last executing test programs: 44.238185858s ago: executing program 32 (id=116): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x12, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x45, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff1}, 0x94) r2 = fsopen(&(0x7f0000000180)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000480)={r1, r3, 0xa, 0x0, @void}, 0x10) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e1a, 0x7, @dev={0xfe, 0x80, '\x00', 0x10}, 0x2}, 0x1c) 31.732698003s ago: executing program 33 (id=434): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000180)={r0, r0, 0x9, 0x0, 0x0, 0x6, 0xfe, 0x10d2, 0xf801, 0x5, 0x3, 0x1, 'syz0\x00'}) syz_open_dev$vim2m(&(0x7f0000000000), 0x4000000000000009, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000000)={0x0, 0x0}) 31.168611085s ago: executing program 5 (id=446): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001200)={&(0x7f0000001300), 0xc, &(0x7f0000001400)={&(0x7f0000001500)={0x60, r1, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xa}}, {0x8, 0x6, r4}}}]}}]}, 0x60}}, 0x0) 30.896869792s ago: executing program 5 (id=450): syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e0b06c900060008"], 0xe) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x101, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$FE_SET_PROPERTY(0xffffffffffffffff, 0x40106f52, 0x0) 30.89627892s ago: executing program 5 (id=452): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)={0x4c, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1a, 0x2b}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x56}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x12) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x5e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaac0aaea429e82211ce786dd6015dfce0028"], 0x0) 30.791651686s ago: executing program 5 (id=455): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x18d883, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) 30.736518017s ago: executing program 5 (id=458): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp6\x00') read$FUSE(r0, &(0x7f0000000740)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys_mnt\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys_mnt/kernel/mm/transparent_hugepage/khugepaged/pages_to_scan\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write(r1, &(0x7f0000000800)='1', 0x1) 30.361057243s ago: executing program 5 (id=461): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) write$P9_RLERROR(r0, &(0x7f0000000000)=ANY=[], 0x11) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 30.251715348s ago: executing program 34 (id=461): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) write$P9_RLERROR(r0, &(0x7f0000000000)=ANY=[], 0x11) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 28.836961287s ago: executing program 1 (id=494): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000001c0)={r2, @in6={{0xa, 0x4e20, 0x3, @private2, 0xffffffff}}}, 0x90) 28.836297685s ago: executing program 1 (id=496): pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = add_key$keyring(&(0x7f0000001600), &(0x7f0000001640)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0x7c) r3 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000080)='*', 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r0, 0x36) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 28.827662331s ago: executing program 1 (id=497): timer_create(0x2, 0x0, &(0x7f0000bbdffc)) timer_create(0x2, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r0, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) 28.597082779s ago: executing program 1 (id=499): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000002c0)='./file0\x00', 0x2048c5, &(0x7f0000002b00)={[{@fat=@fmask={'fmask', 0x3d, 0x7f}}, {@shortname_mixed}, {@fat=@time_offset={'time_offset', 0x3d, 0x48a}}, {@utf8no}, {@uni_xlate}, {@utf8}, {@utf8}, {@utf8}, {@shortname_winnt}, {@fat=@sys_immutable}, {@fat=@umask={'umask', 0x3d, 0x1}}, {@shortname_winnt}, {@numtail}]}, 0x0, 0x2b2, &(0x7f0000002c80)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x13481, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020) 28.547578108s ago: executing program 1 (id=502): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000080)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) r1 = socket(0xa, 0x3, 0xff) recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0xd9}], 0x1, 0x10022, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) 28.210478942s ago: executing program 1 (id=508): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54000000090a010400000000000000000a0000040900010073797a310000000008000a40fffffffc08000540000000020900020073797ab10000000008000640ffffff000800084000000001080003400000011c14000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004840}, 0x8044) close(0x3) 28.120982586s ago: executing program 35 (id=508): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54000000090a010400000000000000000a0000040900010073797a310000000008000a40fffffffc08000540000000020900020073797ab10000000008000640ffffff000800084000000001080003400000011c14000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004840}, 0x8044) close(0x3) 20.47901933s ago: executing program 8 (id=692): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket(0x11, 0x80a, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], 0x0}, 0x94) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x80) syz_emit_ethernet(0x2a, &(0x7f0000000f40)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x2, 0x34, 0x1c, 0x68, 0x0, 0xe, 0x2, 0x0, @remote, @local}, {0x11, 0x7, 0x0, @empty}}}}}, 0x0) 20.313137034s ago: executing program 8 (id=698): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="c4000000190001000000000000004000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000053260e130000000000000000000000fbfffffffff5ffff00000000001b00000000000000000000000000000000000200000000000000b9120000000000000000000000000000000c001500283a6b304c"], 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000200140000000000000000000000000000000000000000000500000000000000fbffffffffffffff000000000000000000000000000040000000000000000002000000000000000022"], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) socket(0x40000000015, 0x5, 0x0) symlinkat(0x0, 0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_ethernet(0x4a, &(0x7f0000000680)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 20.312608879s ago: executing program 8 (id=700): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x70}, 0x1, 0xba01}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 20.243670693s ago: executing program 8 (id=702): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x2859052, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000004200)={0x2020}, 0x2020) 20.145115395s ago: executing program 8 (id=705): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xd, 0x9}, {}, {0x7, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4c890) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) r1 = openat$cgroup_ro(r0, &(0x7f0000000600)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x0, 0x0, &(0x7f00000006c0)=ANY=[]}, 0x78) write$binfmt_script(r1, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [], 0x0, 0x0, 0x0}, 0x1e8) 20.020635368s ago: executing program 8 (id=708): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x8, 0x4007}, @mss={0x2, 0xd81d}, @mss={0x2, 0xc0}, @sack_perm, @timestamp, @sack_perm, @sack_perm], 0x8) sendto$inet(r0, &(0x7f00000007c0)='%', 0x1, 0xe044, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0) 19.975253365s ago: executing program 36 (id=708): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x8, 0x4007}, @mss={0x2, 0xd81d}, @mss={0x2, 0xc0}, @sack_perm, @timestamp, @sack_perm, @sack_perm], 0x8) sendto$inet(r0, &(0x7f00000007c0)='%', 0x1, 0xe044, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0) 10.730293434s ago: executing program 9 (id=925): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file1\x00', 0x1810090, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file0/file1\x00', &(0x7f0000000080), 0x0, 0x0, 0x3) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) 10.590400272s ago: executing program 9 (id=930): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r1, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000340)=[{&(0x7f00000002c0)='/', 0x1}], 0x1, 0x0, 0x0, 0x40}, 0x0) accept4(r1, 0x0, 0x0, 0x800) close_range(r0, 0xffffffffffffffff, 0x0) 10.433090775s ago: executing program 9 (id=931): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_open_dev$I2C(&(0x7f0000001380), 0x0, 0x1) mount$fuse(0x0, 0x0, 0x0, 0x80, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x18) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000024c0)={&(0x7f0000002480)=[{0x2, 0x401, 0x43, &(0x7f00000013c0)="23ae9a9441a54acd670406b5def4321b8d2525bda12565a9a08507f9679bf622a9ddfd27bab1064ddda6640d7a643aecef1d63d2d465ca5723fc8a81a815e71102539b"}], 0x1}) 10.432722049s ago: executing program 9 (id=932): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x3005840, 0x0, 0x5, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x88000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 10.432349203s ago: executing program 9 (id=933): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe0}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc53", 0x35}, {&(0x7f0000000e80)="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", 0x11e}, {&(0x7f00000000c0)="641a6a2b863c0dd898013a3f97a834ebb75a", 0x12}], 0x3}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)="e750", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000500)="cbc6", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000880)="2588e09c666f7c2e1106c4b4839bf483707b3603c0580d4ea3d894cc071395c4737f5f4840a109613a98c563d9d35e1d30ca9911819a41dbfd9738e9c1125ca897831d701969b199ec46f793e0be4ddb8d9826811efc4e049594868a96ae2daab085b6ba229f384a9463eb764b9ea4c74e5460b9a82983e2d22885fbc6d1d731e8d02f8246b3f0ae936b34987046e18afad35e79c363b701eb8455e1f4ea1c12e4a706789339df763dd4505497e474d21689760747e6d2c3c2d85aa253b16d60ddb3514870d74268c552", 0xca}, {&(0x7f0000000980)="b58e23c2095b3eca9b630c1d411197505e88b68339fc3ca18b0fd3186d253cf0556b7f8b7172a7ecda83c0bfb299b17792211571807b64f65caf151aa7f1b0bd962717d5fd2f9f0ceec19df6106bdba8c3292328dce4b38ecc0c6cbaed777b7d2f6f229a0ee04cc5c0cd92b973485c74f5a33bb3e68099b2de241b322610c87a569eca6f2ba8dcb256baa1dd10abf557801fefa4a52a83c7fef34eeb77f6018144197cc352dd0adc8a776eb815", 0xad}, {&(0x7f0000000180)="0700000000000000f941ab377bc1fb8f575f5308995bdcc18c625100000000000000000000000000000000006378173e695bac213d0283c90869ef6e29074aaa0ff49274642ec4fd111cda48da0af2ef1360a2ea05c6b711a8724ad6535a68cb8839a6ba482455a4bf83797f5f704cdfffd5d33706e70a33c790366272f083fbd947fea03ebaf307d1d3fb7b4426d13156981c5b4a5d5dc8bd4317d83ea4c748f701863129252deee72483040de1c896e9a59132763ee8ff7dac646d271af99e", 0xc0}], 0x3}}], 0x4, 0x14042082) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 9.949097823s ago: executing program 9 (id=944): setns(0xc9, 0x0) socket(0x8, 0x5, 0x5) syz_ublk_setup_io_uring(0x1b1d, &(0x7f0000000080)={0x0, 0x1c3f, 0x800, 0x2, 0x1a6}, 0x0, 0x0, 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010007ef0000540012800c0001006d6163766c616e004400028006000200010000000800090001efa8000800030003000000080007000500000008000100100000000600020001000000040005800a000400aaaaaaaaaa2e000008000500", @ANYRES16=r0], 0x84}}, 0x20008040) 9.918768599s ago: executing program 37 (id=944): setns(0xc9, 0x0) socket(0x8, 0x5, 0x5) syz_ublk_setup_io_uring(0x1b1d, &(0x7f0000000080)={0x0, 0x1c3f, 0x800, 0x2, 0x1a6}, 0x0, 0x0, 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010007ef0000540012800c0001006d6163766c616e004400028006000200010000000800090001efa8000800030003000000080007000500000008000100100000000600020001000000040005800a000400aaaaaaaaaa2e000008000500", @ANYRES16=r0], 0x84}}, 0x20008040) 4.848426582s ago: executing program 3 (id=1043): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000001c0)={r2, @in6={{0xa, 0x4e20, 0x3, @private2, 0xffffffff}}}, 0x90) 4.768174458s ago: executing program 3 (id=1047): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x16, 0x0, @void}, 0x10) r3 = socket(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0xd1, &(0x7f0000000040)=0x1000020f, 0x4) 4.724172013s ago: executing program 3 (id=1048): r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) ftruncate(r0, 0x6000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)=0x20) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) 4.327404155s ago: executing program 3 (id=1057): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x18d883, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) 4.274614727s ago: executing program 3 (id=1058): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000600)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x16}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0x65, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}, {[@ra={0x94, 0x4, 0x1}]}}, {0x4e24, 0x4e20, 0x4d, 0x0, @gue={{0x1, 0x1, 0x0, 0x2, 0x100, @void}, "0511ebf35140896e628bce43c987eb928acff7fcb7f1648e544a082045d914875a474b18a96bf43d0d737f8d974033b8dcdf4f2df0a0839c256394db9d63ac513a"}}}}, 0x73) 3.945024292s ago: executing program 3 (id=1066): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x5, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x7ffe}}, 0x50) fchownat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0xee01, 0x1000) close_range(r0, 0xffffffffffffffff, 0x0) 3.915118914s ago: executing program 38 (id=1066): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x5, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x7ffe}}, 0x50) fchownat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0xee01, 0x1000) close_range(r0, 0xffffffffffffffff, 0x0) 1.360576228s ago: executing program 6 (id=1120): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r1 = memfd_create(&(0x7f00000003c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x1000}) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r3}) 1.277070451s ago: executing program 4 (id=1121): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc) r1 = dup(r0) write$cgroup_subtree(r1, &(0x7f00000001c0)=ANY=[], 0x32600) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000740)={0x0, 0x1}, 0x8) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x409c) 1.271038729s ago: executing program 6 (id=1123): sched_setscheduler(0x0, 0x2, 0x0) setresgid(0xee00, 0xee01, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c3, &(0x7f0000000900)="$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") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) setresuid(0xee00, 0xee00, 0x0) utimensat(r0, 0x0, &(0x7f0000000580)={{0x0, 0x3ffffffe}, {0x77359400}}, 0x0) 1.210839697s ago: executing program 6 (id=1134): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000100)='proc\x00', 0x40, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='ns\x00') exit(0x3) fstat(r1, 0x0) 916.898292ms ago: executing program 2 (id=1141): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f000000a380)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x4, {0x7, 0x28, 0x0, 0x8010, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x100, 0xff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00') umount2(&(0x7f0000000400)='./file0\x00', 0x2) syz_fuse_handle_req(r0, &(0x7f0000006140)="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", 0x2000, &(0x7f0000000700)={&(0x7f00000002c0)={0x50, 0x0, 0x8000000000000000, {0x7, 0x2b, 0x0, 0x2c000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 756.77077ms ago: executing program 2 (id=1133): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r1, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/219, 0xdb}, {&(0x7f0000000800)=""/129, 0x81}, {&(0x7f0000000300)=""/95, 0x5f}, {&(0x7f0000000200)=""/72, 0x48}], 0x4}, 0xfffffffe}], 0x1, 0x0, 0x0) 720.492114ms ago: executing program 2 (id=1136): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f00000002c0)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@test_dummy_encryption_v1}, {@noload}, {@test_dummy_encryption_v1}, {@nodiscard}, {@data_err_ignore}, {@usrquota}, {@journal_ioprio}, {@resuid}]}, 0x1, 0xbc1, &(0x7f00000043c0)="$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") syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) chdir(&(0x7f00000003c0)='./bus\x00') munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 699.988292ms ago: executing program 0 (id=1137): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) read$FUSE(r0, &(0x7f0000008340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004300)="00e7a0633e8438bafa888b9b02144af32e296a0a01dc194d649b6fa26d6d5e63bac4a04baeeb8aacb22c6eec461b67db6a737737c6d2687acb00572f92e3fdb5d0cb2f11121c557a943020200755bcab77b39c406b733239e2bb1175b9322ba39dc7d67da8f77aed1714dae2e6c24c3ea96be9d151c6ab7b3c54bbe507b8b2461fb4be8dc90042184af6d48f8ace16abb5e3fc943cf61cdb75624a259bdb5f7829b9775820f85f2d1a6ee6c6c2af4fd41ab8a41ecb2612abf13cd2c6f9f3e6db505e4bbe68cc000cf5fa6d5636191a4b366ab59af52132a3f9678d4ed1bd577bacffb3b52850804005eebf3dfa4763168ff30490a11acdbbf4c3312a45f30139f6b72b1e7cdec185006bb30e0e8fa88da2cefc718cae7e9830f7ca101e4e23c6bd16bfacf4a9927fb13af4b79c86ab999beda4ad396abdda354a42fb4ef21d6749175dc21a0cf9191aa4f90d274b50370a580ad8dcd166d2b06c0d8b071973c3fde30f7e2bc371a51ca5866bf8b24eaac75bf482dd4436b214ff62d32e20df223b0b680ede28b3a49e66e330a8a3ecace0db9855d235d5ff23765e742d1a739c2ac8743f4c62664a3b347279da55a1a5b16e1e2828b584a013577d50f890e3894d9e8d6bfccdfb2b70221f12a7fac24b7a8818edce72b65f622c77bf1312771a2c0d805ec9a25c536c91868762032255be78903b77b2c1a773a03996fabba69214e76f5df6df0375b592692a2c3c86c75a3be56fe598ddaea0b9901d20db7e43e128e04e5509283f833c24c625887288459db5727210ba9a301fb8c934dd1d8dca68039fe5b2e1a8d7cdfc6d875e5851098100c3cd42544ed90bb55b58d20a501fabbc485d148c615a3b070fa0520da2ed68ee115a4411d5418b47f3d95616096f67a7a36d68f1e8df82eca8ef96fb4a96b3422fe046a37ea5f5967513a559bd770fecab7228b0692f439765c9e9c6ea4fc608e0b27f9b49064dd2f9ac06f83f6d87ebc61fa3a29bb5ed39641245ce8cf43770df32a84838802b0827ca5a40e2003915e2ed108a005637bb028d29bd2cfd28a1bd55e67ed1b6b7b72163c27c4b0e36d1b134d6dfdb165a66fb46498fc04bb8053b84098af5b18758631d1318d625a6fa4d3ce5a4d3a90e10c6363a26b5ae96c2d56f87ad21a6118af6847d041f88f852ddc3f250c088ef5cb31198f3ac81cff9a5bab26ed56c09f8416188974e08349f7da28fc754b98c1ac4ea0060ac1e1b1c49f7dbadbc59254b265dc418cab9ac14e2bbecc4c3103543e37984efb1f61315e10d2b422732217d3a9b0cfe4561f3765d3bda60be239e02bdc164dd631582e8c87dd8fa60d63dcf9e7f3dadc4ce5e4433a42425b8ee8cb8a2defab0bf9b6109c90b5655b79b18c06884f2670a985d454e08e54de69f645cb0cbb70620bd988ee717c310ae77b4abe81c01c6e7f47268ee20bc30b9062830917705682eba2c5ef966b877f33294aa5f8b29d3dd5ed92302087f34fa18d19a005de05f925e3e93c8c0f24507ff20cd23d9ae5452c32ff58c78ccdb1ab32c98edfaa6d2c3971934ca8f849ac360c286566eb72b0793f12cef84bd282368d533247ee750f18aeda484167f3d680e4aaa3aa0694441d4ff6a71531f1a30f87eeb71afd04c5d686e1f86f27586f4e2c8ff77c09612ba1af9b3fb93efd31af42f8e0498f35d07c662b743a08f2839cad8f95b90cbb4fc0ed2ca45dd093a549cde4c6ff08ce09a2cbc6f9f78b6f96643357f92f8f403202742057731fd3e343a87c0affe803cfdbddb8c2694ab63f2dc35da705624747e30a943000fc82c40f10e1975d2e2ec15aefd531b6dbc053606b054dc976f44d5b5a5f37e9c08532ce16cf8bca55ab6c814ceb855ab50b8b52620f8645a9dc25fcb732080d84bf39c3ebb235b4d96da527b64ec4b72f69e91d16a4efcaf76f2e1f968ca68a06f60b01ec7becc9ffd7877c0992cb0f80fb3daabc039513896bd7697843be06aba53e7761e11e075c61ef2d897d4d9f90041c14283746feeb3f0d456ba4be27843350fe43e7c1110b4439489139f6dae01c43f23ec71f08d3042663c65e059d368e4e2c6e49de45bf078d3182a1bc1208bc59379e705aa3309579947409f2a8b3d79099c8619f916e7a6fa333d2312a274247156b8c25cbcfcc59ef13339c700f56a8691dff39bd4338789001872c0d90929037dc0ad99b380a6ba73f331f73f9274f4c2bf5233d7482edf37bf6ffed4f2c0ee44a1d57cae0d644f25591dc03bf837571a82d0c31b61be7ff85a5b3843e8f96a50eaa43f5c137ecfc4e4530d08a2afa4ba02fcc50117a4ad0d5862302017639344c82749f673dbd650e49b35302d0acbab45c0973198291bb42b4cfcd3b0c252074341ea8eca19e122cd234da6d41bf5eedb706e16c17687ed8b84db67130796d26b94eac83bbcd785b603242bd6252c155711efd7dd22cc54e1eaf6d910d0f22c701f3d4da0314dd2829c6ee13bbcbd126558b47b8066bf0766c792a012315bd29bfeda8f28a2c1f4e638b701758e19a0e5bd5b4f19048b00a877d956292e345f8a3a8367892f955bcb5e50ca145ec5e2c9309e25941bd277e393aaad38f9b72a42514b27da6856223c37a1fc1327fa760551d3fdeb0b222ab180b16c9eea138cf4f327e88fdfee293c5b6b007028eb796a60772148282dcd17ffc1c90ed8b6540ede933545ed5a5301d6ff39734444ff3d85cda4ac3befa5083a4685e9e231eba4a91a35f4f7f48fd5ac2447c64c010e2a9f8e80691c95460e1995444466ec5f3cd71fe509a26ff0b7f3254bc8c3255e903834e841b37c70b267fb33deb0d1ed4ea84a869453ba508fc255b12cf847103d5195046c930ae4a75c956f22fcfe4186d547686b54bd7a534940d5d62216994eac0e8ed3bd2bd59354e6b9c6b5b10511d54a8b928040f1e13c4a423b0cf519fc6e9673df5c48c0778c7edb8fa8d8ace77463a77d2d6313160e1ee72742953e433b670400d59c93464fd91520847db238610ed0c289fc55647881a7d6257cf28090c75a6f19df079cfd35742a74a5ab270314f7c8039c20ff0f3f543d029b75a741b5dc6425241ac2ffabf1f96288e6d4ba34da09fb6049c2c8753fbd41fdb4bc68c57bf374ef4feb0df00c41319debb26afba2ff39e1799a1c2137f4e920ee5b02d93789b6b0c853e8143dae5b08ee85da2ea7c31803610ce797293ea95c16ade6dae2afb008e59d8b9505737f008b5227df5f1e4eb5d707f502698a17ead9b1f5ec09dff34248ff2fb153dc6df4812e39754a4baa42e1d8b77fbddef3ca091701ac28ae5fd422dbd8db5b122d3965383abc37a52d2fca5ce56eba974dba3d059cefe40e3c35c9daa8ae31198214303c1dcb90d58fc983ccfd504fa43925636f94b128d44e8aa5cd3ecfabd50a84062d03f7508a0575ab65ecc749d3ef566fdbc529a8139b7a7fb3a9bd784df52cddc6f2699044ba47615163fbbe19f3d88d38a8b71fe52b2611ca74341429d1cef1a7e350545be29d2caa560e60352cab074c298c44ca2c07f9795ce52f10aa3e2fcdef371f24e309b19e52218881f25a4674527edbe3b3bd0b9b536d810c6f9500c0c81bcfd9a440dd91c1d35c52758d2b2ae1a8497bb394c4f09d3947cf777727b0d1daf5ac4fe4fa3c247a791702cb84b96321b7fec81bf549d4eb5d6dafe019b26187417c68b064e4308908535a3e77b6cd3e28caaf12d726f15590b7958e40134d045a38cbb689131a7e85532f1c63dd4bac9e4d00645cd7b2b71704563f3738b92044a8153f6ba717800ab7cb238175c376d7add2c5ec38e4c856f1ab9c3ee33f6ca6d576ae908dd290e4bae23470182e253765e04e8eb02a791c4396a511ef467879a9e2818b8a4b1b0b39a6c44e816e3ebf6e3be93929dfcb38d5dad7d20b60215447674d0608b8b02331ac20e57083cb9b4449fecbb149441aea0ad82f00a82d87d743fc80d410922bc20923516885440f43c9f32beb81ce148def6140952583a7825c2d2fe012d52d30ef66d32a8a0864ac5c1737e2506228d41ff0515ee80be4cf012927dde0fd2a07cac68eff8c4437f2844d4df07936fd8753e5909f962c5c767f8719cc295bdfa8a16f3f36ff56e34d7b14b6b8c46d5af248b04a9c5396f84990e23d145670950bce5f5638e5e2cea37c371a4483729338f1305cbb32fa1c05dd9d21d2a69e5fa3abe9a2dad2237be20b4088393c04aa66cf13718de4bffac72f641a8c017a1d5568fa15a6a06e4dc833874ec95af6f115bdadf15179bfc8c4e3e64f26f1299e282c4ab397340934efc1e601afc630fe195e8ae7d8da1310568cab4f2fad085d0ec39710d8b7c812b3fd55c6f50925bcfc90fbcb35b8daa0f1e1f69d82fae2034039f7ad6921694ed48a55a68bc541e6d86f1e33c261a92d48b50eb58a03d8e31b2f6564a4ddc3ee988d0dc47b4b610a9a9dcb87571b5c1edb3362df0ec3d58872157e0f7247dfa8100b4478b705702a5620c9201010f40232327550db333e845dbecd6aadbd0a94c064862b1100b6dd45ece811b8c0275e3753e11b4bcd8bc5ed7668e72afa5bc5cc17b4c313273755f532ecfdefdf2d5c47999453a3b7c158d98332f0bd3a820cfb2c8c3bcd43197e7395a032cec6e41662079f2f654965aebc393e22b5c8516d9b8ad01e33ee481a4ac46a2df304dadeaa9e5274d340aaebe14dcea315fe1279f1a41a5c7aa8c94bf4b3d48757503171f53488e01210145e62c0de7c39737848dbdb1b207d4d33b8de180b020e8a76b1b521905e5e3ce97292f8558fb68efdee774681bfffcf1dc3eef35f660dd1659a32950de2d50e762313beee330d9c2a9fe8ce5e4e61ddd86378d3551335f6ef62053d3b248a8c33a11abdf3f3aa1975a15f4a6957a13d5b12a44d0f2b52b9a2d996e98c630c0f2abca80c7ae89efcf81ae284a0d19582cb1319d207077e5657d245533181ed6e07e0f7647123fc46c37bd75b4f4d181112b4a08acdcf445332cb9dde69a0923dd9244dd2ecd818b19588939922e3b2d8dd9d9fed95fa55b0e4564b38aca2c4d24eebc634664400177fbdeaeb278bb1d8eb11baf4be5c87d4f8d9a855bfa75df4c51fb4eec87a27c59df9a47d82523b08022a1c0fb22ff6f93c3d2cc22a4111a6ec5be428cba33617be65739c2240248f3a02d01ddf2d6aca9e537a2296b16d082d2b868504371dd5e41898885b03ebfaca73b40e8924ece83c1c80de6ce14943e1199c6f81bf359f44c3ed5ae3c6eacb730b1039f0b6555347bd566dfff45a7a2176420ab2b40916a73b66a3ad07af6e1ac5597393d203fa1ad34d4564af956a0a3e2997e27a4e5eff67dd89cce8875d995e00c1858234f149f6ad4cac2b8056966f726df57b8c4ee8f22f23097ba1471b1f1036e3a499400fccdb75b56eb13e9eca1407d5bff4b075b06d00fcbfcafc28431eb33156232e73c6577e3eca437330c494ede57b9609e1f40634918dea767338b5542197410cdc000143ace89ca0b7bf645b3267f74767d7c7fce05d2f59c137204e56bfa711f66903c511f681cf7a1b4f9fc0f42b7c438ff8957e1059375321df5b0c5c884f46d94c21686e1300582d34928bc398653118f79bfeea2e7cfbbf31a7718f4aab50fae57db94203d43e060365c9a7455241be03d82dffc3783d0f6aa170c0866eb0dad07485831526922d8348a7a16e2e9903a2ac93c58c6dce83127fab17703ec004a519ae5675baffb31bf4b52f9ca992a84017a44d68dc693abd829947342f277fdcbc87168bcc03c32b8b1e81a1915af2517c464af07d52b79d1b0e53164c82ba049f81e92ed1dc20a88fd72e9ce7aa4b22a7cc57dc5527d14f62bc29cfc9d57ed26fd523cac39ac00ba12d3a49d694709924275fc0793d56acf9558818dc9eb210749fa5307d45886b879257d627cee0542b51c2ce6ce134100efb47c92456ece5b73cdc051f570810a8d534222649eb56cf73a377162b753de6c282bcd4a25dda21dd10901bd8dfe8fd4ba8a70811c39707beded23dd60f23e2933372e3a6bce099899b07f0a4c4956fd98e956a8649622c77717de099463c0c6c9389ab4a1ae10f8ddd086d876af2943ee0b6b402ae5f89e09922e8c510ec0caa0a83e366e916400bfec88a52ab457037a35ddc6a8e2289c33684a5915c37bf5d227cbc65a737b52bdcb4fbbb7b4e7f965db116b46044d0870846c730dce12e120b1fe6dd5798ced24cad72c59a3f44de4978b8bc05a1dbeb766be6e2abf6ef46c67a58a370e54e92d89e5f44525e82b94a388d8d0cb20c3469a258c1633c9dddb6854aee255f93f59435ff317622f6899250aa185c207644275278580c5d32401741fe264a2e03b80f442ed58fd0704ebac923ac6a5abb7f0c695252f82e3fbcf2b99d721589a8fe3fad4d5926aee3d7bfafb6739e525faae3d25b12841fa2cc61dddc44d36acb9a8b72d60ecdd9c8cf04f9bac341b5e0f9bc59042db8126324888b07afe72b18cce36d61eec975b6b4ef5dc4a16ac14440cf770599bd4db630bd110eb63a03a80cd95c16d314a4de60cc5115bf0754cb7ab84a827ecefafa96069c721a5979f227fdc2467b4cd1975dafb5b28e1d6f3c1c3a2816ad831dd98c1378a03798c128f176426eaa0e361571e758d54bf4ec2c988355f016e16d6cd5cf97bb4891ab33f5623b7e796af313cc7a9e2f9510cd2bead1ea5dd080d9de1f595b2629ebccf69a0feaed3963ae8a6c89edd66fbf6e566379898185828925f8669668d6bddff961b08aaedbbe7fc196931a887ec740da6bcdab8f826a34aa2aa1e406a258558f3baf022a64222df4d6ee8726c79ba3dd6e11a19e4b4bb49b4a8cd99c189e6392f08ad731e415b65d0ccb919dca46efe9f79e21437111ab09e926d3038182044ae047bf1cc92e2d2644c528985719667a1a8abaf65d0f211172ea789b2fa016e1a88325d1ed706239da4dbb9e2079e3598b4ae5885667587ba1e0921c9ba55d7a3be4c47bc2f2f3547ce9efe32e5a22855f761bd4cbe1cd9337eda4bd7d82a918084d7e116b656104ca87e64b1b8c62323c3c296c5b5b98051feb607b872edf9f789744aff710c4b7279711182bcac6b76c05f5cd982f52f451e7e29046550e012e01d8cdd3e305427030f4247488c9136303084c12175c5c781cdd08aede5a356ea0ccdd05a460be3c7b4bfd62c3ce9ab68e285a36c1546d0b18edad71f69f5bedb340772e1bbb035514b085067259e39f59dc292a12557350c66904b253efee29a5eb7a6920f583c899dc46a1d3e2af2db3a3d1a0e8d1f98722a16c6cc1e401058d60c8c436d8f1166ba53bdde5810f9d0288528affd486c266546a864c92af3df8abd451cc1e0d6bfea534865cea9d49b3ea5e390fa823118df8a61e31022f5fbb8ceee870bf2e60890263c4d14e24d053d0fddf665ff80a66fa00a5957f8a30fe82a4b82cf2f6b4d49def98f66bfcdaa0aef13314e950ca9f3849b1edf3b82eaf74a0dbcf45c3dba9bd2d853281a78484f1efaf4150da1207ec3cb61fbcbf759f8182b7052b28d7164b73197b0a440759fe9d5ddf827f1897a174e82fb968a9a07c61bee44bc1f7f9ee5c6de04c02d57735c5fab741b36aec7c8642e56cba932a08b8e8a9d3eb066a4ee7cbf22e5abbd4346de59eca1f24ad9f7f9ff7621e5f30dd08f4cddda8e80e496908109f5212a72bab1378d1237def07bdda4178719975346c68405de15153031fb17535894e5e3c1de6fdd507333f0226b78ba7cae509cfb48d6735ede9392650bf85ac1db919b1e9fe0a823119d8253204dbb2f7a8f524be6d419f3a45c5051a7a88ef0bd41586d90c11a894d647f03895f671a6e19f1c70e32668653aba8366a3d372522f49844081a9637db080663ab02f4a8af502955d5411461b62f85308c91852f8fb9f0bdddd500b4a133791d3a2f91a82dc4b09f5ad2196a9172ab0cd3fafe7266e9f6d159110d99ca8da8a34b17be17a04ad4509a9fffab1e45e10f10e0cf9cfbd9c761ad044064c07e473fdc626289cfb88b13a11455c069b70aa02426d9119ac878a14c9483be9c0d5bcbb5fa76c8d06531f59c7cf7c26372e750e2f332418ca769e5e7fbeb3ada7bb58b573a0635e2e3ad9a53ddb809ea01086a3fa993ad57e89da6f9c5e61bd0f8ba69212a386b2aa1ae17520d7fb989dbe14021885eb50fa3048aebd42c861a09a308b660d382c0480ead8a52a1e14927c7c77957f94bb59ccfd557f8c4a7af23360a298a603d20ebc386db041d8c306b3e32b0bff541bdec5ff75c3b40950815cf9f89d48a382f67e44c409d046c01fb1262aca0df6f5238a3c3c09977261494f7361ba326815d6e23f49e4d6d4b54665081067332265fff59cf54af9da0db9d19bc611cbcb6e6f3f1e2e1ffb6cdd6253578d78d06a2ff5f9250f1994c5749e3ce49231fbd63bba28e948f9150933e3ae31299babaa41043b181a100882e613b4b4b8f49ceeb742d22f860853a9b917f5a323a8a1fb1f3363a7be4407fba44b408f259b5db79a055b92ce3d7a0649cc59f4afa2b1f69959d5c6f5eef1fa7987a47bee4491f685c52e9db1ee1a231ab5a4bae1019c97868a409dd0d57b32525394a233023c4a7ac429808bbcb57a34b41883202744c3bdebc0a637773273f19c2be6e806bef7fc1002846db762ee4e16867773808c5477987d5851d5b1641d070feabc203cb3d7943ffb206272fcac1bccb616352d85975f5a22c0f247548535ad9fb83fb2be17689453f10691143c060cd964df63c3c70e7b1cfc7e2b468015f327f9869353477bfeeed330b03ddd9e4e0a2441182244da283d7a59d2b2b20e6de3e3a47c26aeef4944c1190bba674523a6c3c4ed6bac53b9edffcb0e9fb19d8bf36949d03ef6a7e59eb903a00d9614f642d1932c766421906f5b177963c71e881453560e3ffcec792e8dc46b1832a8fcb2ab2268a9c1fb648d1c6fa1c8cbd50d5a2d8264fbc6c063e6daac5519d362da389dcd3d12c8039f991de91e728abf5bab95c3aef66dd8cc36c60e73cb10afb02eff6df20ff12c59b142b07fc48fe94612de80b8b958f78256fd7cf3c6f79a83867f3bb5f70da392957badadecefdf7b6e4ebd39ff945397c7d302ca0a5a3918d8abb893cd9cdd680916a50fe19699ff0476ad82e6ba46523f26ccc5eb65313c1df1077c8876d2b73bf86ba311862d12b0c557a92ef827197121512e87f817167d4b17c7e225a48b3f8fbbf4187438e0e9b78e905cdbeb72e80dfb37ec0104f5186b39b4ff34f0cdf4b74dc915acd3f98874cd6a67308d0ad9697121ac477550b1affe004f433705933f9647522be65cb5a7471120ec942aeb956f195be0c1783102cf7d842f2968222ae1a7fa6513f200d3fa85d71724956ed697f0673ee3b40a4d46ba4850439ec125b708ed52b52b9f72906477d520c90a9f5dd49a7a33a328137a183f439895532b78ae451a8c3db789bc862fbc37241d523027e1a008629c969380f6eb55f9cf3f0675bca6851f00df6aaf90de9f62d5c179945ef81d1073850301f97e379ea415d830e3f3751cf83e2dba541cb6cdd89e6b674f2c53e329e5f3dd418d534ada6469a5b3bca5b7cfbdfdd6df4abaf77d4520d0311e801145c91b52586a56086e663841b702f52cef9fff8cfb7b33dfa125688ba6b4fadd1dca8defaf4259ca85323b23d3bbb45933562c25af3e8d7bc6ad4a50ae974f8d207994b3bd74a6812ab6a40fcaf96bb4e17bd20d742b14c72226caef3e0f5c56c4930071e9f9a894f18650fbb785c6f707605c86b634c9722c8690cf3a954f68d7c2db3a257339ade67a41259f6f878dd0ab7876deffa77f6f00819282a8f4c4da84c6cf4f335cd0410770a2b1a1fbb3f85f4489eeceb78bbfddb2d1866c57b41f6ed179a0bc3750a486403d23473f2feef43ebc5af1018d9c20089e277d77fb9c34f425c8f8af4c49864b57572fa8c232e61ef37194251a1ddc2f73ffecd57e638751cb72bcb2c40d22540166ca1e8588f24b010c9fbd962e3a2c23a7e93f131df61b8703ce326ed80cc87912d3c6aaa27574bbe8d65bcaecd660c31cead132a44b1d0e4a53cacc0b82a263c4e7783944af0af08ea9e68e8e25ed9111cfef841f1b2fd24164f9097f70efe09b1109e5cb91fe68a2760381fd63a7fd422dd578a60661abc9ee3a5db1c2cde2fb21f2040f1ed3fc27b99e254256949d0560e8b98fa028fca50768caa951a87bf8969af498d50a9ee773c9caa7d9f7d8e1955506013f198cda316d79b177e59f233b98f727afd2494fc18642f0015adab756ea6742690c7d00f28655b915ce4eb8b3ba2e8559ba23e1ff1ccc9f79ae2df85f924459c56715dec78ef4592352eb1a850cd65ecd36e1a9121e888586b7b2fa84da920b8cf44480433e61ab076b10171c0537524bb170a4b99b0b0c437418a665b7ef909652b6483b20362e557c1480c2a2a0efa221fc59054a48122b52d38245f9bd026001635be5b155f5c766a59306fbde231fa72b4d74449a2fe8fb969496ee26af5881adaafb4189b439877ab8f78709cfd32c10ea576a010bfc137b7a4aae137ea3d29070ce3bc8dbe6655e967115ca3461ad9d28b9cf8af07441e68a54ec5e889846f3978f07ba51f7d5af5da78c5c675dc5d0c1a4a399ff4247203573a46fb903eaf7bc886e6cbd3126fa4a3fe3bb13bbdfea7da871f6563aa750f6ad7895b34b2809563dcf5ed30f1c60cef4138aa49d4f55e396534ed10cf4d857723a2b442f47d79de162c30ec6c4daf939b4c88649494e3682d1da81b4a5928d8e18a16c46707a685305e592589acb484e28e9d5af89c44b6e563d125ec97c0155410527406d94b90bc9576a662db99da1cb82b04d610d02187ce08f22ea0e8fd31919d53fa6aaf980e31ca7f8610e695a41919c24136a8406c62d5f15fca365892a2b54ece17664b5247583ad60d863f283f3c288946139575dcaedc978762e85f534e56334ef0221c34ffae054ddf79339b8f08701e9699b11041df8f518dd33203363c8098fbefb01555bcc2542422777b38d8dff11b15aadb0c251ce2c5b32f8735b3cb784f2e5731b48feb5a0e791a1106abdea0f7d1f087737cbe7fdf523fa14c9be2a2987511004c5b7ac1814ef6961db16799698242452c469a07c30e4a1f73193c74a41bdd88aef50035e4648bc9dfa276951798420a45e4085932bdb9381af3cc4678bd962af616549e4020d2c9fd25e2117a6d8934fde2218273d7833d60ea492e251417a27e7fb32012a940a6b6487af4b64958bf05f1b1107732149d227eeda5ca5a43cf583dc297d66072a1acd75e93a7caefd36a0d581e21d5cb08654c4ecef46ebac5391546e0b7d2a6418548d8f816446bcf237f676e873e6bae9107234abe5ab24c53ea472ad10653cef068fd9f4e729fc0d526e489f8df13af5575f1e70e0ec22899728b0659d70fc2dd509d9df3ec170638f89e540f4d3f02aa9b1b1819f84da596e0d7b45a5818061728f8eeccd2bea0f460dd7e18cb95f2364c50e351f0690e184eb63ebbb14a0b4b2117e44f3b2b3", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x130, 0x0, 0xfffffffffffffff8, {0x1, 0x0, 0x0, '\x00', {0x7ff, 0x0, 0xadf, 0x2, r2, r3, 0x2000, '\x00', 0x6, 0xffff, 0x1, 0xfffffffffffffff7, {0x4, 0x3}, {0x1, 0xc}, {0x1ffffff, 0x20000d}, {0x1000000000, 0xa00}, 0x40002, 0x574, 0x9d7, 0xbb5}}}}) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x10400005}}, 0x50) 680.051166ms ago: executing program 7 (id=1138): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000340)=""/185, 0xb9, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg(r0, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg(r0, &(0x7f0000003b80)={0x1, {&(0x7f0000000840)=""/248, 0xf8, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {&(0x7f0000000400)=""/192, 0xc0, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000280)=""/184, 0x2562bac182d8b35a, 0x0, 0x2, 0x3}}, 0x48) 614.491452ms ago: executing program 2 (id=1140): syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x2, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe) munmap$binder(0x0, 0xffffffff) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ff9000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) brk(0x20ffc004) brk(0x2c1f7cde) 584.993169ms ago: executing program 7 (id=1142): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x4, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0xd, 0xfffff034}, {0x50, 0x0, 0x5, 0xfffffffd}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0x36, 0x0, &(0x7f00000001c0)="c1dfb080cd21d398098ee68886ddfc30d80ce5ed88f6e9b83601f444ac505655d702cb0e4881a9fb5fbebe8f1e17d613fe24c2021a97", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 568.758141ms ago: executing program 2 (id=1143): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) r1 = dup(r0) r2 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 492.130473ms ago: executing program 0 (id=1144): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x16, 0x0, @void}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0xd) r3 = socket$inet(0x2b, 0x801, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x8, &(0x7f0000000000)=0x6, 0x4) 424.837631ms ago: executing program 2 (id=1145): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00000000c0), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000240)={r2, 0x12, "1fe473a8cb3169d4d5b7259627b5cf5b8a50"}, &(0x7f0000000700)=0xfdad) 409.214706ms ago: executing program 4 (id=1146): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$kcm(0xa, 0x922000000003, 0x11) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000500)=@l2tp6={0xa, 0x0, 0x3, @loopback, 0x1, 0xfffffffe}, 0x80, 0x0}, 0x0) 381.461676ms ago: executing program 0 (id=1147): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x101042, 0x65) pwrite64(r0, &(0x7f0000000000)='2', 0x1, 0x4fed0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x129042, 0x15) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 381.339173ms ago: executing program 7 (id=1148): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a"], 0xb8}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 346.013304ms ago: executing program 6 (id=1149): rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffff9]}, 0x0, 0x8) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = gettid() r3 = gettid() tkill(r2, 0x12) tkill(r3, 0x14) 313.955533ms ago: executing program 4 (id=1150): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000100)=0x1, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x60048040}, 0xc040445) recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/149, 0x95}], 0x1}, 0x40000102) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_256={{0x303, 0x36}, "00000007e4008000", "8b3de2aabceef22f419e59f30000000004000000000200", "e73400", "000000d900"}, 0x38) 237.144462ms ago: executing program 6 (id=1151): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r1, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r3, r2, 0x15, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x30) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r4, 0x11, 0x65, 0x0, &(0x7f0000000040)) 236.933346ms ago: executing program 7 (id=1152): r0 = getpid() sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000018000480140003"], 0x6c}, 0x1, 0x0, 0x0, 0x20040845}, 0x802) 234.555028ms ago: executing program 0 (id=1153): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r2, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r4, r3, 0x15, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x30) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000180)) 192.081402ms ago: executing program 6 (id=1154): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 191.275076ms ago: executing program 7 (id=1155): openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x80082) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a80)={'syz0\x00', {0x0, 0x0, 0x0, 0x1000}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0xdfe8, 0x0, 0x8, 0x0, 0x3, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xe43, 0x400000, 0xfffffffd, 0x0, 0x1, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x4], [0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x400000, 