last executing test programs: 1m7.595708174s ago: executing program 1 (id=2970): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000040)="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", 0x119}], 0x1}, 0x240009bd) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x4008014) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c00000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 1m6.55668261s ago: executing program 1 (id=2976): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x6e23, 0x7ffe, @mcast2, 0x9}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x32) r2 = timerfd_create(0x0, 0x0) timerfd_create(0x0, 0x80000) timerfd_settime(r2, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r6 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r2, &(0x7f0000000100)) clock_adjtime(0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0xc8d0, &(0x7f0000000280)=ANY=[], 0x1, 0x314, &(0x7f0000000600)="$eJzs3M9rE1sUwPGTNEnTlHayeLzHE6QX3ehmaONeDNKCNGCpjfgDxGkz0ZAxKZlQiYhtV25ciH+Ei9JldwXtP9CNO1du3HUjuLALcSQzkx9tE1vTpLH2+4Eyh7n3zNybacK5AzM7d14/yWdtPWuUJRhVEhAR2RWJS1BqAv426MYRabYil4e/fjx/6+696WQqNTmr1FRy7kpCKTU69u7p8yG/2+agbMcf7HxJfN7+d/v/nR9zj3O2ytmqUCwrQ80XP5WNectUmZyd15WasUzDNlWuYJslr91ZFrFMlbWKi4sVZRQyI7HFkmnbyihUVN6sqHJRlUsVZTwycgWl67oaiQkOk16bnTWSHSYvdHkw6JFSKWkMiMjQgZb0Wl8GBAAA+sqv/+vVfrBa0ndS/4emk6mQv7NR/69f2CoP394Y9ev/zUi1/hdpqv8fNo5lqkywXv9HRaRR/xe99UG36/+DFdHp9mrvxRHHqYeRVv2PVf/jlKjW/zH/++tavb8+7gbU/wAAAAAAAAAAAAAAAAAAAAAAnAa7jqM5jqN52wF/r6MNikjUfYLEa+/zMNEje69/44/rfzY0XtwRGhWxXi6ll9Le1u+wJSKWmDIumnx3/x981TiyotxOqiou761lP395Ke39liSzknPzJ0ST+P58x5m6kZqcUJ69+WGJNecnRJN/Wucn9ueHq9uIXLrYlK+LJh8WpCiWZPwn42r5LyaUun4zte/8Q24/AAAAAAD+Brqqq6/fB5vb9YPt3vrYa/fW1yFpfX/AW1+Pt1zfh+RcqF+zBgAAAADgbLErz/KGZZmlHgWrItLjU7QJajM8albtBblt+gQk0K6pC0Ht5J2lV8fWtfGEj/SJBTsa6ljkNy9Ky6B226hdH5np5MiOJnLcz/C/N2+//bqPd2dM5CgHvLoRPWSmnQaRw2YaPrEfIAAAAAAnplH01/Zc6++AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4g07iVXz9niMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwp/gZAAD//8mG/kg=") openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) 1m4.444969532s ago: executing program 1 (id=2979): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x1, 0x71bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x7afc5, 0xc0f}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}]}, 0x40}, 0x1, 0x0, 0x0, 0x50}, 0x40800) 1m4.175592582s ago: executing program 1 (id=2980): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000d00)={[{@grpjquota}]}, 0x3, 0x5ee, &(0x7f0000000280)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000880)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrsx\xa0\xd4\x8fjquota=\xb9\xc4\xd7A%S\n\x10i\xcf\x84\x93v\x02\xe4y}\xcbV\xbb\xc1\xd5\x06\v\xdc\xd8\\\xc5\xb3\ag\xa6u\xbe\xf4)\xae\xb6\xfe*\x9d?