clean LRU page: Recovered [ 86.048065][ T30] audit: type=1326 audit(524370.919:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7192 comm="syz.0.529" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff94777aa8 code=0x0 [ 86.193342][ T6374] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.530692][ T6167] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.637030][ T7235] loop6: detected capacity change from 0 to 8192 [ 86.650532][ T7239] loop5: detected capacity change from 0 to 512 [ 86.650914][ T7239] EXT4-fs: Ignoring removed mblk_io_submit option [ 86.655087][ T7239] EXT4-fs (loop5): Test dummy encryption mode enabled [ 86.657845][ T7239] EXT4-fs (loop5): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.671694][ T7239] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 86.673724][ T7239] EXT4-fs error (device loop5): __ext4_add_entry:2412: inode #2: comm syz.5.535: Directory hole found for htree leaf block 0 [ 86.674041][ T7239] EXT4-fs (loop5): Remounting filesystem read-only [ 86.695570][ T7242] netlink: 12 bytes leftover after parsing attributes in process `syz.1.536'. [ 86.701806][ T6374] EXT4-fs (loop5): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 86.718526][ T7246] netlink: 12 bytes leftover after parsing attributes in process `syz.1.536'. [ 86.780294][ T7253] loop1: detected capacity change from 0 to 1024 [ 86.782878][ T7253] EXT4-fs: Ignoring removed bh option [ 86.785767][ T7253] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 86.812694][ T7253] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.013761][ T7273] netlink: 4 bytes leftover after parsing attributes in process `syz.1.540'. [ 87.022330][ T7273] EXT4-fs error (device loop1): ext4_read_inline_dir:1494: inode #12: block 7: comm syz.1.540: path /: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 87.157651][ T7273] EXT4-fs (loop1): Remounting filesystem read-only [ 87.202467][ T7275] fuse: Unknown parameter 'group_id00000000000000000000' [ 87.406406][ T30] audit: type=1326 audit(524372.258:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7281 comm="syz.6.548" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f577aa8 code=0x0 [ 87.714060][ T4705] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.766825][ T7297] loop1: detected capacity change from 0 to 2048 [ 87.767216][ T7297] ext4: Unknown parameter 'fscontext' [ 87.817316][ T7297] loop1: detected capacity change from 0 to 128 [ 87.941552][ T7309] loop5: detected capacity change from 0 to 512 [ 87.950216][ T7309] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 87.953895][ T7309] EXT4-fs (loop5): corrupt root inode, run e2fsck [ 87.953946][ T7309] EXT4-fs (loop5): mount failed [ 88.066603][ T7319] netlink: 'syz.1.556': attribute type 2 has an invalid length. [ 88.128525][ T7322] netlink: 'syz.1.556': attribute type 1 has an invalid length. [ 88.155531][ T7324] netlink: 28 bytes leftover after parsing attributes in process `syz.0.559'. [ 88.164711][ T7326] loop6: detected capacity change from 0 to 128 [ 88.168398][ T7326] EXT4-fs (loop6): Test dummy encryption mode enabled [ 88.173265][ T7326] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 88.180818][ T7326] EXT4-fs (loop6): Online defrag not supported for encrypted files [ 88.193818][ T6167] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 88.217918][ T7330] EXT4-fs: Ignoring removed bh option [ 88.234813][ T7330] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 88.258797][ T7330] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.340710][ T7339] Dev loop8: unable to read RDB block 7 [ 88.341823][ T7339] loop8: unable to read partition table [ 88.343037][ T7339] loop8: partition table beyond EOD, truncated [ 88.343861][ T7339] loop_reread_partitions: partition scan of loop8 (被x ) failed (rc=-5) [ 88.441171][ T7343] netlink: 4 bytes leftover after parsing attributes in process `syz.6.561'. [ 88.449153][ T7343] EXT4-fs error (device loop6): ext4_read_inline_dir:1494: inode #12: block 7: comm syz.6.561: path /: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 88.453187][ T7343] EXT4-fs (loop6): Remounting filesystem read-only [ 88.789424][ T7355] fuse: Unknown parameter 'group_id00000000000000000000' [ 89.099792][ T30] audit: type=1326 audit(524373.818:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7359 comm="syz.1.570" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e577aa8 code=0x0 [ 89.371970][ T6167] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.013352][ T7393] loop4: p1 < > p3 < p5 > p4 [ 90.015670][ T7393] loop4: p4 size 3081 extends beyond EOD, truncated [ 90.017580][ T7393] loop4: p5 size 3081 extends beyond EOD, truncated [ 90.347201][ T7408] set_capacity_and_notify: 3 callbacks suppressed [ 90.347232][ T7408] loop0: detected capacity change from 0 to 1024 [ 90.352359][ T7408] EXT4-fs: Ignoring removed bh option [ 90.359065][ T7408] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 90.384781][ T7408] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.560953][ T7413] netlink: 4 bytes leftover after parsing attributes in process `syz.0.583'. [ 90.582792][ T7413] EXT4-fs error (device loop0): ext4_read_inline_dir:1494: inode #12: block 7: comm syz.0.583: path /: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 90.614500][ T7413] EXT4-fs (loop0): Remounting filesystem read-only [ 90.799333][ T7415] fuse: Unknown parameter 'group_id00000000000000000000' [ 90.908759][ T7423] netlink: 'syz.4.586': attribute type 1 has an invalid length. [ 90.908792][ T7423] netlink: 'syz.4.586': attribute type 2 has an invalid length. [ 91.442146][ T30] audit: type=1326 audit(524375.933:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7432 