last executing test programs: 2m14.014123623s ago: executing program 2 (id=3): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}, {@userxattr}]}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000300)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000a00)='./file1\x00', 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0) 2m12.330257752s ago: executing program 2 (id=10): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140002"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) syz_emit_ethernet(0x7a, &(0x7f00000002c0)=ANY=[@ANYBLOB="fffffffffffff5f87bdd8ab786dd674a9e6c00442f82fe8000000000000000000000000000aaff02000000000000010000000000000104206558000000030c0008000c00"], 0x0) 2m9.16000304s ago: executing program 2 (id=47): set_mempolicy(0x2, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x20e, 0x7fffffff) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3818014, &(0x7f0000000000)={[{@errors_remount}, {@nodioread_nolock}, {@usrjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@nombcache}]}, 0x1, 0x52a, &(0x7f0000000380)="$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") syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4008, &(0x7f0000000240)={[{@fat=@errors_remount}, {@numtail}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '949'}}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@numtail}, {@shortname_win95}, {@utf8no}, {@shortname_mixed}, {@utf8no}, {@utf8no}]}, 0x81, 0x2f8, &(0x7f0000000580)="$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") r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900), 0x0, 0x0, 0x0, 0x7}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0xa, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl(0xffffffffffffffff, 0x8b2a, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x640, 0x0, 0x0, 0x428, 0x428, 0x428, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a0) socket$netlink(0x10, 0x3, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000200)={0xd, 0x2, 0x0, "bc3d70dde5cabbe40f00f401bb7f00bf170000000200", 0x3136564e}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000002280)={0x2, &(0x7f0000000040)=[{0x48}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @multicast1}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_pscan_rep_mode={{0x20, 0x7}, {@none, 0x6}}}, 0xa) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) set_mempolicy(0x0, &(0x7f0000000140)=0x4, 0xffff) 2m9.15323028s ago: executing program 32 (id=47): set_mempolicy(0x2, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x20e, 0x7fffffff) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3818014, &(0x7f0000000000)={[{@errors_remount}, {@nodioread_nolock}, {@usrjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@nombcache}]}, 0x1, 0x52a, &(0x7f0000000380)="$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") syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4008, &(0x7f0000000240)={[{@fat=@errors_remount}, {@numtail}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '949'}}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@numtail}, {@shortname_win95}, {@utf8no}, {@shortname_mixed}, {@utf8no}, {@utf8no}]}, 0x81, 0x2f8, &(0x7f0000000580)="$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") r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900), 0x0, 0x0, 0x0, 0x7}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0xa, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl(0xffffffffffffffff, 0x8b2a, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x640, 0x0, 0x0, 0x428, 0x428, 0x428, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a0) socket$netlink(0x10, 0x3, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000200)={0xd, 0x2, 0x0, "bc3d70dde5cabbe40f00f401bb7f00bf170000000200", 0x3136564e}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000002280)={0x2, &(0x7f0000000040)=[{0x48}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @multicast1}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_pscan_rep_mode={{0x20, 0x7}, {@none, 0x6}}}, 0xa) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) set_mempolicy(0x0, &(0x7f0000000140)=0x4, 0xffff) 2m7.407663212s ago: executing program 4 (id=71): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r1 = getpid() getrlimit(0x0, &(0x7f0000000040)) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) (async) r2 = socket(0x11, 0xa, 0x5) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @broadcast}}) sendto$inet(r2, &(0x7f0000000140)="0800d71fd0277f32754bfd0d0c3d", 0x5fd, 0x800, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) bind$packet(r2, &(0x7f00000002c0)={0x11, 0x16, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x1, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5, 0xf}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0x10005}]}}}]}, 0x44}}, 0x0) memfd_create(0x0, 0x3) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r6, &(0x7f00000000c0), 0x1011f, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) r8 = fanotify_init(0xf00, 0x1) fanotify_mark(r8, 0x105, 0x40009967, r0, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r9, 0x29, 0x6, &(0x7f0000000200)={0x10, {{0x29, 0x0, 0xb000000, @local, 0x5}}}, 0x88) (async) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0) (async) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) 2m6.516047719s ago: executing program 4 (id=82): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1c3341, 0x12b) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000300000004000000ff"], 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000033c0)={0x0, 0x0, 0x0, 0x0, 0x2, r3, 0x0, 0xffffffff00000000}, 0x38) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x7c, r2, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0xb}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x157}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x10001}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15cc}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}]]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0xc0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000380)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0xfff0}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x200, 0x24, 0x41f, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x1d0, 0x2, [@TCA_GRED_PARMS={0x38, 0x1f, {0x1000, 0xa, 0x64, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104, 0x2, '\x00 \x00'}]}}]}, 0x200}}, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000100)={0x2a, 0x4, 0x0, {0x3, 0x5, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x1404e, &(0x7f00000002c0)={[{@i_version}, {@barrier}, {@data_err_ignore}, {@journal_path={'journal_path', 0x3d, './file0'}}, {@min_batch_time={'min_batch_time', 0x3d, 0x11}}, {@acl}]}, 0xfe, 0x42f, &(0x7f0000000940)="$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") 2m6.326814565s ago: executing program 4 (id=86): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x58, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x8}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4044}, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e21, @multicast1}}) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000000c0)={[{@noprefix}]}) getsockopt$netlink(r0, 0x10e, 0x0, &(0x7f0000000080)=""/22, &(0x7f0000000100)=0x16) 2m6.214777557s ago: executing program 4 (id=90): syz_emit_ethernet(0x7a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6002173600442b00fc0206000000000000000000000000010420880b0000000000000800000086dd"], 0x0) r0 = socket(0x2, 0x4, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x40004010) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8002, &(0x7f0000000d40)={[{@journal_dev={'journal_dev', 0x3d, 0x3}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@quota}, {@noload}, {@user_xattr}, {@mblk_io_submit}, {@noinit_itable}, {@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x47f, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./lower1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./lower2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./work\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./mnt\x00', &(0x7f0000000340)='overlay\x00', 0x0, &(0x7f0000000380)='lowerdir=lower1:lower2,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00') 2m5.947603563s ago: executing program 4 (id=96): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000080)='./file1\x00', 0x20000e, &(0x7f0000000140)={[{@sysvgroups, 0x3d}, {@discard}, {@commit={'commit', 0x3d, 0x7bd}}, {@journal_async_commit}, {@nojournal_checksum}, {@errors_continue}], [{@mask={'mask', 0x3d, 'MAY_EXEC'}}]}, 0x3, 0x45c, &(0x7f0000000fc0)="$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") sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x89}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0) 2m5.680185121s ago: executing program 4 (id=98): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@filename='./file2\x00', 0x0, &(0x7f0000002580)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000100)={[{@noload}, {@quota}, {@lazytime}, {@errors_remount}, {@quota}, {@quota}]}, 0x3, 0x449, &(0x7f0000000400)="$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") r1 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd00ac6700000000000000000000c2888e7d52164ec480e79200000100", [0x0, 0x2000000000001]}}) openat(0xffffffffffffff9c, &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2440, 0x0) r3 = syz_clone(0x2a113a7c40e601b8, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000000080)=""/120, 0x78}], 0x1, 0x0) 2m5.636164722s ago: executing program 33 (id=98): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@filename='./file2\x00', 0x0, &(0x7f0000002580)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000100)={[{@noload}, {@quota}, {@lazytime}, {@errors_remount}, {@quota}, {@quota}]}, 0x3, 0x449, &(0x7f0000000400)="$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") r1 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd00ac6700000000000000000000c2888e7d52164ec480e79200000100", [0x0, 0x2000000000001]}}) openat(0xffffffffffffff9c, &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2440, 0x0) r3 = syz_clone(0x2a113a7c40e601b8, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000000080)=""/120, 0x78}], 0x1, 0x0) 2m4.663871364s ago: executing program 5 (id=109): socket$inet6(0xa, 0x3, 0x3c) timer_create(0xfffffffd, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000140), 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async, rerun: 64) mount(0x0, &(0x7f0000000280)='./file1\x00', &(0x7f0000000040)='pvfs2\x00', 0x20041, &(0x7f0000000100)='\x91\x05m\x87j\xd4\xe2\x1f\xdd:\x9f*\xe3\x9e>\xfb\xdf\xd7\x00\xf3\x0f\xef\"\x8d0\xe42\x1f\xa0\x91\x9d\x01\xc3\xec\xeb?\xa0\xb0\b\x00\x00\x00:\x90\x1c1\x1dU\xa7\xb9\x870\xfeN\xcb\n\x1dB*\xb4') (rerun: 64) chdir(&(0x7f0000000080)='./file1\x00') (async) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4}, 0x6e) (async, rerun: 64) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 64) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) getpid() (async, rerun: 64) setpgid(r0, r0) (rerun: 64) setpgid(0x0, r0) mount$fuse(0x0, &(0x7f0000000200)='./file0/file0\x00', 0x0, 0x0, 0x0) 2m3.732345705s ago: executing program 5 (id=118): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x200, 0x0, 0x1, 0x1, 0x0, 0x7}, 0x20) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000021c0), 0x10e00, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000000914000428bd70003ed8df250000000000000000"], 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000180001"], 0x2c}}, 0x20000050) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e110b07"], 0xec) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', 0x1000}) r5 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r5, &(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x9, @private1, 0x6, 0x4}, 0x80) syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r3) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) 2m2.82833642s ago: executing program 5 (id=125): r0 = socket(0x2b, 0x800, 0x9) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)=@delchain={0x24, 0x65, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xfff2, 0x8}, {0x0, 0x1}, {0xffec, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x8d0}, 0x8000000) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x60) socket(0x2b, 0x800, 0x9) (async) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)=@delchain={0x24, 0x65, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xfff2, 0x8}, {0x0, 0x1}, {0xffec, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x8d0}, 0x8000000) (async) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x60) (async) 2m2.760268578s ago: executing program 5 (id=126): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000080)={[{@dax_never}, {@nombcache}]}, 0x3, 0x486, &(0x7f0000000980)="$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") r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) sendto(r0, 0x0, 0x0, 0x80, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x32040a7, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xa0242, 0x0) 2m2.739250201s ago: executing program 5 (id=128): unshare(0x22020600) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000180)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2}, 0x4) 2m2.494181623s ago: executing program 5 (id=134): mkdirat(0xffffffffffffff9c, &(0x7f00000000a0)='./dev\x00', 0x147) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x52142, 0x1ad) io_setup(0x5, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0x1f, 0x1, 0x0, r0, 0x0, 0x0, 0x73f580000000, 0x0, 0x2}]) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0xa02, 0x0) io_cancel(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x8, r2, &(0x7f0000000040)="dc358a8f48d28fe7d43e700f403b98535f5214b6c55c", 0x16, 0x8000000000000001, 0x0, 0x3}, &(0x7f0000000140)) mount(0x0, &(0x7f00000000a0)='./dev\x00', &(0x7f00000000f0)='devtmpfs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f00000000a0)='./dev\x00', &(0x7f00000000f0)='devtmpfs\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0504e48, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0504e48, 0x0) 2m2.430767454s ago: executing program 34 (id=134): mkdirat(0xffffffffffffff9c, &(0x7f00000000a0)='./dev\x00', 0x147) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x52142, 0x1ad) io_setup(0x5, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0x1f, 0x1, 0x0, r0, 0x0, 0x0, 0x73f580000000, 0x0, 0x2}]) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0xa02, 0x0) io_cancel(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x8, r2, &(0x7f0000000040)="dc358a8f48d28fe7d43e700f403b98535f5214b6c55c", 0x16, 0x8000000000000001, 0x0, 0x3}, &(0x7f0000000140)) mount(0x0, &(0x7f00000000a0)='./dev\x00', &(0x7f00000000f0)='devtmpfs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f00000000a0)='./dev\x00', &(0x7f00000000f0)='devtmpfs\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0504e48, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0504e48, 0x0) 16.244054096s ago: executing program 6 (id=477): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x2a0471a, &(0x7f0000000000), 0x82, 0x492, &(0x7f0000000840)="$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") chdir(&(0x7f0000000140)='./file0\x00') (async) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x133042, 0x19) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) 16.243756541s ago: executing program 6 (id=478): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x80, 0x34325241, 0x3, [0x2], [0x80ffff, 0x0, 0x800], [0x0, 0x2, 0x0, 0x3], [0x1000, 0x0, 0x3]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xac}, 0x1, 0x0, 0x0, 0x8892}, 0x40000) r2 = socket(0x6, 0xa, 0xb3fe) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001001300000008000a0005"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000180)={0x3, 0x0, 0x10001}) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f00000001c0)={r5, 0xd3}) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), r4) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x28, r6, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, 0x28}}, 0x20008800) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x40, r6, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x40}}, 0x4801) 16.169695785s ago: executing program 6 (id=480): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x10000000, 0x7, 0x2}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x109882, 0x0) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000100)=0x10000) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r3 = dup(r2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe8800000000000000000000000000016401010000000000000000000000000000017fff4e230025000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x20048041}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000009c0)=@newsa={0x108, 0x1a, 0x400, 0xfffffffe, 0x100, {{@in=@multicast1, @in=@dev={0xac, 0x14, 0x14, 0xb}, 0x4e20, 0x71c, 0x4e21, 0x40, 0x2, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private0, {0x300, 0xf, 0x100000000000006, 0xfffffffffffffbff, 0x8251c, 0xffffffffffff37a6, 0xfffffffffffffffc}, {0xdb1c, 0x0, 0x1ff, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc, 0x80}, 0x80, 0x3505, 0x2, 0x5, 0x7, 0x20}, [@extra_flags={0x8, 0x18, 0xfffffffc}, @sa_dir={0x5}, @XFRMA_SET_MARK_MASK={0x8}]}, 0x108}}, 0x844) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r3, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x65) 16.021125044s ago: executing program 6 (id=483): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007910a8000000000015000000001000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x22, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_TPROXY_FAMILY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}}, 0x840) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1200000026000000040000000500000000000000", @ANYRES32, @ANYBLOB="f7ffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000002000000000000000000000000000000fcff2e0008000000035a99b85c58a8405f5a89fe3f2bc2083020f1728aa63b06af44ef9c2783bb7cefa7692d01d5a4528d25ee6eaf0fc4fafde2fd3576341c116dc1849418dcd5a16129dad281134059a9a755ff09eab8155efa63af12b8bc37aa058924db995cea4fbdf9f19731be7d6753c1e7b7d900af3304c71854c1da2df8967d925656358e4c545ece5fdbea1e75093ecd"], 0x50) r2 = io_uring_setup(0x6ed8, &(0x7f00000004c0)={0x0, 0xbf57, 0x40, 0x2, 0x4026e}) io_uring_register$IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, &(0x7f00000003c0)={0x28, 0x0, 0x0, r2, 0x0, 0x0, 0x8, 0x2, 0x1}, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="dc000000", @ANYRES16=r0, @ANYBLOB="010025bd7000080000000200000008000400be0f00003000068008000300ac1414aa14000400fc01000000000000000000000000000108000700", @ANYRES32=r3, @ANYBLOB="060001000a0000000800040009000000080002000300000008000400597900000800040002000000080004000500000058000180060005004e200000050002008100000014000400fe8800000000000000000000000000011400040000000000000000000000ffff000000000000000000000000002408000600010000000500050003000000080004006d1600"/152], 0xdc}, 0x1, 0x0, 0x0, 0x80}, 0x880) r4 = syz_open_dev$mtd(&(0x7f00000002c0), 0x8, 0x148540) ioctl$ECCGETSTATS(r4, 0x80104d12, &(0x7f0000000300)) 15.059573385s ago: executing program 6 (id=486): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x8041) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r0, &(0x7f0000000940), 0x12) writev(r0, &(0x7f0000001c00)=[{&(0x7f0000000980)="854da169", 0x4}], 0x1) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000900)={'syz1\x00', {0x9, 0x0, 0x6}, 0x37b4, [0xfeff, 0x0, 0x9, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffd, 0x3, 0xe, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0xbffffffe, 0x0, 0x0, 0x4, 0x20000, 0x0, 0xfffffffd, 0x0, 0x8, 0x1, 0x0, 0x9, 0x3, 0xffffffff, 0x0, 0x4, 0x80, 0x20, 0x6, 0x8000005, 0x0, 0x0, 0x0, 0x7, 0x3, 0xfffffffd, 0x5, 0x6, 0x0, 0x7, 0x0, 0x6, 0x0, 0x2000000, 0x20004, 0x0, 0x0, 0x105, 0x0, 0x800000], [0x11, 0xfffeffff, 0x8007, 0x0, 0xffffffff, 0x9, 0xad9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, 0x4f3, 0x0, 0x4, 0xbb, 0x1, 0xfffffffc, 0x5, 0x800, 0x8001, 0xfffffffe, 0x40, 0xf790, 0x40, 0x10000, 0xec6a, 0x5, 0x40000000, 0xffffffff, 0xfffffffc, 0x8, 0xfffffffd, 0x7fffffff, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x18c, 0x0, 0xfffffffd, 0x4000002, 0x5, 0x0, 0x47, 0x0, 0x100000, 0x1b8, 0x0, 0x4, 0x9dd, 0x80, 0x8000, 0x40000004, 0x6, 0x3, 0x8f, 0x7], [0xe, 0x4, 0x0, 0x0, 0xffffffff, 0x1, 0xa000000, 0x0, 0xfff, 0xffff7fff, 0xfffffffd, 0x0, 0x6cd7, 0x0, 0x0, 0x5, 0x0, 0xfffffffc, 0x10000, 0x0, 0x0, 0x420, 0xc, 0x1, 0x0, 0x0, 0x1ff, 0x0, 0xfffffffc, 0x7, 0xfffffffc, 0x2af, 0xfffffff9, 0x9, 0x0, 0x10000, 0x3, 0x0, 0x0, 0x0, 0x8, 0x401, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x1, 0x0, 0xff, 0x4000005, 0xfffffffd, 0x4, 0x2, 0x400000, 0x0, 0x6, 0xfffffffc, 0x0, 0x1, 0xd, 0xffffffdb], [0x2, 0x0, 0x4, 0x6, 0x0, 0x401, 0x1000, 0x215, 0x4, 0x7ff, 0x100, 0x3, 0xa, 0xf862, 0x80, 0x0, 0x3, 0x0, 0x7d, 0x2, 0x7fff, 0x9, 0x1d, 0x71, 0x0, 0xfffffffe, 0x0, 0x0, 0x5d66, 0x1, 0x1, 0x9, 0x3, 0x0, 0x0, 0x6, 0xbfb6, 0x0, 0x4, 0x3, 0x0, 0xfffffffd, 0x1, 0xffffffff, 0x100, 0x2, 0x6, 0x3, 0xfffffffd, 0x53591b27, 0x3fffffd, 0xfffffffc, 0x0, 0x5, 0x400, 0x7, 0xc, 0x0, 0x0, 0x80000000, 0xfffffc, 0x0, 0x5, 0x400]}, 0x45c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x25, &(0x7f0000000d40)="01", 0x1) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000001c0)={0x0, @l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}, 0x4}, @isdn={0x22, 0x2, 0x73, 0x2, 0x12}, @generic={0x0, "042045ed7459a99c306c30c68c7d"}, 0x2, 0x0, 0x0, 0x0, 0x100, 0x0, 0x57b, 0x7f, 0x5}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x131) write(r1, &(0x7f0000000000)='3', 