last executing test programs: 44.74701348s ago: executing program 4 (id=69): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x40001019, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 43.701281931s ago: executing program 4 (id=79): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @none={0x0, 0x3}}, 0x14) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x2}}, 0x26) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f00000005c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @remote}, 0x2, 0x4, 0x3, 0x3}}, 0x2e) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="2503000000000000040008"], 0x14}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021300011800b00010074617267657400002000028005000300c4000000080002400000000009000100534e4154"], 0xb4}}, 0x0) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xc4db, &(0x7f0000000240)={[{@init_itable}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xf}}, {@auto_da_alloc}, {@nodioread_nolock}, {@discard}, {@orlov, 0x2e}, {@jqfmt_vfsv1}, {@barrier_val}, {@jqfmt_vfsv0}, {@noblock_validity}], [], 0x2c}, 0x1, 0x480, &(0x7f0000000b00)="$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") r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x1, 0x101) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000140)=@usbdevfs_disconnect={0xffffffa8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r8, 0x29, 0x33, &(0x7f0000000000)=0x7, 0x4) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) setsockopt$inet6_int(r8, 0x29, 0x31, &(0x7f0000000240)=0xf2b, 0x4) getsockopt$inet6_buf(r8, 0x29, 0x6, &(0x7f0000000340)=""/16, &(0x7f0000000380)=0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x2d, 0x8, 0x70bd2b, 0x25dfdbff, {0x2, 0x7c}, [@typed={0x8, 0x1a, 0x0, 0x0, @u32=0xff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c801}, 0xc010) 43.496695795s ago: executing program 4 (id=81): syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2008, 0x0, 0x3e, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, 0x0, 0x0) getdents64(r0, 0x0, 0x18) 43.464797598s ago: executing program 4 (id=82): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10142, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f0000000f00)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x3c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r2, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r1, r5, 0x16, 0x0, @void}, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r6, 0x0, 0x81, &(0x7f0000000600)={'nat\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x8000000000000001, 0x1, 0x2, 0xcc62, 0x9], 0x0, 0x0}, 0x78) write$UHID_INPUT(r0, &(0x7f0000000400)={0x8, {"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", 0x1000}}, 0xfffffe69) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 42.908035614s ago: executing program 4 (id=87): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="620ac4ff0000000071104a000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000100), &(0x7f0000000140)=0x4) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x18}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) fcntl$setflags(r1, 0x2, 0x0) (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, &(0x7f0000000140), &(0x7f0000000280), &(0x7f0000000000)) io_uring_enter(r3, 0x66a8, 0x4000, 0xf, 0x0, 0x18) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x0, 0x32, 0x1, 0x20, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xd0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}) 42.132135351s ago: executing program 4 (id=98): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x38, 0x2c, 0xd27, 0x703d25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {}, {0xffff, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x8, 0x2, [@TCA_FLOW_POLICE={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x800) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000b80)=ANY=[@ANYBLOB="f0000000100007000000000000000000fc020000000000000000000000000000e00000020000000000000000000000004e1f000100000000000000003b000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x3d}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) r7 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x53b}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r8, &(0x7f0000000580)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0xff, @dev={0xfe, 0x80, '\x00', 0x38}, 0x1}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000001c0)="17", 0x1}], 0x1}}], 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) shutdown(r8, 0x1) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r8, 0x84, 0x1, &(0x7f0000000280)={0x0, 0x8, 0x9565, 0x1000, 0x0, 0x535c}, 0x14) r9 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1010000, &(0x7f0000000240)=ANY=[@ANYRESDEC=r2], 0x1, 0x370, &(0x7f0000000400)="$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") sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r10, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) socket$inet_udp(0x2, 0x2, 0x0) 41.951687069s ago: executing program 32 (id=98): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x38, 0x2c, 0xd27, 0x703d25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {}, {0xffff, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x8, 0x2, [@TCA_FLOW_POLICE={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x800) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000b80)=ANY=[@ANYBLOB="f0000000100007000000000000000000fc020000000000000000000000000000e00000020000000000000000000000004e1f000100000000000000003b000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x3d}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) r7 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x53b}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r8, &(0x7f0000000580)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0xff, @dev={0xfe, 0x80, '\x00', 0x38}, 0x1}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000001c0)="17", 0x1}], 0x1}}], 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) shutdown(r8, 0x1) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r8, 0x84, 0x1, &(0x7f0000000280)={0x0, 0x8, 0x9565, 0x1000, 0x0, 0x535c}, 0x14) r9 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1010000, &(0x7f0000000240)=ANY=[@ANYRESDEC=r2], 0x1, 0x370, &(0x7f0000000400)="$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") sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r10, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) socket$inet_udp(0x2, 0x2, 0x0) 3.172787927s ago: executing program 3 (id=440): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, r0, 0x1, 0x3}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='\b\x00\x00'], 0x48) 3.115722018s ago: executing program 3 (id=445): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x10, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x0, 0x0}, 0x8) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r2, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r3, r1, 0x4, r0}, 0x10) 3.023507712s ago: executing program 3 (id=450): syz_usb_connect$uac2(0x0, 0x9d, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0xe41, 0x4142, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8b, 0x3, 0x1, 0x0, 0x80, 0x0, {0x8, 0xb, 0x0, 0x2, 0x1, 0x3, 0x20, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x2, 0x1, 0x15, 0x3}, [@output_terminal={0xc, 0x24, 0x3, 0x2, 0x404, 0xfc, 0x2, 0x3, 0x7, 0xf7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x8}, @as_header={0x10, 0x24, 0x1, 0x2, 0xf1, 0x1, 0x3, 0x3, 0x7e2, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x6, 0xff, 0x2f, {0x8, 0x25, 0x1, 0x80, 0x33, 0x4, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x9, 0x40, 0x80, {0x8, 0x25, 0x1, 0x2, 0x30, 0x9, 0x5}}}}}}}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) 2.977414432s ago: executing program 5 (id=452): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="fc0000001900e1f6ddedabc4ac5c000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000100000006000000000000000000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c000000020000000a0101020000000000000000000000000600000004"], 0xfc}}, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) 1.924063903s ago: executing program 5 (id=453): writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f931", 0x38}], 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r1, @ANYBLOB="c50f29bd7000004000001100000008000300", @ANYRES32=0x0, @ANYBLOB="0e012a"], 0x12c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.92391991s ago: executing program 5 (id=454): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x3}, {0xffff, 0xffff}, {0x4, 0xe}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x1d4}, 0x88c4) 1.919926679s ago: executing program 5 (id=456): dup(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000580)={0x0, 0x16, 0x2, "f610"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 1.912714625s ago: executing program 0 (id=457): write(0xffffffffffffffff, &(0x7f00000002c0)="fc0000001c000704ab5b2509b884030002ab087a0100000000481093210001c0f0030584050060100000000000039815fa2c53c2", 0x34) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x7, 0xd, 0x0, 0xffdffffc, 0x6, "00001000"}) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x0, 0x83, "00000000000000000000ffff00000000000002"}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x6, 0x12, "e315bc1cc24ff7b7cdb242e1ff0aa6905446b3"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) read$FUSE(r2, &(0x7f0000003f80)={0x2020}, 0x2020) read$watch_queue(r2, &(0x7f00000007c0)=""/136, 0x88) 1.835937048s ago: executing program 3 (id=458): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, &(0x7f0000000140), 0x0}, 0x20) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x80002, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', 0x0, 0x800013, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xf000, 0xe, 0x5012, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) execveat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x1100) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setgroups(0x0, 0x0) unshare(0x40060080) fsopen(0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x168, 0x6c, 0x0, 0x168, 0x0, 0x248, 0x258, 0x258, 0x248, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [], 'wlan1\x00', 'ip6gre0\x00', {}, {}, 0x11, 0x0, 0x0, 0x48}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x5}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0xfffffffd, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ipv6={@dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'netdevsim0\x00', 'lo\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x378) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) splice(r5, 0x0, r3, 0x0, 0x100000000001, 0x0) read$watch_queue(r2, &(0x7f0000000540)=""/222, 0xe80) 1.822313171s ago: executing program 0 (id=459): mount$overlay(0x0, 0x0, 0x0, 0x8, &(0x7f00000000c0)) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0xfffffffffffffffe) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) write$UHID_CREATE(r0, &(0x7f0000000540)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000240)=""/17, 0x11, 0x6, 0x8, 0x1, 0x4, 0xc08}}, 0xfffffdf0) write$UHID_DESTROY(r0, &(0x7f0000000180), 0x4) write$UHID_INPUT(r0, &(0x7f00000011c0)={0x8, {"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", 0x1000}}, 0x1006) 1.696674055s ago: executing program 1 (id=461): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x5, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x3, 0x0, @mcast2}}}, 0x108) syz_usb_connect(0x0, 0x3f, &(0x7f0000002440)=ANY=[@ANYBLOB="12010002935d8d10840520b0d0800102030109022d"], 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x5, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x10}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) 1.671543779s ago: executing program 2 (id=462): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1e4062, &(0x7f00000002c0)={[{@gid={'gid', 0x3d, r2}}, {@uid={'uid', 0x3d, r1}}]}) 1.591933893s ago: executing program 2 (id=463): syz_open_procfs$namespace(0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/2767], &(0x7f00000001c0)='GPL\x00'}, 0x48) 1.114865798s ago: executing program 5 (id=464): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file2\x00', 0x10, &(0x7f0000000580), 0x1, 0x4e8, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000880)=ANY=[]) 1.102283512s ago: executing program 0 (id=465): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000980)=@newsa={0x150, 0x10, 0x1, 0x70bc2c, 0x1000000, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@remote, 0x0, 0xecdf, 0x0, 0x0, 0xa, 0x60}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, @in6=@empty, {0xfffffffffffffffe, 0xfffffffffffffffe, 0x6, 0x0, 0x0, 0xfffffffffffffffc}, {0x1, 0x4, 0x9, 0x292}, {0x1000, 0x0, 0xffffffff}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x7}, [@algo_crypt={0x60, 0x2, {{'cbc(aes)\x00'}, 0xc0, "6e002b0000000020000000000000da8562d9020000080000"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x4}, 0x440d4) 980.066998ms ago: executing program 5 (id=466): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbf8, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51a23}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x30}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000c0}, 0x9080) syz_usb_connect(0x2, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a3233910daa658744d2d010203010902350001080010000904df0003080662ff09050c022000060603090507"], 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(0xffffffffffffffff, 0xf505, 0x0) 970.329302ms ago: executing program 3 (id=467): openat$urandom(0xffffffffffffff9c, 0x0, 0x80000, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[], 0x1, 0x1268, &(0x7f0000002500)="$eJzs3U9rI2UcB/Bf2vTv2qbquroL4oNeFCFue/DkpcguiAWl2gUVhFmbamialCYUIuLWkyfBlyHq0ZsgvoFevHgWBJFePO5BHGmT1aZJu7ptU5HP5zIPzzzfeWYyzMCE+TF7L32+sb7WLK9lrRgpFKK4ORbFuylSjMRodOzEc7d+/OnJN956+9XFpaUbyyndXHxz/sWU0uxT373z0ddPf9+6dOub2W8nYnfu3b3fFn7evbJ7de+Pr6LaTNVmqjdaKUu3G41WdrtWSavV5no5pddrlaxZSdV6s7LVs36t1tjcbKesvjozvblVaTZTVm+n9Uo7tQqptdVO2ftZtZ7K5XKamQ5OY+XLu3meR+T5WIxHnuf5VEzHpXgoZmI2SjEXD8cj8WhcjsfiSjweT8TVg1EXvd8AAAAAAAAAAAAAAAAAAADw/3Kf+v+C+n8AAAAAAAAAAAAAAAAAAAA4f0fr/4sRvv8PAAAAAAAAAAAAAAAAAAAAQ3af7/8fqf9/Xv0/AAAAAAAAAAAAAAAAAAAAnIfJzmI5pcmIjU+3V7ZXOstO/+JaVKMWlbgepfg9Dqr/Ozrtm68s3bieDszFCxt3uvk72yujvfn5sVLMFQbm5zv51JufiOnD+YUoxeXB8y8MzE/Gs8/s5z/p5MtRih/ei0bUYjWi0D36g/zH8ym9/NrSVG/+2v64Y42e82kBAACAs1ROf+l/ft/pDhq4vrOq+3yeuiMLJ/w/cOT5vBjXihd11NzTbH+4ntVqla0HbIwfv53x0225r1GIiCwO98xO/7K8P/mZTfGgjdGhTjp28phTnNMo/gd+zDNo/PrFoZ7JGO7sI91LIqvt3z//WSp28vxcd2zgxThxUur4e0ZhCPclhuPvk37RewIAAAAAAAAAAMC/MfDtv6mI6Hsf8IO+nnuvh/fG+7d8/OyfDeEIAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/mQHjgUAAAAAhPlbp9GxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFcBAAD///ME0UM=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000180)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x80) 902.016448ms ago: executing program 1 (id=468): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x20, 0x10, 0x4, 0xfffff010}, {0x30, 0x0, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x2}]}, 0x10) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)="e3ab67e5", 0x4}], 0x1}}], 0x1, 0x48000) 852.151373ms ago: executing program 0 (id=469): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendto(r0, 0x0, 0x0, 0x84, &(0x7f0000002700)=@hci={0x1f, 0x3, 0x3}, 0x80) 826.617006ms ago: executing program 1 (id=470): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000780)={'erspan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff3, 0xfff3}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="d800000025"], 0xd8}, 0x1, 0x0, 0x0, 0x4004041}, 0x20004440) 815.112052ms ago: executing program 0 (id=471): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") io_setup(0x2, 0xfffffffffffffffe) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0xf6) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) open(&(0x7f0000000080)='.