comm="syz.1.588" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e577aa8 code=0x0 [ 91.590997][ T4712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.631655][ T30] audit: type=1326 audit(524376.154:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7437 comm="syz.0.589" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff94777aa8 code=0x0 [ 91.639458][ T30] audit: type=1326 audit(524376.163:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7437 comm="syz.0.589" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff94777aa8 code=0x0 [ 91.828406][ T7451] loop0: detected capacity change from 0 to 128 [ 91.899859][ T7459] loop4: detected capacity change from 0 to 256 [ 91.901654][ T7459] vfat: Unknown parameter 'nnonumtail' [ 92.380739][ T7470] loop1: detected capacity change from 0 to 1024 [ 92.381124][ T7470] EXT4-fs: Ignoring removed bh option [ 92.383751][ T7470] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 92.587502][ T7475] netlink: 4 bytes leftover after parsing attributes in process `syz.1.599'. [ 92.597926][ T7475] EXT4-fs error (device loop1): ext4_read_inline_dir:1494: inode #12: block 7: comm syz.1.599: path /: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 92.785646][ T7475] EXT4-fs (loop1): Remounting filesystem read-only [ 92.876791][ T7479] netlink: 144 bytes leftover after parsing attributes in process `syz.4.601'. [ 93.000210][ T7493] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.365477][ T7497] netlink: 'syz.1.605': attribute type 8 has an invalid length. [ 93.365509][ T7497] netlink: 4 bytes leftover after parsing attributes in process `syz.1.605'. [ 93.483018][ T7497] bond0: entered promiscuous mode [ 93.484024][ T7497] bond_slave_0: entered promiscuous mode [ 93.485584][ T7497] bond_slave_1: entered promiscuous mode [ 93.487755][ T7497] gretap0: entered promiscuous mode [ 93.495608][ T7497] team0: entered promiscuous mode [ 93.495633][ T7497] team_slave_0: entered promiscuous mode [ 93.495718][ T7497] team_slave_1: entered promiscuous mode [ 93.495775][ T7497] gretap1: entered promiscuous mode [ 93.497107][ T7497] hsr1: entered promiscuous mode [ 93.541616][ T7506] hsr0: entered allmulticast mode [ 93.541645][ T7506] hsr_slave_0: entered allmulticast mode [ 93.541673][ T7506] hsr_slave_1: entered allmulticast mode [ 93.786873][ T30] audit: type=1326 audit(524378.093:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7514 comm="syz.4.609" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d977aa8 code=0x0 [ 93.967895][ T7527] loop5: detected capacity change from 0 to 1024 [ 93.969695][ T7527] EXT4-fs: Ignoring removed bh option [ 93.971455][ T7527] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 94.355859][ T7539] EXT4-fs error (device loop5): ext4_read_inline_dir:1494: inode #12: block 7: comm syz.5.615: path /: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 94.360105][ T7539] EXT4-fs (loop5): Remounting filesystem read-only [ 94.366934][ T7534] netlink: 4 bytes leftover after parsing attributes in process `syz.6.616'. [ 94.552905][ T7557] loop1: detected capacity change from 0 to 512 [ 94.557298][ T7557] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 94.857417][ T7581] loop1: detected capacity change from 0 to 32768 [ 94.934099][ T7581] loop1: p1 p3 < > [ 95.035315][ T7591] syzkaller0: entered promiscuous mode [ 95.037620][ T7591] syzkaller0: entered allmulticast mode [ 95.045471][ T7593] loop0: detected capacity change from 0 to 512 [ 95.198838][ T30] audit: type=1326 audit(524379.441:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7586 comm="syz.6.631" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f577aa8 code=0x0 [ 95.519627][ T4699] udevd[4699]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 95.520509][ T5316] udevd[5316]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 95.858938][ T7663] loop1: detected capacity change from 0 to 1024 [ 95.860790][ T7663] EXT4-fs: Ignoring removed bh option [ 95.866430][ T7663] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 96.156991][ T7664] netlink: 16 bytes leftover after parsing attributes in process `syz.4.640'. [ 96.164476][ T7664] veth1_to_team: entered promiscuous mode [ 96.179961][ T7664] gretap0: entered promiscuous mode [ 96.183369][ T7664] debugfs: 'hsr1' already exists in 'hsr' [ 96.183383][ T7664] Cannot create hsr debugfs directory [ 96.183422][ T7664] hsr1: entered promiscuous mode [ 96.279710][ T7673] vlan2: entered allmulticast mode [ 96.279799][ T7673] hsr0: entered allmulticast mode [ 96.280114][ T7673] hsr_slave_0: entered allmulticast mode [ 96.280131][ T7673] hsr_slave_1: entered allmulticast mode [ 96.380128][ T7676] netlink: 4 bytes leftover after parsing attributes in process `syz.1.641'. [ 96.389417][ T7676] EXT4-fs error (device loop1): ext4_read_inline_dir:1494: inode #12: block 7: comm syz.1.641: path /: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 96.394113][ T7676] EXT4-fs (loop1): Remounting filesystem read-only [ 96.558664][ T7668] netlink: 20 bytes leftover after parsing attributes in process `syz.6.642'. [ 96.568505][ T7668] fuse: Unknown parameter 'v' [ 96.579459][ T7678] loop4: detected capacity change from 0 to 256 [ 96.600286][ T7678] FAT-fs (loop4): Directory bread(block 64) failed [ 96.601590][ T7678] FAT-fs (loop4): Directory bread(block 65) failed [ 96.602993][ T7678] FAT-fs (loop4): Directory bread(block 66) failed [ 96.604369][ T7678] FAT-fs (loop4): Directory bread(block 67) failed [ 96.605725][ T7678] FAT-fs (loop4): Directory bread(block 68) failed [ 96.605757][ T7678] FAT-fs (loop4): Directory bread(block 69) failed [ 96.605794][ T7678] FAT-fs (loop4): Directory bread(block 70) failed [ 96.605815][ T7678] FAT-fs (loop4): Directory bread(block 71) failed [ 96.605846][ T7678] FAT-fs (loop4): Directory bread(block 72) failed [ 96.605862][ T7678] FAT-fs (loop4): Directory bread(block 73) failed [ 96.685123][ T7684] netlink: 'syz.6.642': attribute type 21 has an invalid length. [ 96.685160][ T7684] netlink: 128 bytes leftover after parsing attributes in process `syz.6.642'. [ 96.685198][ T7684] netlink: 3 bytes leftover after parsing attributes in process `syz.6.642'. [ 96.698965][ T7687] netlink: 8 bytes leftover after parsing attributes in process `syz.0.647'. [ 96.698993][ T7687] netlink: 8 bytes leftover after parsing attributes in process `syz.0.647'. [ 97.587262][ T30] audit: type=1326 audit(524381.647:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7702 comm="syz.5.653" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf177aa8 code=0x0 [ 97.606410][ T7692] syz.4.644: attempt to access beyond end of device [ 97.606410][ T7692] loop4: rw=2049, sector=5448, nr_sectors = 128 limit=256 [ 97.608019][ T7692] syz.4.644: attempt to access beyond end of device [ 97.608019][ T7692] loop4: rw=2049, sector=5608, nr_sectors = 32 limit=256 [ 97.608131][ T7692] syz.4.644: attempt to access beyond end of device [ 97.608131][ T7692] loop4: rw=2049, sector=5672, nr_sectors = 32 limit=256 [ 97.608457][ T7692] syz.4.644: attempt to access beyond end of device [ 97.608457][ T7692] loop4: rw=2049, sector=5736, nr_sectors = 32 limit=256 [ 97.608823][ T7692] syz.4.644: attempt to access beyond end of device [ 97.608823][ T7692] loop4: rw=2049, sector=5800, nr_sectors = 32 limit=256 [ 97.609140][ T7692] syz.4.644: attempt to access beyond end of device [ 97.609140][ T7692] loop4: rw=2049, sector=5864, nr_sectors = 32 limit=256 [ 97.609235][ T7692] syz.4.644: attempt to access beyond end of device [ 97.609235][ T7692] loop4: rw=2049, sector=5928, nr_sectors = 32 limit=256 [ 97.609485][ T7692] syz.4.644: attempt to access beyond end of device [ 97.609485][ T7692] loop4: rw=2049, sector=5992, nr_sectors = 32 limit=256 [ 97.609691][ T7692] syz.4.644: attempt to access beyond end of device [ 97.609691][ T7692] loop4: rw=2049, sector=6056, nr_sectors = 32 limit=256 [ 97.610239][ T7692] syz.4.644: attempt to access beyond end of device [ 97.610239][ T7692] loop4: rw=2049, sector=6120, nr_sectors = 32 limit=256 [ 98.051929][ T7723] loop4: detected capacity change from 0 to 512 [ 98.192531][ T7728] loop4: detected capacity change from 0 to 2048 [ 98.199323][ T7728] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 98.208247][ T7735] loop1: detected capacity change from 0 to 128 [ 98.219622][ T7728] netlink: 20 bytes leftover after parsing attributes in process `syz.4.658'. [ 98.250214][ T7735] batadv_slave_0: Caught tx_queue_len zero misconfig [ 98.357133][ T7764] loop1: detected capacity change from 0 to 128 [ 98.357859][ T7764] FAT-fs (loop1): bogus number of FAT sectors [ 98.357873][ T7764] FAT-fs (loop1): Can't find a valid FAT filesystem [ 98.375448][ T7766] loop4: detected capacity change from 0 to 512 [ 98.375953][ T7766] EXT4-fs: Ignoring removed i_version option [ 98.376250][ T7766] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 98.376823][ T7766] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e12c, mo2=0002] [ 98.376855][ T7766] System zones: 1-12 [ 98.376942][ T7766] EXT4-fs (loop4): orphan cleanup on readonly fs [ 98.377578][ T7755] bond1: Removing last ns target with arp_interval on [ 98.377879][ T7766] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.669: invalid indirect mapped block 12 (level 1) [ 98.377892][ T7766] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 98.379796][ T7755] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.385111][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 98.385125][ C0] EXT4-fs (loop4): initial error at time 524382: ext4_free_branches:1023: inode 11 [ 98.385140][ C0] EXT4-fs (loop4): last error at time 524382: ext4_free_branches:1023: inode 11 [ 98.396816][ T7766] EXT4-fs (loop4): Remounting filesystem read-only [ 98.397433][ T7766] EXT4-fs (loop4): 1 truncate cleaned up [ 98.414350][ T7766] EXT4-fs warning (device loop4): dx_probe:791: inode #2: lblock 0: comm syz.4.669: error -117 reading directory block [ 98.422554][ T7774] loop0: detected capacity change from 0 to 8 [ 98.427138][ T7774] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 98.429614][ T7774] unable to read xattr id index table [ 98.642557][ T30] audit: type=1326 audit(524382.570:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7770 comm="syz.6.670" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f577aa8 code=0x0 [ 98.797304][ T30] audit: type=1326 audit(524382.774:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7773 comm="syz.0.671" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff94777aa8 code=0x0 [ 98.853368][ T7784] fuse: Bad value for 'fd' [ 98.923445][ T7791] loop4: detected capacity change from 0 to 128 [ 98.939987][ T7791] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 98.940039][ T7791] EXT4-fs: failed to create workqueue [ 98.940056][ T7791] EXT4-fs (loop4): mount failed [ 98.996646][ T7800] loop1: detected capacity change from 0 to 1024 [ 98.999004][ T7800] EXT4-fs: Ignoring removed bh option [ 99.000212][ T7803] syzkaller0: entered promiscuous mode [ 99.000236][ T7803] syzkaller0: entered allmulticast mode [ 99.001722][ T7803] netlink: 'syz.4.680': attribute type 1 has an invalid length. [ 99.001734][ T7803] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.680'. [ 99.039271][ T7800] syzkaller0: entered promiscuous mode [ 99.040463][ T7800] syzkaller0: entered allmulticast mode [ 99.207068][ T7820] wg1: Caught tx_queue_len zero misconfig [ 