last executing test programs: 28.962588345s ago: executing program 32 (id=1279): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@mcast2, 0x0, 0x0, 0x4e20, 0x0, 0x2}, {0xfffffffffffffffd, 0x1, 0xa9, 0x0, 0x0, 0xb}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x80001, 0x1, 0x0, 0x4, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x4d4, 0x32}, 0x2, @in=@local, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}, 0x9df}, 0x1c) 18.778664208s ago: executing program 4 (id=1616): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) r1 = dup(r0) write$FUSE_STATX(r1, &(0x7f0000003ac0)={0x174, 0x0, 0x0, {0x2, 0x100, 0x0, '\x00', {0x1000, 0x6, 0x8, 0xffff, 0x0, 0x0, 0xa000, '\x00', 0xffffffff00000000, 0x2, 0x80000000, 0x1, {0x4, 0x8}, {0x4, 0x2}, {0x5, 0x4}, {0xdc, 0xffffffff}, 0x3, 0x7fff, 0xc68}}}, 0x130) 18.659396878s ago: executing program 4 (id=1618): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000110000000000000000000100", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}, 0x1, 0x0, 0x0, 0x881}, 0x0) 18.583951404s ago: executing program 4 (id=1621): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x1000040, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$eJzs3U9oHGUbAPBnZrNN/+T70g++Dz6lh6JChdJN0j9aPbVXsVDoQfCiYbMNJZtsySbahIDpvYg9iEov9aYHj4oHD+LFo1cvimeh2KDQ9KArm51N03S3bmI2W7O/H0z2fWdm93nfmX3e7AwzTAB962j9TxrxVERcTCKGNywbiGzh0cZ6qytLxfsrS8UkarVLvySRRMS9laVic/0kez0UEcsR8f+I+CYfcTxd/8h9zUJ1YXFqvFwuzWb1kbnpqyPVhcUTV6bHJ0uTpZlTL7505uzpM2MnxzY2935tYy2/tb7e+PHmuze+e+X2zU8/O7JcfH88iXMxlC3b2I+d1Ngm+Ti3af7pbgTroaTXDWBbclme11PpfzEcuSzrW6ltHBwGd6V5QBfVBiNq6zYUgT6QSHroU83fAfXj3+a0m78/7pxvHIDU466uLBXfiWb8gca5idi/dmxy8NfkoSOT+vHm4d1sKHvS8vWIGB0YePT7n2Tfv+0b3YkG0lVfn2/sqEf3f7o+/kSL8Weoee70b2qOf6vZ+LfaIn6uzfh3scMYv7/+00dt418fjKdbxk/W4yct4qcR8WaH8W+99uXZdstqH0cci9bxm5LHnx8euXylXBpt/G0Z46tjR15u3/+Ig23iN87Z7l9ryMb+78valHbY/y++/fyZ5cfEf/7Zx+//Vtv/QES812H8/9z75NV2y+5cT+7WfwVsdf8nkY/bHcZ/4dzRH7Kis4YAAAAAAAAAALCD0rVr2ZK0sF5O00KhcQ/vf+NgWq5U545frszPTDSueTsc+bR5pdVwo57U62PZ9bjN+slN9VO5LGDuwFq9UKyUJ3rcdwAAAAAAAAAAAAAAAAAAAHhSHNp0//9vubX7/zc/rhrYq9o/8hvY6+Q/9K+H8z/pWTuA3ef/P/StmvyH/iX/oX/Jf+hf8h/6l/yH/iX/oX/JfwAAAAAAAAAAAAAAAAAAAAAAAAAA6IqLFy7Up9r9laVivT4xsDA/VXnrxESpOlWYni8WipXZq4XJSmWyXCoUK9N/9XlJpXJ1NGbmr43MlapzI9WFxTemK/MzzWeKlvJd7xEAAAAAAAAAAAAAAAAAAAD88wytTUlaiMg36mlaKET8KyIOJ5FcvlIujUbEvyPi+1x+sF4f63WjAQAAAAAAAAAAAAAAAAAAYI+pLixOjZfLpdnuFQayUF0M0XlhYCsrR8Tyzjaj/olbflc+24A93nR7o5B7Mr6HT36hh4MSAAAAAAAAAAAAAAAAAAD0qQc3/Xb6jj+62yAAAAAAAAAAAAAAAAAAAADoS+nPSUTUp2PDzw1tXrovWc2tvUbE27cufXBtfG5udqw+/+76/LkPs/kne9F+oFPNPE0jop7HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAPVhcWp8XK5NLvNwmAH6/S6jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADb8WcAAAD//y4WzlE=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x42042, 0x138) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x40) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r0, 0x10, 0x10c00, 0x8000) 18.492435195s ago: executing program 4 (id=1624): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000040)={[{@test_dummy_encryption}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@norecovery}]}, 0x3, 0x470, &(0x7f0000000dc0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r0, &(0x7f0000000400)=""/4096, 0xc00) 18.227127881s ago: executing program 4 (id=1630): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 17.652478639s ago: executing program 1 (id=1652): ftruncate(0xffffffffffffffff, 0xc17a) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x6e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x3c, 0x64, 0x0, 0x7, 0x6, 0x0, @private=0xa010102, @remote}, {{0x6e22, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x8, 0x606d, 0x0, 0x1ff, {[@md5sig={0x13, 0x12, "0e958d0000f1ff000000ec2400000041"}]}}}}}}}, 0x0) 17.547137436s ago: executing program 1 (id=1654): mmap$IORING_OFF_SQ_RING(0x0, 0x4c00000, 0x1000001, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvfrom$packet(r0, 0x0, 0x0, 0x40000000, &(0x7f0000000440)={0x11, 0x1c, 0x0, 0x1, 0x6, 0x6, @multicast}, 0x14) 17.526067081s ago: executing program 1 (id=1656): syz_mount_image$vfat(&(0x7f0000001140), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa18c56, &(0x7f0000001500)={[{@shortname_win95}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@fat=@codepage={'codepage', 0x3d, '874'}}, {@uni_xlate}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'none'}}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}, {@rodir}, {@shortname_winnt}, {@numtail}, {@numtail}, {@utf8}]}, 0x7f, 0x2ba, &(0x7f0000001240)="$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") write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17.503386835s ago: executing program 1 (id=1659): bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)="5c00000014006b05c84e21000ab16d6e230686f802000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8040880) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)="5c00000015006b05c84e21000ab16d6e230686f802000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8040880) 17.488046211s ago: executing program 1 (id=1660): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000300)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x90e, &(0x7f0000000280)={[{@init_itable_val={'init_itable', 0x3d, 0x957}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2a}}, {@stripe={'stripe', 0x3d, 0x8}}, {@orlov}, {@lazytime}]}, 0x4, 0x46f, &(0x7f0000000780)="$eJzs289vFFUcAPDvTFt+IyviDxC1isbGH1sooBy8aDTxoImJFzzWthBkoYbWRAgRNAaPhsTEo/Fo4l/gSS9GPZl41bshIYaL6GnM7M6022W73ZYtK93PJ9nueztv+t533rzdN/N2AxhYo/mfJGJHRPweEbsa2aUFRhtPN29cnPrnxsWpJLLs7b+Serm/b1ycKouW+20vMmNpRPppEg+3qXfu/IXTk7XazLkiPz5/5v3xufMXnj91ZvLkzMmZsxPHjh05fOjFFyaO9iTOe/O27vtodv/e19+5+ubU8avv/vxtUsbfEkePjHba+FSW9bi6/trZlE6Gu9hhaB0bQ9fybsi7a6Q+/nfFUCx23q547ZO+Ng5YV1lhmc2XM2ADS6LfLQD6o/ygz69/y8edm3303/WXGxdAedw3i0djy3CkRZmRluvbXhqNiOOX//0qf8Tq70O4igYAVu37fP7z3C3zv62t5e6JzfW1oUqxlrI7Iu6LiD0RcX9EPBARD0bEQ+0q6bAg0LpIcuv8J7221ti6kc//XirWtpbO/8rZX1SGitzOevxH04jazMH6MYkYi5HNJ07VZg51qOOHV3/7fLltzfO//JHXX84Fi3ZcG968dJ/pyfnJ24m52fWPI/YNt4s/WVgJSCJib0TsW2Mdp575Zv9y21aOv4Nu1plWkH0d8XSj/y9HS/ylpPP65PiW/HwYz8+Cg23r+OXXK28tV/9txd8Def9va3v+L8RfSZrXa+dW898bo/vKH58te01TXdP5v/jCpuL5w8n5+XOHIjYlbzQa3fz6xOK+Zb4sn8c/dqD9+N9df84WDkR+Ej8SEY9GxGNFdI9HxBMRcaDDUfjplSff63SE2se/pcN/7J08/umW/q8sLdLS/4uJTdH6SvvE0Okfv1v6H7uJv5T3/5F6aqx4pf7+92XnuLpp12rPZgAAALhbpRGxI5K0upBO02q18R3+PbEtrc3OzT97YvaDs9ON3whUYiQt73Q17gePJOX9z0pTfqIlf7i4b/zF0NZ6vjo1W5vud/Aw4LY3j//yTme18fSnb5fAxteDdTTgLmX8w+Ay/mFwGf8wuNqM/1u+AA5sTO0+/y/1oR3Andcy/i37wQBx/Q+Da7jpR47AYGn+/PdGAANjbmus/CP5jZDIsiz7HzRj4yQi7bbwpX43deVEss6jYEe/A1x9ot/vTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL3xXwAAAP//BL/saw==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) 17.4586577s ago: executing program 1 (id=1662): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008"], 0x7c}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e80), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001600)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010065bd7000ffdbdf252100000008000300", @ANYRES32=r2, @ANYBLOB="24002d8005000100030000000500040000000000080002"], 0x40}, 0x1, 0x0, 0x0, 0x24880}, 0x4000880) 16.256961694s ago: executing program 2 (id=1696): keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000000000)=@secondary) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) 16.153075174s ago: executing program 2 (id=1700): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setreuid(0xee00, 0x0) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) 16.069001203s ago: executing program 2 (id=1705): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, 0x9}]}, &(0x7f0000000040)=0x10) shutdown(r0, 0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000002c0)={r1, 0x6f}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000)={r2, 0xa7c}, 0x8) 16.018707715s ago: executing program 5 (id=1707): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3a8, 0x98, 0x0, 0x0, 0x0, 0x0, 0x3c0, 0x3c0, 0x3c0, 0x3c0, 0x3c0, 0x8000000, 0x0, {[{{@ip={@broadcast, @dev, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x228}}, {{@ip={@remote, @empty, 0x0, 0x0, 'vcan0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @remote}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@multicast2, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth0_macvtap\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x408) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0x2, "94c492eb0165203d36bec70800890100000000000000e1100a0000005900"}) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x6, 0x2b, 0x0, 0x20000000) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 15.990651922s ago: executing program 5 (id=1709): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040840) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907", 0x2) getsockopt$inet_opts(r0, 0x0, 0x4, 0xfffffffffffffffe, &(0x7f0000000200)) 15.964122472s ago: executing program 2 (id=1710): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x8000, &(0x7f00000006c0)={[{@dax_inode}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280), 0x2810000, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@verity_on}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0xcb0a) 15.905637139s ago: executing program 5 (id=1711): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x4, @dev={0xfe, 0x80, '\x00', 0xf}, 0x8}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x2, 0x3, 0x200, 0xb, 0x100, 0x4, 0x9, 0xffffff0c, r2}, &(0x7f0000000100)=0x20) 15.905364707s ago: executing program 4 (id=1713): sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x14, 0x17, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044000}, 0x8054) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000801) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x15) 15.800152453s ago: executing program 33 (id=1713): sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x14, 0x17, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044000}, 0x8054) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000801) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x15) 15.788142357s ago: executing program 5 (id=1715): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000040)={[{@test_dummy_encryption}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@norecovery}]}, 0x3, 0x470, &(0x7f0000000dc0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r0, &(0x7f0000000400)=""/4096, 0xc00) 15.59668218s ago: executing program 5 (id=1716): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002240)='./file0\x00', 0x800012, &(0x7f0000000b00)=ANY=[], 0x2, 0x2d6, &(0x7f0000000500)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180be7dce33e558413724c328fb0d50000000000000000000000000002000000000d0000ed0000000700000000000000000000000d00000000002e305f2e"], 0x0, 0x44}, 0x28) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1a42028, 0x0, 0x1, 0x0, 0x0) 15.577533081s ago: executing program 2 (id=1717): r0 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000340)=@o_path={&(0x7f0000000300)='./file0\x00', r2, 0x4000, r1}, 0x18) 15.181417017s ago: executing program 5 (id=1722): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) write$snapshot(r0, &(0x7f0000000040)='X', 0x1) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$SNAPSHOT_FREE(r1, 0x3305) write$binfmt_aout(r1, 0x0, 0x0) 15.062121598s ago: executing program 34 (id=1722): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) write$snapshot(r0, &(0x7f0000000040)='X', 0x1) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$SNAPSHOT_FREE(r1, 0x3305) write$binfmt_aout(r1, 0x0, 0x0) 15.053229387s ago: executing program 2 (id=1725): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x481, 0x5}, 0x30, 0x0) landlock_restrict_self(r1, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) 15.052155326s ago: executing program 35 (id=1725): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x481, 0x5}, 0x30, 0x0) landlock_restrict_self(r1, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) 10.343549938s ago: executing program 6 (id=1791): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0xf) 8.268520936s ago: executing program 6 (id=1852): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21801, 0x1103}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xdba7}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x1b32, 0x4) 8.220423483s ago: executing program 6 (id=1855): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000940)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000100)={0x30, r2, 0x9, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x5, 0x1, 0xf3}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0xfffd}]}]}, 0x30}}, 0x4010) 8.171060766s ago: executing program 6 (id=1858): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280), 0x1, 0x51f, &(0x7f0000000600)="$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") r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000240)='.\x00', 0x60000526) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x24) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 7.953441159s ago: executing program 6 (id=1864): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4, 0x0, 0xffbd}}, 0x26) syz_emit_ethernet(0x38, &(0x7f0000000240)={@broadcast, @random="bca1d50509bc", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0x2a, 0x0, 0x0, 0x8, 0x11, 0x0, @empty, @empty}, {0x200, 0x4e20, 0x16, 0x0, @opaque="956d2bb26f4f6aac3f61da4d180b"}}}}}, 0x0) 7.477406557s ago: executing program 6 (id=1881): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @local}, @in6={0xa, 0x0, 0xfffffffc, @loopback, 0xc7f}], 0x2c) sendto$inet6(r0, &(0x7f0000000040)="e4", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x1, 0x35, 0x81, 0x4, 0xb7, 0x2, 0x3, 0x7, 0xb, 0x7, 0xc, 0x8, 0x80, 0xa}, 0xe) recvmmsg(r0, &(0x7f0000007f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/40, 0x28}, 0x10001}], 0x1, 0x40000023, 0x0) 7.373104463s ago: executing program 36 (id=1881): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @local}, @in6={0xa, 0x0, 0xfffffffc, @loopback, 0xc7f}], 0x2c) sendto$inet6(r0, &(0x7f0000000040)="e4", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x1, 0x35, 0x81, 0x4, 0xb7, 0x2, 0x3, 0x7, 0xb, 0x7, 0xc, 0x8, 0x80, 0xa}, 0xe) recvmmsg(r0, &(0x7f0000007f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/40, 0x28}, 0x10001}], 0x1, 0x40000023, 0x0) 2.408161626s ago: executing program 37 (id=1662): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008"], 0x7c}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e80), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001600)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010065bd7000ffdbdf252100000008000300", @ANYRES32=r2, @ANYBLOB="24002d8005000100030000000500040000000000080002"], 0x40}, 0x1, 0x0, 0x0, 0x24880}, 0x4000880) 1.2494154s ago: executing program 0 (id=2013): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) setns(0xc9, 0x0) r1 = socket(0x8, 0x5, 0x5) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESOCT=r1]) 662.92165ms ago: executing program 9 (id=2032): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r2 = dup3(r1, r0, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x4418, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) 619.464938ms ago: executing program 9 (id=2034): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)='\bU', 0x2}], 0x1, 0x0, 0x0, 0x20000850}, 0x4080) 565.360833ms ago: executing program 9 (id=2038): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001a80)={0x4, 0x0, &(0x7f0000001900)=[@enter_looper], 0x1, 0x0, &(0x7f0000001a40)="a1"}) syz_clone(0x84800000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x41071, 0xffffffffffffffff, 0x0) 460.990826ms ago: executing program 7 (id=2044): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f00000000c0), 0x10) sendto$l2tp(r0, &(0x7f0000000280)="e5786a0d000000000000003b", 0xc, 0x8000, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000000)=0x81, 0x4) recvmsg(r0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x2) 438.80497ms ago: executing program 8 (id=2045): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000280)="390000001300090468fe0700000000001000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000001400010004000000fedbdf250a00000004000000080008800402478014000280bf"], 0x34}, 0x1, 0x0, 0x0, 0x20000804}, 0x4004c810) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000380)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) 337.379349ms ago: executing program 0 (id=2046): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r1, 0x26, 0x0, @void}, 0x10) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000300)={r2, r3, 0x4, r0}, 0x10) 337.2308ms ago: executing program 7 (id=2047): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 306.202911ms ago: executing program 0 (id=2048): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3103feffffff000000000800000008000300", @ANYRES32=r3, @ANYBLOB="08000600", @ANYRESHEX], 0x2c}, 0x1, 0x0, 0x0, 0x22004094}, 0x4000) 296.389963ms ago: executing program 7 (id=2049): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000140)=0x2, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000340)=0xc6, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x5, @empty}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f0000000900)=ANY=[@ANYBLOB="ffffffffbfff20000000000086dd600489f1009c1100fc01008c000000000025030000000000ff02000000000000000000000000000100000e22"], 0x0) 