0x4e) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r3 = ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f00000005c0)=ANY=[@ANYBLOB='\x00\x00', @ANYRES32]) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, 0x0, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000040)={@multicast1, @private, 0x0}, &(0x7f00000000c0)=0xc) ftruncate(r2, 0x2) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000280)={'syztnl2\x00', r4, 0x7800, 0x700, 0x6, 0x40, {{0x29, 0x4, 0x1, 0x3a, 0xa4, 0x65, 0x0, 0x8c, 0x4, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x32}, {[@timestamp_prespec={0x44, 0x1c, 0xc, 0x3, 0x6, [{@rand_addr=0x64010102, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9d7}, {@local, 0x88}]}, @cipso={0x86, 0x2e, 0x3, [{0x0, 0x6, "f558b6ff"}, {0x5, 0x12, "24e4cd8021c1e1b166a1c51886b57fdc"}, {0x2, 0x10, "addff97dfe00dbea0d92c948ac2a"}]}, @timestamp_prespec={0x44, 0x44, 0xeb, 0x3, 0x6, [{@rand_addr=0x64010101}, {@broadcast, 0x400}, {@multicast1, 0x10000}, {@remote, 0x3}, {@remote, 0xfffffff8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x600f}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}]}, @noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000440)={'syztnl0\x00', r5, 0x2f, 0xec, 0x4, 0xa, 0xc, @loopback, @empty, 0x20, 0x10, 0x9, 0x9}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r1, r4, 0x25, 0x8, @val=@perf_event}, 0x18) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket(0x1d, 0x2, 0x6) bind$inet6(r6, &(0x7f00000003c0)={0xa, 0x4e22, 0x1, @mcast2, 0x9}, 0x1c) bind$can_j1939(r7, &(0x7f0000000100)={0x1d, 0x0, 0x4000000000000001, {0x3}}, 0x18) setsockopt$inet6_int(r6, 0x29, 0x1a, &(0x7f0000000080), 0x4) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 14.992535533s ago: executing program 6 (id=489): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140002"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) syz_emit_ethernet(0x7a, &(0x7f00000002c0)=ANY=[@ANYBLOB="fffffffffffff5f87bdd8ab786dd674a9e6c00442f82fe8000000000000000000000000000aaff02000000000000000000000000320104206558000000030c0008000c00"], 0x0) 4.681133365s ago: executing program 3 (id=633): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_deladdr={0x2c, 0x15, 0x1, 0xfffffffd, 0x1, {0x2, 0x18, 0x0, 0xc8, r1}, [@IFA_LABEL={0x14, 0x3, 'tunl0\x00'}]}, 0x2c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8948, &(0x7f00000002c0)={'bond0\x00', @random="d8b30100"}) 3.612171016s ago: executing program 3 (id=637): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002cbd7000f9dbdfa501000000080001007926d179a9920a3a6aa2b3c04af7e199a1262df4484d77c8208cb5d45551a20d31b651cfdfc305af9465b3944a4300514b103ce708b5b3a152fd73b38dcfac235071f9d6835dfce1367d82e0281edcbb48e97f59bbaa957f46", @ANYRES32=r2, @ANYBLOB="400002803c000100000001006c625f706f72745f737461747300000000000000000000000000000000000000000003000b000000000004000600000000000600", @ANYRES32=r2, @ANYBLOB], 0x5c}, 0x1, 0x400000000000000, 0x0, 0x4008040}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$llc_int(r3, 0x10c, 0x6, 0x0, &(0x7f00000079c0)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r4, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x5, 0xfff3}, {0xffff, 0xffff}, {0x13, 0x9}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000019c0)=@newtfilter={0xb4, 0x2c, 0xf3f, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x84, 0x2, [@TCA_FLOWER_ACT={0x80, 0x3, [@m_csum={0x30, 0x1f, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0xffffffff, 0xffffffffbffffffe, 0x101, 0xc}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20041004}, 0x0) 3.505579305s ago: executing program 3 (id=639): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000000540)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x4, 0x0, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x80000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) openat$full(0xffffffffffffff9c, 0x0, 0x80100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r1, 0x29, 0x6, 0xfffffffffffffffe, 0x3) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x13) write$binfmt_script(r4, &(0x7f000000e0c0), 0x10010) socket$nl_generic(0x10, 0x3, 0x10) 3.055260976s ago: executing program 0 (id=648): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e24, @local}}, 0x3, 0x9}, &(0x7f0000000280)=0x90) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000300)=@sack_info={r4, 0x800, 0x401}, 0xc) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) move_pages(r0, 0x1, &(0x7f0000000000)=[&(0x7f0000ae5000/0x2000)=nil], &(0x7f0000000040)=[0x4, 0x6, 0x9, 0x0, 0xba3], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r5, 0x5) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="180000007f000000000000000400000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014800000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r7, 0xfffffffffffffec9, 0x0}, 0x10) 3.02861369s ago: executing program 1 (id=649): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2080, 0x6804eb57d6a6c79b) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x100) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x2f, 0xb7, 0x6b, 0x6, 0x40, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x20, 0x40, 0xa}}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x20003, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x0, &(0x7f0000000080), &(0x7f00000000c0)='GPL\x00', 0x60, 0x4f, &(0x7f0000000100)=""/79, 0x41000, 0x68, '\x00', r1, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x0, 0xa, 0x7, 0xffffff00}, 0x10, 0x0, 0x0, 0x9, 0x0, &(0x7f00000002c0)=[{0x5, 0x1, 0xf, 0x7}, {0x5, 0x4, 0x7, 0x6}, {0x4, 0x1, 0x9, 0x3}, {0x1, 0x4, 0x2, 0x7}, {0x2, 0x1, 0xc, 0x4}, {0x2, 0x2, 0x20000}, {0x3, 0x5, 0x4, 0x5}, {0x2, 0x5, 0x2, 0x9}, {0x1ff, 0x4, 0xb, 0x6}]}, 0x94) close(r2) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000440)={0x0, 0xfff2, 0x6}, &(0x7f0000000480)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000004c0)={r4, 0x200, 0x401}, &(0x7f0000000500)=0x8) shutdown(r2, 0x1) exit(0x10) r6 = fspick(r2, &(0x7f0000000540)='./file0\x00', 0x1) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000580), 0x101200, 0x0) close_range(r2, r3, 0x2) r8 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) getpid() ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r7, 0xc0189374, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r3, {0x9b50}}, './file0\x00'}) sendmmsg$unix(r2, &(0x7f0000000980)=[{{&(0x7f0000000600)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000680)="1113de9213de54689fe88355afa9ce0ef6fadb41870a21b4d1b5227762f72766ccb7ff65979f28880438d512d5ce9d4296894888df115d7faad843a9d6202017f63e5448012b7bc752b161d486d12e799e03a69438b37320901f5dcd4ef805b5ad108b0f3d87699afac59c0e345bcaa8f6b41a7073d5930d208b44b34f4ad75fed9629c1cf29a298553e2cd461de935d5071bd662eee9d5a11779484585f83fbbb7163", 0xa3}, {&(0x7f0000000740)="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", 0xfc}, {&(0x7f0000000840)="6ed62f6816657106c83b79095d6e", 0xe}], 0x3, &(0x7f0000000900)=[@rights={{0x2c, 0x1, 0x1, [r2, r0, r2, r7, r0, r6, r8]}}, @rights={{0x24, 0x1, 0x1, [r7, r6, r9, r3, r0]}}], 0x58, 0x4004010}}], 0x1, 0x80) ioctl$DRM_IOCTL_AUTH_MAGIC(r2, 0x40046411, &(0x7f00000009c0)=0x2) setsockopt$MRT6_DEL_MFC_PROXY(r8, 0x29, 0xd3, &(0x7f0000000a00)={{0xa, 0x4e23, 0x1f2e0, @dev={0xfe, 0x80, '\x00', 0x14}, 0x1efde527}, {0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, '\x00', 0x11}, 0x7}, 0xffffffffffffffff, {[0x1, 0xaf, 0x4, 0x5f6, 0x7, 0x1, 0x0, 0xfffffffa]}}, 0x5c) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f0000000a80)=@assoc_value={r5, 0x6}, &(0x7f0000000ac0)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r7, 0x84, 0x6c, &(0x7f0000000b00)={r10, 0x2f, "5ce9d7752afd3235dc3fbf6ea9032a072ebfce50a1dccde27518917c6ad31855691bbe05254d412e37846863d6dff3"}, &(0x7f0000000b40)=0x37) r11 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)={0x24000, 0x100, 0x30}, 0x18) fchmodat(r11, &(0x7f0000000c00)='./file0\x00', 0xe0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r12, &(0x7f0000000d40)={&(0x7f0000000c40), 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x20, r13, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x8c0}, 0xc015) ioctl$MEMUNLOCK(r2, 0x40084d06, &(0x7f0000000d80)={0x3, 0x7}) ioctl$EXT4_IOC_SWAP_BOOT(r9, 0x6611) read$fb(r7, &(0x7f0000000dc0)=""/50, 0x32) socket(0x2, 0x5, 0x5) 2.480192169s ago: executing program 3 (id=650): mmap$binder(&(0x7f0000ff8000/0x6000)=nil, 0x6000, 0x1, 0x11, 0xffffffffffffffff, 0x13b) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x500000000000000, 0x100) (async, rerun: 32) r1 = getpid() (rerun: 32) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) (async) r2 = syz_open_procfs(r1, &(0x7f0000000040)='syscall\x00') preadv(r2, &(0x7f0000003240)=[{&(0x7f00000002c0)=""/189, 0xbd}, {&(0x7f0000000380)=""/188, 0xbc}], 0x2, 0x4, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x68, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x3c, 0x3, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x2c, 0xb, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xec}}, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async, rerun: 64) bind$xdp(r0, &(0x7f0000000040)={0x2c, 0xf, 0x0, 0x2b, r2}, 0x10) (rerun: 64) 2.122872521s ago: executing program 1 (id=651): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x30, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xa}, @NDA_MASTER={0x8, 0x9, 0x8}]}, 0x30}}, 0x0) r1 = socket$inet(0x2, 0x2, 0x7ff) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) (async) bind$inet(r2, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) (async, rerun: 64) listen(r2, 0x0) (async, rerun: 64) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) (async) bind$inet(r3, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) (async, rerun: 64) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) (async, rerun: 64) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) 1.992282028s ago: executing program 1 (id=653): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000020000100dcec51ecfbdbdf2502101004090000060620010008000200ac14142a08000b0006000000080001"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4000804) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRES64], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4c011) 1.962682988s ago: executing program 1 (id=655): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x20c91c, &(0x7f0000000640)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@inlinecrypt}, {@auto_da_alloc_val}, {@noinit_itable}, {@abort}, {@noauto_da_alloc}, {@init_itable}, {@resgid, 0x32}]}, 0x1, 0x4e0, &(0x7f0000001a40)="$eJzs3d9rW9cdAPDvla0sP5zZYXvIAsvCkmGHLZIdL4nZQ7bB2J4C27L3zLNlYyxbxpKT2ITNYX/AYIy10Kc+9aXQP6BQ8ieUQqB9L21pKW3SPhTaRkVXUuI4UuwQWUqtzweOdO7Rvfqeo4uO7rn3cBVA3zoVEacj4kG1Wj0bEcON8kwjxWY91da7f+/WTC0lUa1e/SyJSOpltdXGtrznkcZmByPir3+K+EfyZNzy+sbidLFYWG0s5ytLK/ny+sa5haXp+cJ8YXlycuLi1KWpC1PjHWnnUERc/sNH///Pa3+8/Navbrx/7ZOxfyaN8ohH7ei0etOz6WfRNBgRq3sRrEcG0xYCAPB90DzO/3lEnI3hGEiP5gAAAID9pPrbofgmiagCAAAA+1YmnQObZHKNeQBDkcnkcvU5vD+Ow5liqVz55VxpbXm2Pld2JLKZuYViYbwxV3gksklteSLNP1o+v215MiKORcT/hg+ly7mZUnG21yc/AAAAoE8c2Tb+/3K4Pv7f4uueVQ4AAADonJFeVwAAAADYc8b/AAAAsP8Z/wMAAMC+9ucrV2qp2vz/69nr62uLpevnZgvlxdzS2kxuprS6kpsvlebTe/Yt7fR+xVJp5dexvHYzXymUK/ny+sa1pdLacuXawmN/gQ0AAAB00bGf3XkviYjN3xxKU82BXlcK6IrBZ1n5w72rB9B9A72uANAzz/T7D+wr2V5XAOi5ZIfX207eebvzdQEAAPbG6E9aX/8f2PHcwGamS1UE9ojzf9C/XP+H/uX6P/SvbAyEgTz0t51uAfr81/+r1WeqEAAA0HFDaUoyuYj0PMBQZDK5XMTRdEyQTeYWioXxiPhhRLw7nP1BbXki3TLZcc4wAAAAAAAAAAAAAAAAAAAAAAAAAFBXrSZRBQAAAPa1iMzHSXo3/4jR4TND288PHEi+Gk6fI+LGK1dfujldqaxO1Mo/f1heeblRfr4XZzAAAACA7Zrj9OY4HgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA66f69WzPN1M24n/4+IkZaxR+Mg+nzwchGxOEvkhjcsl0SEQMdiL95OyKOt4qf1KoVI41atIp/qMfxj3QgPvSzO7X+53etvn+ZOJU+t/7+XUx7qOfXvv/LPOz/BlrEr5Ud3WWME3ffyLeNfzvixGDr/qcZP2nT/5zeZfy//21jo91r1VcjRlv+/iSPxcpXllby5fWNcwtL0/OF+cLy5OTExalLUxemxvNzC8VC47FljP/+9M0HT2v/4TbxR3Zo/5ldtv/buzfv/aiezT7cPHkUf+x06/1/vE38TGP//6KRr70+2sxv1vNbnXz9nZNPa/9sm/bvtP/Hdtn+s3/59we7XBUA6ILy+sbidLFYWO3rzHN9GrXDoheiFS9mpva5vgDVaJn51x68c+3IvNft6kSmp90SAACwB54cAwMAAAAAAAAAAAAAAAAAAADd1o3biWW3xdxMHztx93wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgM75LgAA///6fNJN") syz_open_procfs(0x0, &(0x7f0000002600)='mountinfo\x00') prlimit64(0x0, 0xb, &(0x7f0000000140)={0x4, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(r0, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000340)=0x152, 0x4) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r3, &(0x7f00000002c0)=[{{&(0x7f0000000b00)={0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, '\x00', 0x1b}}, 0x1c, 0x0}}], 0x1, 0x24000000) recvmmsg(r3, &(0x7f0000000980)=[{{0x0, 0x1b, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0x40}, 0xdb31}], 0x1, 0x40002102, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x2, 0x0, 0xfe) ioctl$sock_SIOCSPGRP(r1, 0x8902, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) io_setup(0x5, &(0x7f0000000440)=0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) io_submit(r7, 0x2, &(0x7f00000002c0)=[&(0x7f0000000280)={0xffffff7f00000000, 0x0, 0x0, 0x3, 0x0, r8, 0x0}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x400, r8, 0x0, 0x0, 0x80, 0x0, 0x0, r8}]) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x48, 0x2c, 0x601, 0x8, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}, {0xfff3, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0xfffffffffffffd5e, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x10, 0xfff1}}, @TCA_FW_MASK={0x8, 0x5, 0x10001}, @TCA_FW_MASK={0x8, 0x5, 0x10}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) 1.940874624s ago: executing program 0 (id=656): r0 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f00000001c0)=""/222, 0x41100, 0x8}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000380)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x14) 1.731556175s ago: executing program 0 (id=657): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010002000020000000002500000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900070000000b000000080026006c11000001000013150a005dcfbaefbad88ff1d98019fa4c8cff000a00340002020202210700001000508004000600080007000000000004000b005814470415015fe955f72e6be005d7000000000000000000"], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0xfffffffd, 0x0, &(0x7f0000000100)={0x20, 0x3, 0x2, 0x1}, 0x8, 0x0, 0x1000000, 0x0, 0x1, 0xffffffc, 0x0}) mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x165001, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000002100)={'batadv0\x00', 0x0}) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000001040)={0xc, {"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", 0x7c4}}, 0x1006) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0x1000}, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='upda'], 0x1d, 0xfffffffffffffffd) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000010900020073797a31000000000900010073797a3000000000080005"], 0xb0}}, 0x8000) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="180000007f4e0000000000000800000095000000000000000d5f0400f3ffffff02448ce6090000001800000009000000000000000700000085000000a700000018120000", @ANYRES32=r3, @ANYBLOB="0040000000000000b7030000000000008500000085100000ffffffff9500"/48], &(0x7f0000000180)='syzkaller\x00', 0x478c, 0x51, &(0x7f0000000300)=""/81, 0x41100, 0x4, '\x00', r4, 0x18, r5, 0x8, &(0x7f0000000440)={0x2, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x1, 0x5, 0x497, 0x2}, 0x10, 0x1a624, 0xffffffffffffffff, 0x3, &(0x7f0000000500)=[r7], &(0x7f0000000540)=[{0x5, 0x4, 0xf, 0x8}, {0x5, 0x4, 0x5, 0x3}, {0x2, 0x5, 0x10, 0x4}], 0x10, 0x1}, 0x94) socket$nl_rdma(0x10, 0x3, 0x14) syz_clone(0x4500000, 0x0, 0xa82eb8eaa7af31b0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./file0\x00', 0x100) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000640)=@o_path={&(0x7f00000001c0)='./file0\x00', r7, 0x4000, r9}, 0x18) r10 = openat(0xffffffffffffff9c, &(0x7f0000002080)='./bus\x00', 0x101, 0x183) fallocate(r10, 0x10, 0x6, 0x8010001) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) fanotify_init(0x81, 0x40000) 1.663585745s ago: executing program 3 (id=658): r0 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='xprtsec\x00', &(0x7f0000000200)='mtls\x00', 0x0) r1 = fsopen(&(0x7f0000000200)='ext4\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='smackfsdef', &(0x7f0000000240)='s\t', 0x0) 1.611722572s ago: executing program 3 (id=659): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = syz_open_dev$ublk_bdev(&(0x7f0000000040), 0x0, 0x400000) mmap(&(0x7f0000c3c000/0x10000)=nil, 0x10000, 0x9, 0x4002810, r3, 0xd4103000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r4, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r4, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0, 0x0, 0x0, 0x0, 0xc0fe}}], 0x17fd147c801ae9af, 0xff14) syz_usb_connect$uac3(0x0, 0x143, &(0x7f0000000440)=ANY=[@ANYBLOB="12011003000000fe820599054000010203010902310103013059dc080b0002012630690904000000012130000a2401ff6300100000000d240a0504030000000100000011240a06050200000002000000010000000d240a020602000000010000001d24070303030000000800ac0000040000000d0000000b0000000000000011240701050200000008000000100000000904010000010230000904010101010230000c24020104030303790796b60b240202000278deb2020008bc8a0924020107010b0f49aaa467fa07070c240201f9030d04f12d8b62090501092000401004bfca4148fc03e20a252507000000750400090402000001023000090402010100000000000002020d00060040a52425c36efbf98a550624020102360924020103039c05070c2402010203f8f68d5bfd42062402016a63d81b658d7ed414eaf9e6e0ef040f0b2402010104047fbafe6109058209ff030a252502000000040000000062c405166b1ec5270bbf1508400699724658a80b9eed92fd26a8d5f5da4d6ee54336bdf56cc9705f339955e3"], &(0x7f0000000400)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0xe5, 0xe6, 0xe, 0x40, 0x1}, 0xaf, &(0x7f00000001c0)={0x5, 0xf, 0xaf, 0x6, [@ssp_cap={0xc, 0x10, 0xa, 0xbb, 0x0, 0x9, 0xf00f, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x7, 0x6, 0x4173}, @ssp_cap={0x14, 0x10, 0xa, 0x8, 0x2, 0x5, 0xf00f, 0xd, [0x30, 0x3f00]}, @generic={0x6e, 0x10, 0xa, "d9f2cc28ac4316e35051471a09fde4ef1c7600fd148d7301c7cc5552c801fefc68549b1d280262cbaf4d9eee91364df6bfcdb9040baee3db8f8d239cc66b18d066a22d288960de2208ead99deb104992e2e0b0d2362397a6182b34121a0e63e7cea8c619c677a3c6ed9fe6"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x3, 0x7f, 0x3}, @wireless={0xb, 0x10, 0x1, 0x0, 0x20, 0x10, 0x1, 0x1, 0x1}]}, 0x2, [{0x9e, &(0x7f0000000280)=@string={0x9e, 0x3, "d4a2c2f62695a1ff608c8e8c97e8144c1ebf8b3129579216e9c59121ef55e89692f5ad6efa19d56f9bb72e871173fc9c58936a0facbc98af044e8a8875db0576853a5857ed56c626c0e70d2eb373e97224b67db6ddef6898b25d54a3502b7c34b5150f6b5288b3e28ec3add4406b6f067a74e5bb428c2af928a5213950e2fdc157abad35bc3de52009f7d7c330f8f53bc7f9eb5787f16c1c0c6463e3"}}, {0xbe, &(0x7f0000000340)=@string={0xbe, 0x3, "acafb32cd00e840d6af476d629b2baa7ad82cca254414ae7766e623b818f494647aba7ffa66b2aa608a3c9c920be641ad5c7dddd57b15fcc6c82b1ee46f14d327ac81f34b54c0412aa10079c0195cc55219a606e2c0855f30de10f2b3074cc0c718fec11b1fffe550f53fb75c2b7cc5ad4b978827d43a3d51f52776fc0c8dfceb8345a10cb51a8f442c28fef665574386854edc3cc9dabb2e2ac2fc1a9f258e8ca44a26f1c4c54c9f6518f0abb4e19e6f148c45663c707a97285b458"}}]}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x46032, 0xffffffffffffffff, 0x0) munmap$binder(0x0, 0x20eeffff) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async) getpid() (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) syz_open_dev$ublk_bdev(&(0x7f0000000040), 0x0, 0x400000) (async) mmap(&(0x7f0000c3c000/0x10000)=nil, 0x10000, 0x9, 0x4002810, r3, 0xd4103000) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) connect$l2tp6(r4, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) (async) sendmmsg$inet6(r4, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0, 0x0, 0x0, 0x0, 0xc0fe}}], 0x17fd147c801ae9af, 0xff14) (async) syz_usb_connect$uac3(0x0, 0x143, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000400)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0xe5, 0xe6, 0xe, 0x40, 0x1}, 0xaf, &(0x7f00000001c0)={0x5, 0xf, 0xaf, 0x6, [@ssp_cap={0xc, 0x10, 0xa, 0xbb, 0x0, 0x9, 0xf00f, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x7, 0x6, 0x4173}, @ssp_cap={0x14, 0x10, 0xa, 0x8, 0x2, 0x5, 0xf00f, 0xd, [0x30, 0x3f00]}, @generic={0x6e, 0x10, 0xa, "d9f2cc28ac4316e35051471a09fde4ef1c7600fd148d7301c7cc5552c801fefc68549b1d280262cbaf4d9eee91364df6bfcdb9040baee3db8f8d239cc66b18d066a22d288960de2208ead99deb104992e2e0b0d2362397a6182b34121a0e63e7cea8c619c677a3c6ed9fe6"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x3, 0x7f, 0x3}, @wireless={0xb, 0x10, 0x1, 0x0, 0x20, 0x10, 0x1, 0x1, 0x1}]}, 0x2, [{0x9e, &(0x7f0000000280)=@string={0x9e, 0x3, "d4a2c2f62695a1ff608c8e8c97e8144c1ebf8b3129579216e9c59121ef55e89692f5ad6efa19d56f9bb72e871173fc9c58936a0facbc98af044e8a8875db0576853a5857ed56c626c0e70d2eb373e97224b67db6ddef6898b25d54a3502b7c34b5150f6b5288b3e28ec3add4406b6f067a74e5bb428c2af928a5213950e2fdc157abad35bc3de52009f7d7c330f8f53bc7f9eb5787f16c1c0c6463e3"}}, {0xbe, &(0x7f0000000340)=@string={0xbe, 0x3, "acafb32cd00e840d6af476d629b2baa7ad82cca254414ae7766e623b818f494647aba7ffa66b2aa608a3c9c920be641ad5c7dddd57b15fcc6c82b1ee46f14d327ac81f34b54c0412aa10079c0195cc55219a606e2c0855f30de10f2b3074cc0c718fec11b1fffe550f53fb75c2b7cc5ad4b978827d43a3d51f52776fc0c8dfceb8345a10cb51a8f442c28fef665574386854edc3cc9dabb2e2ac2fc1a9f258e8ca44a26f1c4c54c9f6518f0abb4e19e6f148c45663c707a97285b458"}}]}) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x46032, 0xffffffffffffffff, 0x0) (async) munmap$binder(0x0, 0x20eeffff) (async) 1.404165168s ago: executing program 7 (id=660): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r5, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x3, @media='ib\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="00042bbd7000fcdbdf250c00000005002f00010000000800390018000000"], 0x24}, 0x1, 0x0, 0x0, 0x8090}, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23c, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000280)={r2, r2, r3, 0xa89, 0x4, 0x6cdc, 0x3, 0x3, 0x10001, 0x8, 0xffffffff, 0x80000000}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000a00)={r9, r2, r3, 0x3, 0x10, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20003, 0x200003}) 1.40341071s ago: executing program 0 (id=661): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) (async) socket$netlink(0x10, 0x3, 0xc) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) (async, rerun: 32) r7 = fsmount(r6, 0x0, 0x80) (rerun: 32) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r5, r7, 0x16, 0x0, @void}, 0x10) (async, rerun: 32) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'wg2\x00', 0x2}, 0x18) (rerun: 32) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000001000090600000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a7ffa888000000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r9], 0x44}}, 0x0) (async, rerun: 32) r10 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r11 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r11, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e24, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}}, 0x470, 0x5, 0x7fffffff, 0x80000001, 0xa1, 0x5cbc0711}, &(0x7f0000000480)=0x9c) (async) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x3, 0x0, {}, [@RTA_MARK={0x8, 0x10, 0x4}, @RTA_UID={0x8, 0x19, 0xffffffffffffffff}]}, 0x2c}}, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f00000004c0)={0xfff9, 0x7c, 0x4, 0x3231, 0x4, 0xe, 0x0, 0x4, r13}, 0x20) (async) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r12}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 1.379942035s ago: executing program 7 (id=662): r0 = io_uring_setup(0xa86, &(0x7f0000000300)={0x0, 0xf12b, 0x40000, 0x3, 0x800003d7}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r2 = socket(0x11, 0x2, 0x0) (async, rerun: 32) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) (rerun: 32) r4 = dup(r3) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f00000004c0)={0xf, "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"}) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}, @ldst={0x2, 0x0, 0x3}]}, &(0x7f0000000100)='GPL\x00', 0x9, 0xdb, &(0x7f0000000700)=""/219}, 0x94) (async, rerun: 32) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x107, 0x500, 0x100, 0x1, 0x4000}}) (rerun: 32) setsockopt(r2, 0x107, 0x1, &(0x7f0000000000)="110000000000060080010061cc000000", 0x10) (async, rerun: 64) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x54, 0x0, 0x0) (rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000110001002bbd700000dcdf2500000000", @ANYRES32=0x0, @ANYBLOB="5deed855cdd81b43"], 0x20}}, 0x2000e844) (async) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x800, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 1.245988633s ago: executing program 7 (id=663): r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dcbeec0696c37b64e3b24da3183dbe97e805165c0f63cdc2e82818254950ee03568b88091e6a86450545c0e18e09"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r2, r1, 0x2, 0x0, @void}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket(0x2, 0x3, 0x6) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001000)=0x8) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func={0x1, 0x0, 0x0, 0x12}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x30, 0x0, 0x0, 0x61]}}, 0x0, 0x46, 0x0, 0x2}, 0x28) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000000140)={[{@rodir}, {@uni_xlate}, {@utf8}, {@shortname_lower}, {@shortname_lower}, {@utf8}, {@rodir}, {@utf8}, {@fat=@tz_utc}, {@fat=@codepage={'codepage', 0x3d, '950'}}, {@fat=@check_strict}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@utf8no}, {@numtail}, {@utf8no}, {@utf8no}]}, 0x3, 0x29e, &(0x7f0000000800)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000040)={0x6, 0x7ffffffffffffff7}, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)) 1.108300348s ago: executing program 1 (id=664): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x200, 0x0, 0x1, 0x1, 0x0, 0x7}, 0x20) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0xec) 1.107759994s ago: executing program 0 (id=665): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8000000000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) bind$unix(r3, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e23}, 0x6e) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0xfffffffb, 0x0, 0x0) 764.248146ms ago: executing program 1 (id=666): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e24, @local}}, 0x3, 0x9}, &(0x7f0000000280)=0x90) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000300)=@sack_info={r4, 0x800, 0x401}, 0xc) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) move_pages(r0, 0x1, &(0x7f0000000000)=[&(0x7f0000ae5000/0x2000)=nil], &(0x7f0000000040)=[0x4, 0x6, 0x9, 0x0, 0xba3], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r5, 0x5) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="180000007f000000000000000400000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014800000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r7, 0xfffffffffffffec9, 0x0}, 0x10) 494.5887ms ago: executing program 0 (id=667): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) socket$packet(0x11, 0x2, 0x300) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, 0x0, 0x0) (async) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), 0x800004, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getregset(0x4205, r3, 0x402, &(0x7f0000000240)={&(0x7f0000000180)=""/108, 0x12}) r4 = fsopen(&(0x7f00000001c0)='binder\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0xf) fsconfig$FSCONFIG_SET_FLAG(r4, 0x0, &(0x7f0000000240)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x21c91c, &(0x7f00000002c0)={[{@dioread_nolock}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@resgid}, {@init_itable}, {@abort}, {@auto_da_alloc}, {@nouid32}, {@oldalloc, 0x32}]}, 0x1, 0x519, &(0x7f00000014c0)="$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") mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x400a, 0x0) (async) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x400a, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) (async) write(r5, &(0x7f0000000000)='3', 0x4e) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) 292.27682ms ago: executing program 7 (id=668): r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b7c4fb9191024da8887f94ba4fb"}, 0x4, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000140)={0x0, 0x5961, 0x10000, 0x2, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x2000, 0xb963, 0xa9, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="66bcdaaaf40000006111b400000000000000"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) 43.85227ms ago: executing program 7 (id=669): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x800) recvmmsg(r1, &(0x7f0000007340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/61, 0x3d}, 0xfffffffe}], 0x1, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0xf5, 0x40}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r3, 0x977}, 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)) 0s ago: executing program 7 (id=670): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000240)=0x7f, 0x4) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000400)=0x10, 0x4) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nullb/nullb1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb/nullb1/memory_backed\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='1', 0x1) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nullb/nullb1/power\x00', 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="5c0000001000ffff25bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4028000021200000340012800c0001006d6163766c616e00240002800a000400bbbbbbbbbbbb0000080001001000000008000400080000000000000008000500", @ANYRES32=0x0, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) (async) write(r2, &(0x7f00000002c0)='1\n', 0x2) close(r2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./dev\x00', &(0x7f0000000380)='devtmpfs\x00', 0x0, 0x0) (async) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000180)=0x7f) (async) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./dev/nullb1\x00', 0x2, 0x0) pwrite64(r4, &(0x7f0000002000)="53464f5a05abbf5900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000099e98558e1b79cd70010b52b9b9800"/4093, 0xffd, 0x4) close(r4) (async) mount(&(0x7f0000000440)=@filename='./dev/nullb1\x00', &(0x7f0000000480)='./mnt\x00', &(0x7f00000004c0)='zonefs\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): g (id 93) dev N/A, expect packet loss! [ 50.218235][ T6176] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.234: iget: bad i_size value: 38620345925642 [ 50.218273][ T6176] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 50.218551][ T6176] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.234: couldn't read orphan inode 15 (err -117) [ 50.218574][ T6176] loop3: lost filesystem error report for type 5 error -117 [ 50.219255][ T6176] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.754499][ T6201] netlink: 36 bytes leftover after parsing attributes in process `syz.1.245'. [ 50.810211][ T4719] Bluetooth: hci2: command tx timeout [ 50.953394][ T4721] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.018053][ T6230] Soft offlining pfn 0x219070 at process virtual address 0x20ffd000 [ 51.042567][ T6228] EXT4-fs (loop0): Test dummy encryption mode enabled [ 51.047867][ T6230] Memory failure: 0x219070: unhandlable page. [ 51.056482][ T6228] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 51.153214][ T6243] netlink: 'syz.6.255': attribute type 11 has an invalid length. [ 51.292741][ T6258] EXT4-fs: Ignoring removed nobh option [ 51.429322][ T6270] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 51.483609][ T6270] EXT4-fs error (device loop1): __ext4_iget:5533: inode #11: block 2: comm syz.1.258: invalid block [ 51.483696][ T6270] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 51.489980][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 51.490011][ C0] EXT4-fs (loop1): initial error at time 51: __ext4_iget:5533: inode 11: block 2 [ 51.490064][ C0] EXT4-fs (loop1): last error at time 51: __ext4_iget:5533: inode 11: block 2 [ 51.490410][ T6270] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.258: couldn't read orphan inode 11 (err -117) [ 51.490450][ T6270] loop1: lost filesystem error report for type 5 error -117 [ 51.511272][ T6270] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.160736][ T6258] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #3: comm syz.3.259: corrupted inode contents [ 52.160777][ T6258] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 52.167507][ T6258] EXT4-fs error (device loop3): ext4_dirty_inode:6639: inode #3: comm syz.3.259: mark_inode_dirty error [ 52.167556][ T6258] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 52.170799][ C0] EXT4-fs (loop3): error count since last fsck: 2 [ 52.170814][ C0] EXT4-fs (loop3): initial error at time 52: ext4_do_update_inode:5742: inode 3 [ 52.170836][ C0] EXT4-fs (loop3): last error at time 52: ext4_dirty_inode:6639: inode 3 [ 52.192367][ T6258] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #3: comm syz.3.259: corrupted inode contents [ 52.192408][ T6258] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 52.198754][ T6258] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #3: comm syz.3.259: mark_inode_dirty error [ 52.198802][ T6258] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 52.204483][ T6258] Quota error (device loop3): write_blk: dquota write failed [ 52.204573][ T6258] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 52.204611][ T6258] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.259: Failed to acquire dquot type 0 [ 52.204630][ T6258] loop3: lost filesystem error report for type 5 error -117 [ 52.213256][ T6273] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 52.223303][ T6258] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #16: comm syz.3.259: corrupted inode contents [ 52.223349][ T6258] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 52.225801][ T6258] EXT4-fs error (device loop3): ext4_dirty_inode:6639: inode #16: comm syz.3.259: mark_inode_dirty error [ 52.225827][ T6258] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 52.229850][ T6258] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #16: comm syz.3.259: corrupted inode contents [ 52.229876][ T6258] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 52.238540][ T6258] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #16: comm syz.3.259: mark_inode_dirty error [ 52.238586][ T6258] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 52.245754][ T6258] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #16: comm syz.3.259: corrupted inode contents [ 52.251401][ T6258] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 52.251432][ T6258] loop3: lost filesystem error report for type 5 error -117 [ 52.253413][ T6258] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #16: comm syz.3.259: corrupted inode contents [ 52.257210][ T6258] EXT4-fs error (device loop3): ext4_truncate:4691: inode #16: comm syz.3.259: mark_inode_dirty error [ 52.257367][ T6258] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 52.257377][ T6258] loop3: lost filesystem error report for type 5 error -117 [ 52.266228][ T6258] EXT4-fs (loop3): 1 truncate cleaned up [ 52.270923][ T6258] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.284176][ T4710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.343044][ T6280] set_capacity_and_notify: 8 callbacks suppressed [ 52.343088][ T6280] loop1: detected capacity change from 0 to 8 [ 52.369149][ T4721] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.379673][ T6280] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 52.379705][ T6280] unable to read xattr id index table [ 52.389796][ T6280] SQUASHFS error: zlib decompression failed, data probably corrupt [ 52.389841][ T6280] SQUASHFS error: Failed to read block 0x9b: -5 [ 52.389867][ T6280] SQUASHFS error: Unable to read metadata cache entry [99] [ 52.389948][ T6280] SQUASHFS error: Unable to read inode 0x127 [ 52.410794][ T6280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.411000][ T6280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.451712][ T6290] Soft offlining pfn 0x11ef7a at process virtual address 0x20000000 [ 52.469633][ T6290] Soft offlining pfn 0x136bb7 at process virtual address 0x20001000 [ 52.469779][ T6290] Soft offlining pfn 0x137b17 at process virtual address 0x20002000 [ 52.482379][ T6280] fsa4480 0-0042: error -ENODEV: FSA4480 not found [ 52.483124][ T6280] i2c i2c-0: new_device: Instantiated device fsa4480 at 0x42 [ 52.484630][ T6289] vlan2: entered promiscuous mode [ 52.484642][ T6289] hsr0: entered promiscuous mode [ 52.484763][ T6289] vlan2: entered allmulticast mode [ 52.484771][ T6289] hsr0: entered allmulticast mode [ 52.484778][ T6289] hsr_slave_0: entered allmulticast mode [ 52.484788][ T6289] hsr_slave_1: entered allmulticast mode [ 52.511751][ T6289] netlink: 4 bytes leftover after parsing attributes in process `syz.3.263'. [ 52.518451][ T6280] loop1: detected capacity change from 0 to 256 [ 52.530080][ T6280] vfat: Unknown parameter 'iochar [ 52.530080][ T6280] En6G_2' [ 52.543743][ T6289] hsr_slave_0: left promiscuous mode [ 52.556346][ T6289] hsr_slave_1: left promiscuous mode [ 52.732473][ T5628] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.744310][ T6307] netlink: 14 bytes leftover after parsing attributes in process `syz.3.266'. [ 52.750146][ T6307] veth1_macvtap: left promiscuous mode [ 52.789398][ T6313] netlink: 28 bytes leftover after parsing attributes in process `syz.7.267'. [ 52.844714][ T6320] random: crng reseeded on system resumption [ 52.909764][ T6329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.913156][ T6329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.966213][ T4724] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 53.108553][ T6356] loop0: detected capacity change from 0 to 8 [ 53.148464][ T6361] tls_set_device_offload_rx: netdev not found [ 53.797522][ T6401] loop0: detected capacity change from 0 to 1024 [ 53.837013][ T6409] input: syz0 as /devices/virtual/input/input2 [ 54.039219][ T6429] loop0: detected capacity change from 0 to 512 [ 54.044395][ T6429] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 54.236163][ T6439] netlink: 8 bytes leftover after parsing attributes in process `syz.6.299'. [ 54.266035][ T6432] loop1: detected capacity change from 0 to 8192 [ 54.540504][ T6448] veth0_virt_wifi: entered promiscuous mode [ 54.544721][ T6448] macsec1: entered promiscuous mode [ 54.546167][ T6448] macsec1: entered allmulticast mode [ 54.548044][ T6448] veth0_virt_wifi: entered allmulticast mode [ 54.557241][ T6448] veth0_virt_wifi: left allmulticast mode [ 54.558474][ T6448] veth0_virt_wifi: left promiscuous mode [ 54.591635][ T6442] netlink: 52 bytes leftover after parsing attributes in process `syz.0.298'. [ 54.591673][ T6442] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 54.686995][ T6458] nvme_fcloop: unknown parameter or missing value '' [ 55.133018][ T6502] overlayfs: conflicting options: userxattr,metacopy=on [ 55.249051][ T6511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.311'. [ 55.359798][ T6539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.318'. [ 55.369456][ T6539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.318'. [ 55.402199][ T6535] syz.7.317 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 55.402244][ T6535] CPU: 0 UID: 0 PID: 6535 Comm: syz.7.317 Not tainted syzkaller #0 PREEMPT [ 55.402256][ T6535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 55.402262][ T6535] Call trace: [ 55.402265][ T6535] show_stack+0x2c/0x3c (C) [ 55.402289][ T6535] __dump_stack+0x30/0x40 [ 55.402306][ T6535] dump_stack_lvl+0xd8/0x12c [ 55.402319][ T6535] dump_stack+0x1c/0x28 [ 55.402331][ T6535] dump_header+0xbc/0x3f0 [ 55.402340][ T6535] oom_kill_process+0x248/0x8a0 [ 55.402351][ T6535] out_of_memory+0xd24/0x1064 [ 55.402361][ T6535] mem_cgroup_out_of_memory+0xe8/0x170 [ 55.402373][ T6535] try_charge_memcg+0x8ec/0xc64 [ 55.402382][ T6535] charge_memcg+0x17c/0x280 [ 55.402390][ T6535] __mem_cgroup_charge+0x38/0x98 [ 55.402399][ T6535] shmem_alloc_and_add_folio+0x61c/0xed8 [ 55.402409][ T6535] shmem_get_folio_gfp+0x4a8/0x1464 [ 55.402417][ T6535] shmem_write_begin+0x160/0x448 [ 55.402425][ T6535] generic_perform_write+0x23c/0x7a4 [ 55.402435][ T6535] shmem_file_write_iter+0x10c/0x134 [ 55.402444][ T6535] vfs_write+0x51c/0xa0c [ 55.402452][ T6535] ksys_write+0x12c/0x228 [ 55.402459][ T6535] __arm64_sys_write+0x84/0x98 [ 55.402467][ T6535] invoke_syscall+0x98/0x244 [ 55.402480][ T6535] el0_svc_common+0xec/0x23c [ 55.402492][ T6535] do_el0_svc+0x4c/0x5c [ 55.402504][ T6535] el0_svc+0x64/0x260 [ 55.402515][ T6535] el0t_64_sync_handler+0x44/0x104 [ 55.402525][ T6535] el0t_64_sync+0x198/0x19c [ 55.402570][ T6535] memory: usage 96kB, limit 96kB, failcnt 43 [ 55.402577][ T6535] memory+swap: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 55.402585][ T6535] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 55.402591][ T6535] Memory cgroup stats for /syz7/test: [ 55.402677][ T6535] cache 0 [ 55.402681][ T6535] rss 0 [ 55.402684][ T6535] rss_huge 0 [ 55.402687][ T6535] shmem 0 [ 55.402691][ T6535] mapped_file 0 [ 55.402694][ T6535] dirty 0 [ 55.402697][ T6535] writeback 0 [ 55.402701][ T6535] workingset_refault_anon 0 [ 55.402704][ T6535] workingset_refault_file 0 [ 55.402708][ T6535] swap 0 [ 55.402711][ T6535] swapcached 0 [ 55.402714][ T6535] pgpgin 0 [ 55.402717][ T6535] pgpgout 0 [ 55.402721][ T6535] pgfault 0 [ 55.402724][ T6535] pgmajfault 0 [ 55.402727][ T6535] inactive_anon 0 [ 55.402731][ T6535] active_anon 0 [ 55.402734][ T6535] inactive_file 0 [ 55.402737][ T6535] active_file 0 [ 55.402740][ T6535] unevictable 0 [ 55.402744][ T6535] hierarchical_memory_limit 98304 [ 55.402747][ T6535] hierarchical_memsw_limit 9223372036854771712 [ 55.402751][ T6535] total_cache 0 [ 55.402755][ T6535] total_rss 0 [ 55.402758][ T6535] total_rss_huge 0 [ 55.402761][ T6535] total_shmem 0 [ 55.402765][ T6535] total_mapped_file 0 [ 55.402768][ T6535] total_dirty 0 [ 55.402771][ T6535] total_writeback 0 [ 55.402775][ T6535] total_workingset_refault_anon 0 [ 55.402778][ T6535] total_workingset_refault_file 0 [ 55.402782][ T6535] total_swap 0 [ 55.402785][ T6535] total_swapcached 0 [ 55.402789][ T6535] total_pgpgin 0 [ 55.402792][ T6535] total_pgpgout 0 [ 55.402795][ T6535] total_pgfault 0 [ 55.402799][ T6535] total_pgmajfault 0 [ 55.402802][ T6535] total_inactive_anon 0 [ 55.402805][ T6535] total_active_anon 0 [ 55.402809][ T6535] total_inactive_file 0 [ 55.402812][ T6535] total_active_file 0 [ 55.402816][ T6535] total_unevictable 0 [ 55.402819][ T6535] anon_cost 0 [ 55.402822][ T6535] file_cost 0 [ 55.402826][ T6535] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7/test,task_memcg=/syz7/test,task=syz.7.317,pid=6534,uid=0 [ 55.403811][ T6535] Memory cgroup out of memory: Killed process 6534 (syz.7.317) total-vm:237356kB, anon-rss:1412kB, file-rss:22748kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 55.489728][ T6548] loop1: detected capacity change from 0 to 256 [ 55.492509][ T6550] fuse: fd is not a fuse device [ 55.493880][ T6548] vfat: Unknown parameter '`P' [ 55.497886][ T6552] fuse: fd is not a fuse device [ 