99.310259][ T7827] EXT4-fs: Ignoring removed oldalloc option [ 99.310290][ T7827] ext4: Bad value for 'sb' [ 99.383641][ T7831] EXT4-fs: Ignoring removed orlov option [ 99.384518][ T7831] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 99.384555][ T7831] EXT4-fs (loop4): Test dummy encryption mode enabled [ 99.384838][ T7831] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 1796)! [ 99.384860][ T7831] EXT4-fs (loop4): group descriptors corrupted! [ 99.484698][ T7838] EXT4-fs mount: 16 callbacks suppressed [ 99.484840][ T7838] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 99.487729][ T7838] netlink: 28 bytes leftover after parsing attributes in process `syz.6.690'. [ 99.599698][ T7843] EXT4-fs (loop4): Test dummy encryption mode enabled [ 99.599738][ T7843] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 99.605704][ T7843] EXT4-fs error (device loop4): ext4_init_orphan_info:618: comm syz.4.693: orphan file block 0: bad magic [ 99.605735][ T7843] loop4: lost filesystem error report for type 5 error -117 [ 99.608414][ T7843] EXT4-fs (loop4): mount failed [ 99.609717][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 99.609726][ C1] EXT4-fs (loop4): initial error at time 524383: ext4_init_orphan_info:618 [ 99.609738][ C1] EXT4-fs (loop4): last error at time 524383: ext4_init_orphan_info:618 [ 100.303997][ T6167] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 100.338471][ T7856] fuse: Bad value for 'fd' [ 100.689667][ T7654] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.689716][ T7654] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.689732][ T7654] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.689747][ T7654] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.875064][ T30] audit: type=1326 audit(524384.685:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7863 comm="syz.4.699" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d977aa8 code=0x0 [ 101.268384][ T7871] EXT4-fs: inline encryption not supported [ 101.279598][ T7871] EXT4-fs: test_dummy_encryption requires encrypt feature [ 101.532200][ T7880] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 101.532849][ T7880] set_capacity_and_notify: 5 callbacks suppressed [ 101.532873][ T7880] loop8: detected capacity change from 0 to 524287936 [ 101.584433][ T7880] loop1: detected capacity change from 0 to 512 [ 101.669648][ T7880] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 101.731066][ T7884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.741462][ T7884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.767503][ T7880] EXT4-fs (loop1): 1 truncate cleaned up [ 101.767983][ T7880] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.835196][ T7884] loop4: detected capacity change from 0 to 8192 [ 101.838768][ T7884] vfat: Unknown parameter 'Pav^Ђ ' [ 102.511504][ T4705] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.577853][ T7902] loop6: detected capacity change from 0 to 512 [ 102.578217][ T7902] EXT4-fs: inline encryption not supported [ 102.603865][ T7910] fuse: Bad value for 'fd' [ 102.606851][ T7902] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #11: comm syz.6.711: missing EA_INODE flag [ 102.606887][ T7902] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 102.609129][ T7902] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.711: error while reading EA inode 11 err=-117 [ 102.609166][ T7902] loop6: lost filesystem error report for type 5 error -117 [ 102.615349][ T7902] EXT4-fs (loop6): 1 orphan inode deleted [ 102.615837][ T7902] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.652511][ T6167] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.678036][ T7915] GUP no longer grows the stack in syz.6.715 (7915): 20004000-2000a000 (20002000) [ 102.680686][ T7915] CPU: 0 UID: 0 PID: 7915 Comm: syz.6.715 Tainted: G L syzkaller #0 PREEMPT [ 102.680716][ T7915] Tainted: [L]=SOFTLOCKUP [ 102.680720][ T7915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 102.680726][ T7915] Call trace: [ 102.680730][ T7915] show_stack+0x2c/0x3c (C) [ 102.680753][ T7915] __dump_stack+0x30/0x40 [ 102.680767][ T7915] dump_stack_lvl+0xd8/0x12c [ 102.680779][ T7915] dump_stack+0x1c/0x28 [ 102.680790][ T7915] gup_vma_lookup+0x1b4/0x1d4 [ 102.680802][ T7915] __get_user_pages+0x2fc/0x20f0 [ 102.680813][ T7915] get_user_pages_remote+0x288/0x830 [ 102.680825][ T7915] __access_remote_vm+0x1dc/0x698 [ 102.680834][ T7915] access_remote_vm+0x48/0x60 [ 102.680843][ T7915] proc_pid_cmdline_read+0x4a4/0x97c [ 102.680857][ T7915] do_loop_readv_writev+0x248/0x3d8 [ 102.680865][ T7915] vfs_readv+0x274/0x588 [ 102.680873][ T7915] do_preadv+0x120/0x234 [ 102.680880][ T7915] __arm64_sys_preadv+0xa0/0xb8 [ 102.680893][ T7915] invoke_syscall+0x98/0x244 [ 102.680905][ T7915] el0_svc_common+0x198/0x23c [ 102.680917][ T7915] do_el0_svc+0x48/0x58 [ 102.680928][ T7915] el0_svc+0x64/0x260 [ 102.680937][ T7915] el0t_64_sync_handler+0x48/0x148 [ 102.680945][ T7915] el0t_64_sync+0x198/0x19c [ 102.686808][ T7912] fuse: Bad value for 'fd' [ 102.923761][ T30] audit: type=1326 audit(524386.577:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7916 comm="syz.1.716" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e577aa8 code=0x0 [ 103.235163][ T7933] loop6: detected capacity change from 0 to 128 [ 103.238177][ T7933] Smack: duplicate mount options [ 103.265082][ T7933] loop6: detected capacity change from 0 to 4096 [ 103.269511][ T7933] EXT4-fs: Ignoring removed mblk_io_submit option [ 103.271242][ T7933] ext4: Unknown parameter 'euid' [ 103.756769][ T7947] FAULT_INJECTION: forcing a failure. [ 103.756769][ T7947] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.756807][ T7947] CPU: 1 UID: 0 PID: 