last executing test programs: 53.180235556s ago: executing program 2 (id=66): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x301c48a, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x6, 0x2d5, &(0x7f0000000680)="$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") r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000300)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x642040, 0x80) 53.148764303s ago: executing program 2 (id=68): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv6_deladdr={0x74, 0x15, 0x20, 0x70bd28, 0x25dfdbfe, {0xa, 0x80, 0x19, 0xfd}, [@IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_RT_PRIORITY={0x8, 0x9, 0x7}, @IFA_FLAGS={0x8, 0x8, 0x442}, @IFA_RT_PRIORITY={0x8, 0x9, 0x8}, @IFA_CACHEINFO={0x14, 0x6, {0x6, 0x8, 0x200, 0xacf}}, @IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}]}, 0x74}}, 0x8000) 53.025315408s ago: executing program 2 (id=70): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x18, &(0x7f0000000140)={[{@uni_xlate}, {@shortname_win95}, {@rodir}, {}, {@utf8}, {@rodir}, {@numtail}, {@fat=@nfs_stale_rw}, {@fat=@showexec}, {@shortname_mixed}, {@fat=@check_strict}, {@shortname_winnt}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@fat=@gid}, {@utf8}, {@shortname_mixed}]}, 0x7, 0x2a6, &(0x7f0000000240)="$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") socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0x44, r2, 0x5, 0x70bd26, 0x80, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_P2P_OPPPS={0x5}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x3a5aaa1387e7790a}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x11d}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x44}}, 0x20000014) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x98}, 0x1a2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000880)={0x0, 0xfffffffe, 0x0, 0x4, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x2, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x3, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x8, 0x40040001, 0x335}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) 51.807326183s ago: executing program 2 (id=83): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file1\x00', 0x1218088, &(0x7f0000000b00)=ANY=[], 0x4a, 0x2df, &(0x7f0000000f80)="$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") openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) (async) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0xb28) (async) sendfile(r0, r0, 0x0, 0xb28) openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.io_merged\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000340)='./file1\x00', 0x1ff) (async) mkdirat(r1, &(0x7f0000000340)='./file1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/uvc.0/control/extensions/xu.0\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/uvc.0/control/extensions/xu.0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0/control/extensions/xu.0/bNumControls\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='5\n', 0x2) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e20, 0x6, @empty, 0x4}}}, &(0x7f00000001c0)=0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000200)={r3, @in={{0x2, 0x4e23, @local}}}, 0x84) fadvise64(r1, 0x2, 0x0, 0x4) madvise(0x0, 0x0, 0xf) 51.391095225s ago: executing program 2 (id=87): r0 = fanotify_init(0x4, 0x400) readv(r0, &(0x7f0000002ec0), 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) prlimit64(0x0, 0x7, &(0x7f0000000200), 0x0) fanotify_mark(r0, 0x1, 0x40001019, r1, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 50.763340763s ago: executing program 2 (id=96): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x17, 0x0, 0x8400, 0x1}, 0x50) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000500)={r0, 0x0, 0x20000000}, 0x20) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@newsa={0x1b0, 0x10, 0x713, 0x70bd27, 0x4, {{@in6=@remote, @in6=@remote, 0x0, 0x0, 0x4e24, 0x0, 0x0, 0x0, 0x0, 0x2f}, {@in=@multicast1, 0x1, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0xffffffffffffffff, 0x1, 0x3, 0x100000, 0x2, 0x8727e}, {0x0, 0xffffdffff7fffffb, 0x6, 0x5}, {0x1, 0x9, 0x8}, 0x80000000, 0x3506, 0xa, 0x4, 0x0, 0x21}, [@algo_auth_trunc={0x8e, 0x14, {{'sha1\x00'}, 0x210, 0x80, "ccc1b557f900d0f588e8a2b240e1a73c5d7b505ea6a1c880e13ee2ce8357748ea4c3ab792880c5129a5a31c3f063b5ac4202cdb6fe0297c0053f1c92b2e013b5a8aa"}}, @replay_val={0x10, 0xa, {0x70bd29, 0x30bd25, 0x2f5}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd29, 0x70bd2a, 0x70bd2b, 0x70bd2c, 0x9, [0x100]}}]}, 0x1b0}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x17, 0x0, 0x8400, 0x1}, 0x50) (async) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000500)={r0, 0x0, 0x20000000}, 0x20) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@newsa={0x1b0, 0x10, 0x713, 0x70bd27, 0x4, {{@in6=@remote, @in6=@remote, 0x0, 0x0, 0x4e24, 0x0, 0x0, 0x0, 0x0, 0x2f}, {@in=@multicast1, 0x1, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0xffffffffffffffff, 0x1, 0x3, 0x100000, 0x2, 0x8727e}, {0x0, 0xffffdffff7fffffb, 0x6, 0x5}, {0x1, 0x9, 0x8}, 0x80000000, 0x3506, 0xa, 0x4, 0x0, 0x21}, [@algo_auth_trunc={0x8e, 0x14, {{'sha1\x00'}, 0x210, 0x80, "ccc1b557f900d0f588e8a2b240e1a73c5d7b505ea6a1c880e13ee2ce8357748ea4c3ab792880c5129a5a31c3f063b5ac4202cdb6fe0297c0053f1c92b2e013b5a8aa"}}, @replay_val={0x10, 0xa, {0x70bd29, 0x30bd25, 0x2f5}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd29, 0x70bd2a, 0x70bd2b, 0x70bd2c, 0x9, [0x100]}}]}, 0x1b0}}, 0x0) (async) 50.763008684s ago: executing program 32 (id=96): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x17, 0x0, 0x8400, 0x1}, 0x50) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000500)={r0, 0x0, 0x20000000}, 0x20) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@newsa={0x1b0, 0x10, 0x713, 0x70bd27, 0x4, {{@in6=@remote, @in6=@remote, 0x0, 0x0, 0x4e24, 0x0, 0x0, 0x0, 0x0, 0x2f}, {@in=@multicast1, 0x1, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0xffffffffffffffff, 0x1, 0x3, 0x100000, 0x2, 0x8727e}, {0x0, 0xffffdffff7fffffb, 0x6, 0x5}, {0x1, 0x9, 0x8}, 0x80000000, 0x3506, 0xa, 0x4, 0x0, 0x21}, [@algo_auth_trunc={0x8e, 0x14, {{'sha1\x00'}, 0x210, 0x80, "ccc1b557f900d0f588e8a2b240e1a73c5d7b505ea6a1c880e13ee2ce8357748ea4c3ab792880c5129a5a31c3f063b5ac4202cdb6fe0297c0053f1c92b2e013b5a8aa"}}, @replay_val={0x10, 0xa, {0x70bd29, 0x30bd25, 0x2f5}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd29, 0x70bd2a, 0x70bd2b, 0x70bd2c, 0x9, [0x100]}}]}, 0x1b0}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x17, 0x0, 0x8400, 0x1}, 0x50) (async) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000500)={r0, 0x0, 0x20000000}, 0x20) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@newsa={0x1b0, 0x10, 0x713, 0x70bd27, 0x4, {{@in6=@remote, @in6=@remote, 0x0, 0x0, 0x4e24, 0x0, 0x0, 0x0, 0x0, 0x2f}, {@in=@multicast1, 0x1, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0xffffffffffffffff, 0x1, 0x3, 0x100000, 0x2, 0x8727e}, {0x0, 0xffffdffff7fffffb, 0x6, 0x5}, {0x1, 0x9, 0x8}, 0x80000000, 0x3506, 0xa, 0x4, 0x0, 0x21}, [@algo_auth_trunc={0x8e, 0x14, {{'sha1\x00'}, 0x210, 0x80, "ccc1b557f900d0f588e8a2b240e1a73c5d7b505ea6a1c880e13ee2ce8357748ea4c3ab792880c5129a5a31c3f063b5ac4202cdb6fe0297c0053f1c92b2e013b5a8aa"}}, @replay_val={0x10, 0xa, {0x70bd29, 0x30bd25, 0x2f5}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd29, 0x70bd2a, 0x70bd2b, 0x70bd2c, 0x9, [0x100]}}]}, 0x1b0}}, 0x0) (async) 5.380122501s ago: executing program 1 (id=827): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={[{@subsystem='net_prio'}, {@noprefix}]}) 5.378266281s ago: executing program 1 (id=829): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x20, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x20}}, 0x0) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x811) (async, rerun: 32) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 32) ioctl$sock_bt_hci(r3, 0x800448f0, 0xfffffffffffffffe) r4 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async, rerun: 64) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, 0x0) (rerun: 64) 2.230405344s ago: executing program 4 (id=836): personality(0x400000) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2000009, 0x2172, 0xffffffffffffffff, 0x60f4b000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x1, 0xe3b, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) timer_create(0x0, &(0x7f0000000000)={0x0, 0x34, 0x4, @tid=0xffffffffffffffff}, &(0x7f0000000080)) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x48, r2, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x61}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x1c}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) 2.230114103s ago: executing program 4 (id=837): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x188}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) socket$kcm(0x29, 0x5, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, r3, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x104, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bdbf}}}, 0x0) r4 = memfd_create(&(0x7f0000000240)='l2tp\x00', 0x6) io_setup(0x714, &(0x7f0000003280)=0x0) io_submit(r5, 0x1, &(0x7f0000006700)=[&(0x7f00000033c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x100000000, 0x0, 0x2}]) r6 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, 0x0) 2.2173577s ago: executing program 1 (id=844): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x10000, &(0x7f0000000380), 0x11, 0x512, &(0x7f0000000b40)="$eJzs3M9vFFUcAPDvbLu0RZCKSEJFU0BjY2JbCgoHL5iYeNDEiAc5NmUhlUUM9CCkkSUxeCbxbjwab5p41aPx5B+ABw8mhoQoF0BjsmZ2Z5bt/uhua21t+/kkC+/Nvnk/dt7bfTOvMwFsW+PpP0nEroi4HRF76tGlCcbr/z24tzj38N7iXFSq1dO/J7V099N4Jt/vsSwyUYgofJK0ZFh35eq1C7PlculyVGrxqYWLH05duXrtpfmLs+dL50sfzJw8efzY0ROvzLy8JO+IGO7ZqA7lpe26P/bxpYMH3jhz6625wdbMmtvRVb7XH5WeSSP/bLt4vjm/LWB3Uzhpb9f1da0MfRvOumExHf+L5cNnNrpCwLqpVqvVoe5vV6qtbrRtATatJBqhja0IsM7yH/r0/Dd/1bcU12P6seHunqqfAN2/t1i9HoNzDxrtH4xClqbYcn6bWmbOtCLjEfFe5c/P01csdx3ilzUqEADY9r4/lU0Dk2iZ/xVif1O6x7M1lNGIeCIi9kbEkxGxLyKeiliSdokkorpM+ftaNzTK/yZbRSjcWW3b+pHO/17N1rbyV1ZunmR0IIvtjsgnzKXp7DOZiOLQufly6WiX/Hf0KL95/pe+0vLzuWBWjzuDLZPNs7MLs6trbbu7NyLGBlvbnwymBy5fxkki4kBEjK0g39Gm8PyLXx5sRFpOK3q3v6baYUlvTdbPql9EvFA//pVotH9kySJiGpoaifr6ZKFtfXJqOMql6am0F0x3rOSPP918u1v5Pdv/7a+tu7x+4rvT/77hmfT472zq/5Gv3z5q/2gSkTTWa69EVAdWVsbNnz+t5Tt+pP291fb/Hcm7tXA+vj6aXVi4fDRiR/Jm+/aZR/vm8Tx92v6JI53H/95sn/STeDoi0k78TEQ8GzGQ1/1QRByOiA5Na/jhtefe7/LWQJ/9/z+Ttv9sx++/JOsHteMfI5Ef/6t9BfL80y0DFw7dfjjWeeE+a/+e5Y//8VpoItvS+fsvWfIV0W9N1+AjBAAAgP+9QtT+9r8w2QgXCpOT9WtA+2JnoXxpunFevat2Xa9YODdfLuUX5EajmOTXP0eb4jMt8WPZdePPBkZq8cm5S+WzG9huoD7Od0XSNv5Tv63wOi+wCW2h+9CAFeo1/vffWqeKAOvO7z9sX03jv9uTLSqd/1Lmr6ZbiIDNyO8/bF+dxv/1+GrZexd8Z8DmV131WB5Z87oA62/58d/7eZvA5jUY7zTCtdueO95tC2xF3X//neXDFtb7JvmhPtJ0C1SHOr81HB2eGDC8qiJ6BkY6lLUhgXRmtYYZFiOiv8QjqykinwJ2f8JDYWUZDkX7WwOx3F5J5+c4RESl617pp9KzPuf399v5S5eTh/UHZfZoYP5MlLXuNl8/GqfFPg93l8Df/XY/5/sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCW8k8AAAD//2b7z90=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181c42, 0x56) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x1000040, &(0x7f0000000880), 0x1, 0x5a3, &(0x7f00000002c0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x103402, 0x49) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r4, 0x3, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0xa0, 0x1, 0x0, r3, &(0x7f0000000200)='p', 0x8200, 0x600}]) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x153042, 0x80) pwritev2(r5, &(0x7f0000000780)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5405, 0x0, 0x1f) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000e80)='./file7\x00', 0x80, &(0x7f0000000240)=ANY=[], 0xfd, 0x2b6, &(0x7f0000000980)="$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") prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000340)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2f}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}]}, &(0x7f0000000200)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_bpf={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xfffffffffffffffb}, {0xc}}}]}]}, 0x6c}}, 0x0) r11 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r11, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000040)={@remote}, 0x14) ioctl$BLKDISCARDZEROES(r1, 0x127c, &(0x7f0000000400)) 2.21651919s ago: executing program 4 (id=847): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vcsn(&(0x7f0000000040), 0x80000000, 0x8000) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0x6}, 0x90) syz_open_dev$video(&(0x7f0000000040), 0x8, 0x101840) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x18, &(0x7f0000000140)=ANY=[@ANYBLOB="756e695f786c6174653d312c73686f72746e616d653d77696e39352c726f6469722c636865636b3d72656c617865642c757466383d312c726f6469722c6e6f6e756d7461696c3d302c6e66733d7374616c655f72772c73686f77008065632c73686f72746e616d653d6d697865642c636865636b3d7374726963742c73686f72746e616d653d77696e6e742c757466383d302c696f636861727365743d6d616363726f617469616e2c6769643d", @ANYRESHEX=0x0, @ANYBLOB=',utf8=1,shortname=mixed,\x00'], 0x7, 0x2a6, &(0x7f0000000240)="$eJzs3c2KI1UUAOBT+ekkukgWrkSYAl24GqZ9gm5kBLVBULJQF9o4GZBUGOhAIK0YZ+UT+AQ+jxtx6cYHUNw5C7GkUpWYzFR6TDvTPTTft+nDuffU/amia1U3n782Gd97ML3/8Otfo9tNonEUR/EoiUE0YuXbqPXz7/V5AOAF9yjP44+81ClT8+0e7R2VrcZznxwA8Fxsvv+3GrzdAeDG+ujjT94/Pjm5+2GadiMm382GSZR/y/bj+/FlZDGKO9GPvyLytTJ+592Tu9FKC4N4Y7KYDYvKyWc/Vtc//i1iWX8Y/RjU1x+mpY36xWzYjpeq8Y+yGH3wQ/TjlaLml/dWc1/Vv1VTH8ODePP1jfnfjn789EU8iCzuPVb/zWGavp1//+dXnxbZoj5ZzIaddb+qd/Oq7gkAAAAAAAAAAAAAAAAAAAAAADff7XRtsH3+zurg/wvanzwfqLc64Gexcb7PnTRN86Ts/299K15tRes61w4AAAAAAAAAAAAAAAAAAAAviun8fHya9SJiGWSjszKTzSNiO7NHsPqsv6Yp/t7OdCLiMkOUwa19q6JZTS1LiiW347+Xt6OzrHx65+aeqyi2PxudJa247IY/GSTrTK8MohFxNr0V5VhFplcGG5n/PXo3yrEq49PkaTe3W/eQPIMgr3n8mjurDh7P9KoV1HTuXTD6wcuXmnPe39GURER7vZkXX6f9bPfw6v4HAQAAAAAAAAAAAAAAAAAApen8fNxYfvRb0/jwGiYEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANdgOj8fny5//3+PYFEV7+qTN4ugFVWmZtiDK14mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN9w/AQAA//8XQlpx") socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000540)={&(0x7f00000000c0)={0xa, 0x4e24, 0x8002, @loopback, 0x7fff}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000100)="f0", 0x1}], 0x1}, 0x400d4) 2.195773557s ago: executing program 3 (id=848): r0 = mq_open(&(0x7f000084dff0)='rmdF\x17\x16\xbc\xec', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_notify(r0, &(0x7f0000000200)={0x0, 0x1, 0x1}) read$FUSE(r0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x68, 0x0, 0xc8}, [@IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x40, 0x10, 0xe5a1, 0xd968d5b908ac0cde, 0x2, {0x0, 0x9}, {0x351, 0x20002}, {0xf4ef}, {0x0, 0x0, 0x7fe}, 0x1, 0x100, 0x9, 0xd614, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x8000, 0x0, 0x200, 0x0, 0x3}) 1.974872279s ago: executing program 0 (id=850): mkdirat(0xffffffffffffff9c, &(0x7f0000001040)='./file1/file0\x00', 0x100) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)=ANY=[@ANYRES32, @ANYRESHEX=0x0, @ANYRES16=0x0]) (async) r0 = socket$nl_crypto(0x10, 0x3, 0x15) (async) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xd}) sendmsg$nl_crypto(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001240)=ANY=[], 0xe0}, 0x1, 0x0, 0x0, 0x20008000}, 0x40000) fanotify_mark(0xffffffffffffffff, 0x12, 0x0, 0xffffffffffffffff, 0x0) (async) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000080)='autofs\x00', 0x10004, &(0x7f0000000400)) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x111) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @multicast2}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3) (async) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) sendto$inet(r3, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a128ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3", 0xa3, 0x12, 0x0, 0x0) (async) recvfrom$inet(r3, 0x0, 0x0, 0xc9100120, 0x0, 0x0) (async) shutdown(r3, 0x1) (async) r4 = socket$inet6(0xa, 0x800, 0x7f) ioctl$F2FS_IOC_DECOMPRESS_FILE(r4, 0xf517, 0x0) r5 = socket$inet(0x2, 0x80000, 0x1) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) (async) syz_emit_ethernet(0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="3ffb73a5319a542f5ad36acf0b5179c4d2590ae4b22c910efc90383bf843b1c5374fb8a320d501b528109d1584c4dd3f697e40f3d6f1922520d975efdcf02f1e3315533f3a4dae5119525a81f4d3010d3db74cb4a456e28730721e5b603d950dd19a3e06810c1bff8279b9889c"], 0x0) (async) lsetxattr$security_capability(&(0x7f0000001080)='./file1/file0\x00', &(0x7f00000010c0), &(0x7f0000001100)=@v1={0x1000000, [{0x1, 0x6}]}, 0xc, 0x2) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) (async) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r7, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, r6, {0x9}}, './file1\x00'}) (async) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000001140)={0x0}, &(0x7f0000001180)=0xc) getpgid(r9) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000440)={{0x1, 0x1, 0x18, r8, {0x3}}, './file1/file0\x00'}) 1.97428778s ago: executing program 3 (id=851): r0 = landlock_create_ruleset(&(0x7f0000000140)={0x10895, 0x3, 0x2}, 0x18, 0x0) (async) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000002c0)=[@in={0x2, 0x4e21, @broadcast}], 0x10) landlock_restrict_self(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0xff) (async, rerun: 64) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) (async, rerun: 64) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys\x00', 0x0, 0x108) ioctl(r2, 0xc138fd83, &(0x7f0000000000)="0400") 1.673753089s ago: executing program 3 (id=852): io_uring_setup(0x1020, &(0x7f00000000c0)={0x0, 0x0, 0x3000, 0x1, 0xfefffffd}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x34) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8fc, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x3, 0xfffffffffffffffe, &(0x7f0000000040)=0x28) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000000680)='dummy_udc.0', 0xb) 1.636261249s ago: executing program 0 (id=853): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x20000880) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) mmap(&(0x7f000009d000/0x4000)=nil, 0x4000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f000049b000/0x2000)=nil) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) bpf$MAP_CREATE(0x2000000000000000, &(0x7f00000000c0)=ANY=[@ANYBLOB="0600000004000000ff0454855b9f226781bbcb1c33a59c9900000000001470bfd4", @ANYRES32, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000feffffff00"/28], 0x50) 1.446841781s ago: executing program 0 (id=854): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000700)={'syz0\x00', {0x1, 0x400, 0x0, 0x6}, 0xe, [0x9b, 0x4, 0xbd, 0xffffffff, 0x1000, 0x8, 0x2, 