55.564271][ T6548] loop1: detected capacity change from 0 to 512 [ 55.579172][ T6548] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 55.582430][ T6548] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c840e018, mo2=0002] [ 55.584170][ T6548] EXT4-fs (loop1): orphan cleanup on readonly fs [ 55.589165][ T6548] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.319: bg 0: block 361: padding at end of block bitmap is not set [ 55.589214][ T6548] loop1: lost filesystem error report for type 5 error -117 [ 55.589918][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 55.589944][ C1] EXT4-fs (loop1): initial error at time 55: ext4_validate_block_bitmap:441 [ 55.589970][ C1] EXT4-fs (loop1): last error at time 55: ext4_validate_block_bitmap:441 [ 55.599206][ T6548] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 55.599244][ T6548] loop1: lost filesystem error report for type 5 error -117 [ 55.601886][ T6548] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #11: comm syz.1.319: attempt to clear invalid blocks 33619980 len 1 [ 55.601929][ T6548] fserror_report: 3 callbacks suppressed [ 55.601954][ T6548] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 55.607460][ T6548] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.319: invalid indirect mapped block 1811939328 (level 0) [ 55.612631][ T6548] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 55.620071][ T6548] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.319: invalid indirect mapped block 2185560079 (level 1) [ 55.620158][ T6548] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 55.625315][ T6548] EXT4-fs (loop1): 1 truncate cleaned up [ 55.625784][ T6548] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 55.925510][ T4710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 56.011046][ T4719] Bluetooth: hci0: command 0x0c1a tx timeout [ 56.012546][ T5132] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 56.013035][ T5132] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 56.571476][ T6620] loop1: detected capacity change from 0 to 4096 [ 56.634087][ T6620] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.640139][ T6620] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #15: comm syz.1.333: corrupted inode contents [ 56.646396][ T6620] EXT4-fs error (device loop1): ext4_dirty_inode:6639: inode #15: comm syz.1.333: mark_inode_dirty error [ 56.649249][ T6620] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #15: comm syz.1.333: corrupted inode contents [ 56.649971][ T6620] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #15: comm syz.1.333: mark_inode_dirty error [ 56.656515][ T6620] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #15: comm syz.1.333: corrupted inode contents [ 56.659072][ T6620] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #15: comm syz.1.333: mark_inode_dirty error [ 56.661648][ T6620] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #15: comm syz.1.333: corrupted inode contents [ 56.665346][ T6620] EXT4-fs error (device loop1): ext4_truncate:4691: inode #15: comm syz.1.333: mark_inode_dirty error [ 56.667901][ T6625] loop7: detected capacity change from 0 to 512 [ 56.671805][ T6620] EXT4-fs error (device loop1) in ext4_setattr:6172: Corrupt filesystem [ 56.677571][ T6620] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #15: comm syz.1.333: corrupted inode contents [ 56.702735][ T6625] EXT4-fs: Ignoring removed nobh option [ 56.703952][ T6625] EXT4-fs: Ignoring removed mblk_io_submit option [ 56.715695][ T6620] bridge0: port 3(vlan2) entered blocking state [ 56.715762][ T6620] bridge0: port 3(vlan2) entered disabled state [ 56.715840][ T6620] vlan2: entered allmulticast mode [ 56.715855][ T6620] bridge0: entered allmulticast mode [ 56.731772][ T6625] ext4: Unknown parameter 'jqfmt4' [ 56.754703][ T6620] vlan2: left allmulticast mode [ 56.754739][ T6620] bridge0: left allmulticast mode [ 56.764380][ T6630] Option '?o냟W(d̛p^ï8 XKt..+jXpszgH{&}()eH/ k;RE<' to dns_resolver key: bad/missing value [ 56.949736][ T4710] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 56.962812][ T4710] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 56.966044][ T4710] EXT4-fs warning (device loop1): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 57.045990][ T4710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.304475][ T6650] netlink: 44 bytes leftover after parsing attributes in process `syz.3.331'. [ 57.304519][ T6650] netlink: 43 bytes leftover after parsing attributes in process `syz.3.331'. [ 57.304547][ T6650] netlink: 'syz.3.331': attribute type 5 has an invalid length. [ 57.304560][ T6650] netlink: 43 bytes leftover after parsing attributes in process `syz.3.331'. [ 58.092334][ T4719] Bluetooth: hci3: command 0x0c1a tx timeout [ 58.094654][ T5132] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 58.096093][ T5132] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 58.276490][ T6700] Soft offlining pfn 0x11e55f at process virtual address 0x20ffe000 [ 58.280506][ T6700] Soft offlining pfn 0x137c01 at process virtual address 0x20fff000 [ 58.284999][ T6700] netlink: 20 bytes leftover after parsing attributes in process `syz.0.345'. [ 58.599436][ T6702] loop3: detected capacity change from 0 to 512 [ 58.621648][ T6708] '|d<: renamed from lo (while UP) [ 58.653419][ T6702] Quota error (device loop3): do_check_range: Getting dqdh_entries 1536 out of range 0-14 [ 58.655993][ T6702] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 58.658041][ T6702] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.346: Failed to acquire dquot type 1 [ 58.660177][ T6702] loop3: lost filesystem error report for type 5 error -117 [ 58.679921][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 58.679962][ C0] EXT4-fs (loop3): last error at time 58: ext4_acquire_dquot:7041 [ 58.686984][ T6702] EXT4-fs (loop3): 1 truncate cleaned up [ 58.687480][ T6702] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.702624][ T6716] netlink: zone id is out of range [ 58.702663][ T6716] netlink: zone id is out of range [ 58.702683][ T6716] netlink: zone id is out of range [ 58.702693][ T6716] netlink: zone id is out of range [ 58.702702][ T6716] netlink: zone id is out of range [ 58.702710][ T6716] netlink: zone id is out of range [ 58.702718][ T6716] netlink: zone id is out of range [ 58.702726][ T6716] netlink: zone id is out of range [ 58.702759][ T6716] netlink: zone id is out of range [ 58.808521][ T6721] loop7: detected capacity change from 0 to 2048 [ 58.833606][ T6729] netlink: 'syz.1.348': attribute type 49 has an invalid length. [ 58.842074][ T6721] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.872319][ T6721] overlayfs: failed to resolve './bus': -2 [ 58.947970][ T6721] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 58.952972][ T4721] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.025184][ T6742] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000. [ 59.025403][ T6741] overlayfs: failed to resolve './bus': -2 [ 59.287770][ T6748] block nbd6: NBD_DISCONNECT [ 59.351134][ T5628] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.397501][ T6729] ip6gretap0: entered promiscuous mode [ 59.397547][ T6729] ip6gretap0: entered allmulticast mode [ 59.497950][ T6770] loop7: detected capacity change from 0 to 1024 [ 59.498371][ T6770] EXT4-fs: Ignoring removed bh option [ 59.499769][ T6765] loop3: detected capacity change from 0 to 4096 [ 59.500168][ T6765] EXT4-fs: Ignoring removed orlov option [ 59.511488][ T6770] EXT4-fs (loop7): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 59.519397][ T6765] EXT4-fs (loop3): Test dummy encryption mode enabled [ 59.529400][ T6768] netlink: 20 bytes leftover after parsing attributes in process `syz.6.354'. [ 59.539638][ T6765] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.569281][ T6770] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.681935][ T6765] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 59.684486][ T6765] fuse: Bad value for 'fd' [ 59.988629][ T6778] EXT4-fs error (device loop7): ext4_find_dest_de:2050: inode #12: block 7: comm syz.7.357: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 59.995369][ T6778] EXT4-fs (loop7): Remounting filesystem read-only [ 60.171309][ T4719] Bluetooth: hci4: command 0x0c1a tx timeout [ 60.173487][ T5132] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 60.173545][ T5132] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 60.492258][ T6808] loop0: detected capacity change from 0 to 512 [ 60.492742][ T6808] EXT4-fs: Ignoring removed mblk_io_submit option [ 60.492765][ T6808] EXT4-fs: Ignoring removed nobh option [ 60.506122][ T5628] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.527533][ T6808] EXT4-fs error (device loop0): ext4_iget_extra_inode:5180: inode #15: comm syz.0.362: corrupted in-inode xattr: e_value size too large [ 60.527579][ T6808] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 60.530471][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 60.530488][ C0] EXT4-fs (loop0): initial error at time 60: ext4_iget_extra_inode:5180: inode 15 [ 60.530506][ C0] EXT4-fs (loop0): last error at time 60: ext4_iget_extra_inode:5180: inode 15 [ 60.542220][ T6808] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.362: couldn't read orphan inode 15 (err -117) [ 60.542238][ T6808] loop0: lost filesystem error report for type 5 error -117 [ 60.546461][ T6808] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.596923][ T4721] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.691764][ T6849] loop3: detected capacity change from 0 to 256 [ 61.692200][ T6849] vfat: Unknown parameter '0x0000000000000006' [ 61.824265][ T6856] ieee802154 phy0 wpan0: encryption failed: -90 [ 62.292030][ T6866] IPVS: set_ctl: invalid protocol: 12 0.0.0.0:20002 [ 62.431595][ T6876] Injecting memory failure for pfn 0xcf3b5 at process virtual address 0x20000000 [ 62.439117][ T6876] Memory failure: 0xcf3b5: Sending SIGBUS to syz.0.374:6876 due to hardware memory corruption [ 62.440946][ T6876] Memory failure: 0xcf3b5: recovery action for dirty LRU page: Recovered [ 62.440975][ T6876] Injecting memory failure for pfn 0x219070 at process virtual address 0x20001000 [ 62.444364][ T6876] Memory failure: 0x219070: unhandlable page. [ 62.444378][ T6876] Memory failure: 0x219070: recovery action for get hwpoison page: Ignored [ 62.682586][ T6906] loop0: detected capacity change from 0 to 1024 [ 62.823086][ T6914] FAULT_INJECTION: forcing a failure. [ 62.823086][ T6914] name failslab, interval 1, probability 0, space 0, times 0 [ 62.823155][ T6914] CPU: 1 UID: 0 PID: 6914 Comm: syz.6.378 Not tainted syzkaller #0 PREEMPT [ 62.823172][ T6914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 62.823179][ T6914] Call trace: [ 62.823183][ T6914] show_stack+0x2c/0x3c (C) [ 62.823210][ T6914] __dump_stack+0x30/0x40 [ 62.823224][ T6914] dump_stack_lvl+0xd8/0x12c [ 62.823238][ T6914] dump_stack+0x1c/0x28 [ 62.823250][ T6914] should_fail_ex+0x41c/0x590 [ 62.823259][ T6914] should_failslab+0xc4/0x120 [ 62.823269][ T6914] __kmalloc_noprof+0x108/0x6b8 [ 62.823279][ T6914] security_prepare_creds+0x60/0x35c [ 62.823289][ T6914] prepare_creds+0x500/0x7d0 [ 62.823301][ T6914] set_current_groups+0x20/0xc4 [ 62.823310][ T6914] __arm64_sys_setgroups+0x344/0x454 [ 62.823320][ T6914] invoke_syscall+0x98/0x244 [ 62.823332][ T6914] el0_svc_common+0xec/0x23c [ 62.823343][ T6914] do_el0_svc+0x4c/0x5c [ 62.823355][ T6914] el0_svc+0x64/0x260 [ 62.823366][ T6914] el0t_64_sync_handler+0x44/0x104 [ 62.823376][ T6914] el0t_64_sync+0x198/0x19c [ 63.015000][ T6906] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: comm syz.0.381: lblock 0 mapped to illegal pblock 0 (length 6) [ 63.020574][ T6906] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 63.020619][ T6906] EXT4-fs (loop0): This should not happen!! Data will be lost [ 63.020619][ T6906] [ 63.044826][ T6906] EXT4-fs error (device loop0): ext4_ext_remove_space:2969: inode #15: comm syz.0.381: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 63.064097][ T6906] EXT4-fs error (device loop0) in ext4_setattr:6172: Corrupt filesystem [ 63.140325][ T5018] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: comm kworker/u8:9: lblock 0 mapped to illegal pblock 0 (length 2) [ 63.145370][ T5018] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 117 [ 63.145422][ T5018] EXT4-fs (loop0): This should not happen!! Data will be lost [ 63.145422][ T5018] [ 63.165861][ T5133] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm kworker/0:9: data will be lost [ 63.235622][ T6931] loop7: detected capacity change from 0 to 1024 [ 63.304215][ T6931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.304413][ T6931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.574377][ T6985] netlink: 28 bytes leftover after parsing attributes in process `syz.3.394'. [ 63.574427][ T6985] netlink: 'syz.3.394': attribute type 7 has an invalid length. [ 63.574456][ T6985] netlink: 'syz.3.394': attribute type 8 has an invalid length. [ 63.574470][ T6985] netlink: 4 bytes leftover after parsing attributes in process `syz.3.394'. [ 63.675333][ T7008] netlink: 'syz.3.396': attribute type 1 has an invalid length. [ 63.677006][ T7008] netlink: 140 bytes leftover after parsing attributes in process `syz.3.396'. [ 63.685941][ T7008] warning: `syz.3.396' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 63.944078][ T7022] x_tables: duplicate underflow at hook 2 [ 63.987390][ T7032] netlink: 16 bytes leftover after parsing attributes in process `syz.3.398'. [ 64.038355][ T7038] netlink: 'syz.7.399': attribute type 1 has an invalid length. [ 64.038393][ T7038] netlink: 224 bytes leftover after parsing attributes in process `syz.7.399'. [ 64.250334][ T4719] Bluetooth: hci1: command 0x0c1a tx timeout [ 64.257292][ T5132] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 64.257326][ T5132] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 64.454894][ T7077] netlink: 'syz.1.404': attribute type 10 has an invalid length. [ 64.498459][ T1013] cfg80211: failed to load regulatory.db [ 64.557994][ T7077] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 64.670254][ T1599] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.670305][ T1599] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.791494][ T7078] gtp0: entered promiscuous mode [ 64.801785][ T7078] gtp0: entered allmulticast mode [ 64.806486][ T7078] team0: Device gtp0 is of different type [ 64.847042][ T7091] loop3: detected capacity change from 0 to 256 [ 66.810759][ T4719] Bluetooth: hci2: command 0x0c1a tx timeout [ 66.812028][ T5132] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 66.812059][ T5132] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 125.930424][ T1599] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.930470][ T1599] ieee802154 phy1 wpan1: encryption failed: -22 [ 142.531317][ T7171] netlink: 'syz.3.416': attribute type 10 has an invalid length. [ 142.540666][ T7173] Bluetooth: MGMT ver 1.23 [ 143.106475][ T7184] netlink: 84 bytes leftover after parsing attributes in process `syz.0.419'. [ 143.147730][ T7187] loop1: detected capacity change from 0 to 256 [ 143.500884][ T7196] sch_tbf: burst 19866 is lower than device lo mtu (65550) ! [ 143.655913][ T7194] netlink: 12 bytes leftover after parsing attributes in process `syz.7.423'. [ 143.692229][ T5018] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.735911][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 143.743873][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 143.747309][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 143.750448][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 143.752176][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 143.826168][ T4719] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 143.831226][ T4719] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 143.834929][ T4719] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 143.836678][ T4719] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 143.836985][ T4719] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 143.842478][ T5018] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.625708][ T5018] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.761829][ T7236] netlink: 12 bytes leftover after parsing attributes in process `syz.7.432'. [ 144.771289][ T7238] PKCS7: Unknown OID: [98] 1.2.10824.113549.1.1.1 [ 144.773355][ T7238] Unsupported pkey algo: 106 [ 144.775125][ T4822] hsr0: entered promiscuous mode [ 144.833178][ T5018] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.839738][ T7236] netlink: 8 bytes leftover after parsing attributes in process `syz.7.432'. [ 144.839772][ T7236] netlink: 24 bytes leftover after parsing attributes in process `syz.7.432'. [ 144.873643][ T7236] veth3: entered allmulticast mode [ 144.875565][ T7236] bond1: (slave veth3): Enslaving as an active interface with an up link [ 145.004971][ T7272] loop7: detected capacity change from 0 to 1024 [ 145.007573][ T7272] EXT4-fs: Ignoring removed bh option [ 145.025959][ T5018] bridge_slave_1: left allmulticast mode [ 145.025997][ T5018] bridge_slave_1: left promiscuous mode [ 145.026110][ T5018] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.033968][ T5018] bridge_slave_0: left allmulticast mode [ 145.034003][ T5018] bridge_slave_0: left promiscuous mode [ 145.034093][ T5018] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.043122][ T7272] EXT4-fs mount: 3 callbacks suppressed [ 145.043168][ T7272] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.052122][ T7277] netlink: 112 bytes leftover after parsing attributes in process `syz.1.442'. [ 145.068082][ T5628] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.112120][ T7283] netlink: 8 bytes leftover after parsing attributes in process `syz.6.441'. [ 145.112154][ T7283] netlink: 4 bytes leftover after parsing attributes in process `syz.6.441'. [ 145.112175][ T7283] netlink: 'syz.6.441': attribute type 18 has an invalid length. [ 145.118062][ T7284] ieee802154 phy0 wpan0: encryption failed: -22 [ 145.119680][ T7284] netlink: 112 bytes leftover after parsing attributes in process `syz.1.442'. [ 145.120633][ T7286] ieee802154 phy0 wpan0: encryption failed: -22 [ 145.172519][ T5018] team0: Port device bridge1 removed [ 145.178728][ T5018] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.205476][ T5018] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.231395][ T5018] bond0 (unregistering): Released all slaves [ 145.241323][ T7278] tipc: Bearer : already 2 bearers with priority 10 [ 145.241355][ T7278] tipc: Bearer : trying with adjusted priority [ 145.241385][ T7278] netlink: 20 bytes leftover after parsing attributes in process `syz.6.441'. [ 145.241400][ T7278] tipc: Invalid UDP bearer configuration [ 145.241426][ T7278] tipc: Enabling of bearer rejected, failed to enable media [ 145.506571][ T7325] loop0: detected capacity change from 0 to 8 [ 145.509587][ T7325] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 145.509615][ T7325] unable to read xattr id index table [ 145.514912][ T7325] SQUASHFS error: zlib decompression failed, data probably corrupt [ 145.514941][ T7325] SQUASHFS error: Failed to read block 0x9b: -5 [ 145.514962][ T7325] SQUASHFS error: Unable to read metadata cache entry [99] [ 145.514976][ T7325] SQUASHFS error: Unable to read inode 0x127 [ 145.529513][ T4403] 8021q: adding VLAN 0 to HW filter on device eth12 [ 145.555173][ T7205] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.555226][ T7205] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.555393][ T7205] bridge_slave_0: entered allmulticast mode [ 145.555888][ T7205] bridge_slave_0: entered promiscuous mode [ 145.556714][ T7205] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.556732][ T7205] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.556787][ T7205] bridge_slave_1: entered allmulticast mode [ 145.557229][ T7205] bridge_slave_1: entered promiscuous mode [ 145.577340][ T7205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.581845][ T7205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.652111][ T5018] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.652147][ T5018] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.655217][ T5018] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.655245][ T5018] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.665347][ T5018] veth0_macvtap: left promiscuous mode [ 145.666526][ T5018] veth1_vlan: left promiscuous mode [ 145.667634][ T5018] veth0_vlan: left promiscuous mode [ 145.770317][ T5018] team0 (unregistering): Port device team_slave_1 removed [ 145.775839][ T5018] team0 (unregistering): Port device team_slave_0 removed [ 145.838988][ T7205] team0: Port device team_slave_0 added [ 145.839829][ T7205] team0: Port device team_slave_1 added [ 145.850004][ T50] Bluetooth: hci3: command tx timeout [ 145.888297][ T7205] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.888334][ T7205] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 145.888365][ T7205] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.898430][ T7342] Unknown options in mask b7f2 [ 145.901436][ T7205] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.901461][ T7205] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 145.901473][ T7205] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.927182][ T7205] hsr_slave_0: entered promiscuous mode [ 145.927625][ T7205] hsr_slave_1: entered promiscuous mode [ 145.927838][ T7205] debugfs: 'hsr0' already exists in 'hsr' [ 145.927855][ T7205] Cannot create hsr debugfs directory [ 146.038971][ T5018] IPVS: stop unused estimator thread 0... [ 146.144279][ T4403] 8021q: adding VLAN 0 to HW filter on device eth13 [ 146.654417][ T7205] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 146.661094][ T7205] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 146.661736][ T7205] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 146.667653][ T7205] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 146.668343][ T7205] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 146.673077][ T7205] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 146.674332][ T7205] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 146.677095][ T7205] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 146.772058][ T7205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.790769][ T7205] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.796505][ T5023] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.796568][ T5023] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.801119][ T5023] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.801181][ T5023] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.023993][ T7205] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.067580][ T7464] nbd: socks must be embedded in a SOCK_ITEM attr [ 147.070437][ T7205] veth0_vlan: entered promiscuous mode [ 147.077420][ T7185] block nbd64: NBD_DISCONNECT [ 147.090752][ T7205] veth1_vlan: entered promiscuous mode [ 147.098689][ T7205] veth0_macvtap: entered promiscuous mode [ 147.100953][ T7468] nbd: socks must be embedded in a SOCK_ITEM attr [ 147.131463][ T7205] veth1_macvtap: entered promiscuous mode [ 147.135021][ T7205] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.156576][ T7205] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.183513][ T7477] loop0: detected capacity change from 0 to 1024 [ 147.196367][ T7185] udevd[7185]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 147.215705][ T7477] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.223236][ T7477] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 147.242249][ T7483] synth uevent: /bus/acpi: unknown uevent action string [ 147.254109][ T7477] overlay: Bad value for 'nfs_export' [ 147.261312][ T6806] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.261837][ T6806] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.261859][ T6806] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.261879][ T6806] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.267168][ T6806] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.267181][ T6806] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.274121][ T7477] fuse: Bad value for 'group_id' [ 147.275674][ T6806] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.275701][ T6806] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.283108][ T7477] fuse: Bad value for 'group_id' [ 147.345734][ T4724] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.353344][ T7497] loop7: detected capacity change from 0 to 1024 [ 147.356473][ T7497] EXT4-fs (loop7): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 147.363344][ T7497] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 2: comm syz.7.472: lblock 2 mapped to illegal pblock 2 (length 1) [ 147.363380][ T7497] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 147.364005][ T7497] Quota error (device loop7): qtree_write_dquot: dquota write failed [ 147.364057][ T7497] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 48: comm syz.7.472: lblock 0 mapped to illegal pblock 48 (length 1) [ 147.364224][ T7497] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 147.364401][ T7497] Quota error (device loop7): v2_write_file_info: Can't write info structure [ 147.364420][ T7497] EXT4-fs error (device loop7): ext4_acquire_dquot:7041: comm syz.7.472: Failed to acquire dquot type 0 [ 147.364439][ T7497] loop7: lost filesystem error report for type 5 error -117 [ 147.364710][ T7497] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 147.364731][ T7497] loop7: lost filesystem error report for type 5 error -117 [ 147.365855][ T7497] EXT4-fs error (device loop7): ext4_evict_inode:267: inode #11: comm syz.7.472: mark_inode_dirty error [ 147.365888][ T7497] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 147.366009][ T7497] EXT4-fs warning (device loop7): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 147.366064][ T7497] EXT4-fs (loop7): 1 orphan inode deleted [ 147.366605][ T7497] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.397765][ T6806] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:26: lblock 1 mapped to illegal pblock 1 (length 1) [ 147.417367][ T6806] Quota error (device loop7): remove_tree: Can't read quota data block 1 [ 147.417390][ T6806] EXT4-fs error (device loop7): ext4_release_dquot:7077: comm kworker/u8:26: Failed to release dquot type 0 [ 147.424583][ T7497] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.433033][ T7497] EXT4-fs error (device loop7): __ext4_get_inode_loc:4886: comm syz.7.472: Invalid inode table block 1 in block_group 0 [ 147.433118][ T7497] loop7: lost filesystem error report for type 5 error -117 [ 147.435697][ T7497] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 147.435760][ T7497] loop7: lost filesystem error report for type 5 error -117 [ 147.436122][ T7497] EXT4-fs error (device loop7): ext4_quota_off:7325: inode #3: comm syz.7.472: mark_inode_dirty error [ 147.436153][ T7497] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 147.723526][ T7497] loop7: detected capacity change from 0 to 1024 [ 147.729644][ T7497] EXT4-fs (loop7): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 147.734724][ T7497] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 2: comm syz.7.472: lblock 2 mapped to illegal pblock 2 (length 1) [ 147.737695][ T7497] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 147.737916][ T7497] Quota error (device loop7): qtree_write_dquot: dquota write failed [ 147.739918][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 147.739931][ C1] EXT4-fs (loop7): initial error at time 147: ext4_map_blocks:791: inode 3: block 2 [ 147.739957][ C1] EXT4-fs (loop7): last error at time 147: ext4_map_blocks:791: inode 3: block 2 [ 147.740839][ T7497] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 48: comm syz.7.472: lblock 0 mapped to illegal pblock 48 (length 1) [ 147.740862][ T7497] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 147.745371][ T7497] Quota error (device loop7): v2_write_file_info: Can't write info structure [ 147.745397][ T7497] EXT4-fs error (device loop7): ext4_acquire_dquot:7041: comm syz.7.472: Failed to acquire dquot type 0 [ 147.745409][ T7497] loop7: lost filesystem error report for type 5 error -117 [ 147.746240][ T7497] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 147.746254][ T7497] loop7: lost filesystem error report for type 5 error -117 [ 147.748572][ T7497] EXT4-fs error (device loop7): ext4_evict_inode:267: inode #11: comm syz.7.472: mark_inode_dirty error [ 147.748601][ T7497] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 147.748709][ T7497] EXT4-fs warning (device loop7): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 147.748747][ T7497] EXT4-fs (loop7): 1 orphan inode deleted [ 147.749187][ T7497] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.771110][ T5025] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:16: lblock 1 mapped to illegal pblock 1 (length 1) [ 147.773017][ T5025] Quota error (device loop7): remove_tree: Can't read quota data block 1 [ 147.773037][ T5025] EXT4-fs error (device loop7): ext4_release_dquot:7077: comm kworker/u8:16: Failed to release dquot type 0 [ 147.777431][ T7497] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.778945][ T7497] EXT4-fs error (device loop7): __ext4_get_inode_loc:4886: comm syz.7.472: Invalid inode table block 1 in block_group 0 [ 147.778959][ T7497] loop7: lost filesystem error report for type 5 error -117 [ 147.779060][ T7497] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 147.779069][ T7497] loop7: lost filesystem error report for type 5 error -117 [ 147.779132][ T7497] EXT4-fs error (device loop7): ext4_quota_off:7325: inode #3: comm syz.7.472: mark_inode_dirty error [ 147.779149][ T7497] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 147.808817][ T7497] loop7: detected capacity change from 0 to 1024 [ 147.812448][ T7497] EXT4-fs (loop7): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 147.816241][ T7497] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 2: comm syz.7.472: lblock 2 mapped to illegal pblock 2 (length 1) [ 147.816279][ T7497] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 147.816648][ T7497] Quota error (device loop7): qtree_write_dquot: dquota write failed [ 147.816682][ T7497] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 48: comm syz.7.472: lblock 0 mapped to illegal pblock 48 (length 1) [ 147.816698][ T7497] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 147.816794][ T7497] Quota error (device loop7): v2_write_file_info: Can't write info structure [ 147.816802][ T7497] EXT4-fs error (device loop7): ext4_acquire_dquot:7041: comm syz.7.472: Failed to acquire dquot type 0 [ 147.816812][ T7497] loop7: lost filesystem error report for type 5 error -117 [ 147.816957][ T7497] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 147.816966][ T7497] loop7: lost filesystem error report for type 5 error -117 [ 147.818173][ T7497] EXT4-fs error (device loop7): ext4_evict_inode:267: inode #11: comm syz.7.472: mark_inode_dirty error [ 147.818306][ T7497] EXT4-fs warning (device loop7): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 147.818338][ T7497] EXT4-fs (loop7): 1 orphan inode deleted [ 147.818767][ T7497] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.823712][ T12] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 147.824828][ T12] Quota error (device loop7): remove_tree: Can't read quota data block 1 [ 147.824847][ T12] EXT4-fs error (device loop7): ext4_release_dquot:7077: comm kworker/u8:0: Failed to release dquot type 0 [ 147.827940][ T7497] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.831508][ T7497] EXT4-fs error (device loop7): __ext4_get_inode_loc:4886: comm syz.7.472: Invalid inode table block 1 in block_group 0 [ 147.831619][ T7497] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 147.831689][ T7497] EXT4-fs error (device loop7): ext4_quota_off:7325: inode #3: comm syz.7.472: mark_inode_dirty error [ 147.866151][ T7497] loop7: detected capacity change from 0 to 1024 [ 147.868837][ T7497] EXT4-fs (loop7): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 147.882004][ T7497] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 2: comm syz.7.472: lblock 2 mapped to illegal pblock 2 (length 1) [ 147.885042][ T7497] Quota error (device loop7): qtree_write_dquot: dquota write failed [ 147.885066][ T7497] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 48: comm syz.7.472: lblock 0 mapped to illegal pblock 48 (length 1) [ 147.886998][ T7497] EXT4-fs error (device loop7): ext4_acquire_dquot:7041: comm syz.7.472: Failed to acquire dquot type 0 [ 147.889980][ C0] EXT4-fs (loop7): error count since last fsck: 3 [ 147.889993][ C0] EXT4-fs (loop7): initial error at time 147: ext4_map_blocks:791: inode 3: block 2 [ 147.890016][ C0] EXT4-fs (loop7): last error at time 147: ext4_acquire_dquot:7041 [ 147.890389][ T7497] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 147.900291][ T7497] EXT4-fs error (device loop7): ext4_evict_inode:267: inode #11: comm syz.7.472: mark_inode_dirty error [ 147.903045][ T7497] EXT4-fs warning (device loop7): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 147.903109][ T7497] EXT4-fs (loop7): 1 orphan inode deleted [ 147.903570][ T7497] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.911252][ T6806] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:26: lblock 1 mapped to illegal pblock 1 (length 1) [ 147.915792][ T6806] EXT4-fs error (device loop7): ext4_release_dquot:7077: comm kworker/u8:26: Failed to release dquot type 0 [ 147.922706][ T7497] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.925183][ T7497] EXT4-fs error (device loop7): __ext4_get_inode_loc:4886: comm syz.7.472: Invalid inode table block 1 in block_group 0 [ 147.929087][ T7497] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 147.930689][ T50] Bluetooth: hci3: command tx timeout [ 147.932771][ T7497] EXT4-fs error (device loop7): ext4_quota_off:7325: inode #3: comm syz.7.472: mark_inode_dirty error [ 147.947950][ T7497] loop7: detected capacity change from 0 to 1024 [ 147.951467][ T7497] EXT4-fs (loop7): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 147.956411][ T7497] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 2: comm syz.7.472: lblock 2 mapped to illegal pblock 2 (length 1) [ 147.959820][ T7497] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 48: comm syz.7.472: lblock 0 mapped to illegal pblock 48 (length 1) [ 147.959927][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 147.959945][ C0] EXT4-fs (loop7): initial error at time 147: ext4_map_blocks:791: inode 3: block 2 [ 147.959986][ C0] EXT4-fs (loop7): last error at time 147: ext4_map_blocks:791: inode 3: block 2 [ 147.969258][ T7497] EXT4-fs error (device loop7): ext4_acquire_dquot:7041: comm syz.7.472: Failed to acquire dquot type 0 [ 147.971000][ T7497] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 147.971486][ T7497] EXT4-fs error (device loop7): ext4_evict_inode:267: inode #11: comm syz.7.472: mark_inode_dirty error [ 147.971596][ T7497] EXT4-fs warning (device loop7): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 147.971648][ T7497] EXT4-fs (loop7): 1 orphan inode deleted [ 147.972069][ T7497] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.975290][ T5018] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 147.975809][ T5018] EXT4-fs error (device loop7): ext4_release_dquot:7077: comm kworker/u8:9: Failed to release dquot type 0 [ 147.977030][ T7497] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.977324][ T7497] EXT4-fs error (device loop7): __ext4_get_inode_loc:4886: comm syz.7.472: Invalid inode table block 1 in block_group 0 [ 147.977412][ T7497] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 147.977477][ T7497] EXT4-fs error (device loop7): ext4_quota_off:7325: inode #3: comm syz.7.472: mark_inode_dirty error [ 148.014734][ T7497] loop7: detected capacity change from 0 to 1024 [ 148.016726][ T7497] EXT4-fs (loop7): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 148.021291][ T7497] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 2: comm syz.7.472: lblock 2 mapped to illegal pblock 2 (length 1) [ 148.021419][ T7497] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 48: comm syz.7.472: lblock 0 mapped to illegal pblock 48 (length 1) [ 148.021499][ T7497] EXT4-fs error (device loop7): ext4_acquire_dquot:7041: comm syz.7.472: Failed to acquire dquot type 0 [ 148.021591][ T7497] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 148.021661][ T7497] EXT4-fs error (device loop7): ext4_evict_inode:267: inode #11: comm syz.7.472: mark_inode_dirty error [ 148.021728][ T7497] EXT4-fs warning (device loop7): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 148.021757][ T7497] EXT4-fs (loop7): 1 orphan inode deleted [ 148.022631][ T7497] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.026729][ T6806] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:26: lblock 1 mapped to illegal pblock 1 (length 1) [ 148.026937][ T6806] EXT4-fs error (device loop7): ext4_release_dquot:7077: comm kworker/u8:26: Failed to release dquot type 0 [ 148.028236][ T7497] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.029367][ T7497] EXT4-fs error (device loop7): __ext4_get_inode_loc:4886: comm syz.7.472: Invalid inode table block 1 in block_group 0 [ 148.029532][ T7497] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 148.029602][ T7497] EXT4-fs error (device loop7): ext4_quota_off:7325: inode #3: comm syz.7.472: mark_inode_dirty error [ 148.059003][ T7497] EXT4-fs (loop7): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 148.063805][ T7497] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 2: comm syz.7.472: lblock 2 mapped to illegal pblock 2 (length 1) [ 148.063992][ T7497] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 48: comm syz.7.472: lblock 0 mapped to illegal pblock 48 (length 1) [ 148.064249][ T7497] EXT4-fs error (device loop7): ext4_acquire_dquot:7041: comm syz.7.472: Failed to acquire dquot type 0 [ 148.064380][ T7497] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 148.064458][ T7497] EXT4-fs error (device loop7): ext4_evict_inode:267: inode #11: comm syz.7.472: mark_inode_dirty error [ 148.064886][ T7497] EXT4-fs warning (device loop7): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 148.064937][ T7497] EXT4-fs (loop7): 1 orphan inode deleted [ 148.065378][ T7497] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.067664][ T5018] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 148.067789][ T5018] EXT4-fs error (device loop7): ext4_release_dquot:7077: comm kworker/u8:9: Failed to release dquot type 0 [ 148.071349][ T7497] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.073410][ T7497] EXT4-fs error (device loop7): __ext4_get_inode_loc:4886: comm syz.7.472: Invalid inode table block 1 in block_group 0 [ 148.073507][ T7497] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 148.073698][ T7497] EXT4-fs error (device loop7): ext4_quota_off:7325: inode #3: comm syz.7.472: mark_inode_dirty error [ 148.103530][ T7497] EXT4-fs (loop7): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 148.108531][ T7497] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 2: comm syz.7.472: lblock 2 mapped to illegal pblock 2 (length 1) [ 148.111816][ T7497] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 48: comm syz.7.472: lblock 0 mapped to illegal pblock 48 (length 1) [ 148.114724][ T7497] EXT4-fs error (device loop7): ext4_acquire_dquot:7041: comm syz.7.472: Failed to acquire dquot type 0 [ 148.117065][ T7497] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 148.119931][ C1] EXT4-fs (loop7): error count since last fsck: 4 [ 148.119949][ C1] EXT4-fs (loop7): initial error at time 148: ext4_map_blocks:791: inode 3: block 2 [ 148.119969][ C1] EXT4-fs (loop7): last error at time 148: ext4_reserve_inode_write:6435 [ 148.124947][ T7497] EXT4-fs error (device loop7): ext4_evict_inode:267: inode #11: comm syz.7.472: mark_inode_dirty error [ 148.127526][ T7497] EXT4-fs warning (device loop7): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 148.129622][ T7497] EXT4-fs (loop7): 1 orphan inode deleted [ 148.131270][ T5018] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 148.131421][ T5018] EXT4-fs error (device loop7): ext4_release_dquot:7077: comm kworker/u8:9: Failed to release dquot type 0 [ 148.137135][ T7497] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.146391][ T7497] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.148858][ T7497] EXT4-fs error (device loop7): __ext4_get_inode_loc:4886: comm syz.7.472: Invalid inode table block 1 in block_group 0 [ 148.152017][ T7497] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 148.154227][ T7497] EXT4-fs error (device loop7): ext4_quota_off:7325: inode #3: comm syz.7.472: mark_inode_dirty error [ 148.169638][ T7497] set_capacity_and_notify: 2 callbacks suppressed [ 148.171876][ T7497] loop7: detected capacity change from 0 to 1024 [ 148.181295][ T7497] EXT4-fs (loop7): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 148.220267][ T7497] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 2: comm syz.7.472: lblock 2 mapped to illegal pblock 2 (length 1) [ 148.220650][ T7497] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 48: comm syz.7.472: lblock 0 mapped to illegal pblock 48 (length 1) [ 148.221059][ T7497] EXT4-fs error (device loop7): ext4_acquire_dquot:7041: comm syz.7.472: Failed to acquire dquot type 0 [ 148.221214][ T7497] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 148.221651][ T7497] EXT4-fs error (device loop7): ext4_evict_inode:267: inode #11: comm syz.7.472: mark_inode_dirty error [ 148.221916][ T7497] EXT4-fs warning (device loop7): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 148.221973][ T7497] EXT4-fs (loop7): 1 orphan inode deleted [ 148.222428][ T7497] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.224557][ T5018] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 148.224725][ T5018] EXT4-fs error (device loop7): ext4_release_dquot:7077: comm kworker/u8:9: Failed to release dquot type 0 [ 148.228150][ T7497] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.232628][ T7497] EXT4-fs error (device loop7): __ext4_get_inode_loc:4886: comm syz.7.472: Invalid inode table block 1 in block_group 0 [ 148.232767][ T7497] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 148.232839][ T7497] EXT4-fs error (device loop7): ext4_quota_off:7325: inode #3: comm syz.7.472: mark_inode_dirty error [ 148.264827][ T7528] overlayfs: failed to clone lowerpath [ 148.276791][ T7528] loop3: detected capacity change from 0 to 512 [ 148.278335][ T7497] loop7: detected capacity change from 0 to 1024 [ 148.280501][ T7528] EXT4-fs: Ignoring removed oldalloc option [ 148.282321][ T7497] EXT4-fs (loop7): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 148.284133][ T7528] EXT4-fs (loop3): Test dummy encryption mode enabled [ 148.284336][ T7497] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 2: comm syz.7.472: lblock 2 mapped to illegal pblock 2 (length 1) [ 148.284559][ T7497] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 48: comm syz.7.472: lblock 0 mapped to illegal pblock 48 (length 1) [ 148.284654][ T7497] EXT4-fs error (device loop7): ext4_acquire_dquot:7041: comm syz.7.472: Failed to acquire dquot type 0 [ 148.284744][ T7497] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 