7947 Comm: syz.1.724 Tainted: G L syzkaller #0 PREEMPT [ 103.756823][ T7947] Tainted: [L]=SOFTLOCKUP [ 103.756827][ T7947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 103.756833][ T7947] Call trace: [ 103.756837][ T7947] show_stack+0x2c/0x3c (C) [ 103.756855][ T7947] __dump_stack+0x30/0x40 [ 103.756866][ T7947] dump_stack_lvl+0xd8/0x12c [ 103.756875][ T7947] dump_stack+0x1c/0x28 [ 103.756885][ T7947] should_fail_ex+0x414/0x588 [ 103.756894][ T7947] should_fail+0x14/0x24 [ 103.756902][ T7947] should_fail_usercopy+0x20/0x30 [ 103.756911][ T7947] _inline_copy_from_user+0x40/0x180 [ 103.756920][ T7947] move_addr_to_kernel+0x88/0x168 [ 103.756929][ T7947] __sys_connect+0xd4/0x194 [ 103.756939][ T7947] __arm64_sys_connect+0x7c/0x94 [ 103.756949][ T7947] invoke_syscall+0x98/0x244 [ 103.756959][ T7947] el0_svc_common+0xe8/0x23c [ 103.756969][ T7947] do_el0_svc+0x48/0x58 [ 103.756978][ T7947] el0_svc+0x64/0x260 [ 103.756986][ T7947] el0t_64_sync_handler+0x48/0x148 [ 103.756993][ T7947] el0t_64_sync+0x198/0x19c [ 104.341771][ T7973] netlink: 'syz.5.731': attribute type 1 has an invalid length. [ 104.368471][ T7973] 8021q: adding VLAN 0 to HW filter on device bond2 [ 104.389230][ T7973] bond2: entered allmulticast mode [ 104.410367][ T7973] bond2: (slave ip6gretap1): making interface the new active one [ 104.412485][ T7973] ip6gretap1: entered allmulticast mode [ 104.417981][ T7973] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 104.582085][ T30] audit: type=1326 audit(524388.100:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7975 comm="syz.6.732" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f577aa8 code=0x0 [ 104.848925][ T7983] fuse: Bad value for 'fd' [ 104.850621][ T7985] netlink: 'syz.4.734': attribute type 11 has an invalid length. [ 104.850723][ T7985] netlink: 'syz.4.734': attribute type 11 has an invalid length. [ 105.265507][ T7993] __nla_validate_parse: 7 callbacks suppressed [ 105.265543][ T7993] netlink: 36 bytes leftover after parsing attributes in process `syz.1.736'. [ 105.391285][ T8000] FAULT_INJECTION: forcing a failure. [ 105.391285][ T8000] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.391324][ T8000] CPU: 0 UID: 0 PID: 8000 Comm: syz.6.738 Tainted: G L syzkaller #0 PREEMPT [ 105.391337][ T8000] Tainted: [L]=SOFTLOCKUP [ 105.391341][ T8000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 105.391348][ T8000] Call trace: [ 105.391352][ T8000] show_stack+0x2c/0x3c (C) [ 105.391369][ T8000] __dump_stack+0x30/0x40 [ 105.391380][ T8000] dump_stack_lvl+0xd8/0x12c [ 105.391390][ T8000] dump_stack+0x1c/0x28 [ 105.391399][ T8000] should_fail_ex+0x414/0x588 [ 105.391408][ T8000] should_fail+0x14/0x24 [ 105.391416][ T8000] should_fail_usercopy+0x20/0x30 [ 105.391425][ T8000] simple_read_from_buffer+0xc4/0x240 [ 105.391435][ T8000] proc_fail_nth_read+0x1a8/0x248 [ 105.391443][ T8000] vfs_read+0x230/0x8e4 [ 105.391453][ T8000] ksys_read+0x12c/0x224 [ 105.391462][ T8000] __arm64_sys_read+0x7c/0x90 [ 105.391471][ T8000] invoke_syscall+0x98/0x244 [ 105.391481][ T8000] el0_svc_common+0xe8/0x23c [ 105.391491][ T8000] do_el0_svc+0x48/0x58 [ 105.391500][ T8000] el0_svc+0x64/0x260 [ 105.391508][ T8000] el0t_64_sync_handler+0x48/0x148 [ 105.391515][ T8000] el0t_64_sync+0x198/0x19c [ 105.624142][ T8005] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 105.920443][ T8009] loop4: detected capacity change from 0 to 8192 [ 105.969065][ T8009] Dev loop4: RDB in block 1 has bad checksum [ 106.325915][ T24] kernel write not supported for file /ppp (pid: 24 comm: kworker/1:0) [ 106.756886][ T8028] loop1: detected capacity change from 0 to 8 [ 106.764442][ T8028] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 106.764464][ T8028] unable to read xattr id index table [ 106.764571][ T8028] unable to read inode lookup table [ 106.807390][ T8028] 9p: Bad value for 'rfdno' [ 106.859546][ T8032] loop5: detected capacity change from 0 to 128 [ 106.883455][ T8032] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 107.028380][ T8032] netlink: 8 bytes leftover after parsing attributes in process `syz.5.747'. [ 107.071599][ T8040] loop4: detected capacity change from 0 to 256 [ 107.073536][ T8040] vfat: Unknown parameter 'iocharse%uni_xlate' [ 107.086297][ T8040] loop4: detected capacity change from 0 to 1024 [ 107.105854][ T8040] EXT4-fs: test_dummy_encryption requires encrypt feature [ 107.245444][ T6374] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 107.278962][ T8046] fuse: Bad value for 'fd' [ 107.391748][ T8055] loop6: detected capacity change from 0 to 512 [ 107.400390][ T8055] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 107.405886][ T8055] EXT4-fs (loop6): orphan cleanup on readonly fs [ 107.406907][ T8055] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4222: comm syz.6.753: Allocating blocks 41-42 which overlap fs metadata [ 107.406924][ T8055] loop6: lost filesystem error report for type 5 error -117 [ 107.407552][ T8055] Quota error (device loop6): write_blk: dquota write failed [ 107.407581][ T8055] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 107.407594][ T8055] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.753: Failed to acquire dquot type 0 [ 107.407604][ T8055] loop6: lost filesystem error report for type 5 error -117 [ 107.407737][ T8055] EXT4-fs error (device loop6): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 107.410304][ T8055] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #12: comm syz.6.753: corrupted inode contents [ 107.410334][ T8055] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 107.416980][ T8055] EXT4-fs error (device loop6): ext4_dirty_inode:6587: inode #12: comm syz.6.753: mark_inode_dirty error [ 107.417016][ T8055] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 107.417209][ T8055] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #12: comm syz.6.753: corrupted inode contents [ 107.417222][ T8055] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 107.417306][ T8055] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #12: comm syz.6.753: mark_inode_dirty error [ 107.417317][ T8055] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 107.417433][ T8055] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #12: comm syz.6.753: corrupted inode contents [ 107.417444][ T8055] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 107.418228][ T8055] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 107.418242][ T8055] loop6: lost filesystem error report for type 5 error -117 [ 107.418322][ T8055] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #12: comm syz.6.753: corrupted inode contents [ 107.418334][ T8055] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 107.418425][ T8055] EXT4-fs error (device loop6): ext4_truncate:4690: inode #12: comm syz.6.753: mark_inode_dirty error [ 107.418436][ T8055] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 107.418502][ T8055] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 107.418510][ T8055] loop6: lost filesystem error report for type 5 error -117 [ 107.418672][ T8055] EXT4-fs (loop6): 1 truncate cleaned up [ 107.418884][ C1] EXT4-fs (loop6): error count since last fsck: 12 [ 107.418897][ C1] EXT4-fs (loop6): initial error at time 524390: ext4_mb_mark_diskspace_used:4222 [ 107.418909][ C1] EXT4-fs (loop6): last error at time 524390: ext4_process_orphan:345 [ 107.454052][ T8055] EXT4-fs (loop6): pa 00000000b0c62383: logic 1, phys. 41, len 23 [ 107.454074][ T8055] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5459: group 0, free 22, pa_free 23 [ 107.455220][ T8055] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 107.463738][ T8061] loop4: detected capacity change from 0 to 512 [ 107.479051][ T8061] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 107.481191][ T6167] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.515847][ T4708] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 107.639081][ T8077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.758'. [ 107.766718][ T24] IPVS: starting estimator thread 0... [ 107.837872][ T8096] netlink: 4 bytes leftover after parsing attributes in process `syz.4.763'. [ 107.837976][ T8096] netlink: 'syz.4.763': attribute type 3 has an invalid length. [ 107.837985][ T8096] netlink: 20 bytes leftover after parsing attributes in process `syz.4.763'. [ 107.864254][ T8092] IPVS: using max 54 ests per chain, 129600 per kthread [ 107.907699][ T8098] binder: 8097:8098 ioctl 541b 0 returned -22 [ 108.228145][ T8102] loop5: detected capacity change from 0 to 8 [ 108.247577][ T8102] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 108.247599][ T8102] unable to read xattr id index table [ 108.306540][ T8104] loop4: detected capacity change from 0 to 512 [ 108.308216][ T8104] EXT4-fs: Ignoring removed bh option [ 108.312638][ T8104] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.766: corrupted in-inode xattr: e_value size too large [ 108.313491][ T8104] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 108.313680][ T8104] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.766: couldn't read orphan inode 15 (err -117) [ 108.313697][ T8104] loop4: lost filesystem error report for type 5 error -117 [ 108.314378][ T8104] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.353059][ T4708] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.695163][ T8122] loop6: detected capacity change from 0 to 1024 [ 108.703403][ T8122] EXT4-fs: Ignoring removed bh option [ 108.707022][ T8122] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 108.710455][ T8122] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.891749][ T8126] netlink: 4 bytes leftover after parsing attributes in process `syz.6.770'. [ 108.949386][ T8127] EXT4-fs error (device loop6): ext4_read_inline_dir:1494: inode #12: block 7: comm syz.6.770: path /: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 109.070576][ T8127] EXT4-fs (loop6): Remounting filesystem read-only [ 109.324511][ T8132] syzkaller0: entered promiscuous mode [ 109.326589][ T8132] syzkaller0: entered allmulticast mode [ 109.331562][ T8132] netlink: 12 bytes leftover after parsing attributes in process `syz.1.773'. [ 109.416239][ T8143] fuse: Bad value for 'fd' [ 109.468781][ T8147] loop5: detected capacity change from 0 to 512 [ 109.477979][ T8147] ext4: Bad value for 'barrier' [ 109.623091][ T6167] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.662224][ T8157] loop1: detected capacity change from 0 to 128 [ 109.673653][ T8159] loop6: detected capacity change from 0 to 8 [ 109.675568][ T8159] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 109.677211][ T8159] unable to read xattr id index table [ 109.678071][ T8157] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 109.682275][ T8159] SQUASHFS error: zlib decompression failed, data probably corrupt [ 109.682314][ T8159] SQUASHFS error: Failed to read block 0x9b: -5 [ 109.682322][ T8159] SQUASHFS error: Unable to read metadata cache entry [99] [ 109.682329][ T8159] SQUASHFS error: Unable to read inode 0x127 [ 109.719069][ T4705] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 109.842881][ T8162] [ 109.843274][ T8162] ====================================================== [ 109.844420][ T8162] WARNING: possible circular locking dependency detected [ 109.845501][ T8162] syzkaller #0 Tainted: G L [ 109.846469][ T8162] ------------------------------------------------------ [ 109.847633][ T8162] syz.6.782/8162 is trying to acquire lock: [ 109.848565][ T8162] ffff0000f7478c18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x16c/0x2d8 [ 109.850287][ T8162] [ 109.850287][ T8162] but task is already holding lock: [ 109.851438][ T8162] ffff0000e0796788 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x33c/0x810 [ 109.853179][ T8162] [ 109.853179][ T8162] which lock already depends on the new lock. [ 109.853179][ T8162] [ 109.854923][ T8162] [ 109.854923][ T8162] the existing dependency chain (in reverse order) is: [ 109.856408][ T8162] [ 109.856408][ T8162] -> #1 (&ei->xattr_sem){++++}-{4:4}: [ 109.857585][ T8162] down_write+0x50/0xc0 [ 109.858359][ T8162] ext4_xattr_set_handle+0x138/0xe00 [ 109.859337][ T8162] ext4_initxattrs+0xa4/0x118 [ 109.860207][ T8162] security_inode_init_security+0x24c/0x378 [ 109.861310][ T8162] ext4_init_security+0x44/0x58 [ 109.862102][ T8162] __ext4_new_inode+0x28dc/0x3390 [ 109.863050][ T8162] ext4_ext_migrate+0x56c/0xc58 [ 109.863959][ T8162] ext4_ioctl+0x1cd4/0x4234 [ 109.864895][ T8162] __arm64_sys_ioctl+0x14c/0x1c4 [ 109.865888][ T8162] invoke_syscall+0x98/0x244 [ 109.866819][ T8162] el0_svc_common+0xe8/0x23c [ 109.867637][ T8162] do_el0_svc+0x48/0x58 [ 109.868457][ T8162] el0_svc+0x64/0x260 [ 109.869211][ T8162] el0t_64_sync_handler+0x48/0x148 [ 109.870188][ T8162] el0t_64_sync+0x198/0x19c [ 109.871004][ T8162] [ 109.871004][ T8162] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 109.872404][ T8162] __lock_acquire+0x1780/0x2f44 [ 109.873297][ T8162] lock_acquire+0x140/0x368 [ 109.874180][ T8162] percpu_down_read_internal+0x5c/0x294 [ 109.875182][ T8162] ext4_writepages+0x16c/0x2d8 [ 109.875999][ T8162] do_writepages+0x270/0x468 [ 109.876803][ T8162] __writeback_single_inode+0x144/0x1808 [ 109.877807][ T8162] writeback_single_inode+0x3b8/0xaa0 [ 109.878839][ T8162] write_inode_now+0x170/0x208 [ 109.879715][ T8162] iput+0x6bc/0xb90 [ 109.880477][ T8162] ext4_xattr_block_set+0x1aac/0x2188 [ 109.881478][ T8162] ext4_expand_extra_isize_ea+0xb18/0x13a0 [ 109.882488][ T8162] __ext4_expand_extra_isize+0x29c/0x370 [ 109.883432][ T8162] __ext4_mark_inode_dirty+0x3a4/0x810 [ 109.884418][ T8162] ext4_evict_inode+0x7a0/0xfc4 [ 109.885327][ T8162] evict+0x4b8/0x740 [ 109.886058][ T8162] iput+0x858/0xb90 [ 109.886786][ T8162] ext4_process_orphan+0x240/0x2b4 [ 109.887753][ T8162] ext4_orphan_cleanup+0x7b8/0xd30 [ 109.888770][ T8162] ext4_fill_super+0x45a4/0x4d60 [ 109.889689][ T8162] get_tree_bdev_flags+0x380/0x434 [ 109.890690][ T8162] get_tree_bdev+0x2c/0x3c [ 109.891521][ T8162] ext4_get_tree+0x28/0x38 [ 109.892349][ T8162] vfs_get_tree+0x90/0x28c [ 109.893203][ T8162] fc_mount+0x24/0xac [ 109.893984][ T8162] do_new_mount+0x2a4/0x540 [ 109.894880][ T8162] path_mount+0x5d0/0xa68 [ 109.895779][ T8162] do_mount+0xe8/0x148 [ 109.896551][ T8162] __arm64_sys_mount+0x334/0x380 [ 109.897488][ T8162] invoke_syscall+0x98/0x244 [ 109.898363][ T8162] el0_svc_common+0xe8/0x23c [ 109.899197][ T8162] do_el0_svc+0x48/0x58 [ 109.899935][ T8162] el0_svc+0x64/0x260 [ 109.900652][ T8162] el0t_64_sync_handler+0x48/0x148 [ 109.901603][ T8162] el0t_64_sync+0x198/0x19c [ 109.902419][ T8162] [ 109.902419][ T8162] other info that might help us debug this: [ 109.902419][ T8162] [ 109.904084][ T8162] Possible unsafe locking scenario: [ 109.904084][ T8162] [ 109.905346][ T8162] CPU0 CPU1 [ 109.906362][ T8162] ---- ---- [ 109.907293][ T8162] lock(&ei->xattr_sem); [ 109.908084][ T8162] lock(&sbi->s_writepages_rwsem); [ 109.909453][ T8162] lock(&ei->xattr_sem); [ 109.910640][ T8162] rlock(&sbi->s_writepages_rwsem); [ 109.911607][ T8162] [ 109.911607][ T8162] *** DEADLOCK *** [ 109.911607][ T8162] [ 109.913068][ T8162] 3 locks held by syz.6.782/8162: [ 109.913951][ T8162] #0: ffff0000f745a0d8 (&type->s_umount_key#27/1){+.+.}-{4:4}, at: alloc_super+0x220/0x8bc [ 109.915677][ T8162] #1: ffff0000f745a600 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x360/0xfc4 [ 109.917281][ T8162] #2: ffff0000e0796788 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x33c/0x810 [ 109.919047][ T8162] [ 109.919047][ T8162] stack backtrace: [ 109.920059][ T8162] CPU: 0 UID: 0 PID: 8162 Comm: syz.6.782 Tainted: G L syzkaller #0 PREEMPT [ 109.921756][ T8162] Tainted: [L]=SOFTLOCKUP [ 109.922412][ T8162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 109.924144][ T8162] Call trace: [ 109.924701][ T8162] show_stack+0x2c/0x3c (C) [ 109.925515][ T8162] __dump_stack+0x30/0x40 [ 109.926281][ T8162] dump_stack_lvl+0xd8/0x12c [ 109.927062][ T8162] dump_stack+0x1c/0x28 [ 109.927746][ T8162] print_circular_bug+0x328/0x330 [ 109.928603][ T8162] check_noncircular+0x158/0x174 [ 109.929428][ T8162] __lock_acquire+0x1780/0x2f44 [ 109.930266][ T8162] lock_acquire+0x140/0x368 [ 109.931068][ T8162] percpu_down_read_internal+0x5c/0x294 [ 109.932036][ T8162] ext4_writepages+0x16c/0x2d8 [ 109.932864][ T8162] do_writepages+0x270/0x468 [ 109.933592][ T8162] __writeback_single_inode+0x144/0x1808 [ 109.934560][ T8162] writeback_single_inode+0x3b8/0xaa0 [ 109.935473][ T8162] write_inode_now+0x170/0x208 [ 109.936330][ T8162] iput+0x6bc/0xb90 [ 109.936996][ T8162] ext4_xattr_block_set+0x1aac/0x2188 [ 109.937918][ T8162] ext4_expand_extra_isize_ea+0xb18/0x13a0 [ 109.938993][ T8162] __ext4_expand_extra_isize+0x29c/0x370 [ 109.939906][ T8162] __ext4_mark_inode_dirty+0x3a4/0x810 [ 109.940857][ T8162] ext4_evict_inode+0x7a0/0xfc4 [ 109.941683][ T8162] evict+0x4b8/0x740 [ 109.942388][ T8162] iput+0x858/0xb90 [ 109.943053][ T8162] ext4_process_orphan+0x240/0x2b4 [ 109.943973][ T8162] ext4_orphan_cleanup+0x7b8/0xd30 [ 109.944843][ T8162] ext4_fill_super+0x45a4/0x4d60 [ 109.945713][ T8162] get_tree_bdev_flags+0x380/0x434 [ 109.946571][ T8162] get_tree_bdev+0x2c/0x3c [ 109.947372][ T8162] ext4_get_tree+0x28/0x38 [ 109.948193][ T8162] vfs_get_tree+0x90/0x28c [ 109.949019][ T8162] fc_mount+0x24/0xac [ 109.949684][ T8162] do_new_mount+0x2a4/0x540 [ 109.950472][ T8162] path_mount+0x5d0/0xa68 [ 109.951243][ T8162] do_mount+0xe8/0x148 [ 109.951938][ T8162] __arm64_sys_mount+0x334/0x380 [ 109.952710][ T8162] invoke_syscall+0x98/0x244 [ 109.953521][ T8162] el0_svc_common+0xe8/0x23c [ 109.954270][ T8162] do_el0_svc+0x48/0x58 [ 109.955063][ T8162] el0_svc+0x64/0x260 [ 109.955701][ T8162] el0t_64_sync_handler+0x48/0x148 [ 109.956550][ T8162] el0t_64_sync+0x198/0x19c [ 110.017550][ T8172] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.786: inode has both inline data and extents flags [ 110.017591][ T8172] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 110.017706][ T8172] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.786: couldn't read orphan inode 15 (err -117) [ 110.017720][ T8172] loop1: lost filesystem error report for type 5 error -117 [ 110.018006][ T8172] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.020114][ T8172] EXT4-fs error (device loop1): ext4_check_dx_root:2201: inode #2: comm syz.1.786: Corrupt dir, invalid name_len for '.', running e2fsck is recommended [ 110.033185][ T8162] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #11: comm syz.6.782: iget: bad extra_isize 58 (inode size 256) [ 110.035622][ T8162] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 110.040199][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 110.040222][ C1] EXT4-fs (loop6): initial error at time 524393: ext4_xattr_inode_iget:441: inode 11 [ 110.040251][ C1] EXT4-fs (loop6): last error at time 524393: ext4_xattr_inode_iget:441: inode 11 [ 110.042841][ T4705] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.048268][ T8162] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.782: error while reading EA inode 11 err=-117 [ 110.048297][ T8162] loop6: lost filesystem error report for type 5 error -117 [ 110.050651][ T8162] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #11: comm syz.6.782: iget: bad extra_isize 58 (inode size 256) [ 110.059340][ T8162] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.782: error while reading EA inode 11 err=-117 [ 110.059368][ T8162] loop6: lost filesystem error report for type 5 error -117 [ 110.062689][ T8162] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #18: comm syz.6.782: iget: bad extra_isize 58 (inode size 256) [ 110.262589][ T8162] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.782: error while reading EA inode 18 err=-117 [ 110.262655][ T8162] loop6: lost filesystem error report for type 5 error -117 [ 110.263260][ T8162] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #18: comm syz.6.782: iget: bad extra_isize 58 (inode size 256) [ 110.263394][ T8162] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.782: error while reading EA inode 18 err=-117 [ 110.263405][ T8162] loop6: lost filesystem error report for type 5 error -117 [ 110.263547][ T8162] EXT4-fs (loop6): 1 orphan inode deleted [ 110.263795][ T8162] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.696501][ T7835] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.016826][ T7650] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.081742][ T7650] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.125381][ T7650] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.163486][ T7650] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.459251][ T4711] Bluetooth: hci3: command tx timeout [ 111.524289][ T7650] team0: left allmulticast mode [ 111.524318][ T7650] team_slave_0: left allmulticast mode [ 111.524330][ T7650] team_slave_1: left allmulticast mode [ 111.524368][ T7650] team0: left promiscuous mode [ 111.524375][ T7650] team_slave_0: left promiscuous mode [ 111.524439][ T7650] team_slave_1: left promiscuous mode [ 111.524526][ T7650] bridge0: port 3(team0) entered disabled state [ 111.526415][ T7650] bridge_slave_1: left allmulticast mode [ 111.526426][ T7650] bridge_slave_1: left promiscuous mode [ 111.526475][ T7650] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.528169][ T7650] bridge_slave_0: left allmulticast mode [ 111.528180][ T7650] bridge_slave_0: left promiscuous mode [ 111.528228][ T7650] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.885988][ T7650] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.915729][ T7650] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.959211][ T7650] bond0 (unregistering): Released all slaves [ 112.198724][ T4394] 8021q: adding VLAN 0 to HW filter on device eth8 [ 112.285099][ T7650] hsr_slave_0: left promiscuous mode [ 112.286160][ T7650] hsr_slave_1: left promiscuous mode [ 112.286367][ T7650] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.286377][ T7650] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.287311][ T7650] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.287321][ T7650] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.295158][ T7650] veth1_macvtap: left promiscuous mode [ 112.295186][ T7650] veth0_macvtap: left promiscuous mode [ 112.295216][ T7650] veth1_vlan: left promiscuous mode [ 112.295236][ T7650] veth0_vlan: left promiscuous mode [ 112.436832][ T7650] team0 (unregistering): Port device team_slave_1 removed [ 112.457904][ T7650] team0 (unregistering): Port device team_slave_0 removed [ 112.535929][ T4394] 8021q: adding VLAN 0 to HW filter on device eth9 [ 112.782971][ T7650] IPVS: stop unused estimator thread 0... [ 112.814085][ T4394] 8021q: adding VLAN 0 to HW filter on device eth11 [ 113.074040][ T4394] 8021q: adding VLAN 0 to HW filter on device eth10