\x00', 0x51a382, 0x78e22799f4a46e8e) 636.205327ms ago: executing program 2 (id=472): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[], 0x0) 354.63089ms ago: executing program 1 (id=473): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, r0, 0x200000000000000) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/user\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r0, 0x24, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 339.775778ms ago: executing program 0 (id=474): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x4, &(0x7f0000000800), 0x1, 0x76a, &(0x7f0000001800)="$eJzs2E9rXFUYB+D33kxi2sZOqi6sm4oVWpBO/rWhqZvWhSAIFgquVAx2koZMmpJJ0WSV4lIXLgQVEbQbFyLNQuhGNCD4AXRjv4IgKrpwIYzcySQN6SSNdeKh6fPAyZxz37n5vWeGucydAB5YTxZ/soi+iBiMiHLreB4RPc1Zb8TS6vNujCxfKkYWjcaFX7PitLg+snxp7X9lrccD0TwljkfEc89n8ejbd+bWFxanx2u16lxrPTA/c2WgvrB4YmpmfLI6Wb08PHz61NjJodHRsY7tdWggXvvuq7MvL527+uXgK7PTRb99rdrGfXRS1uZYKSJe3Y2wBLpa++nacCwrJWwIAIBtFd/zH4mIp5rf4crRFbe/vJXj1rdJmwMAAAA6onGkAQAAAOxxqX9/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/tBoZNEAAAAA9rTUvz8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB/uT6yfGlt/J+5v5yLiP7V/ButsVopxVLzsTe6I2L/H1mUNpyXRcRgB/KXrkXE4+32nzXz+6O3udqcn0fE+cT5r3cgHx5kK8X152y7z1++fv2JNp+/0upp/9na9e/GHde/2/ldW1z/ruww4/MfX3p3y/xrEU+U2uVn6/nZFvlLO8z/5sXDH21Va3wWcSza52/MGpifuTJQX1g8MTUzPlmdrF4eHj59auzk0Ojo2MDEVK06uPq3bcYnX7zz/Xb7379Vfhbbvv7v7XD/Rw89+/Wn2+QfP7r9+9/u9S96Wt5h/u8/HPx7q1qRf3GL/d/t/V/ZYf4LN8/f3OFTAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYI/KI6Issr6zP87xSiTgQEY/F/rw2W59/ZmL26uWLRS2iP7rzialadTAiyqvrrFgPNee318Ob1iMRcSgi3i/va64rb8zWLqbePAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOsORERfZHklIvKI+LOc55VK6q4AAACAjutP3QAAAACw69z/AwAAwN7n/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddujIyq0sIpbO7GuOQk+r1p20M2C35akbAJLpSt0AkEwpdQNAMu7xgewu9d57qAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACw9xw7vHIri4ilM/uao9DTqnUn7QzYbXnqBoBkulI3ACRTSt0AkIx7fCC7S733HioAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7D19zZHllYjIm/M8r1QiHo6I/ujOJqZq1cGIOBgRP5W7HyrWQ6mbBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOPqC4vT47Vadc7ExMRkfZL6ygQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAr1hcXp8VqtOldP3QkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABp5T9nEVGMY+Wn+zZXe7K/ys3HiHjz4wsfvDU+Pz83VBz/bf34/Iet48Mp+gcAAAA2W7tPX7uPBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2Kn6wuL0eK1WndvFSeo9AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/zj8BAAD//5GsoMo=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x3482, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r2, 0x28, 0x6, &(0x7f0000000100)={0x0, 0xea60}, 0x10) ioctl$TCSBRKP(r1, 0x5425, 0x6) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000100)={0x8, 0x4, 0x8, 0x15d, 0x1a, "41e5f1012e8a5c00"}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @c}}) setresgid(0xee00, 0xee01, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) 313.269365ms ago: executing program 1 (id=475): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r0, 0x400, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x0) 295.300805ms ago: executing program 2 (id=476): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001000), 0x60400, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000240)={0x2, &(0x7f00000001c0)=[{0x28, 0x4, 0x3f, 0xfffff004}, {0x16, 0x4, 0x9, 0xffffffff}]}) 224.006949ms ago: executing program 1 (id=477): syz_emit_ethernet(0x176, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) timer_create(0xfffffffffffffff4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=@ethtool_ringparam={0x9, 0x0, 0x8a, 0xfffffffc, 0x6, 0x2000000, 0x0, 0x6}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0x8004e500, 0x0) 219.214044ms ago: executing program 2 (id=478): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f0000000680)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nobh}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0xe4d}}]}, 0x0, 0x471, &(0x7f0000000bc0)="$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") ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0xa37, 0x9, 0xc, 0x240, 0x6}) 160.94971ms ago: executing program 2 (id=479): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x1a00040, &(0x7f0000000340)=ANY=[@ANYBLOB="757466383d302c726f6469722c726f6469722c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c646f733178666c6f7070792c73686f72746e616d653d6d697865642c636f6465706167653d3835322c696f636861727365743d6370313235312c756e695f786c6174653d302c757365667265652c757466383d302c756e695f786c6174653d312c757466383d302c757466383d302c000c92a2ebb3078016143217a27fa76dd70e0a48a1d34f4dedd5a451c3f5becc47efeb79d7e4a6996c3f6e4da63ffdaf683cf16f36033754820b4773355653d56d2cef62b755e2dbf6b7eab87571d21d926f57f789e17ad85e267c649cb763c329b273111303c55dab9bafe4496b6792309b30c4462d6f87fd3620a37a2e5f15f4f0cfcfa913aa93097e252a9e95915782bf8d654d4d8d1afad25f05461d6d7670d85f539a5d92c325cf85efe646350d61f4cf9619e5a7ec197556b6696cbbeb6ddaebec7105b4a6791a2d20f26323880aa90aafcc083fe9f292a8eb6041b63e50725a4e1c32ce10"], 0x1, 0x355, &(0x7f0000000500)="$eJzs3U9oHFUYAPBvO5vdpFCTg1AUhNGboKGNeNBTQkmhmIvK4p+DuNhUJYmFLC6mh2zjRTwKHtWLNw967FkERbx58GoFqYoH7a1gcWR3ZrOz2c02Fba1+Psdhi/vvW/f93aHZDLJvn11OTbOz8SF69evxexsJarLZ5bjRiUWIom+yzGqNqYNALg33Miy+DPLHTGl0j0sTLcsAGCKej//Xz9Rann360njs8r0awIApqv4/X9u0pjZwzouTqUkAGDKRu7/PzLUXRv+U3+19F8BAMC96vmXXn5mZS3iuTSdjdh6r91oN+LpQf/KhXgzNmM9TsV83IzILxS6h0rvePbc2uqpNE078ctCNLoZ7UbEVqfdyK8UVpJefj1Ox3wsFPnF1UaWZcnZTyIi7YmIy53e/LFVaTdm4ngx/4/HYz2WIo37R/Ijzq2tLqXFAzS2+vmdiL3BfYtu/YsxH9+/FhdjM85HN7d/WbO2uns6Tc9ka0P57Ua9Ny536B0QAAAAAAAAAAAAAAAAAAAAAAD4VxbTfQv7+99kg/17FhfH9Pf2x8nzi/2B9vL9gbJ6Fln2xzuPN95PYmh/oIP787Qb1Th2d5cOAAAAAAAAAAAAAAAAAAAA/xmtnVo0NzfXt1s7lzbKQWe7tXMsIrotb337+VdzMTrmFkG1mKPUlRZNlzaaWdIfnCVDY4og6U7eb/nsyn7F5TH1/VWMLaOedx2LcRWeePjnjwYtDyX9R/57MCaJ8QtMDpRRDrbuy0u6nSdqP1i6xZirWZYdlr77ymhWVCKqt//CTQ5mu8/qN9feeOCJ1skney1fZrlHH5t/4eqHn/620dzszhy9V7C23bqZbTSLr8efbIcHSen8qUQeVMpnQnVS+t5wSzP54fcXH/zgu6PNnpVb3h4zJsmX88XBrloedMs80DU3bq6ZMSf/FIKTHy83r+z+9OtRs0rfJGzUAQAAAAAAAAAAAAAAAAAAd0TpveKF4s2+M5Oynnp2+pUBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ0z+Pz/UrA30nKU4K9OjHbV17dbEbW7vUwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP7n/gkAAP//YA9qrg==") sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000180)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, 0x0) r4 = fsmount(r3, 0x0, 0x80) r5 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000001c00), 0x12) socket$inet6_tcp(0xa, 0x1, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x10) r6 = open(&(0x7f0000000040)='./bus\x00', 0x80202, 0x0) ftruncate(r6, 0x2007ffc) 0s ago: executing program 3 (id=480): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000080)={[{@data_err_ignore}, {@dioread_nolock}, {@acl}, {@nouid32}, {@max_dir_size_kb}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x3a}}, {@dioread_lock}]}, 0x1, 0x47a, &(0x7f00000006c0)="$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") kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.113' (ED25519) to the list of known hosts. [ 23.185441][ T4690] cgroup: Unknown subsys name 'net' [ 23.305169][ T4690] cgroup: Unknown subsys name 'cpuset' [ 23.307207][ T4690] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 23.465147][ T4690] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 24.274546][ T4718] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 24.274858][ T4718] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 24.274995][ T4718] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 24.275125][ T4718] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 24.275251][ T4718] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 24.275935][ T4718] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 24.276189][ T4718] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 24.276380][ T4718] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 24.276736][ T4718] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 24.276956][ T4718] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 24.288212][ T4723] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 24.288384][ T4723] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 24.291745][ T4722] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 24.293326][ T4722] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 24.296442][ T4723] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 24.296476][ T4718] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 24.296647][ T4718] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 24.301244][ T4723] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 24.301435][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 24.301807][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 24.302363][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 24.302564][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 24.302930][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 24.303545][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 24.304691][ T4717] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 24.575337][ T4706] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.576909][ T4706] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.578261][ T4706] bridge_slave_0: entered allmulticast mode [ 24.579945][ T4706] bridge_slave_0: entered promiscuous mode [ 24.583732][ T4706] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.585265][ T4706] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.586615][ T4706] bridge_slave_1: entered allmulticast mode [ 24.588172][ T4706] bridge_slave_1: entered promiscuous mode [ 24.609685][ T4706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.614221][ T4706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.634803][ T4706] team0: Port device team_slave_0 added [ 24.635569][ T4706] team0: Port device team_slave_1 added [ 24.652171][ T4706] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.652191][ T4706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.652209][ T4706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.652909][ T4706] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.652917][ T4706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.652932][ T4706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.689001][ T4706] hsr_slave_0: entered promiscuous mode [ 24.690685][ T4706] hsr_slave_1: entered promiscuous mode [ 24.716770][ T4707] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.718144][ T4707] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.719685][ T4707] bridge_slave_0: entered allmulticast mode [ 24.721222][ T4707] bridge_slave_0: entered promiscuous mode [ 24.736145][ T4707] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.737416][ T4707] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.738811][ T4707] bridge_slave_1: entered allmulticast mode [ 24.740345][ T4707] bridge_slave_1: entered promiscuous mode [ 24.765066][ T4707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.766792][ T4707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.808621][ T4707] team0: Port device team_slave_0 added [ 24.813334][ T4709] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.813420][ T4709] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.813525][ T4709] bridge_slave_0: entered allmulticast mode [ 24.814053][ T4709] bridge_slave_0: entered promiscuous mode [ 24.814663][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.814689][ T4709] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.814737][ T4709] bridge_slave_1: entered allmulticast mode [ 24.815134][ T4709] bridge_slave_1: entered promiscuous mode [ 24.821644][ T4709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.822525][ T4709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.829627][ T4709] team0: Port device team_slave_0 added [ 24.830400][ T4709] team0: Port device team_slave_1 added [ 24.840937][ T4707] team0: Port device team_slave_1 added [ 24.841965][ T4719] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.842014][ T4719] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.842068][ T4719] bridge_slave_0: entered allmulticast mode [ 24.842462][ T4719] bridge_slave_0: entered promiscuous mode [ 24.843333][ T4719] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.843414][ T4719] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.843465][ T4719] bridge_slave_1: entered allmulticast mode [ 24.843919][ T4719] bridge_slave_1: entered promiscuous mode [ 24.857228][ T4708] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.857307][ T4708] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.857363][ T4708] bridge_slave_0: entered allmulticast mode [ 24.858004][ T4708] bridge_slave_0: entered promiscuous mode [ 24.859249][ T4708] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.859269][ T4708] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.859320][ T4708] bridge_slave_1: entered allmulticast mode [ 24.859734][ T4708] bridge_slave_1: entered promiscuous mode [ 24.866862][ T4708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.867098][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.867113][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.867137][ T4709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.868022][ T4708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.874709][ T4708] team0: Port device team_slave_0 added [ 