148.284812][ T7497] EXT4-fs error (device loop7): ext4_evict_inode:267: inode #11: comm syz.7.472: mark_inode_dirty error [ 148.285040][ T7497] EXT4-fs warning (device loop7): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 148.285085][ T7497] EXT4-fs (loop7): 1 orphan inode deleted [ 148.286287][ T7497] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.307100][ T7531] __nla_validate_parse: 7 callbacks suppressed [ 148.307151][ T7531] netlink: 104 bytes leftover after parsing attributes in process `syz.6.476'. [ 148.312437][ T5018] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 148.316403][ T5018] EXT4-fs error (device loop7): ext4_release_dquot:7077: comm kworker/u8:9: Failed to release dquot type 0 [ 148.317699][ T7497] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.320369][ T7497] EXT4-fs error (device loop7): __ext4_get_inode_loc:4886: comm syz.7.472: Invalid inode table block 1 in block_group 0 [ 148.320482][ T7497] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 148.320558][ T7497] EXT4-fs error (device loop7): ext4_quota_off:7325: inode #3: comm syz.7.472: mark_inode_dirty error [ 148.338892][ T7528] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.371370][ T7497] loop7: detected capacity change from 0 to 1024 [ 148.373840][ T7497] EXT4-fs (loop7): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 148.377462][ T7497] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 2: comm syz.7.472: lblock 2 mapped to illegal pblock 2 (length 1) [ 148.381083][ T7497] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 48: comm syz.7.472: lblock 0 mapped to illegal pblock 48 (length 1) [ 148.384404][ T7497] EXT4-fs error (device loop7): ext4_acquire_dquot:7041: comm syz.7.472: Failed to acquire dquot type 0 [ 148.387074][ T7497] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 148.389463][ T7497] EXT4-fs error (device loop7): ext4_evict_inode:267: inode #11: comm syz.7.472: mark_inode_dirty error [ 148.391816][ C1] EXT4-fs (loop7): error count since last fsck: 5 [ 148.391828][ C1] EXT4-fs (loop7): initial error at time 148: ext4_map_blocks:791: inode 3: block 2 [ 148.391847][ C1] EXT4-fs (loop7): last error at time 148: ext4_evict_inode:267: inode 11 [ 148.392217][ T7497] EXT4-fs warning (device loop7): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 148.392274][ T7497] EXT4-fs (loop7): 1 orphan inode deleted [ 148.392695][ T7497] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.393500][ T5025] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:16: lblock 1 mapped to illegal pblock 1 (length 1) [ 148.393701][ T5025] EXT4-fs error (device loop7): ext4_release_dquot:7077: comm kworker/u8:16: Failed to release dquot type 0 [ 148.394921][ T7528] EXT4-fs error (device loop3): ext4_readdir:225: inode #12: comm syz.3.475: path (unknown): directory fails checksum at offset 0 [ 148.397243][ T7497] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.404155][ T7497] EXT4-fs error (device loop7): __ext4_get_inode_loc:4886: comm syz.7.472: Invalid inode table block 1 in block_group 0 [ 148.404262][ T7497] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 148.404810][ T7497] EXT4-fs error (device loop7): ext4_quota_off:7325: inode #3: comm syz.7.472: mark_inode_dirty error [ 148.442300][ T7497] loop7: detected capacity change from 0 to 1024 [ 148.444282][ T7497] EXT4-fs (loop7): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 148.457862][ T7497] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 2: comm syz.7.472: lblock 2 mapped to illegal pblock 2 (length 1) [ 148.462727][ T7497] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 48: comm syz.7.472: lblock 0 mapped to illegal pblock 48 (length 1) [ 148.468023][ T7497] EXT4-fs error (device loop7): ext4_acquire_dquot:7041: comm syz.7.472: Failed to acquire dquot type 0 [ 148.468291][ T7497] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 148.468612][ T7497] EXT4-fs error (device loop7): ext4_evict_inode:267: inode #11: comm syz.7.472: mark_inode_dirty error [ 148.469121][ T7497] EXT4-fs warning (device loop7): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 148.469198][ T7497] EXT4-fs (loop7): 1 orphan inode deleted [ 148.469642][ T7497] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.477074][ T5025] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:16: lblock 1 mapped to illegal pblock 1 (length 1) [ 148.479146][ T5025] EXT4-fs error (device loop7): ext4_release_dquot:7077: comm kworker/u8:16: Failed to release dquot type 0 [ 148.483613][ T7497] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.488042][ T7497] EXT4-fs error (device loop7): __ext4_get_inode_loc:4886: comm syz.7.472: Invalid inode table block 1 in block_group 0 [ 148.488203][ T7497] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 148.488276][ T7497] EXT4-fs error (device loop7): ext4_quota_off:7325: inode #3: comm syz.7.472: mark_inode_dirty error [ 148.501239][ T7555] loop1: detected capacity change from 0 to 512 [ 148.523695][ T7497] loop7: detected capacity change from 0 to 1024 [ 148.525378][ T7497] EXT4-fs (loop7): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 148.530518][ T7497] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 2: comm syz.7.472: lblock 2 mapped to illegal pblock 2 (length 1) [ 148.530638][ T7497] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 48: comm syz.7.472: lblock 0 mapped to illegal pblock 48 (length 1) [ 148.530784][ T7497] EXT4-fs error (device loop7): ext4_acquire_dquot:7041: comm syz.7.472: Failed to acquire dquot type 0 [ 148.530879][ T7497] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 148.530946][ T7497] EXT4-fs error (device loop7): ext4_evict_inode:267: inode #11: comm syz.7.472: mark_inode_dirty error [ 148.531013][ T7497] EXT4-fs warning (device loop7): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 148.531042][ T7497] EXT4-fs (loop7): 1 orphan inode deleted [ 148.531459][ T7497] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.539077][ T5025] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:16: lblock 1 mapped to illegal pblock 1 (length 1) [ 148.539271][ T5025] EXT4-fs error (device loop7): ext4_release_dquot:7077: comm kworker/u8:16: Failed to release dquot type 0 [ 148.542176][ T7497] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.543079][ T7497] EXT4-fs error (device loop7): __ext4_get_inode_loc:4886: comm syz.7.472: Invalid inode table block 1 in block_group 0 [ 148.543197][ T7497] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 148.543266][ T7497] EXT4-fs error (device loop7): ext4_quota_off:7325: inode #3: comm syz.7.472: mark_inode_dirty error [ 148.574024][ T7205] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.581833][ T7559] Soft offlining pfn 0x13cf20 at process virtual address 0x20000000 [ 148.586561][ T7559] Soft offline: 0x13cf20: thp split failed [ 148.596667][ T7497] loop7: detected capacity change from 0 to 1024 [ 148.599605][ T7497] EXT4-fs (loop7): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 148.621253][ T7497] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 2: comm syz.7.472: lblock 2 mapped to illegal pblock 2 (length 1) [ 148.621378][ T7497] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 48: comm syz.7.472: lblock 0 mapped to illegal pblock 48 (length 1) [ 148.621478][ T7497] EXT4-fs error (device loop7): ext4_acquire_dquot:7041: comm syz.7.472: Failed to acquire dquot type 0 [ 148.626451][ T7497] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 148.626833][ T7497] EXT4-fs error (device loop7): ext4_evict_inode:267: inode #11: comm syz.7.472: mark_inode_dirty error [ 148.627026][ T7497] EXT4-fs warning (device loop7): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 148.627063][ T7497] EXT4-fs (loop7): 1 orphan inode deleted [ 148.628212][ T7497] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.629114][ T5025] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:16: lblock 1 mapped to illegal pblock 1 (length 1) [ 148.629236][ T5025] EXT4-fs error (device loop7): ext4_release_dquot:7077: comm kworker/u8:16: Failed to release dquot type 0 [ 148.630658][ T7497] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.631362][ T7497] EXT4-fs error (device loop7): __ext4_get_inode_loc:4886: comm syz.7.472: Invalid inode table block 1 in block_group 0 [ 148.631686][ T7497] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 148.631793][ T7497] EXT4-fs error (device loop7): ext4_quota_off:7325: inode #3: comm syz.7.472: mark_inode_dirty error [ 148.665738][ T7567] loop1: detected capacity change from 0 to 128 [ 148.699957][ T7567] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 148.700043][ T7567] System zones: 1-3, 19-19, 35-36 [ 148.700672][ T7567] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 148.712433][ T7497] loop7: detected capacity change from 0 to 1024 [ 148.723887][ T7497] EXT4-fs (loop7): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 148.756915][ T7497] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 2: comm syz.7.472: lblock 2 mapped to illegal pblock 2 (length 1) [ 148.759936][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 148.759965][ C1] EXT4-fs (loop7): initial error at time 148: ext4_map_blocks:791: inode 3: block 2 [ 148.760012][ C1] EXT4-fs (loop7): last error at time 148: ext4_map_blocks:791: inode 3: block 2 [ 148.766717][ T7497] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 48: comm syz.7.472: lblock 0 mapped to illegal pblock 48 (length 1) [ 148.769526][ T7497] EXT4-fs error (device loop7): ext4_acquire_dquot:7041: comm syz.7.472: Failed to acquire dquot type 0 [ 148.772035][ T7497] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 148.773758][ T7497] EXT4-fs error (device loop7): ext4_evict_inode:267: inode #11: comm syz.7.472: mark_inode_dirty error [ 148.777605][ T7497] EXT4-fs warning (device loop7): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 148.782061][ T7497] EXT4-fs (loop7): 1 orphan inode deleted [ 148.794833][ T5025] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:16: lblock 1 mapped to illegal pblock 1 (length 1) [ 148.795015][ T5025] EXT4-fs error (device loop7): ext4_release_dquot:7077: comm kworker/u8:16: Failed to release dquot type 0 [ 148.795286][ T7568] netlink: 28 bytes leftover after parsing attributes in process `syz.3.481'. [ 148.801935][ T7497] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.547784][ T7497] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.551124][ T4710] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 149.551791][ T7497] EXT4-fs error (device loop7): __ext4_get_inode_loc:4886: comm syz.7.472: Invalid inode table block 1 in block_group 0 [ 149.551928][ T7497] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 149.552001][ T7497] EXT4-fs error (device loop7): ext4_quota_off:7325: inode #3: comm syz.7.472: mark_inode_dirty error [ 149.594566][ T7580] FAULT_INJECTION: forcing a failure. [ 149.594566][ T7580] name failslab, interval 1, probability 0, space 0, times 0 [ 149.594589][ T7580] CPU: 0 UID: 0 PID: 7580 Comm: syz.6.486 Not tainted syzkaller #0 PREEMPT [ 149.594600][ T7580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 149.594606][ T7580] Call trace: [ 149.594608][ T7580] show_stack+0x2c/0x3c (C) [ 149.594629][ T7580] __dump_stack+0x30/0x40 [ 149.594641][ T7580] dump_stack_lvl+0xd8/0x12c [ 149.594653][ T7580] dump_stack+0x1c/0x28 [ 149.594664][ T7580] should_fail_ex+0x41c/0x590 [ 149.594673][ T7580] should_failslab+0xc4/0x120 [ 149.594683][ T7580] __kmalloc_noprof+0x108/0x6b8 [ 149.594693][ T7580] tomoyo_realpath_from_path+0xbc/0x4dc [ 149.594704][ T7580] tomoyo_path_number_perm+0x1f0/0x500 [ 149.594713][ T7580] tomoyo_file_ioctl+0x2c/0x3c [ 149.594723][ T7580] security_file_ioctl+0xdc/0x2b0 [ 149.594732][ T7580] __arm64_sys_ioctl+0xb0/0x1cc [ 149.594745][ T7580] invoke_syscall+0x98/0x244 [ 149.594757][ T7580] el0_svc_common+0xec/0x23c [ 149.594769][ T7580] do_el0_svc+0x4c/0x5c [ 149.594781][ T7580] el0_svc+0x64/0x260 [ 149.594792][ T7580] el0t_64_sync_handler+0x44/0x104 [ 149.594802][ T7580] el0t_64_sync+0x198/0x19c [ 149.594812][ T7580] ERROR: Out of memory at tomoyo_realpath_from_path. [ 149.767993][ T7590] CUSE: unknown device info "" [ 149.768026][ T7590] CUSE: unknown device info "" [ 149.768286][ T7590] CUSE: unknown device info "w" [ 149.768300][ T7590] CUSE: zero length info key specified [ 149.771455][ T7588] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 149.796822][ T7497] EXT4-fs (loop7): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 149.824223][ T7497] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 2: comm syz.7.472: lblock 2 mapped to illegal pblock 2 (length 1) [ 149.829941][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 149.829969][ C1] EXT4-fs (loop7): initial error at time 149: ext4_map_blocks:791: inode 3: block 2 [ 149.830011][ C1] EXT4-fs (loop7): last error at time 149: ext4_map_blocks:791: inode 3: block 2 [ 149.830445][ T7205] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 149.838619][ T7497] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 48: comm syz.7.472: lblock 0 mapped to illegal pblock 48 (length 1) [ 149.847781][ T7497] EXT4-fs error (device loop7): ext4_acquire_dquot:7041: comm syz.7.472: Failed to acquire dquot type 0 [ 149.851372][ T7497] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 149.855278][ T7497] EXT4-fs error (device loop7): ext4_evict_inode:267: inode #11: comm syz.7.472: mark_inode_dirty error [ 149.858172][ T7497] EXT4-fs warning (device loop7): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 149.858231][ T7497] EXT4-fs (loop7): 1 orphan inode deleted [ 149.858662][ T7497] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.869610][ T5025] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:16: lblock 1 mapped to illegal pblock 1 (length 1) [ 149.869929][ T5025] EXT4-fs error (device loop7): ext4_release_dquot:7077: comm kworker/u8:16: Failed to release dquot type 0 [ 149.871092][ T7497] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.871384][ T7497] EXT4-fs error (device loop7): __ext4_get_inode_loc:4886: comm syz.7.472: Invalid inode table block 1 in block_group 0 [ 149.871465][ T7497] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 149.871533][ T7497] EXT4-fs error (device loop7): ext4_quota_off:7325: inode #3: comm syz.7.472: mark_inode_dirty error [ 149.893835][ T7595] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 149.897730][ T7497] EXT4-fs (loop7): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 149.927391][ T7497] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 2: comm syz.7.472: lblock 2 mapped to illegal pblock 2 (length 1) [ 149.927509][ T7497] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 48: comm syz.7.472: lblock 0 mapped to illegal pblock 48 (length 1) [ 149.927581][ T7497] EXT4-fs error (device loop7): ext4_acquire_dquot:7041: comm syz.7.472: Failed to acquire dquot type 0 [ 149.927665][ T7497] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 149.927734][ T7497] EXT4-fs error (device loop7): ext4_evict_inode:267: inode #11: comm syz.7.472: mark_inode_dirty error [ 149.927800][ T7497] EXT4-fs warning (device loop7): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 149.927829][ T7497] EXT4-fs (loop7): 1 orphan inode deleted [ 149.928261][ T7497] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.928474][ T7595] EXT4-fs (loop0): 1 truncate cleaned up [ 149.928908][ T7595] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.939552][ T7595] net_ratelimit: 38 callbacks suppressed [ 149.939565][ T7595] ip_tables: iptables: counters copy to user failed while replacing table [ 149.939833][ T7595] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x11 [ 149.944303][ T12] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 149.944479][ T12] EXT4-fs error (device loop7): ext4_release_dquot:7077: comm kworker/u8:0: Failed to release dquot type 0 [ 149.945707][ T7497] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.945997][ T7497] EXT4-fs error (device loop7): __ext4_get_inode_loc:4886: comm syz.7.472: Invalid inode table block 1 in block_group 0 [ 149.946077][ T7497] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 149.946151][ T7497] EXT4-fs error (device loop7): ext4_quota_off:7325: inode #3: comm syz.7.472: mark_inode_dirty error [ 150.009978][ T50] Bluetooth: hci3: command tx timeout [ 150.036955][ T4724] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.049846][ T7609] netlink: 52 bytes leftover after parsing attributes in process `syz.3.496'. [ 150.058331][ T7609] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 150.161083][ T7619] netlink: 'syz.1.501': attribute type 1 has an invalid length. [ 150.200700][ T7497] EXT4-fs (loop7): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 150.204420][ T7497] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 2: comm syz.7.472: lblock 2 mapped to illegal pblock 2 (length 1) [ 150.204787][ T7497] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 48: comm syz.7.472: lblock 0 mapped to illegal pblock 48 (length 1) [ 150.204878][ T7497] EXT4-fs error (device loop7): ext4_acquire_dquot:7041: comm syz.7.472: Failed to acquire dquot type 0 [ 150.204972][ T7497] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 150.205045][ T7497] EXT4-fs error (device loop7): ext4_evict_inode:267: inode #11: comm syz.7.472: mark_inode_dirty error [ 150.205116][ T7497] EXT4-fs warning (device loop7): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 150.205152][ T7497] EXT4-fs (loop7): 1 orphan inode deleted [ 150.205571][ T7497] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.206640][ T6812] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:31: lblock 1 mapped to illegal pblock 1 (length 1) [ 150.206778][ T6812] EXT4-fs error (device loop7): ext4_release_dquot:7077: comm kworker/u8:31: Failed to release dquot type 0 [ 150.207907][ T7497] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.208198][ T7497] EXT4-fs error (device loop7): __ext4_get_inode_loc:4886: comm syz.7.472: Invalid inode table block 1 in block_group 0 [ 150.208274][ T7497] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 150.208346][ T7497] EXT4-fs error (device loop7): ext4_quota_off:7325: inode #3: comm syz.7.472: mark_inode_dirty error [ 150.424363][ T7642] openvswitch: netlink: Actions may not be safe on all matching packets [ 150.435886][ T7640] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 150.616419][ T7651] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.662667][ T7651] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 150.714660][ T7657] netlink: 4 bytes leftover after parsing attributes in process `syz.0.512'. [ 150.727986][ T5628] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.867315][ T7673] rnbd_client L610: Mapping device /dev/ram0 on session s., (access_mode: rw, nr_poll_queues: 0) [ 150.870551][ T7673] rtrs_client L2829: pathname cannot contain / and . [ 150.923157][ T7677] tipc: Started in network mode [ 150.923204][ T7677] tipc: Node identity 163189ecf649, cluster identity 4711 [ 150.923348][ T7677] tipc: Enabled bearer , priority 0 [ 150.927273][ T7677] syzkaller0: entered promiscuous mode [ 150.927317][ T7677] syzkaller0: entered allmulticast mode [ 150.980539][ T7677] tipc: Resetting bearer [ 150.994882][ T7680] tipc: Enabling of bearer rejected, already enabled [ 151.002610][ T7676] tipc: Resetting bearer [ 151.034070][ T7679] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.517: corrupted in-inode xattr: invalid size in ea xattr [ 151.034351][ T7679] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.517: couldn't read orphan inode 15 (err -117) [ 151.035452][ T7679] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.041431][ T7676] tipc: Disabling bearer [ 151.213552][ T7679] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.517: bg 0: block 4: invalid block bitmap [ 151.284118][ T7205] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.693685][ T7722] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 151.725451][ T7724] overlay: Unknown parameter './file0/file0' [ 151.727036][ T7725] overlay: ./file0/file0 is not a directory [ 152.092557][ T50] Bluetooth: hci3: command tx timeout [ 152.145941][ T7769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.150962][ T7769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.158494][ T7770] EXT4-fs (loop3): Test dummy encryption mode enabled [ 152.160226][ T7770] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 152.160268][ T7770] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (64851!