286.593312ms ago: executing program 9 (id=2050): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@ipv4_newroute={0x3c, 0x18, 0x2, 0x0, 0x0, {0x2, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x2}}}}]}, 0x3c}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) 276.160842ms ago: executing program 3 (id=2051): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xffffffff, r0, 0x4}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a11800152c280014", 0x1f}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x33fe0) 274.65851ms ago: executing program 8 (id=2052): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x8, 0xfffd}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x4388, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x6, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe65c, 0x4, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0x4, 0x0, 0x71, 0xfffffff8, 0x7, 0x1, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0xfffffffc, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x6, 0x7ffe, 0x10, 0xfffffff3, 0x129432e7, 0x3, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0x8000006, 0x3, 0xb83, 0x7, 0x5, 0x0, 0xf, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0xed2d, 0x4, 0x0, 0x5, 0x2, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x8], [0x400, 0x4, 0x100, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8001, 0x83, 0x80000003, 0x9, 0x43e7, 0x9, 0x5, 0x2, 0x2, 0xf37, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x8, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0xfffffff7, 0x3, 0x6, 0xaaed, 0x4, 0x5], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0xb0b2748, 0xb1c, 0x1, 0x200, 0xffbf243f, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 221.659845ms ago: executing program 9 (id=2053): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xc, 0x79}}}}, [@NL80211_ATTR_PID={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x2) 221.415585ms ago: executing program 3 (id=2054): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x3}, 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 221.21927ms ago: executing program 0 (id=2055): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x0, 0xe, 0x7, 0x9, 0x0, 0x5, 0xff, 0x5, 0x4, 0xfd, 0x0, 0x0, 0xcc}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000280)=@assoc_value={r1, 0x1}, 0x8) 210.771394ms ago: executing program 7 (id=2056): close(0x3) syz_open_dev$video(&(0x7f0000000000), 0x18, 0x40100) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x40, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 209.88768ms ago: executing program 9 (id=2057): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2, 0x2000000) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000048000), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) exit(0x0) 183.503525ms ago: executing program 7 (id=2058): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r0, &(0x7f0000002740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)}, 0x8}], 0x1, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 162.68137ms ago: executing program 3 (id=2059): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@delchain={0x2c, 0x65, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xfff2, 0x7}, {0x0, 0x1}, {0xffec, 0xa}}, [@TCA_CHAIN={0x8, 0xb, 0xfffeffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) 162.1302ms ago: executing program 8 (id=2060): sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="020100090e000000fcffffff0400000005000600000000000a00000000000000fc01ff80000000000000000000000000000000000000000005000500000000000a0000002efcb098950a0ec00000000000000000000000aa"], 0x70}}, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0xaa}}}}}, 0x0) 152.380009ms ago: executing program 3 (id=2061): r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x80000}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}}, 0x1c) listen(r0, 0x7ff) 138.381735ms ago: executing program 0 (id=2062): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000002000000b7050000080f0000850000006900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c300000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r1, 0x5, 0xe, 0x0, &(0x7f00000000c0)="469dc2d342e2b7000091000000000bcf48f3ac4e19a56ceb0b42c0", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x22) 128.259319ms ago: executing program 8 (id=2063): r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9400000010000100"/20, @ANYRES32=r2, @ANYBLOB="0006000000000000240012800b00010067656e657665000014000280060005004e24000008000b"], 0x94}, 0x1, 0x2}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 97.482744ms ago: executing program 3 (id=2064): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x25dfdbfc, {0x60, 0x0, 0x0, r2, {}, {0x1, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8001, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) 83.946514ms ago: executing program 0 (id=2065): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc, &(0x7f0000000440), 0x3, 0x44b, &(0x7f0000001a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x40) truncate(&(0x7f0000000080)='./file1\x00', 0x200f000) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r0, 0x3, 0x52a9, 0x20008000c61) 83.791631ms ago: executing program 8 (id=2066): unshare(0x2040400) syz_clone3(&(0x7f00000003c0)={0x100001000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0}, 0x66) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000080)='./file4\x00', 0xa08c54, &(0x7f0000000180)=ANY=[@ANYBLOB='shortname=winnt,iocharset=cp\'37,uni_xlate=1,uni_xlate=1,shortname=winnt,codepage=775,iocharset=cp866,utf8=0,shortname=lower,discard,iocharset=iso8859-2,rodir,shortname=win95,\x00'], 0x9, 0x2c4, &(0x7f0000000b00)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) pidfd_send_signal(r0, 0x23, &(0x7f0000000180)={0x15, 0x3, 0x80}, 0x0) 83.46729ms ago: executing program 7 (id=2067): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r2, {0x0, 0xf}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 5.518456ms ago: executing program 3 (id=2068): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000300)={[{@data_err_ignore}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@errors_remount}, {@grpid}, {@noquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}, {@jqfmt_vfsold}]}, 0x1, 0x47a, &(0x7f00000006c0)="$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") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4002, &(0x7f0000000000)={[{@jqfmt_vfsv0}, {@dax_inode}]}, 0x1, 0xbf2, &(0x7f0000001e80)="$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") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, &(0x7f0000000000)) 0s ago: executing program 8 (id=2069): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d080009000300e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c816", 0x0, 0x0, 0x0}, 0x38) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="3640000049009125745c7388641f9c0e0a"], 0xfe33) kernel console output (not intermixed with test programs): eback. [ 66.286298][ T4712] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.353781][ T4718] Bluetooth: hci3: command 0x0c1a tx timeout [ 66.355073][ T9] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 66.355106][ T9] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 66.433133][ T4883] net_ratelimit: 21 callbacks suppressed [ 66.433175][ T4883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 66.509984][ T4796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 66.795569][ T7265] xt_hashlimit: size too large, truncated to 1048576 [ 66.861148][ T7271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 66.910105][ T4796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.064347][ T7281] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 67.073374][ T7281] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 67.152370][ T4796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.336258][ T7300] batadv_slave_0: entered promiscuous mode [ 67.337993][ T7298] batadv_slave_0: left promiscuous mode [ 67.375892][ T7301] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 67.390286][ T4796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.429627][ T7305] vhci_hcd vhci_hcd.3: invalid port number 255 [ 67.437004][ T7305] vhci_hcd vhci_hcd.3: invalid port number 255 [ 67.438866][ T30] audit: type=1326 audit(67.400:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7303 comm="syz.0.950" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa037a168 code=0x0 [ 67.550141][ T4883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.698084][ T7326] loop8: detected capacity change from 0 to 7 [ 67.708002][ T7326] Dev loop8: unable to read RDB block 7 [ 67.708036][ T7326] loop8: unable to read partition table [ 67.708117][ T7326] loop8: partition table beyond EOD, truncated [ 67.708149][ T7326] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 67.937929][ T7326] loop8: detected capacity change from 7 to 8 [ 67.978905][ T4883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 68.034481][ T7338] lo: Caught tx_queue_len zero misconfig [ 68.123654][ T7344] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 68.172870][ T7348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 68.430744][ T4718] Bluetooth: hci0: command 0x0c1a tx timeout [ 68.439796][ T9] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 68.439825][ T9] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 68.543118][ T7376] loop3: detected capacity change from 0 to 1024 [ 68.543495][ T7376] EXT4-fs: inline encryption not supported [ 68.555226][ T7377] loop0: detected capacity change from 0 to 512 [ 68.575121][ T7376] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 68.585184][ T7377] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.972: invalid indirect mapped block 256 (level 2) [ 68.590719][ T7377] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 68.599723][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 68.599749][ C0] EXT4-fs (loop0): initial error at time 68: ext4_free_branches:1023: inode 11 [ 68.599786][ C0] EXT4-fs (loop0): last error at time 68: ext4_free_branches:1023: inode 11 [ 68.613660][ T7377] EXT4-fs (loop0): 2 truncates cleaned up [ 68.615757][ T7377] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.666436][ T4710] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 68.712323][ T4711] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.718220][ T7388] syz_tun: entered allmulticast mode [ 68.742935][ T7388] pim6reg: entered allmulticast mode [ 68.796433][ T7395] netlink: 8 bytes leftover after parsing attributes in process `syz.1.977'. [ 68.808631][ T7397] Bluetooth: MGMT ver 1.23 [ 69.037297][ T7413] veth0_macvtap: Caught tx_queue_len zero misconfig [ 69.253174][ T7425] syzkaller1: entered promiscuous mode [ 69.253214][ T7425] syzkaller1: entered allmulticast mode [ 69.455667][ T7445] bond0: entered promiscuous mode [ 69.455706][ T7445] bond_slave_0: entered promiscuous mode [ 69.455790][ T7445] bond_slave_1: entered promiscuous mode [ 69.469439][ T7445] batadv0: entered promiscuous mode [ 69.481335][ T7445] debugfs: 'hsr1' already exists in 'hsr' [ 69.481372][ T7445] Cannot create hsr debugfs directory [ 69.613568][ T7457] loop3: detected capacity change from 0 to 128 [ 69.627137][ T7459] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1003'. [ 69.637382][ T7457] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 69.671991][ T7459] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.672541][ T7459] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.709456][ T7463] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1003'. [ 69.757426][ T4710] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 69.879316][ T7471] syzkaller1: entered promiscuous mode [ 69.894575][ T7471] syzkaller1: entered allmulticast mode [ 69.895602][ T7471] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 70.518735][ T4718] Bluetooth: hci4: command 0x0c1a tx timeout [ 70.524172][ T9] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 70.524200][ T9] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 71.054485][ T7526] loop4: detected capacity change from 0 to 512 [ 71.070361][ T7526] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.4.1031: corrupted xattr block 95: invalid header [ 71.075768][ T7526] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 71.079731][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 71.079759][ C0] EXT4-fs (loop4): initial error at time 71: ext4_expand_extra_isize_ea:2810: inode 11 [ 71.079794][ C0] EXT4-fs (loop4): last error at time 71: ext4_expand_extra_isize_ea:2810: inode 11 [ 71.088478][ T7526] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.1031: bg 0: block 7: invalid block bitmap [ 71.091638][ T7526] loop4: lost filesystem error report for type 5 error -117 [ 71.092504][ T7526] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 71.096106][ T7526] loop4: lost filesystem error report for type 5 error -117 [ 71.098106][ T7526] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2972: inode #11: comm syz.4.1031: corrupted xattr block 95: invalid header [ 71.103442][ T7526] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 71.113822][ T7526] EXT4-fs warning (device loop4): ext4_evict_inode:287: xattr delete (err -117) [ 71.118733][ T7526] EXT4-fs (loop4): 1 orphan inode deleted [ 71.119228][ T7526] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.231503][ T4721] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.339954][ T7538] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 71.339999][ T7538] vhci_hcd vhci_hcd.2: invalid port number 96 [ 71.340026][ T7538] vhci_hcd vhci_hcd.2: default hub control req: 0311 v0005 i0060 l7 [ 71.509328][ T7547] pim6reg1: entered promiscuous mode [ 71.512437][ T7547] pim6reg1: entered allmulticast mode [ 71.556774][ T4796] net_ratelimit: 12 callbacks suppressed [ 71.556810][ T4796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 71.628569][ T7557] loop2: detected capacity change from 0 to 512 [ 71.640634][ T7557] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 71.640684][ T7557] System zones: 1-12 [ 71.643515][ T7557] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #12: comm syz.2.1044: missing EA_INODE flag [ 71.643540][ T7557] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 71.646768][ T7557] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.1044: error while reading EA inode 12 err=-117 [ 71.651354][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 71.651364][ C0] EXT4-fs (loop2): initial error at time 71: ext4_xattr_inode_iget:441: inode 12 [ 71.651378][ C0] EXT4-fs (loop2): last error at time 71: ext4_xattr_inode_iget:441: inode 12 [ 71.658658][ T7557] loop2: lost filesystem error report for type 5 error -117 [ 71.659467][ T7557] EXT4-fs (loop2): 1 orphan inode deleted [ 71.663046][ T7557] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.740671][ T7565] syz_tun: entered allmulticast mode [ 71.752617][ T7565] pim6reg: entered allmulticast mode [ 71.785236][ T4712] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.909483][ T7575] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1051'. [ 71.947997][ T7579] loop2: detected capacity change from 0 to 128 [ 71.955559][ T7579] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 72.015343][ T4712] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 72.047905][ T7586] loop3: detected capacity change from 0 to 128 [ 72.058515][ T7586] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 72.110577][ T4796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.137828][ T7592] loop4: detected capacity change from 0 to 512 [ 72.145900][ T7592] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 72.150170][ T7592] EXT4-fs (loop4): 1 truncate cleaned up [ 72.151900][ T7592] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.185569][ T7592] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.1057: invalid indirect mapped block 2185560079 (level 0) [ 72.190903][ T7592] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.1057: invalid indirect mapped block 65535 (level 2) [ 72.195479][ T7592] EXT4-fs error (device loop4): __ext4_get_inode_loc:4886: comm syz.4.1057: Invalid inode table block 0 in block_group 0 [ 72.203586][ T7592] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 72.205874][ T7592] EXT4-fs error (device loop4): ext4_splice_branch:479: inode #13: comm syz.4.1057: mark_inode_dirty error [ 72.214009][ T7592] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.1057: bg 0: block 47: invalid block bitmap [ 72.216786][ T7592] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 72.221881][ T7592] EXT4-fs error (device loop4): __ext4_get_inode_loc:4886: comm syz.4.1057: Invalid inode table block 0 in block_group 0 [ 72.228558][ T7592] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 72.233671][ T7592] EXT4-fs error (device loop4): ext4_truncate:4691: inode #13: comm syz.4.1057: mark_inode_dirty error [ 72.283618][ T4721] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.306038][ T4710] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 72.350959][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.520789][ T7609] loop3: detected capacity change from 0 to 256 [ 72.990763][ T7627] Injecting memory failure for pfn 0x121ae8 at process virtual address 0x20000000 [ 73.004553][ T7627] Memory failure: 0x121ae8: recovery action for clean LRU page: Recovered [ 73.006553][ T7627] Injecting memory failure