\xb2C\xf0<\xc9\x820M\x92Tzs\xba\xca\x9d\xad\x17\x1b\x84\xbc\xb3\xd8\xad\f\x17\xbe\x17\xb5}.H\x90\xc7\x0e\xb3y\xd0\xc3\xf0c\x04\xe6\fzZ\x02\xfd_W\x9a\xa7\x81\xfcr\xe9B\x95\x13\x9f\x10\'5\xc0\xf9\xb5\xe1\x15Y\x9b$\xa43\xe7F>\xb7\xa1\xb7zw\xac\xc8\x12\x94\xa7\xe5\xcb\xc0g\x865\\\x9e\xca\x8e\xe2\t\xb7\b\x00\x00\x00\x00\x00\x00\x00i7b\xad\x14oVT\xcb\xea\xd3\xad\xa9\x16\xd5\xb2\xa0 \x13^\xf6>\xd4\x8bZzl\x88\xddn', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xdc\xf2\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x113) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file2\x00', 0x642842, 0x2) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f0000000000)={0x1, 0x2}) r3 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, 0x0, &(0x7f0000000040)) 1m3.439899717s ago: executing program 1 (id=2984): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21c91c, &(0x7f0000000440)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@grpjquota}, {@noinit_itable}, {@quota}, {@debug}, {@sysvgroups}, {@resgid, 0x32}]}, 0x1, 0x4f1, &(0x7f0000000b00)="$eJzs3V9rXGkZAPDnTDK1f1KTohe1YC22khTtTNLYNnhRFURBKKj1vsZkEkImmZCZtE0omuIHEERU8MorbwQ/gCD9CCIU9F5UlGW33b1Y2N3OMmdm0mw60ySb+bOb+f3gzLznnXPmed4zzJnznvNyJoCBdSkiLkfEi2q1ejUiRhv1mcYU2/WpttzzZ4/malMS1erdN5OIpF5XW2xi13ueaax2MiJ+9L2Inyavxi1vbi3PFouF9cZ8vrKyli9vbl1bWpldLCwWVqenp27O3Jq5MTPZkXaORMTt7/z3N7/843dv//VrD/517/8TP0sa9REv29Fp9aZn023RNBwR690I1ifDaQsBAPg0aB7nfzkirsZoDKVHcwAAAMBxUv3mSLyfRFQBAACAYyuTjoFNMrnGOICRyGRyufoY3s/H6UyxVK58daG0sTpfHys7FtnMwlKxMNkYKzwW2aQ2P5WWX85f3zM/HRHnIuLXo6fS+dxcqTjf75MfAAAAMCDO7On/vzNa7//v8l7fkgMAAAA6Z6zfCQAAAABdp/8PAAAAx5/+PwAAABxrP7hzpzZVm/9/PX9/c2O5dP/afKG8nFvZmMvNldbXcoul0mJ6z76V/d6vWCqtfT1WNx7mK4VyJV/e3Lq3UtpYrdxb+shfYAMAAAA9dO5LT/6ZRMT2N06lU82JficF9MTwYRb+T/fyAHpvqN8JAH1zqN9/4FjJ9jsBoO+SfV5vO3jnb53PBQAA6I7xL7S+/j+077mB7UyPUgS6xPk/GFyu/8Pgcv0fBlc2hkJHHgbbfrcAPfr1/2r1UAkBAAAdN5JOSSYXkZ4HGIlMJpeLOJv2CbLJwlKxMBkRn42If4xmP1Obn0rXTPYdMwwAAAAAAAAAAAAAAAAAAAAAAAAA1FWrSVQBAACAYy0i878kvZt/xPjolZG95wdOJO+Ops8R8eD3d3/7cLZSWZ+q1b+1U1/5XaP+ej/OYAAAAAB7NfvpzX48AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTS82eP5ppTL+O+8e2IGGsVfzhOps8nIxsRp99OYnjXeklEDHUg/vbjiDjfKn5SSyvGGlm0in+qz/HPdCA+DLIntf3Pt1p9/zJxKX1u/f27me6hjq79/i+zs/8bahG/Vnf2gDEuPP1zvm38xxEXhlvvf5rxk1fif/9QbfzJj7e22r1W/UPEeMvfn2RnmVopX1lZy5c3t64trcwuFhYLq9PTUzdnbs3cmJnMLywVC43HljF+9cW/vHhd+0+3iT/Wtv31nK4csP0fPH347HP1YnZn9eRl/InLrT//823iZxqf/1ca5drr483ydr2828U//f3i69o/36b97T//esyJA7b/6g9/8e8DLgoA9EB5c2t5tlgsrA904Uhbo3ZY1LF8hqL/W6ODheYhY9djXf5Ya/28C/nUjsw/AVv+yIX+7ZMAAIDueLUPvEe2xwkBAAAAAAAAAAAAAAAAAADAAOrF7cT23kJgO33sxN3zAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA658MAAAD//8UQz6k=") mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x115) setrlimit(0x0, &(0x7f00000000c0)={0xffffffff, 0xffffffffffffffff}) timer_create(0x3, 0x0, &(0x7f0000000300)) syz_emit_ethernet(0x63, &(0x7f0000000500)={@local, @local, @void, {@ipv4={0x800, @generic={{0xb, 0x4, 0x1, 0x0, 0x55, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev, {[@ssrr={0x89, 0x17, 0x76, [@remote, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @local]}]}}, "95f326cdcb4700348fb30fb073259ba1d894c8782936a22241940351f63a5d49f6b05a95d6c75bec48"}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) userfaultfd(0x1) r4 = signalfd(0xffffffffffffffff, 0x0, 0x0) r5 = fspick(r4, &(0x7f0000000100)='./file0\x00', 0x1) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x3000, 