=55237) [ 152.160321][ T7770] EXT4-fs (loop3): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 152.160716][ T7770] EXT4-fs error (device loop3): __ext4_get_inode_loc:4886: comm syz.3.527: Invalid inode table block 0 in block_group 0 [ 152.180069][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 152.180085][ C0] EXT4-fs (loop3): initial error at time 152: __ext4_get_inode_loc:4886 [ 152.180100][ C0] EXT4-fs (loop3): last error at time 152: __ext4_get_inode_loc:4886 [ 152.192590][ T7770] EXT4-fs (loop3): Remounting filesystem read-only [ 152.192658][ T7770] EXT4-fs (loop3): get root inode failed [ 152.192666][ T7770] EXT4-fs (loop3): mount failed [ 152.230925][ T7771] 9p: Bad value for 'rfdno' [ 152.343939][ T7785] bridge1: entered promiscuous mode [ 152.411124][ T7784] netlink: 24 bytes leftover after parsing attributes in process `syz.0.529'. [ 152.725003][ T7796] FAULT_INJECTION: forcing a failure. [ 152.725003][ T7796] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 152.725048][ T7796] CPU: 1 UID: 0 PID: 7796 Comm: syz.1.533 Not tainted syzkaller #0 PREEMPT [ 152.725060][ T7796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 152.725066][ T7796] Call trace: [ 152.725069][ T7796] show_stack+0x2c/0x3c (C) [ 152.725088][ T7796] __dump_stack+0x30/0x40 [ 152.725101][ T7796] dump_stack_lvl+0xd8/0x12c [ 152.725113][ T7796] dump_stack+0x1c/0x28 [ 152.725124][ T7796] should_fail_ex+0x41c/0x590 [ 152.725134][ T7796] should_fail+0x14/0x24 [ 152.725141][ T7796] should_fail_usercopy+0x20/0x30 [ 152.725149][ T7796] __arm64_sys_prlimit64+0x904/0xc64 [ 152.725166][ T7796] invoke_syscall+0x98/0x244 [ 152.725178][ T7796] el0_svc_common+0xec/0x23c [ 152.725190][ T7796] do_el0_svc+0x4c/0x5c [ 152.725202][ T7796] el0_svc+0x64/0x260 [ 152.725213][ T7796] el0t_64_sync_handler+0x44/0x104 [ 152.725223][ T7796] el0t_64_sync+0x198/0x19c [ 153.156475][ T7814] EXT4-fs error (device loop7): ext4_orphan_get:1425: comm syz.7.539: bad orphan inode 15 [ 153.159740][ T7814] fserror_report: 66 callbacks suppressed [ 153.165173][ T7814] loop7: lost filesystem error report for type 5 error -117 [ 153.165444][ T7814] ext4_test_bit(bit=14, block=5) = 0 [ 153.168957][ T7814] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.177393][ T7814] EXT4-fs error (device loop7): __ext4_new_inode:1081: comm syz.7.539: reserved inode found cleared - inode=1 [ 153.221126][ T7814] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 153.263733][ T5628] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.293226][ T7819] set_capacity_and_notify: 11 callbacks suppressed [ 153.295202][ T7819] loop1: detected capacity change from 0 to 8192 [ 153.343556][ T7819] loop1: p1 p2 p3 p4[EZD] [ 153.343591][ T7819] loop1: partition table partially beyond EOD, truncated [ 153.343692][ T7819] loop1: p1 start 16384 is beyond EOD, truncated [ 153.343702][ T7819] loop1: p2 size 150994944 extends beyond EOD, truncated [ 153.344996][ T7819] loop1: p3 start 67108864 is beyond EOD, truncated [ 153.345010][ T7819] loop1: p4 size 33555584 extends beyond EOD, truncated [ 153.478721][ T7829] loop1: detected capacity change from 0 to 4096 [ 153.498284][ T7829] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.504341][ T7220] udevd[7220]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 153.509385][ T7185] udevd[7185]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 153.534405][ T7829] __quota_error: 44 callbacks suppressed [ 153.534459][ T7829] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 2585 out of range 0-6 [ 153.534508][ T7829] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 153.534532][ T7829] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.545: Failed to acquire dquot type 1 [ 153.597620][ T4710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.601999][ T7836] netlink: 20 bytes leftover after parsing attributes in process `syz.3.547'. [ 153.602121][ T7836] netlink: 20 bytes leftover after parsing attributes in process `syz.3.547'. [ 153.602230][ T7836] netlink: 20 bytes leftover after parsing attributes in process `syz.3.547'. [ 153.649182][ T7836] netlink: 20 bytes leftover after parsing attributes in process `syz.3.547'. [ 153.649355][ T7836] netlink: 20 bytes leftover after parsing attributes in process `syz.3.547'. [ 153.649448][ T7836] netlink: 20 bytes leftover after parsing attributes in process `syz.3.547'. [ 153.649531][ T7836] netlink: 20 bytes leftover after parsing attributes in process `syz.3.547'. [ 153.649620][ T7836] netlink: 20 bytes leftover after parsing attributes in process `syz.3.547'. [ 153.649695][ T7836] netlink: 20 bytes leftover after parsing attributes in process `syz.3.547'. [ 153.649761][ T7836] netlink: 20 bytes leftover after parsing attributes in process `syz.3.547'. [ 153.666777][ T7843] loop1: detected capacity change from 0 to 128 [ 153.668617][ T7844] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 153.673124][ T7843] EXT4-fs error (device loop1): __ext4_fill_super:5600: inode #2: comm syz.1.548: iget: checksum invalid [ 153.673165][ T7843] fserror_report: 65 callbacks suppressed [ 153.673186][ T7843] loop1: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -74 [ 153.673383][ T7843] EXT4-fs (loop1): get root inode failed [ 153.673392][ T7843] EXT4-fs (loop1): mount failed [ 153.767850][ T7847] hsr0: entered promiscuous mode [ 153.769281][ T7846] hsr0: left promiscuous mode [ 154.048965][ T7852] [U]  [ 154.048984][ T7852] [U] K{ [ 154.049031][ T7852] [U] t 1ŠFfˊ`GJgo/mC [ 154.049049][ T7852] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 154.049063][ T7852] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 154.049087][ T7852] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 154.049124][ T7852] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 154.049143][ T7852] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 154.049150][ T7852] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 154.049167][ T7852] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 154.049245][ T7852] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 154.049259][ T7852] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 154.049265][ T7852] [U] 22Ʃx?0;3u [ 154.049288][ T7852] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 154.049299][ T7852] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 154.049308][ T7852] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 154.049313][ T7852] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 154.049323][ T7852] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 154.049336][ T7852] [U] ec [ 154.049340][ T7852] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 154.140745][ T7854] netlink: 'syz.1.551': attribute type 2 has an invalid length. [ 154.142682][ T7865] netlink: 'syz.1.551': attribute type 2 has an invalid length. [ 154.144671][ T7852] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 154.163115][ T7852] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 154.241862][ T7879] syzkaller0: entered promiscuous mode [ 154.241898][ T7879] syzkaller0: entered allmulticast mode [ 154.243476][ T7879] TC_ACT_REPEAT abuse ? [ 154.356801][ T7891] loop7: detected capacity change from 0 to 512 [ 154.361532][ T7891] EXT4-fs (loop7): Test dummy encryption mode enabled [ 154.364857][ T7891] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #15: comm syz.7.554: inode has both inline data and extents flags [ 154.368167][ T7891] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 154.368698][ T7891] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.554: couldn't read orphan inode 15 (err -117) [ 154.370816][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 154.370833][ C1] EXT4-fs (loop7): initial error at time 154: ext4_orphan_get:1399: inode 15 [ 154.370850][ C1] EXT4-fs (loop7): last error at time 154: ext4_orphan_get:1399: inode 15 [ 154.381046][ T7891] loop7: lost filesystem error report for type 5 error -117 [ 154.382242][ T7891] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.503333][ T5628] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.663993][ T7932] loop0: detected capacity change from 0 to 512 [ 154.665610][ T7932] EXT4-fs: Ignoring removed nomblk_io_submit option [ 154.710546][ T7852] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 154.713694][ T7927] loop7: detected capacity change from 0 to 512 [ 154.761772][ T7932] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.807514][ T4724] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.883007][ T7947] process 'syz.7.561' launched './file1' with NULL argv: empty string added [ 155.006247][ T30] audit: type=1400 audit(154.980:3): lsm=SMACK fn=smack_file_receive action=denied subject="w" object="_" requested=w pid=7955 comm="syz.0.562" path="pipe:[3208]" dev="pipefs" ino=3208 [ 155.107945][ T7971] 9p: Bad value for 'rfdno' [ 155.116053][ T7971] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.132699][ T7971] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.183566][ T7975] loop7: detected capacity change from 0 to 512 [ 155.183974][ T7975] EXT4-fs: Ignoring removed oldalloc option [ 155.184300][ T7975] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 155.199688][ T7975] EXT4-fs (loop7): 1 orphan inode deleted [ 155.199726][ T7975] EXT4-fs (loop7): 1 truncate cleaned up [ 155.200288][ T7975] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.215525][ T7971] Injecting memory failure for pfn 0x1200e6 at process virtual address 0x20001000 [ 155.225164][ T7971] Memory failure: 0x1200e6: Sending SIGBUS to syz.7.566:7971 due to hardware memory corruption [ 155.227236][ T7971] Memory failure: 0x1200e6: recovery action for dirty LRU page: Recovered [ 155.228937][ T7971] Injecting memory failure for pfn 0x1220eb at process virtual address 0x20002000 [ 155.229207][ T7971] Memory failure: 0x1220eb: Sending SIGBUS to syz.7.566:7971 due to hardware memory corruption [ 155.229264][ T7971] Memory failure: 0x1220eb: recovery action for dirty LRU page: Recovered [ 155.229297][ T7971] Injecting memory failure for pfn 0x219070 at process virtual address 0x20003000 [ 155.237558][ T7971] Memory failure: 0x219070: Sending SIGBUS to syz.7.566:7971 due to hardware memory corruption [ 155.237615][ T7971] Memory failure: 0x219070: recovery action for already poisoned page: Failed [ 155.338684][ T5628] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.375018][ T7979] tmpfs: Bad value for 'mpol' [ 155.376299][ T7979] tmpfs: Bad value for 'mpol' [ 155.377719][ T7979] tmpfs: Bad value for 'mpol' [ 155.378908][ T7979] tmpfs: Bad value for 'mpol' [ 155.383524][ T7979] tmpfs: Bad value for 'mpol' [ 155.384911][ T7979] tmpfs: Bad value for 'mpol' [ 155.386277][ T7979] tmpfs: Bad value for 'mpol' [ 155.387598][ T7979] tmpfs: Bad value for 'mpol' [ 155.388879][ T7979] tmpfs: Bad value for 'mpol' [ 155.390967][ T7979] tmpfs: Bad value for 'mpol' [ 155.392004][ T7979] tmpfs: Bad value for 'mpol' [ 155.393054][ T7979] tmpfs: Bad value for 'mpol' [ 155.394295][ T7979] tmpfs: Bad value for 'mpol' [ 155.395414][ T7979] tmpfs: Bad value for 'mpol' [ 155.396796][ T7979] tmpfs: Bad value for 'mpol' [ 155.398373][ T7979] tmpfs: Bad value for 'mpol' [ 155.399784][ T7979] tmpfs: Bad value for 'mpol' [ 155.401331][ T7979] tmpfs: Bad value for 'mpol' [ 155.402540][ T7979] tmpfs: Bad value for 'mpol' [ 155.403788][ T7979] tmpfs: Bad value for 'mpol' [ 155.405522][ T7979] tmpfs: Bad value for 'mpol' [ 155.406896][ T7979] tmpfs: Bad value for 'mpol' [ 155.408282][ T7979] tmpfs: Bad value for 'mpol' [ 155.409485][ T7979] tmpfs: Bad value for 'mpol' [ 155.410876][ T7979] tmpfs: Bad value for 'mpol' [ 155.412249][ T7979] tmpfs: Bad value for 'mpol' [ 155.413593][ T7979] tmpfs: Bad value for 'mpol' [ 155.414869][ T7979] tmpfs: Bad value for 'mpol' [ 155.416385][ T7979] tmpfs: Bad value for 'mpol' [ 155.417870][ T7979] tmpfs: Bad value for 'mpol' [ 155.419150][ T7979] tmpfs: Bad value for 'mpol' [ 155.420654][ T7979] tmpfs: Bad value for 'mpol' [ 155.421866][ T7979] tmpfs: Bad value for 'mpol' [ 156.638113][ T8014] netlink: 'syz.1.577': attribute type 7 has an invalid length. [ 156.862208][ T8035] loop1: detected capacity change from 0 to 256 [ 156.883115][ T8035] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 156.938984][ T8038] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 156.939386][ T8038] bond1: (slave vti0): Error -95 calling set_mac_address [ 156.956941][ T8036] vlan2: entered allmulticast mode [ 156.958172][ T8036] bond1: entered allmulticast mode [ 156.960191][ T8036] bond1: (slave vlan2): Opening slave failed [ 157.079647][ T8051] loop3: detected capacity change from 0 to 256 [ 157.085163][ T8051] vfat: Unknown parameter '@' [ 157.093328][ T8051] overlayfs: failed to resolve './bus': -2 [ 157.646310][ T8072] sctp: [Deprecated]: syz.3.596 (pid 8072) Use of struct sctp_assoc_value in delayed_ack socket option. [ 157.646310][ T8072] Use struct sctp_sack_info instead [ 157.676793][ T8072] sctp: [Deprecated]: syz.3.596 (pid 8072) Use of struct sctp_assoc_value in delayed_ack socket option. [ 157.676793][ T8072] Use struct sctp_sack_info instead [ 157.734360][ T8084] loop3: detected capacity change from 0 to 128 [ 157.738482][ T8084] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 157.805454][ T8093] syzkaller0: tun_chr_ioctl cmd 1074025681 [ 157.814759][ T8093] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 158.019965][ T8100] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 158.021805][ T8100] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 158.023966][ T8100] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 158.027024][ T8100] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 158.031074][ T8100] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 158.033938][ T8100] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 158.036071][ T8100] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 158.038734][ T8100] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 158.041786][ T8100] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 158.043833][ T8100] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 158.049255][ T8100] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 158.049287][ T8100] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 158.054122][ T8100] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 158.054155][ T8100] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 158.058201][ T8100] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 158.058225][ T8100] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 158.062338][ T8100] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 158.065350][ T8100] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 158.067616][ T8100] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 158.067628][ T8100] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 158.076902][ T8100] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 158.076939][ T8100] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 158.088336][ T8100] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 158.088370][ T8100] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 158.096806][ T8100] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 158.096837][ T8100] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 158.103510][ T8100] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 158.103539][ T8100] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 158.110208][ T8100] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 158.110242][ T8100] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 158.114034][ T8100] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 158.114074][ T8100] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 158.137885][ T8100] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 158.137928][ T8100] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 158.142322][ T8100] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 158.142358][ T8100] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 158.149560][ T8100] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 158.149593][ T8100] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 158.153922][ T8100] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 158.153955][ T8100] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 158.157687][ T8100] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 158.158706][ T8100] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 158.166479][ T8100] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 158.166515][ T8100] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 158.167130][ T8100] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 158.167155][ T8100] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 158.167430][ T8100] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 158.167446][ T8100] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 158.167868][ T8100] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 158.167885][ T8100] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 158.168127][ T8100] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 158.168143][ T8100] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 158.172114][ T8100] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 158.172127][ T8100] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 158.173614][ T8100] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 158.173626][ T8100] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 158.175806][ T8100] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 158.175829][ T8100] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 158.178128][ T8100] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 158.179031][ T8100] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 158.181445][ T8100] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 158.181458][ T8100] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 158.184501][ T8100] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 158.184515][ T8100] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 158.185941][ T8100] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 158.185953][ T8100] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 158.187627][ T8100] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 158.187640][ T8100] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 158.194322][ T8100] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 158.194338][ T8100] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 158.197624][ T8100] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 158.197637][ T8100] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 158.207795][ T8100] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 158.207810][ T8100] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 158.214422][ T8100] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 158.214441][ T8100] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 158.220279][ T8100] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 158.220296][ T8100] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 158.226731][ T8100] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 158.226768][ T8100] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 158.228947][ T8100] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 158.228962][ T8100] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 158.250527][ T8100] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 158.250577][ T8100] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 158.273595][ T8105] ip6erspan0: entered allmulticast mode [ 158.274923][ T8100] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 158.274964][ T8100] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 158.278533][ T8100] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 158.278569][ T8100] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 158.282556][ T8100] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 158.282590][ T8100] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 158.286513][ T8100] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 158.286557][ T8100] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 158.290097][ T8100] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 158.290130][ T8100] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 158.295248][ T8100] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 158.295292][ T8100] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 158.298859][ T8100] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 158.298891][ T8100] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 158.302271][ T8100] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 158.302304][ T8100] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 158.305807][ T8100] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 158.305850][ T8100] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 158.309306][ T8100] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 158.309341][ T8100] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 158.312398][ T8100] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 158.312427][ T8100] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 158.319529][ T8100] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 158.319568][ T8100] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 158.326477][ T8100] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 158.326518][ T8100] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 158.333310][ T8100] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 158.333350][ T8100] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 158.344943][ T8100] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 158.344986][ T8100] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 158.352597][ T8100] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 158.352642][ T8100] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 158.356241][ T8100] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 158.361840][ T8100] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 158.364523][ T8100] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 158.364562][ T8100] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 158.366578][ T8100] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 158.366592][ T8100] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 158.370948][ T8100] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 158.370963][ T8100] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 158.373549][ T8100] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 158.373565][ T8100] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 158.375285][ T8100] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 158.375298][ T8100] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 158.378621][ T8100] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 