for pfn 0x11fc4b at process virtual address 0x20001000 [ 73.008596][ T7627] Memory failure: 0x11fc4b: recovery action for clean LRU page: Recovered [ 73.010861][ T7627] Injecting memory failure for pfn 0x121aef at process virtual address 0x20002000 [ 73.010949][ T7627] Memory failure: 0x121aef: recovery action for clean LRU page: Recovered [ 73.010967][ T7627] Injecting memory failure for pfn 0x121aee at process virtual address 0x20003000 [ 73.011013][ T7627] Memory failure: 0x121aee: recovery action for clean LRU page: Recovered [ 73.150953][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.309916][ T4796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.391137][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.470214][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.511547][ T7660] Injecting memory failure for pfn 0x139600 at process virtual address 0x20000000 [ 73.565594][ T7660] Memory failure: 0x139600: recovery action for dirty LRU page: Recovered [ 73.723765][ T30] audit: type=1326 audit(73.680:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7670 comm="syz.0.1091" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa037a168 code=0x7ffc0000 [ 73.723807][ T30] audit: type=1326 audit(73.680:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7670 comm="syz.0.1091" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa037a168 code=0x7ffc0000 [ 73.723844][ T30] audit: type=1326 audit(73.680:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7670 comm="syz.0.1091" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa037a168 code=0x7ffc0000 [ 73.723868][ T30] audit: type=1326 audit(73.690:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7670 comm="syz.0.1091" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=444 compat=0 ip=0xffffa037a168 code=0x7ffc0000 [ 73.723888][ T30] audit: type=1326 audit(73.690:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7670 comm="syz.0.1091" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa037a168 code=0x7ffc0000 [ 73.723907][ T30] audit: type=1326 audit(73.690:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7670 comm="syz.0.1091" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa037a168 code=0x7ffc0000 [ 73.723925][ T30] audit: type=1326 audit(73.690:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7670 comm="syz.0.1091" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa037a168 code=0x7ffc0000 [ 73.723942][ T30] audit: type=1326 audit(73.690:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7670 comm="syz.0.1091" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=446 compat=0 ip=0xffffa037a168 code=0x7ffc0000 [ 73.723960][ T30] audit: type=1326 audit(73.690:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7670 comm="syz.0.1091" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa037a168 code=0x7ffc0000 [ 73.723977][ T30] audit: type=1326 audit(73.690:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7670 comm="syz.0.1091" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=203 compat=0 ip=0xffffa037a168 code=0x7ffc0000 [ 74.143280][ T7702] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1104'. [ 74.190108][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 74.206980][ T7705] veth1_to_bond: entered allmulticast mode [ 74.208442][ T7704] veth1_to_bond: left allmulticast mode [ 74.447470][ T4796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 74.573507][ T7725] loop3: detected capacity change from 0 to 4096 [ 74.591772][ T4796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 74.597258][ T7725] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 74.623653][ T7730] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1117'. [ 74.633158][ T7725] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.743210][ T4710] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.978803][ T7755] loop2: detected capacity change from 0 to 512 [ 74.996710][ T7755] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 74.999072][ T7755] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 75.001375][ T7755] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1129: Corrupt directory, running e2fsck is recommended [ 75.004274][ T7755] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 75.006154][ T7755] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.1129: corrupted in-inode xattr: invalid ea_ino [ 75.009111][ T7755] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 75.009728][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 75.009753][ C0] EXT4-fs (loop2): initial error at time 74: ext4_iget_extra_inode:5180: inode 15 [ 75.009789][ C0] EXT4-fs (loop2): last error at time 74: ext4_iget_extra_inode:5180: inode 15 [ 75.017392][ T7755] EXT4-fs (loop2): Remounting filesystem read-only [ 75.017931][ T7755] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.032702][ T7755] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 75.032737][ T7755] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 75.032761][ T7755] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1129: Corrupt directory, running e2fsck is recommended [ 75.043845][ T7755] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 75.050170][ T7755] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 75.052274][ T7755] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1129: Corrupt directory, running e2fsck is recommended [ 75.070365][ T7763] netlink: 'syz.3.1132': attribute type 1 has an invalid length. [ 75.108214][ T4712] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.115636][ T7763] bond1: entered promiscuous mode [ 75.115882][ T7763] 8021q: adding VLAN 0 to HW filter on device bond1 [ 75.217858][ T7763] 8021q: adding VLAN 0 to HW filter on device bond1 [ 75.219602][ T7763] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 75.221803][ T7763] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 75.224263][ T7763] bond1: (slave gre1): Opening slave failed [ 75.307525][ T7776] loop2: detected capacity change from 0 to 512 [ 75.346721][ T7776] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.361055][ T7776] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #2: comm syz.2.1138: corrupted inode contents [ 75.368144][ T7776] EXT4-fs error (device loop2): ext4_dirty_inode:6639: inode #2: comm syz.2.1138: mark_inode_dirty error [ 75.372254][ T7776] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #2: comm syz.2.1138: corrupted inode contents [ 75.376545][ T7776] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.1138: mark_inode_dirty error [ 75.380123][ T7776] EXT4-fs warning (device loop2): ext4_es_cache_extent:1082: inode #2: comm syz.2.1138: ES cache extent failed: add [0,1,21,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 75.380123][ T7776] [ 75.390687][ T7776] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #2: comm syz.2.1138: corrupted inode contents [ 75.405980][ T7776] EXT4-fs error (device loop2): ext4_append:88: inode #2: comm syz.2.1138: mark_inode_dirty error [ 75.416892][ T7776] EXT4-fs error (device loop2) in ext4_append:100: Corrupt filesystem [ 75.419669][ T7776] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #2: comm syz.2.1138: corrupted inode contents [ 75.422438][ T7776] EXT4-fs error (device loop2): add_dirent_to_buf:2151: inode #2: comm syz.2.1138: mark_inode_dirty error [ 75.488077][ T4712] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.508164][ T7782] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1139'. [ 75.638464][ T7788] loop3: detected capacity change from 0 to 512 [ 75.653951][ T7788] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 75.667318][ T7788] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ec01c, mo2=0003] [ 75.667360][ T7788] System zones: 1-2, 4-12, 8-8 [ 75.670027][ T7788] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.1142: iget: bad i_size value: 38620345925642 [ 75.670050][ T7788] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 75.672565][ T7788] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1142: couldn't read orphan inode 15 (err -117) [ 75.672592][ T7788] loop3: lost filesystem error report for type 5 error -117 [ 75.678470][ T7788] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.704090][ T7788] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.1142: bg 0: block 5: invalid block bitmap [ 75.713149][ T7790] overlayfs: failed to decode file handle (len=6, type=0, flags=0, err=-22) [ 75.722744][ T7788] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 75.722777][ T7788] EXT4-fs (loop3): This should not happen!! Data will be lost [ 75.722777][ T7788] [ 75.722799][ T7788] EXT4-fs (loop3): Total free blocks count 0 [ 75.722812][ T7788] EXT4-fs (loop3): Free/Dirty block details [ 75.722825][ T7788] EXT4-fs (loop3): free_blocks=0 [ 75.722844][ T7788] EXT4-fs (loop3): dirty_blocks=2 [ 75.722856][ T7788] EXT4-fs (loop3): Block reservation details [ 75.722869][ T7788] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 75.785796][ T4710] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.854716][ T7796] loop2: detected capacity change from 0 to 1024 [ 75.875479][ T7796] EXT4-fs: Ignoring removed oldalloc option [ 75.878858][ T7798] loop3: detected capacity change from 0 to 1024 [ 75.884824][ T7796] EXT4-fs (loop2): stripe (59979) is not aligned with cluster size (16), stripe is disabled [ 75.906470][ T7796] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 75.931342][ T7798] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.053839][ T4712] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 76.089059][ T7806] loop0: detected capacity change from 0 to 8192 [ 76.123733][ T4710] EXT4-fs error (device loop3): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 76.157205][ T7806] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 76.189165][ T4710] EXT4-fs error (device loop3): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 76.283672][ T4710] EXT4-fs error (device loop3): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 76.379922][ T4710] EXT4-fs error (device loop3): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 76.443925][ T4710] EXT4-fs error (device loop3): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 76.534771][ T4710] EXT4-fs error (device loop3): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 76.573328][ T7823] loop2: detected capacity change from 0 to 128 [ 76.575203][ T7823] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 76.594650][ T7823] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 76.605959][ T4710] EXT4-fs error (device loop3): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 76.658053][ T4710] EXT4-fs error (device loop3): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 76.680983][ T5908] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 76.744753][ T4710] EXT4-fs error (device loop3): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 76.749911][ C0] net_ratelimit: 5 callbacks suppressed [ 76.749943][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 76.771306][ T7827] macvlan1: entered promiscuous mode [ 76.774250][ T7827] team0: Port device macvlan1 added [ 76.821866][ T4710] EXT4-fs error (device loop3): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 76.874687][ T7835] loop0: detected capacity change from 0 to 1024 [ 76.886549][ T7835] EXT4-fs: Ignoring removed bh option [ 76.899980][ T7835] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 76.940327][ T7835] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.961044][ T7841] loop2: detected capacity change from 0 to 256 [ 77.049074][ T4711] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.116687][ T7845] EXT4-fs (loop2): Test dummy encryption mode enabled [ 77.136230][ T7845] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 77.162991][ T7845] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 77.258743][ T4712] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 77.311189][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.550009][ T867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.562576][ T7866] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 77.562601][ T7866] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e118, mo2=0002] [ 77.562696][ T7866] EXT4-fs (loop2): orphan cleanup on readonly fs [ 77.568720][ T7866] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.1178: bg 0: block 15: invalid block bitmap [ 77.571568][ T7866] loop2: lost filesystem error report for type 5 error -117 [ 77.574938][ T7866] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 77.578232][ T7866] loop2: lost filesystem error report for type 5 error -117 [ 77.579078][ T7866] EXT4-fs (loop2): 1 truncate cleaned up [ 77.580813][ C0] EXT4-fs (loop2): error count since last fsck: 2 [ 77.580833][ C0] EXT4-fs (loop2): initial error at time 77: ext4_validate_block_bitmap:432 [ 77.580853][ C0] EXT4-fs (loop2): last error at time 77: ext4_mb_clear_bb:6679 [ 77.589669][ T7866] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 77.630052][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.642191][ T7866] EXT4-fs (loop2): shut down requested (2) [ 77.691443][ T4712] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.235659][ T7898] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 78.247740][ T7898] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 78.249298][ T7898] System zones: 1-12 [ 78.258739][ T7898] EXT4-fs (loop2): 1 truncate cleaned up [ 78.259210][ T7898] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.351817][ T4796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.408067][ T4712] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.590547][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.758506][ T7926] bond0: entered promiscuous mode [ 78.759590][ T7926] bond_slave_0: entered promiscuous mode [ 78.761139][ T7926] bond_slave_1: entered promiscuous mode [ 78.768118][ T7924] bond0: left promiscuous mode [ 78.769206][ T7924] bond_slave_0: left promiscuous mode [ 78.770592][ T7924] bond_slave_1: left promiscuous mode [ 79.277946][ T7945] all (unregistering): Released all slaves [ 79.386031][ T7948] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 79.392708][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.392803][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.630459][ T867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.618432][ T8002] set_capacity_and_notify: 3 callbacks suppressed [ 80.639889][ T8002] loop0: detected capacity change from 0 to 512 [ 80.646955][ T8004] loop6: detected capacity change from 0 to 7 [ 80.651183][ T8004] Dev loop6: unable to read RDB block 7 [ 80.651216][ T8004] loop6: unable to read partition table [ 80.651292][ T8004] loop6: partition table beyond EOD, truncated [ 80.651313][ T8004] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 80.661136][ T8002] EXT4-fs: Ignoring removed nomblk_io_submit option [ 80.719091][ T30] kauditd_printk_skb: 175 callbacks suppressed [ 80.719130][ T30] audit: type=1400 audit(80.680:270): lsm=SMACK fn=smack_ptrace_access_check action=denied subject="w" object="_" requested=rw pid=7999 comm="syz.1.1238" opid=7999 ocomm="syz.1.1238" [ 80.725361][ T8002] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.825494][ T4711] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.124559][ T8026] loop4: detected capacity change from 0 to 512 [ 81.126302][ T8026] EXT4-fs: Ignoring removed i_version option [ 81.127893][ T8026] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 81.156574][ T8026] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.185929][ T4710] EXT4-fs error: 74 callbacks suppressed [ 81.194830][ T8030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1249'. [ 81.211219][ T4710] EXT4-fs error (device loop3): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 81.228962][ T4710] EXT4-fs error (device loop3): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 81.357921][ T4710] EXT4-fs error (device loop3): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 81.405730][ T4721] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.430763][ T4710] EXT4-fs error (device loop3): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 81.459423][ T4710] EXT4-fs error (device loop3): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 81.606631][ T4710] EXT4-fs error (device loop3): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 81.619650][ T4710] EXT4-fs error (device loop3): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 81.729237][ T4710] EXT4-fs error (device loop3): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 81.797181][ T4710] EXT4-fs error (device loop3): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 81.876538][ T4710] EXT4-fs error (device loop3): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 82.254314][ T8090] loop0: detected capacity change from 0 to 512 [ 82.267005][ T8090] EXT4-fs error (device loop0): ext4_iget_extra_inode:5180: inode #15: comm syz.0.1270: corrupted in-inode xattr: invalid ea_ino [ 82.269590][ T8090] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 82.270645][ T8090] EXT4-fs (loop0): Remounting filesystem read-only [ 82.274358][ T8090] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.331815][ T4711] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.395835][ T7628] syz_tun (unregistering): left allmulticast mode [ 82.430001][ T867] net_ratelimit: 5 callbacks suppressed [ 82.430040][ T867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.510651][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.518230][ T7628] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.595464][ T165] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.664734][ T165] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.717533][ T165] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.752219][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.801338][ T165] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.854191][ T4713] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.856443][ T4713] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.858417][ T4713] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.862351][ T4713] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.864263][ T4713] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.876965][ T4718] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.878561][ T4718] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.882122][ T4718] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.885521][ T4718] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.887291][ T4718] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.052043][ T165] bridge_slave_1: left allmulticast mode [ 83.052112][ T165] bridge_slave_1: left promiscuous mode [ 83.052913][ T165] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.070434][ T165] bridge_slave_0: left allmulticast mode [ 83.070463][ T165] bridge_slave_0: left promiscuous mode [ 83.070543][ T165] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.074827][ T4796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.085932][ T165] pim6reg: left allmulticast mode [ 83.156719][ T8138] loop4: detected capacity change from 0 to 128 [ 83.158655][ T8138] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 83.320873][ T165] bond0 (unregistering): left promiscuous mode [ 83.320906][ T165] bond_slave_0: left promiscuous mode [ 83.320998][ T165] bond_slave_1: left promiscuous mode [ 83.326294][ T165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.331984][ T165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.336083][ T165] bond0 (unregistering): Released all slaves [ 83.342588][ T165] bond1 (unregistering): Released all slaves [ 83.448116][ T8133] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 83.492597][ T5904] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 83.550026][ T867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.712300][ T4883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.791394][ T4883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.990059][ T165] batadv0: left promiscuous mode [ 84.004079][ T165] hsr_slave_0: left promiscuous mode [ 84.005693][ T165] hsr_slave_1: left promiscuous mode [ 84.007187][ T165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.008874][ T165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.015060][ T165] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.015095][ T165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.052776][ T165] veth1_macvtap: left promiscuous mode [ 84.052850][ T165] veth0_macvtap: left promiscuous mode [ 84.062422][ T165] veth1_vlan: left promiscuous mode [ 84.062518][ T165] veth0_vlan: left promiscuous mode [ 84.155229][ T8169] Injecting memory failure for pfn 0x11ff83 at process virtual address 0x20001000 [ 84.160366][ T8169] Memory failure: 0x11ff83: recovery action for clean LRU page: Recovered [ 84.163214][ T8169] Injecting memory failure for pfn 0x11fef9 at process virtual address 0x20002000 [ 84.163313][ T8169] Memory failure: 0x11fef9: recovery action for clean LRU page: Recovered [ 84.163335][ T8169] Injecting memory failure for pfn 0x11ffc9 at process virtual address 0x20003000 [ 84.163385][ T8169] Memory failure: 0x11ffc9: recovery action for clean LRU page: Recovered [ 84.457960][ T8176] input: syz1 as /devices/virtual/input/input12 [ 84.468358][ T165] team0 (unregistering): Port device team_slave_1 removed [ 84.500392][ T165] team0 (unregistering): Port device team_slave_0 removed [ 84.591642][ T867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.832335][ T4883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.909931][ T4718] Bluetooth: hci2: command tx timeout [ 84.915672][ T0] Detected PIPT I-cache on CPU1 [ 84.915717][ T0] GICv3: CPU1: found redistributor 1 region 0:0x00000000080c0000 [ 84.915905][ T0] CPU1: Booted secondary processor 0x0000000001 [0x410fd4f1] [ 84.949116][ T8203] syzkaller1: entered promiscuous mode [ 84.950462][ T8203] syzkaller1: entered allmulticast mode [ 84.955273][ T8201] syzkaller1: entered promiscuous mode [ 84.956526][ T8201] syzkaller1: entered allmulticast mode [ 85.075943][ T8119] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.077891][ T8119] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.077983][ T8119] bridge_slave_0: entered allmulticast mode [ 85.086007][ T8119] bridge_slave_0: entered promiscuous mode [ 85.090373][ T8119] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.090414][ T8119] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.090487][ T8119] bridge_slave_1: entered allmulticast mode [ 85.090924][ T8119] bridge_slave_1: entered promiscuous mode [ 85.108288][ T8119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.109229][ T8119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.115405][ T8119] team0: Port device team_slave_0 added [ 85.125725][ T8119] team0: Port device team_slave_1 added [ 85.138859][ T8119] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.138884][ T8119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.138914][ T8119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.139489][ T8119] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.139496][ T8119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.139511][ T8119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.149327][ T8119] hsr_slave_0: entered promiscuous mode [ 85.149660][ T8119] hsr_slave_1: entered promiscuous mode [ 85.156697][ T8119] debugfs: 'hsr0' already exists in 'hsr' [ 85.156711][ T8119] Cannot create hsr debugfs directory [ 85.177947][ T1010] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 85.185207][ T1010] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 85.285101][ T8119] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 85.291367][ T8119] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.291725][ T8119] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 85.295838][ T8119] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.296283][ T8119] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 85.302154][ T8119] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.302508][ T8119] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 85.306612][ T8119] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.330629][ T8119] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.330676][ T8119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.330774][ T8119] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.330808][ T8119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.365562][ T8119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.373677][ T4868] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.375177][ T4868] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.393804][ T8119] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.415343][ T4868] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.415393][ T4868] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.415777][ T4868] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.415797][ T4868] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.416380][ T8237] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1321'. [ 85.469969][ T867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.547542][ T8247] Soft offlining pfn 0x1819fa at process virtual address 0x201fa000 [ 85.556145][ T8247] Soft offline: 0x1819fa: thp split failed [ 85.577694][ T8119] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.691287][ T30] audit: type=1400 audit(85.660:271): lsm=SMACK fn=smack_inode_permission action=denied subject="_" object="lo" requested=w pid=8276 comm="syz.2.1333" name="file0" dev="tmpfs" ino=1460 [ 85.719111][ T8281] binder: 8280:8281 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 85.721884][ T8281] binder: 8281 RLIMIT_NICE not set [ 85.723106][ T8281] binder: 8280:8281 ioctl c0306201 20000480 returned -14 [ 85.749015][ T8119] veth0_vlan: entered promiscuous mode [ 85.763115][ T8119] veth1_vlan: entered promiscuous mode [ 85.802406][ T8119] veth0_macvtap: entered promiscuous mode [ 85.811021][ T8119] veth1_macvtap: entered promiscuous mode [ 85.817136][ T8119] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.820314][ T8119] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.822822][ T5910] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.822970][ T5910] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.822990][ T5910] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.823009][ T5910] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.899136][ T165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.899169][ T165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.949603][ T5910] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.949629][ T5910] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.022646][ T8303] loop5: detected capacity change from 0 to 512 [ 86.036536][ T8303] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.073444][ T8303] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 86.128321][ T8303] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 86.147928][ T8119] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.177646][ T8320] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1346'. [ 86.278592][ T8334] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 86.278621][ T8334] CPU: 0 UID: 0 PID: 8334 Comm: syz.1.1348 Not tainted syzkaller #0 PREEMPT [ 86.278635][ T8334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 86.278642][ T8334] Call trace: [ 86.278645][ T8334] show_stack+0x2c/0x3c (C) [ 86.278666][ T8334] __dump_stack+0x30/0x40 [ 86.278679][ T8334] dump_stack_lvl+0xd8/0x12c [ 86.278691][ T8334] dump_stack+0x1c/0x28 [ 86.278702][ T8334] sysfs_warn_dup+0x9c/0xb8 [ 86.278716][ T8334] sysfs_create_dir_ns+0x190/0x1f4 [ 86.278727][ T8334] kobject_add_internal+0x290/0x6f0 [ 86.278738][ T8334] kobject_add_varg+0x9c/0xe8 [ 86.278746][ T8334] kobject_add+0x110/0x1c8 [ 86.278754][ T8334] device_add+0x394/0x9e0 [ 86.278763][ T8334] device_register+0x28/0x38 [ 86.278775][ T8334] tty_register_device_attr+0x31c/0x5e8 [ 86.278786][ T8334] tty_register_device+0x3c/0x50 [ 86.278795][ T8334] gsm_activate_mux+0xdc/0x284 [ 86.278807][ T8334] gsmld_ioctl+0xea8/0x1414 [ 86.278816][ T8334] tty_ioctl+0x900/0xd50 [ 86.278825][ T8334] __arm64_sys_ioctl+0x154/0x1cc [ 86.278844][ T8334] invoke_syscall+0x98/0x244 [ 86.278857][ T8334] el0_svc_common+0xec/0x23c [ 86.278869][ T8334] do_el0_svc+0x4c/0x5c [ 86.278880][ T8334] el0_svc+0x64/0x260 [ 86.278893][ T8334] el0t_64_sync_handler+0x48/0x148 [ 86.278905][ T8334] el0t_64_sync+0x198/0x19c [ 86.278936][ T8334] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 86.658545][ T8360] loop0: detected capacity change from 0 to 8192 [ 86.662847][ T8360] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 86.878253][ T8381] loop5: detected capacity change from 0 to 4096 [ 86.891230][ T8381] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.938509][ T8119] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.996309][ T4718] Bluetooth: hci2: command tx timeout [ 87.026269][ T8392] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 87.034254][ T8394] loop2: detected capacity change from 0 to 128 [ 87.038145][ T8394] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 87.058993][ T8394] fscrypt (loop2, inode 12): Unsupported encryption flags (0x7b) [ 87.076299][ T4712] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 87.098515][ T8399] tipc: Started in network mode [ 87.099594][ T8399] tipc: Node identity ac1414aa, cluster identity 4711 [ 87.101411][ T9] IPVS: starting estimator thread 0... [ 87.103263][ T8399] tipc: Enabled bearer , priority 10 [ 87.200228][ T8400] IPVS: using max 60 ests per chain, 144000 per kthread [ 87.229870][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 87.264120][ T8415] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.328650][ T8415] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.442107][ T8415] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.495791][ T8415] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.519831][ C0] net_ratelimit: 10 callbacks suppressed [ 87.519874][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 87.601018][ T5904] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.601084][ T5904] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.601103][ T5904] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.601118][ T5904] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.617598][ T9] IPVS: starting estimator thread 0... [ 87.647311][ T8433] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1397'. [ 87.659820][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 87.699811][ T8429] IPVS: using max 54 ests per chain, 129600 per kthread [ 87.710186][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.799818][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 87.939824][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 87.950620][ T867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.079822][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 88.220014][ T867] tipc: Node number set to 2886997162 [ 88.246539][ T8478] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1417'. [ 88.338669][ T8484] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 88.359800][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 88.452409][ T8487] loop2: detected capacity change from 0 to 8192 [ 88.461843][ T8487] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 88.492497][ T8491] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 88.492556][ T8491] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 88.510773][ T165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.512986][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.516457][ T8491] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 88.580442][ T8498] PKCS8: Unsupported PKCS#8 version [ 88.625398][ T8504] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1430'. [ 88.734311][ T30] audit: type=1400 audit(88.700:272): lsm=SMACK fn=smack_task_kill action=denied subject="y" object="_" requested=w pid=8513 comm="syz.4.1435" opid=8515 ocomm="syz.4.1435" [ 88.763276][ T8517] loop5: detected capacity change from 0 to 256 [ 88.866729][ T8530] overlay: filesystem on ./file0 not supported as upperdir [ 88.921675][ T8538] netlink: 332 bytes leftover after parsing attributes in process `syz.0.1446'. [ 88.923587][ T8538] netlink: 'syz.0.1446': attribute type 9 has an invalid length. [ 88.925270][ T8538] netlink: 'syz.0.1446': attribute type 10 has an invalid length. [ 89.080795][ T8553] No fuse device found [ 89.211196][ T8567] tipc: Resetting bearer [ 89.356515][ T8590] netlink: 'syz.1.1470': attribute type 1 has an invalid length. [ 89.356557][ T8590] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 89.356648][ T8590] IPv6: NLM_F_CREATE should be set when creating new route [ 89.356660][ T8590] IPv6: NLM_F_CREATE should be set when creating new route [ 89.357476][ T8590] netlink: 'syz.1.1470': attribute type 1 has an invalid length. [ 89.357495][ T8590] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 89.579680][ T8613] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1480'. [ 89.596727][ T8615] input: syz1 as /devices/virtual/input/input13 [ 89.598066][ T8615] input: failed to attach handler leds to device input13, error: -6 [ 89.971021][ T8647] input: syz1 as /devices/virtual/input/input14 [ 89.979104][ T8649] mmap: syz.1.1497 (8649) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 90.122903][ T8662] loop2: detected capacity change from 0 to 1024 [ 90.125916][ T8662] EXT4-fs: Ignoring removed orlov option [ 90.130272][ T8662] EXT4-fs: Ignoring removed orlov option [ 90.148095][ T8662] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.187987][ T4712] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.311521][ T9] kernel read not supported for file /dummy_udc (pid: 9 comm: kworker/0:0) [ 90.412031][ T8698] batman_adv: batadv0: Adding interface: vlan3 [ 90.412058][ T8698] batman_adv: batadv0: The MTU of interface vlan3 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.412086][ T8698] batman_adv: batadv0: Not using interface vlan3 (retrying later): interface not active [ 90.446984][ T8700] ip6erspan0: entered allmulticast mode [ 90.510053][ T50] Bluetooth: hci2: command 0x0419 tx timeout [ 90.563594][ T8714] syzkaller1: entered promiscuous mode [ 90.564730][ T8714] syzkaller1: entered allmulticast mode [ 90.660844][ T8728] sctp: [Deprecated]: syz.1.1532 (pid 8728) Use of struct sctp_assoc_value in delayed_ack socket option. [ 90.660844][ T8728] Use struct sctp_sack_info instead [ 90.749778][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 90.830738][ T4718] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 90.831247][ T50] Bluetooth: hci5: command 0x1003 tx timeout [ 91.093226][ T8742] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.158412][ T8742] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.217412][ T8742] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.263992][ T8747] loop2: detected capacity change from 0 to 2048 [ 91.274090][ T8747] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.295044][ T4712] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 91.307489][ T8742] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.314630][ T4712] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.385025][ T8755] loop0: detected capacity change from 0 to 512 [ 91.388290][ T8755] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 91.399987][ T8757] loop2: detected capacity change from 0 to 1024 [ 91.400313][ T8757] EXT4-fs: Ignoring removed oldalloc option [ 91.407325][ T8757] EXT4-fs: Ignoring removed orlov option [ 91.423796][ T5910] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.423897][ T5910] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.431253][ T8757] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.449404][ T8757] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: comm syz.2.1543: lblock 0 mapped to illegal pblock 0 (length 6) [ 91.454155][ T8755] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 91.454260][ T8755] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 91.454427][ T8755] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 91.454548][ T8755] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 91.462252][ T8755] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 91.465432][ T8757] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 91.465472][ T8757] EXT4-fs (loop2): This should not happen!! Data will be lost [ 91.465472][ T8757] [ 91.471603][ T8755] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 91.473794][ T8755] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 91.476088][ T8755] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 91.479386][ T8755] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 91.484033][ T8755] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 91.484242][ T8755] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 91.484321][ T8755] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 91.484804][ T8755] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 91.484852][ T8755] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 91.484944][ T8755] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 91.496782][ T165] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.496829][ T165] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.522491][ T4868] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:8: bg 0: block 112: padding at end of block bitmap is not set [ 91.529975][ T4868] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 32 with error 28 [ 91.530013][ T4868] EXT4-fs (loop2): This should not happen!! Data will be lost [ 91.530013][ T4868] [ 91.530023][ T4868] EXT4-fs (loop2): Total free blocks count 0 [ 91.530032][ T4868] EXT4-fs (loop2): Free/Dirty block details [ 91.530040][ T4868] EXT4-fs (loop2): free_blocks=0 [ 91.530048][ T4868] EXT4-fs (loop2): dirty_blocks=32 [ 91.530055][ T4868] EXT4-fs (loop2): Block reservation details [ 91.547095][ T4712] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 91.615283][ T8768] input: syz1 as /devices/virtual/input/input15 [ 91.817666][ T8803] loop5: detected capacity change from 0 to 512 [ 91.836565][ T8803] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.908404][ T8119] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.939396][ T8818] loop2: detected capacity change from 0 to 128 [ 91.981588][ T8818] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 91.988393][ T8824] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1574'. [ 91.997324][ T8818] syz.2.1573 (pid 8818) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 92.014179][ T4712] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 92.069276][ T8833] loop5: detected capacity change from 0 to 4096 [ 92.070037][ T8833] EXT4-fs: Ignoring removed orlov option [ 92.070895][ T8833] EXT4-fs (loop5): Test dummy encryption mode enabled [ 92.078820][ T8833] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.134665][ T8833] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 92.149069][ T8119] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.380412][ T8873] overlayfs: failed to resolve './file0': -2 [ 92.492610][ T8881] vhci_hcd vhci_hcd.2: default hub control req: 8013 v0000 i0000 l31125 [ 92.567773][ T8887] loop5: detected capacity change from 0 to 1024 [ 92.578340][ T8887] EXT4-fs (loop5): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 92.590176][ T4718] Bluetooth: hci2: command 0x0419 tx timeout [ 92.592776][ T8887] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 2: comm syz.5.1603: lblock 2 mapped to illegal pblock 2 (length 1) [ 92.596416][ T8887] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 92.598745][ T8887] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 92.600582][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 92.600596][ C0] EXT4-fs (loop5): initial error at time 92: ext4_map_blocks:791: inode 3: block 2 [ 92.600616][ C0] EXT4-fs (loop5): last error at time 92: ext4_map_blocks:791: inode 3: block 2 [ 92.608552][ T8887] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 48: comm syz.5.1603: lblock 0 mapped to illegal pblock 48 (length 1) [ 92.612284][ T8887] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 92.612449][ T8887] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 92.617844][ T8887] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.1603: Failed to acquire dquot type 0 [ 92.622054][ T8887] loop5: lost filesystem error report for type 5 error -117 [ 92.622338][ T8887] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 92.625380][ T8887] loop5: lost filesystem error report for type 5 error -117 [ 92.625602][ T8887] EXT4-fs error (device loop5): ext4_evict_inode:267: inode #11: comm syz.5.1603: mark_inode_dirty error [ 92.629081][ T8887] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 92.629292][ T8887] EXT4-fs warning (device loop5): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 92.633361][ T8887] EXT4-fs (loop5): 1 orphan inode deleted [ 92.639866][ T5904] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:12: lblock 1 mapped to illegal pblock 1 (length 1) [ 92.644466][ T5904] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 92.644495][ T5904] EXT4-fs error (device loop5): ext4_release_dquot:7077: comm kworker/u8:12: Failed to release dquot type 0 [ 92.660900][ T8887] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 1: comm syz.5.1603: lblock 1 mapped to illegal pblock 1 (length 1) [ 92.667167][ T8887] Quota error (device loop5): find_tree_dqentry: Can't read quota tree block 1 [ 92.667948][ T8887] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 980643439 [ 92.667970][ T8887] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.1603: Failed to acquire dquot type 0 [ 92.707209][ T5908] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:13: lblock 1 mapped to illegal pblock 1 (length 1) [ 92.707242][ T5908] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 92.710877][ T5908] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 92.710916][ T5908] EXT4-fs error (device loop5): ext4_release_dquot:7077: comm kworker/u8:13: Failed to release dquot type 0 [ 92.710942][ T5908] loop5: lost filesystem error report for type 5 error -117 [ 92.716931][ T8119] EXT4-fs error (device loop5): __ext4_get_inode_loc:4886: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 92.727176][ T8119] loop5: lost filesystem error report for type 5 error -117 [ 92.729540][ T8119] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 92.729580][ T8119] loop5: lost filesystem error report for type 5 error -117 [ 92.730910][ T8119] EXT4-fs error (device loop5): ext4_quota_off:7325: inode #3: comm syz-executor: mark_inode_dirty error [ 92.730934][ T8119] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 92.829892][ C0] net_ratelimit: 25 callbacks suppressed [ 92.829931][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.831227][ T4796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.872546][ T8915] loop5: detected capacity change from 0 to 512 [ 92.914927][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.103059][ T8930] loop4: detected capacity change from 0 to 1024 [ 93.144058][ T8930] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1621: bg 0: block 112: padding at end of block bitmap is not set [ 93.147479][ T8930] EXT4-fs (loop4): Remounting filesystem read-only [ 93.147878][ T8937] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1622'. [ 93.151423][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.271478][ T8942] loop4: detected capacity change from 0 to 512 [ 93.273998][ T8942] EXT4-fs (loop4): Test dummy encryption mode enabled [ 93.274054][ T8942] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 93.294414][ T8942] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.1624: bad orphan inode 131083 [ 93.294457][ T8942] loop4: lost filesystem error report for type 5 error -117 [ 93.310492][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 93.314739][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.379182][ T8942] overlayfs: upper fs needs to support d_type. [ 93.395628][ T8942] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 13: comm syz.4.1624: path /: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 93.438435][ T4721] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 13: comm syz-executor: path /332/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 93.500455][ T30] audit: type=1807 audit(93.460:273): action=measure UNKNOWN=f res=0 [ 93.505335][ T30] audit: type=1802 audit(93.470:274): pid=8961 uid=0 auid=4294967295 ses=4294967295 subj=_ op=update_policy cause=invalid-policy comm="syz.1.1631" res=0 errno=0 [ 93.517006][ T8961] ima: policy update failed [ 93.517954][ T30] audit: type=1802 audit(93.480:275): pid=8961 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.1.1631" res=0 errno=0 [ 93.596891][ T8968] sctp: [Deprecated]: syz.5.1632 (pid 8968) Use of struct sctp_assoc_value in delayed_ack socket option. [ 93.596891][ T8968] Use struct sctp_sack_info instead [ 93.602946][ T8292] syz_tun (unregistering): left allmulticast mode [ 93.604631][ T5910] smc: removing ib device syz1 [ 93.623570][ T8967] vhci_hcd vhci_hcd.2: default hub control req: 800b v0000 i0000 l31125 [ 93.643081][ T1010] syz1: Port: 1 Link DOWN [ 93.918425][ T8997] input: syz0 as /devices/virtual/input/input16 [ 93.951261][ T4796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.960532][ T30] audit: type=1400 audit(93.930:276): lsm=SMACK fn=smk_curacc_shm action=denied subject="w" object="_" requested=rw pid=8998 comm="syz.0.1649" ipc_key=0 [ 94.169538][ T9021] netlink: 'syz.1.1659': attribute type 2 has an invalid length. [ 94.170604][ T9021] netlink: 'syz.1.1659': attribute type 2 has an invalid length. [ 94.190984][ T4796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.349855][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 94.492385][ T9036] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.1667: bg 0: block 3: invalid block bitmap [ 94.496796][ T9036] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 51 with error 28 [ 94.499548][ T9036] EXT4-fs (loop5): This should not happen!! Data will be lost [ 94.499548][ T9036] [ 94.501937][ T9036] EXT4-fs (loop5): Total free blocks count 0 [ 94.503276][ T9036] EXT4-fs (loop5): Free/Dirty block details [ 94.504577][ T9036] EXT4-fs (loop5): free_blocks=0 [ 94.505692][ T9036] EXT4-fs (loop5): dirty_blocks=64 [ 94.506916][ T9036] EXT4-fs (loop5): Block reservation details [ 94.509371][ T9036] EXT4-fs (loop5): i_reserved_data_blocks=4 [ 94.525952][ T8119] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 94.589831][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 94.680054][ T4718] Bluetooth: hci2: command 0x0419 tx timeout [ 94.689057][ T9058] syzkaller1: entered promiscuous mode [ 94.690468][ T9058] syzkaller1: entered allmulticast mode [ 94.803277][ T9064] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 94.880719][ T9068] EXT4-fs error (device loop0): dx_probe:791: inode #2: comm syz.0.1679: Directory hole found for htree index block 0 [ 94.880762][ T9068] loop0: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 94.883494][ T9068] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 94.897259][ T9068] EXT4-fs (loop0): shut down requested (2) [ 94.995489][ T4796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.105621][ T9085] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1687: invalid indirect mapped block 256 (level 2) [ 95.108206][ T9085] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 95.108690][ T9085] EXT4-fs (loop2): 2 truncates cleaned up [ 95.110556][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 95.110574][ C0] EXT4-fs (loop2): initial error at time 95: ext4_free_branches:1023: inode 11 [ 95.110590][ C0] EXT4-fs (loop2): last error at time 95: ext4_free_branches:1023: inode 11 [ 95.127680][ T9085] EXT4-fs (loop2): shut down requested (2) [ 95.246662][ T9090] EXT4-fs: Ignoring removed bh option [ 95.286153][ T9093] EXT4-fs (loop5): 1 truncate cleaned up [ 95.319881][ T9093] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1691: bg 0: block 465: padding at end of block bitmap is not set [ 95.326844][ T9093] EXT4-fs (loop5): Remounting filesystem read-only [ 95.728298][ T5904] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.736508][ T9139] EXT4-fs: Ignoring removed nobh option [ 95.778274][ T9139] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #3: comm syz.2.1710: corrupted inode contents [ 95.782767][ T9139] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 95.783087][ T5904] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.789848][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 95.789875][ C0] EXT4-fs (loop2): initial error at time 95: ext4_do_update_inode:5742: inode 3 [ 95.789909][ C0] EXT4-fs (loop2): last error at time 95: ext4_do_update_inode:5742: inode 3 [ 95.801194][ T9139] EXT4-fs error (device loop2): ext4_dirty_inode:6639: inode #3: comm syz.2.1710: mark_inode_dirty error [ 95.803432][ T9139] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 95.808117][ T9139] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #3: comm syz.2.1710: corrupted inode contents [ 95.813053][ T9139] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 95.813647][ T9139] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #3: comm syz.2.1710: mark_inode_dirty error [ 95.817833][ T9139] Quota error (device loop2): write_blk: dquota write failed [ 95.819435][ T9139] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 95.821889][ T9139] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.1710: Failed to acquire dquot type 0 [ 95.824402][ T9139] loop2: lost filesystem error report for type 5 error -117 [ 95.833335][ T9139] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.1710: corrupted inode contents [ 95.837423][ T9139] EXT4-fs error (device loop2): ext4_dirty_inode:6639: inode #16: comm syz.2.1710: mark_inode_dirty error [ 95.841183][ T9139] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.1710: corrupted inode contents [ 95.844105][ T9139] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #16: comm syz.2.1710: mark_inode_dirty error [ 95.846625][ T9139] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.1710: corrupted inode contents [ 95.849555][ T9139] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 95.851952][ T9139] loop2: lost filesystem error report for type 5 error -117 [ 95.852196][ T9139] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.1710: corrupted inode contents [ 95.852401][ T5904] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.857526][ T9139] EXT4-fs error (device loop2): ext4_truncate:4691: inode #16: comm syz.2.1710: mark_inode_dirty error [ 95.862397][ T9139] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 95.864260][ T9139] loop2: lost filesystem error report for type 5 error -117 [ 95.866555][ T9139] EXT4-fs (loop2): 1 truncate cleaned up [ 95.869440][ T9139] EXT4-fs mount: 20 callbacks suppressed [ 95.873052][ T9139] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.908940][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 95.912938][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 95.913327][ T5904] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.916490][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 95.918643][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 95.921318][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 95.931781][ T9139] EXT4-fs warning (device loop2): ext4_es_cache_extent:1082: inode #3: comm syz.2.1710: ES cache extent failed: add [1,1,41,0x1] conflict with existing [1,-2,576460752303423487,0x18] [ 95.931781][ T9139] [ 95.949174][ T9147] EXT4-fs (loop5): Test dummy encryption mode enabled [ 95.949213][ T9147] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 95.959582][ T9147] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.1715: bad orphan inode 131083 [ 95.959628][ T9147] loop5: lost filesystem error report for type 5 error -117 [ 95.960680][ T9147] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.987101][ T9147] overlayfs: upper fs needs to support d_type. [ 95.993435][ T9147] EXT4-fs error (device loop5): ext4_readdir:265: inode #2: block 13: comm