0x9, 0x0, 0x2, 0x2, 0x7fffffff, 0x7, 0x1, 0x7f, 0xa, 0x3, 0x4, 0x3895, 0x100, 0xfff, 0x0, 0x1, 0x0, 0x2, 0x1000, 0x8, 0x200, 0xdc, 0x4, 0x9, 0x80, 0x8, 0x8, 0x3, 0x9, 0x0, 0x1, 0xc43, 0x5, 0x6, 0x5, 0xfffffff5, 0x1ff, 0xfffffff9, 0x8, 0x352f, 0x6, 0x0, 0x101, 0xb83, 0x8759, 0x9, 0x3, 0x0, 0x921b, 0x54, 0x7fff, 0x6, 0x7, 0x9, 0xd, 0x6, 0x5], [0x7, 0x2, 0xfffffffa, 0x80000000, 0x4, 0x4988, 0x10000, 0x3, 0x1, 0x6bae, 0xffffffff, 0x4, 0x40, 0x6, 0x2, 0x1, 0x10, 0x1, 0x5, 0x2, 0x9, 0x81, 0x6, 0x1, 0x0, 0x5, 0x4, 0x2e7, 0x2, 0x200, 0x5, 0x200, 0x10000, 0xee9, 0xfff, 0x5, 0x4, 0x9, 0x7, 0xffff8000, 0x8, 0xfff, 0x7, 0x254c, 0x6, 0x3, 0xd, 0x9, 0x0, 0xd, 0x4, 0x2, 0x401, 0x1, 0x9, 0x330a, 0x1, 0x9, 0x1, 0xfffffffe, 0x6, 0x2, 0x7fff, 0x8001], [0x6, 0x7, 0x1000, 0x4, 0x3, 0x4, 0x7fff, 0x200, 0x9167, 0x2, 0x7, 0xb5, 0x10001, 0x7, 0x0, 0x6e, 0x6, 0x67, 0x6, 0x4, 0x1, 0x2, 0x5, 0xa, 0x7, 0x3, 0x9, 0x7, 0x7, 0x5, 0x0, 0xffff, 0xa, 0x7, 0x1, 0x1, 0xffffffff, 0x80, 0x1, 0x8, 0x8, 0x4, 0x63, 0x8, 0x81, 0xc, 0xfffffc01, 0x6fd6, 0xffffffff, 0x10000, 0x1000, 0x7, 0x5, 0x8, 0x2, 0x6, 0x101, 0xe, 0x80000001, 0x6, 0x7f, 0x4, 0x6, 0xdac4], [0x6, 0x40, 0x6, 0x80000001, 0x200, 0x400, 0xd, 0x80000000, 0x8, 0x9, 0xffff, 0x10, 0x9, 0x7, 0x5, 0x3, 0x0, 0x20c, 0x256c, 0x1, 0x7, 0xb, 0x7, 0x10000, 0xfffffffd, 0x0, 0x3, 0x8, 0x5, 0x4, 0x7, 0x9, 0x8, 0x8, 0x7, 0x8, 0x1, 0x3, 0xffffb6de, 0x7f, 0xb7, 0x212, 0x4, 0x5, 0x8, 0x7, 0x80000000, 0xff, 0x7, 0x100, 0x10, 0x1, 0x1, 0x6, 0x1, 0x3ff, 0xffff5c94, 0x3, 0x4, 0x9, 0xffffffb0, 0x200000, 0x2, 0x3]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {0x2, 0xf, 0x2, 0x3}, 0x8, [0x9, 0x4, 0x401, 0x7, 0x8, 0x5, 0x3c, 0x4, 0x9, 0x9, 0xff, 0x2, 0x4, 0x1, 0x1, 0x2, 0x7ff, 0x8, 0xfffffff2, 0xfffffffb, 0xf4b, 0x0, 0x1, 0x9, 0x2, 0x9, 0x5b, 0xa81, 0x10000, 0x8, 0x1, 0x5, 0xfffffff7, 0x7, 0x6, 0x3, 0x1ff, 0xfffffffa, 0x4, 0x3, 0xc, 0x400, 0xdf1c, 0x10000, 0x1, 0x6, 0x10000, 0xffffff37, 0x81d, 0x4c, 0x16e0000, 0x0, 0x9, 0xffffffff, 0x3, 0x5, 0x5, 0x7, 0x101, 0x9d, 0x7, 0x6, 0x5120, 0xffff8001], [0x10000, 0x2, 0x1, 0x4, 0x4, 0x8, 0x100, 0x5, 0x1, 0x2, 0x4, 0x0, 0xe7f, 0x7, 0x1, 0x1c00, 0x55, 0x8001, 0x744, 0x5, 0x7d0, 0xea8, 0x5, 0x533, 0x4, 0x0, 0x401, 0x0, 0x4, 0x9, 0x5, 0x8, 0x1, 0xe, 0x8, 0x1, 0xfffffff7, 0x43f, 0x401, 0x1e1, 0x6, 0x5, 0x8, 0x8, 0x4, 0x6, 0x1000, 0x7, 0x7, 0x3, 0xc27, 0x6, 0x28d76d5b, 0x1, 0x3, 0x5, 0x0, 0x8, 0x4, 0x401, 0x8, 0x9, 0x9a37, 0xb3bd2d5], [0x7, 0xff, 0x8de, 0x5, 0x401, 0x0, 0x2, 0x6be2e0ae, 0x50, 0x2c1, 0x9, 0x3ff, 0x3, 0x1, 0x0, 0x8, 0x6, 0x3, 0x9, 0xa, 0x6d, 0x8, 0x7, 0x8, 0x4, 0x726, 0x5, 0x4, 0xcad5, 0x8, 0x6, 0x80000000, 0x4, 0x3, 0xc27, 0xffffffff, 0x10000, 0xb6, 0x5, 0x6, 0x9, 0x4, 0xb2, 0x3, 0x3, 0x10001, 0x7fff, 0x3, 0x6, 0xa9, 0x7fff, 0x1b47af25, 0x7fff, 0x300, 0x9, 0x5, 0x4, 0x8926, 0x7, 0x40, 0x7f, 0x3, 0x8, 0x5], [0x61ffd85e, 0x7, 0x1, 0x7, 0x8, 0x5faf, 0xfffffff7, 0x5, 0x6, 0x1, 0x40, 0x2, 0xffff, 0x400, 0x10000, 0x4, 0x4, 0x4c19, 0x2, 0x1ff, 0x401, 0x4, 0x8, 0xf3, 0xec, 0x1, 0x5, 0x51a, 0x10000, 0xde55, 0x4, 0x3, 0x80000000, 0x673, 0x9, 0x2, 0x3, 0xffff, 0x2, 0x5, 0x9, 0x3, 0x5, 0x3, 0x60, 0x1, 0x2, 0x4, 0x7, 0x8000, 0x7, 0x401, 0x400, 0x7ff, 0x5, 0xfff, 0x6, 0x0, 0xd, 0x0, 0x7, 0x6, 0x7dc, 0x1]}, 0x45c) 1.443862901s ago: executing program 0 (id=855): ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x8001, 0x7, 0x2582}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00 \x00'/24], 0x48) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000700)=ANY=[@ANYBLOB="ec000000", @ANYRES16=0x0, @ANYBLOB="000326bd7000fedb0014000180080001000000000000c495f16cdde0377935cea4d867447436a6a857df208f2a7cf2b0213c88dd", @ANYRES32=0x0, @ANYBLOB="08000300030000007000018008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1400020070696d7265670000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300010000001400020076657468305f6d616376746170000000140002006d6163766c616e300000000000000000140001800800030003000000080003000200000028000180140002006e696376663000000000000000000000080003000300000008000300030000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="0c00018008000100", @ANYRES32=0x0, @ANYBLOB], 0xec}, 0x1, 0x0, 0x0, 0x8800}, 0x24000010) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), 0x0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$cgroup(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={[{@subsystem='net_prio'}, {@noprefix}]}) 1.343383102s ago: executing program 4 (id=856): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x188}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) socket$kcm(0x29, 0x5, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, r3, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x104, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bdbf}}}, 0x0) r4 = memfd_create(&(0x7f0000000240)='l2tp\x00', 0x6) io_setup(0x714, &(0x7f0000003280)=0x0) io_submit(r5, 0x1, &(0x7f0000006700)=[&(0x7f00000033c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x100000000, 0x0, 0x2}]) r6 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) 1.330963022s ago: executing program 1 (id=857): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x188}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) socket$kcm(0x29, 0x5, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, r3, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x104, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bdbf}}}, 0x0) r4 = memfd_create(&(0x7f0000000240)='l2tp\x00', 0x6) io_setup(0x714, &(0x7f0000003280)=0x0) io_submit(r5, 0x1, &(0x7f0000006700)=[&(0x7f00000033c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x100000000, 0x0, 0x2}]) (fail_nth: 1) r6 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) 1.032033951s ago: executing program 5 (id=858): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/block/md123/md/array_state\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 1.002854852s ago: executing program 5 (id=859): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2c7, &(0x7f0000000280)="$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") sendmmsg$alg(0xffffffffffffffff, &(0x7f00000009c0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)='?', 0x1}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) io_uring_enter(r0, 0x3d99, 0xf329, 0x50, &(0x7f0000000080)={[0x5]}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x4, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3, 0xc, 0x4, 0xb}, {0xff, 0x1, 0x3, 0x7}]}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="94010000100001002dbd700000000000ff0200000000000000000000000000018c14140d000000000000000000000000000000000a00000000000000442c019ff16d484a6384f92d8fcdfcea715e2c601400a864e9df414378882865ecdd20fc6ed600000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x194}}, 0x44050) 643.035567ms ago: executing program 5 (id=860): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000040)=ANY=[], 0x9, 0x20c, &(0x7f0000000500)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x9, [@enum={0x7, 0x1, 0x0, 0x6, 0x4, [{0x3}]}]}, {0x0, [0x61, 0x0, 0x61, 0x2e, 0x61, 0x0, 0x61]}}, 0x0, 0x35}, 0x28) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000007c0)={'xfrm0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000f938a6356fc7770cbfd823c4d19f104905d325f0037c57143860a835622b80b250b9553652499cb7697c52323addb2b0bf28f8bc9f7f0d52519840f66f7f290ebc9dc87f626e9fd8f47aaada63c3ed5082b0e14e4e5819a5bc326acbe96b7658240a72a81d3c9d992fa1e0d8", @ANYRES16=r1, @ANYRES8=r0], 0x44}}, 0x20008004) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x181042, 0x81) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000040)=ANY=[], 0x9, 0x20c, &(0x7f0000000500)="$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") (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x9, [@enum={0x7, 0x1, 0x0, 0x6, 0x4, [{0x3}]}]}, {0x0, [0x61, 0x0, 0x61, 0x2e, 0x61, 0x0, 0x61]}}, 0x0, 0x35}, 0x28) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000007c0)={'xfrm0\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000f938a6356fc7770cbfd823c4d19f104905d325f0037c57143860a835622b80b250b9553652499cb7697c52323addb2b0bf28f8bc9f7f0d52519840f66f7f290ebc9dc87f626e9fd8f47aaada63c3ed5082b0e14e4e5819a5bc326acbe96b7658240a72a81d3c9d992fa1e0d8", @ANYRES16=r1, @ANYRES8=r0], 0x44}}, 0x20008004) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x181042, 0x81) (async) 637.535548ms ago: executing program 3 (id=861): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000580)) pipe2$9p(&(0x7f00000002c0), 0x10000) (async) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff}, 0x10000) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1904002, &(0x7f0000000300)=ANY=[@ANYBLOB="64556f3d00080000f30f6d47cd0000", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',access=client,fsmagic=0x0000000000000008,fscontext=unconfined_u,audit,hash,\x00']) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000001c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0xe, 0x7}]}) (async) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000001c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0xe, 0x7}]}) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) (async) close_range(r2, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000cbffffff00000000000000008500000041000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) ioctl$BTRFS_IOC_FS_INFO(r3, 0x8400941f, &(0x7f0000000680)) syz_emit_ethernet(0x42, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaa11ce6c5d37490800480000340000000000069078ac1414bb7f000001440c0d63e0000001100000054e224001516fb6a5c374e928f7e0122c99872b938e9f84b302c918f6100e0f52830170046ab4ff352f43de27524bd515df78d7baaf18c82f85533fec3d0f29e642f3ed4e94fb760bf8a04c75ca22ad28772f7717716eb4d521ce41f8ccdfec4785cbaa", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50027fff90780000"], 0x0) (async) syz_emit_ethernet(0x42, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaa11ce6c5d37490800480000340000000000069078ac1414bb7f000001440c0d63e0000001100000054e224001516fb6a5c374e928f7e0122c99872b938e9f84b302c918f6100e0f52830170046ab4ff352f43de27524bd515df78d7baaf18c82f85533fec3d0f29e642f3ed4e94fb760bf8a04c75ca22ad28772f7717716eb4d521ce41f8ccdfec4785cbaa", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50027fff90780000"], 0x0) 624.002379ms ago: executing program 5 (id=862): syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file1\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) r0 = inotify_init1(0x80800) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x800007a1) (async, rerun: 64) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) (rerun: 64) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="58010000100001000000000000000000ac141444000000000000000000000000ff0100000000000000000000000000010000ecdf000000000a00002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x158}}, 0x4004004) 614.105941ms ago: executing program 3 (id=863): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0x40}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r2}, 0x20) r3 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e22, 0xffffffff, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) setsockopt$inet_tcp_int(r3, 0x6, 0x2c, &(0x7f0000000140)=0xfb78, 0x4) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000005c0)) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) connect$llc(r4, &(0x7f0000000240)={0x1a, 0x20, 0xfc, 0x9, 0x2, 0x80, @random='\x00\x00\x00\x00\x00\a'}, 0x10) r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r5, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000040)) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r1, @ANYRESDEC=r0, @ANYRESHEX=r0, @ANYRES8], 0xe4}, 0x1, 0x0, 0x0, 0x4000000}, 0x90becf72506fa82f) 561.763051ms ago: executing program 0 (id=864): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x61) syz_mount_image$fuse(0x0, &(0x7f00000004c0)='./file7\x00', 0x2020, 0x0, 0x3e, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) recvmmsg$unix(r2, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(0xffffffffffffffff, 0xc028644b, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@getqdisc={0x3c, 0x26, 0x1, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x4, 0x6}, {0x1d, 0xfff1}, {0x1, 0x10}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x98}, 0x4040805) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=@newtfilter={0x24, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6, 0x5}, {}, {0x7, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c894}, 0x24040084) 542.888983ms ago: executing program 3 (id=865): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)=""/185, 0xb9}], 0x1, &(0x7f00000013c0)=""/10, 0xa}, 0xc}], 0x1, 0x22, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000100)={0x0, 0x0}) syz_open_dev$usbfs(&(0x7f0000000180), 0x10, 0x80100) munmap$IORING_OFF_CQ_RING(0x0, 0x10000000ffffffff) syz_open_dev$usbfs(&(0x7f0000000240), 0xff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r5, 0xffffae1d) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0xfa2, @private2={0xfc, 0x2, '\x00', 0xfd}, 0x2}]}, &(0x7f0000000080)=0x10) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet(0xa, 0x801, 0x84) socket$inet(0xa, 0x801, 0x84) listen(r8, 0xfffffffd) r9 = socket$inet(0xa, 0x801, 0x84) listen(r9, 0x1) r10 = socket$netlink(0x10, 0x3, 0x4) listen(r7, 0x8200002) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x10, 0x3}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r10) writev(r10, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) syz_open_dev$usbfs(&(0x7f0000000200), 0x10, 0x0) sendmsg$netlink(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000940)=ANY=[@ANYBLOB="380000002c000100000000000000000008000000", @ANYRES32=r4, @ANYBLOB="0a000280976bc6c748f50d64086860300047c2bdf088048b000000802c2304c9"], 0x38}], 0x1}, 0x0) 541.753307ms ago: executing program 0 (id=866): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) pwritev(r0, &(0x7f0000003100)=[{&(0x7f0000000100)="472acdb6bcf80915d2b2ae442910f526b3f3a2d808378519588496d0eeb78c5129a6efcde0ad01e88c2e199d2f66ad7a40f8125a86b6c32dc2774d839f01d2909f8a4d601b080000000000000036b048db5d5b090000000a45ab0a8e489ec6ee8e69c9cd6209aa935ece036a1f2da4169514a0e20184bf43af2a3b1279c9af5fa5c2f59ce0498565273799d7c3b6ee1fa0dc8cca26f268e2828eec41a1df36b895b0dd222721cb3c5cb36041b58414a7c3ed91ea98", 0xb5}], 0x1, 0x3, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES16=r0], 0xb8}}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x10}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe8}, 0x40000080) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 495.021359ms ago: executing program 5 (id=867): mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x5, &(0x7f0000000140)=0xd, 0x8, 0x1) futex_waitv(&(0x7f0000001b00)=[{0xffb, &(0x7f0000000240)=0x200000006, 0xa}], 0x1, 0x0, 0x0, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0xe, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="0701000009f809170500feff"], &(0x7f0000000000)='GPL\x00', 0xd, 0x8e, &(0x7f0000003300)=""/142, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x11}, 0x94) r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newtaction={0x18, 0x30, 0x8, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) r1 = gettid() syz_pidfd_open(r1, 0x0) 475.685307ms ago: executing program 5 (id=868): r0 = syz_open_dev$dri(&(0x7f0000000240), 0x2800000, 0x140000) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x21, 0x10, 0xecca, 0x4, 0x4, 0x4, 0x2, 0x9, 0x6}) r1 = syz_clone(0x2a102211, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900004001000000000000000000000100ffff0003000000000000000000000000ffff"], 0x4c}}, 0x20000800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x13, &(0x7f0000000000)=0xc0, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r5, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x14, 0x0, 0xa00, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="90000000", @ANYRES16=r7, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r8, @ANYBLOB="7400028038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004"], 0x90}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="540000000806010800000000000000000100000a05000100070000000500010007000000050001ff"], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x24000012) fcntl$getownex(r3, 0x10, &(0x7f0000000040)={0x0, 0x0}) setpgid(r9, r1) setpgid(0x0, r1) wait4(r1, 0x0, 0x2, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r4, 0x810c9365, &(0x7f00000003c0)={{0x7230, 0x5}, 0x100, './file0\x00'}) syz_pidfd_open(r1, 0x0) 141.218824ms ago: executing program 4 (id=869): r0 = socket(0x2b, 0x1, 0x1) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x7d4165c9) accept(r0, &(0x7f0000000280)=@pptp={0x18, 0x2, {0x0, @private}}, &(0x7f0000000300)=0x80) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x0) listen(r0, 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0xd) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r8) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[], [], 0x2c}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r10, &(0x7f0000000180), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) 108.420714ms ago: executing program 4 (id=870): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x80801) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_driver={0x0, 0x80805513, 0x0}) (async) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x4000000002a82, 0x0) fadvise64(r1, 0x8, 0x800002, 0x4) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000200)=0x2, 0x4) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newqdisc={0x40, 0x24, 0xf0b, 0x80000000, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_BYTEMODE={0x8, 0x7, 0x1}, @TCA_PIE_ECN={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8080}, 0x810) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) r6 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r6, &(0x7f0000000480)={0xa, 0x4e1d, 0x1, @mcast1={0xff, 0x5}, 0x8}, 0x7a) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r7, 0xffffffff80000800, 0x0, &(0x7f0000000180)={0x8, 0x0, 0x4, 0x0, 0x4, 0x6, 0xa, 0x3, 0xa42c}) (async) unlinkat(r7, &(0x7f0000000180)='./file0\x00', 0x200) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r9, 0x29, 0x6, &(0x7f0000000000)={0x7d, {{0x29, 0x0, 0x3000000, @local, 0x5}}}, 0x88) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) write$UHID_INPUT(r8, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0xb00) (async) lsetxattr$trusted_overlay_origin(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), &(0x7f0000000340), 0x2, 0x3) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x13, r8, 0x0) syz_usb_connect$hid(0x1, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000081c1b3e1b0000000000010902240001000010000904004c19c1c4010009210100fc01222800090581032004088102"], 