158.378637][ T8100] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 158.575303][ T8122] set_capacity_and_notify: 1 callbacks suppressed [ 158.576607][ T8122] loop3: detected capacity change from 0 to 512 [ 158.577117][ T8122] EXT4-fs: user quota file already specified [ 158.714946][ T8122] block nbd3: Device being setup by another task [ 158.950552][ T50] block nbd3: Receive control failed (result -32) [ 158.977961][ T8139] 9pnet_fd: Insufficient options for proto=fd [ 158.992520][ T8122] block nbd3: shutting down sockets [ 159.020682][ T8141] loop0: detected capacity change from 0 to 512 [ 159.025533][ T8141] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 159.037819][ T8141] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 159.037890][ T8141] EXT4-fs (loop0): failed to initialize system zone (-117) [ 159.038049][ T8141] EXT4-fs (loop0): mount failed [ 159.145937][ T8147] netlink: 'syz.0.612': attribute type 6 has an invalid length. [ 159.150410][ T8148] netlink: 'syz.0.612': attribute type 6 has an invalid length. [ 159.260358][ T8157] __nla_validate_parse: 37 callbacks suppressed [ 159.260402][ T8157] netlink: 4 bytes leftover after parsing attributes in process `syz.1.613'. [ 159.260456][ T8157] bridge_slave_1: left allmulticast mode [ 159.260480][ T8157] bridge_slave_1: left promiscuous mode [ 159.260603][ T8157] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.277898][ T8157] bridge_slave_0: left allmulticast mode [ 159.277938][ T8157] bridge_slave_0: left promiscuous mode [ 159.278047][ T8157] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.314069][ T8165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.613'. [ 159.488108][ T8182] netlink: 12 bytes leftover after parsing attributes in process `syz.1.619'. [ 159.488161][ T8182] netlink: 56 bytes leftover after parsing attributes in process `syz.1.619'. [ 159.488172][ T8182] netlink: 8 bytes leftover after parsing attributes in process `syz.1.619'. [ 159.500266][ T8185] netlink: 12 bytes leftover after parsing attributes in process `syz.7.620'. [ 159.500309][ T8185] netlink: 4 bytes leftover after parsing attributes in process `syz.7.620'. [ 159.540400][ T8185] netlink: 12 bytes leftover after parsing attributes in process `syz.7.620'. [ 159.540447][ T8185] netlink: 4 bytes leftover after parsing attributes in process `syz.7.620'. [ 159.546402][ T8185] netlink: 16 bytes leftover after parsing attributes in process `syz.7.620'. [ 159.565320][ T5029] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.566045][ T5029] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.566083][ T5029] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.566106][ T5029] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.574173][ T8190] netlink: 'syz.0.622': attribute type 3 has an invalid length. [ 159.696595][ T8197] loop7: detected capacity change from 0 to 256 [ 159.758744][ T8206] syz_tun: entered allmulticast mode [ 159.809650][ T8204] syz_tun: left allmulticast mode [ 159.865426][ T8212] vlan2: entered allmulticast mode [ 159.865465][ T8212] macsec0: entered allmulticast mode [ 159.872573][ T8212] veth1_macvtap: entered allmulticast mode [ 159.873283][ T8212] batman_adv: batadv0: Adding interface: vlan2 [ 159.873291][ T8212] batman_adv: batadv0: The MTU of interface vlan2 is too small (1464) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 159.873304][ T8212] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 159.943194][ T8214] bond0: (slave dummy0): Releasing backup interface [ 159.982531][ T8223] loop7: detected capacity change from 0 to 128 [ 159.982886][ T8223] vfat: Unknown parameter 'olى*@V' [ 159.989649][ T8214] bond0: (slave bond_slave_0): Releasing backup interface [ 160.088782][ T8214] bond0: (slave bond_slave_1): Releasing backup interface [ 160.129019][ T8214] team0: Port device team_slave_0 removed [ 160.873067][ T8214] team0: Port device team_slave_1 removed [ 160.873506][ T8214] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.873519][ T8214] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.885056][ T8214] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.885072][ T8214] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.885795][ T8214] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 160.890886][ T8224] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 160.985420][ T8237] loop1: detected capacity change from 0 to 1024 [ 161.068396][ T8237] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.148090][ T4710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.181231][ T8257] loop3: detected capacity change from 0 to 128 [ 161.186032][ T8257] EXT4-fs (loop3): Test dummy encryption mode enabled [ 161.352909][ T8260] pim6reg1: entered promiscuous mode [ 161.352947][ T8260] pim6reg1: entered allmulticast mode [ 161.532506][ T8292] loop0: detected capacity change from 0 to 2048 [ 161.582878][ T8287] netlink: 'syz.1.646': attribute type 15 has an invalid length. [ 162.744301][ T8328] loop1: detected capacity change from 0 to 512 [ 162.752944][ T8328] EXT4-fs: inline encryption not supported [ 162.754938][ T8328] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 162.794496][ T8328] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4222: comm syz.1.655: Allocating blocks 41-42 which overlap fs metadata [ 162.794538][ T8328] loop1: lost filesystem error report for type 5 error -117 [ 162.799917][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 162.799949][ C0] EXT4-fs (loop1): initial error at time 162: ext4_mb_mark_diskspace_used:4222 [ 162.799977][ C0] EXT4-fs (loop1): last error at time 162: ext4_mb_mark_diskspace_used:4222 [ 162.810148][ T8328] Quota error (device loop1): write_blk: dquota write failed [ 162.810182][ T8328] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 162.810334][ T8328] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4222: comm syz.1.655: Allocating blocks 41-42 which overlap fs metadata [ 162.810358][ T8328] loop1: lost filesystem error report for type 5 error -117 [ 162.817784][ T8328] Quota error (device loop1): write_blk: dquota write failed [ 162.817859][ T8328] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 162.817897][ T8328] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.655: Failed to acquire dquot type 1 [ 162.817916][ T8328] loop1: lost filesystem error report for type 5 error -117 [ 162.825509][ T8328] EXT4-fs error (device loop1): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 162.833267][ T8328] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #12: comm syz.1.655: corrupted inode contents [ 162.835518][ T8328] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 162.840742][ T8328] EXT4-fs error (device loop1): ext4_dirty_inode:6639: inode #12: comm syz.1.655: mark_inode_dirty error [ 162.840785][ T8328] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 162.846297][ T8328] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #12: comm syz.1.655: corrupted inode contents [ 162.846340][ T8328] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 162.850801][ T8328] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #12: comm syz.1.655: mark_inode_dirty error [ 162.850847][ T8328] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 162.855298][ T8328] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #12: comm syz.1.655: corrupted inode contents [ 162.855334][ T8328] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 162.871280][ T8328] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 162.871341][ T8328] loop1: lost filesystem error report for type 5 error -117 [ 162.890040][ T8328] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #12: comm syz.1.655: corrupted inode contents [ 162.890094][ T8328] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 162.901411][ T8328] EXT4-fs error (device loop1): ext4_truncate:4691: inode #12: comm syz.1.655: mark_inode_dirty error [ 162.901466][ T8328] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 162.901654][ T8328] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 162.901673][ T8328] loop1: lost filesystem error report for type 5 error -117 [ 162.901912][ T8328] EXT4-fs (loop1): 1 truncate cleaned up [ 163.062299][ T8337] trusted_key: encrypted_key: keyword 'updadefault' not recognized [ 163.174494][ T8346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.175628][ T8346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.180464][ T8349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.180641][ T8349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.217663][ T8354] tipc: Enabling of bearer rejected, failed to enable media [ 163.257025][ T8357] netlink: 'syz.0.661': attribute type 1 has an invalid length. [ 163.280960][ T8328] EXT4-fs error (device loop1): ext4_lookup:1785: inode #15: comm syz.1.655: iget: bad i_size value: 360287970189639690 [ 163.309297][ T8357] 8021q: adding VLAN 0 to HW filter on device bond1 [ 163.328915][ T8369] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg2, syncid = 2, id = 0 [ 163.346120][ T8357] 8021q: VLANs not supported on gre0 [ 163.364974][ T8360] bond1: (slave bridge1): making interface the new active one [ 163.368297][ T8360] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 163.614982][ T8374] loop7: detected capacity change from 0 to 256 [ 163.962841][ T5018] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.995774][ T4719] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 163.998388][ T4719] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 164.002230][ T4719] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 164.004162][ T4719] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 164.006957][ T4719] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 164.076485][ T5018] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.168366][ T5018] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.241614][ T4719] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 164.244660][ T4719] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 164.247086][ T4719] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 164.248984][ T4719] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 164.260251][ T4719] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 164.262449][ T5018] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.621491][ T8410] sctp: [Deprecated]: syz.7.669 (pid 8410) Use of struct sctp_assoc_value in delayed_ack socket option. [ 164.621491][ T8410] Use struct sctp_sack_info instead [ 164.680563][ T8416] __nla_validate_parse: 6 callbacks suppressed [ 164.680608][ T8416] netlink: 4 bytes leftover after parsing attributes in process `syz.7.670'. [ 164.715336][ T5018] bond0 (unregistering): Released all slaves [ 164.715565][ T8417] null_blk: disk nullb1 created [ 164.725328][ T5018] bond1 (unregistering): Released all slaves [ 164.727181][ T8414] BUG: sleeping function called from invalid context at ./include/linux/sched/mm.h:323 [ 164.727216][ T8414] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 8414, name: syz.7.670 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 164.727229][ T8414] preempt_count: 0, expected: 0 [ 164.727235][ T8414] RCU nest depth: 1, expected: 0 [ 164.727241][ T8414] 1 lock held by syz.7.670/8414: [ 164.727247][ T8414] #0: ffff800088d271a0 (rcu_read_lock){....}-{1:3}, at: blk_mq_dispatch_queue_requests+0x110/0x6d4 [ 164.727284][ T8414] CPU: 0 UID: 0 PID: 8414 Comm: syz.7.670 Not tainted syzkaller #0 PREEMPT [ 164.727293][ T8414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 164.727297][ T8414] Call trace: [ 164.727300][ T8414] show_stack+0x2c/0x3c (C) [ 164.727314][ T8414] __dump_stack+0x30/0x40 [ 164.727324][ T8414] dump_stack_lvl+0xd8/0x12c [ 164.727334][ T8414] dump_stack+0x1c/0x28 [ 164.727343][ T8414] __might_resched+0x354/0x4c0 [ 164.727352][ T8414] __might_sleep+0x84/0xdc [ 164.727360][ T8414] __kmalloc_cache_noprof+0x88/0x5ec [ 164.727369][ T8414] null_insert_page+0x94/0x4e8 [ 164.727380][ T8414] null_handle_memory_backed+0x474/0x9d8 [ 164.727390][ T8414] null_process_cmd+0x118/0x1b0 [ 164.727400][ T8414] null_queue_rq+0x788/0xa88 [ 164.727408][ T8414] null_queue_rqs+0x108/0x204 [ 164.727415][ T8414] blk_mq_dispatch_queue_requests+0x33c/0x6d4 [ 164.727423][ T8414] blk_mq_flush_plug_list+0x37c/0x494 [ 164.727432][ T8414] __blk_flush_plug+0x364/0x440 [ 164.727440][ T8414] blk_finish_plug+0x68/0x90 [ 164.727448][ T8414] blkdev_writepages+0x128/0x184 [ 164.727457][ T8414] do_writepages+0x284/0x47c [ 164.727466][ T8414] filemap_writeback+0x230/0x2bc [ 164.727476][ T8414] filemap_write_and_wait_range+0x90/0x114 [ 164.727486][ T8414] bdev_release+0x114/0x328 [ 164.727494][ T8414] blkdev_release+0x20/0x34 [ 164.727502][ T8414] __fput+0x338/0x74c [ 164.727510][ T8414] fput_close_sync+0x10c/0x278 [ 164.727518][ T8414] __arm64_sys_close+0x80/0x110 [ 164.727528][ T8414] invoke_syscall+0x98/0x244 [ 164.727538][ T8414] el0_svc_common+0xec/0x23c [ 164.727547][ T8414] do_el0_svc+0x4c/0x5c [ 164.727557][ T8414] el0_svc+0x64/0x260 [ 164.727566][ T8414] el0t_64_sync_handler+0x44/0x104 [ 164.727574][ T8414] el0t_64_sync+0x198/0x19c [ 164.860890][ T4403] 8021q: adding VLAN 0 to HW filter on device eth12 [ 165.184066][ T4403] 8021q: adding VLAN 0 to HW filter on device eth15 [ 165.324531][ T4403] 8021q: adding VLAN 0 to HW filter on device eth13 [ 165.440771][ T4403] 8021q: adding VLAN 0 to HW filter on device eth14 [ 165.601225][ T5018] hsr_slave_0: left promiscuous mode [ 165.602675][ T5018] hsr_slave_1: left promiscuous mode [ 165.605502][ T5018] veth1_macvtap: left promiscuous mode [ 165.606672][ T5018] veth1_vlan: left promiscuous mode [ 165.607620][ T5018] veth0_vlan: left promiscuous mode [ 166.190089][ T40] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.279289][ T40] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.333731][ T40] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.408411][ T40] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.564087][ T40] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.621219][ T40] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.638160][ T4403] 8021q: adding VLAN 0 to HW filter on device eth16 [ 166.697893][ T40] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.756516][ T4403] 8021q: adding VLAN 0 to HW filter on device eth17 [ 166.769570][ T40] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.915744][ T40] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.915792][ T40] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.923231][ T4403] 8021q: adding VLAN 0 to HW filter on device eth18 [ 166.977179][ T40] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.977221][ T40] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.027025][ T40] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.027070][ T40] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.058690][ T4403] 8021q: adding VLAN 0 to HW filter on device eth19 [ 167.100826][ T40] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.100871][ T40] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.203317][ T4403] 8021q: adding VLAN 0 to HW filter on device eth20 [ 167.231478][ T40] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.292099][ T40] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.352302][ T40] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.357211][ T4403] 8021q: adding VLAN 0 to HW filter on device eth21 [ 167.419621][ T40] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.502401][ T40] bridge_slave_1: left allmulticast mode [ 167.502441][ T40] bridge_slave_1: left promiscuous mode [ 167.502544][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.506990][ T40] bridge_slave_0: left allmulticast mode [ 167.507026][ T40] bridge_slave_0: left promiscuous mode [ 167.507095][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.515396][ T40] bridge_slave_1: left allmulticast mode [ 167.515429][ T40] bridge_slave_1: left promiscuous mode [ 167.515511][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.517810][ T40] bridge_slave_0: left allmulticast mode [ 167.517827][ T40] bridge_slave_0: left promiscuous mode [ 167.517884][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.532297][ T40] bridge_slave_1: left allmulticast mode [ 167.532337][ T40] bridge_slave_1: left promiscuous mode [ 167.532430][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.534213][ T40] bridge_slave_0: left allmulticast mode [ 167.534225][ T40] bridge_slave_0: left promiscuous mode [ 167.534281][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.540663][ T40] bridge_slave_1: left allmulticast mode [ 167.540695][ T40] bridge_slave_1: left promiscuous mode [ 167.540771][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.543093][ T40] bridge_slave_0: left allmulticast mode [ 167.543103][ T40] bridge_slave_0: left promiscuous mode [ 167.543162][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.677887][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.691587][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.731442][ T40] bond0 (unregistering): Released all slaves [ 167.750402][ T40] bond0 (unregistering): Released all slaves [ 167.794745][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.811374][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.851130][ T40] bond0 (unregistering): Released all slaves [ 167.853473][ T40] bond1 (unregistering): Released all slaves [ 167.916162][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.926837][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.950868][ T40] bond0 (unregistering): Released all slaves [ 167.954549][ T40] bond1 (unregistering): (slave veth3): Releasing backup interface [ 167.961147][ T40] bond1 (unregistering): Released all slaves [ 168.007885][ T40] bond1 (unregistering): (slave bridge1): Releasing active interface [ 168.033155][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.071296][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.082596][ T40] bond0 (unregistering): Released all slaves [ 168.085031][ T40] bond1 (unregistering): Released all slaves [ 168.089297][ T4403] 8021q: adding VLAN 0 to HW filter on device eth23 [ 168.183168][ T40] tipc: Disabling bearer [ 168.183296][ T40] tipc: Disabling bearer [ 168.183973][ T40] tipc: Left network mode [ 168.219472][ T40] tipc: Left network mode [ 168.256176][ T40] IPVS: stopping backup sync thread 8369 ... [ 168.264035][ T4403] 8021q: adding VLAN 0 to HW filter on device eth22 [ 168.395832][ T4403] 8021q: adding VLAN 0 to HW filter on device eth24 [ 168.526008][ T4403] 8021q: adding VLAN 0 to HW filter on device eth25 [ 168.665171][ T4403] 8021q: adding VLAN 0 to HW filter on device eth26 [ 168.782929][ T4403] 8021q: adding VLAN 0 to HW filter on device eth27 [ 168.932538][ T4403] 8021q: adding VLAN 0 to HW filter on device eth28 [ 169.047873][ T40] hsr_slave_0: left promiscuous mode [ 169.050367][ T40] hsr_slave_1: left promiscuous mode [ 169.050610][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.050627][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.054989][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.055014][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.065816][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.065843][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.068955][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.071059][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.075268][ T40] hsr_slave_0: left promiscuous mode [ 169.076366][ T40] hsr_slave_1: left promiscuous mode [ 169.076648][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.076658][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.083785][ T40] hsr_slave_0: left promiscuous mode [ 169.084829][ T40] hsr_slave_1: left promiscuous mode [ 169.085037][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.086171][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.086182][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.090047][ T40] batman_adv: batadv0: Removing interface: vlan2 [ 169.102219][ T40] veth1_macvtap: left promiscuous mode [ 169.102268][ T40] veth0_macvtap: left promiscuous mode [ 169.102329][ T40] veth1_vlan: left promiscuous mode [ 169.102363][ T40] veth0_vlan: left promiscuous mode [ 169.106596][ T40] veth1_macvtap: left promiscuous mode [ 169.106639][ T40] veth0_macvtap: left promiscuous mode [ 169.106692][ T40] veth1_vlan: left promiscuous mode [ 169.106727][ T40] veth0_vlan: left promiscuous mode [ 169.112298][ T40] veth1_macvtap: left promiscuous mode [ 169.112331][ T40] veth0_macvtap: left promiscuous mode [ 169.112388][ T40] veth1_vlan: left promiscuous mode [ 169.112442][ T40] veth0_vlan: left promiscuous mode [ 169.116589][ T40] veth1_macvtap: left allmulticast mode [ 169.116613][ T40] veth1_macvtap: left promiscuous mode [ 169.116630][ T40] veth0_macvtap: left promiscuous mode [ 169.116673][ T40] veth1_vlan: left promiscuous mode [ 169.116703][ T40] veth0_vlan: left promiscuous mode [ 169.316837][ T40] team0 (unregistering): Port device team_slave_1 removed [ 169.321319][ T40] team0 (unregistering): Port device team_slave_0 removed [ 169.446400][ T40] team0 (unregistering): Port device team_slave_1 removed [ 169.450340][ T40] team0 (unregistering): Port device team_slave_0 removed [ 169.565068][ T40] team0 (unregistering): Port device team_slave_1 removed [ 169.568867][ T40] team0 (unregistering): Port device team_slave_0 removed [ 169.678447][ T40] team0 (unregistering): Port device team_slave_1 removed [ 169.684817][ T40] team0 (unregistering): Port device team_slave_0 removed [ 169.732225][ T4403] 8021q: adding VLAN 0 to HW filter on device eth29 [ 169.881518][ T4403] 8021q: adding VLAN 0 to HW filter on device eth31 [ 169.995881][ T4403] 8021q: adding VLAN 0 to HW filter on device eth30