0x1}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0) fgetxattr(r6, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000300)=""/47, 0x2f) flock(r5, 0x1e) socket$netlink(0x10, 0x3, 0x0) getdents(r0, &(0x7f0000000040)=""/61, 0x3d) write(0xffffffffffffffff, &(0x7f0000000340), 0x0) 1m0.272133586s ago: executing program 1 (id=2993): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000013"], 0x48) dup2(r2, r1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000001780)=""/4067, 0xfe3}], 0x1, 0x0, 0x0, 0x406}, 0x40020000) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 59.334566829s ago: executing program 32 (id=2993): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000013"], 0x48) dup2(r2, r1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000001780)=""/4067, 0xfe3}], 0x1, 0x0, 0x0, 0x406}, 0x40020000) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 32.192004587s ago: executing program 2 (id=3054): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="85010000610000005400"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000001c00), 0x12) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f00000023c0)={0x0, 'vlan1\x00', {}, 0xef}) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0xcd}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000000140)={'vlan1\x00', @random="02000000002b"}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x1000000}, 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000200)="1648", 0x2}], 0x1}, 0x850) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 31.735834143s ago: executing program 2 (id=3056): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(0x0, 0x0, 0x0, 0x0) 31.387695895s ago: executing program 2 (id=3059): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x8010) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x44f01}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x20, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 29.652861585s ago: executing program 2 (id=3063): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000100000004"], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f0000000080)={[{@bh}, {@inlinecrypt}, {@nombcache}]}, 0xff, 0x548, &(0x7f0000001300)="$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") mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) io_setup(0x8, &(0x7f0000004200)) 28.136361778s ago: executing program 2 (id=3072): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x8010) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x44f01}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x20, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 27.335761135s ago: executing program 2 (id=3075): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000180)="96bc1480bb35", 0x6}, {0x0}, {0x0}], 0x3, &(0x7f0000000340)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0x18}, 0x24008004) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x425, &(0x7f00000036c0)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x417, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x801, 0x4e20, 0x403, 0x0, @gue={{0x2, 0x0, 0x0, 0x8, 0x100, @val=0x80}, "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"}}}}}}, 