24.878568][ T4707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.878577][ T4707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.878593][ T4707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.887113][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.887137][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.887152][ T4709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.887907][ T4708] team0: Port device team_slave_1 added [ 24.888143][ T4707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.888149][ T4707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.888161][ T4707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.889250][ T4719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.890188][ T4719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.905284][ T4706] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 24.908258][ T4706] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 24.911072][ T4706] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 24.913339][ T4706] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 24.921225][ T4708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.922431][ T4708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.924141][ T4708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.929599][ T4719] team0: Port device team_slave_0 added [ 24.930719][ T4719] team0: Port device team_slave_1 added [ 24.930778][ T4706] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 24.932830][ T4706] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 24.933353][ T4706] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 24.935076][ T4706] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 24.938274][ T4708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.938295][ T4708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.938319][ T4708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.944881][ T4707] hsr_slave_0: entered promiscuous mode [ 24.945199][ T4707] hsr_slave_1: entered promiscuous mode [ 24.945830][ T4707] debugfs: 'hsr0' already exists in 'hsr' [ 24.945864][ T4707] Cannot create hsr debugfs directory [ 24.955031][ T4709] hsr_slave_0: entered promiscuous mode [ 24.955346][ T4709] hsr_slave_1: entered promiscuous mode [ 24.955521][ T4709] debugfs: 'hsr0' already exists in 'hsr' [ 24.955530][ T4709] Cannot create hsr debugfs directory [ 24.960074][ T4719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.960093][ T4719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.960379][ T4719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.961035][ T4719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.961042][ T4719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.961055][ T4719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.981865][ T4719] hsr_slave_0: entered promiscuous mode [ 24.983286][ T4719] hsr_slave_1: entered promiscuous mode [ 24.984800][ T4719] debugfs: 'hsr0' already exists in 'hsr' [ 24.985889][ T4719] Cannot create hsr debugfs directory [ 24.990593][ T4708] hsr_slave_0: entered promiscuous mode [ 24.990902][ T4708] hsr_slave_1: entered promiscuous mode [ 24.991077][ T4708] debugfs: 'hsr0' already exists in 'hsr' [ 24.991086][ T4708] Cannot create hsr debugfs directory [ 25.056831][ T4706] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.056875][ T4706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.057010][ T4706] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.057051][ T4706] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.112904][ T4709] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 25.116006][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 25.117631][ T4709] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 25.119715][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 25.121452][ T4709] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 25.123478][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 25.124141][ T4709] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 25.125651][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 25.148075][ T4706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.151639][ T4719] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 25.154420][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 25.155420][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.155444][ T4709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.155509][ T4709] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.155540][ T4709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.161540][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.162669][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.167406][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.169132][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.176474][ T4719] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 25.178757][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 25.180022][ T4719] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 25.181907][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 25.184821][ T4719] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 25.187080][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 25.194452][ T4706] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.205890][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.205931][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.219257][ T4709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.225230][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.225266][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.227253][ T4708] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 25.228640][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 25.232198][ T4708] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 25.235903][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 25.238258][ T4708] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 25.240355][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 25.247541][ T4708] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 25.249805][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 25.262059][ T4709] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.282728][ T4707] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 25.285383][ T4707] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 25.289088][ T3177] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.289134][ T3177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.294662][ T4719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.294968][ T4707] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 25.296607][ T4707] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 25.296862][ T4707] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 25.300222][ T4707] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 25.308247][ T4707] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 25.310456][ T4707] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 25.313040][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.313083][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.344793][ T4719] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.357111][ T4719] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 25.359213][ T4719] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 25.364454][ T15] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.364491][ T15] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.364907][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.364932][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.399146][ T4708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.405201][ T4707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.409873][ T4707] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.411873][ T4708] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.425215][ T1213] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.425255][ T1213] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.443451][ T4708] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 25.446059][ T4708] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 25.450297][ T1213] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.450345][ T1213] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.453477][ T1213] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.453509][ T1213] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.460123][ T1213] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.460156][ T1213] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.481158][ T4706] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.513102][ T4706] veth0_vlan: entered promiscuous mode [ 25.517363][ T4706] veth1_vlan: entered promiscuous mode [ 25.522760][ T4706] veth0_macvtap: entered promiscuous mode [ 25.536968][ T4706] veth1_macvtap: entered promiscuous mode [ 25.547776][ T4706] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.551055][ T4706] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.558256][ T1213] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.558316][ T1213] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.558338][ T1213] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.558354][ T1213] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.608824][ T3177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 25.608854][ T3177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 25.627766][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 25.629246][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 25.657870][ T4719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.661523][ T4709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.681859][ T4706] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 25.689693][ T4709] veth0_vlan: entered promiscuous mode [ 25.699210][ T4709] veth1_vlan: entered promiscuous mode [ 25.710172][ T4709] veth0_macvtap: entered promiscuous mode [ 25.712449][ T4709] veth1_macvtap: entered promiscuous mode [ 25.722939][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.729413][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.731142][ T39] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.731192][ T39] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.731221][ T39] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.731242][ T39] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.758363][ T4882] loop2: detected capacity change from 0 to 512 [ 25.767571][ T4708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.791953][ T4708] veth0_vlan: entered promiscuous mode [ 25.807702][ T4707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.808999][ T4882] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 25.820523][ T4708] veth1_vlan: entered promiscuous mode [ 25.838059][ T4707] veth0_vlan: entered promiscuous mode [ 25.840021][ T4707] veth1_vlan: entered promiscuous mode [ 25.846996][ T4707] veth0_macvtap: entered promiscuous mode [ 25.848214][ T4707] veth1_macvtap: entered promiscuous mode [ 25.852819][ T4707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.854350][ T4707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.879925][ T1213] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 25.879937][ T1213] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 25.892106][ T3296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 25.892129][ T3296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 25.900520][ T1213] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 25.900549][ T1213] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 25.918274][ T40] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.918437][ T40] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.918460][ T40] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.918476][ T40] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.932521][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 25.932547][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 25.949711][ T4708] veth0_macvtap: entered promiscuous mode [ 26.174817][ T4719] veth0_vlan: entered promiscuous mode [ 26.176524][ T4719] veth1_vlan: entered promiscuous mode [ 26.182190][ T4719] veth0_macvtap: entered promiscuous mode [ 26.183216][ T4719] veth1_macvtap: entered promiscuous mode [ 26.192435][ T4708] veth1_macvtap: entered promiscuous mode [ 26.213026][ T4708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.213598][ T4719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.222052][ T4708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.228498][ T4719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.238619][ T15] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.241142][ T15] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.241232][ T15] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.241284][ T15] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.241334][ T15] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.241408][ T15] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.241550][ T15] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.241612][ T15] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.324289][ T4716] Bluetooth: hci3: command tx timeout [ 26.324509][ T4716] Bluetooth: hci2: command tx timeout [ 26.327723][ T4721] Bluetooth: hci0: command tx timeout [ 26.430179][ T4721] Bluetooth: hci4: command tx timeout [ 26.431310][ T4899] loop1: detected capacity change from 0 to 8192 [ 26.434894][ T4717] Bluetooth: hci1: command tx timeout [ 26.525806][ T4899] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 27.196748][ T4706] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 27.281936][ T3177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 27.281966][ T3177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 27.832283][ T4913] Zero length message leads to an empty skb [ 27.982978][ T4900] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 27.983005][ T4900] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 27.998621][ T15] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 27.998652][ T15] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.031394][ T3382] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.031427][ T3382] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.049144][ T4916] loop1: detected capacity change from 0 to 512 [ 28.066631][ T4916] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 28.680523][ T4721] Bluetooth: hci0: command tx timeout [ 28.680566][ T4721] Bluetooth: hci2: command tx timeout [ 28.680598][ T4721] Bluetooth: hci3: command tx timeout [ 28.680619][ T4721] Bluetooth: hci4: command tx timeout [ 28.680637][ T4721] Bluetooth: hci1: command tx timeout [ 28.833583][ T4938] loop0: detected capacity change from 0 to 4096 [ 28.853376][ T4938] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.288770][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.725848][ T4707] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.738404][ T4955] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 30.495550][ T4975] loop4: detected capacity change from 0 to 4096 [ 31.148851][ T4716] Bluetooth: hci3: command tx timeout [ 31.148948][ T4716] Bluetooth: hci2: command tx timeout [ 31.149013][ T4716] Bluetooth: hci0: command tx timeout [ 31.150549][ T4717] Bluetooth: hci1: command tx timeout [ 31.153858][ T4721] Bluetooth: hci4: command tx timeout [ 31.224936][ T4975] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.533223][ T4991] loop3: detected capacity change from 0 to 512 [ 31.606404][ T4991] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.275190][ T4719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.357990][ T5007] loop0: detected capacity change from 0 to 512 [ 32.378243][ T5007] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.846783][ T5016] loop1: detected capacity change from 0 to 4096 [ 32.884143][ T5016] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.197318][ T4721] Bluetooth: hci1: command tx timeout [ 33.197341][ T4717] Bluetooth: hci4: command tx timeout [ 33.197361][ T4710] Bluetooth: hci0: command tx timeout [ 33.197372][ T4717] Bluetooth: hci2: command tx timeout [ 33.197382][ T4710] Bluetooth: hci3: command tx timeout [ 33.207468][ T4708] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.219401][ T4707] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.269600][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.436353][ T5026] loop4: detected capacity change from 0 to 4096 [ 33.474825][ T5026] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.089344][ T4719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.155103][ T5044] loop4: detected capacity change from 0 to 512 [ 34.163331][ T5044] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 34.178079][ T5044] EXT4-fs (loop4): 1 truncate cleaned up [ 34.181087][ T5044] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.239576][ T5044] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.32: invalid indirect mapped block 4294901760 (level 0) [ 34.240631][ T5044] EXT4-fs (loop4): Remounting filesystem read-only [ 34.694328][ T5063] syzkaller0: entered promiscuous mode [ 34.695506][ T5063] syzkaller0: entered allmulticast mode [ 34.710765][ T5066] loop3: detected capacity change from 0 to 256 [ 34.713404][ T5066] ======================================================= [ 34.713404][ T5066] WARNING: The mand mount option has been deprecated and [ 34.713404][ T5066] and is ignored by this kernel. Remove the mand [ 34.713404][ T5066] option from the mount to silence this warning. [ 34.713404][ T5066] ======================================================= [ 34.720953][ T5066] vfat: Unknown parameter 'erz µYŸÅount-ro' [ 34.902885][ T5070] netlink: 104 bytes leftover after parsing attributes in process `syz.3.39'. [ 35.099914][ T4719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.116623][ T5072] loop2: detected capacity change from 0 to 512 [ 35.136540][ T5072] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.211843][ T5083] capability: warning: `syz.0.43' uses deprecated v2 capabilities in a way that may be insecure [ 35.258660][ T4706] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.800101][ T5104] loop2: detected capacity change from 0 to 512 [ 35.807680][ T5104] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.49: corrupted in-inode xattr: invalid ea_ino [ 35.810116][ T5104] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 35.811178][ T5104] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.49: couldn't read orphan inode 15 (err -117) [ 35.813887][ T5104] loop2: lost filesystem error report for type 5 error -117 [ 35.818209][ T5104] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.827904][ T5104] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.49: invalid indirect mapped block 234881024 (level 0) [ 35.836274][ T4706] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.857956][ T5108] loop2: detected capacity change from 0 to 512 [ 35.860273][ T5108] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 35.871503][ T5108] EXT4-fs (loop2): 1 truncate cleaned up [ 35.959428][ T5111] loop3: detected capacity change from 0 to 4096 [ 36.004061][ T5108] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.016116][ T5111] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.330796][ T5108] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.51: invalid indirect mapped block 4294901760 (level 0) [ 36.332862][ T5108] EXT4-fs (loop2): Remounting filesystem read-only [ 36.772653][ T4708] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.779730][ T4706] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.940711][ T5125] loop1: detected capacity change from 0 to 512 [ 36.967623][ T5125] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.030794][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.122452][ T4721] Bluetooth: hci2: unexpected subevent 0x10 length: 5 > 2 [ 37.350290][ T5140] netlink: 104 bytes leftover after parsing attributes in process `syz.1.58'. [ 38.008799][ T5161] loop2: detected capacity change from 0 to 4096 [ 38.086857][ T5161] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.471180][ T5172] loop1: detected capacity change from 0 to 512 [ 38.488048][ T5175] syzkaller0: entered promiscuous mode [ 38.489289][ T5175] syzkaller0: entered allmulticast mode [ 38.500058][ T5172] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 38.514392][ T5172] EXT4-fs (loop1): 1 truncate cleaned up [ 38.514878][ T5172] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.519016][ T5172] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.65: invalid indirect mapped block 4294901760 (level 0) [ 38.519227][ T5172] EXT4-fs (loop1): Remounting filesystem read-only [ 38.548498][ T5181] overlayfs: empty lowerdir [ 38.550409][ T5178] netlink: 36 bytes leftover after parsing attributes in process `syz.4.69'. [ 38.905124][ T4706] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.914785][ T5188] syzkaller0: entered promiscuous mode [ 38.916394][ T5188] syzkaller0: entered allmulticast mode [ 38.937066][ T5190] netlink: 8 bytes leftover after parsing attributes in process `syz.2.71'. [ 38.945919][ T5190] bond1: option ad_actor_sys_prio: invalid value (0) [ 38.947301][ T5190] bond1: option ad_actor_sys_prio: allowed values 1 - 65535 [ 38.951696][ T5190] bond1 (unregistering): Released all slaves [ 39.030136][ T5195] syzkaller0: entered promiscuous mode [ 39.030170][ T5195] syzkaller0: entered allmulticast mode [ 39.127822][ T5205] overlayfs: missing 'workdir' [ 39.235645][ T5206] netlink: 104 bytes leftover after parsing attributes in process `syz.0.75'. [ 39.459989][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.483039][ T5213] loop1: detected capacity change from 0 to 8 [ 39.496198][ T5211] Unsupported ieee802154 address type: 0 [ 39.568704][ T5217] loop4: detected capacity change from 0 to 512 [ 39.572252][ T5217] ext4: Unknown parameter 'orlov.jqfmt' [ 39.702382][ T5224] loop4: detected capacity change from 0 to 512 [ 40.095337][ T5224] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.142429][ T5239] syzkaller0: entered promiscuous mode [ 40.145894][ T5239] syzkaller0: entered allmulticast mode [ 40.166569][ T4398] kernel write not supported for file bpf-prog (pid: 4398 comm: kworker/1:3) [ 40.208429][ T4719] EXT4-fs error (device loop4): ext4_empty_dir:3082: inode #12: comm syz-executor: invalid size [ 40.210452][ T4719] EXT4-fs error (device loop4): ext4_empty_dir:3082: inode #12: comm syz-executor: invalid size [ 40.211258][ T4719] EXT4-fs error (device loop4): ext4_empty_dir:3082: inode #12: comm syz-executor: invalid size [ 40.212245][ T4719] EXT4-fs error (device loop4): ext4_empty_dir:3082: inode #12: comm syz-executor: invalid size [ 40.212488][ T4719] EXT4-fs error (device loop4): ext4_empty_dir:3082: inode #12: comm syz-executor: invalid size [ 40.213099][ T4719] EXT4-fs error (device loop4): ext4_empty_dir:3082: inode #12: comm syz-executor: invalid size [ 40.214432][ T4719] EXT4-fs error (device loop4): ext4_empty_dir:3082: inode #12: comm syz-executor: invalid size [ 40.215156][ T4719] EXT4-fs error (device loop4): ext4_empty_dir:3082: inode #12: comm syz-executor: invalid size [ 40.215701][ T4719] EXT4-fs error (device loop4): ext4_empty_dir:3082: inode #12: comm syz-executor: invalid size [ 40.216014][ T4719] EXT4-fs error (device loop4): ext4_empty_dir:3082: inode #12: comm syz-executor: invalid size [ 40.228650][ T5245] loop0: detected capacity change from 0 to 512 [ 40.421253][ T5245] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.478761][ T5249] loop2: detected capacity change from 0 to 512 [ 40.482649][ T5249] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 40.484242][ T5249] EXT4-fs (loop2): 1 truncate cleaned up [ 40.484722][ T5249] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.486065][ T4707] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.521992][ T5249] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.88: invalid indirect mapped block 4294901760 (level 0) [ 40.525436][ T5249] EXT4-fs (loop2): Remounting filesystem read-only [ 41.010075][ T4719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.044289][ T4721] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 41.044488][ T4721] Bluetooth: hci2: Injecting HCI hardware error event [ 41.045204][ T4716] Bluetooth: hci2: hardware error 0x00 [ 41.096087][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.179029][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.240654][ T4721] Bluetooth: hci2: unexpected event for opcode 0x1003 [ 41.243761][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.331289][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.333412][ T4710] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 41.335941][ T4710] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 41.338622][ T4710] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 41.352193][ T4706] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.360301][ T4710] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 41.362406][ T4710] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 41.550967][ T5302] netlink: zone id is out of range [ 41.550996][ T5302] netlink: zone id is out of range [ 41.624815][ T5299] binder: 5298:5299 tried to acquire reference to desc 0, got 1 instead [ 41.627016][ T5299] binder: 5298:5299 got transaction to invalid handle, 3 [ 41.627083][ T5299] binder: 5298:5299 cannot find target node [ 41.627101][ T5299] binder: 5298:5299 transaction call to 0:0 failed 5/29201/-22, code 0 size 0-0 line 3236 [ 41.763990][ T10] binder: undelivered TRANSACTION_ERROR: 29201 [ 42.028015][ T5325] process 'syz.0.109' launched './file2' with NULL argv: empty string added [ 42.078705][ T12] bridge_slave_1: left allmulticast mode [ 42.078745][ T12] bridge_slave_1: left promiscuous mode [ 42.079165][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.091802][ T12] bridge_slave_0: left allmulticast mode [ 42.093317][ T12] bridge_slave_0: left promiscuous mode [ 42.096373][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.300965][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 42.335281][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 42.346087][ T12] bond0 (unregistering): Released all slaves [ 42.364647][ T4395] 8021q: adding VLAN 0 to HW filter on device eth1 [ 42.449917][ T5358] netlink: zone id is out of range [ 42.449945][ T5358] netlink: zone id is out of range [ 42.859546][ T5371] netlink: 67 bytes leftover after parsing attributes in process `syz.1.118'. [ 42.914240][ T5371] Driver unsupported XDP return value 0 on prog (id 22) dev N/A, expect packet loss! [ 42.981830][ T4395] 8021q: adding VLAN 0 to HW filter on device eth0 [ 43.622922][ T4721] Bluetooth: hci4: command tx timeout [ 43.660715][ T4716] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 44.051560][ T4395] 8021q: adding VLAN 0 to HW filter on device eth2 [ 44.064977][ T12] hsr_slave_0: left promiscuous mode [ 44.066094][ T12] hsr_slave_1: left promiscuous mode [ 44.066353][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.066369][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.067708][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.067720][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.074419][ T12] veth1_macvtap: left promiscuous mode [ 44.074464][ T12] veth0_macvtap: left promiscuous mode [ 44.074504][ T12] veth1_vlan: left promiscuous mode [ 44.074546][ T12] veth0_vlan: left promiscuous mode [ 44.122857][ T5434] loop1: detected capacity change from 0 to 512 [ 44.323517][ T12] team0 (unregistering): Port device team_slave_1 removed [ 44.340761][ T12] team0 (unregistering): Port device team_slave_0 removed [ 44.488815][ T5286] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.491501][ T5286] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.491610][ T5286] bridge_slave_0: entered allmulticast mode [ 44.492082][ T5286] bridge_slave_0: entered promiscuous mode [ 44.496941][ T5286] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.496984][ T5286] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.497049][ T5286] bridge_slave_1: entered allmulticast mode [ 44.497492][ T5286] bridge_slave_1: entered promiscuous mode [ 44.534554][ T5286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.540440][ T5286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.594217][ T5286] team0: Port device team_slave_0 added [ 44.658792][ T5286] team0: Port device team_slave_1 added [ 44.734027][ T5286] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.735068][ T5286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 44.735083][ T5286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.736340][ T5286] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.736352][ T5286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 44.736368][ T5286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.768137][ T5286] hsr_slave_0: entered promiscuous mode [ 44.768470][ T5286] hsr_slave_1: entered promiscuous mode [ 44.768676][ T5286] debugfs: 'hsr0' already exists in 'hsr' [ 44.768692][ T5286] Cannot create hsr debugfs directory [ 45.095619][ T5286] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 45.099502][ T5286] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 45.101838][ T5286] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 45.105570][ T5286] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 45.108467][ T5286] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 45.113173][ T5286] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 45.117867][ T4395] 8021q: adding VLAN 0 to HW filter on device eth3 [ 45.119620][ T5286] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 45.126548][ T5286] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 45.216345][ T5286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.231855][ T5286] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.280370][ T4952] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.280427][ T4952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.294705][ T93] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.294755][ T93] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.357272][ T5481] syzkaller0: entered promiscuous mode [ 45.357307][ T5481] syzkaller0: entered allmulticast mode [ 45.486763][ T5493] syzkaller0: entered promiscuous mode [ 45.486804][ T5493] syzkaller0: entered allmulticast mode [ 45.511528][ T5286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.640320][ T5519] FAULT_INJECTION: forcing a failure. [ 45.640320][ T5519] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 45.640355][ T5519] CPU: 0 UID: 0 PID: 5519 Comm: syz.1.144 Not tainted syzkaller #0 PREEMPT [ 45.640369][ T5519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 45.640376][ T5519] Call trace: [ 45.640379][ T5519] show_stack+0x2c/0x3c (C) [ 45.640400][ T5519] __dump_stack+0x30/0x40 [ 45.640412][ T5519] dump_stack_lvl+0xd8/0x12c [ 45.640422][ T5519] dump_stack+0x1c/0x28 [ 45.640431][ T5519] should_fail_ex+0x41c/0x590 [ 45.640441][ T5519] should_fail+0x14/0x24 [ 45.640449][ T5519] should_fail_usercopy+0x20/0x30 [ 45.640458][ T5519] vga_arb_write+0x10c/0xf14 [ 45.640466][ T5519] vfs_write+0x2a4/0xa0c [ 45.640481][ T5519] ksys_write+0x12c/0x228 [ 45.640490][ T5519] __arm64_sys_write+0x7c/0x90 [ 45.640500][ T5519] invoke_syscall+0x98/0x244 [ 45.640510][ T5519] el0_svc_common+0xec/0x23c [ 45.640519][ T5519] do_el0_svc+0x4c/0x5c [ 45.640528][ T5519] el0_svc+0x64/0x260 [ 45.640537][ T5519] el0t_64_sync_handler+0x48/0x148 [ 45.640544][ T5519] el0t_64_sync+0x198/0x19c [ 45.688960][ T5286] veth0_vlan: entered promiscuous mode [ 45.694487][ T5286] veth1_vlan: entered promiscuous mode [ 45.706556][ T5286] veth0_macvtap: entered promiscuous mode [ 45.710284][ T5286] veth1_macvtap: entered promiscuous mode [ 45.718412][ T5286] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.722528][ T5286] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.728082][ T1213] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.730251][ T1213] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.730297][ T1213] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.730323][ T1213] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.740629][ T4716] Bluetooth: hci4: command tx timeout [ 45.769183][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.769207][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.781133][ T3296] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.781157][ T3296] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.192002][ T5532] loop5: detected capacity change from 0 to 1024 [ 46.224091][ T4716] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 46.224247][ T4716] Bluetooth: hci1: Injecting HCI hardware error event [ 46.225159][ T4716] Bluetooth: hci1: hardware error 0x00 [ 46.329618][ T5532] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.348906][ T5531] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #11: comm syz.5.148: missing EA_INODE flag [ 46.351583][ T5531] EXT4-fs (loop5): Remounting filesystem read-only [ 46.351742][ T5531] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 46.461561][ T5539] syzkaller0: entered promiscuous mode [ 46.461600][ T5539] syzkaller0: entered allmulticast mode [ 46.471131][ T5539] FAULT_INJECTION: forcing a failure. [ 46.471131][ T5539] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 46.471163][ T5539] CPU: 0 UID: 0 PID: 5539 Comm: syz.1.150 Not tainted syzkaller #0 PREEMPT [ 46.471176][ T5539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 46.471182][ T5539] Call trace: [ 46.471185][ T5539] show_stack+0x2c/0x3c (C) [ 46.471204][ T5539] __dump_stack+0x30/0x40 [ 46.471215][ T5539] dump_stack_lvl+0xd8/0x12c [ 46.471225][ T5539] dump_stack+0x1c/0x28 [ 46.471234][ T5539] should_fail_ex+0x41c/0x590 [ 46.471244][ T5539] should_fail+0x14/0x24 [ 46.471252][ T5539] should_fail_usercopy+0x20/0x30 [ 46.471260][ T5539] _copy_from_iter+0x188/0x1064 [ 46.471270][ T5539] copy_page_from_iter+0x220/0x2e8 [ 46.471280][ T5539] skb_copy_datagram_from_iter+0x270/0x5c8 [ 46.471291][ T5539] packet_sendmsg+0x2c04/0x4110 [ 46.471303][ T5539] __sock_sendmsg+0xc8/0x138 [ 46.471312][ T5539] __sys_sendto+0x254/0x338 [ 46.471322][ T5539] __arm64_sys_sendto+0xe4/0x104 [ 46.471332][ T5539] invoke_syscall+0x98/0x244 [ 46.471341][ T5539] el0_svc_common+0xec/0x23c [ 46.471351][ T5539] do_el0_svc+0x4c/0x5c [ 46.471360][ T5539] el0_svc+0x64/0x260 [ 46.471368][ T5539] el0t_64_sync_handler+0x48/0x148 [ 46.471375][ T5539] el0t_64_sync+0x198/0x19c [ 46.555277][ T5548] syzkaller0: entered promiscuous mode [ 46.555312][ T5548] syzkaller0: entered allmulticast mode [ 46.626816][ T5551] loop1: detected capacity change from 0 to 512 [ 46.629551][ T5551] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 46.629577][ T5551] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 46.641313][ T5551] EXT4-fs (loop1): 1 truncate cleaned up [ 46.641874][ T5551] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.770191][ T5553] sctp: [Deprecated]: syz.1.153 (pid 5553) Use of struct sctp_assoc_value in delayed_ack socket option. [ 46.770191][ T5553] Use struct sctp_sack_info instead [ 46.847657][ T5558] netlink: 44 bytes leftover after parsing attributes in process `syz.1.153'. [ 47.043739][ T5286] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.044454][ T5559] loop0: detected capacity change from 0 to 512 [ 47.056494][ T5559] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.122988][ T5565] syzkaller0: entered promiscuous mode [ 47.123020][ T5565] syzkaller0: entered allmulticast mode [ 47.186766][ T4707] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.226189][ T5569] netlink: 8 bytes leftover after parsing attributes in process `syz.5.159'. [ 47.242185][ T5571] IPv4: Oversized IP packet from 127.202.26.0 [ 47.247765][ T5573] netlink: 16 bytes leftover after parsing attributes in process `syz.3.161'. [ 47.247870][ T5573] netlink: 16 bytes leftover after parsing attributes in process `syz.3.161'. [ 47.251899][ T5573] netlink: 20 bytes leftover after parsing attributes in process `syz.3.161'. [ 47.355690][ T5578] syzkaller0: entered promiscuous mode [ 47.356859][ T5578] syzkaller0: entered allmulticast mode [ 47.360616][ T5581] syzkaller0: entered promiscuous mode [ 47.361873][ T5581] syzkaller0: entered allmulticast mode [ 47.377018][ T5578] FAULT_INJECTION: forcing a failure. [ 47.377018][ T5578] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 47.379717][ T5578] CPU: 1 UID: 0 PID: 5578 Comm: syz.3.163 Tainted: G L syzkaller #0 PREEMPT [ 47.379736][ T5578] Tainted: [L]=SOFTLOCKUP [ 47.379740][ T5578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 47.379745][ T5578] Call trace: [ 47.379749][ T5578] show_stack+0x2c/0x3c (C) [ 47.379774][ T5578] __dump_stack+0x30/0x40 [ 47.379787][ T5578] dump_stack_lvl+0xd8/0x12c [ 47.379797][ T5578] dump_stack+0x1c/0x28 [ 47.379806][ T5578] should_fail_ex+0x41c/0x590 [ 47.379815][ T5578] should_fail+0x14/0x24 [ 47.379823][ T5578] should_fail_usercopy+0x20/0x30 [ 47.379832][ T5578] _copy_from_iter+0x188/0x1064 [ 47.379841][ T5578] skb_copy_datagram_from_iter+0xe8/0x5c8 [ 47.379853][ T5578] packet_sendmsg+0x2c04/0x4110 [ 47.379864][ T5578] __sock_sendmsg+0xc8/0x138 [ 47.379874][ T5578] __sys_sendto+0x254/0x338 [ 47.379884][ T5578] __arm64_sys_sendto+0xe4/0x104 [ 47.379894][ T5578] invoke_syscall+0x98/0x244 [ 47.379904][ T5578] el0_svc_common+0xec/0x23c [ 47.379913][ T5578] do_el0_svc+0x4c/0x5c [ 47.379922][ T5578] el0_svc+0x64/0x260 [ 47.379930][ T5578] el0t_64_sync_handler+0x48/0x148 [ 47.379937][ T5578] el0t_64_sync+0x198/0x19c [ 47.649811][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.754051][ T4721] Bluetooth: hci4: command tx timeout [ 48.681191][ T4716] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 49.733945][ T4716] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 49.734125][ T4716] Bluetooth: hci3: Injecting HCI hardware error event [ 49.735065][ T4716] Bluetooth: hci3: hardware error 0x00 [ 49.772170][ T5600] netlink: zone id is out of range [ 49.772199][ T5600] netlink: zone id is out of range [ 49.864721][ T4721] Bluetooth: hci4: command tx timeout [ 49.918483][ T5617] loop5: detected capacity change from 0 to 512 [ 49.918770][ T5617] EXT4-fs: inline encryption not supported [ 49.919883][ T5617] EXT4-fs (loop5): failed to initialize system zone (-117) [ 49.919939][ T5617] EXT4-fs (loop5): mount failed [ 49.926148][ T5617] netlink: zone id is out of range [ 49.926174][ T5617] netlink: zone id is out of range [ 49.926181][ T5617] netlink: zone id is out of range [ 49.926188][ T5617] netlink: zone id is out of range [ 49.926194][ T5617] netlink: zone id is out of range [ 49.926199][ T5617] netlink: zone id is out of range [ 49.926204][ T5617] netlink: zone id is out of range [ 50.270915][ T5617] loop5: detected capacity change from 0 to 4096 [ 50.271260][ T5617] EXT4-fs: Ignoring removed mblk_io_submit option [ 50.273390][ T5617] EXT4-fs: quotafile must be on filesystem root [ 50.412756][ T5630] loop3: detected capacity change from 0 to 128 [ 50.932888][ T4721] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 50.933130][ T4721] Bluetooth: hci0: Injecting HCI hardware error event [ 50.933958][ T4721] Bluetooth: hci0: hardware error 0x00 [ 51.609566][ T4710] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 51.753490][ T5650] loop1: detected capacity change from 0 to 512 [ 51.761455][ T5650] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 51.776078][ T5650] EXT4-fs (loop1): 1 truncate cleaned up [ 51.776542][ T5650] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.800061][ T5650] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.186: invalid indirect mapped block 4294901760 (level 0) [ 51.805766][ T5650] EXT4-fs (loop1): Remounting filesystem read-only [ 52.155217][ T5652] capability: warning: `syz.0.185' uses 32-bit capabilities (legacy support in use) [ 52.160219][ T5667] all: renamed from bridge_slave_0 (while UP) [ 52.239828][ T4716] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 52.269299][ T5669] loop0: detected capacity change from 0 to 512 [ 52.275656][ T5669] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.405886][ T4707] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.597311][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.601131][ T5679] net_ratelimit: 15 callbacks suppressed [ 52.602272][ T5679] netlink: zone id is out of range [ 52.603175][ T5679] netlink: zone id is out of range [ 52.746109][ T5692] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 52.808272][ T5697] loop3: detected capacity change from 0 to 512 [ 52.817293][ T5697] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 52.824804][ T5697] EXT4-fs (loop3): 1 truncate cleaned up [ 52.831212][ T5697] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.843398][ T5704] netlink: 20 bytes leftover after parsing attributes in process `syz.0.200'. [ 52.851459][ T5697] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.198: invalid indirect mapped block 4294901760 (level 0) [ 52.854769][ T5704] netlink: 44 bytes leftover after parsing attributes in process `syz.0.200'. [ 52.855268][ T5697] EXT4-fs (loop3): Remounting filesystem read-only [ 52.971999][ T5708] loop1: detected capacity change from 0 to 4096 [ 53.234981][ T4721] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 53.295259][ T5708] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.563535][ T5714] loop5: detected capacity change from 0 to 512 [ 53.579882][ T5714] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.716355][ T4708] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.717271][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.030858][ T5728] netlink: zone id is out of range [ 54.030874][ T5286] EXT4-fs warning (device loop5): ext4_empty_dir:3094: inode #12: comm syz-executor: directory missing '.' [ 54.031073][ T5286] EXT4-fs warning (device loop5): ext4_empty_dir:3094: inode #12: comm syz-executor: directory missing '.' [ 54.031231][ T5286] EXT4-fs warning (device loop5): ext4_empty_dir:3094: inode #12: comm syz-executor: directory missing '.' [ 54.031390][ T5286] EXT4-fs warning (device loop5): ext4_empty_dir:3094: inode #12: comm syz-executor: directory missing '.' [ 54.031639][ T5286] EXT4-fs warning (device loop5): ext4_empty_dir:3094: inode #12: comm syz-executor: directory missing '.' [ 54.031814][ T5286] EXT4-fs warning (device loop5): ext4_empty_dir:3094: inode #12: comm syz-executor: directory missing '.' [ 54.031971][ T5286] EXT4-fs warning (device loop5): ext4_empty_dir:3094: inode #12: comm syz-executor: directory missing '.' [ 54.032126][ T5286] EXT4-fs warning (device loop5): ext4_empty_dir:3094: inode #12: comm syz-executor: directory missing '.' [ 54.032277][ T5286] EXT4-fs warning (device loop5): ext4_empty_dir:3094: inode #12: comm syz-executor: directory missing '.' [ 54.032429][ T5286] EXT4-fs warning (device loop5): ext4_empty_dir:3094: inode #12: comm syz-executor: directory missing '.' [ 54.034335][ T5728] netlink: zone id is out of range [ 54.040608][ T5729] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 54.894401][ T5286] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.938616][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.987419][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.057892][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.118263][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.394086][ T12] bridge_slave_1: left allmulticast mode [ 55.394119][ T12] bridge_slave_1: left promiscuous mode [ 55.394398][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.399434][ T12] bridge_slave_0: left allmulticast mode [ 55.400513][ T12] bridge_slave_0: left promiscuous mode [ 55.401711][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.534323][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 55.565026][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 55.584611][ T12] bond0 (unregistering): Released all slaves [ 55.713013][ T4395] 8021q: adding VLAN 0 to HW filter on device eth4 [ 55.827980][ T4395] 8021q: adding VLAN 0 to HW filter on device eth5 [ 55.889271][ T12] hsr_slave_0: left promiscuous mode [ 55.890642][ T12] hsr_slave_1: left promiscuous mode [ 55.891115][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.891130][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.892406][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.892417][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.898381][ T12] veth1_macvtap: left promiscuous mode [ 55.899413][ T12] veth0_macvtap: left promiscuous mode [ 55.900355][ T12] veth1_vlan: left promiscuous mode [ 55.901316][ T12] veth0_vlan: left promiscuous mode [ 55.992570][ T12] team0 (unregistering): Port device team_slave_1 removed [ 55.996454][ T12] team0 (unregistering): Port device team_slave_0 removed [ 56.041166][ T4395] 8021q: adding VLAN 0 to HW filter on device eth7 [ 56.260802][ T4395] 8021q: adding VLAN 0 to HW filter on device eth6 [ 59.412021][ T5884] loop0: detected capacity change from 0 to 256 [ 59.417253][ T5883] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 59.446863][ T4716] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 59.447709][ T4716] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 59.448032][ T4716] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 59.451054][ T4716] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 59.459418][ T4716] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 59.483135][ T5898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.483360][ T5898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.487920][ T5898] loop3: detected capacity change from 0 to 128 [ 59.496805][ T5900] IPv4: Oversized IP packet from 127.202.26.0 [ 59.562522][ T5910] can0: slcan on ttynull. [ 59.567124][ T5910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.569828][ T5910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.695462][ T5906] can0 (unregistered): slcan off ttynull. [ 59.717861][ T5888] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.717967][ T5888] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.718024][ T5888] bridge_slave_0: entered allmulticast mode [ 59.718463][ T5888] bridge_slave_0: entered promiscuous mode [ 59.719287][ T5888] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.719334][ T5888] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.719384][ T5888] bridge_slave_1: entered allmulticast mode [ 59.719838][ T5888] bridge_slave_1: entered promiscuous mode [ 59.728262][ T5888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.729299][ T5888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.736637][ T5888] team0: Port device team_slave_0 added [ 59.737408][ T5888] team0: Port device team_slave_1 added [ 59.743467][ T5888] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.743491][ T5888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.743507][ T5888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.744795][ T5888] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.744803][ T5888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.744817][ T5888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.755214][ T5888] hsr_slave_0: entered promiscuous mode [ 59.755529][ T5888] hsr_slave_1: entered promiscuous mode [ 59.755739][ T5888] debugfs: 'hsr0' already exists in 'hsr' [ 59.755750][ T5888] Cannot create hsr debugfs directory [ 60.127001][ T5888] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 60.129879][ T5888] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 60.131428][ T5888] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 60.134444][ T5888] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 60.136108][ T5888] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 60.138351][ T5888] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 60.140121][ T5888] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 60.142306][ T5888] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 60.157110][ T5888] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.157154][ T5888] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.157241][ T5888] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.157275][ T5888] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.179112][ T5888] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.184600][ T4952] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.185924][ T4952] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.189352][ T5888] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.195579][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.195627][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.195973][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.195992][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.209299][ T5888] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 60.211143][ T5888] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.308115][ T5888] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.377151][ T5888] veth0_vlan: entered promiscuous mode [ 60.379271][ T5888] veth1_vlan: entered promiscuous mode [ 60.388013][ T5888] veth0_macvtap: entered promiscuous mode [ 60.389817][ T5888] veth1_macvtap: entered promiscuous mode [ 60.397516][ T5888] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.401006][ T5888] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.403229][ T4952] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.403264][ T4952] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.403281][ T4952] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.403299][ T4952] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.432933][ T4952] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.432967][ T4952] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.445288][ T4952] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.447165][ T4952] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.513861][ T4716] Bluetooth: hci4: command tx timeout [ 62.968793][ T6066] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 62.971118][ T6066] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 63.062976][ T6063] loop1: detected capacity change from 0 to 512 [ 63.080710][ T6072] loop2: detected capacity change from 0 to 1024 [ 63.451924][ T6063] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 63.594808][ T4716] Bluetooth: hci4: command tx timeout [ 63.759262][ T6063] EXT4-fs (loop1): 1 truncate cleaned up [ 63.759754][ T6063] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.779282][ T6063] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.228: invalid indirect mapped block 4294901760 (level 0) [ 63.779715][ T6063] EXT4-fs (loop1): Remounting filesystem read-only [ 64.284965][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.310665][ T6102] FAULT_INJECTION: forcing a failure. [ 64.310665][ T6102] name failslab, interval 1, probability 0, space 0, times 1 [ 64.310703][ T6102] CPU: 1 UID: 0 PID: 6102 Comm: syz.1.235 Tainted: G L syzkaller #0 PREEMPT [ 64.310717][ T6102] Tainted: [L]=SOFTLOCKUP [ 64.310721][ T6102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 64.310727][ T6102] Call trace: [ 64.310730][ T6102] show_stack+0x2c/0x3c (C) [ 64.310748][ T6102] __dump_stack+0x30/0x40 [ 64.310760][ T6102] dump_stack_lvl+0xd8/0x12c [ 64.310770][ T6102] dump_stack+0x1c/0x28 [ 64.310779][ T6102] should_fail_ex+0x41c/0x590 [ 64.310789][ T6102] should_failslab+0xc4/0x120 [ 64.310797][ T6102] __kmalloc_noprof+0x100/0x6f0 [ 64.310806][ T6102] tomoyo_realpath_from_path+0xbc/0x4dc [ 64.310817][ T6102] tomoyo_path_number_perm+0x1f0/0x500 [ 64.310826][ T6102] tomoyo_file_ioctl+0x2c/0x3c [ 64.310833][ T6102] security_file_ioctl+0xdc/0x2b0 [ 64.310843][ T6102] __arm64_sys_ioctl+0xa8/0x1c4 [ 64.310854][ T6102] invoke_syscall+0x98/0x244 [ 64.310863][ T6102] el0_svc_common+0xec/0x23c [ 64.310873][ T6102] do_el0_svc+0x4c/0x5c [ 64.310882][ T6102] el0_svc+0x64/0x260 [ 64.310890][ T6102] el0t_64_sync_handler+0x48/0x148 [ 64.310897][ T6102] el0t_64_sync+0x198/0x19c [ 64.310919][ T6102] ERROR: Out of memory at tomoyo_realpath_from_path. [ 64.684697][ T1595] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.684768][ T1595] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.721536][ T6116] netlink: 104 bytes leftover after parsing attributes in process `syz.2.237'. [ 64.723108][ T1489] cfg80211: failed to load regulatory.db [ 64.725117][ T6114] netlink: 28 bytes leftover after parsing attributes in process `syz.5.238'. [ 64.853404][ T6128] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 64.878412][ T6133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.244'. [ 64.967734][ T6139] netlink: 20 bytes leftover after parsing attributes in process `syz.0.245'. [ 65.013667][ T6144] "syz.1.249" (6144) uses obsolete ecb(arc4) skcipher [ 65.384240][ T6157] IPv4: Oversized IP packet from 127.202.26.0 [ 65.790802][ T6174] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 65.812690][ T6176] bridge2: entered allmulticast mode [ 66.016757][ T6194] loop1: detected capacity change from 0 to 4096 [ 66.167029][ T6194] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.409360][ T6199] loop3: detected capacity change from 0 to 8192 [ 66.739195][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.794568][ T4716] Bluetooth: hci4: command tx timeout [ 68.453373][ T6167] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 68.496952][ T6232] loop5: detected capacity change from 0 to 256 [ 68.619751][ T6244] FAULT_INJECTION: forcing a failure. [ 68.619751][ T6244] name failslab, interval 1, probability 0, space 0, times 0 [ 68.619787][ T6244] CPU: 0 UID: 0 PID: 6244 Comm: syz.0.274 Tainted: G L syzkaller #0 PREEMPT [ 68.619803][ T6244] Tainted: [L]=SOFTLOCKUP [ 68.619808][ T6244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 68.619814][ T6244] Call trace: [ 68.619817][ T6244] show_stack+0x2c/0x3c (C) [ 68.619836][ T6244] __dump_stack+0x30/0x40 [ 68.619848][ T6244] dump_stack_lvl+0xd8/0x12c [ 68.619857][ T6244] dump_stack+0x1c/0x28 [ 68.619866][ T6244] should_fail_ex+0x41c/0x590 [ 68.619877][ T6244] should_failslab+0xc4/0x120 [ 68.619885][ T6244] kmem_cache_alloc_noprof+0x8c/0x610 [ 68.619894][ T6244] security_file_alloc+0x3c/0x300 [ 68.619904][ T6244] init_file+0x90/0x28c [ 68.619912][ T6244] alloc_empty_file+0x80/0x1cc [ 68.619918][ T6244] alloc_file+0x58/0x98 [ 68.619925][ T6244] alloc_file_pseudo+0x118/0x1ec [ 68.619931][ T6244] __anon_inode_getfile+0x118/0x1c8 [ 68.619941][ T6244] anon_inode_getfile+0x44/0x58 [ 68.619950][ T6244] bpf_link_prime+0x100/0x1f8 [ 68.619959][ T6244] bpf_xdp_link_attach+0x1f0/0x9b0 [ 68.619968][ T6244] link_create+0x2b8/0x648 [ 68.619978][ T6244] __sys_bpf+0x51c/0x5f0 [ 68.619987][ T6244] __arm64_sys_bpf+0x80/0x98 [ 68.619996][ T6244] invoke_syscall+0x98/0x244 [ 68.620006][ T6244] el0_svc_common+0xec/0x23c [ 68.620015][ T6244] do_el0_svc+0x4c/0x5c [ 68.620024][ T6244] el0_svc+0x64/0x260 [ 68.620032][ T6244] el0t_64_sync_handler+0x48/0x148 [ 68.620039][ T6244] el0t_64_sync+0x198/0x19c [ 68.625502][ T6243] netlink: 'syz.5.276': attribute type 21 has an invalid length. [ 68.629190][ T6243] loop5: detected capacity change from 0 to 1024 [ 68.639289][ T6243] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 68.713170][ T6247] loop3: detected capacity change from 0 to 512 [ 69.772429][ T5888] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.822169][ T6254] FAULT_INJECTION: forcing a failure. [ 69.822169][ T6254] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 69.822203][ T6254] CPU: 1 UID: 0 PID: 6254 Comm: syz.2.279 Tainted: G L syzkaller #0 PREEMPT [ 69.822219][ T6254] Tainted: [L]=SOFTLOCKUP [ 69.822224][ T6254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 69.822229][ T6254] Call trace: [ 69.822233][ T6254] show_stack+0x2c/0x3c (C) [ 69.822249][ T6254] __dump_stack+0x30/0x40 [ 69.822259][ T6254] dump_stack_lvl+0xd8/0x12c [ 69.822269][ T6254] dump_stack+0x1c/0x28 [ 69.822278][ T6254] should_fail_ex+0x41c/0x590 [ 69.822288][ T6254] should_fail+0x14/0x24 [ 69.822295][ T6254] should_fail_usercopy+0x20/0x30 [ 69.822304][ T6254] simple_read_from_buffer+0xc4/0x238 [ 69.822314][ T6254] proc_fail_nth_read+0x1a8/0x248 [ 69.822321][ T6254] vfs_read+0x230/0x8c8 [ 69.822332][ T6254] ksys_read+0x12c/0x228 [ 69.822341][ T6254] __arm64_sys_read+0x7c/0x90 [ 69.822351][ T6254] invoke_syscall+0x98/0x244 [ 69.822360][ T6254] el0_svc_common+0xec/0x23c [ 69.822370][ T6254] do_el0_svc+0x4c/0x5c [ 69.822379][ T6254] el0_svc+0x64/0x260 [ 69.822387][ T6254] el0t_64_sync_handler+0x48/0x148 [ 69.822394][ T6254] el0t_64_sync+0x198/0x19c [ 69.935810][ T6255] syzkaller0: entered promiscuous mode [ 69.935846][ T6255] syzkaller0: entered allmulticast mode [ 70.257712][ T6259] random: crng reseeded on system resumption [ 70.435553][ T6280] loop5: detected capacity change from 0 to 512 [ 70.458225][ T6280] EXT4-fs error (device loop5): ext4_ext_check_inode:521: inode #4: comm syz.5.288: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 70.458271][ T6280] loop5: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 70.458649][ T6280] EXT4-fs error (device loop5): ext4_quota_enable:7228: comm syz.5.288: Bad quota inode: 4, type: 1 [ 70.458668][ T6280] loop5: lost filesystem error report for type 5 error -117 [ 70.459098][ T6280] EXT4-fs warning (device loop5): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 70.460192][ T6280] EXT4-fs (loop5): mount failed [ 70.580671][ T6282] netlink: 8 bytes leftover after parsing attributes in process `syz.1.287'. [ 70.624745][ T6290] FAULT_INJECTION: forcing a failure. [ 70.624745][ T6290] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 70.624774][ T6290] CPU: 1 UID: 0 PID: 6290 Comm: syz.2.289 Tainted: G L syzkaller #0 PREEMPT [ 70.624790][ T6290] Tainted: [L]=SOFTLOCKUP [ 70.624794][ T6290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 70.624800][ T6290] Call trace: [ 70.624804][ T6290] show_stack+0x2c/0x3c (C) [ 70.624823][ T6290] __dump_stack+0x30/0x40 [ 70.624835][ T6290] dump_stack_lvl+0xd8/0x12c [ 70.624845][ T6290] dump_stack+0x1c/0x28 [ 70.624854][ T6290] should_fail_ex+0x41c/0x590 [ 70.624864][ T6290] should_fail+0x14/0x24 [ 70.624872][ T6290] should_fail_usercopy+0x20/0x30 [ 70.624881][ T6290] simple_read_from_buffer+0xc4/0x238 [ 70.624891][ T6290] proc_fail_nth_read+0x1a8/0x248 [ 70.624898][ T6290] vfs_read+0x230/0x8c8 [ 70.624910][ T6290] ksys_read+0x12c/0x228 [ 70.624919][ T6290] __arm64_sys_read+0x7c/0x90 [ 70.624928][ T6290] invoke_syscall+0x98/0x244 [ 70.624938][ T6290] el0_svc_common+0xec/0x23c [ 70.624947][ T6290] do_el0_svc+0x4c/0x5c [ 70.624956][ T6290] el0_svc+0x64/0x260 [ 70.624964][ T6290] el0t_64_sync_handler+0x48/0x148 [ 70.624972][ T6290] el0t_64_sync+0x198/0x19c [ 70.694349][ T6294] loop2: detected capacity change from 0 to 1024 [ 70.702047][ T6293] netlink: 'syz.1.290': attribute type 39 has an invalid length. [ 70.704624][ T6293] hsr_slave_0: left promiscuous mode [ 70.706159][ T6293] hsr_slave_1: left promiscuous mode [ 70.719349][ T6294] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.798538][ T6302] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 70.798576][ T6302] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 70.798615][ T6302] overlayfs: conflicting lowerdir path [ 70.806824][ T30] audit: type=1326 audit(70.800:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6301 comm="syz.1.293" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ad77b68 code=0x7ffc0000 [ 70.808603][ T30] audit: type=1326 audit(70.800:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6301 comm="syz.1.293" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ad77b68 code=0x7ffc0000 [ 70.808800][ T30] audit: type=1326 audit(70.800:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6301 comm="syz.1.293" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ad77b68 code=0x7ffc0000 [ 70.808878][ T30] audit: type=1326 audit(70.800:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6301 comm="syz.1.293" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ad77b68 code=0x7ffc0000 [ 70.808943][ T30] audit: type=1326 audit(70.800:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6301 comm="syz.1.293" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=226 compat=0 ip=0xffff9ad77b68 code=0x7ffc0000 [ 70.809097][ T30] audit: type=1326 audit(70.800:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6301 comm="syz.1.293" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ad77b68 code=0x7ffc0000 [ 70.809165][ T30] audit: type=1326 audit(70.800:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6301 comm="syz.1.293" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ad77b68 code=0x7ffc0000 [ 70.809445][ T30] audit: type=1326 audit(70.800:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6301 comm="syz.1.293" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ad77b68 code=0x7ffc0000 [ 70.809521][ T30] audit: type=1326 audit(70.800:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6301 comm="syz.1.293" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=219 compat=0 ip=0xffff9ad77b68 code=0x7ffc0000 [ 70.809596][ T30] audit: type=1326 audit(70.800:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6301 comm="syz.1.293" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ad77b68 code=0x7ffc0000 [ 70.840923][ T6304] netlink: zone id is out of range [ 70.840934][ T6304] netlink: zone id is out of range [ 70.945911][ T6305] overlay: ./file1 is not a directory [ 71.085294][ T6298] loop0: detected capacity change from 0 to 8 [ 71.097921][ T6309] loop1: detected capacity change from 0 to 512 [ 71.100121][ T6309] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 71.105307][ T6309] EXT4-fs (loop1): 1 truncate cleaned up [ 71.107887][ T6309] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.122122][ T6309] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.295: invalid indirect mapped block 4294901760 (level 0) [ 71.124465][ T6309] EXT4-fs (loop1): Remounting filesystem read-only [ 71.574172][ T6314] netlink: 44 bytes leftover after parsing attributes in process `syz.5.296'. [ 71.624011][ T4706] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.652128][ T6322] loop3: detected capacity change from 0 to 512 [ 71.670066][ T6326] warning: `syz.2.299' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 71.677108][ T6322] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.710854][ T6330] loop2: detected capacity change from 0 to 256 [ 71.725851][ T6330] FAT-fs (loop2): Directory bread(block 64) failed [ 71.725879][ T6330] FAT-fs (loop2): Directory bread(block 65) failed [ 71.725908][ T6330] FAT-fs (loop2): Directory bread(block 66) failed [ 71.725925][ T6330] FAT-fs (loop2): Directory bread(block 67) failed [ 71.725951][ T6330] FAT-fs (loop2): Directory bread(block 68) failed [ 71.725965][ T6330] FAT-fs (loop2): Directory bread(block 69) failed [ 71.725991][ T6330] FAT-fs (loop2): Directory bread(block 70) failed [ 71.726005][ T6330] FAT-fs (loop2): Directory bread(block 71) failed [ 71.726029][ T6330] FAT-fs (loop2): Directory bread(block 72) failed [ 71.726043][ T6330] FAT-fs (loop2): Directory bread(block 73) failed [ 71.748053][ T6328] netlink: 60 bytes leftover after parsing attributes in process `syz.5.301'. [ 71.799608][ T4708] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.877369][ T6350] loop3: detected capacity change from 0 to 2048 [ 71.916218][ T6350] loop3: AHDI p2 p3 [ 71.916332][ T6350] loop3: p2 size 4076863487 extends beyond EOD, truncated [ 72.010750][ T6361] loop5: detected capacity change from 0 to 4096 [ 72.032861][ T6361] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.343225][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.439218][ T6369] loop2: detected capacity change from 0 to 512 [ 72.446031][ T6369] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 72.467961][ T5895] udevd[5895]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 72.473227][ T6364] EXT4-fs warning (device loop2): dx_probe:837: inode #2: comm syz.2.313: Unimplemented hash flags: 0x0001 [ 72.476215][ T6364] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.313: Corrupt directory, running e2fsck is recommended [ 72.478713][ T6364] EXT4-fs error (device loop2): ext4_readdir:265: inode #2: block 3: comm syz.2.313: path /56/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=196612, size=1024 fake=0 [ 72.796532][ T5888] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.818034][ T6372] loop3: detected capacity change from 0 to 512 [ 72.858801][ T6382] loop5: detected capacity change from 0 to 512 [ 72.879404][ T6382] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.993292][ T5888] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.021863][ T4706] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.068292][ T6397] loop5: detected capacity change from 0 to 1024 [ 73.070088][ T6397] ext4: Bad value for 'stripe' [ 73.148029][ T6405] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.492958][ T6412] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.533461][ T4708] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.612954][ T6429] netlink: 32 bytes leftover after parsing attributes in process `syz.3.327'. [ 73.630535][ T6428] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.736862][ T4707] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.999909][ T5888] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.424555][ T6435] overlayfs: statfs failed on './file0' [ 74.480622][ T6482] netlink: 400 bytes leftover after parsing attributes in process `syz.5.341'. [ 74.509764][ T6483] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.537589][ T6490] EXT4-fs: Ignoring removed bh option [ 74.584478][ T6490] EXT4-fs warning (device loop3): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop3. [ 74.621492][ T4706] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.723531][ T6513] netlink: 'syz.3.350': attribute type 11 has an invalid length. [ 74.723561][ T6513] netlink: 36 bytes leftover after parsing attributes in process `syz.3.350'. [ 74.743751][ T6518] vfat: Unknown parameter 'ÿÿ01777777777777777777777ÿÿÿÿ' [ 74.752486][ T6518] 9p: Bad value for 'rfdno' [ 74.786652][ T6518] x_tables: duplicate underflow at hook 1 [ 74.835576][ T6524] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 74.835607][ T6524] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 74.839781][ T6523] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 74.842209][ T6524] EXT4-fs error (device loop5): __ext4_get_inode_loc:4885: comm syz.5.353: Invalid inode table block 1 in block_group 0 [ 74.844495][ T6524] loop5: lost filesystem error report for type 5 error -117 [ 74.844873][ T6524] EXT4-fs (loop5): Remounting filesystem read-only [ 74.844936][ T6524] EXT4-fs (loop5): get root inode failed [ 74.844955][ T6524] EXT4-fs (loop5): mount failed [ 74.963182][ T4707] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 74.969873][ T6535] netlink: 400 bytes leftover after parsing attributes in process `syz.1.356'. [ 75.010180][ T6537] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.307016][ T6541] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 75.340011][ T5888] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.466850][ T6561] netlink: zone id is out of range [ 75.466879][ T6561] netlink: zone id is out of range [ 75.490130][ T6564] EXT4-fs (loop0): Can't support bigalloc feature without extents feature [ 75.490130][ T6564] [ 75.490169][ T6564] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 75.499291][ T6564] netlink: 'syz.0.366': attribute type 21 has an invalid length. [ 75.559941][ T6572] netlink: 400 bytes leftover after parsing attributes in process `syz.5.369'. [ 76.145102][ T6594] set_capacity_and_notify: 11 callbacks suppressed [ 76.145137][ T6594] loop5: detected capacity change from 0 to 512 [ 76.278152][ T6611] syzkaller0: entered promiscuous mode [ 76.278188][ T6611] syzkaller0: entered allmulticast mode [ 76.292797][ T6613] syzkaller0: entered promiscuous mode [ 76.292830][ T6613] syzkaller0: entered allmulticast mode [ 76.345575][ T6604] loop5: detected capacity change from 0 to 4096 [ 76.350656][ T6604] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.351895][ T6604] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.548252][ T6628] loop5: detected capacity change from 0 to 512 [ 76.627827][ T6630] loop2: detected capacity change from 0 to 512 [ 76.636014][ T6628] EXT4-fs: Ignoring removed mblk_io_submit option [ 77.546591][ T6633] loop0: detected capacity change from 0 to 128 [ 77.549251][ T6628] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 77.551852][ T6628] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842e028, mo2=0002] [ 77.551905][ T6628] System zones: 1-12 [ 77.552002][ T6628] EXT4-fs (loop5): orphan cleanup on readonly fs [ 77.561090][ T6628] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.387: bg 0: block 361: padding at end of block bitmap is not set [ 77.564355][ T6628] loop5: lost filesystem error report for type 5 error -117 [ 77.568147][ T6628] EXT4-fs (loop5): Remounting filesystem read-only [ 77.571848][ T6628] EXT4-fs (loop5): 1 truncate cleaned up [ 77.573383][ T6628] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 77.599134][ T6625] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 77.619085][ T5888] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 78.398840][ T6664] syzkaller0: entered promiscuous mode [ 78.400077][ T6664] syzkaller0: entered allmulticast mode [ 78.554145][ T6665] loop0: detected capacity change from 0 to 8192 [ 78.568025][ T6667] loop1: detected capacity change from 0 to 512 [ 78.570172][ T6667] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 78.572245][ T6667] EXT4-fs (loop1): ea_inode feature is not supported for Hurd [ 78.621038][ T6672] netlink: zone id is out of range [ 78.622097][ T6672] netlink: zone id is out of range [ 78.675681][ T6678] loop1: detected capacity change from 0 to 512 [ 78.680725][ T6678] EXT4-fs (loop1): Test dummy encryption mode enabled [ 78.714483][ T6678] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.401: inode has both inline data and extents flags [ 78.714511][ T6678] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 78.717338][ T6678] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.401: couldn't read orphan inode 15 (err -117) [ 78.717373][ T6678] loop1: lost filesystem error report for type 5 error -117 [ 78.721999][ T6678] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.758764][ T6657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.393'. [ 78.787859][ T6678] macsec1: entered promiscuous mode [ 78.798688][ T6685] loop5: detected capacity change from 0 to 512 [ 78.802070][ T6685] EXT4-fs: Ignoring removed orlov option [ 78.804385][ T6685] EXT4-fs (loop5): filesystem is read-only [ 78.805616][ T6685] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 78.805682][ T6685] EXT4-fs (loop5): can't mount with journal_async_commit, fs mounted w/o journal [ 78.882110][ T6688] netlink: 8 bytes leftover after parsing attributes in process `syz.5.404'. [ 78.882140][ T6688] netlink: 8 bytes leftover after parsing attributes in process `syz.5.404'. [ 78.960808][ T6708] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 79.048403][ T6678] xt_ecn: cannot match TCP bits for non-tcp packets [ 79.048834][ T6678] loop5: detected capacity change from 0 to 7 [ 79.051826][ T6678] Dev loop5: unable to read RDB block 7 [ 79.052475][ T6678] loop5: unable to read partition table [ 79.052553][ T6678] loop5: partition table beyond EOD, truncated [ 79.052573][ T6678] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 79.098756][ T4339] Dev loop5: unable to read RDB block 7 [ 79.098788][ T4339] loop5: unable to read partition table [ 79.098840][ T4339] loop5: partition table beyond EOD, truncated [ 79.166869][ T4339] Dev loop5: unable to read RDB block 7 [ 79.166897][ T4339] loop5: unable to read partition table [ 79.167772][ T4339] loop5: partition table beyond EOD, truncated [ 79.380971][ T6766] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.381504][ T6766] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.382153][ T6766] bridge0: entered allmulticast mode [ 79.447887][ T6770] bridge_slave_1: left allmulticast mode [ 79.447950][ T6770] bridge_slave_1: left promiscuous mode [ 79.448642][ T6770] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.471576][ T6770] bridge_slave_0: left allmulticast mode [ 79.472861][ T6770] bridge_slave_0: left promiscuous mode [ 79.472991][ T6770] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.579153][ T4339] Dev loop5: unable to read RDB block 7 [ 79.579183][ T4339] loop5: unable to read partition table [ 79.579246][ T4339] loop5: partition table beyond EOD, truncated [ 79.630216][ T4339] Dev loop5: unable to read RDB block 7 [ 79.630249][ T4339] loop5: unable to read partition table [ 79.630301][ T4339] loop5: partition table beyond EOD, truncated [ 79.775567][ T4339] Dev loop5: unable to read RDB block 7 [ 79.775603][ T4339] loop5: unable to read partition table [ 79.775661][ T4339] loop5: partition table beyond EOD, truncated [ 79.792478][ T4339] Dev loop5: unable to read RDB block 7 [ 79.792507][ T4339] loop5: unable to read partition table [ 79.792840][ T4339] loop5: partition table beyond EOD, truncated [ 79.913362][ T4339] Dev loop5: unable to read RDB block 7 [ 79.913393][ T4339] loop5: unable to read partition table [ 79.913465][ T4339] loop5: partition table beyond EOD, truncated [ 79.985409][ T4339] Dev loop5: unable to read RDB block 7 [ 79.985442][ T4339] loop5: unable to read partition table [ 79.985546][ T4339] loop5: partition table beyond EOD, truncated [ 80.061380][ T4339] Dev loop5: unable to read RDB block 7 [ 80.061409][ T4339] loop5: unable to read partition table [ 80.061465][ T4339] loop5: partition table beyond EOD, truncated [ 80.079147][ T4339] Dev loop5: unable to read RDB block 7 [ 80.080249][ T4339] loop5: unable to read partition table [ 80.081595][ T4339] loop5: partition table beyond EOD, truncated [ 80.196630][ T6890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.199483][ T6890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.207756][ T6886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.209535][ T6886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.243312][ T6901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.243507][ T6901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.368673][ T4929] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 81.368713][ T4929] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 81.368724][ T4929] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 81.368733][ T4929] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 81.368741][ T4929] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 81.368749][ T4929] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 81.368757][ T4929] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 81.368765][ T4929] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 81.368772][ T4929] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 81.368780][ T4929] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 81.375719][ T4929] hid-generic 0006:0008:0001.0001: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 81.406381][ T6905] xt_CT: You must specify a L4 protocol and not use inversions on it [ 81.426266][ T6909] fido_id[6909]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 81.431559][ T6911] loop2: detected capacity change from 0 to 256 [ 81.457845][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.510370][ T6916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.512255][ T6916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.512775][ T6915] tracefs: Invalid gid '0x00000000ffffffff' [ 82.079836][ T6922] loop5: detected capacity change from 0 to 512 [ 82.097444][ T6922] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.163537][ T5888] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.328899][ T6937] loop3: detected capacity change from 0 to 8192 [ 82.404282][ T6944] loop0: detected capacity change from 0 to 512 [ 82.515690][ T6944] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 82.526340][ T6946] netlink: 180 bytes leftover after parsing attributes in process `syz.1.470'. [ 82.537615][ T6944] EXT4-fs (loop0): 1 truncate cleaned up [ 82.538105][ T6944] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.547120][ T6948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.547311][ T6948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.550264][ T6944] EXT4-fs (loop0): shut down requested (1) [ 82.817722][ T4707] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.951909][ T6966] loop2: detected capacity change from 0 to 512 [ 82.957948][ T6966] EXT4-fs: Ignoring removed nobh option [ 82.961613][ T6966] EXT4-fs (loop2): orphan cleanup on readonly fs [ 82.965586][ T6966] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #11: block 1: comm syz.2.478: lblock 0 mapped to illegal pblock 1 (length 1) [ 82.965630][ T6966] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 82.967735][ T6966] EXT4-fs (loop2): Remounting filesystem read-only [ 82.967879][ T6966] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 82.967891][ T6966] EXT4-fs warning (device loop2): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 82.967924][ T6966] EXT4-fs (loop2): 1 orphan inode deleted [ 82.968383][ T6966] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 82.993824][ T4706] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.015008][ T6970] loop2: detected capacity change from 0 to 256 [ 83.021371][ T6970] FAT-fs (loop2): Directory bread(block 64) failed [ 83.021414][ T6970] FAT-fs (loop2): Directory bread(block 65) failed [ 83.021445][ T6970] FAT-fs (loop2): Directory bread(block 66) failed [ 83.021463][ T6970] FAT-fs (loop2): Directory bread(block 67) failed [ 83.021490][ T6970] FAT-fs (loop2): Directory bread(block 68) failed [ 83.021505][ T6970] FAT-fs (loop2): Directory bread(block 69) failed [ 83.021533][ T6970] FAT-fs (loop2): Directory bread(block 70) failed [ 83.021547][ T6970] FAT-fs (loop2): Directory bread(block 71) failed [ 83.021573][ T6970] FAT-fs (loop2): Directory bread(block 72) failed [ 83.021587][ T6970] FAT-fs (loop2): Directory bread(block 73) failed [ 83.148883][ T6974] loop3: detected capacity change from 0 to 512 [ 83.156580][ T6974] [ 83.157007][ T6974] ====================================================== [ 83.158172][ T6974] WARNING: possible circular locking dependency detected [ 83.159331][ T6974] syzkaller #0 Tainted: G L [ 83.160281][ T6974] ------------------------------------------------------ [ 83.161450][ T6974] syz.3.480/6974 is trying to acquire lock: [ 83.162539][ T6974] ffff0000dd898c18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x170/0x2dc [ 83.164362][ T6974] [ 83.164362][ T6974] but task is already holding lock: [ 83.165676][ T6974] ffff0000e133c228 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x32c/0x828 [ 83.167403][ T6974] [ 83.167403][ T6974] which lock already depends on the new lock. [ 83.167403][ T6974] [ 83.169230][ T6974] [ 83.169230][ T6974] the existing dependency chain (in reverse order) is: [ 83.170767][ T6974] [ 83.170767][ T6974] -> #2 (&ei->xattr_sem){++++}-{4:4}: [ 83.172042][ T6974] down_write+0x50/0xc0 [ 83.172867][ T6974] ext4_xattr_set_handle+0x134/0xde4 [ 83.173829][ T6974] ext4_initxattrs+0xa8/0x11c [ 83.174702][ T6974] security_inode_init_security+0x244/0x370 [ 83.175819][ T6974] ext4_init_security+0x44/0x58 [ 83.176787][ T6974] __ext4_new_inode+0x286c/0x3308 [ 83.177793][ T6974] ext4_create+0x1f4/0x408 [ 83.178664][ T6974] path_openat+0x1280/0x2b88 [ 83.179577][ T6974] do_file_open+0x1c8/0x2e8 [ 83.180486][ T6974] do_sys_openat2+0x114/0x1e8 [ 83.181417][ T6974] do_sys_open+0xac/0xdc [ 83.182234][ T6974] __arm64_sys_openat+0xa0/0xbc [ 83.183173][ T6974] invoke_syscall+0x98/0x244 [ 83.184150][ T6974] el0_svc_common+0xec/0x23c [ 83.185106][ T6974] do_el0_svc+0x4c/0x5c [ 83.185922][ T6974] el0_svc+0x64/0x260 [ 83.186761][ T6974] el0t_64_sync_handler+0x48/0x148 [ 83.187770][ T6974] el0t_64_sync+0x198/0x19c [ 83.188643][ T6974] [ 83.188643][ T6974] -> #1 (jbd2_handle){++++}-{0:0}: [ 83.189990][ T6974] wait_transaction_locked+0x17c/0x228 [ 83.190984][ T6974] start_this_handle+0x57c/0x1bcc [ 83.191982][ T6974] jbd2__journal_start+0x260/0x534 [ 83.192979][ T6974] __ext4_journal_start_sb+0x228/0x948 [ 83.193993][ T6974] ext4_do_writepages+0xabc/0x3bc0 [ 83.195144][ T6974] ext4_writepages+0x198/0x2dc [ 83.196064][ T6974] do_writepages+0x284/0x47c [ 83.197082][ T6974] __writeback_single_inode+0x140/0x1880 [ 83.198202][ T6974] writeback_sb_inodes+0x798/0x1720 [ 83.199222][ T6974] __writeback_inodes_wb+0xec/0x210 [ 83.200228][ T6974] wb_writeback+0x3d0/0x10cc [ 83.201136][ T6974] wb_workfn+0x998/0xc84 [ 83.201969][ T6974] process_scheduled_works+0x788/0x10b8 [ 83.203014][ T6974] worker_thread+0x798/0xbd0 [ 83.203930][ T6974] kthread+0x304/0x3d4 [ 83.204740][ T6974] ret_from_fork+0x10/0x20 [ 83.205642][ T6974] [ 83.205642][ T6974] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 83.207177][ T6974] __lock_acquire+0x17c0/0x2ebc [ 83.208143][ T6974] lock_acquire+0x140/0x364 [ 83.209054][ T6974] percpu_down_read_internal+0x5c/0x294 [ 83.210233][ T6974] ext4_writepages+0x170/0x2dc [ 83.211202][ T6974] do_writepages+0x284/0x47c [ 83.212123][ T6974] __writeback_single_inode+0x140/0x1880 [ 83.213233][ T6974] writeback_single_inode+0x3b8/0xaa4 [ 83.214323][ T6974] write_inode_now+0x170/0x208 [ 83.215217][ T6974] iput+0x6e8/0xbc0 [ 83.215929][ T6974] ext4_xattr_block_set+0x1b1c/0x21e8 [ 83.216971][ T6974] ext4_expand_extra_isize_ea+0xaf4/0x1384 [ 83.218041][ T6974] __ext4_expand_extra_isize+0x2a4/0x378 [ 83.219104][ T6974] __ext4_mark_inode_dirty+0x394/0x828 [ 83.220130][ T6974] ext4_evict_inode+0x798/0xfb8 [ 83.221033][ T6974] evict+0x4c0/0x74c [ 83.221841][ T6974] iput+0x884/0xbc0 [ 83.222656][ T6974] ext4_process_orphan+0x24c/0x2c0 [ 83.223753][ T6974] ext4_orphan_cleanup+0x7d4/0xd20 [ 83.224857][ T6974] ext4_fill_super+0x4628/0x4e14 [ 83.225923][ T6974] get_tree_bdev_flags+0x388/0x43c [ 83.226997][ T6974] get_tree_bdev+0x2c/0x3c [ 83.227958][ T6974] ext4_get_tree+0x28/0x38 [ 83.228837][ T6974] vfs_get_tree+0x90/0x28c [ 83.229692][ T6974] fc_mount+0x24/0xac [ 83.230445][ T6974] do_new_mount+0x2a4/0x538 [ 83.231438][ T6974] path_mount+0x5f0/0xa88 [ 83.232308][ T6974] do_mount+0xe8/0x148 [ 83.233183][ T6974] __arm64_sys_mount+0x334/0x380 [ 83.234180][ T6974] invoke_syscall+0x98/0x244 [ 83.235157][ T6974] el0_svc_common+0xec/0x23c [ 83.236047][ T6974] do_el0_svc+0x4c/0x5c [ 83.236847][ T6974] el0_svc+0x64/0x260 [ 83.237666][ T6974] el0t_64_sync_handler+0x48/0x148 [ 83.238612][ T6974] el0t_64_sync+0x198/0x19c [ 83.239491][ T6974] [ 83.239491][ T6974] other info that might help us debug this: [ 83.239491][ T6974] [ 83.241229][ T6974] Chain exists of: [ 83.241229][ T6974] &sbi->s_writepages_rwsem --> jbd2_handle --> &ei->xattr_sem [ 83.241229][ T6974] [ 83.243546][ T6974] Possible unsafe locking scenario: [ 83.243546][ T6974] [ 83.244820][ T6974] CPU0 CPU1 [ 83.245821][ T6974] ---- ---- [ 83.246764][ T6974] lock(&ei->xattr_sem); [ 83.247487][ T6974] lock(jbd2_handle); [ 83.248621][ T6974] lock(&ei->xattr_sem); [ 83.249979][ T6974] rlock(&sbi->s_writepages_rwsem); [ 83.250929][ T6974] [ 83.250929][ T6974] *** DEADLOCK *** [ 83.250929][ T6974] [ 83.252330][ T6974] 3 locks held by syz.3.480/6974: [ 83.253223][ T6974] #0: ffff0000dd89a0d8 (&type->s_umount_key#27/1){+.+.}-{4:4}, at: alloc_super+0x220/0x8f4 [ 83.255238][ T6974] #1: ffff0000dd89a600 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x360/0xfb8 [ 83.256846][ T6974] #2: ffff0000e133c228 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x32c/0x828 [ 83.258666][ T6974] [ 83.258666][ T6974] stack backtrace: [ 83.259693][ T6974] CPU: 1 UID: 0 PID: 6974 Comm: syz.3.480 Tainted: G L syzkaller #0 PREEMPT [ 83.261485][ T6974] Tainted: [L]=SOFTLOCKUP [ 83.262236][ T6974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 83.264059][ T6974] Call trace: [ 83.264629][ T6974] show_stack+0x2c/0x3c (C) [ 83.265449][ T6974] __dump_stack+0x30/0x40 [ 83.266195][ T6974] dump_stack_lvl+0xd8/0x12c [ 83.266923][ T6974] dump_stack+0x1c/0x28 [ 83.267575][ T6974] print_circular_bug+0x328/0x330 [ 83.268487][ T6974] check_noncircular+0x158/0x174 [ 83.269324][ T6974] __lock_acquire+0x17c0/0x2ebc [ 83.270155][ T6974] lock_acquire+0x140/0x364 [ 83.270929][ T6974] percpu_down_read_internal+0x5c/0x294 [ 83.271872][ T6974] ext4_writepages+0x170/0x2dc [ 83.272739][ T6974] do_writepages+0x284/0x47c [ 83.273543][ T6974] __writeback_single_inode+0x140/0x1880 [ 83.274507][ T6974] writeback_single_inode+0x3b8/0xaa4 [ 83.275411][ T6974] write_inode_now+0x170/0x208 [ 83.276237][ T6974] iput+0x6e8/0xbc0 [ 83.276902][ T6974] ext4_xattr_block_set+0x1b1c/0x21e8 [ 83.277854][ T6974] ext4_expand_extra_isize_ea+0xaf4/0x1384 [ 83.278834][ T6974] __ext4_expand_extra_isize+0x2a4/0x378 [ 83.279831][ T6974] __ext4_mark_inode_dirty+0x394/0x828 [ 83.280769][ T6974] ext4_evict_inode+0x798/0xfb8 [ 83.281644][ T6974] evict+0x4c0/0x74c [ 83.282351][ T6974] iput+0x884/0xbc0 [ 83.283018][ T6974] ext4_process_orphan+0x24c/0x2c0 [ 83.283941][ T6974] ext4_orphan_cleanup+0x7d4/0xd20 [ 83.284834][ T6974] ext4_fill_super+0x4628/0x4e14 [ 83.285655][ T6974] get_tree_bdev_flags+0x388/0x43c [ 83.286555][ T6974] get_tree_bdev+0x2c/0x3c [ 83.287364][ T6974] ext4_get_tree+0x28/0x38 [ 83.288182][ T6974] vfs_get_tree+0x90/0x28c [ 83.288980][ T6974] fc_mount+0x24/0xac [ 83.289768][ T6974] do_new_mount+0x2a4/0x538 [ 83.290589][ T6974] path_mount+0x5f0/0xa88 [ 83.291380][ T6974] do_mount+0xe8/0x148 [ 83.292122][ T6974] __arm64_sys_mount+0x334/0x380 [ 83.292975][ T6974] invoke_syscall+0x98/0x244 [ 83.293774][ T6974] el0_svc_common+0xec/0x23c [ 83.294636][ T6974] do_el0_svc+0x4c/0x5c [ 83.295349][ T6974] el0_svc+0x64/0x260 [ 83.296068][ T6974] el0t_64_sync_handler+0x48/0x148 [ 83.296942][ T6974] el0t_64_sync+0x198/0x19c [ 83.495763][ T6974] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.480: iget: bad extra_isize 58 (inode size 256) [ 83.497735][ T6974] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 83.497928][ T6974] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.480: error while reading EA inode 11 err=-117 [ 83.497944][ T6974] loop3: lost filesystem error report for type 5 error -117 [ 83.498128][ T6974] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 83.498176][ T6974] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.480: iget: bad extra_isize 58 (inode size 256) [ 83.498190][ T6974] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 83.498305][ T6974] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.480: error while reading EA inode 11 err=-117 [ 83.498316][ T6974] loop3: lost filesystem error report for type 5 error -117 [ 83.498419][ T6974] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #18: comm syz.3.480: iget: bad extra_isize 58 (inode size 256) [ 83.498431][ T6974] loop3: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 83.498537][ T6974] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.480: error while reading EA inode 18 err=-117 [ 83.498547][ T6974] loop3: lost filesystem error report for type 5 error -117 [ 83.498668][ T6974] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #18: comm syz.3.480: iget: bad extra_isize 58 (inode size 256) [ 83.498685][ T6974] loop3: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 83.498792][ T6974] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.480: error while reading EA inode 18 err=-117 [ 83.498802][ T6974] loop3: lost filesystem error report for type 5 error -117 [ 83.498938][ T6974] EXT4-fs (loop3): 1 orphan inode deleted [ 83.499165][ T6974] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.508360][ T6983] loop5: detected capacity change from 0 to 256 [ 83.539294][ T4708] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.