0x0) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') (async) bpf$ENABLE_STATS(0x20, &(0x7f0000000240), 0x4) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r10, 0x5509, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000010c0)={0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x10}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000418150000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7000000000000007b5af8ff00000000bfa200000000000007020000d6ffffffb703000008000000b704000000000000850000001400000095"], &(0x7f0000000280)='GPL\x00', 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 18.904536ms ago: executing program 1 (id=871): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x242, 0x1b9) fallocate(r0, 0x0, 0x5, 0x8ffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0xc8) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file0\x00', 0x800000, &(0x7f0000000200)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303136323134372c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c6e6f6e756d7461696c3d302c696f636861727365743d6b6f69382d72752c756e695f786c6174653d302c696f636861727365743d757466382c6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7379735f696d6d757461626c652c757466383d302c0074c3fc52ac6365d676e1"], 0x1, 0x37f, &(0x7f0000001640)="$eJzs3U9rXFUUAPDTsfmryWQhgop46c7NkMQv0CAtiAEldqS6EF7NpA6ZZsK8ITJFtAvBrd/AfXHpThC/QBa6d+cuG5ddlD6Zf2mSjiklTR7V3w+Ge97ce2bufY/3uJvHObj5w53trby2lXWjcjVFJSIqDyKWBtHQpVFbGcTTcdS9eKd688+3Pv70sw/W1tevbaR0fe3Gu6sppcW3f/3q65+u/NZ9+ZOfF3+Zif2lzw/+Xv1r/7X91w8e3fiymadmnnba3ZSlW+12N7vVaqTNZr5dS+mjViPLG6m5kzc6x/q3Wu3d3V7KdjYX5nc7jTxP2U4vbTd6qdtO3U4vZbez5k6q1WppYT54mvr9jY1sbRjPnjLu6kVNiHPQ6axl/Xt45ome+v1SJgQAlOqs+//p57r/nwr7/4t0dP/Pf1V//z89un+Ps/8HAAAAAAAAAAAAAIAXwYOiqBZFUR23xfgl4dFxydPjnD1x/U98yp4f5+vIi3uzEa3v9+p79WE77F/bima0ohHLUY2H/cfC2DC+/v76teU0sBQLd74d5F/5PaL+0vH8lajG0uT8lWF+OsyPfjsV80fzV6Mar07OX52YPx3LPx7Jr0U1/vgi2tGKzcHj7XH+Nyspvffh+on8mcE4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP4famnszRjWvd+rR8zF3qh+f+3xgKXj9fGH+Yf19ZejGg8n1+dfnlif/3K8cbnctQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAWN67u521Wo3ORQXjmv+Db6bHwb9nXRoOv3eiay6OD5552u+cMag8U9bcaJETuh4VRTEIbn/33Kc6e7GX8izBVEScMqYYncCz/9crEXHKmJmIONeVLvaDSvkn/JmDMp5GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUK7Dot/9g0tlzwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICy5L2721mr1eicY1D2GgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF4k/wQAAP//La4MhQ==") mkdirat(0xffffffffffffff9c, &(0x7f0000005a00)='./gadget\x00', 0x930aa59063c1a109) write$tun(0xffffffffffffffff, 0x0, 0x6a) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x20542, 0x15) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xc00) pwrite64(r1, &(0x7f00000005c0)='\"', 0xed1, 0x4fed0) 0s ago: executing program 1 (id=872): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000440)={[{@data_err_ignore}, {@errors_remount}, {@test_dummy_encryption}, {@noquota}, {@usrquota}, {@nodelalloc}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}, {@jqfmt_vfsold}, {@nodelalloc}]}, 0x1, 0x48d, &(0x7f0000000c80)="$eJzs3M9vFFUcAPDvTH+BCEXEHyBqlZg0GltaUDl4UKOJMRiNesBjbRfSsFBDqxEkUozxZGJI9Ew8Gv0LvBkTop5MuBoPngwJUS6Ap5qZnaHLsgvUbtnS/XySad+bebPzvju/3ry3uwF0raGImI+IuyPi94gYjIikscBQ7d/liycmr1w8MZnEwsLbfyd5uUsXT0yWRfP1eiM2FJnhNCL9LKmt3GD22PFDE9Vq5WiRH507/P7o7LHjT394eOJg5WDlyPjevXt2jz337PgzbYkzi+vS9k9mdmx79d3Tr0/uP/3eL98nRdzREEe7DGWB/7OQa1z2RLs31mEb69JJbwcrwpL01E7Z6MvP/8HoicWdNxivfNrRygErKrs3DbRePL8ArGHJW2cXLwVAFylv9NnzbzndjnbHanHhxdoDUBb35WKqLemNtCjT1/B8205DEbF//t8z2RQr1A8BAFDvi8mv9/VHxMdXvnsta3sMRkTZH3R//vfP/O+mYgxlc0TcExFbIuLeiNgaEfcVZR+IiAeXWZ/r2z/p+WW+5A1l7b/ni7Gta9t/ZesvNvcUuY15/H3JgelqZVcM5O/JcPQNZPmxG2zjx5fPfdlqWX37L5uy7ZdtwaIe53sbOuimJuYm8kZpG1w4FbG9t1n8ydWRgCQitkXE9qW99KYyMf3ktztaFWoe/6Uzt7SFNowzLXyThTefxT8fDfGXkvrxyenrxidH10W1smu0dlQ08+tvn7/Zavs33/8r60Kl9r9u/zcW2ZzUj9fOtnf7//P4T/uTd/Jx5v5i3kcTc3NHxyL6k315/pr544vrlvmyfHb8D+9sfv5vKdbJ4n8oIrKD+OGIeCQiHi3q/lhEPB4RO28Q488v3Tz+SDu0/09FTDW9/l09/hv2/9ITPYfO/tBq+7e2//fkqeFiTn79u4lm1ckuF40VXM57BwAAAHeKNP8MfJKOXE2n6chI7TP8W+OutDozO/fUgZkPjkzFuU21/s+07OkaLPpDq9PVylgyX7xirX90vOgrLvtLdxf9xl/1rM/zI5Mz1akOxw7dbkOL8z/zV0+nawessPVN54733/aKAB3QOI6eLiYHIuLkG+FiAGuV72tD9yrP/xbP+/XfgwHWGPd/6F7Nzv+TDXljAbA2uf9D93L+Q5dKf1rGyp4K4E7n/g9daTnf61/BxLrVUY3OJFbrTskTEWUibVnmj+KXGlZLnZeaeKH4cczVUp+OJDp9ZQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGiP/wIAAP//TR7jdg==") kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.143' (ED25519) to the list of known hosts. [ 28.784354][ T4701] cgroup: Unknown subsys name 'net' [ 28.924392][ T4701] cgroup: Unknown subsys name 'cpuset' [ 28.926570][ T4701] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.115261][ T4701] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 30.570271][ T4715] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 30.580594][ T4718] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 30.582198][ T4718] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 30.585504][ T4720] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 30.585634][ T4720] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 30.585689][ T4720] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 30.585807][ T4720] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 30.589772][ T4720] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 30.589882][ T4720] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 30.602042][ T4726] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 30.602501][ T4723] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 30.602618][ T4723] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 30.603348][ T4723] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 30.603603][ T4723] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.604025][ T4726] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 30.605932][ T4726] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 30.606173][ T4726] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.606672][ T4726] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 30.606866][ T4715] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 30.606995][ T4715] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.608484][ T4726] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 30.609943][ T4726] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 30.610078][ T4726] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.620093][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 30.626775][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.900759][ T4712] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.901205][ T4712] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.901278][ T4712] bridge_slave_0: entered allmulticast mode [ 30.901780][ T4712] bridge_slave_0: entered promiscuous mode [ 30.912542][ T4712] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.912590][ T4712] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.912656][ T4712] bridge_slave_1: entered allmulticast mode [ 30.913320][ T4712] bridge_slave_1: entered promiscuous mode [ 30.953363][ T4712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.961158][ T4712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.970934][ T4712] team0: Port device team_slave_0 added [ 30.985817][ T4712] team0: Port device team_slave_1 added [ 31.025547][ T4721] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.026941][ T4721] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.027036][ T4721] bridge_slave_0: entered allmulticast mode [ 31.027480][ T4721] bridge_slave_0: entered promiscuous mode [ 31.030206][ T4712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.030216][ T4712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.030230][ T4712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.031319][ T4712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.031327][ T4712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.031339][ T4712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.042311][ T4712] hsr_slave_0: entered promiscuous mode [ 31.042659][ T4712] hsr_slave_1: entered promiscuous mode [ 31.058658][ T4721] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.060166][ T4721] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.061524][ T4721] bridge_slave_1: entered allmulticast mode [ 31.063276][ T4721] bridge_slave_1: entered promiscuous mode [ 31.091120][ T4713] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.091200][ T4713] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.091259][ T4713] bridge_slave_0: entered allmulticast mode [ 31.091708][ T4713] bridge_slave_0: entered promiscuous mode [ 31.095652][ T4711] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.095680][ T4711] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.095768][ T4711] bridge_slave_0: entered allmulticast mode [ 31.096210][ T4711] bridge_slave_0: entered promiscuous mode [ 31.097023][ T4711] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.097044][ T4711] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.097134][ T4711] bridge_slave_1: entered allmulticast mode [ 31.097868][ T4711] bridge_slave_1: entered promiscuous mode [ 31.106673][ T4713] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.106747][ T4713] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.106805][ T4713] bridge_slave_1: entered allmulticast mode [ 31.107280][ T4713] bridge_slave_1: entered promiscuous mode [ 31.109601][ T4721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.125640][ T4721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.130889][ T4711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.131862][ T4711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.149606][ T4713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.154945][ T4711] team0: Port device team_slave_0 added [ 31.159773][ T4711] team0: Port device team_slave_1 added [ 31.162732][ T4713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.165927][ T4724] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.167347][ T4724] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.168787][ T4724] bridge_slave_0: entered allmulticast mode [ 31.169263][ T4724] bridge_slave_0: entered promiscuous mode [ 31.170069][ T4724] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.170089][ T4724] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.170189][ T4724] bridge_slave_1: entered allmulticast mode [ 31.170588][ T4724] bridge_slave_1: entered promiscuous mode [ 31.171613][ T4721] team0: Port device team_slave_0 added [ 31.172350][ T4721] team0: Port device team_slave_1 added [ 31.192581][ T4721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.192610][ T4721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.192638][ T4721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.193279][ T4721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.193286][ T4721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.193298][ T4721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.202030][ T4713] team0: Port device team_slave_0 added [ 31.203360][ T4713] team0: Port device team_slave_1 added [ 31.214573][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.215837][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.220210][ T4711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.222547][ T4713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.222570][ T4713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.222584][ T4713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.224965][ T4721] hsr_slave_0: entered promiscuous mode [ 31.225349][ T4721] hsr_slave_1: entered promiscuous mode [ 31.225580][ T4721] debugfs: 'hsr0' already exists in 'hsr' [ 31.225622][ T4721] Cannot create hsr debugfs directory [ 31.230623][ T4724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.231681][ T4724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.236830][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.236839][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.236852][ T4711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.239061][ T4713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.239070][ T4713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.239083][ T4713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.258913][ T4724] team0: Port device team_slave_0 added [ 31.268094][ T4724] team0: Port device team_slave_1 added [ 31.274578][ T4711] hsr_slave_0: entered promiscuous mode [ 31.274884][ T4711] hsr_slave_1: entered promiscuous mode [ 31.275101][ T4711] debugfs: 'hsr0' already exists in 'hsr' [ 31.275111][ T4711] Cannot create hsr debugfs directory [ 31.290829][ T4713] hsr_slave_0: entered promiscuous mode [ 31.292599][ T4713] hsr_slave_1: entered promiscuous mode [ 31.294346][ T4713] debugfs: 'hsr0' already exists in 'hsr' [ 31.294374][ T4713] Cannot create hsr debugfs directory [ 31.306014][ T4724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.306038][ T4724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.307504][ T4724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.308212][ T4724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.308220][ T4724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.308232][ T4724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.318444][ T4724] hsr_slave_0: entered promiscuous mode [ 31.319092][ T4724] hsr_slave_1: entered promiscuous mode [ 31.319280][ T4724] debugfs: 'hsr0' already exists in 'hsr' [ 31.319290][ T4724] Cannot create hsr debugfs directory [ 31.336558][ T4712] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.339988][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.340759][ T4712] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.342387][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.354162][ T4712] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.356744][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.366919][ T4712] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.369143][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.435004][ T4712] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.435063][ T4712] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.435224][ T4712] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.435253][ T4712] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.451836][ T4721] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.455834][ T4721] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.457545][ T4721] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.459945][ T4721] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.461675][ T4721] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.464300][ T4721] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.475914][ T4721] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.478088][ T4721] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.485803][ T4711] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.489001][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.491580][ T4711] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.494354][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.498189][ T4721] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.498226][ T4721] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.498308][ T4721] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.498341][ T4721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.500290][ T4711] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.501962][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.510053][ T4711] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.512211][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.514206][ T4712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.526522][ T4713] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.528880][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.530546][ T4713] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.532620][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.535857][ T4712] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.538519][ T3934] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.540329][ T3934] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.544372][ T3934] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.545917][ T3934] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.557665][ T4713] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.559913][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.560279][ T4713] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.562167][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.566794][ T3934] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.566931][ T3934] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.597613][ T1207] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.597659][ T1207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.600394][ T4724] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.602645][ T4724] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.604356][ T4724] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.606100][ T4724] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.610538][ T4724] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.612564][ T4724] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.613756][ T4724] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.614811][ T4724] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.631050][ T4721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.656981][ T4721] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.667921][ T4713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.672817][ T1207] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.672894][ T1207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.687575][ T4711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.690323][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.690362][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.700861][ T4713] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.723629][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.723677][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.728168][ T4711] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.730418][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.730456][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.759753][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.759808][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.760187][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.760209][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.762172][ T4724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.766541][ T4724] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.777360][ T3569] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.777406][ T3569] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.777784][ T3569] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.777802][ T3569] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.796191][ T4713] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.797502][ T4712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.821013][ T4711] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.850718][ T4712] veth0_vlan: entered promiscuous mode [ 31.864974][ T4712] veth1_vlan: entered promiscuous mode [ 31.870543][ T4712] veth0_macvtap: entered promiscuous mode [ 31.871638][ T4712] veth1_macvtap: entered promiscuous mode [ 31.881231][ T4712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.883813][ T4712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.894319][ T3569] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.894464][ T3569] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.894487][ T3569] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.894503][ T3569] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.932397][ T3934] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.932432][ T3934] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.969916][ T3569] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.969951][ T3569] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.006705][ T4721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.023644][ T4721] veth0_vlan: entered promiscuous mode [ 32.028509][ T4712] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.032542][ T4721] veth1_vlan: entered promiscuous mode [ 32.040885][ T4721] veth0_macvtap: entered promiscuous mode [ 32.050841][ T4721] veth1_macvtap: entered promiscuous mode [ 32.062578][ T4721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.068067][ T4721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.077819][ T3569] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.077912][ T3569] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.077969][ T3569] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.078019][ T3569] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.089375][ T4713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.101139][ T4713] veth0_vlan: entered promiscuous mode [ 32.110375][ T4713] veth1_vlan: entered promiscuous mode [ 32.118040][ T4882] loop0: detected capacity change from 0 to 4096 [ 32.120024][ T4882] EXT4-fs: inline encryption not supported [ 32.122609][ T4882] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 32.122637][ T4882] EXT4-fs (loop0): Test dummy encryption mode enabled [ 32.137800][ T4882] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 32.137887][ T4882] System zones: 0-5 [ 32.144521][ T4882] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.171254][ T4724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.179235][ T4713] veth0_macvtap: entered promiscuous mode [ 32.182437][ T4711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.189963][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.189992][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.194592][ T4713] veth1_macvtap: entered promiscuous mode [ 32.198276][ T4713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.205929][ T4713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.288360][ T4891] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 32.320846][ T4711] veth0_vlan: entered promiscuous mode [ 32.324558][ T4711] veth1_vlan: entered promiscuous mode [ 32.331318][ T4711] veth0_macvtap: entered promiscuous mode [ 32.358836][ T4711] veth1_macvtap: entered promiscuous mode [ 32.388969][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.389002][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.398733][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.399790][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.405417][ T40] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.405790][ T40] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.405846][ T40] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.405896][ T40] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.407660][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.407670][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.414326][ T40] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.414467][ T40] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.414542][ T40] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.415169][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.434951][ T3569] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.434982][ T3569] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.458862][ T4712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.474896][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.474931][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.476089][ T4724] veth0_vlan: entered promiscuous mode [ 32.477790][ T4724] veth1_vlan: entered promiscuous mode [ 32.489953][ T4724] veth0_macvtap: entered promiscuous mode [ 32.502065][ T4724] veth1_macvtap: entered promiscuous mode [ 32.514548][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.514581][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.521741][ T4724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.528920][ T4724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.539259][ T4897] loop2: detected capacity change from 0 to 128 [ 32.549744][ T4899] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6'. [ 32.561699][ T4897] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 32.653571][ T50] Bluetooth: hci4: command tx timeout [ 32.654783][ T4718] Bluetooth: hci3: command tx timeout [ 32.654900][ T4718] Bluetooth: hci1: command tx timeout [ 32.654976][ T4718] Bluetooth: hci2: command tx timeout [ 32.658968][ T4720] Bluetooth: hci0: command tx timeout [ 32.681752][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.681787][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.685796][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.686017][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.686053][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.686068][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.778835][ T4904] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3'. [ 32.940098][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.940140][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.992783][ T4908] loop1: detected capacity change from 0 to 4096 [ 33.007053][ T4908] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.027826][ T4911] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5'. [ 33.031737][ T4911] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5'. [ 33.036623][ T4912] loop3: detected capacity change from 0 to 1024 [ 33.040502][ T4912] ======================================================= [ 33.040502][ T4912] WARNING: The mand mount option has been deprecated and [ 33.040502][ T4912] and is ignored by this kernel. Remove the mand [ 33.040502][ T4912] option from the mount to silence this warning. [ 33.040502][ T4912] ======================================================= [ 33.059824][ T4912] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 33.075303][ T4912] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4: bg 0: block 112: padding at end of block bitmap is not set [ 33.096056][ T4912] EXT4-fs error (device loop3): ext4_free_blocks:6718: comm syz.3.4: Freeing blocks not in datazone - block = 0, count = 16 [ 33.288379][ T4713] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.375978][ T4721] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 33.796449][ T4711] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 34.307261][ T4939] ieee802154 phy0 wpan0: encryption failed: -22 [ 34.311556][ T4939] loop2: detected capacity change from 0 to 256 [ 34.329456][ T4939] syz.2.13: attempt to access beyond end of device [ 34.329456][ T4939] loop2: rw=8912896, sector=1768, nr_sectors = 4 limit=256 [ 34.329506][ T4939] syz.2.13: attempt to access beyond end of device [ 34.329506][ T4939] loop2: rw=8388608, sector=1768, nr_sectors = 4 limit=256 [ 34.329579][ T4939] syz.2.13: attempt to access beyond end of device [ 34.329579][ T4939] loop2: rw=8388608, sector=1768, nr_sectors = 4 limit=256 [ 34.329610][ T4939] syz.2.13: attempt to access beyond end of device [ 34.329610][ T4939] loop2: rw=8388608, sector=1768, nr_sectors = 4 limit=256 [ 34.329640][ T4939] syz.2.13: attempt to access beyond end of device [ 34.329640][ T4939] loop2: rw=8388608, sector=1768, nr_sectors = 4 limit=256 [ 34.329668][ T4939] syz.2.13: attempt to access beyond end of device [ 34.329668][ T4939] loop2: rw=8388608, sector=1768, nr_sectors = 4 limit=256 [ 34.329696][ T4939] syz.2.13: attempt to access beyond end of device [ 34.329696][ T4939] loop2: rw=8388608, sector=1768, nr_sectors = 4 limit=256 [ 34.329724][ T4939] syz.2.13: attempt to access beyond end of device [ 34.329724][ T4939] loop2: rw=8388608, sector=1768, nr_sectors = 4 limit=256 [ 34.329751][ T4939] syz.2.13: attempt to access beyond end of device [ 34.329751][ T4939] loop2: rw=8388608, sector=1768, nr_sectors = 4 limit=256 [ 34.329779][ T4939] syz.2.13: attempt to access beyond end of device [ 34.329779][ T4939] loop2: rw=8388608, sector=1768, nr_sectors = 4 limit=256 [ 34.563638][ T4951] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17'. [ 34.563729][ T4950] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17'. [ 34.568015][ T4950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17'. [ 34.632799][ T4955] netlink: 'syz.1.15': attribute type 3 has an invalid length. [ 34.632842][ T4955] netlink: 'syz.1.15': attribute type 3 has an invalid length. [ 34.644046][ T4951] loop0: detected capacity change from 0 to 512 [ 34.671603][ T4951] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.677065][ T4951] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.733182][ T4715] Bluetooth: hci4: command tx timeout [ 34.733220][ T4715] Bluetooth: hci0: command tx timeout [ 34.733248][ T4715] Bluetooth: hci2: command tx timeout [ 34.733268][ T4715] Bluetooth: hci3: command tx timeout [ 34.736274][ T4960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18'. [ 34.804887][ T4964] capability: warning: `syz.4.19' uses deprecated v2 capabilities in a way that may be insecure [ 34.834528][ T4967] Zero length message leads to an empty skb [ 34.834858][ T4967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20'. [ 34.844502][ T4967] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.859442][ T4967] bridge_slave_1 (unregistering): left allmulticast mode [ 34.859478][ T4967] bridge_slave_1 (unregistering): left promiscuous mode [ 34.859516][ T4967] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.930003][ T4973] xt_connbytes: Forcing CT accounting to be enabled [ 34.930075][ T4973] xt_NFQUEUE: number of total queues is 0 [ 34.936415][ T4973] loop0: detected capacity change from 0 to 128 [ 34.962718][ T4973] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 35.005194][ T4972] ima: policy update failed [ 35.005538][ T30] audit: type=1802 audit(34.980:2): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.3.23" res=0 errno=0 [ 35.118609][ T4988] netlink: 4 bytes leftover after parsing attributes in process `syz.3.26'. [ 35.133152][ T50] Bluetooth: hci1: command tx timeout [ 35.515836][ T5003] loop3: detected capacity change from 0 to 8192 [ 35.555896][ T5003] loop3: p1 < > p3 < p5 > p4 [ 35.574516][ T5003] loop3: p4 size 3081 extends beyond EOD, truncated [ 35.575207][ T5003] loop3: p5 size 3081 extends beyond EOD, truncated [ 35.771782][ T5027] xt_NFQUEUE: number of total queues is 0 [ 35.917971][ T5032] loop1: detected capacity change from 0 to 512 [ 35.946474][ T5032] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.964892][ T5032] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz.1.39: iget: checksum invalid [ 35.981272][ T4713] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.060718][ T5043] netlink: 'syz.1.43': attribute type 10 has an invalid length. [ 36.067104][ T5043] team0: Device wg2 is of different type [ 36.144436][ T5049] sctp: [Deprecated]: syz.1.45 (pid 5049) Use of int in max_burst socket option. [ 36.144436][ T5049] Use struct sctp_assoc_value instead [ 36.222080][ T5054] loop1: detected capacity change from 0 to 1024 [ 36.245372][ T5054] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.247373][ T5054] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 36.248436][ T5054] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 36.249973][ T5054] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 36.249990][ T5054] EXT4-fs (loop1): This should not happen!! Data will be lost [ 36.249990][ T5054] [ 36.249999][ T5054] EXT4-fs (loop1): Total free blocks count 0 [ 36.250006][ T5054] EXT4-fs (loop1): Free/Dirty block details [ 36.250016][ T5054] EXT4-fs (loop1): free_blocks=20480 [ 36.250027][ T5054] EXT4-fs (loop1): dirty_blocks=80 [ 36.250033][ T5054] EXT4-fs (loop1): Block reservation details [ 36.250039][ T5054] EXT4-fs (loop1): i_reserved_data_blocks=5 [ 36.251037][ T5054] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 48 with error 28 [ 36.255743][ T5054] EXT4-fs error (device loop1): __ext4_remount:6844: comm syz.1.46: Abort forced by user [ 36.760373][ T5075] dvmrp8: entered allmulticast mode [ 36.762517][ T30] audit: type=1400 audit(36.730:3): lsm=SMACK fn=smack_inode_removexattr action=denied subject="_" object="lowerdir" requested=w pid=5074 comm="syz.3.54" name="file1" dev="tmpfs" ino=86 [ 36.770813][ T5080] EXT4-fs (loop2): Test dummy encryption mode enabled [ 36.770852][ T5080] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 36.797901][ T5082] syz.3.56 uses obsolete (PF_INET,SOCK_PACKET) [ 36.813697][ T50] Bluetooth: hci3: command tx timeout [ 36.813744][ T50] Bluetooth: hci2: command tx timeout [ 36.813780][ T50] Bluetooth: hci0: command tx timeout [ 36.813800][ T50] Bluetooth: hci4: command tx timeout [ 36.902322][ T5091] vlan2: entered promiscuous mode [ 36.903796][ T5091] bridge0: entered promiscuous mode [ 37.028081][ T5113] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 37.283255][ T4715] Bluetooth: hci1: command tx timeout [ 37.410727][ T5135] set_capacity_and_notify: 2 callbacks suppressed [ 37.410763][ T5135] loop4: detected capacity change from 0 to 2048 [ 37.506317][ T5135] loop4: p2 < > p3 < > [ 37.855810][ T5126] 9pnet: p9_errstr2errno: server reported unknown error 0x0 [ 37.960026][ T5151] loop1: detected capacity change from 0 to 1024 [ 37.961909][ T5151] EXT4-fs: Ignoring removed nomblk_io_submit option [ 37.979743][ T5151] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.988502][ T5154] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 38.003590][ T5154] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 38.007162][ T5155] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 38.094882][ T4713] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.111478][ T5158] __nla_validate_parse: 3 callbacks suppressed [ 38.113757][ T5158] netlink: 4 bytes leftover after parsing attributes in process `syz.0.77'. [ 38.143887][ T5163] 9p: Bad value for 'rfdno' [ 38.361526][ T5175] xt_connbytes: Forcing CT accounting to be enabled [ 38.361558][ T5175] xt_NFQUEUE: number of total queues is 0 [ 38.368269][ T5172] ima: policy update failed [ 38.369328][ T30] audit: type=1802 audit(38.340:4): pid=5172 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.1.81" res=0 errno=0 [ 38.401449][ T5179] loop2: detected capacity change from 0 to 256 [ 38.456921][ T5182] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 38.486487][ T5182] netlink: 48 bytes leftover after parsing attributes in process `syz.0.79'. [ 38.689832][ T5187] loop1: detected capacity change from 0 to 1024 [ 38.691636][ T5187] EXT4-fs: inline encryption not supported [ 38.693266][ T5187] EXT4-fs: Ignoring removed bh option [ 38.695144][ T5187] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 38.746019][ T5187] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.772150][ T4721] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 38.776421][ T4721] FAT-fs (loop2): Filesystem has been set read-only [ 38.776688][ T4721] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 38.903694][ T4720] Bluetooth: hci2: command tx timeout [ 38.903910][ T4720] Bluetooth: hci3: command tx timeout [ 38.905504][ T50] Bluetooth: hci0: command tx timeout [ 38.905736][ T4715] Bluetooth: hci4: command tx timeout [ 39.034246][ T4713] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.078150][ T5197] sock: sock_set_timeout: `syz.1.88' (pid 5197) tries to set negative timeout [ 39.092496][ T5197] loop1: detected capacity change from 0 to 4096 [ 39.175030][ T5201] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 39.292196][ T5212] xt_NFQUEUE: number of total queues is 0 [ 39.298905][ T5212] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 39.302796][ T5210] ima: policy update failed [ 39.304214][ T30] audit: type=1802 audit(39.280:5): pid=5210 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.1.94" res=0 errno=0 [ 39.463136][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 39.464872][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 39.465179][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 39.468439][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 39.470355][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 39.611954][ T5220] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.612043][ T5220] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.612101][ T5220] bridge_slave_0: entered allmulticast mode [ 39.612532][ T5220] bridge_slave_0: entered promiscuous mode [ 39.615337][ T5220] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.615390][ T5220] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.615445][ T5220] bridge_slave_1: entered allmulticast mode [ 39.615960][ T5220] bridge_slave_1: entered promiscuous mode [ 39.622794][ T5220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.624528][ T5220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.631489][ T5220] team0: Port device team_slave_0 added [ 39.633159][ T5220] team0: Port device team_slave_1 added [ 39.640281][ T5220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.640290][ T5220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.640301][ T5220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.640785][ T5220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.640791][ T5220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.640802][ T5220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.650923][ T5220] hsr_slave_0: entered promiscuous mode [ 39.651221][ T5220] hsr_slave_1: entered promiscuous mode [ 39.652393][ T5220] debugfs: 'hsr0' already exists in 'hsr' [ 39.652404][ T5220] Cannot create hsr debugfs directory [ 39.663643][ T5238] netlink: 12 bytes leftover after parsing attributes in process `syz.3.98'. [ 39.698576][ T5240] loop4: detected capacity change from 0 to 512 [ 39.699055][ T5240] ext4: Unknown parameter 'nouser_xattr' [ 39.740346][ T5220] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 39.745312][ T5220] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.748092][ T5220] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 39.750631][ T5220] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.755191][ T5220] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 39.761757][ T5220] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.762094][ T5220] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 39.765673][ T5220] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.777794][ T5220] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.777839][ T5220] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.777924][ T5220] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.777957][ T5220] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.805223][ T5220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.814648][ T5220] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.816117][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.817673][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.825611][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.825654][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.828998][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.829023][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.971045][ T5220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.053694][ T5220] veth0_vlan: entered promiscuous mode [ 40.057664][ T5220] veth1_vlan: entered promiscuous mode [ 40.070058][ T5220] veth0_macvtap: entered promiscuous mode [ 40.072821][ T5220] veth1_macvtap: entered promiscuous mode [ 40.083789][ T5220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.089357][ T5220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.115143][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.142073][ T3934] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.142117][ T3934] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.153346][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.154012][ T39] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.154037][ T39] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.173960][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.173990][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.285688][ T5289] netlink: 'syz.5.97': attribute type 1 has an invalid length. [ 40.285723][ T5289] netlink: 96 bytes leftover after parsing attributes in process `syz.5.97'. [ 40.701501][ T5316] netlink: 'syz.5.114': attribute type 10 has an invalid length. [ 40.704838][ T5318] xt_connbytes: Forcing CT accounting to be enabled [ 40.704870][ T5318] xt_NFQUEUE: number of total queues is 0 [ 40.714761][ T5316] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 40.717750][ T5316] team0: Failed to send options change via netlink (err -105) [ 40.717787][ T5316] team0: Port device dummy0 added [ 40.736475][ T5318] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 40.749896][ T5317] ima: policy update failed [ 40.750704][ T30] audit: type=1802 audit(40.720:6): pid=5317 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.4.115" res=0 errno=0 [ 40.840507][ T5325] loop1: detected capacity change from 0 to 512 [ 40.845348][ T5325] EXT4-fs: inline encryption not supported [ 40.853162][ T5325] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 40.881335][ T5325] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.118: corrupted in-inode xattr: e_value size too large [ 40.881438][ T5325] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 40.884975][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 40.884992][ C0] EXT4-fs (loop1): initial error at time 40: ext4_iget_extra_inode:5180: inode 15 [ 40.885009][ C0] EXT4-fs (loop1): last error at time 40: ext4_iget_extra_inode:5180: inode 15 [ 40.893633][ T5325] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.118: couldn't read orphan inode 15 (err -117) [ 40.933285][ T5325] loop1: lost filesystem error report for type 5 error -117 [ 40.950438][ T5325] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.054040][ T4713] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.060598][ T5340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.071142][ T5340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.169898][ T5354] loop1: detected capacity change from 0 to 512 [ 41.190777][ T5354] ext4: Unknown parameter 'dont_hash' [ 41.247300][ T5365] Injecting memory failure for pfn 0x219070 at process virtual address 0x20ff7000 [ 41.262355][ T5365] Memory failure: 0x219070: unhandlable page. [ 41.266803][ T5365] Memory failure: 0x219070: recovery action for get hwpoison page: Ignored [ 41.278235][ T5369] xt_CT: You must specify a L4 protocol and not use inversions on it [ 41.311893][ T5373] Injecting memory failure for pfn 0x141a2b at process virtual address 0x20ffe000 [ 41.317740][ T5373] Memory failure: 0x141a2b: keeping poisoned page in swap cache [ 41.317888][ T5373] Memory failure: 0x141a2b: recovery action for clean swapcache page: Recovered [ 41.317902][ T5373] Injecting memory failure for pfn 0x1419a8 at process virtual address 0x20fff000 [ 41.321909][ T5373] Memory failure: 0x1419a8: Sending SIGBUS to syz.1.129:5373 due to hardware memory corruption [ 41.321996][ T5373] Memory failure: 0x1419a8: recovery action for dirty LRU page: Recovered [ 41.384649][ T5383] loop5: detected capacity change from 0 to 1024 [ 41.386684][ T5383] ext4: Unknown parameter 'measure' [ 41.411853][ T5387] overlayfs: failed to resolve './bus': -2 [ 41.432257][ T5389] loop5: detected capacity change from 0 to 256 [ 41.432741][ T5389] vfat: Unknown parameter 'smackf' [ 41.533011][ T4715] Bluetooth: hci3: command tx timeout [ 41.627778][ T5405] syz_tun: entered allmulticast mode [ 41.713371][ T5397] syz_tun: left allmulticast mode [ 42.036720][ T30] audit: type=1400 audit(42.010:7): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=rw pid=5447 comm="syz.5.149" name="loop5" dev="devtmpfs" ino=644 [ 42.489241][ T5471] cgroup: name respecified [ 42.588832][ T5472] cgroup: noprefix used incorrectly [ 43.069385][ T9] kernel read not supported for file /123/environ (pid: 9 comm: kworker/0:0) [ 43.125852][ T5490] netlink: 'syz.3.162': attribute type 39 has an invalid length. [ 43.288366][ T5492] set_capacity_and_notify: 1 callbacks suppressed [ 43.289773][ T5492] loop1: detected capacity change from 0 to 512 [ 43.292779][ T5492] EXT4-fs: Ignoring removed orlov option [ 43.295470][ T5492] EXT4-fs: inline encryption not supported [ 43.311287][ T5492] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 43.311324][ T5492] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 43.313172][ T5492] EXT4-fs (loop1): 1 truncate cleaned up [ 43.313622][ T5492] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.349324][ T5492] EXT4-fs error (device loop1): __ext4_expand_extra_isize:6455: inode #12: comm syz.1.163: bad extra_isize 62 (inode size 256) [ 43.352303][ T5492] EXT4-fs (loop1): Remounting filesystem read-only [ 43.643312][ T4715] Bluetooth: hci3: command tx timeout [ 43.711456][ T5518] loop5: detected capacity change from 0 to 512 [ 43.714661][ T5518] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 43.768021][ T4713] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.856783][ T5538] netlink: 'syz.1.176': attribute type 30 has an invalid length. [ 43.876060][ T5538] bond1: option arp_missed_max: invalid value (0) [ 43.876102][ T5538] bond1: option arp_missed_max: allowed values 1 - 255 [ 43.878588][ T5538] bond1 (unregistering): Released all slaves [ 43.926018][ T5543] netlink: 8 bytes leftover after parsing attributes in process `syz.3.178'. [ 43.926052][ T5543] netlink: 24 bytes leftover after parsing attributes in process `syz.3.178'. [ 43.936230][ T5546] netlink: 28 bytes leftover after parsing attributes in process `syz.5.179'. [ 43.936261][ T5546] netlink: 28 bytes leftover after parsing attributes in process `syz.5.179'. [ 44.041082][ T5557] loop1: detected capacity change from 0 to 512 [ 44.050714][ T5557] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 44.073842][ T5560] FAULT_INJECTION: forcing a failure. [ 44.073842][ T5560] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 44.073883][ T5560] CPU: 1 UID: 0 PID: 5560 Comm: syz.4.183 Not tainted syzkaller #0 PREEMPT [ 44.073897][ T5560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 44.073903][ T5560] Call trace: [ 44.073907][ T5560] show_stack+0x2c/0x3c (C) [ 44.073928][ T5560] __dump_stack+0x30/0x40 [ 44.073941][ T5560] dump_stack_lvl+0xd8/0x12c [ 44.073951][ T5560] dump_stack+0x1c/0x28 [ 44.073960][ T5560] should_fail_ex+0x41c/0x590 [ 44.073969][ T5560] should_fail+0x14/0x24 [ 44.073975][ T5560] should_fail_usercopy+0x20/0x30 [ 44.073983][ T5560] _inline_copy_from_user+0x3c/0x174 [ 44.073991][ T5560] __sys_bpf+0x1b4/0x82c [ 44.073998][ T5560] __arm64_sys_bpf+0xd0/0xec [ 44.074005][ T5560] invoke_syscall+0x98/0x244 [ 44.074015][ T5560] el0_svc_common+0xec/0x23c [ 44.074025][ T5560] do_el0_svc+0x4c/0x5c [ 44.074034][ T5560] el0_svc+0x64/0x260 [ 44.074044][ T5560] el0t_64_sync_handler+0x44/0x104 [ 44.074052][ T5560] el0t_64_sync+0x198/0x19c [ 44.097107][ T5557] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.184: bg 0: block 104: invalid block bitmap [ 44.101497][ T5557] loop1: lost filesystem error report for type 5 error -117 [ 44.102873][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 44.102903][ C1] EXT4-fs (loop1): initial error at time 44: ext4_validate_block_bitmap:432 [ 44.102930][ C1] EXT4-fs (loop1): last error at time 44: ext4_validate_block_bitmap:432 [ 44.110309][ T5557] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 44.112252][ T5557] loop1: lost filesystem error report for type 5 error -117 [ 44.114188][ T5557] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.184: invalid indirect mapped block 1 (level 1) [ 44.118126][ T5557] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 44.118967][ T5557] EXT4-fs (loop1): 1 truncate cleaned up [ 44.127255][ T5557] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.147640][ T5557] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.194360][ T5562] ªªªªªª: renamed from vlan0 (while UP) [ 44.271495][ T5574] netlink: 766 bytes leftover after parsing attributes in process `syz.4.189'. [ 44.315119][ T5576] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input2 [ 44.318478][ T5570] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 44.322002][ T5579] xt_NFQUEUE: number of total queues is 0 [ 44.322319][ T5570] netlink: 128 bytes leftover after parsing attributes in process `syz.3.188'. [ 44.322349][ T5570] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 44.325529][ T5577] ima: policy update failed [ 44.325585][ T30] audit: type=1802 audit(44.300:8): pid=5577 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.4.191" res=0 errno=0 [ 44.398753][ T5586] loop4: detected capacity change from 0 to 512 [ 44.597708][ T5598] fuse: Bad value for 'fd' [ 44.821691][ T5603] can0: slcan on ttyS3. [ 44.944777][ T5604] capability: warning: `syz.5.198' uses 32-bit capabilities (legacy support in use) [ 45.113964][ T5603] can0 (unregistered): slcan off ttyS3. [ 45.135082][ T5609] new mount options do not match the existing superblock, will be ignored [ 45.167140][ T5616] xt_NFQUEUE: number of total queues is 0 [ 45.263969][ T5626] netlink: 'syz.1.206': attribute type 1 has an invalid length. [ 45.338971][ T5632] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 45.420143][ T5639] loop5: detected capacity change from 0 to 512 [ 45.420510][ T5639] EXT4-fs: Ignoring removed nobh option [ 45.426722][ T5639] ext3: Unknown parameter 'subj_type' [ 45.498489][ T5647] loop1: detected capacity change from 0 to 512 [ 45.500861][ T5647] EXT4-fs (loop1): Test dummy encryption mode enabled [ 45.510190][ T5647] EXT4-fs (loop1): 1 truncate cleaned up [ 45.517142][ T5647] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.561331][ T4713] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.598442][ T5657] xt_NFQUEUE: number of total queues is 0 [ 45.693009][ T4715] Bluetooth: hci3: command tx timeout [ 45.770259][ T5686] tmpfs: Bad value for 'mpol' [ 45.865888][ T5698] loop1: detected capacity change from 0 to 256 [ 45.869929][ T5698] vfat: Unknown parameter 'show' [ 45.946321][ T5704] netlink: 20 bytes leftover after parsing attributes in process `syz.4.233'. [ 45.967475][ T5704] netlink: 'syz.4.233': attribute type 4 has an invalid length. [ 45.988028][ T5708] netlink: 428 bytes leftover after parsing attributes in process `syz.3.235'. [ 45.988065][ T5708] netlink: 12 bytes leftover after parsing attributes in process `syz.3.235'. [ 46.080287][ T5711] openvswitch: netlink: Missing valid actions attribute. [ 46.080360][ T5711] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 46.277088][ T9] IPVS: starting estimator thread 0... [ 46.309240][ T5724] loop4: detected capacity change from 0 to 512 [ 46.359889][ T5729] netlink: 'syz.3.241': attribute type 21 has an invalid length. [ 46.359937][ T5729] netlink: 'syz.3.241': attribute type 6 has an invalid length. [ 46.359960][ T5729] netlink: 132 bytes leftover after parsing attributes in process `syz.3.241'. [ 46.383083][ T5716] IPVS: using max 60 ests per chain, 144000 per kthread [ 46.456400][ T30] audit: type=1326 audit(46.430:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5748 comm="syz.5.247" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5379228 code=0x7ffc0000 [ 46.456446][ T30] audit: type=1326 audit(46.430:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5748 comm="syz.5.247" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5379228 code=0x7ffc0000 [ 46.466830][ T30] audit: type=1326 audit(46.440:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5748 comm="syz.5.247" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=158 compat=0 ip=0xffffa5379228 code=0x7ffc0000 [ 46.466872][ T30] audit: type=1326 audit(46.440:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5748 comm="syz.5.247" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5379228 code=0x7ffc0000 [ 46.466891][ T30] audit: type=1326 audit(46.440:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5748 comm="syz.5.247" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5379228 code=0x7ffc0000 [ 46.466912][ T30] audit: type=1326 audit(46.440:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5748 comm="syz.5.247" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5379228 code=0x7ffc0000 [ 46.531544][ T30] audit: type=1326 audit(46.490:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5748 comm="syz.5.247" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5379228 code=0x7ffc0000 [ 46.536174][ T30] audit: type=1326 audit(46.490:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5748 comm="syz.5.247" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5379228 code=0x7ffc0000 [ 46.540475][ T30] audit: type=1326 audit(46.490:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5748 comm="syz.5.247" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa5379228 code=0x7ffc0000 [ 46.544992][ T30] audit: type=1326 audit(46.490:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5748 comm="syz.5.247" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5379228 code=0x7ffc0000 [ 46.738091][ T5778] loop5: detected capacity change from 0 to 512 [ 46.738445][ T5778] EXT4-fs: Ignoring removed mblk_io_submit option [ 46.765792][ T5783] nft_compat: unsupported protocol 0 [ 46.790096][ T5778] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.933690][ T5220] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.961010][ T5811] xt_NFQUEUE: number of total queues is 0 [ 46.968068][ T5805] loop4: detected capacity change from 0 to 512 [ 46.981687][ T5805] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 46.982556][ T5805] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00fc018, mo2=0002] [ 46.982590][ T5805] System zones: 1-12 [ 46.982734][ T5805] EXT4-fs (loop4): orphan cleanup on readonly fs [ 46.991548][ T5805] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.266: inode #15: comm syz.4.266: iget: illegal inode # [ 46.991593][ T5805] loop4: lost filesystem error report for type 5 error -117 [ 46.994981][ T5805] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.266: couldn't read orphan inode 15 (err -117) [ 46.995027][ T5805] loop4: lost filesystem error report for type 5 error -117 [ 46.999721][ T5805] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 47.025371][ T5805] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 47.027802][ T5805] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00fc018, mo2=0002] [ 47.027869][ T5805] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 47.044987][ T5818] veth2: entered allmulticast mode [ 47.051262][ T5818] bond2: (slave veth3): Enslaving as an active interface with an up link [ 47.076623][ T4724] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.108164][ T5826] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 47.112526][ T5826] bond1 (unregistering): Released all slaves [ 47.134802][ T5829] Cannot find add_set index 0 as target [ 47.367443][ T5850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.370038][ T5850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.372449][ T5850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.379301][ T5850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.382013][ T5850] Injecting memory failure for pfn 0x219070 at process virtual address 0x20ffa000 [ 47.385021][ T5850] Memory failure: 0x219070: Sending SIGBUS to syz.1.283:5850 due to hardware memory corruption [ 47.385149][ T5850] Memory failure: 0x219070: recovery action for already poisoned page: Failed [ 47.386023][ T5850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.386212][ T5850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.670354][ T5888] C: renamed from veth1_to_team (while UP) [ 47.788992][ T5902] Illegal XDP return value 4294967294 on prog (id 42) dev syz_tun, expect packet loss! [ 47.790966][ T50] Bluetooth: hci3: command tx timeout [ 47.850986][ T5903] FAULT_INJECTION: forcing a failure. [ 47.850986][ T5903] name failslab, interval 1, probability 0, space 0, times 1 [ 47.851178][ T5903] CPU: 0 UID: 0 PID: 5903 Comm: syz.4.296 Not tainted syzkaller #0 PREEMPT [ 47.851194][ T5903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 47.851201][ T5903] Call trace: [ 47.851205][ T5903] show_stack+0x2c/0x3c (C) [ 47.851226][ T5903] __dump_stack+0x30/0x40 [ 47.851237][ T5903] dump_stack_lvl+0xd8/0x12c [ 47.851247][ T5903] dump_stack+0x1c/0x28 [ 47.851257][ T5903] should_fail_ex+0x41c/0x590 [ 47.851265][ T5903] should_failslab+0xc4/0x120 [ 47.851273][ T5903] __kmalloc_noprof+0x108/0x6b8 [ 47.851282][ T5903] tomoyo_realpath_from_path+0xbc/0x4dc [ 47.851291][ T5903] tomoyo_path_number_perm+0x1f0/0x500 [ 47.851299][ T5903] tomoyo_file_ioctl+0x2c/0x3c [ 47.851307][ T5903] security_file_ioctl+0xdc/0x2b0 [ 47.851315][ T5903] __arm64_sys_ioctl+0xb0/0x1cc [ 47.851325][ T5903] invoke_syscall+0x98/0x244 [ 47.851335][ T5903] el0_svc_common+0xec/0x23c [ 47.851345][ T5903] do_el0_svc+0x4c/0x5c [ 47.851354][ T5903] el0_svc+0x64/0x260 [ 47.851363][ T5903] el0t_64_sync_handler+0x44/0x104 [ 47.851372][ T5903] el0t_64_sync+0x198/0x19c [ 47.851397][ T5903] ERROR: Out of memory at tomoyo_realpath_from_path. [ 48.067253][ T5911] EXT4-fs: Ignoring removed bh option [ 48.072286][ T5911] EXT4-fs (loop1): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 48.088691][ T5911] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.133222][ T5920] Bluetooth: MGMT ver 1.23 [ 48.135406][ T5920] Bluetooth: hci0: unsupported parameter 5134 [ 48.136744][ T5920] Bluetooth: hci0: unsupported parameter 8192 [ 48.138231][ T5920] Bluetooth: hci0: unsupported parameter 5134 [ 48.139644][ T5920] Bluetooth: hci0: unsupported parameter 8192 [ 48.186254][ T5911] overlay: ./file1 is not a directory [ 48.208471][ T4713] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.896995][ T5956] Injecting memory failure for pfn 0x1384bd at process virtual address 0x20001000 [ 48.902519][ T5956] Memory failure: 0x1384bd: recovery action for clean LRU page: Recovered [ 48.902562][ T5956] Injecting memory failure for pfn 0x136c6c at process virtual address 0x20002000 [ 48.904096][ T5956] Memory failure: 0x136c6c: recovery action for clean LRU page: Recovered [ 48.904116][ T5956] Injecting memory failure for pfn 0x13768b at process virtual address 0x20003000 [ 48.904189][ T5956] Memory failure: 0x13768b: recovery action for clean LRU page: Recovered [ 49.276175][ T5976] set_capacity_and_notify: 1 callbacks suppressed [ 49.276442][ T5976] loop5: detected capacity change from 0 to 256 [ 49.282039][ T5976] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 49.285090][ T5976] FAT-fs (loop5): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 49.285103][ T5976] FAT-fs (loop5): Filesystem has been set read-only [ 49.293778][ T5976] __nla_validate_parse: 68 callbacks suppressed [ 49.293817][ T5976] netlink: 24 bytes leftover after parsing attributes in process `syz.5.323'. [ 49.293831][ T5976] netlink: 24 bytes leftover after parsing attributes in process `syz.5.323'. [ 49.560039][ T5978] netlink: 32 bytes leftover after parsing attributes in process `syz.4.324'. [ 49.630062][ T5989] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 49.630737][ T5989] overlayfs: conflicting lowerdir path [ 49.835349][ T6011] netlink: 28 bytes leftover after parsing attributes in process `syz.4.329'. [ 49.835413][ T6011] netlink: 72 bytes leftover after parsing attributes in process `syz.4.329'. [ 50.372990][ T6023] loop1: detected capacity change from 0 to 256 [ 50.374259][ T6023] FAT-fs (loop1): bogus sectors per cluster 223 [ 50.374275][ T6023] FAT-fs (loop1): Can't find a valid FAT filesystem [ 50.399027][ T6026] bridge1: entered promiscuous mode [ 50.399352][ T6026] bridge1: entered allmulticast mode [ 50.833143][ T6049] netlink: 12 bytes leftover after parsing attributes in process `syz.4.344'. [ 50.993248][ T6062] FAULT_INJECTION: forcing a failure. [ 50.993248][ T6062] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 50.993303][ T6062] CPU: 1 UID: 0 PID: 6062 Comm: syz.1.345 Not tainted syzkaller #0 PREEMPT [ 50.993315][ T6062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 50.993320][ T6062] Call trace: [ 50.993323][ T6062] show_stack+0x2c/0x3c (C) [ 50.993344][ T6062] __dump_stack+0x30/0x40 [ 50.993354][ T6062] dump_stack_lvl+0xd8/0x12c [ 50.993364][ T6062] dump_stack+0x1c/0x28 [ 50.993373][ T6062] should_fail_ex+0x41c/0x590 [ 50.993382][ T6062] should_fail+0x14/0x24 [ 50.993388][ T6062] should_fail_usercopy+0x20/0x30 [ 50.993395][ T6062] _inline_copy_from_user+0x3c/0x174 [ 50.993406][ T6062] userfaultfd_ioctl+0x8c4/0x5c88 [ 50.993415][ T6062] __arm64_sys_ioctl+0x154/0x1cc [ 50.993425][ T6062] invoke_syscall+0x98/0x244 [ 50.993435][ T6062] el0_svc_common+0xec/0x23c [ 50.993445][ T6062] do_el0_svc+0x4c/0x5c [ 50.993454][ T6062] el0_svc+0x64/0x260 [ 50.993463][ T6062] el0t_64_sync_handler+0x44/0x104 [ 50.993472][ T6062] el0t_64_sync+0x198/0x19c [ 51.261677][ T6060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.348'. [ 51.298802][ T6067] fuse: Bad value for 'fd' [ 51.396999][ T6078] syzkaller0: entered promiscuous mode [ 51.398460][ T6078] syzkaller0: entered allmulticast mode [ 51.402817][ T6078] tipc: Started in network mode [ 51.405956][ T6078] tipc: Node identity 3e218bd5e7d4, cluster identity 4711 [ 51.407828][ T6078] tipc: Enabled bearer , priority 0 [ 51.417799][ T6082] tipc: Resetting bearer [ 51.435115][ T6082] tipc: Disabling bearer [ 51.567021][ T6096] overlayfs: failed to resolve './file1': -2 [ 51.578765][ T6098] netlink: 12 bytes leftover after parsing attributes in process `syz.4.359'. [ 51.598441][ T6100] netlink: 24 bytes leftover after parsing attributes in process `syz.3.361'. [ 52.159115][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 52.159158][ T30] audit: type=1326 audit(52.130:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6130 comm="syz.1.365" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8bf79228 code=0x7fc00000 [ 52.167049][ T30] audit: type=1326 audit(52.140:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6130 comm="syz.1.365" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=26 compat=0 ip=0xffff8bf79228 code=0x7fc00000 [ 52.291216][ T6148] loop5: detected capacity change from 0 to 4096 [ 52.293393][ T6148] EXT4-fs: inline encryption not supported [ 52.304921][ T6148] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 52.304956][ T6148] EXT4-fs (loop5): Test dummy encryption mode enabled [ 52.320568][ T6148] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 52.320639][ T6148] System zones: 0-5 [ 52.325146][ T6148] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.330749][ T6148] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 52.386859][ T6148] nfs: Unknown parameter 'usrquota' [ 52.450772][ T5220] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.682091][ T6183] loop5: detected capacity change from 0 to 8192 [ 52.687033][ T6163] loop4: detected capacity change from 0 to 256 [ 52.696552][ T6163] netlink: 40 bytes leftover after parsing attributes in process `syz.4.372'. [ 52.873027][ T30] audit: type=1326 audit(52.840:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6130 comm="syz.1.365" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8bf79228 code=0x7fc00000 [ 52.873544][ T4596] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 52.977326][ T6185] mmap: syz.5.380 (6185): VmData 25870336 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 52.988721][ T6199] loop1: detected capacity change from 0 to 1024 [ 52.989081][ T6199] EXT4-fs: Ignoring removed orlov option [ 52.996590][ T6201] loop4: detected capacity change from 0 to 512 [ 53.001961][ T6201] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.384: corrupted in-inode xattr: invalid ea_ino [ 53.001996][ T6201] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 53.002104][ T6201] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.384: couldn't read orphan inode 15 (err -117) [ 53.002117][ T6201] loop4: lost filesystem error report for type 5 error -117 [ 53.002631][ T6201] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.020186][ T6199] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.029264][ T6199] netlink: 'syz.1.383': attribute type 15 has an invalid length. [ 53.030766][ T6199] overlayfs: missing 'workdir' [ 53.039943][ T4713] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.046712][ T6201] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 53.060312][ T4596] usb 1-1: Using ep0 maxpacket: 16 [ 53.102253][ T6208] Injecting memory failure for pfn 0x1376ce at process virtual address 0x20ffe000 [ 53.112494][ T6206] syzkaller0: entered promiscuous mode [ 53.112531][ T6206] syzkaller0: entered allmulticast mode [ 53.119577][ T4596] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 53.120677][ T4596] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 158, changing to 7 [ 53.122034][ T4596] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.122051][ T4596] usb 1-1: Product: à   [ 53.122065][ T4596] usb 1-1: Manufacturer: à § [ 53.122076][ T4596] usb 1-1: SerialNumber: syz [ 53.147663][ T6208] Memory failure: 0x1376ce: keeping poisoned page in swap cache [ 53.149157][ T6208] Memory failure: 0x1376ce: recovery action for clean swapcache page: Recovered [ 53.151592][ T6208] Injecting memory failure for pfn 0x11ec7d at process virtual address 0x20fff000 [ 53.155438][ T6208] Memory failure: 0x11ec7d: Sending SIGBUS to syz.3.387:6208 due to hardware memory corruption [ 53.157375][ T6208] Memory failure: 0x11ec7d: recovery action for dirty LRU page: Recovered [ 53.176309][ T6211] loop5: detected capacity change from 0 to 512 [ 53.231760][ T6217] 0x000000000006-0x000000020000 : "" [ 53.323032][ T6217] ftl_cs: FTL header corrupt! [ 53.458838][ T6211] EXT4-fs: Mount option(s) incompatible with ext3 [ 53.477395][ T4596] usb 1-1: USB disconnect, device number 2 [ 53.589915][ T6236] loop5: detected capacity change from 0 to 128 [ 53.594893][ T6236] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 53.599399][ T6237] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 53.602589][ T6236] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 53.636875][ T6241] netlink: 'syz.3.396': attribute type 2 has an invalid length. [ 53.669896][ T6246] overlayfs: failed to resolve './cgroup': -2 [ 53.739541][ T6257] netlink: 'syz.3.403': attribute type 1 has an invalid length. [ 53.792249][ T4804] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 53.792286][ T4804] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 53.792309][ T4804] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 53.792322][ T4804] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 53.792334][ T4804] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 53.792346][ T4804] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 53.792358][ T4804] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 53.792369][ T4804] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 53.792380][ T4804] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 53.792391][ T4804] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.082301][ T4724] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.090409][ T4804] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 54.139410][ T6265] fido_id[6265]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 54.275374][ T6285] netlink: 'syz.5.407': attribute type 1 has an invalid length. [ 54.318847][ T6285] bond1: (slave veth0_to_bond): making interface the new active one [ 54.320439][ T6285] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 54.341405][ T6290] __nla_validate_parse: 4 callbacks suppressed [ 54.342333][ T6292] loop4: detected capacity change from 0 to 256 [ 54.342691][ T6292] vfat: Unknown parameter 'show' [ 54.349771][ T6290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.413'. [ 54.447486][ T6284] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 54.578381][ T6301] openvswitch: netlink: Missing valid actions attribute. [ 54.578485][ T6301] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 54.762605][ T6305] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 54.764447][ T6305] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 55.238767][ T6318] netlink: 'syz.0.422': attribute type 18 has an invalid length. [ 55.240572][ T6318] netlink: 4 bytes leftover after parsing attributes in process `syz.0.422'. [ 55.253136][ T6318] netlink: 'syz.0.422': attribute type 18 has an invalid length. [ 55.253165][ T6318] netlink: 4 bytes leftover after parsing attributes in process `syz.0.422'. [ 55.274194][ T6115] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.274701][ T6137] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.274728][ T6137] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.274743][ T6137] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.358414][ T6328] xt_connbytes: Forcing CT accounting to be enabled [ 55.359865][ T6328] xt_NFQUEUE: number of total queues is 0 [ 55.385097][ T6330] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 55.397058][ T6337] netlink: 32 bytes leftover after parsing attributes in process `syz.3.428'. [ 55.519947][ T6340] loop5: detected capacity change from 0 to 256 [ 55.586125][ T6347] netlink: 'syz.0.432': attribute type 10 has an invalid length. [ 55.603150][ T6347] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 55.607901][ T6347] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 55.711429][ T6356] loop4: detected capacity change from 0 to 512 [ 55.717031][ T6356] EXT4-fs: inline encryption not supported [ 55.811844][ T6356] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.832303][ T6356] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.431: corrupted xattr block 6: invalid header [ 55.845650][ T6356] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.431: corrupted xattr block 6: invalid header [ 55.851906][ T6356] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.431: corrupted xattr block 6: invalid header [ 55.856821][ T6356] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.431: corrupted xattr block 6: invalid header [ 55.969551][ T6367] openvswitch: netlink: Missing valid actions attribute. [ 55.969700][ T6367] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 56.096564][ T6369] netlink: 'syz.1.437': attribute type 1 has an invalid length. [ 56.096594][ T6369] netlink: 224 bytes leftover after parsing attributes in process `syz.1.437'. [ 56.100047][ T6368] netlink: 'syz.1.437': attribute type 1 has an invalid length. [ 56.102244][ T6368] netlink: 224 bytes leftover after parsing attributes in process `syz.1.437'. [ 56.150549][ T6371] loop1: detected capacity change from 0 to 512 [ 56.166177][ T6371] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.438: corrupted in-inode xattr: invalid ea_ino [ 56.166246][ T6371] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 56.167328][ T6371] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.438: couldn't read orphan inode 15 (err -117) [ 56.167350][ T6371] loop1: lost filesystem error report for type 5 error -117 [ 56.168534][ T6371] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.223192][ T6371] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 56.322438][ T6375] loop5: detected capacity change from 0 to 2048 [ 56.343845][ T6375] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.398811][ T6382] 0x000000000006-0x000000020000 : "" [ 56.491186][ T6382] ftl_cs: FTL header corrupt! [ 56.608942][ T6379] xt_NFQUEUE: number of total queues is 0 [ 56.614405][ T5220] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.698092][ T4724] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.729367][ T6386] netlink: 'syz.0.442': attribute type 1 has an invalid length. [ 56.747368][ T6386] 8021q: adding VLAN 0 to HW filter on device bond1 [ 56.806207][ T6386] bond1: (slave bridge1): making interface the new active one [ 56.809423][ T6386] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 56.811003][ T6402] syz_tun: entered allmulticast mode [ 56.840706][ T6392] syz_tun: left allmulticast mode [ 57.271563][ T4713] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.319350][ T6430] openvswitch: netlink: Missing valid actions attribute. [ 57.319391][ T6430] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 57.390275][ T6433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.390476][ T6433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.513516][ T6443] netlink: 224 bytes leftover after parsing attributes in process `syz.0.459'. [ 57.614070][ T6448] loop4: detected capacity change from 0 to 512 [ 57.638065][ T6448] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 57.663957][ T6448] EXT4-fs (loop4): invalid journal inode [ 57.664146][ T6448] EXT4-fs (loop4): can't get journal size [ 57.667077][ T6448] EXT4-fs error (device loop4): ext4_protect_reserved_inode:182: inode #2: comm syz.4.460: blocks 4-4 from inode overlap system zone [ 57.667272][ T6448] loop4: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 57.667828][ T6448] EXT4-fs (loop4): failed to initialize system zone (-117) [ 57.667925][ T6448] EXT4-fs (loop4): mount failed [ 57.817683][ T6468] openvswitch: netlink: Missing valid actions attribute. [ 57.819054][ T6468] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 57.842816][ T6463] loop4: detected capacity change from 0 to 512 [ 57.847176][ T6463] EXT4-fs: Ignoring removed nomblk_io_submit option [ 57.847213][ T6463] EXT4-fs: Ignoring removed mblk_io_submit option [ 57.862566][ T6463] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 57.862600][ T6463] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 57.863717][ T6463] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 57.865640][ T6463] EXT4-fs error (device loop4): ext4_encrypted_get_link:46: inode #16: comm syz.4.463: bad symlink. [ 57.865791][ T6463] EXT4-fs (loop4): Remounting filesystem read-only [ 57.866051][ T6463] trusted_key: encrypted_key: master key parameter 'Hßø^„B}/*ŠÔ;}¡Ðvdfgï’íîeëíf$ù|`2óÌ3;ßï“0Ï>³3Ù' is invalid [ 57.882068][ T4724] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.170665][ T6485] netlink: 20 bytes leftover after parsing attributes in process `syz.0.469'. [ 58.243445][ T6491] netlink: 8 bytes leftover after parsing attributes in process `syz.4.470'. [ 58.245671][ T6491] netlink: 8 bytes leftover after parsing attributes in process `syz.4.470'. [ 58.414852][ T6496] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 58.418099][ T6495] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 