0x0, 0x4, 0x200, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffff], [0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x956]}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$mouse(&(0x7f0000000600), 0x0, 0x90602) 144.059751ms ago: executing program 4 (id=1156): socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="050000000109"], 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYRES16=r0], 0x48}}, 0x40800) 143.770486ms ago: executing program 0 (id=1157): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) socket$inet6_icmp(0xa, 0x2, 0x3a) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000000)=""/31, 0x1f) 58.93602ms ago: executing program 0 (id=1158): syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404705352200000102030109022000010100c0010904000002000000000705020200020007058202000200"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbtest/new_id\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='0547 2235\n\x00', 0xa) nanosleep(&(0x7f0000000300)={0x2}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000400), 0x15, 0x2) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000500)=@usbdevfs_driver={0x0, 0xc0205564, &(0x7f0000000600)="01014000000000"}) 57.602272ms ago: executing program 4 (id=1159): mkdirat(0xffffffffffffff9c, &(0x7f00000000a0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000a0)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./dev/ttyGS0\x00', 0x2, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) 50.538788ms ago: executing program 7 (id=1160): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x40) pwrite64(r0, &(0x7f0000000140)="10", 0xda0443d9, 0xfff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000400)='./bus\x00', 0x3000019, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x400) chdir(&(0x7f00000003c0)='./bus\x00') mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x20080, 0x0) 0s ago: executing program 4 (id=1161): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x12, r0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r4, &(0x7f00000000c0)=ANY=[], 0xffffff6a) splice(r3, 0x0, r2, 0x0, 0x40010003, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x1b) kernel console output (not intermixed with test programs): ully working HSR network [ 30.840636][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.840694][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.841050][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.841070][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.850837][ T4709] veth0_vlan: entered promiscuous mode [ 30.860850][ T4709] veth1_vlan: entered promiscuous mode [ 30.889292][ T4717] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.917084][ T4709] veth0_macvtap: entered promiscuous mode [ 30.922506][ T4709] veth1_macvtap: entered promiscuous mode [ 30.931464][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.932568][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.941998][ T1337] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.942184][ T1337] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.942217][ T1337] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.942238][ T1337] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.969463][ T4708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.017198][ T4708] veth0_vlan: entered promiscuous mode [ 31.024084][ T4708] veth1_vlan: entered promiscuous mode [ 31.052249][ T4720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.056604][ T4708] veth0_macvtap: entered promiscuous mode [ 31.065095][ T4715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.067407][ T4708] veth1_macvtap: entered promiscuous mode [ 31.072136][ T4708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.074806][ T4708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.078549][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.078582][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.089869][ T1426] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.097360][ T4864] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.097400][ T4864] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.098741][ T15] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.098776][ T15] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.098798][ T15] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.113399][ T4717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.149331][ T4717] veth0_vlan: entered promiscuous mode [ 31.159597][ T4720] veth0_vlan: entered promiscuous mode [ 31.162859][ T4717] veth1_vlan: entered promiscuous mode [ 31.168208][ T4709] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.195920][ T4717] veth0_macvtap: entered promiscuous mode [ 31.208485][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.208525][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.211837][ T4717] veth1_macvtap: entered promiscuous mode [ 31.217832][ T4720] veth1_vlan: entered promiscuous mode [ 31.220943][ T4715] veth0_vlan: entered promiscuous mode [ 31.228645][ T4715] veth1_vlan: entered promiscuous mode [ 31.237233][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.238885][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.250549][ T4864] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.250582][ T4864] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.256399][ T1426] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.256453][ T1426] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.256475][ T1426] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.256493][ T1426] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.263616][ T4720] veth0_macvtap: entered promiscuous mode [ 31.270604][ T4720] veth1_macvtap: entered promiscuous mode [ 31.287750][ T4715] veth0_macvtap: entered promiscuous mode [ 31.291592][ T4715] veth1_macvtap: entered promiscuous mode [ 31.307048][ T4715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.311438][ T4715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.319877][ T1337] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.322035][ T1337] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.326961][ T4720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.331141][ T1337] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.332826][ T1337] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.335175][ T1426] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.335207][ T1426] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.351085][ T4720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.351873][ T4893] Soft offlining pfn 0x10e1f9 at process virtual address 0x20ff9000 [ 31.362284][ T4893] Memory failure: 0x10e1f9: unhandlable page. [ 31.366076][ T1426] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.366479][ T1426] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.366506][ T1426] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.366532][ T1426] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.375057][ T860] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.375086][ T860] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.430835][ T1426] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.430872][ T1426] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.469894][ T860] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.469927][ T860] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.473753][ T4864] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.473792][ T4864] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.496631][ T4808] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 31.504829][ T4808] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 31.521397][ T1426] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.521430][ T1426] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.625879][ T4710] Bluetooth: hci0: command tx timeout [ 31.625881][ T4713] Bluetooth: hci4: command tx timeout [ 31.626141][ T4713] Bluetooth: hci2: command tx timeout [ 31.626146][ T4710] Bluetooth: hci3: command tx timeout [ 31.626302][ T4710] Bluetooth: hci1: command tx timeout [ 31.663800][ T30] audit: type=1326 audit(31.620:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4901 comm="syz.4.5" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e97a168 code=0x0 [ 31.751761][ T4916] trusted_key: syz.3.10 sent an empty control message without MSG_MORE. [ 32.610871][ T4959] evm: overlay not supported [ 32.726258][ T4969] batadv_slave_1: entered promiscuous mode [ 32.731548][ T4968] batadv_slave_1: left promiscuous mode [ 32.789024][ T4974] input: syz0 as /devices/virtual/input/input2 [ 32.923348][ T4981] loop4: detected capacity change from 0 to 512 [ 32.931564][ T4981] EXT4-fs: Ignoring removed nobh option [ 32.965928][ T4981] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.009626][ T4994] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 33.012197][ T4994] overlayfs: failed to set xattr on upper [ 33.013545][ T4994] overlayfs: ...falling back to redirect_dir=nofollow. [ 33.016557][ T4994] overlayfs: ...falling back to index=off. [ 33.017897][ T4994] overlayfs: ...falling back to uuid=null. [ 33.020141][ T4994] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 33.033715][ T4715] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.092875][ T5001] Bluetooth: MGMT ver 1.23 [ 33.117478][ T5003] syz_tun: entered allmulticast mode [ 33.133332][ T5002] syz_tun: left allmulticast mode [ 33.172071][ C0] vcan0: j1939_tp_rxtimer: 0x000000001f1af7e0: rx timeout, send abort [ 33.172702][ C0] vcan0: j1939_xtp_rx_abort_one: 0x000000001f1af7e0: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 33.173259][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000abae0424: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 33.358131][ T5026] ªªªªªª: renamed from vlan0 (while UP) [ 33.493836][ T5042] ªªªªªª: renamed from vlan0 (while UP) [ 33.531202][ T5045] loop2: detected capacity change from 0 to 512 [ 33.546258][ T5045] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 33.546292][ T5045] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 33.550743][ T5045] EXT4-fs (loop2): orphan cleanup on readonly fs [ 33.550974][ T5045] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #13: comm syz.2.64: iget: bad i_size value: 12154761577498 [ 33.551045][ T5045] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 33.553009][ T5045] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.64: couldn't read orphan inode 13 (err -117) [ 33.553062][ T5045] loop2: lost filesystem error report for type 5 error -117 [ 33.554278][ C0] EXT4-fs (loop2): error count since last fsck: 2 [ 33.554291][ C0] EXT4-fs (loop2): initial error at time 33: ext4_orphan_get:1399: inode 13 [ 33.554308][ C0] EXT4-fs (loop2): last error at time 33: ext4_orphan_get:1404 [ 33.558374][ T5045] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 33.568849][ T5049] loop3: detected capacity change from 0 to 1024 [ 33.588806][ T5045] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.64: dx entry: limit 65535 != root limit 120 [ 33.589255][ T5045] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.64: Corrupt directory, running e2fsck is recommended [ 33.589358][ T5045] EXT4-fs error (device loop2): ext4_readdir:265: inode #2: block 3: comm syz.2.64: path /15/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 33.591442][ T5049] EXT4-fs: Ignoring removed bh option [ 33.593166][ T5045] EXT4-fs error (device loop2): htree_dirblock_to_tree:1080: inode #2: block 3: comm syz.2.64: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 33.611533][ T5049] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.619905][ T4708] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.677507][ T5049] EXT4-fs error (device loop3): ext4_find_dest_de:2050: inode #12: block 7: comm syz.3.65: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 33.681640][ T5049] EXT4-fs (loop3): Remounting filesystem read-only [ 33.704490][ T4716] Bluetooth: hci1: command tx timeout [ 33.705135][ T4716] Bluetooth: hci3: command tx timeout [ 33.705150][ T4716] Bluetooth: hci0: command tx timeout [ 33.705163][ T4716] Bluetooth: hci4: command tx timeout [ 33.714335][ T4713] Bluetooth: hci2: command tx timeout [ 33.742541][ T5055] loop0: detected capacity change from 0 to 1024 [ 33.742886][ T5055] ======================================================= [ 33.742886][ T5055] WARNING: The mand mount option has been deprecated and [ 33.742886][ T5055] and is ignored by this kernel. Remove the mand [ 33.742886][ T5055] option from the mount to silence this warning. [ 33.742886][ T5055] ======================================================= [ 33.770651][ T5057] netlink: 'syz.2.69': attribute type 63 has an invalid length. [ 33.783599][ T4720] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.790396][ T5055] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 33.821508][ T5055] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.67: bg 0: block 112: padding at end of block bitmap is not set [ 33.828405][ T5055] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 67 with max blocks 64 with error 28 [ 33.831625][ T5055] EXT4-fs (loop0): This should not happen!! Data will be lost [ 33.831625][ T5055] [ 33.831936][ T5055] EXT4-fs (loop0): Total free blocks count 0 [ 33.831962][ T5055] EXT4-fs (loop0): Free/Dirty block details [ 33.831985][ T5055] EXT4-fs (loop0): free_blocks=0 [ 33.832004][ T5055] EXT4-fs (loop0): dirty_blocks=80 [ 33.832017][ T5055] EXT4-fs (loop0): Block reservation details [ 33.832030][ T5055] EXT4-fs (loop0): i_reserved_data_blocks=5 [ 33.854550][ T5054] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: comm syz.0.67: lblock 0 mapped to illegal pblock 0 (length 1) [ 33.858855][ T5054] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: comm syz.0.67: lblock 0 mapped to illegal pblock 0 (length 1) [ 33.859139][ T5054] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: comm syz.0.67: lblock 0 mapped to illegal pblock 0 (length 1) [ 33.859565][ T5054] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: comm syz.0.67: lblock 0 mapped to illegal pblock 0 (length 1) [ 33.861009][ T5054] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: comm syz.0.67: lblock 0 mapped to illegal pblock 0 (length 1) [ 33.861196][ T5054] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: comm syz.0.67: lblock 0 mapped to illegal pblock 0 (length 1) [ 33.861367][ T5054] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: comm syz.0.67: lblock 0 mapped to illegal pblock 0 (length 1) [ 33.861612][ T5054] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: comm syz.0.67: lblock 0 mapped to illegal pblock 0 (length 1) [ 33.861800][ T5054] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: comm syz.0.67: lblock 0 mapped to illegal pblock 0 (length 1) [ 33.887724][ T4717] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 33.888628][ T4717] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 33.919753][ T5063] syzkaller0: entered promiscuous mode [ 33.921059][ T5063] syzkaller0: entered allmulticast mode [ 34.034675][ T5079] loop0: detected capacity change from 0 to 4096 [ 34.037642][ T5079] EXT4-fs: inline encryption not supported [ 34.044454][ T5079] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 34.044493][ T5079] EXT4-fs (loop0): Test dummy encryption mode enabled [ 34.052080][ T5079] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 34.052153][ T5079] System zones: 0-5 [ 34.061763][ T5079] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.095165][ T5079] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 34.101495][ T5087] capability: warning: `syz.3.80' uses deprecated v2 capabilities in a way that may be insecure [ 34.101949][ T5087] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 34.102504][ T5087] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only [ 34.123732][ T5079] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 34.156104][ T11] binder: undelivered death notification, 0000000000000000 [ 34.179188][ T30] audit: type=1400 audit(34.140:3): lsm=SMACK fn=smack_inode_rename action=denied subject="_" object="lowerdir" requested=rw pid=5078 comm="syz.0.78" name="file1" dev="overlay" ino=15 [ 34.269299][ T4717] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.292825][ T5107] loop3: detected capacity change from 0 to 128 [ 34.299027][ T5107] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 34.328377][ T4720] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 34.336750][ T15] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0xb [ 34.405219][ T5095] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 34.449127][ T30] audit: type=1326 audit(34.410:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5118 comm="syz.0.94" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=172 compat=0 ip=0xffffb4773c0c code=0x0 [ 34.479448][ T5117] overlayfs: failed to verify index (index/00fb210001cbb407630d6d4fd0adcc3babc5459e15383df2b29900000000000000, ftype=8000, err=-61) [ 34.479507][ T5117] overlayfs: failed index dir cleanup (-61) [ 34.479528][ T5117] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 35.075396][ T5162] loop2: detected capacity change from 0 to 512 [ 35.081394][ T5162] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 35.081441][ T5162] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 35.087031][ T5162] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 35.087086][ T5162] System zones: 1-12 [ 35.091091][ T5162] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 35.096281][ T5162] EXT4-fs (loop2): 1 truncate cleaned up [ 35.098027][ T5162] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.168895][ T5162] EXT4-fs (loop2): shut down requested (0) [ 35.318862][ T4708] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.361440][ T860] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.460342][ T860] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.500421][ T5174] netlink: 76 bytes leftover after parsing attributes in process `syz.0.118'. [ 35.530643][ T4716] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 35.531635][ T4716] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 35.531894][ T4716] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 35.532756][ T4716] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 35.533085][ T4716] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 35.541538][ T860] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.601661][ T860] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.784570][ T4716] Bluetooth: hci4: command tx timeout [ 35.784615][ T4716] Bluetooth: hci0: command tx timeout [ 35.784646][ T4716] Bluetooth: hci3: command tx timeout [ 35.784666][ T4716] Bluetooth: hci1: command tx timeout [ 35.792563][ T860] bridge_slave_1: left allmulticast mode [ 35.792599][ T860] bridge_slave_1: left promiscuous mode [ 35.793174][ T860] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.800599][ T860] bridge_slave_0: left allmulticast mode [ 35.800629][ T860] bridge_slave_0: left promiscuous mode [ 35.800715][ T860] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.939615][ T5203] process 'syz.1.127' launched './file0' with NULL argv: empty string added [ 35.993742][ T860] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 36.001597][ T5206] Invalid ELF header magic: != ELF [ 36.015908][ T860] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 36.044788][ T860] bond0 (unregistering): Released all slaves [ 36.306656][ T5256] loop1: detected capacity change from 0 to 512 [ 36.308501][ T5256] EXT4-fs: Ignoring removed mblk_io_submit option [ 36.330935][ T5256] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.370671][ T5245] fuse: root generation should be zero [ 36.396720][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.456231][ T5177] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.457836][ T5177] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.457966][ T5177] bridge_slave_0: entered allmulticast mode [ 36.461220][ T5177] bridge_slave_0: entered promiscuous mode [ 36.464072][ T4398] 8021q: adding VLAN 0 to HW filter on device eth0 [ 36.473008][ T5177] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.473065][ T5177] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.473205][ T5177] bridge_slave_1: entered allmulticast mode [ 36.473694][ T5177] bridge_slave_1: entered promiscuous mode [ 36.519863][ T860] hsr_slave_0: left promiscuous mode [ 36.536911][ T860] hsr_slave_1: left promiscuous mode [ 36.538780][ T860] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 36.540235][ T860] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 36.552673][ T860] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 36.554519][ T860] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 36.564936][ T860] veth1_macvtap: left promiscuous mode [ 36.566123][ T860] veth0_macvtap: left promiscuous mode [ 36.567213][ T860] veth1_vlan: left promiscuous mode [ 36.568222][ T860] veth0_vlan: left promiscuous mode [ 36.749985][ T860] team0 (unregistering): Port device team_slave_1 removed [ 36.761076][ T860] team0 (unregistering): Port device team_slave_0 removed [ 36.861688][ T5177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.863898][ T4398] 8021q: adding VLAN 0 to HW filter on device eth1 [ 36.890330][ T5177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.929178][ T5177] team0: Port device team_slave_0 added [ 36.931021][ T5177] team0: Port device team_slave_1 added [ 37.009389][ T5177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.009428][ T5177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.009446][ T5177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.010035][ T5177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.010042][ T5177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.010057][ T5177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.048009][ T5177] hsr_slave_0: entered promiscuous mode [ 37.048399][ T5177] hsr_slave_1: entered promiscuous mode [ 37.048641][ T5177] debugfs: 'hsr0' already exists in 'hsr' [ 37.048658][ T5177] Cannot create hsr debugfs directory [ 37.183495][ T5347] binder: 5346:5347 ioctl c0306201 0 returned -14 [ 37.312990][ T5177] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 37.326636][ T5177] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 37.327190][ T5177] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 37.339655][ T5177] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 37.340430][ T5177] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 37.350618][ T5177] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 37.362161][ T5177] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 37.376889][ T5177] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 37.418887][ T4398] 8021q: adding VLAN 0 to HW filter on device eth2 [ 37.498147][ T5177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.506649][ T5373] syz.0.169 uses obsolete (PF_INET,SOCK_PACKET) [ 37.520293][ T5177] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.525175][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.525221][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.525753][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.525780][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.551485][ T5177] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.553564][ T4713] Bluetooth: hci2: command tx timeout [ 37.556081][ T5177] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.622964][ T5378] netlink: 36 bytes leftover after parsing attributes in process `syz.2.170'. [ 37.840390][ T5409] overlayfs: statfs failed on './file0' [ 37.849840][ T5177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.864312][ T4713] Bluetooth: hci1: command tx timeout [ 37.864363][ T4713] Bluetooth: hci3: command tx timeout [ 37.864398][ T4713] Bluetooth: hci0: command tx timeout [ 37.864420][ T4713] Bluetooth: hci4: command tx timeout [ 37.869417][ T4398] 8021q: adding VLAN 0 to HW filter on device eth3 [ 37.997308][ T5423] geneve2: entered promiscuous mode [ 38.017095][ T5427] sctp: [Deprecated]: syz.2.181 (pid 5427) Use of int in max_burst socket option. [ 38.017095][ T5427] Use struct sctp_assoc_value instead [ 38.113249][ T5177] veth0_vlan: entered promiscuous mode [ 38.130995][ T5177] veth1_vlan: entered promiscuous mode [ 38.168616][ T5177] veth0_macvtap: entered promiscuous mode [ 38.171341][ T5177] veth1_macvtap: entered promiscuous mode [ 38.197653][ T5177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.198712][ T5177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.224729][ T1426] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.260408][ T5450] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 38.268972][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.269041][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.269074][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.293396][ T860] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.293433][ T860] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.355331][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.355365][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.383007][ T5465] netlink: 24 bytes leftover after parsing attributes in process `syz.0.197'. [ 38.513963][ T5482] loop1: detected capacity change from 0 to 1024 [ 38.549991][ T5482] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 38.561996][ T5482] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: comm syz.1.202: lblock 0 mapped to illegal pblock 0 (length 1) [ 38.567780][ T5482] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 38.567846][ T5482] EXT4-fs (loop1): This should not happen!! Data will be lost [ 38.567846][ T5482] [ 38.574733][ T5488] netlink: 8 bytes leftover after parsing attributes in process `syz.3.204'. [ 38.585061][ T5491] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: comm iou-wrk-5482: lblock 0 mapped to illegal pblock 0 (length 1) [ 38.640425][ T4709] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 38.653001][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 39.554758][ T5542] loop3: detected capacity change from 0 to 4096 [ 39.557038][ T5542] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 39.558934][ T5542] EXT4-fs (loop3): Test dummy encryption mode enabled [ 39.560242][ T5542] EXT4-fs (loop3): can't mount with both data=journal and delalloc [ 39.625191][ T4716] Bluetooth: hci2: command tx timeout [ 39.693276][ T5550] loop1: detected capacity change from 0 to 256 [ 39.713048][ T5550] syz.1.226: attempt to access beyond end of device [ 39.713048][ T5550] loop1: rw=2049, sector=1808, nr_sectors = 4 limit=256 [ 39.717103][ T5550] syz.1.226: attempt to access beyond end of device [ 39.717103][ T5550] loop1: rw=2049, sector=1768, nr_sectors = 40 limit=256 [ 39.718230][ T5550] syz.1.226: attempt to access beyond end of device [ 39.718230][ T5550] loop1: rw=8390657, sector=1768, nr_sectors = 4 limit=256 [ 39.718292][ T5550] Buffer I/O error on dev loop1, logical block 442, lost async page write [ 39.732231][ T1337] kworker/u8:5: attempt to access beyond end of device [ 39.732231][ T1337] loop1: rw=1, sector=1768, nr_sectors = 4 limit=256 [ 39.826529][ T5560] netlink: 'syz.1.230': attribute type 8 has an invalid length. [ 39.828901][ T5560] netlink: 4 bytes leftover after parsing attributes in process `syz.1.230'. [ 40.093675][ T5560] veth1_to_team: entered promiscuous mode [ 40.095822][ T5560] gretap0: entered promiscuous mode [ 40.097540][ T5560] veth1_to_team: left promiscuous mode [ 40.099886][ T5560] gretap0: left promiscuous mode [ 40.221592][ T5589] loop0: detected capacity change from 0 to 256 [ 40.250381][ T1426] Bluetooth: hci5: Frame reassembly failed (-84) [ 40.311508][ T5596] loop2: detected capacity change from 0 to 256 [ 40.338305][ T5596] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 40.621616][ T5619] netlink: 8 bytes leftover after parsing attributes in process `syz.0.251'. [ 40.623810][ T5619] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 40.907281][ T5633] x_tables: ip_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 41.156258][ T5668] loop2: detected capacity change from 0 to 128 [ 41.180419][ T5668] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 41.189117][ T5668] fscrypt (loop2, inode 12): Mutually exclusive encryption flags (0x16) [ 41.198762][ T4708] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 41.588737][ T30] audit: type=1326 audit(41.550:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5731 comm="syz.5.265" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffba37a168 code=0x0 [ 41.705289][ T4713] Bluetooth: hci2: command tx timeout [ 41.791211][ T5757] netlink: 'syz.0.268': attribute type 83 has an invalid length. [ 41.803464][ T5753] 9pnet_fd: p9_fd_create_unix (5753): problem connecting socket: ./file0: -13 [ 41.827957][ T4816] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.831009][ T4816] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 41.935494][ T5763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.270'. [ 41.937572][ T5763] netlink: 4 bytes leftover after parsing attributes in process `syz.0.270'. [ 41.943751][ T5563] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.943886][ T5563] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.943904][ T5563] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.943918][ T5563] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.951302][ T5763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.270'. [ 41.952993][ T5763] netlink: 4 bytes leftover after parsing attributes in process `syz.0.270'. [ 41.954455][ T5763] Zero length message leads to an empty skb [ 42.006580][ T5769] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd12 [ 42.131054][ T5774] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 42.264432][ T4713] Bluetooth: hci5: command 0x1003 tx timeout [ 42.264512][ T4716] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 42.283123][ T5783] netlink: 20 bytes leftover after parsing attributes in process `syz.0.278'. [ 42.609283][ T26] kernel read not supported for file task/148/net/mcfilter (pid: 26 comm: kworker/1:1) [ 42.619226][ T5814] loop5: detected capacity change from 0 to 1024 [ 42.619636][ T5814] EXT4-fs: Ignoring removed bh option [ 42.619665][ T5814] EXT4-fs: Ignoring removed bh option [ 42.621013][ T5814] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 42.641970][ T5814] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.668844][ T5814] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 42.720182][ T5177] EXT4-fs error (device loop5): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /20/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 42.727837][ T5177] EXT4-fs (loop5): Remounting filesystem read-only [ 42.737477][ T5177] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.798955][ T5826] syzkaller1: entered promiscuous mode [ 42.799006][ T5826] syzkaller1: entered allmulticast mode [ 43.150108][ T5841] tipc: Started in network mode [ 43.151179][ T5841] tipc: Node identity 2ab8f7dc80fc, cluster identity 4711 [ 43.151314][ T5841] tipc: Enabled bearer , priority 10 [ 43.155031][ T5840] tipc: Resetting bearer [ 43.161267][ T5840] tipc: Disabling bearer [ 43.192457][ T5845] Bluetooth: hci0: unsupported parameter 255 [ 43.195080][ T5845] Bluetooth: hci0: unsupported parameter 128 [ 43.196293][ T5845] Bluetooth: hci0: unsupported parameter 255 [ 43.197618][ T5845] Bluetooth: hci0: unsupported parameter 128 [ 43.435284][ T5865] loop3: detected capacity change from 0 to 4096 [ 43.437020][ T5865] EXT4-fs: inline encryption not supported [ 43.438625][ T5865] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 43.440188][ T5865] EXT4-fs (loop3): Test dummy encryption mode enabled [ 43.446992][ T5865] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 43.447069][ T5865] System zones: 0-5 [ 43.450162][ T5865] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.503345][ T4720] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.572385][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.698724][ T5803] Set syz1 is full, maxelem 65536 reached [ 43.737953][ T5879] loop1: detected capacity change from 0 to 256 [ 43.776385][ T5879] syz.1.316: attempt to access beyond end of device [ 43.776385][ T5879] loop1: rw=8390657, sector=1768, nr_sectors = 4 limit=256 [ 43.776433][ T5879] Buffer I/O error on dev loop1, logical block 442, lost async page write [ 43.784427][ T4716] Bluetooth: hci2: command tx timeout [ 43.962983][ T5886] loop3: detected capacity change from 0 to 4096 [ 43.968370][ T5886] EXT4-fs: inline encryption not supported [ 43.985249][ T5886] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 43.985296][ T5886] EXT4-fs (loop3): Test dummy encryption mode enabled [ 43.987464][ T5886] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 43.987516][ T5886] System zones: 0-5 [ 43.993851][ T5886] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.029070][ T5889] ublk_batch_commit_io: dev 0 queue 0 io 0: commit failure -16 [ 44.029137][ T5889] ublk_batch_commit_io: dev 0 queue 0 io 0: commit failure -16 [ 44.115977][ T4720] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.121721][ T5896] netlink: 'syz.2.322': attribute type 1 has an invalid length. [ 44.512026][ T5867] Set syz1 is full, maxelem 65536 reached [ 44.697270][ T5884] warning: `syz.1.318' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 44.708114][ T5896] bond1: entered promiscuous mode [ 44.709544][ T5896] 8021q: adding VLAN 0 to HW filter on device bond1 [ 44.729866][ T5900] 8021q: adding VLAN 0 to HW filter on device bond1 [ 44.730115][ T5900] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 44.730128][ T5900] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 44.734223][ T5900] bond1: (slave ip6gre1): making interface the new active one [ 44.734671][ T5900] ip6gre1: entered promiscuous mode [ 44.736672][ T5900] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 44.830855][ T5917] input: syz0 as /devices/virtual/input/input3 [ 44.875986][ T5923] loop5: detected capacity change from 0 to 8 [ 44.903532][ T5923] SQUASHFS error: Unable to read directory block [631:72] [ 44.904975][ T5923] SQUASHFS error: Unable to read directory block [631:72] [ 44.959583][ T5933] loop5: detected capacity change from 0 to 1024 [ 44.961889][ T5933] EXT4-fs: inline encryption not supported [ 44.998305][ T5933] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.047818][ T5940] syzkaller1: entered promiscuous mode [ 45.047854][ T5940] syzkaller1: entered allmulticast mode [ 45.103201][ T5177] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.149315][ T5939] loop2: detected capacity change from 0 to 32768 [ 45.172334][ T5956] netlink: 'syz.0.345': attribute type 1 has an invalid length. [ 45.196519][ T5939] loop2: p1 p3 < > [ 45.200037][ T5956] bond1: entered promiscuous mode [ 45.200219][ T5956] 8021q: adding VLAN 0 to HW filter on device bond1 [ 45.213654][ T5928] syz.2.335 (5928): /proc/5931/oom_adj is deprecated, please use /proc/5931/oom_score_adj instead. [ 45.229414][ T5962] loop5: detected capacity change from 0 to 512 [ 45.242563][ T5956] 8021q: adding VLAN 0 to HW filter on device bond1 [ 45.244224][ T5956] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address [ 45.244546][ T5956] bond1: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 45.245632][ T5956] bond1: (slave xfrm1): making interface the new active one [ 45.245651][ T5956] xfrm1: entered promiscuous mode [ 45.246460][ T5956] bond1: (slave xfrm1): Enslaving as an active interface with an up link [ 45.279043][ T5962] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.331311][ T5177] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.450023][ T5985] netlink: 256 bytes leftover after parsing attributes in process `syz.2.355'. [ 45.473290][ T5945] udevd[5945]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 45.474048][ T4700] udevd[4700]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 45.481601][ T5987] netlink: 'syz.0.356': attribute type 10 has an invalid length. [ 45.496809][ T5987] team0: Device veth0_vlan failed to register rx_handler [ 45.606987][ T6000] loop0: detected capacity change from 0 to 512 [ 45.609821][ T6000] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 45.613428][ T6000] EXT4-fs (loop0): 1 truncate cleaned up [ 45.622267][ T6005] Bluetooth: hci0: unsupported parameter 256 [ 45.622299][ T6005] Bluetooth: hci0: invalid len left 3, exp >= 4 [ 45.627875][ T6000] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.638057][ T6004] binder: 6002:6004 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 45.641925][ T6004] binder: 6004 RLIMIT_NICE not set [ 45.694869][ T6004] binder: 6002:6004 ioctl c0306201 20000040 returned -14 [ 45.710890][ T4717] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.751906][ T6019] syzkaller1: entered promiscuous mode [ 45.751945][ T6019] syzkaller1: entered allmulticast mode [ 45.932834][ T6045] input: syz1 as /devices/virtual/input/input4 [ 46.301654][ T6087] overlayfs: metacopy file 'file1' has too small xattr [ 46.524984][ T6114] binder: 6113:6114 got transaction to invalid handle, 1 [ 46.525019][ T6114] binder: 6113:6114 cannot find target node [ 46.525051][ T6114] binder: 6113:6114 transaction call to 0:0 failed 7/29201/-22, code 0 size 0-0 line 3252 [ 46.535353][ T4816] binder: undelivered TRANSACTION_ERROR: 29201 [ 46.582819][ T6122] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 46.582850][ T6122] IPv6: NLM_F_CREATE should be set when creating new route [ 46.582935][ T6122] IPv6: NLM_F_CREATE should be set when creating new route [ 46.593789][ T6125] netlink: 'syz.0.397': attribute type 4 has an invalid length. [ 46.603430][ T6126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.398'. [ 46.621376][ T6125] netlink: 'syz.0.397': attribute type 4 has an invalid length. [ 46.671358][ T6136] syzkaller1: entered promiscuous mode [ 46.671391][ T6136] syzkaller1: entered allmulticast mode [ 46.821763][ T6152] loop3: detected capacity change from 0 to 1024 [ 46.842517][ T6152] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 46.853567][ T6152] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: comm syz.3.407: lblock 0 mapped to illegal pblock 0 (length 6) [ 46.858299][ T6152] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 46.858347][ T6152] EXT4-fs (loop3): This should not happen!! Data will be lost [ 46.858347][ T6152] [ 46.867162][ T6152] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.407: bg 0: block 112: padding at end of block bitmap is not set [ 46.872358][ T6152] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 32 with error 28 [ 46.872397][ T6152] EXT4-fs (loop3): This should not happen!! Data will be lost [ 46.872397][ T6152] [ 46.872412][ T6152] EXT4-fs (loop3): Total free blocks count 0 [ 46.872425][ T6152] EXT4-fs (loop3): Free/Dirty block details [ 46.872448][ T6152] EXT4-fs (loop3): free_blocks=0 [ 46.872467][ T6152] EXT4-fs (loop3): dirty_blocks=32 [ 46.872478][ T6152] EXT4-fs (loop3): Block reservation details [ 46.905522][ T4720] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 46.983586][ T6165] netlink: 12 bytes leftover after parsing attributes in process `syz.3.412'. [ 47.361733][ T6173] loop3: detected capacity change from 0 to 1024 [ 47.362167][ T6173] EXT4-fs: Ignoring removed bh option [ 47.366108][ T6173] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 47.390719][ T6173] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.414224][ T6176] [ 47.428154][ T4720] EXT4-fs error (device loop3): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /79/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 47.433134][ T4720] EXT4-fs (loop3): Remounting filesystem read-only [ 47.437982][ T4720] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.458275][ T6183] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 47.459857][ T6183] overlayfs: failed to set xattr on upper [ 47.461050][ T6183] overlayfs: ...falling back to redirect_dir=nofollow. [ 47.462670][ T6183] overlayfs: ...falling back to uuid=null. [ 47.517475][ T6185] tipc: Enabled bearer , priority 10 [ 47.532120][ T6184] tipc: Resetting bearer [ 47.552817][ T6184] tipc: Disabling bearer [ 47.773189][ T6212] loop5: detected capacity change from 0 to 4096 [ 47.773592][ T6212] EXT4-fs: inline encryption not supported [ 47.775018][ T6212] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 47.775028][ T6212] EXT4-fs (loop5): Test dummy encryption mode enabled [ 47.778311][ T6212] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002] [ 47.778353][ T6212] System zones: 0-5 [ 47.781481][ T6212] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.882054][ T5564] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 47.886981][ T5564] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.967796][ T5564] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 47.967836][ T5564] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.010231][ T4713] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 48.012905][ T4713] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 48.015064][ T4713] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 48.016872][ T4713] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 48.018520][ T4713] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 48.042251][ T5177] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.079671][ T5564] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 48.079722][ T5564] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.217270][ T5564] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 48.217322][ T5564] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.412926][ T5564] bridge_slave_1: left allmulticast mode [ 48.412964][ T5564] bridge_slave_1: left promiscuous mode [ 48.413052][ T5564] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.418605][ T5564] bridge_slave_0: left allmulticast mode [ 48.418631][ T5564] bridge_slave_0: left promiscuous mode [ 48.418711][ T5564] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.593764][ T5564] bond1 (unregistering): (slave xfrm1): Releasing backup interface [ 48.593803][ T5564] xfrm1 (unregistering): left promiscuous mode [ 48.619592][ T6277] EXT4-fs: Ignoring removed mblk_io_submit option [ 48.622858][ T6277] EXT4-fs (loop3): Test dummy encryption mode enabled [ 48.639458][ T6277] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.649619][ T6210] Set syz1 is full, maxelem 65536 reached [ 48.671865][ T5564] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 48.699456][ T5564] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 48.715713][ T5564] bond0 (unregistering): Released all slaves [ 48.719640][ T5564] bond1 (unregistering): Released all slaves [ 48.753469][ T4716] Bluetooth: to_multiplier 0 < 10 [ 48.780980][ T4398] 8021q: adding VLAN 0 to HW filter on device eth4 [ 48.801405][ T4801] IPVS: starting estimator thread 0... [ 48.807842][ T6292] syzkaller1: entered promiscuous mode [ 48.807877][ T6292] syzkaller1: entered allmulticast mode [ 48.813372][ T4720] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.832346][ T6294] bridge0: port 3(syz_tun) entered blocking state [ 48.832487][ T6294] bridge0: port 3(syz_tun) entered disabled state [ 48.832658][ T6294] syz_tun: entered allmulticast mode [ 48.833296][ T6294] syz_tun: entered promiscuous mode [ 48.834083][ T6294] bridge0: port 3(syz_tun) entered blocking state [ 48.834121][ T6294] bridge0: port 3(syz_tun) entered forwarding state [ 48.886786][ T6295] IPVS: using max 60 ests per chain, 144000 per kthread [ 48.955882][ T6223] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.957442][ T6223] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.963650][ T6223] bridge_slave_0: entered allmulticast mode [ 48.964211][ T6223] bridge_slave_0: entered promiscuous mode [ 48.977166][ T6223] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.977210][ T6223] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.977286][ T6223] bridge_slave_1: entered allmulticast mode [ 48.977750][ T6223] bridge_slave_1: entered promiscuous mode [ 49.041175][ T6223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.054526][ T6223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.093018][ T6223] team0: Port device team_slave_0 added [ 49.103372][ T5177] bridge0: port 3(syz_tun) entered disabled state [ 49.118578][ T5177] syz_tun (unregistering): left allmulticast mode [ 49.118614][ T5177] syz_tun (unregistering): left promiscuous mode [ 49.118641][ T5177] bridge0: port 3(syz_tun) entered disabled state [ 49.128502][ T6223] team0: Port device team_slave_1 added [ 49.194368][ T6223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.194497][ T6223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.194534][ T6223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.195671][ T6223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.195691][ T6223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.196718][ T6223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.229302][ T6223] hsr_slave_0: entered promiscuous mode [ 49.231031][ T6223] hsr_slave_1: entered promiscuous mode [ 49.231623][ T6223] debugfs: 'hsr0' already exists in 'hsr' [ 49.231642][ T6223] Cannot create hsr debugfs directory [ 49.355560][ T5564] hsr_slave_0: left promiscuous mode [ 49.356621][ T5564] hsr_slave_1: left promiscuous mode [ 49.357659][ T5564] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.357693][ T5564] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.359424][ T5564] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.359436][ T5564] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 49.374156][ T5564] veth1_macvtap: left promiscuous mode [ 49.374213][ T5564] veth0_macvtap: left promiscuous mode [ 49.374691][ T5564] veth1_vlan: left promiscuous mode [ 49.546604][ T4713] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 49.548903][ T4713] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 49.551419][ T4713] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 49.553906][ T4713] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 49.557977][ T4713] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 49.651387][ T5564] team0 (unregistering): Port device team_slave_1 removed [ 49.657590][ T5564] team0 (unregistering): Port device team_slave_0 removed [ 49.816931][ T6223] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 49.828241][ T6223] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.830548][ T6223] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 49.845643][ T6223] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.847743][ T6223] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 49.869568][ T6223] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.871502][ T6223] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 49.893768][ T6223] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.928888][ T6223] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.928943][ T6223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.929035][ T6223] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.929070][ T6223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.953015][ T5574] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.955981][ T5574] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.012468][ T6223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.033976][ T6391] mmap: syz.2.470 (6391) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 50.069782][ T6223] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.071763][ T5563] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.071812][ T5563] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.073158][ T5563] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.073189][ T5563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.079804][ T6223] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 50.079838][ T6223] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 50.106108][ T4713] Bluetooth: hci4: command tx timeout [ 50.113889][ T4398] 8021q: adding VLAN 0 to HW filter on device eth5 [ 50.214066][ T6339] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.214163][ T6339] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.221074][ T6339] bridge_slave_0: entered allmulticast mode [ 50.221596][ T6339] bridge_slave_0: entered promiscuous mode [ 50.225137][ T6339] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.226436][ T6339] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.228382][ T6339] bridge_slave_1: entered allmulticast mode [ 50.230392][ T6339] bridge_slave_1: entered promiscuous mode [ 50.244476][ T6339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.245467][ T6339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.256263][ T6339] team0: Port device team_slave_0 added [ 50.258227][ T6339] team0: Port device team_slave_1 added [ 50.271897][ T6339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.273347][ T6339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.273393][ T6339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.274026][ T6339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.274040][ T6339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.274062][ T6339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.285308][ T6339] hsr_slave_0: entered promiscuous mode [ 50.285653][ T6339] hsr_slave_1: entered promiscuous mode [ 50.285849][ T6339] debugfs: 'hsr0' already exists in 'hsr' [ 50.285861][ T6339] Cannot create hsr debugfs directory [ 50.359424][ T6339] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 50.363738][ T6339] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.366313][ T6339] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 50.368589][ T6339] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.371683][ T6339] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 50.379642][ T6339] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.381510][ T6339] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 50.388732][ T6339] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.437029][ T6339] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.437082][ T6339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.437157][ T6339] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.437188][ T6339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.467211][ T6223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.496322][ T6339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.508113][ T6339] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.621494][ T6223] veth0_vlan: entered promiscuous mode [ 50.638139][ T6223] veth1_vlan: entered promiscuous mode [ 50.653506][ T6223] veth0_macvtap: entered promiscuous mode [ 50.664137][ T6485] set_capacity_and_notify: 2 callbacks suppressed [ 50.665859][ T6485] loop3: detected capacity change from 0 to 256 [ 50.675075][ T6485] syz.3.491: attempt to access beyond end of device [ 50.675075][ T6485] loop3: rw=2049, sector=1768, nr_sectors = 4 limit=256 [ 50.679238][ T6485] syz.3.491: attempt to access beyond end of device [ 50.679238][ T6485] loop3: rw=8390657, sector=1772, nr_sectors = 4 limit=256 [ 50.681840][ T6485] Buffer I/O error on dev loop3, logical block 443, lost async page write [ 50.683764][ T6485] syz.3.491: attempt to access beyond end of device [ 50.683764][ T6485] loop3: rw=8390657, sector=1768, nr_sectors = 4 limit=256 [ 50.690487][ T6223] veth1_macvtap: entered promiscuous mode [ 50.694401][ T6485] Buffer I/O error on dev loop3, logical block 442, lost async page write [ 50.713636][ T6223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.720974][ T6223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.724683][ T5562] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.725078][ T5562] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.725138][ T5562] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.725186][ T5562] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.857969][ T1426] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.858007][ T1426] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.878763][ T1426] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.878803][ T1426] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.892851][ T6339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.042818][ T4398] 8021q: adding VLAN 0 to HW filter on device eth6 [ 51.046288][ T6339] veth0_vlan: entered promiscuous mode [ 51.050851][ T6534] loop1: detected capacity change from 0 to 128 [ 51.058602][ T6339] veth1_vlan: entered promiscuous mode [ 51.092378][ T6339] veth0_macvtap: entered promiscuous mode [ 51.095942][ T6339] veth1_macvtap: entered promiscuous mode [ 51.108882][ T6339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.118006][ T6339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.135212][ T15] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.136023][ T15] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.136109][ T15] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.136135][ T15] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.146906][ T4709] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 51.148203][ T4709] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 51.190108][ T15] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.190139][ T15] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.201287][ T5562] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.201321][ T5562] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.303489][ T4398] 8021q: adding VLAN 0 to HW filter on device eth7 [ 51.491358][ T5574] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.581505][ T5574] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.607139][ T4716] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 51.609562][ T4716] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 51.610683][ T4716] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 51.611207][ T4716] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 51.612009][ T4716] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 51.625740][ T4713] Bluetooth: hci2: command tx timeout [ 51.665250][ T5574] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.738995][ T5574] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.866458][ T6596] loop6: detected capacity change from 0 to 512 [ 51.880411][ T6596] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.969177][ T5574] bridge_slave_1: left allmulticast mode [ 51.969213][ T5574] bridge_slave_1: left promiscuous mode [ 51.969295][ T5574] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.982460][ T5574] bridge_slave_0: left allmulticast mode [ 51.982496][ T5574] bridge_slave_0: left promiscuous mode [ 51.982622][ T5574] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.167864][ T6628] loop7: detected capacity change from 0 to 128 [ 52.175647][ T6628] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 52.190794][ T4713] Bluetooth: hci4: command tx timeout [ 52.208801][ T6223] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.247393][ T6633] loop6: detected capacity change from 0 to 512 [ 52.249319][ T6633] EXT4-fs: Ignoring removed i_version option [ 52.251724][ T6633] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 52.259652][ T5574] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 52.273061][ T6339] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 52.273328][ T5574] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 52.284817][ T6633] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.310664][ T6639] Bluetooth: hci0: service_discovery: too big uuid_count value 47230 [ 52.313619][ T5574] bond0 (unregistering): Released all slaves [ 52.332719][ T4398] 8021q: adding VLAN 0 to HW filter on device eth8 [ 52.365481][ T6223] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.458644][ T6651] netlink: 12 bytes leftover after parsing attributes in process `syz.2.529'. [ 52.470284][ T6651] netlink: 12 bytes leftover after parsing attributes in process `syz.2.529'. [ 52.472279][ T5562] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.472343][ T5562] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.472366][ T5562] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.472383][ T5562] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.588667][ T6573] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.588714][ T6573] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.588899][ T6573] bridge_slave_0: entered allmulticast mode [ 52.589390][ T6573] bridge_slave_0: entered promiscuous mode [ 52.590113][ T6573] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.590143][ T6573] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.590231][ T6573] bridge_slave_1: entered allmulticast mode [ 52.590663][ T6573] bridge_slave_1: entered promiscuous mode [ 52.639403][ T6573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.662627][ T5574] hsr_slave_0: left promiscuous mode [ 52.663807][ T5574] hsr_slave_1: left promiscuous mode [ 52.664063][ T5574] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.664075][ T5574] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.666326][ T5574] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.666338][ T5574] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.677062][ T5574] veth1_macvtap: left promiscuous mode [ 52.677114][ T5574] veth0_macvtap: left promiscuous mode [ 52.677179][ T5574] veth1_vlan: left promiscuous mode [ 52.677244][ T5574] veth0_vlan: left promiscuous mode [ 52.793297][ T5574] team0 (unregistering): Port device team_slave_1 removed [ 52.804910][ T5574] team0 (unregistering): Port device team_slave_0 removed [ 52.907068][ T6573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.915563][ T4398] 8021q: adding VLAN 0 to HW filter on device eth9 [ 52.922189][ T6573] team0: Port device team_slave_0 added [ 52.926506][ T6573] team0: Port device team_slave_1 added [ 52.938370][ T6573] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.938402][ T6573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.938419][ T6573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.938959][ T6573] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.938967][ T6573] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.938980][ T6573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.948580][ T5562] nci: nci_rx_work: unknown MT 0x4 [ 52.965493][ T6573] hsr_slave_0: entered promiscuous mode [ 52.967893][ T6573] hsr_slave_1: entered promiscuous mode [ 52.970465][ T6573] debugfs: 'hsr0' already exists in 'hsr' [ 52.971792][ T6573] Cannot create hsr debugfs directory [ 53.573405][ T6710] loop2: detected capacity change from 0 to 512 [ 53.574881][ T6710] EXT4-fs: inline encryption not supported [ 53.589408][ T6710] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.599556][ T6710] capability: warning: `syz.2.545' uses 32-bit capabilities (legacy support in use) [ 53.617010][ T4708] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.624984][ T4716] Bluetooth: hci1: command tx timeout [ 53.704672][ T4716] Bluetooth: hci2: command tx timeout [ 53.734430][ T6692] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 53.737764][ T6573] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 53.754190][ T6573] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 53.757665][ T6573] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 53.762111][ T6573] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 53.763911][ T6573] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 53.769136][ T6573] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 53.770974][ T6573] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 53.775497][ T6573] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 53.832468][ T6573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.838935][ T6573] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.842635][ T5562] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.842687][ T5562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.852171][ T5574] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.852217][ T5574] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.869744][ T6573] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 53.871994][ T6573] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.059071][ T4398] 8021q: adding VLAN 0 to HW filter on device eth10 [ 54.080415][ T6764] tipc: Started in network mode [ 54.080454][ T6764] tipc: Node identity 2007ff, cluster identity 4711 [ 54.080478][ T6764] tipc: Node number set to 2099199 [ 54.109856][ T6573] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.266126][ T4716] Bluetooth: hci4: command tx timeout [ 54.279591][ T6573] veth0_vlan: entered promiscuous mode [ 54.312740][ T6573] veth1_vlan: entered promiscuous mode [ 54.322915][ T6573] veth0_macvtap: entered promiscuous mode [ 54.324165][ T6573] veth1_macvtap: entered promiscuous mode [ 54.338660][ T6573] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.342512][ T6573] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.344695][ T4716] Bluetooth: hci5: command 0x1003 tx timeout [ 54.347167][ T4713] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 54.358357][ T5566] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.358415][ T5566] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.358437][ T5566] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.358455][ T5566] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.368922][ T6792] 9pnet: p9_errstr2errno: server reported unknown error 0x00000 [ 54.395384][ T4398] 8021q: adding VLAN 0 to HW filter on device eth11 [ 54.460955][ T6806] overlayfs: failed to verify origin (125/file1, ino=704, err=-61) [ 54.470247][ T6803] FAULT_FLAG_ALLOW_RETRY missing 801 [ 54.470284][ T6803] CPU: 1 UID: 0 PID: 6803 Comm: syz.6.562 Tainted: G L syzkaller #0 PREEMPT [ 54.470304][ T6803] Tainted: [L]=SOFTLOCKUP [ 54.470308][ T6803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 54.470314][ T6803] Call trace: [ 54.470317][ T6803] show_stack+0x2c/0x3c (C) [ 54.470338][ T6803] __dump_stack+0x30/0x40 [ 54.470350][ T6803] dump_stack_lvl+0xd8/0x12c [ 54.470362][ T6803] dump_stack+0x1c/0x28 [ 54.470373][ T6803] handle_userfault+0x15e4/0x1b70 [ 54.470385][ T6803] do_pte_missing+0xf30/0x2a24 [ 54.470395][ T6803] handle_mm_fault+0x15a4/0x253c [ 54.470404][ T6803] __get_user_pages+0x8ec/0x2134 [ 54.470414][ T6803] populate_vma_page_range+0x260/0x358 [ 54.470425][ T6803] mprotect_fixup+0x620/0x728 [ 54.470437][ T6803] do_mprotect_pkey+0x7f8/0xa84 [ 54.470449][ T6803] __arm64_sys_mprotect+0x80/0x98 [ 54.470460][ T6803] invoke_syscall+0x98/0x244 [ 54.470473][ T6803] el0_svc_common+0xec/0x23c [ 54.470485][ T6803] do_el0_svc+0x4c/0x5c [ 54.470496][ T6803] el0_svc+0x64/0x260 [ 54.470509][ T6803] el0t_64_sync_handler+0x48/0x148 [ 54.470521][ T6803] el0t_64_sync+0x198/0x19c [ 54.481408][ T1426] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.481424][ T1426] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.519577][ T6809] macvlan2: entered promiscuous mode [ 54.521020][ T6809] macvlan2: entered allmulticast mode [ 54.523244][ T6809] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 54.525764][ T6809] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 54.527796][ T6809] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 54.530181][ T6809] team0: Port device macvlan2 added [ 54.548957][ T1426] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.548991][ T1426] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.618100][ T6813] loop7: detected capacity change from 0 to 512 [ 54.701451][ T6813] EXT4-fs (loop7): 1 orphan inode deleted [ 54.714928][ T6813] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.718277][ T1426] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 54.718321][ T1426] EXT4-fs error (device loop7): ext4_release_dquot:7077: comm kworker/u8:6: Failed to release dquot type 1 [ 54.728608][ T1426] EXT4-fs (loop7): Remounting filesystem read-only [ 54.729945][ T6813] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.748011][ T6826] syzkaller0: entered promiscuous mode [ 54.748054][ T6826] syzkaller0: entered allmulticast mode [ 54.794909][ T6831] netlink: 20 bytes leftover after parsing attributes in process `syz.6.570'. [ 55.473683][ T6857] loop2: detected capacity change from 0 to 512 [ 55.493527][ T6857] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.550610][ T6857] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #18: comm syz.2.581: corrupted inode contents [ 55.550684][ T6857] loop2: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 55.561674][ T6857] EXT4-fs (loop2): Remounting filesystem read-only [ 55.567606][ T6857] EXT4-fs warning (device loop2): ext4_evict_inode:287: xattr delete (err -30) [ 55.575655][ T6869] loop6: detected capacity change from 0 to 512 [ 55.595976][ T6869] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e019, mo2=0002] [ 55.596045][ T6869] System zones: 0-2, 18-18, 34-34 [ 55.605226][ T6869] EXT4-fs (loop6): 1 orphan inode deleted [ 55.605727][ T6869] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.610852][ T4708] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.704599][ T4713] Bluetooth: hci1: command tx timeout [ 55.729017][ T6223] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.951384][ T6898] "syz.6.595" (6898) uses obsolete ecb(arc4) skcipher [ 56.076367][ T6915] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 56.082654][ T6917] loop3: detected capacity change from 0 to 512 [ 56.087225][ T6917] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 56.107345][ T6917] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 56.107420][ T6917] System zones: 1-12 [ 56.112819][ T6917] EXT4-fs (loop3): 1 truncate cleaned up [ 56.136351][ T6917] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.155439][ T6917] EXT4-fs (loop3): shut down requested (0) [ 56.268801][ T4720] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.347746][ T4713] Bluetooth: hci4: command tx timeout [ 56.468119][ T6953] loop4: detected capacity change from 0 to 7 [ 56.469846][ T6953] Dev loop4: unable to read RDB block 7 [ 56.470694][ T6953] loop4: unable to read partition table [ 56.470945][ T6953] loop4: partition table beyond EOD, truncated [ 56.470978][ T6953] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 56.585007][ T4713] Bluetooth: hci2: command tx timeout [ 56.841591][ T6985] loop2: detected capacity change from 0 to 256 [ 57.152323][ T6998] Illegal XDP return value 4294967274 on prog (id 101) dev syz_tun, expect packet loss! [ 57.216531][ T6942] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 57.392964][ T15] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xa0 [ 57.458506][ T7029] netlink: 8 bytes leftover after parsing attributes in process `syz.7.642'. [ 57.458559][ T7029] netlink: 'syz.7.642': attribute type 18 has an invalid length. [ 57.458569][ T7029] netlink: 4 bytes leftover after parsing attributes in process `syz.7.642'. [ 57.468642][ T5574] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.468680][ T7029] netlink: 8 bytes leftover after parsing attributes in process `syz.7.642'. [ 57.468701][ T5574] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.468735][ T5574] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.468757][ T5574] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.469779][ T7029] netlink: 'syz.7.642': attribute type 18 has an invalid length. [ 57.469798][ T7029] netlink: 4 bytes leftover after parsing attributes in process `syz.7.642'. [ 57.533331][ T7036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.535346][ T7036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.552478][ T7039] loop2: detected capacity change from 0 to 512 [ 57.556358][ T7039] EXT4-fs (loop2): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 57.556400][ T7039] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 57.556423][ T7039] EXT4-fs (loop2): The Hurd can't support 64-bit file systems [ 57.569293][ T7039] netlink: 16 bytes leftover after parsing attributes in process `syz.2.648'. [ 57.625786][ T7047] loop2: detected capacity change from 0 to 4096 [ 57.627462][ T7047] EXT4-fs: Ignoring removed mblk_io_submit option [ 57.631993][ T7047] EXT4-fs (loop2): Test dummy encryption mode enabled [ 57.635730][ T7047] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.669814][ T4708] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.758776][ T7061] netlink: 7 bytes leftover after parsing attributes in process `syz.8.658'. [ 57.785598][ T4713] Bluetooth: hci1: command tx timeout [ 57.789701][ T7068] netlink: 24 bytes leftover after parsing attributes in process `syz.2.660'. [ 57.862840][ T7077] Config c/1 of g1 needs at least one function. [ 57.864619][ T7077] udc usbip-vudc.0: failed to start g1: -22 [ 57.864639][ T7077] configfs-gadget.g1 gadget.1: probe with driver configfs-gadget.g1 failed with error -22 [ 57.865849][ T7077] UDC core: g1: couldn't find an available UDC or it's busy [ 57.951107][ T7086] netlink: 4 bytes leftover after parsing attributes in process `syz.2.668'. [ 58.033811][ T7092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.036038][ T7092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.079093][ T7094] overlayfs: failed to get inode (-116) [ 58.080695][ T7094] overlayfs: failed to get inode (-116) [ 58.125344][ T7099] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 58.125372][ T7099] overlayfs: failed to set xattr on upper [ 58.126134][ T7099] overlayfs: ...falling back to redirect_dir=nofollow. [ 58.126145][ T7099] overlayfs: ...falling back to uuid=null. [ 58.127688][ T7099] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 58.127952][ T7099] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 58.127960][ T7099] overlayfs: failed to set xattr on upper [ 58.127965][ T7099] overlayfs: ...falling back to redirect_dir=nofollow. [ 58.127969][ T7099] overlayfs: ...falling back to uuid=null. [ 58.245973][ T7105] loop7: detected capacity change from 0 to 256 [ 58.919953][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 58.920031][ C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 59.228528][ T7147] netlink: 'syz.8.692': attribute type 10 has an invalid length. [ 59.230258][ T7147] syz_tun: entered promiscuous mode [ 59.238464][ T7147] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 59.295591][ T7156] xt_hashlimit: max too large, truncated to 1048576 [ 59.341141][ T7164] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg2, syncid = 2, id = 0 [ 59.450874][ T7171] loop8: detected capacity change from 0 to 512 [ 59.457165][ T7171] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 59.460013][ T7171] EXT4-fs (loop8): 1 truncate cleaned up [ 59.460769][ T7171] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.482076][ T6573] EXT4-fs error (device loop8): ext4_lookup:1785: inode #11: comm syz-executor: iget: bad extra_isize 46 (inode size 256) [ 59.484580][ T6573] EXT4-fs (loop8): Remounting filesystem read-only [ 59.566192][ T6573] bond0: (slave syz_tun): Releasing backup interface [ 59.573212][ T7181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.573754][ T7181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.647140][ T6573] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.687929][ T15] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.732011][ T4716] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 59.735585][ T4716] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 59.737961][ T4716] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 59.739890][ T4716] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 59.741485][ T4716] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 59.751579][ T15] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.825696][ T15] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.900839][ T15] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.912469][ T7183] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.914070][ T7183] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.915715][ T7183] bridge_slave_0: entered allmulticast mode [ 59.917593][ T7183] bridge_slave_0: entered promiscuous mode [ 59.919941][ T7183] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.921574][ T7183] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.923016][ T7183] bridge_slave_1: entered allmulticast mode [ 59.924980][ T7183] bridge_slave_1: entered promiscuous mode [ 59.935322][ T7183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.936309][ T7183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.947215][ T7183] team0: Port device team_slave_0 added [ 59.949324][ T7183] team0: Port device team_slave_1 added [ 59.956411][ T7183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.956433][ T7183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.956448][ T7183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.957079][ T7183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.957087][ T7183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.957102][ T7183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.971168][ T7183] hsr_slave_0: entered promiscuous mode [ 59.971484][ T7183] hsr_slave_1: entered promiscuous mode [ 59.971706][ T7183] debugfs: 'hsr0' already exists in 'hsr' [ 59.971717][ T7183] Cannot create hsr debugfs directory [ 60.047460][ T15] bridge_slave_1: left allmulticast mode [ 60.047497][ T15] bridge_slave_1: left promiscuous mode [ 60.047584][ T15] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.050194][ T15] bridge_slave_0: left allmulticast mode [ 60.050205][ T15] bridge_slave_0: left promiscuous mode [ 60.050263][ T15] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.155658][ T15] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 60.176644][ T15] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 60.179905][ T15] bond0 (unregistering): Released all slaves [ 60.265498][ T4716] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 60.265554][ T4716] Bluetooth: hci0: Injecting HCI hardware error event [ 60.266252][ T4716] Bluetooth: hci0: hardware error 0x00 [ 60.308422][ T7218] loop7: detected capacity change from 0 to 512 [ 60.330991][ T7218] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.401868][ T6339] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.490169][ T15] hsr_slave_0: left promiscuous mode [ 60.491329][ T15] hsr_slave_1: left promiscuous mode [ 60.491600][ T15] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.491611][ T15] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.492724][ T15] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.492736][ T15] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.498338][ T15] veth1_macvtap: left promiscuous mode [ 60.498365][ T15] veth0_macvtap: left promiscuous mode [ 60.498413][ T15] veth1_vlan: left promiscuous mode [ 60.498445][ T15] veth0_vlan: left promiscuous mode [ 60.671356][ T15] team0 (unregistering): Port device team_slave_1 removed [ 60.679685][ T15] team0 (unregistering): Port device team_slave_0 removed [ 60.742950][ T7071] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 60.792600][ T7183] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 60.815495][ T7183] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 60.815906][ T7183] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 60.824756][ T7183] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 60.826745][ T7183] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 60.833416][ T7242] netlink: 28 bytes leftover after parsing attributes in process `syz.3.726'. [ 60.833459][ T7242] netlink: 'syz.3.726': attribute type 7 has an invalid length. [ 60.833486][ T7242] netlink: 'syz.3.726': attribute type 8 has an invalid length. [ 60.833498][ T7242] netlink: 4 bytes leftover after parsing attributes in process `syz.3.726'. [ 60.837814][ T7183] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 60.838233][ T7183] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 60.855925][ T7240] loop6: detected capacity change from 0 to 4096 [ 60.856375][ T7183] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 60.864451][ T7240] EXT4-fs (loop6): Test dummy encryption mode enabled [ 60.871490][ T7240] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.972943][ T6223] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.976295][ T7183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.994736][ T7183] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.997843][ T5562] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.997886][ T5562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.998454][ T5562] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.998485][ T5562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.042049][ T7259] netlink: 8 bytes leftover after parsing attributes in process `syz.3.729'. [ 61.130977][ T4398] 8021q: adding VLAN 0 to HW filter on device eth12 [ 61.279496][ T7183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.446283][ T4398] 8021q: adding VLAN 0 to HW filter on device eth13 [ 61.459638][ T7183] veth0_vlan: entered promiscuous mode [ 61.479403][ T7183] veth1_vlan: entered promiscuous mode [ 61.498602][ T7183] veth0_macvtap: entered promiscuous mode [ 61.507522][ T7183] veth1_macvtap: entered promiscuous mode [ 61.515652][ T7183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.518642][ T7183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.542041][ T1426] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.542107][ T1426] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.542129][ T1426] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.542147][ T1426] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.588283][ T7331] netlink: 'syz.2.738': attribute type 83 has an invalid length. [ 61.602600][ T5564] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.602636][ T5564] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.639270][ T5564] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.639302][ T5564] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.675959][ T7343] loop7: detected capacity change from 0 to 512 [ 61.685048][ T7343] EXT4-fs (loop7): Test dummy encryption mode enabled [ 61.698933][ T7343] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #15: comm syz.7.743: inode has both inline data and extents flags [ 61.699223][ T7343] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 61.699896][ T7343] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.743: couldn't read orphan inode 15 (err -117) [ 61.699911][ T7343] loop7: lost filesystem error report for type 5 error -117 [ 61.700441][ T7343] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.725067][ T7346] input: syz0 as /devices/virtual/input/input5 [ 61.765963][ T6339] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.773684][ T4398] 8021q: adding VLAN 0 to HW filter on device eth14 [ 61.784450][ T4713] Bluetooth: hci1: command tx timeout [ 61.930831][ T7371] netlink: 4 bytes leftover after parsing attributes in process `syz.7.747'. [ 62.179778][ C1] vcan0: j1939_tp_rxtimer: 0x0000000045c4d0a3: rx timeout, send abort [ 62.344463][ T4716] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 62.679829][ C1] vcan0: j1939_tp_rxtimer: 0x000000003a7bc2c7: rx timeout, send abort [ 62.679877][ C1] vcan0: j1939_tp_rxtimer: 0x0000000045c4d0a3: abort rx timeout. Force session deactivation [ 62.792741][ T4398] 8021q: adding VLAN 0 to HW filter on device eth15 [ 62.909642][ T7416] netlink: 4 bytes leftover after parsing attributes in process `syz.9.760'. [ 63.179881][ C1] vcan0 (unregistered): j1939_tp_rxtimer: 0x000000003a7bc2c7: abort rx timeout. Force session deactivation [ 63.262860][ T7462] overlayfs: failed lookup in lower (newroot/143, name='file0', err=-40): overlapping layers [ 63.465560][ T7481] netlink: 'syz.2.780': attribute type 1 has an invalid length. [ 63.514159][ T7489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.781'. [ 63.866466][ T4716] Bluetooth: hci1: command tx timeout [ 64.491463][ T7564] loop7: detected capacity change from 0 to 512 [ 64.496853][ T7564] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.507053][ T1596] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.507115][ T1596] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.509082][ T24] cfg80211: failed to load regulatory.db [ 64.559713][ T6339] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.573612][ T7569] netlink: 24 bytes leftover after parsing attributes in process `syz.3.799'. [ 64.763878][ T4794] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 64.767381][ T4794] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 64.918309][ T7595] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 64.974136][ T7598] loop3: detected capacity change from 0 to 256 [ 64.988239][ T7598] FAT-fs (loop3): data area starts beyond volume (274 > 64) [ 64.988270][ T7598] FAT-fs (loop3): Can't find a valid FAT filesystem [ 65.944287][ T4716] Bluetooth: hci1: command tx timeout [ 66.205415][ T7650] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 66.225579][ T7652] loop9: detected capacity change from 0 to 128 [ 66.243356][ T7652] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 66.251517][ T7652] syz.9.826 (pid 7652) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 66.270746][ T7183] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 66.490577][ T7678] loop6: detected capacity change from 0 to 1024 [ 66.509948][ T7678] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 66.516640][ T7680] netlink: 8 bytes leftover after parsing attributes in process `syz.9.837'. [ 66.537501][ T7678] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #15: comm syz.6.838: lblock 0 mapped to illegal pblock 0 (length 1) [ 66.540259][ T7678] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 66.540307][ T7678] EXT4-fs (loop6): This should not happen!! Data will be lost [ 66.540307][ T7678] [ 66.547103][ T7685] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #15: comm iou-wrk-7678: lblock 0 mapped to illegal pblock 0 (length 1) [ 66.606106][ T6223] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 66.609087][ T6223] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 66.838381][ T7717] overlayfs: failed to get inode (-116) [ 66.838453][ T7717] overlayfs: failed to get inode (-116) [ 66.875346][ T7726] netlink: 8 bytes leftover after parsing attributes in process `syz.7.850'. [ 67.230634][ T7761] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 67.527204][ T7795] sctp: [Deprecated]: syz.6.872 (pid 7795) Use of int in max_burst socket option. [ 67.527204][ T7795] Use struct sctp_assoc_value instead [ 67.573135][ T7801] loop3: detected capacity change from 0 to 128 [ 67.585349][ T7801] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 67.621691][ T4720] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 67.882561][ T7814] netlink: 8 bytes leftover after parsing attributes in process `syz.7.878'. [ 68.034357][ T4716] Bluetooth: hci1: command tx timeout [ 68.045708][ T7827] geneve2: entered promiscuous mode [ 68.169322][ T7834] loop6: detected capacity change from 0 to 128 [ 68.179603][ T7834] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 68.183184][ T7835] overlayfs: statfs failed on './file0' [ 68.250220][ T6223] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 68.385575][ T7850] netlink: 36 bytes leftover after parsing attributes in process `syz.6.895'. [ 68.727106][ T7895] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 68.737514][ T7894] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 68.801315][ T7906] netlink: 24 bytes leftover after parsing attributes in process `syz.9.919'. [ 68.873081][ T7911] netlink: 8 bytes leftover after parsing attributes in process `syz.3.921'. [ 68.962419][ T7922] loop9: detected capacity change from 0 to 512 [ 68.975203][ T7922] EXT4-fs (loop9): Test dummy encryption mode enabled [ 68.979766][ T7922] EXT4-fs error (device loop9): ext4_orphan_get:1399: inode #15: comm syz.9.925: inode has both inline data and extents flags [ 68.979824][ T7922] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 68.982403][ T7922] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.925: couldn't read orphan inode 15 (err -117) [ 68.982432][ T7922] loop9: lost filesystem error report for type 5 error -117 [ 68.984615][ C0] EXT4-fs (loop9): error count since last fsck: 2 [ 68.984627][ C0] EXT4-fs (loop9): initial error at time 68: ext4_orphan_get:1399: inode 15 [ 68.984646][ C0] EXT4-fs (loop9): last error at time 68: ext4_orphan_get:1404 [ 68.998482][ T7922] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.113256][ T7183] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.125244][ T7936] netlink: 8 bytes leftover after parsing attributes in process `syz.6.929'. [ 69.125279][ T7936] netlink: 8 bytes leftover after parsing attributes in process `syz.6.929'. [ 69.540565][ T7961] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 69.546852][ T7963] netlink: 24 bytes leftover after parsing attributes in process `syz.7.940'. [ 69.651022][ T5561] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.685882][ T7968] netlink: 24 bytes leftover after parsing attributes in process `syz.2.942'. [ 69.809043][ T4713] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.810516][ T4713] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.811550][ T4713] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.815219][ T4713] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.815503][ T4713] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.866555][ T5561] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.972144][ T5561] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.996490][ T8011] bridge0: port 3(syz_tun) entered blocking state [ 70.996557][ T8011] bridge0: port 3(syz_tun) entered disabled state [ 70.996637][ T8011] syz_tun: entered allmulticast mode [ 70.997223][ T8011] syz_tun: entered promiscuous mode [ 70.998470][ T8011] bridge0: port 3(syz_tun) entered blocking state [ 70.998503][ T8011] bridge0: port 3(syz_tun) entered forwarding state [ 71.010125][ T8013] loop3: detected capacity change from 0 to 256 [ 71.023938][ T8013] vfat: Unknown parameter 'nnonumtail' [ 71.092338][ T5561] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.192836][ T7973] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.194715][ T7973] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.196105][ T7973] bridge_slave_0: entered allmulticast mode [ 71.197779][ T7973] bridge_slave_0: entered promiscuous mode [ 71.199833][ T7973] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.201239][ T7973] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.203281][ T7973] bridge_slave_1: entered allmulticast mode [ 71.204955][ T7973] bridge_slave_1: entered promiscuous mode [ 71.221278][ T7973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.225301][ T7973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.246369][ T7973] team0: Port device team_slave_0 added [ 71.256002][ T7973] team0: Port device team_slave_1 added [ 71.298927][ T7973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.298963][ T7973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.298978][ T7973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.309656][ T7973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.309695][ T7973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.309917][ T7973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.310982][ T8031] netlink: 24 bytes leftover after parsing attributes in process `syz.3.962'. [ 71.373433][ T5561] bridge_slave_1: left allmulticast mode [ 71.373472][ T5561] bridge_slave_1: left promiscuous mode [ 71.373588][ T5561] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.378137][ T5561] bridge_slave_0: left allmulticast mode [ 71.378166][ T5561] bridge_slave_0: left promiscuous mode [ 71.378304][ T5561] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.405879][ T8033] Config c/1 of g1 needs at least one function. [ 71.405956][ T8033] udc usbip-vudc.0: failed to start g1: -22 [ 71.405969][ T8033] configfs-gadget.g1 gadget.1: probe with driver configfs-gadget.g1 failed with error -22 [ 71.406784][ T8033] UDC core: g1: couldn't find an available UDC or it's busy [ 71.558883][ T5561] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 71.587657][ T5561] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 71.635540][ T5561] bond0 (unregistering): Released all slaves [ 71.687851][ T7973] hsr_slave_0: entered promiscuous mode [ 71.688301][ T7973] hsr_slave_1: entered promiscuous mode [ 71.694656][ T7973] debugfs: 'hsr0' already exists in 'hsr' [ 71.694690][ T7973] Cannot create hsr debugfs directory [ 71.865371][ T4716] Bluetooth: hci1: command tx timeout [ 71.883419][ T4398] 8021q: adding VLAN 0 to HW filter on device eth16 [ 71.961788][ T8083] loop2: detected capacity change from 0 to 128 [ 71.979719][ T8083] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 72.000758][ T4708] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 72.122724][ T5561] hsr_slave_0: left promiscuous mode [ 72.127575][ T5561] hsr_slave_1: left promiscuous mode [ 72.127930][ T5561] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.127943][ T5561] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.131858][ T5561] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.131889][ T5561] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.145052][ T5561] veth1_macvtap: left promiscuous mode [ 72.145104][ T5561] veth0_macvtap: left promiscuous mode [ 72.145150][ T5561] veth1_vlan: left promiscuous mode [ 72.145267][ T5561] veth0_vlan: left promiscuous mode [ 72.229522][ T8108] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 72.233277][ T8108] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only [ 72.235424][ T26] binder: undelivered death notification, 0000000000000000 [ 72.311869][ T5566] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0xb [ 72.319336][ T8120] loop6: detected capacity change from 0 to 4096 [ 72.321275][ T8120] EXT4-fs: inline encryption not supported [ 72.323308][ T8120] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 72.326807][ T8120] EXT4-fs (loop6): Test dummy encryption mode enabled [ 72.331341][ T8120] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 72.331401][ T8120] System zones: 0-5 [ 72.337078][ T8120] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.368748][ T8101] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 72.371377][ T5561] team0 (unregistering): Port device team_slave_1 removed [ 72.386689][ T5561] team0 (unregistering): Port device team_slave_0 removed [ 72.399462][ T30] audit: type=1400 audit(72.360:6): lsm=SMACK fn=smack_inode_rename action=denied subject="_" object="lowerdir" requested=rw pid=8119 comm="syz.6.989" name="file1" dev="overlay" ino=15 [ 72.449214][ T6223] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.502385][ T4398] 8021q: adding VLAN 0 to HW filter on device eth17 [ 72.685935][ T8148] syzkaller0: entered promiscuous mode [ 72.685981][ T8148] syzkaller0: entered allmulticast mode [ 72.975692][ T8157] netlink: 'syz.7.998': attribute type 63 has an invalid length. [ 73.070780][ T8164] loop2: detected capacity change from 0 to 1024 [ 73.089894][ T8164] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 73.111794][ T8164] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1001: bg 0: block 112: padding at end of block bitmap is not set [ 73.112456][ T8164] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 67 with max blocks 64 with error 28 [ 73.112475][ T8164] EXT4-fs (loop2): This should not happen!! Data will be lost [ 73.112475][ T8164] [ 73.112484][ T8164] EXT4-fs (loop2): Total free blocks count 0 [ 73.112492][ T8164] EXT4-fs (loop2): Free/Dirty block details [ 73.112500][ T8164] EXT4-fs (loop2): free_blocks=0 [ 73.112508][ T8164] EXT4-fs (loop2): dirty_blocks=80 [ 73.112515][ T8164] EXT4-fs (loop2): Block reservation details [ 73.112525][ T8164] EXT4-fs (loop2): i_reserved_data_blocks=5 [ 73.122363][ T8163] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: comm syz.2.1001: lblock 0 mapped to illegal pblock 0 (length 1) [ 73.122780][ T8163] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: comm syz.2.1001: lblock 0 mapped to illegal pblock 0 (length 1) [ 73.122980][ T8163] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: comm syz.2.1001: lblock 0 mapped to illegal pblock 0 (length 1) [ 73.123155][ T8163] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: comm syz.2.1001: lblock 0 mapped to illegal pblock 0 (length 1) [ 73.123341][ T8163] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: comm syz.2.1001: lblock 0 mapped to illegal pblock 0 (length 1) [ 73.123507][ T8163] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: comm syz.2.1001: lblock 0 mapped to illegal pblock 0 (length 1) [ 73.123742][ T8163] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: comm syz.2.1001: lblock 0 mapped to illegal pblock 0 (length 1) [ 73.123920][ T8163] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: comm syz.2.1001: lblock 0 mapped to illegal pblock 0 (length 1) [ 73.124086][ T8163] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: comm syz.2.1001: lblock 0 mapped to illegal pblock 0 (length 1) [ 73.146979][ T4708] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 73.148066][ T4708] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 73.345754][ T8173] loop3: detected capacity change from 0 to 512 [ 73.348755][ T8173] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 73.350475][ T8173] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 73.352067][ T8175] loop2: detected capacity change from 0 to 1024 [ 73.352455][ T8175] EXT4-fs: Ignoring removed bh option [ 73.354049][ T8173] EXT4-fs (loop3): orphan cleanup on readonly fs [ 73.360235][ T8173] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #13: comm syz.3.1004: iget: bad i_size value: 12154761577498 [ 73.360291][ T8173] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 73.360602][ T8173] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1004: couldn't read orphan inode 13 (err -117) [ 73.360626][ T8173] loop3: lost filesystem error report for type 5 error -117 [ 73.361238][ T8173] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 73.374774][ T8173] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.1004: dx entry: limit 65535 != root limit 120 [ 73.374811][ T8173] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.1004: Corrupt directory, running e2fsck is recommended [ 73.374871][ T8173] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 3: comm syz.3.1004: path /196/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 73.381497][ T8173] EXT4-fs error (device loop3): htree_dirblock_to_tree:1080: inode #2: block 3: comm syz.3.1004: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 73.385594][ T8175] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.409929][ T4720] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.451729][ T8175] EXT4-fs error (device loop2): ext4_find_dest_de:2050: inode #12: block 7: comm syz.2.1003: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 73.451964][ T8175] EXT4-fs (loop2): Remounting filesystem read-only [ 73.479582][ T4708] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.617964][ T4398] 8021q: adding VLAN 0 to HW filter on device eth18 [ 73.637293][ T8184] ªªªªªª: renamed from vlan0 (while UP) [ 73.791953][ T8201] ªªªªªª: renamed from vlan0 (while UP) [ 73.831315][ T7973] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.851837][ T7973] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.852210][ T7973] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.862617][ T7973] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.869324][ T7973] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.912914][ T7973] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.913355][ T7973] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.940496][ T7973] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.944431][ T4716] Bluetooth: hci1: command tx timeout [ 74.079214][ T7973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.084102][ T7973] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.097687][ T5574] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.097736][ T5574] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.101980][ T5574] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.102039][ T5574] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.142423][ T7973] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.153785][ T8250] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 74.153820][ T8250] overlayfs: failed to set xattr on upper [ 74.161243][ T8250] overlayfs: ...falling back to redirect_dir=nofollow. [ 74.161454][ T8250] overlayfs: ...falling back to index=off. [ 74.161486][ T8250] overlayfs: ...falling back to uuid=null. [ 74.161504][ T8250] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 74.345011][ T8279] loop3: detected capacity change from 0 to 512 [ 74.345521][ T8279] EXT4-fs: Ignoring removed nobh option [ 74.361410][ T8279] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.423284][ T4720] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.436392][ T7973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.603997][ T7973] veth0_vlan: entered promiscuous mode [ 74.620134][ T7973] veth1_vlan: entered promiscuous mode [ 74.633608][ T8313] input: syz0 as /devices/virtual/input/input6 [ 74.651510][ T7973] veth0_macvtap: entered promiscuous mode [ 74.656487][ T4398] 8021q: adding VLAN 0 to HW filter on device eth19 [ 74.656910][ T7973] veth1_macvtap: entered promiscuous mode [ 74.688127][ T7973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.689201][ T7973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.699750][ T8316] batadv_slave_1: entered promiscuous mode [ 74.703010][ T5561] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.703554][ T5561] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.703619][ T5561] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.703678][ T5561] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.710760][ T8315] batadv_slave_1: left promiscuous mode [ 74.772706][ T5574] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.772738][ T5574] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.823051][ T5561] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.823090][ T5561] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.490652][ T9] IPVS: starting estimator thread 0... [ 75.492395][ T8406] bridge0: port 3(syz_tun) entered blocking state [ 75.495079][ T8406] bridge0: port 3(syz_tun) entered disabled state [ 75.496632][ T8406] syz_tun: entered allmulticast mode [ 75.498950][ T8406] syz_tun: entered promiscuous mode [ 75.500272][ T8406] bridge0: port 3(syz_tun) entered blocking state [ 75.500317][ T8406] bridge0: port 3(syz_tun) entered forwarding state [ 75.574392][ T8407] IPVS: using max 48 ests per chain, 115200 per kthread [ 75.647263][ T8423] loop6: detected capacity change from 0 to 256 [ 75.740729][ T5564] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.805714][ T4713] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.808562][ T4713] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.811106][ T4713] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.815848][ T4713] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.817630][ T4713] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.853609][ T5564] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.016467][ T8457] loop2: detected capacity change from 0 to 1024 [ 76.032739][ T5564] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.034758][ T4716] Bluetooth: hci1: command tx timeout [ 76.048957][ T8457] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 76.073734][ T8457] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: comm syz.2.1070: lblock 0 mapped to illegal pblock 0 (length 6) [ 76.076978][ T8457] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 76.077021][ T8457] EXT4-fs (loop2): This should not happen!! Data will be lost [ 76.077021][ T8457] [ 76.081899][ T8457] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1070: bg 0: block 112: padding at end of block bitmap is not set [ 76.085239][ T8457] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 32 with error 28 [ 76.085272][ T8457] EXT4-fs (loop2): This should not happen!! Data will be lost [ 76.085272][ T8457] [ 76.087439][ T8457] EXT4-fs (loop2): Total free blocks count 0 [ 76.087452][ T8457] EXT4-fs (loop2): Free/Dirty block details [ 76.087464][ T8457] EXT4-fs (loop2): free_blocks=0 [ 76.087476][ T8457] EXT4-fs (loop2): dirty_blocks=32 [ 76.087485][ T8457] EXT4-fs (loop2): Block reservation details [ 76.120544][ T4708] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 76.165460][ T5564] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.425964][ T5564] bridge_slave_1: left allmulticast mode [ 76.426005][ T5564] bridge_slave_1: left promiscuous mode [ 76.426100][ T5564] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.429118][ T5564] bridge_slave_0: left allmulticast mode [ 76.429131][ T5564] bridge_slave_0: left promiscuous mode [ 76.429215][ T5564] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.659306][ T8521] netlink: 'syz.4.1083': attribute type 10 has an invalid length. [ 76.661818][ T5564] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 76.677250][ T5564] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 76.716927][ T5564] bond0 (unregistering): Released all slaves [ 76.754632][ T8502] syzkaller1: entered promiscuous mode [ 76.754671][ T8502] syzkaller1: entered allmulticast mode [ 76.762396][ T8521] team0: Device veth0_vlan failed to register rx_handler [ 76.838651][ T8536] netlink: 'syz.4.1086': attribute type 1 has an invalid length. [ 76.850057][ T5564] tipc: Left network mode [ 76.917495][ T8435] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.923147][ T8435] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.923323][ T8435] bridge_slave_0: entered allmulticast mode [ 76.923830][ T8435] bridge_slave_0: entered promiscuous mode [ 76.970596][ T8552] loop4: detected capacity change from 0 to 8 [ 77.024573][ T8552] SQUASHFS error: Unable to read directory block [631:72] [ 77.024629][ T8552] SQUASHFS error: Unable to read directory block [631:72] [ 77.044953][ T8435] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.046644][ T8435] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.048428][ T8435] bridge_slave_1: entered allmulticast mode [ 77.050270][ T8435] bridge_slave_1: entered promiscuous mode [ 77.071319][ T8435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.072561][ T8558] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 77.078261][ T8435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.176741][ T8435] team0: Port device team_slave_0 added [ 77.178194][ T8435] team0: Port device team_slave_1 added [ 77.219001][ T8566] ublk_batch_commit_io: dev 3 queue 0 io 0: commit failure -16 [ 77.219076][ T8566] ublk_batch_commit_io: dev 3 queue 0 io 0: commit failure -16 [ 77.281895][ T8435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.285660][ T8435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.299684][ T8435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.301036][ T8435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.301048][ T8435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.301066][ T8435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.359154][ T5564] hsr_slave_0: left promiscuous mode [ 77.360408][ T5564] hsr_slave_1: left promiscuous mode [ 77.360722][ T5564] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.360735][ T5564] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.361767][ T5564] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.361779][ T5564] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.367477][ T5564] veth1_macvtap: left promiscuous mode [ 77.367609][ T5564] veth0_macvtap: left promiscuous mode [ 77.367656][ T5564] veth1_vlan: left promiscuous mode [ 77.367689][ T5564] veth0_vlan: left promiscuous mode [ 77.516652][ T5564] team0 (unregistering): Port device team_slave_1 removed [ 77.522210][ T5564] team0 (unregistering): Port device team_slave_0 removed [ 77.583725][ T8582] tipc: Enabled bearer , priority 10 [ 77.596157][ T8577] tipc: Resetting bearer [ 77.605370][ T8577] tipc: Disabling bearer [ 77.612443][ T8435] hsr_slave_0: entered promiscuous mode [ 77.621750][ T8435] hsr_slave_1: entered promiscuous mode [ 77.623179][ T8435] debugfs: 'hsr0' already exists in 'hsr' [ 77.624436][ T8435] Cannot create hsr debugfs directory [ 77.865250][ T4716] Bluetooth: hci3: command tx timeout [ 77.949584][ T8640] loop2: detected capacity change from 0 to 512 [ 77.953084][ T8640] EXT4-fs: Ignoring removed i_version option [ 77.961374][ T8640] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 77.973941][ T8640] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.004176][ T4708] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.092031][ T8655] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1110'. [ 78.096717][ T1426] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.096773][ T1426] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.096795][ T1426] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.096813][ T1426] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.096945][ T8655] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1110'. [ 78.114545][ T4716] Bluetooth: hci1: command tx timeout [ 78.202612][ T8435] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.210749][ T8435] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.211125][ T8435] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.219297][ T8435] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 78.220947][ T8435] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.235754][ T8435] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.236907][ T8435] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.250837][ T8435] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 78.291192][ T8679] loop7: detected capacity change from 0 to 512 [ 78.308492][ T8679] EXT4-fs (loop7): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 78.308550][ T8679] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 78.308574][ T8679] EXT4-fs (loop7): The Hurd can't support 64-bit file systems [ 78.341463][ T8679] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1118'. [ 78.349335][ T8435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.354612][ T8435] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.357967][ T1426] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.358015][ T1426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.362176][ T5561] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.362231][ T5561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.573361][ T8729] overlayfs: failed to get inode (-116) [ 78.576409][ T8729] overlayfs: failed to get inode (-116) [ 78.609609][ T8435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.638211][ T8435] veth0_vlan: entered promiscuous mode [ 78.642215][ T8435] veth1_vlan: entered promiscuous mode [ 78.679461][ T8435] veth0_macvtap: entered promiscuous mode [ 78.687584][ T8435] veth1_macvtap: entered promiscuous mode [ 78.702016][ T8435] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.707045][ T8435] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.712153][ T5561] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.712214][ T5561] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.712236][ T5561] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.712253][ T5561] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.778678][ T5566] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.778712][ T5566] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.815694][ T5564] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.815730][ T5564] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.020186][ T8774] loop2: detected capacity change from 0 to 4096 [ 79.031252][ T8774] EXT4-fs (loop2): Test dummy encryption mode enabled [ 79.037697][ T8774] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.066745][ T4708] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.302064][ T4398] 8021q: adding VLAN 0 to HW filter on device eth0 [ 79.335482][ T8812] loop0: detected capacity change from 0 to 512 [ 79.339754][ T8812] EXT4-fs (loop0): Test dummy encryption mode enabled [ 79.347284][ T8812] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.1147: inode has both inline data and extents flags [ 79.352506][ T8812] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 79.352770][ T8812] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1147: couldn't read orphan inode 15 (err -117) [ 79.352794][ T8812] loop0: lost filesystem error report for type 5 error -117 [ 79.353899][ T8813] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1148'. [ 79.354645][ C0] EXT4-fs (loop0): error count since last fsck: 2 [ 79.354658][ C0] EXT4-fs (loop0): initial error at time 79: ext4_orphan_get:1399: inode 15 [ 79.354675][ C0] EXT4-fs (loop0): last error at time 79: ext4_orphan_get:1404 [ 79.368542][ T8812] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.442196][ T8435] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.505236][ T8836] input: syz0 as /devices/virtual/input/input7 [ 79.710634][ T4398] 8021q: adding VLAN 0 to HW filter on device eth1 [ 79.777462][ T8867] overlayfs: failed lookup in lower (newroot/118, name='file0', err=-40): overlapping layers [ 79.895108][ T4816] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 79.946043][ T4716] Bluetooth: hci3: command tx timeout [ 79.997055][ T4398] 8021q: adding VLAN 0 to HW filter on device eth2 [ 80.070709][ T4816] usb 1-1: New USB device found, idVendor=0547, idProduct=2235, bcdDevice= 0.00 [ 80.070747][ T4816] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.070772][ T4816] usb 1-1: Product: syz [ 80.070781][ T4816] usb 1-1: Manufacturer: syz [ 80.070788][ T4816] usb 1-1: SerialNumber: syz [ 80.087667][ T4816] Unable to handle kernel paging request at virtual address dfff800000000001 [ 80.087710] ** replaying previous printk message ** [ 80.087710][ T4816] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 80.089654][ T4816] Mem abort info: [ 80.089661][ T4816] ESR = 0x0000000096000005 [ 80.089669][ T4816] EC = 0x25: DABT (current EL), IL = 32 bits [ 80.089677][ T4816] SET = 0, FnV = 0 [ 80.089682][ T4816] EA = 0, S1PTW = 0 [ 80.089687][ T4816] FSC = 0x05: level 1 translation fault [ 80.089692][ T4816] Data abort info: [ 80.089695][ T4816] ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000 [ 80.089700][ T4816] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 80.089706][ T4816] GCS = 0, Overlay = 0, DirtyBit = 0 [ 80.089711][ T4816] [dfff800000000001] address between user and kernel address ranges [ 80.089792][ T4816] Internal error: Oops: 0000000096000005 [#1] SMP [ 80.103878][ T4816] Modules linked in: [ 80.104576][ T4816] CPU: 1 UID: 0 PID: 4816 Comm: kworker/1:7 Tainted: G L syzkaller #0 PREEMPT [ 80.106453][ T4816] Tainted: [L]=SOFTLOCKUP [ 80.107182][ T4816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 80.109030][ T4816] Workqueue: usb_hub_wq hub_event [ 80.109966][ T4816] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 80.111367][ T4816] pc : usbtest_probe+0x40c/0xa6c [ 80.112281][ T4816] lr : usbtest_probe+0x3f8/0xa6c [ 80.113162][ T4816] sp : ffff800099536f20 [ 80.113917][ T4816] x29: ffff800099536f50 x28: ffff0000ccd8b0b0 x27: dfff800000000000 [ 80.115338][ T4816] x26: ffff80008730ad60 x25: 1fffe0001aae4b1a x24: ffff0000ccd8b000 [ 80.116854][ T4816] x23: 1fffe0001aae4b00 x22: 000000000000000a x21: ffff0000d5725800 [ 80.118318][ T4816] x20: 0000000000000000 x19: ffff0000d29d3000 x18: 00000000ffffffff [ 80.119764][ T4816] x17: ffff80008a791000 x16: 0000000000000007 x15: ffff8000824e9dfc [ 80.121254][ T4816] x14: ffff8000824f4ab8 x13: 0000000000000001 x12: 0000000000000000 [ 80.122771][ T4816] x11: ffff80008a590e28 x10: 0000000000000001 x9 : 0000000000000000 [ 80.124037][ T4816] x8 : 0000000000000001 x7 : 0000000000000000 x6 : ffff80008311da2c [ 80.125333][ T4816] x5 : ffff0000d86153b8 x4 : 0000000000000008 x3 : ffff8000834ea344 [ 80.126734][ T4816] x2 : 00000000ffffffff x1 : ffff0000f2183a80 x0 : 0000000000000000 [ 80.128118][ T4816] Call trace: [ 80.128669][ T4816] usbtest_probe+0x40c/0xa6c (P) [ 80.129542][ T4816] usb_probe_interface+0x308/0x788 [ 80.130415][ T4816] really_probe+0x29c/0x800 [ 80.131205][ T4816] __driver_probe_device+0x1e0/0x350 [ 80.132175][ T4816] driver_probe_device+0x6c/0x19c [ 80.133089][ T4816] __device_attach_driver+0x198/0x2f8 [ 80.134088][ T4816] bus_for_each_drv+0x144/0x1dc [ 80.134895][ T4816] __device_attach+0x248/0x390 [ 80.135710][ T4816] device_initial_probe+0x90/0xc8 [ 80.136560][ T4816] bus_probe_device+0x58/0x120 [ 80.137359][ T4816] device_add+0x6cc/0x9e0 [ 80.138098][ T4816] usb_set_configuration+0x1184/0x158c [ 80.139076][ T4816] usb_generic_driver_probe+0x8c/0x148 [ 80.140024][ T4816] usb_probe_device+0x114/0x2b0 [ 80.140851][ T4816] really_probe+0x29c/0x800 [ 80.141652][ T4816] __driver_probe_device+0x1e0/0x350 [ 80.142621][ T4816] driver_probe_device+0x6c/0x19c [ 80.143528][ T4816] __device_attach_driver+0x198/0x2f8 [ 80.144491][ T4816] bus_for_each_drv+0x144/0x1dc [ 80.145361][ T4816] __device_attach+0x248/0x390 [ 80.146227][ T4816] device_initial_probe+0x90/0xc8 [ 80.147101][ T4816] bus_probe_device+0x58/0x120 [ 80.147965][ T4816] device_add+0x6cc/0x9e0 [ 80.148761][ T4816] usb_new_device+0x9bc/0x11f0 [ 80.149633][ T4816] hub_event+0x1ef0/0x39fc [ 80.150408][ T4816] process_scheduled_works+0x788/0x10b8 [ 80.151368][ T4816] worker_thread+0x798/0xbd0 [ 80.152212][ T4816] kthread+0x304/0x3d4 [ 80.152948][ T4816] ret_from_fork+0x10/0x20 [ 80.153779][ T4816] Code: 9745b158 14000016 91002a96 d343fec8 (38fb6908) [ 80.155076][ T4816] ---[ end trace 0000000000000000 ]--- [ 80.500809][ T4816] Kernel panic - not syncing: Oops: Fatal exception [ 80.502007][ T4816] SMP: stopping secondary CPUs [ 80.502869][ T4816] Kernel Offset: disabled [ 80.503605][ T4816] CPU features: 0x14000000,003c0008,27020501,5427fea7 [ 80.504776][ T4816] Memory Limit: none [ 80.814732][ T4816] Rebooting in 86400 seconds..