syz.5.1715: path /: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 96.027059][ T5904] bridge_slave_1: left allmulticast mode [ 96.027196][ T5904] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.053273][ T8119] EXT4-fs error (device loop5): ext4_readdir:265: inode #2: block 13: comm syz-executor: path /60/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 96.061621][ T5904] bridge_slave_0: left allmulticast mode [ 96.061650][ T5904] bridge_slave_0: left promiscuous mode [ 96.061737][ T5904] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.068862][ T5904] pim6reg: left allmulticast mode [ 96.077553][ T5904] dvmrp8: left allmulticast mode [ 96.114091][ T6456] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.188780][ T5904] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.230870][ T5904] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.252880][ T5904] bond0 (unregistering): Released all slaves [ 96.319891][ T8745] bridge0: port 4(syz_tun) entered disabled state [ 96.320904][ T9163] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 96.325000][ T9163] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 96.326495][ T9163] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3) [ 96.330792][ T8745] syz_tun (unregistering): left allmulticast mode [ 96.330826][ T8745] syz_tun (unregistering): left promiscuous mode [ 96.330865][ T8745] bridge0: port 4(syz_tun) entered disabled state [ 96.425158][ T9056] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.680358][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 96.683178][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 96.685324][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 96.687196][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 96.688787][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 96.753755][ T4718] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 96.756054][ T4718] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 96.757569][ T4718] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 96.759315][ T4718] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 96.769001][ T4718] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 96.799534][ T5904] hsr_slave_0: left promiscuous mode [ 96.802130][ T5904] hsr_slave_1: left promiscuous mode [ 96.802433][ T5904] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.809087][ T5904] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.810713][ T5904] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.810725][ T5904] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.815260][ T5904] veth1_macvtap: left promiscuous mode [ 96.815307][ T5904] veth0_macvtap: left promiscuous mode [ 96.815362][ T5904] veth1_vlan: left promiscuous mode [ 96.815396][ T5904] veth0_vlan: left promiscuous mode [ 96.990692][ T5904] team0 (unregistering): Port device team_slave_1 removed [ 96.994529][ T5904] team0 (unregistering): Port device team_slave_0 removed [ 97.138035][ T9148] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.138444][ T9148] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.138518][ T9148] bridge_slave_0: entered allmulticast mode [ 97.138971][ T9148] bridge_slave_0: entered promiscuous mode [ 97.167071][ T9148] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.167161][ T9148] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.167251][ T9148] bridge_slave_1: entered allmulticast mode [ 97.167707][ T9148] bridge_slave_1: entered promiscuous mode [ 97.184185][ T9148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.185096][ T9148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.191177][ T9148] team0: Port device team_slave_0 added [ 97.193104][ T9148] team0: Port device team_slave_1 added [ 97.205555][ T9148] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.205582][ T9148] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.205597][ T9148] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.206148][ T9148] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.206155][ T9148] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.206170][ T9148] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.254122][ T9148] hsr_slave_0: entered promiscuous mode [ 97.261867][ T9148] hsr_slave_1: entered promiscuous mode [ 97.263223][ T9148] debugfs: 'hsr0' already exists in 'hsr' [ 97.264424][ T9148] Cannot create hsr debugfs directory [ 97.502121][ T9148] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 97.504745][ T9148] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.511199][ T9148] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 97.520581][ T9148] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.520943][ T9148] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 97.530790][ T9148] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.556822][ T9148] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 97.559376][ T9148] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.622533][ T9174] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.622716][ T9174] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.622788][ T9174] bridge_slave_0: entered allmulticast mode [ 97.623252][ T9174] bridge_slave_0: entered promiscuous mode [ 97.624090][ T9174] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.624113][ T9174] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.624164][ T9174] bridge_slave_1: entered allmulticast mode [ 97.624572][ T9174] bridge_slave_1: entered promiscuous mode [ 97.631454][ T9174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.632368][ T9174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.641045][ T9174] team0: Port device team_slave_0 added [ 97.650556][ T9174] team0: Port device team_slave_1 added [ 97.667276][ T5904] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.689068][ T9181] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.689194][ T9181] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.689297][ T9181] bridge_slave_0: entered allmulticast mode [ 97.689860][ T9181] bridge_slave_0: entered promiscuous mode [ 97.690651][ T9174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.690659][ T9174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.690672][ T9174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.691405][ T9174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.691412][ T9174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.691422][ T9174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.712057][ T9181] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.712125][ T9181] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.712231][ T9181] bridge_slave_1: entered allmulticast mode [ 97.712655][ T9181] bridge_slave_1: entered promiscuous mode [ 97.721134][ T9148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.725050][ T9174] hsr_slave_0: entered promiscuous mode [ 97.726620][ T9174] hsr_slave_1: entered promiscuous mode [ 97.728249][ T9174] debugfs: 'hsr0' already exists in 'hsr' [ 97.729559][ T9174] Cannot create hsr debugfs directory [ 97.734651][ T9181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.743547][ T9181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.749161][ T9148] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.763935][ T5904] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.779283][ T5908] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.779327][ T5908] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.788953][ T9181] team0: Port device team_slave_0 added [ 97.791921][ T5902] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.791965][ T5902] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.803844][ T9181] team0: Port device team_slave_1 added [ 97.836506][ T9181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.838077][ T9181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.844100][ T9181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.847169][ T9181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.848846][ T9181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.850883][ T9181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.863487][ T9148] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 97.863521][ T9148] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 97.884628][ T5904] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.919621][ T9181] hsr_slave_0: entered promiscuous mode [ 97.920171][ T9181] hsr_slave_1: entered promiscuous mode [ 97.920387][ T9181] debugfs: 'hsr0' already exists in 'hsr' [ 97.920398][ T9181] Cannot create hsr debugfs directory [ 97.956516][ T5904] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.959846][ T50] Bluetooth: hci4: command tx timeout [ 98.001683][ T9174] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 98.010091][ T9174] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 98.010453][ T9174] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 98.012286][ T9174] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 98.016487][ T9174] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 98.025708][ T9174] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 98.026152][ T9174] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 98.031901][ T9174] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.110155][ T9148] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.150270][ T5904] bridge_slave_1: left allmulticast mode [ 98.150307][ T5904] bridge_slave_1: left promiscuous mode [ 98.150385][ T5904] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.152779][ T5904] bridge_slave_0: left allmulticast mode [ 98.152792][ T5904] bridge_slave_0: left promiscuous mode [ 98.152870][ T5904] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.216704][ T5904] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.236390][ T5904] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.270825][ T5904] bond0 (unregistering): Released all slaves [ 98.345633][ T9181] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 98.347972][ T9181] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 98.351148][ T11] net_ratelimit: 14 callbacks suppressed [ 98.351170][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.383902][ T9181] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 98.386248][ T9181] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 98.395372][ T9181] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 98.398190][ T9181] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 98.428019][ T9181] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 98.432896][ T9181] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.461866][ T9148] veth0_vlan: entered promiscuous mode [ 98.463663][ T9148] veth1_vlan: entered promiscuous mode [ 98.482224][ T9174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.509844][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 98.517042][ T9148] veth0_macvtap: entered promiscuous mode [ 98.520478][ T9174] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.522225][ T9148] veth1_macvtap: entered promiscuous mode [ 98.527223][ T4868] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.527272][ T4868] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.547324][ T9148] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.548613][ T9148] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.588074][ T5904] hsr_slave_0: left promiscuous mode [ 98.594654][ T5904] hsr_slave_1: left promiscuous mode [ 98.594982][ T5904] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.594993][ T5904] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.596004][ T5904] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.596014][ T5904] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.605672][ T5904] veth1_macvtap: left promiscuous mode [ 98.606673][ T5904] veth0_macvtap: left promiscuous mode [ 98.607709][ T5904] veth1_vlan: left promiscuous mode [ 98.608711][ T5904] veth0_vlan: left promiscuous mode [ 98.708422][ T5904] team0 (unregistering): Port device team_slave_1 removed [ 98.716197][ T5904] team0 (unregistering): Port device team_slave_0 removed [ 98.751793][ T50] Bluetooth: hci2: command tx timeout [ 98.779470][ T5908] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.779537][ T5908] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.786027][ T165] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.786082][ T165] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.786104][ T165] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.786122][ T165] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.830237][ T50] Bluetooth: hci3: command tx timeout [ 98.858035][ T4868] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.858072][ T4868] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.908222][ T9181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.918087][ T4868] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.918120][ T4868] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.929277][ T9181] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.946445][ T4868] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.946498][ T4868] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.954293][ T5908] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.954339][ T5908] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.974955][ T9181] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 98.974994][ T9181] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 99.072283][ T867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.103939][ T9174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.171859][ T9297] faux_driver vgem: [drm] Unknown color mode 6; guessing buffer size. [ 99.232383][ T9174] veth0_vlan: entered promiscuous mode [ 99.238634][ T9181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.246906][ T9174] veth1_vlan: entered promiscuous mode [ 99.266282][ T9174] veth0_macvtap: entered promiscuous mode [ 99.278693][ T9174] veth1_macvtap: entered promiscuous mode [ 99.292013][ T9174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.294716][ T9174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.301459][ T5904] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.301514][ T5904] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.301536][ T5904] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.301554][ T5904] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.378677][ T5902] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.378711][ T5902] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.381069][ T9181] veth0_vlan: entered promiscuous mode [ 99.387106][ T9181] veth1_vlan: entered promiscuous mode [ 99.390235][ T867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.390352][ T867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.398372][ T5897] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.398408][ T5897] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.417411][ T9181] veth0_macvtap: entered promiscuous mode [ 99.420327][ T9181] veth1_macvtap: entered promiscuous mode [ 99.427138][ T9181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.432083][ T9181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.434887][ T5902] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.434947][ T5902] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.434969][ T5902] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.434986][ T5902] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.479570][ T5902] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.479600][ T5902] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.514263][ T5910] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.514311][ T5910] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.549952][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 99.688116][ C0] vcan0: j1939_tp_rxtimer: 0x000000002c767e27: rx timeout, send abort [ 99.689485][ C0] vcan0: j1939_xtp_rx_abort_one: 0x000000002c767e27: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 99.723592][ T9327] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1747'. [ 99.803940][ T9331] overlayfs: failed to decode file handle (len=5, type=251, flags=0, err=-22) [ 99.941411][ T9339] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.040558][ T50] Bluetooth: hci4: command tx timeout [ 100.189881][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.411014][ T9356] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1761'. [ 100.436019][ T4796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.589894][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 100.751948][ T9381] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1773'. [ 100.771741][ T9385] set_capacity_and_notify: 9 callbacks suppressed [ 100.780092][ T9385] loop7: detected capacity change from 0 to 512 [ 100.816359][ T9385] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.825584][ T9385] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.1774: corrupted xattr block 33: invalid header [ 100.825953][ T9385] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.1774: corrupted xattr block 33: invalid header [ 100.826107][ T9385] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.1774: corrupted xattr block 33: invalid header [ 100.831803][ T50] Bluetooth: hci2: command tx timeout [ 100.910568][ T50] Bluetooth: hci3: command tx timeout [ 100.933376][ T9385] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.1774: corrupted xattr block 33: invalid header [ 100.938608][ T9385] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 100.957717][ T5910] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 28 [ 100.957753][ T5910] EXT4-fs (loop7): This should not happen!! Data will be lost [ 100.957753][ T5910] [ 100.957776][ T5910] EXT4-fs (loop7): Total free blocks count 0 [ 100.957783][ T5910] EXT4-fs (loop7): Free/Dirty block details [ 100.957791][ T5910] EXT4-fs (loop7): free_blocks=65280 [ 100.957800][ T5910] EXT4-fs (loop7): dirty_blocks=1 [ 100.957806][ T5910] EXT4-fs (loop7): Block reservation details [ 100.957811][ T5910] EXT4-fs (loop7): i_reserved_data_blocks=1 [ 100.971957][ T9181] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 100.983183][ T9181] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.181239][ T9419] netlink: 1708 bytes leftover after parsing attributes in process `syz.7.1787'. [ 101.181272][ T9419] netlink: 1708 bytes leftover after parsing attributes in process `syz.7.1787'. [ 101.412538][ T9433] loop7: detected capacity change from 0 to 1024 [ 101.413281][ T9433] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 101.413560][ T9433] EXT4-fs (loop7): The Hurd can't support 64-bit file systems [ 101.901590][ T9459] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1807'. [ 101.908084][ T9461] loop0: detected capacity change from 0 to 512 [ 101.916832][ T9461] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 101.923921][ T9461] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.1806: invalid indirect mapped block 9 (level 0) [ 101.927556][ T9461] fserror_report: 8 callbacks suppressed [ 101.933528][ T9461] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 101.935471][ T9461] EXT4-fs (loop0): 1 truncate cleaned up [ 101.939728][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 101.939760][ C1] EXT4-fs (loop0): initial error at time 101: ext4_free_branches:1023: inode 11 [ 101.939797][ C1] EXT4-fs (loop0): last error at time 101: ext4_free_branches:1023: inode 11 [ 101.948823][ T9461] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.964835][ T9464] loop8: detected capacity change from 0 to 1024 [ 101.967068][ T9464] EXT4-fs: Ignoring removed orlov option [ 101.972395][ T9464] EXT4-fs (loop8): stripe (7) is not aligned with cluster size (4096), stripe is disabled [ 101.980793][ T9464] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 101.982496][ T9464] EXT4-fs (loop8): orphan cleanup on readonly fs [ 101.993862][ T9464] EXT4-fs error (device loop8): __ext4_get_inode_loc:4886: comm syz.8.1808: Invalid inode table block 0 in block_group 0 [ 101.996314][ T9464] loop8: lost filesystem error report for type 5 error -117 [ 101.997146][ T9464] EXT4-fs (loop8): Remounting filesystem read-only [ 101.999755][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 101.999768][ C1] EXT4-fs (loop8): initial error at time 101: __ext4_get_inode_loc:4886 [ 101.999783][ C1] EXT4-fs (loop8): last error at time 101: __ext4_get_inode_loc:4886 [ 102.005279][ T9464] Quota error (device loop8): write_blk: dquota write failed [ 102.006873][ T9464] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 102.009113][ T9464] EXT4-fs (loop8): 1 truncate cleaned up [ 102.012145][ T9464] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 102.026478][ T9464] EXT4-fs (loop8): shut down requested (2) [ 102.039142][ T9461] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 102.059157][ T9174] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.111048][ T4718] Bluetooth: hci4: command tx timeout [ 102.114826][ T4711] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.326422][ T9476] batadv_slave_0: entered promiscuous mode [ 102.329184][ T9475] batadv_slave_0: left promiscuous mode [ 102.401587][ T5902] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.401647][ T5902] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.401681][ T5902] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.401703][ T5902] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.855566][ T9519] loop0: detected capacity change from 0 to 512 [ 102.869990][ T9519] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.877525][ T9519] EXT4-fs (loop0): shut down requested (2) [ 102.894922][ T9519] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:375: inode #2: comm syz.0.1834: No space for directory leaf checksum. Please run e2fsck -D. [ 102.910295][ T4718] Bluetooth: hci2: command tx timeout [ 102.913936][ T4711] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.986780][ T9530] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1839'. [ 103.000334][ T4718] Bluetooth: hci3: command tx timeout [ 103.061532][ T9536] vcan0: tx drop: invalid sa for name 0xfffffffffffffffe [ 103.243893][ T9546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1847'. [ 103.248707][ T9546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1847'. [ 103.310327][ T4718] Bluetooth: hci5: command 0x1003 tx timeout [ 103.313271][ T50] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 103.473407][ T9562] netlink: 'syz.6.1855': attribute type 1 has an invalid length. [ 103.512329][ T9565] overlayfs: upper fs does not support file handles, falling back to index=off. [ 103.512361][ T9565] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 103.531827][ T9567] loop6: detected capacity change from 0 to 512 [ 103.550609][ T4796] net_ratelimit: 6 callbacks suppressed [ 103.550650][ T4796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.550755][ T4796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.553609][ T9567] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.688606][ T9148] EXT4-fs warning (device loop6): ext4_empty_dir:3094: inode #12: comm syz-executor: directory missing '.' [ 103.688798][ T9148] EXT4-fs warning (device loop6): ext4_empty_dir:3094: inode #12: comm syz-executor: directory missing '.' [ 103.688955][ T9148] EXT4-fs warning (device loop6): ext4_empty_dir:3094: inode #12: comm syz-executor: directory missing '.' [ 103.689092][ T9148] EXT4-fs warning (device loop6): ext4_empty_dir:3094: inode #12: comm syz-executor: directory missing '.' [ 103.689229][ T9148] EXT4-fs warning (device loop6): ext4_empty_dir:3094: inode #12: comm syz-executor: directory missing '.' [ 103.689363][ T9148] EXT4-fs warning (device loop6): ext4_empty_dir:3094: inode #12: comm syz-executor: directory missing '.' [ 103.689496][ T9148] EXT4-fs warning (device loop6): ext4_empty_dir:3094: inode #12: comm syz-executor: directory missing '.' [ 103.690463][ T9148] EXT4-fs warning (device loop6): ext4_empty_dir:3094: inode #12: comm syz-executor: directory missing '.' [ 103.690627][ T9148] EXT4-fs warning (device loop6): ext4_empty_dir:3094: inode #12: comm syz-executor: directory missing '.' [ 103.690766][ T9148] EXT4-fs warning (device loop6): ext4_empty_dir:3094: inode #12: comm syz-executor: directory missing '.' [ 103.709815][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 103.758080][ T9582] netlink: 'syz.8.1865': attribute type 1 has an invalid length. [ 103.860224][ T9587] team0: No ports can be present during mode change [ 104.091719][ T9608] gretap0: entered promiscuous mode [ 104.161893][ T9148] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.237277][ T9614] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1880'. [ 104.331664][ T5904] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.387054][ T4718] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 104.390348][ T4718] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 104.405532][ T4718] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 104.407524][ T4718] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 104.410151][ T4718] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 104.441776][ T5904] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.469035][ T9628] loop0: detected capacity change from 0 to 512 [ 104.495496][ T9628] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 104.497111][ T9628] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 104.498704][ T9628] EXT4-fs (loop0): orphan cleanup on readonly fs [ 104.504296][ T9628] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #13: comm syz.0.1885: iget: bad i_size value: 12154761577498 [ 104.506683][ T9628] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 104.507063][ T9628] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1885: couldn't read orphan inode 13 (err -117) [ 104.511123][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 104.511134][ C1] EXT4-fs (loop0): initial error at time 104: ext4_orphan_get:1399: inode 13 [ 104.511151][ C1] EXT4-fs (loop0): last error at time 104: ext4_orphan_get:1399: inode 13 [ 104.516640][ T9628] loop0: lost filesystem error report for type 5 error -117 [ 104.520962][ T9628] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 104.536483][ T5904] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.564891][ T4711] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.597316][ T4796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.619194][ T5904] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.632573][ T9641] macvlan1: entered promiscuous mode [ 104.637204][ T9641] macvlan1: left promiscuous mode [ 104.749829][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 104.795581][ T5904] bridge_slave_1: left allmulticast mode [ 104.795618][ T5904] bridge_slave_1: left promiscuous mode [ 104.795716][ T5904] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.808987][ T5904] bridge_slave_0: left allmulticast mode [ 104.809021][ T5904] bridge_slave_0: left promiscuous mode [ 104.809100][ T5904] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.943647][ T9658] evm: overlay not supported [ 104.968088][ T5904] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.989829][ T50] Bluetooth: hci2: command tx timeout [ 104.995278][ T5904] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.002918][ T5904] bond0 (unregistering): Released all slaves [ 105.071120][ T50] Bluetooth: hci3: command tx timeout [ 105.321123][ T5904] hsr_slave_0: left promiscuous mode [ 105.322581][ T5904] hsr_slave_1: left promiscuous mode [ 105.324137][ T5904] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.325678][ T5904] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.327570][ T5904] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.327592][ T5904] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.335819][ T5904] veth1_macvtap: left promiscuous mode [ 105.336928][ T5904] veth0_macvtap: left promiscuous mode [ 105.339353][ T5904] veth1_vlan: left promiscuous mode [ 105.339402][ T5904] veth0_vlan: left promiscuous mode [ 105.474054][ T5904] team0 (unregistering): Port device team_slave_1 removed [ 105.479482][ T5904] team0 (unregistering): Port device team_slave_0 removed [ 105.549655][ T9623] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.555258][ T9623] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.556869][ T9623] bridge_slave_0: entered allmulticast mode [ 105.558639][ T9623] bridge_slave_0: entered promiscuous mode [ 105.561186][ T9623] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.568803][ T9623] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.570050][ T9623] bridge_slave_1: entered allmulticast mode [ 105.570522][ T9623] bridge_slave_1: entered promiscuous mode [ 105.622003][ T9623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.630417][ T9623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.633163][ T4883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.660667][ T9623] team0: Port device team_slave_0 added [ 105.666195][ T9623] team0: Port device team_slave_1 added [ 105.678708][ T9623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.680199][ T9623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.684987][ T9623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.687588][ T9623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.689052][ T9623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.694179][ T9623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.722719][ T9623] hsr_slave_0: entered promiscuous mode [ 105.724452][ T9623] hsr_slave_1: entered promiscuous mode [ 105.725859][ T9623] debugfs: 'hsr0' already exists in 'hsr' [ 105.727081][ T9623] Cannot create hsr debugfs directory [ 105.784066][ T9623] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 105.787935][ T9623] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.789796][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 105.794166][ T9623] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 105.797889][ T9623] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.799868][ T9623] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 105.807445][ T9623] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.811251][ T9623] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 105.821491][ T9623] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.908674][ T9623] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.908730][ T9623] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.908812][ T9623] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.908842][ T9623] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.004146][ T9623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.018907][ T5902] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.020500][ T5902] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.026545][ T9623] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.038129][ T165] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.038177][ T165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.047191][ T5902] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.047238][ T5902] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.297089][ T9623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.424732][ T9623] veth0_vlan: entered promiscuous mode [ 106.432715][ T50] Bluetooth: hci4: command tx timeout [ 106.451325][ T9623] veth1_vlan: entered promiscuous mode [ 106.483539][ T9623] veth0_macvtap: entered promiscuous mode [ 106.494901][ T9623] veth1_macvtap: entered promiscuous mode [ 106.544729][ T9623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.555970][ T9623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.570678][ T5897] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.570737][ T5897] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.570761][ T5897] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.570778][ T5897] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.590258][ T4796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.618220][ T9712] loop7: detected capacity change from 0 to 4096 [ 106.681714][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.733347][ T9712] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 106.743064][ T9712] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.788832][ T5902] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.790965][ T5902] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.818632][ T9181] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.830075][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 106.844593][ T165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.844623][ T165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.942525][ T9725] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1910'. [ 106.963400][ T9725] team0: Port device team_slave_0 removed [ 107.079251][ T9734] loop7: detected capacity change from 0 to 256 [ 107.099494][ T9734] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1913'. [ 107.174821][ T9738] loop7: detected capacity change from 0 to 256 [ 107.177111][ T9738] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 107.178943][ T9738] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 107.436449][ T9742] loop7: detected capacity change from 0 to 1024 [ 107.450772][ T9742] EXT4-fs: inline encryption not supported [ 107.472921][ T9742] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 107.491960][ T9181] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 107.803359][ T9754] loop7: detected capacity change from 0 to 8192 [ 108.049315][ T9777] loop8: detected capacity change from 0 to 256 [ 108.086615][ T9773] 9pnet: p9_errstr2errno: server reported unknown error ÿÿ [ 108.509963][ T50] Bluetooth: hci4: command tx timeout [ 108.621704][ T9814] loop9: detected capacity change from 0 to 1024 [ 108.623349][ T9814] EXT4-fs: Ignoring removed bh option [ 108.646914][ T9814] EXT4-fs (loop9): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 108.667593][ T9814] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.670077][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 108.671925][ T9] net_ratelimit: 2 callbacks suppressed [ 108.671959][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.693101][ T9821] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 108.694604][ T9821] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 108.720143][ T30] audit: type=1326 audit(108.680:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9759 comm="syz.0.1925" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa037a168 code=0x7fc00000 [ 108.748000][ T9623] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.752253][ T4796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.900545][ T9835] loop8: detected capacity change from 0 to 512 [ 108.909860][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 108.943279][ T9835] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.997829][ T9174] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.043396][ T9846] loop8: detected capacity change from 0 to 512 [ 109.073615][ T9846] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.133473][ T9174] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.292861][ T9858] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1968'. [ 109.294882][ T9858] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1968'. [ 109.322874][ T4718] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 109.325327][ T4718] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 109.327266][ T4718] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 109.331151][ T4718] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 109.332734][ T4718] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 109.397254][ T9870] loop8: detected capacity change from 0 to 1024 [ 109.415881][ T9874] batadv_slave_0: entered promiscuous mode [ 109.418057][ T9872] batadv_slave_0: left promiscuous mode [ 109.428646][ T5877] tipc: Resetting bearer [ 109.437176][ T9870] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.453873][ T5877] tipc: Disabling bearer [ 109.491540][ T9174] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.511045][ T9882] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 109.549544][ T9882] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.561567][ T9891] syzkaller1: entered promiscuous mode [ 109.561604][ T9891] syzkaller1: entered allmulticast mode [ 109.606673][ T4711] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.636899][ T4883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.790011][ T4883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.824893][ T9862] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.826432][ T9862] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.827863][ T9862] bridge_slave_0: entered allmulticast mode [ 109.829463][ T9862] bridge_slave_0: entered promiscuous mode [ 109.834257][ T9862] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.835656][ T9862] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.837124][ T9862] bridge_slave_1: entered allmulticast mode [ 109.838746][ T9862] bridge_slave_1: entered promiscuous mode [ 109.894124][ T9862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.911851][ T9862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.929981][ T9862] team0: Port device team_slave_0 added [ 109.930317][ T9931] netlink: 68 bytes leftover after parsing attributes in process `syz.9.1994'. [ 109.930342][ T9931] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1994'. [ 109.931081][ T9931] netlink: 84 bytes leftover after parsing attributes in process `syz.9.1994'. [ 109.937187][ T9862] team0: Port device team_slave_1 added [ 109.945049][ T9862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.946504][ T9862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.953260][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 109.956272][ T9862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.960480][ T9862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.962156][ T9862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.971330][ T9862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.001077][ T9938] syzkaller1: entered promiscuous mode [ 110.002283][ T9938] syzkaller1: entered allmulticast mode [ 110.026738][ T9862] hsr_slave_0: entered promiscuous mode [ 110.028401][ T9862] hsr_slave_1: entered promiscuous mode [ 110.030004][ T9862] debugfs: 'hsr0' already exists in 'hsr' [ 110.031232][ T9862] Cannot create hsr debugfs directory [ 110.148796][ T9949] batadv_slave_1: entered promiscuous mode [ 110.150942][ T9948] batadv_slave_1: left promiscuous mode [ 110.279509][ T9951] Injecting memory failure for pfn 0x181e03 at process virtual address 0x20003000 [ 110.284716][ T9951] Memory failure: 0x181e03: recovery action for dirty LRU page: Recovered [ 110.359197][ T9966] syz.0.2009: attempt to access beyond end of device [ 110.359197][ T9966] loop0: rw=2049, sector=1800, nr_sectors = 4 limit=256 [ 110.365599][ T9966] syz.0.2009: attempt to access beyond end of device [ 110.365599][ T9966] loop0: rw=2049, sector=1800, nr_sectors = 4 limit=256 [ 110.390756][ T9972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.544407][ T9862] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 110.547323][ T9862] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 110.549209][ T9862] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 110.556619][ T9982] netlink: 'syz.9.2017': attribute type 11 has an invalid length. [ 110.560551][ T9862] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 110.562353][ T9862] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 110.565102][ T9862] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 110.566953][ T9862] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 110.569218][ T9862] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 110.590406][ T4718] Bluetooth: hci4: command tx timeout [ 110.600825][ T9862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.605775][ T9862] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.609159][ T165] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.609207][ T165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.613857][ T5902] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.613899][ T5902] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.646092][ T9993] hub 5-0:1.0: USB hub found [ 110.647755][ T9993] hub 5-0:1.0: 8 ports detected [ 110.738805][T10006] input: syz1 as /devices/virtual/input/input18 [ 110.743841][ T9862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.756516][ T9862] veth0_vlan: entered promiscuous mode [ 110.760033][ T9862] veth1_vlan: entered promiscuous mode [ 110.779941][ T9862] veth0_macvtap: entered promiscuous mode [ 110.782494][ T9862] veth1_macvtap: entered promiscuous mode [ 110.787601][ T9862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.793315][ T9862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.796765][ T5897] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.798543][ T5897] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.804314][ T5897] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.805628][ T4868] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.831234][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.854469][ T4868] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.854503][ T4868] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.883566][ T5897] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.883601][ T5897] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.947624][T10022] ext4: Unknown parameter 'uid<00000000000000000000' [ 110.989807][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 111.063751][T10035] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2036'. [ 111.119090][T10042] binder: 10042 RLIMIT_NICE not set [ 111.157887][T10048] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 111.189691][T10048] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 111.292136][T10061] netlink: 9 bytes leftover after parsing attributes in process `syz.8.2045'. [ 111.303426][T10061] gretap0: entered promiscuous mode [ 111.319430][T10061] netlink: 5 bytes leftover after parsing attributes in process `syz.8.2045'. [ 111.319594][T10061] 0ªî{X¹¦: renamed from gretap0 [ 111.325267][T10061] 0ªî{X¹¦: left promiscuous mode [ 111.325299][T10061] 0ªî{X¹¦: entered allmulticast mode [ 111.328471][T10061] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 111.364681][T10042] binder: 10041:10042 ioctl c0306201 20001a80 returned -14 [ 111.391525][ T4718] Bluetooth: hci5: command tx timeout [ 111.627024][T10110] set_capacity_and_notify: 6 callbacks suppressed [ 111.633391][T10110] loop0: detected capacity change from 0 to 512 [ 111.637052][T10112] loop3: detected capacity change from 0 to 512 [ 111.648829][T10110] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 111.662620][T10105] hsr_slave_1 (unregistering): left promiscuous mode [ 111.664965][T10110] EXT4-fs (loop0): 1 truncate cleaned up [ 111.666978][T10110] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.672719][T10112] [ 111.673174][T10112] ====================================================== [ 111.674509][T10112] WARNING: possible circular locking dependency detected [ 111.675750][T10112] syzkaller #0 Tainted: G M L [ 111.676809][T10112] ------------------------------------------------------ [ 111.678071][T10112] syz.3.2068/10112 is trying to acquire lock: [ 111.679136][T10112] ffff00013e170c18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x170/0x2dc [ 111.680952][T10112] [ 111.680952][T10112] but task is already holding lock: [ 111.682189][T10112] ffff0000f1ccde80 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x32c/0x828 [ 111.683869][T10112] [ 111.683869][T10112] which lock already depends on the new lock. [ 111.683869][T10112] [ 111.685649][T10112] [ 111.685649][T10112] the existing dependency chain (in reverse order) is: [ 111.687222][T10112] [ 111.687222][T10112] -> #1 (&ei->xattr_sem){++++}-{4:4}: [ 111.688581][T10112] down_write+0x50/0xc0 [ 111.689405][T10112] ext4_destroy_inline_data+0x30/0x114 [ 111.690471][T10112] ext4_do_writepages+0x3e4/0x3bc0 [ 111.691472][T10112] ext4_writepages+0x198/0x2dc [ 111.692381][T10112] do_writepages+0x284/0x47c [ 111.693275][T10112] filemap_writeback+0x230/0x2bc [ 111.694221][T10112] filemap_flush+0x30/0x40 [ 111.695125][T10112] ext4_alloc_da_blocks+0x104/0x414 [ 111.696080][T10112] ext4_release_file+0x68/0x2c0 [ 111.697000][T10112] __fput+0x338/0x74c [ 111.697806][T10112] ____fput+0x20/0x30 [ 111.698585][T10112] task_work_run+0x1cc/0x25c [ 111.699543][T10112] exit_to_user_mode_loop+0x10c/0x17c [ 111.700623][T10112] el0_svc+0x18c/0x260 [ 111.701386][T10112] el0t_64_sync_handler+0x48/0x148 [ 111.702404][T10112] el0t_64_sync+0x198/0x19c [ 111.703228][T10112] [ 111.703228][T10112] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 111.704665][T10112] __lock_acquire+0x17c0/0x2ebc [ 111.705619][T10112] lock_acquire+0x140/0x364 [ 111.706468][T10112] percpu_down_read_internal+0x5c/0x294 [ 111.707467][T10112] ext4_writepages+0x170/0x2dc [ 111.708368][T10112] do_writepages+0x284/0x47c [ 111.709227][T10112] __writeback_single_inode+0x140/0x1880 [ 111.710319][T10112] writeback_single_inode+0x400/0xb20 [ 111.711278][T10112] write_inode_now+0x170/0x208 [ 111.712159][T10112] iput+0x7cc/0xc2c [ 111.712960][T10112] ext4_xattr_block_set+0x1460/0x21e8 [ 111.714018][T10112] ext4_expand_extra_isize_ea+0xaf4/0x1384 [ 111.715124][T10112] __ext4_expand_extra_isize+0x2a4/0x378 [ 111.716198][T10112] __ext4_mark_inode_dirty+0x394/0x828 [ 111.717240][T10112] ext4_evict_inode+0x798/0xfb8 [ 111.718198][T10112] evict+0x4c0/0x74c [ 111.718991][T10112] iput+0x8f0/0xc2c [ 111.719756][T10112] ext4_process_orphan+0x24c/0x2c0 [ 111.720776][T10112] ext4_orphan_cleanup+0x7d4/0xd20 [ 111.721775][T10112] ext4_fill_super+0x4628/0x4e14 [ 111.722708][T10112] get_tree_bdev_flags+0x388/0x43c [ 111.723657][T10112] get_tree_bdev+0x2c/0x3c [ 111.724555][T10112] ext4_get_tree+0x28/0x38 [ 111.725425][T10112] vfs_get_tree+0x90/0x28c [ 111.726323][T10112] fc_mount+0x24/0xac [ 111.727092][T10112] do_new_mount+0x2a4/0x538 [ 111.727948][T10112] path_mount+0x5f0/0xa88 [ 111.728788][T10112] do_mount+0xe8/0x148 [ 111.729596][T10112] __arm64_sys_mount+0x33c/0x388 [ 111.730558][T10112] invoke_syscall+0x98/0x244 [ 111.731397][T10112] el0_svc_common+0xec/0x23c [ 111.732277][T10112] do_el0_svc+0x4c/0x5c [ 111.733087][T10112] el0_svc+0x64/0x260 [ 111.733870][T10112] el0t_64_sync_handler+0x48/0x148 [ 111.734806][T10112] el0t_64_sync+0x198/0x19c [ 111.735631][T10112] [ 111.735631][T10112] other info that might help us debug this: [ 111.735631][T10112] [ 111.737309][T10112] Possible unsafe locking scenario: [ 111.737309][T10112] [ 111.738570][T10112] CPU0 CPU1 [ 111.739517][T10112] ---- ---- [ 111.740382][T10112] lock(&ei->xattr_sem); [ 111.741081][T10112] lock(&sbi->s_writepages_rwsem); [ 111.742371][T10112] lock(&ei->xattr_sem); [ 111.743512][T10112] rlock(&sbi->s_writepages_rwsem); [ 111.744419][T10112] [ 111.744419][T10112] *** DEADLOCK *** [ 111.744419][T10112] [ 111.745790][T10112] 3 locks held by syz.3.2068/10112: [ 111.746684][T10112] #0: ffff00013e1740d8 (&type->s_umount_key#27/1){+.+.}-{4:4}, at: sget_fc+0x788/0x13e8 [ 111.748419][T10112] #1: ffff00013e174640 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x360/0xfb8 [ 111.750044][T10112] #2: ffff0000f1ccde80 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x32c/0x828 [ 111.751797][T10112] [ 111.751797][T10112] stack backtrace: [ 111.752787][T10112] CPU: 0 UID: 0 PID: 10112 Comm: syz.3.2068 Tainted: G M L syzkaller #0 PREEMPT [ 111.754506][T10112] Tainted: [M]=MACHINE_CHECK, [L]=SOFTLOCKUP [ 111.755469][T10112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 111.757107][T10112] Call trace: [ 111.757638][T10112] show_stack+0x2c/0x3c (C) [ 111.758373][T10112] __dump_stack+0x30/0x40 [ 111.759065][T10112] dump_stack_lvl+0xd8/0x12c [ 111.759822][T10112] dump_stack+0x1c/0x28 [ 111.760511][T10112] print_circular_bug+0x328/0x330 [ 111.761341][T10112] check_noncircular+0x158/0x174 [ 111.762152][T10112] __lock_acquire+0x17c0/0x2ebc [ 111.762971][T10112] lock_acquire+0x140/0x364 [ 111.763767][T10112] percpu_down_read_internal+0x5c/0x294 [ 111.764728][T10112] ext4_writepages+0x170/0x2dc [ 111.765570][T10112] do_writepages+0x284/0x47c [ 111.766380][T10112] __writeback_single_inode+0x140/0x1880 [ 111.767355][T10112] writeback_single_inode+0x400/0xb20 [ 111.768267][T10112] write_inode_now+0x170/0x208 [ 111.769029][T10112] iput+0x7cc/0xc2c [ 111.769688][T10112] ext4_xattr_block_set+0x1460/0x21e8 [ 111.770593][T10112] ext4_expand_extra_isize_ea+0xaf4/0x1384 [ 111.771547][T10112] __ext4_expand_extra_isize+0x2a4/0x378 [ 111.772505][T10112] __ext4_mark_inode_dirty+0x394/0x828 [ 111.773468][T10112] ext4_evict_inode+0x798/0xfb8 [ 111.774263][T10112] evict+0x4c0/0x74c [ 111.774932][T10112] iput+0x8f0/0xc2c [ 111.775577][T10112] ext4_process_orphan+0x24c/0x2c0 [ 111.776464][T10112] ext4_orphan_cleanup+0x7d4/0xd20 [ 111.777356][T10112] ext4_fill_super+0x4628/0x4e14 [ 111.778203][T10112] get_tree_bdev_flags+0x388/0x43c [ 111.779102][T10112] get_tree_bdev+0x2c/0x3c [ 111.779879][T10112] ext4_get_tree+0x28/0x38 [ 111.780639][T10112] vfs_get_tree+0x90/0x28c [ 111.781371][T10112] fc_mount+0x24/0xac [ 111.782045][T10112] do_new_mount+0x2a4/0x538 [ 111.782817][T10112] path_mount+0x5f0/0xa88 [ 111.783570][T10112] do_mount+0xe8/0x148 [ 111.784286][T10112] __arm64_sys_mount+0x33c/0x388 [ 111.785133][T10112] invoke_syscall+0x98/0x244 [ 111.785912][T10112] el0_svc_common+0xec/0x23c [ 111.786675][T10112] do_el0_svc+0x4c/0x5c [ 111.787443][T10112] el0_svc+0x64/0x260 [ 111.788150][T10112] el0t_64_sync_handler+0x48/0x148 [ 111.789038][T10112] el0t_64_sync+0x198/0x19c [ 111.792278][T10112] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.2068: iget: bad extra_isize 90 (inode size 256) [ 111.795132][T10112] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 111.795362][T10112] EXT4-fs (loop3): Remounting filesystem read-only [ 111.798488][T10112] EXT4-fs warning (device loop3): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 111.800484][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 111.800497][ C0] EXT4-fs (loop3): initial error at time 111: ext4_xattr_inode_iget:441: inode 11 [ 111.800511][ C0] EXT4-fs (loop3): last error at time 111: ext4_xattr_inode_iget:441: inode 11 [ 111.806159][T10112] EXT4-fs (loop3): 1 orphan inode deleted [ 111.807511][T10112] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.820285][ T4711] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.840253][T10123] loop0: detected capacity change from 0 to 128 [ 111.844232][T10112] EXT4-fs: can't change dax mount option while remounting [ 111.851788][T10123] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 111.863967][ T9862] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.896915][ T4711] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 112.670086][ T4718] Bluetooth: hci4: command tx timeout [ 113.469733][ T4718] Bluetooth: hci5: command tx timeout [ 113.949934][ T4796] net_ratelimit: 7 callbacks suppressed [ 113.949966][ T4796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.109796][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 114.989896][ T4883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.149771][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 115.549937][ T4718] Bluetooth: hci5: command tx timeout [ 115.709988][ T4883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.029985][ T4883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.189770][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 117.070111][ T4883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.229786][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 117.629782][ T4718] Bluetooth: hci5: command tx timeout [ 118.109932][ T4796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.149858][ T4796] net_ratelimit: 3 callbacks suppressed [ 119.149889][ T4796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.309758][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 120.191526][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.349783][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 121.229852][ T4796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.389758][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available