58.570944][ T6522] xt_NFQUEUE: number of total queues is 0 [ 58.601738][ T6527] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.632456][ T6529] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 58.664647][ T6529] loop1: detected capacity change from 0 to 512 [ 58.835259][ T6544] loop1: detected capacity change from 0 to 256 [ 58.835648][ T6544] vfat: Unknown parameter 'show' [ 59.029375][ T6556] openvswitch: netlink: Missing valid actions attribute. [ 59.029475][ T6556] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 59.176044][ T6551] xt_NFQUEUE: number of total queues is 0 [ 59.443384][ T6603] xt_NFQUEUE: number of total queues is 0 [ 59.478395][ T6606] validate_nla: 2 callbacks suppressed [ 59.478430][ T6606] netlink: 'syz.3.504': attribute type 9 has an invalid length. [ 59.478446][ T6606] __nla_validate_parse: 2 callbacks suppressed [ 59.478457][ T6606] netlink: 8 bytes leftover after parsing attributes in process `syz.3.504'. [ 59.520336][ T6614] netlink: 'syz.4.506': attribute type 11 has an invalid length. [ 59.558479][ T6614] 8021q: adding VLAN 0 to HW filter on device bond1 [ 59.619318][ T30] audit: type=1326 audit(59.590:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6623 comm="syz.0.509" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa0979228 code=0x0 [ 59.754166][ T6632] netlink: 200 bytes leftover after parsing attributes in process `syz.0.509'. [ 59.814487][ T6637] loop1: detected capacity change from 0 to 512 [ 59.829131][ T6639] xt_NFQUEUE: number of total queues is 0 [ 59.833703][ T6637] netlink: 24 bytes leftover after parsing attributes in process `syz.1.515'. [ 59.835045][ T6640] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 59.835045][ T6640] The task syz.3.513 (6640) triggered the difference, watch for misbehavior. [ 60.005561][ T6654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.520'. [ 60.007429][ T6654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.520'. [ 60.442629][ T6670] loop5: detected capacity change from 0 to 256 [ 60.445267][ T6670] vfat: Unknown parameter 'show' [ 60.529973][ T6675] loop1: detected capacity change from 0 to 512 [ 60.530566][ T6675] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 60.533869][ T6675] EXT4-fs (loop1): can't mount with commit=, fs mounted w/o journal [ 60.640390][ T6678] openvswitch: netlink: Missing valid actions attribute. [ 60.640481][ T6678] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 60.779563][ T6677] loop1: detected capacity change from 0 to 128 [ 60.801601][ T6640] Process accounting resumed [ 60.961964][ T6698] netlink: 'syz.0.532': attribute type 83 has an invalid length. [ 61.081509][ T6705] loop4: detected capacity change from 0 to 128 [ 61.223479][ T6715] netlink: 64 bytes leftover after parsing attributes in process `syz.1.539'. [ 61.229922][ T6705] netlink: 'syz.4.535': attribute type 1 has an invalid length. [ 61.330138][ T6719] netlink: 'syz.5.541': attribute type 11 has an invalid length. [ 61.339498][ T6720] loop4: detected capacity change from 0 to 256 [ 61.406765][ T6726] openvswitch: netlink: IP tunnel dst address not specified [ 61.445626][ T6728] loop5: detected capacity change from 0 to 512 [ 61.462067][ T6728] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.466322][ T6728] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.544: corrupted xattr block 33: invalid header [ 61.471047][ T6728] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.544: corrupted xattr block 33: invalid header [ 61.479113][ T6728] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.544: corrupted xattr block 33: invalid header [ 61.518574][ T6728] Injecting memory failure for pfn 0x1384c1 at process virtual address 0x20001000 [ 61.535731][ T6738] loop4: detected capacity change from 0 to 256 [ 61.539346][ T6728] Memory failure: 0x1384c1: recovery action for clean LRU page: Recovered [ 61.545508][ T6739] loop4: detected capacity change from 0 to 256 [ 61.637525][ T6115] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 61.642243][ T6115] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 28 [ 61.645079][ T6115] EXT4-fs (loop5): This should not happen!! Data will be lost [ 61.645079][ T6115] [ 61.645109][ T6115] EXT4-fs (loop5): Total free blocks count 0 [ 61.645129][ T6115] EXT4-fs (loop5): Free/Dirty block details [ 61.645162][ T6115] EXT4-fs (loop5): free_blocks=65280 [ 61.645184][ T6115] EXT4-fs (loop5): dirty_blocks=1 [ 61.649725][ T6115] EXT4-fs (loop5): Block reservation details [ 61.649737][ T6115] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 61.654732][ T5220] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 61.666023][ T5220] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.714169][ T6756] netlink: 32 bytes leftover after parsing attributes in process `syz.4.551'. [ 61.716332][ T6756] netlink: 32 bytes leftover after parsing attributes in process `syz.4.551'. [ 62.148066][ T6767] xt_NFQUEUE: number of total queues is 0 [ 62.310685][ T6774] netlink: 60 bytes leftover after parsing attributes in process `syz.0.557'. [ 62.605841][ T6796] netlink: 12 bytes leftover after parsing attributes in process `syz.3.563'. [ 63.303965][ T6815] xt_NFQUEUE: number of total queues is 0 [ 63.331587][ T6817] loop4: detected capacity change from 0 to 256 [ 63.331982][ T6817] vfat: Unknown parameter 'show' [ 63.814962][ T6837] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 64.208792][ T6852] openvswitch: netlink: Missing valid actions attribute. [ 64.208900][ T6852] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 64.378359][ T6860] tipc: Started in network mode [ 64.379607][ T6860] tipc: Node identity 4, cluster identity 4711 [ 64.381163][ T6860] tipc: Node number set to 4 [ 64.414032][ T6864] vfat: Unknown parameter 'show' [ 64.430232][ T6866] vfat: Unknown parameter 'show' [ 64.506353][ T1595] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.506403][ T1595] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.511893][ T24] cfg80211: failed to load regulatory.db [ 64.732102][ T6867] openvswitch: netlink: Missing valid actions attribute. [ 64.732142][ T6867] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 64.856165][ T6873] netlink: 8 bytes leftover after parsing attributes in process `syz.3.586'. [ 64.881432][ T6879] netlink: 'syz.3.589': attribute type 10 has an invalid length. [ 64.907617][ T6881] netlink: 182 bytes leftover after parsing attributes in process `syz.0.590'. [ 65.040982][ T6892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.594'. [ 65.360147][ T6908] xt_NFQUEUE: number of total queues is 0 [ 65.391703][ T6910] binder: BINDER_SET_CONTEXT_MGR already set [ 65.391731][ T6910] binder: 6909:6910 ioctl 4018620d 20004a80 returned -16 [ 65.412184][ T6915] set_capacity_and_notify: 2 callbacks suppressed [ 65.412224][ T6915] loop1: detected capacity change from 0 to 256 [ 65.601107][ T6918] binder: tried to use weak ref as strong ref [ 65.601142][ T6918] binder: 6909:6918 Acquire 1 refcount change on invalid ref 0 ret -22 [ 65.601318][ T6918] binder: 6909:6918 got transaction to invalid handle, 1 [ 65.601364][ T6918] binder: 6909:6918 cannot find target node [ 65.601384][ T6918] binder: 6909:6918 transaction call to 0:0 failed 3/29201/-22, code 0 size 72-4 line 3252 [ 65.601838][ T6918] binder: 6909:6918 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 65.601856][ T6918] binder: 6918 RLIMIT_NICE not set [ 66.178506][ T6913] Process accounting resumed [ 66.235215][ T9] binder: undelivered TRANSACTION_ERROR: 29201 [ 66.392057][ T6924] tipc: Enabling of bearer rejected, failed to enable media [ 66.432395][ T6949] loop4: detected capacity change from 0 to 128 [ 66.456493][ T6949] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 66.749511][ T6960] loop1: detected capacity change from 0 to 512 [ 66.756639][ T6960] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 66.760381][ T6960] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.611: bg 0: block 4: invalid block bitmap [ 66.765124][ T6960] loop1: lost filesystem error report for type 5 error -117 [ 66.765444][ T6960] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 66.765481][ T6960] loop1: lost filesystem error report for type 5 error -117 [ 66.765849][ T6960] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.611: invalid indirect mapped block 1 (level 1) [ 66.765940][ T6960] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 66.766168][ T6960] EXT4-fs (loop1): 1 truncate cleaned up [ 66.766633][ T6960] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.794443][ T4713] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.819390][ T6969] loop1: detected capacity change from 0 to 256 [ 66.819801][ T6969] vfat: Unknown parameter 'show' [ 67.152333][ T6972] openvswitch: netlink: Missing valid actions attribute. [ 67.152374][ T6972] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 67.222188][ T4724] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 67.230091][ T6983] loop5: detected capacity change from 0 to 1024 [ 67.247483][ T6983] EXT4-fs: Ignoring removed bh option [ 67.247539][ T6983] EXT4-fs: Ignoring removed bh option [ 67.258167][ T6983] EXT4-fs: Mount option(s) incompatible with ext2 [ 67.727263][ T7011] loop4: detected capacity change from 0 to 8192 [ 67.874931][ T7025] loop4: detected capacity change from 0 to 512 [ 67.916960][ T7025] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 67.920440][ T7025] EXT4-fs (loop4): orphan cleanup on readonly fs [ 67.920519][ T7025] EXT4-fs warning (device loop4): ext4_enable_quotas:7276: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 67.920532][ T7025] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 67.920539][ T7025] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.629: bad orphan inode 768 [ 67.920550][ T7025] loop4: lost filesystem error report for type 5 error -117 [ 67.922892][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 67.922903][ C0] EXT4-fs (loop4): initial error at time 67: ext4_orphan_get:1425 [ 67.922915][ C0] EXT4-fs (loop4): last error at time 67: ext4_orphan_get:1425 [ 67.939852][ T7025] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 67.942227][ T7025] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.249715][ T7035] loop5: detected capacity change from 0 to 256 [ 68.252746][ T7035] vfat: Unknown parameter 'show' [ 68.450711][ T7040] openvswitch: netlink: Missing valid actions attribute. [ 68.450817][ T7040] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 68.770169][ T7049] tmpfs: Bad value for 'mpol' [ 68.921149][ T7066] loop4: detected capacity change from 0 to 4096 [ 68.924187][ T7066] EXT4-fs: inline encryption not supported [ 68.930473][ T7066] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 69.006292][ T7070] netlink: 4 bytes leftover after parsing attributes in process `syz.0.643'. [ 69.575679][ T7086] loop1: detected capacity change from 0 to 256 [ 69.580415][ T7086] vfat: Unknown parameter 'show' [ 69.698315][ T7091] EXT4-fs: inline encryption not supported [ 69.702214][ T7091] EXT4-fs (loop4): Test dummy encryption mode enabled [ 69.822074][ T7091] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 69.943510][ T7091] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.650: bad orphan inode 131083 [ 69.943552][ T7091] loop4: lost filesystem error report for type 5 error -117 [ 69.946376][ T7091] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.041425][ T7106] input: syz0 as /devices/virtual/input/input5 [ 70.067768][ T4724] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.261274][ T7123] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.659: iget: bad extended attribute block 134217728 [ 70.261315][ T7123] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 70.261560][ T7123] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.659: couldn't read orphan inode 15 (err -117) [ 70.261587][ T7123] loop5: lost filesystem error report for type 5 error -117 [ 70.268819][ T7123] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.347656][ T7127] openvswitch: netlink: Missing valid actions attribute. [ 70.347763][ T7127] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 70.523241][ T7123] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.659: invalid indirect mapped block 234881024 (level 0) [ 70.523815][ T7123] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.659: invalid indirect mapped block 768 (level 1) [ 70.629897][ T5220] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.689741][ T7138] ip6t_rpfilter: unknown options [ 70.690376][ T7141] set_capacity_and_notify: 2 callbacks suppressed [ 70.690388][ T7141] loop5: detected capacity change from 0 to 2048 [ 70.717867][ T7142] netlink: 8 bytes leftover after parsing attributes in process `syz.5.663'. [ 70.719810][ T7141] netlink: 8 bytes leftover after parsing attributes in process `syz.5.663'. [ 70.720977][ T7141] netlink: 8 bytes leftover after parsing attributes in process `syz.5.663'. [ 70.839714][ T7144] openvswitch: netlink: Missing valid actions attribute. [ 70.839826][ T7144] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 70.957010][ T7145] loop1: detected capacity change from 0 to 512 [ 70.999358][ T7145] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.664: bg 0: block 4: invalid block bitmap [ 70.999398][ T7145] loop1: lost filesystem error report for type 5 error -117 [ 71.002879][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 71.002909][ C1] EXT4-fs (loop1): initial error at time 70: ext4_validate_block_bitmap:432 [ 71.002949][ C1] EXT4-fs (loop1): last error at time 70: ext4_validate_block_bitmap:432 [ 71.008840][ T7145] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 71.011792][ T7145] loop1: lost filesystem error report for type 5 error -117 [ 71.012582][ T7145] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.664: invalid indirect mapped block 1 (level 1) [ 71.012618][ T7145] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 71.016537][ T7145] EXT4-fs (loop1): 1 truncate cleaned up [ 71.017024][ T7145] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.550811][ T7174] xt_hashlimit: size too large, truncated to 1048576 [ 71.566414][ T4713] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.666954][ T7179] netlink: 1 bytes leftover after parsing attributes in process `syz.1.674'. [ 71.675307][ T7179] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 71.708521][ T7188] netlink: 65047 bytes leftover after parsing attributes in process `syz.5.675'. [ 71.713735][ T7188] netlink: 12 bytes leftover after parsing attributes in process `syz.5.675'. [ 71.715525][ T7188] netlink: 4 bytes leftover after parsing attributes in process `syz.5.675'. [ 71.722225][ T7188] netlink: 12 bytes leftover after parsing attributes in process `syz.5.675'. [ 71.724272][ T7188] netlink: 4 bytes leftover after parsing attributes in process `syz.5.675'. [ 71.743984][ T6116] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.744434][ T6115] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.744500][ T6115] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.744532][ T6115] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.900743][ T7195] openvswitch: netlink: Missing valid actions attribute. [ 71.900847][ T7195] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 72.056296][ T7200] loop4: detected capacity change from 0 to 256 [ 72.056633][ T7201] loop1: detected capacity change from 0 to 8 [ 72.075558][ T7201] SQUASHFS error: Unable to read directory block [6aa:8] [ 72.419574][ T7224] openvswitch: netlink: Missing valid actions attribute. [ 72.419980][ T7224] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 72.588837][ T7229] loop1: detected capacity change from 0 to 2048 [ 72.649014][ T7229] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.698446][ T7229] EXT4-fs (loop1): shut down requested (1) [ 72.708882][ T7229] Invalid option length (467) for dns_resolver key [ 73.474747][ T7251] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 73.723143][ T4713] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.799215][ T7266] loop1: detected capacity change from 0 to 256 [ 73.800986][ T7266] vfat: Unknown parameter 'show' [ 73.898499][ T7268] loop4: detected capacity change from 0 to 4096 [ 74.827232][ T7268] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.971567][ T7274] openvswitch: netlink: Missing valid actions attribute. [ 75.130161][ T7279] vlan0: entered allmulticast mode [ 75.130194][ T7279] bond0: entered allmulticast mode [ 75.130216][ T7279] bond_slave_0: entered allmulticast mode [ 75.130232][ T7279] bond_slave_1: entered allmulticast mode [ 75.130898][ T7279] bridge0: port 3(vlan0) entered blocking state [ 75.139458][ T7279] bridge0: port 3(vlan0) entered disabled state [ 75.140218][ T7279] vlan0: entered promiscuous mode [ 75.140236][ T7279] bond0: entered promiscuous mode [ 75.140249][ T7279] bond_slave_0: entered promiscuous mode [ 75.140328][ T7279] bond_slave_1: entered promiscuous mode [ 75.141208][ T7279] bridge0: port 3(vlan0) entered blocking state [ 75.141245][ T7279] bridge0: port 3(vlan0) entered forwarding state [ 75.176677][ T7279] bridge_slave_0: left allmulticast mode [ 75.176723][ T7279] bridge_slave_0: left promiscuous mode [ 75.176817][ T7279] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.185060][ T7284] loop1: detected capacity change from 0 to 512 [ 75.206517][ T7279] bridge_slave_1: left allmulticast mode [ 75.206553][ T7279] bridge_slave_1: left promiscuous mode [ 75.206616][ T7279] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.213898][ T7279] bond0: (slave bond_slave_0): Releasing backup interface [ 75.219706][ T4724] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.225363][ T7293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.708'. [ 75.234154][ T7279] bond_slave_0: left promiscuous mode [ 75.234237][ T7279] bond_slave_0: left allmulticast mode [ 75.245721][ T7279] bond0: (slave bond_slave_1): Releasing backup interface [ 75.264595][ T7279] bond_slave_1: left promiscuous mode [ 75.264686][ T7279] bond_slave_1: left allmulticast mode [ 75.278712][ T7279] team0: Port device team_slave_0 removed [ 75.285048][ T7279] team0: Port device team_slave_1 removed [ 75.285445][ T7279] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.285459][ T7279] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.287298][ T7279] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.287309][ T7279] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.295425][ T5345] bridge0: port 3(vlan0) entered disabled state [ 75.367528][ T7298] netlink: 'syz.4.710': attribute type 7 has an invalid length. [ 75.398940][ T1502] IPVS: starting estimator thread 0... [ 75.428721][ T7319] loop5: detected capacity change from 0 to 256 [ 75.430743][ T7319] vfat: Unknown parameter 'ioKharset' [ 75.488201][ T7317] IPVS: using max 45 ests per chain, 108000 per kthread [ 75.643224][ T7336] net_ratelimit: 2 callbacks suppressed [ 75.643274][ T7336] openvswitch: netlink: Missing valid actions attribute. [ 75.643344][ T7336] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 75.841002][ T7340] can0: slcan on ptm3. [ 75.934061][ T7339] can0 (unregistered): slcan off ptm3. [ 76.099016][ T7347] can0: slcan on ttyS3. [ 76.194230][ T7347] can0 (unregistered): slcan off ttyS3. [ 76.235846][ T7349] ip_tables: iptables: counters copy to user failed while replacing table [ 76.336625][ T7358] __nla_validate_parse: 5 callbacks suppressed [ 76.338398][ T7358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.730'. [ 76.394190][ T7362] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 76.824659][ T7378] 9p: Unknown Cache mode or invalid value 777777777777777777 [ 77.045051][ T7393] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 77.059262][ T7407] netlink: 'syz.4.739': attribute type 1 has an invalid length. [ 77.070822][ T7410] netlink: 'syz.5.740': attribute type 12 has an invalid length. [ 77.072544][ T7410] netlink: 'syz.5.740': attribute type 29 has an invalid length. [ 77.074265][ T7410] netlink: 148 bytes leftover after parsing attributes in process `syz.5.740'. [ 77.076062][ T7410] netlink: 'syz.5.740': attribute type 1 has an invalid length. [ 77.077739][ T7410] netlink: 'syz.5.740': attribute type 2 has an invalid length. [ 77.100597][ T7415] loop5: detected capacity change from 0 to 256 [ 77.102373][ T7415] vfat: Unknown parameter 'show' [ 77.297776][ T7443] openvswitch: netlink: Missing valid actions attribute. [ 77.297888][ T7443] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 77.476313][ T50] Bluetooth: hci1: command tx timeout [ 77.681522][ T7469] loop4: detected capacity change from 0 to 512 [ 77.690760][ T7469] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 77.705555][ T7469] EXT4-fs (loop4): 1 truncate cleaned up [ 77.707309][ T7469] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.716557][ T7469] EXT4-fs error (device loop4): ext4_generic_delete_entry:2673: inode #2: block 13: comm syz.4.744: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 77.729366][ T7469] EXT4-fs (loop4): Remounting filesystem read-only [ 77.729410][ T7469] EXT4-fs warning (device loop4): ext4_rename_delete:3739: inode #2: comm syz.4.744: Deleting old file: nlink 5, error=-117 [ 77.731350][ T7469] input: syz0 as /devices/virtual/input/input6 [ 77.770353][ T7477] netlink: 28 bytes leftover after parsing attributes in process `syz.3.745'. [ 78.069456][ T7490] cgroup: noprefix used incorrectly [ 78.160318][ T4724] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.228788][ T7498] loop5: detected capacity change from 0 to 512 [ 78.250538][ T7498] EXT4-fs (loop5): can't mount with commit=, fs mounted w/o journal [ 78.479682][ T7506] cgroup: noprefix used incorrectly [ 79.288499][ T7511] loop1: detected capacity change from 0 to 256 [ 79.289967][ T7514] fuse: fd is not a fuse device [ 79.402777][ T7520] netlink: 'syz.3.758': attribute type 21 has an invalid length. [ 79.407218][ T7520] netlink: 152 bytes leftover after parsing attributes in process `syz.3.758'. [ 79.613772][ T4715] Bluetooth: hci5: command 0x1003 tx timeout [ 79.614520][ T50] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 79.740254][ T7530] loop1: detected capacity change from 0 to 256 [ 79.742199][ T7530] vfat: Unknown parameter 'show' [ 79.949590][ T7534] openvswitch: netlink: Missing valid actions attribute. [ 79.949695][ T7534] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 80.128512][ T7536] loop5: detected capacity change from 0 to 256 [ 80.130871][ T7536] vfat: Unknown parameter 'show' [ 80.580247][ T7558] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 80.580359][ T7558] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 80.629960][ T7565] input: syz0 as /devices/virtual/input/input7 [ 80.764324][ T7584] loop1: detected capacity change from 0 to 512 [ 80.813924][ T7584] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.777: corrupted in-inode xattr: bad e_name length [ 80.820076][ T7584] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 80.825286][ T7584] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.777: couldn't read orphan inode 15 (err -117) [ 80.827252][ T7584] loop1: lost filesystem error report for type 5 error -117 [ 80.830539][ T7584] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.845937][ T7584] EXT4-fs error (device loop1): ext4_lookup:1785: inode #14: comm syz.1.777: invalid fast symlink length 39 [ 80.862513][ T7584] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.777: bg 0: block 465: padding at end of block bitmap is not set [ 80.869160][ T7584] EXT4-fs (loop1): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 2 with error 28 [ 80.869198][ T7584] EXT4-fs (loop1): This should not happen!! Data will be lost [ 80.869198][ T7584] [ 80.869219][ T7584] EXT4-fs (loop1): Total free blocks count 0 [ 80.869227][ T7584] EXT4-fs (loop1): Free/Dirty block details [ 80.869247][ T7584] EXT4-fs (loop1): free_blocks=0 [ 80.869262][ T7584] EXT4-fs (loop1): dirty_blocks=6 [ 80.869269][ T7584] EXT4-fs (loop1): Block reservation details [ 80.869275][ T7584] EXT4-fs (loop1): i_reserved_data_blocks=6 [ 80.898529][ T6136] EXT4-fs (loop1): Delayed block allocation failed for inode 13 at logical offset 4 with max blocks 4 with error 28 [ 80.904189][ T4713] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #13: comm syz-executor: data will be lost [ 80.950071][ T7593] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 81.027465][ T7599] loop1: detected capacity change from 0 to 256 [ 81.027855][ T7599] vfat: Unknown parameter 'show' [ 81.237163][ T7606] openvswitch: netlink: Missing valid actions attribute. [ 81.237264][ T7606] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 81.425351][ T7608] netlink: 12 bytes leftover after parsing attributes in process `syz.0.785'. [ 81.517808][ T7611] netlink: 209592 bytes leftover after parsing attributes in process `syz.0.786'. [ 81.521602][ T7611] netlink: 20 bytes leftover after parsing attributes in process `syz.0.786'. [ 81.956363][ T7637] cgroup: noprefix used incorrectly [ 82.127889][ T7638] fuse: Bad value for 'fd' [ 82.506642][ T7661] loop1: detected capacity change from 0 to 1024 [ 82.509336][ T7661] EXT4-fs (loop1): DAX unsupported by block device. [ 82.525762][ T7661] overlayfs: failed lookup in lower (newroot/156, name='file0', err=-40): overlapping layers [ 82.528058][ T7661] netlink: 100 bytes leftover after parsing attributes in process `syz.1.799'. [ 82.571446][ T7663] loop1: detected capacity change from 0 to 4096 [ 82.572411][ T7665] loop5: detected capacity change from 0 to 1024 [ 82.576469][ T7663] EXT4-fs (loop1): Test dummy encryption mode enabled [ 82.584529][ T7663] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.597836][ T7665] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.668325][ T5220] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.692337][ T4713] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.714236][ T7674] process 'syz.3.804' launched './file2' with NULL argv: empty string added [ 82.719955][ T7674] netlink: 36 bytes leftover after parsing attributes in process `syz.3.804'. [ 82.722274][ T7674] netlink: 36 bytes leftover after parsing attributes in process `syz.3.804'. [ 82.747444][ T30] audit: type=1326 audit(82.710:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7672 comm="syz.3.804" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84b79228 code=0x7ffc0000 [ 82.747482][ T30] audit: type=1326 audit(82.720:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7672 comm="syz.3.804" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84b79228 code=0x7ffc0000 [ 82.757049][ T30] audit: type=1326 audit(82.730:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7672 comm="syz.3.804" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84b79228 code=0x7ffc0000 [ 82.757069][ T30] audit: type=1326 audit(82.730:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7672 comm="syz.3.804" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84b79228 code=0x7ffc0000 [ 82.757084][ T30] audit: type=1326 audit(82.730:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7672 comm="syz.3.804" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=76 compat=0 ip=0xffff84b79228 code=0x7ffc0000 [ 82.757098][ T30] audit: type=1326 audit(82.730:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7672 comm="syz.3.804" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84b79228 code=0x7ffc0000 [ 82.757111][ T30] audit: type=1326 audit(82.730:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7672 comm="syz.3.804" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84b79228 code=0x7ffc0000 [ 82.757132][ T30] audit: type=1326 audit(82.730:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7672 comm="syz.3.804" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84b79228 code=0x7ffc0000 [ 82.757146][ T30] audit: type=1326 audit(82.730:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7672 comm="syz.3.804" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84b79228 code=0x7ffc0000 [ 82.757161][ T30] audit: type=1326 audit(82.730:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7672 comm="syz.3.804" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff84b7b218 code=0x7ffc0000 [ 82.781787][ T7674] netlink: 20 bytes leftover after parsing attributes in process `syz.3.804'. [ 82.831825][ T7674] netlink: 20 bytes leftover after parsing attributes in process `syz.3.804'. [ 82.831865][ T7674] nbd: device at index 64 is going down [ 82.876383][ T4704] udevd[4704]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 82.879673][ T5145] udevd[5145]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 83.016517][ T7693] cgroup: noprefix used incorrectly [ 83.579181][ T7707] binder: 7703:7707 tried to acquire reference to desc 0, got 1 instead [ 83.579474][ T7707] binder_alloc: 7703: binder_alloc_buf, no vma [ 83.579497][ T7707] binder: cannot allocate buffer: vma cleared, target dead or dying [ 83.579527][ T7707] binder: 7703:7707 transaction call to 7703:0 failed 8/29189/-3, code 0 size 15-24 line 3408 [ 83.769752][ T7714] cgroup: noprefix used incorrectly [ 83.795940][ T7721] input: syz0 as /devices/virtual/input/input8 [ 83.796986][ T7723] fuse: Bad value for 'fd' [ 83.891302][ T7737] netlink: 40 bytes leftover after parsing attributes in process `syz.1.822'. [ 84.218040][ T24] binder: undelivered TRANSACTION_ERROR: 29189 [ 84.246883][ T7742] loop5: detected capacity change from 0 to 128 [ 84.247319][ T7742] EXT4-fs: Ignoring removed nomblk_io_submit option [ 84.253372][ T7742] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 84.259484][ T7742] EXT4-fs warning (device loop5): ext4_group_extend:1861: can't shrink FS - resize aborted [ 84.261436][ T7750] loop4: detected capacity change from 0 to 256 [ 84.261848][ T7750] vfat: Unknown parameter 'show' [ 84.349041][ T5220] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 84.551326][ T7756] cgroup: noprefix used incorrectly [ 84.820315][ T7761] cgroup: noprefix used incorrectly [ 84.830949][ T7763] netlink: 12 bytes leftover after parsing attributes in process `syz.3.828'. [ 85.552695][ T7795] cgroup: noprefix used incorrectly [ 85.598278][ T7803] input: syz0 as /devices/virtual/input/input9 [ 87.995288][ T7812] loop1: detected capacity change from 0 to 512 [ 88.002840][ T7814] loop4: detected capacity change from 0 to 256 [ 88.006076][ T7814] vfat: Unknown parameter 'show' [ 88.061850][ T7812] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.844: iget: bad i_size value: 38620345925642 [ 88.061899][ T7812] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 88.062880][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 88.062903][ C1] EXT4-fs (loop1): initial error at time 88: ext4_orphan_get:1399: inode 15 [ 88.062940][ C1] EXT4-fs (loop1): last error at time 88: ext4_orphan_get:1399: inode 15 [ 88.077967][ T7812] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.844: couldn't read orphan inode 15 (err -117) [ 88.078007][ T7812] loop1: lost filesystem error report for type 5 error -117 [ 88.079264][ T7812] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.354953][ T7824] cgroup: noprefix used incorrectly [ 88.362978][ T7827] netlink: 24 bytes leftover after parsing attributes in process `syz.1.844'. [ 88.363052][ T7827] netlink: 24 bytes leftover after parsing attributes in process `syz.1.844'. [ 88.585673][ T7844] netlink: 32 bytes leftover after parsing attributes in process `syz.0.853'. [ 88.729709][ T7847] input: syz0 as /devices/virtual/input/input10 [ 88.878459][ T4713] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.257592][ T7860] loop5: detected capacity change from 0 to 256 [ 89.455676][ T7863] FAULT_INJECTION: forcing a failure. [ 89.455676][ T7863] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.455813][ T7863] CPU: 1 UID: 0 PID: 7863 Comm: syz.1.857 Tainted: G L syzkaller #0 PREEMPT [ 89.455830][ T7863] Tainted: [L]=SOFTLOCKUP [ 89.455834][ T7863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 89.455840][ T7863] Call trace: [ 89.455843][ T7863] show_stack+0x2c/0x3c (C) [ 89.455863][ T7863] __dump_stack+0x30/0x40 [ 89.455874][ T7863] dump_stack_lvl+0xd8/0x12c [ 89.455884][ T7863] dump_stack+0x1c/0x28 [ 89.455893][ T7863] should_fail_ex+0x41c/0x590 [ 89.455901][ T7863] should_fail+0x14/0x24 [ 89.455907][ T7863] should_fail_usercopy+0x20/0x30 [ 89.455914][ T7863] _inline_copy_from_user+0x3c/0x174 [ 89.455923][ T7863] io_submit_one+0xc4/0xee4 [ 89.455931][ T7863] __arm64_sys_io_submit+0x230/0x3b8 [ 89.455938][ T7863] invoke_syscall+0x98/0x244 [ 89.455948][ T7863] el0_svc_common+0xec/0x23c [ 89.455957][ T7863] do_el0_svc+0x4c/0x5c [ 89.455967][ T7863] el0_svc+0x64/0x260 [ 89.455976][ T7863] el0t_64_sync_handler+0x44/0x104 [ 89.455984][ T7863] el0t_64_sync+0x198/0x19c [ 89.563176][ T7868] loop5: detected capacity change from 0 to 8 [ 89.638471][ T7875] netlink: 104 bytes leftover after parsing attributes in process `syz.5.862'. [ 90.063208][ T7887] netlink: 56 bytes leftover after parsing attributes in process `syz.5.868'. [ 90.064186][ T7887] netlink: 40 bytes leftover after parsing attributes in process `syz.5.868'. [ 90.085292][ T7892] overlayfs: missing 'lowerdir' [ 90.111115][ T7894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.124056][ T7894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.159195][ T7897] loop1: detected capacity change from 0 to 1024 [ 90.160930][ T7897] EXT4-fs: Ignoring removed bh option [ 90.178583][ T7897] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 90.208249][ T4713] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 90.226926][ T7901] loop1: detected capacity change from 0 to 512 [ 90.227745][ T7901] EXT4-fs (loop1): Test dummy encryption mode e ** replaying previous printk message ** [ 90.227745][ T7901] EXT4-fs (loop1): Test dummy encryption mode enabled [ 90.229256][ T7901] ------------[ cut here ]------------ [ 90.229263][ T7901] EA inode 11 i_nlink=0 [ 90.229352][ T7901] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x480/0x488, CPU#1: syz.1.872/7901 [ 90.234719][ T7901] Modules linked in: [ 90.235453][ T7901] CPU: 1 UID: 0 PID: 7901 Comm: syz.1.872 Tainted: G L syzkaller #0 PREEMPT [ 90.237295][ T7901] Tainted: [L]=SOFTLOCKUP [ 90.238056][ T7901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 90.239742][ T7901] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 90.241078][ T7901] pc : ext4_xattr_inode_update_ref+0x480/0x488 [ 90.242128][ T7901] lr : ext4_xattr_inode_update_ref+0x480/0x488 [ 90.243165][ T7901] sp : ffff800093cd6f40 [ 90.243836][ T7901] x29: ffff800093cd6fe0 x28: 0000000000000000 x27: 1fffe0001b5dae95 [ 90.245178][ T7901] x26: ffff0000daed7300 x25: dfff800000000000 x24: ffff800093cd6f60 [ 90.246461][ T7901] x23: ffff70001279adec x22: ffff80008a19c000 x21: 0000000000000000 [ 90.247880][ T7901] x20: 0000000000000001 x19: ffff0000daed72c0 x18: 00000000ffffffff [ 90.249240][ T7901] x17: ffff80008a7d6000 x16: 0000000000000004 x15: ffff80008a35fda0 [ 90.250624][ T7901] x14: ffff80008a5d5e28 x13: 0000000000000001 x12: 0000000000000000 [ 90.252035][ T7901] x11: 0000000000000000 x10: 0000000000000002 x9 : ba5a7c6df9d2ca00 [ 90.253371][ T7901] x8 : ba5a7c6df9d2ca00 x7 : ffff80008048c60c x6 : 0000000000000000 [ 90.254699][ T7901] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000802f6830 [ 90.256280][ T7901] x2 : 0000000100000000 x1 : ffff0000ccaa57c0 x0 : 0000000000000000 [ 90.257751][ T7901] Call trace: [ 90.258338][ T7901] ext4_xattr_inode_update_ref+0x480/0x488 (P) [ 90.259470][ T7901] ext4_xattr_inode_dec_ref_all+0x7f0/0xb84 [ 90.260488][ T7901] ext4_xattr_delete_inode+0x778/0x900 [ 90.261478][ T7901] ext4_evict_inode+0xa0c/0xfb8 [ 90.262267][ T7901] evict+0x4c0/0x74c [ 90.262947][ T7901] iput+0x8f0/0xc2c [ 90.263598][ T7901] ext4_process_orphan+0x24c/0x2c0 [ 90.264451][ T7901] ext4_orphan_cleanup+0x7d4/0xd20 [ 90.265362][ T7901] ext4_fill_super+0x4628/0x4e14 [ 90.266222][ T7901] get_tree_bdev_flags+0x388/0x43c [ 90.267132][ T7901] get_tree_bdev+0x2c/0x3c [ 90.267886][ T7901] ext4_get_tree+0x28/0x38 [ 90.268625][ T7901] vfs_get_tree+0x90/0x28c [ 90.269346][ T7901] fc_mount+0x24/0xac [ 90.269988][ T7901] do_new_mount+0x2a4/0x538 [ 90.270741][ T7901] path_mount+0x5f0/0xa88 [ 90.271473][ T7901] do_mount+0xe8/0x148 [ 90.272184][ T7901] __arm64_sys_mount+0x33c/0x388 [ 90.273090][ T7901] invoke_syscall+0x98/0x244 [ 90.273924][ T7901] el0_svc_common+0xec/0x23c [ 90.274690][ T7901] do_el0_svc+0x4c/0x5c [ 90.275387][ T7901] el0_svc+0x64/0x260 [ 90.276051][ T7901] el0t_64_sync_handler+0x44/0x104 [ 90.276942][ T7901] el0t_64_sync+0x198/0x19c [ 90.277758][ T7901] irq event stamp: 1454 [ 90.278463][ T7901] hardirqs last enabled at (1453): [] vprintk_store+0x924/0xb94 [ 90.280066][ T7901] hardirqs last disabled at (1454): [] el1_brk64+0x20/0x54 [ 90.281596][ T7901] softirqs last enabled at (1094): [] kernel_neon_begin+0x294/0x400 [ 90.283158][ T7901] softirqs last disabled at (1092): [] kernel_neon_begin+0x11c/0x400 [ 90.284841][ T7901] ---[ end trace 0000000000000000 ]--- [ 90.287508][ T7901] EXT4-fs (loop1): 1 orphan inode deleted [ 90.287980][ T7901] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.295789][ T4713] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.