0x0) 11.975775696s ago: executing program 3 (id=3119): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800}, @mpls={[], @ipv6=@gre_packet={0x8, 0x6, "cd5516", 0xf98, 0x2f, 0xff, @loopback, @private2, {[@dstopts={0x16, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x1}, @pad1, @jumbo={0xc2, 0x4, 0xdfa}, @ra={0x5, 0x2, 0x9}]}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xd21, 0x0, [], "63982a098457f988c81294fd033976e859bb1c64b372885e0aa862392a1e6c077f6ece50776b5076815c3f7764641116225c022f6666f89953bd9f53495a6f66cffb1f88c9c05a24e7e695e35682612adfa8da8f7d57c8e22f80939b31a79e624344794c32b28b956124781eb7c4174354f70cf654a10c1f8c845a25b6b32157b81b83e5afa188c7c106d1df0c2676eef96d79585705857afc1ca1264f05d65d6267596c8811f7c339a00d13c0551f12fc40e963752e282aaa784d6d3fc4cd44ccdfcd15babe6db8483b09d37a0515d345243573757b542cf9ed8b9c7cb18a2ff6b4f1c601a953d58785cc21d7b9c6fe74b92a1e60734979907c0b82031a54f71610bbeea38fcfda445209bd6eb5fcb261a75f96c1e04c4a31e6a31df654c6d73f4f775591db1fca07aef6a3cb9d7a5b4bcd795429278c7a230d5e3b6157362bfdcdf8ca410e686039532f49fbc9cf4ca6d04807b74d4d1c35eebf7ae4a0ad9d4463afd023abe536d0540e3f0a7291dce895cd114c78a4f2529ad7527147840cb5447d198715ef9175c531cba37c2f91feb55c3d825e5d58e47d89cd82281026a00ee7a4b550b8cd79e658967162a4c6b4168595999bed5807d2969586a102ed681351ac46375c3acec6b1a5f6a23abf01eb9d586433054a1a731de3e5579701ecd35f9a1dd2306d19c52cc8507819844a94638ffeead7934839ec291c9a9fcf4a1c30f1effac1adbb29caf45f93d4c236e4e566b57e5f73f9969f1cfb8decb6387d520dab27dc9cb9034fcee0d481b3500a19ecdb075e57ced48c2bb7f6199d7ed0ea5a2092d0c5147c3af6103b2c986f30c11d0504c82b7c41cf39262df633e4d0d9cd5eb0d5152fc9ebc3b35b88075860c86242ab09efdf338d395d777a104ab6e6457c9cef264f91113cb7835ea769b773e3807fae434e14187a2612e3ff8c1d3d26fddd83453e7a60e050e453f0cf7a9e64fb7d32e74e0c82893d0fc4e80a2d63b84725314e7c80f04e5a9de457e47409a64d5356e8bf29eb685818f9f3da84d04df9ecfac651ec522a0a5c45906e652cb7a0a24d2c8abbec7cce26d57ceca400eca0f6ae1034554cad7f3cac9c103380a62018246c26099609b82dd7a0a204f99f242236a7af026a1a22116131da6df1c888ff54d58945a0cb7f6b03786741d01a952fdde6dc9bf563e57df58d57a9ee4bcd6a0b60421ffe3d11643243a92b1f64acd5de0d7d86ff3def23e057db44679aadaafb07fcd3e7e1177a33c856d0b5593e6276119ed5d658d6d7d2c6dec40a0f6c08171333adcd7294edaf5b746182b4f1e9e0e8967d5d1443f55e89cfd525f5734bfab833fef44580fd8197547e4ac10fe1b3033c5c4b8dfccfebad7ed73eaf30ec1784e854d26295deaa999b618e91bb3de4cbaef0f58fe488a9f7a837c253ab5745df44dab9d5521a82e59f5509e1075870c613e2515dde73ec8a9271399a888e4eb6e3cbebd24e812914af61e0c7dd7c53f232d7ae8dabf3ecd88b3f5c5ed2296d501bcce65071b9124d053a080e9bb96d6d9bb60ef04398f04e0ccad0ce056cc3261fc9c512fe854d3faa879bde458f17c78a0c135ed1e52768278f91d4e20c49d8a31da2facbdbda18d52d5112c28a46b50a4ca1c7b5992d84d26fbc91619db945e62b018e4fef755197c81f2ba23cce2b8f6ea4ddaec1861f8c367f87b9ba145c2966b784413a29435aa8a283a5496129811ec1a8a10804d9f71de08d6d19d19237c995a80477df3663651cba4b20136616fa9189e6f38613510f440e106a8033e0c76a1ba1c8873615e65dc0312e9c835aa4ba09b9a50b51603db9055e3a40bed2966c8f6ca35bf7b7f52a81bfbadcca36d319456f32d90d88b9072d1a3465121c1e3f07a5a5e7c75d5c8c554bcdf0be3d6ef6f1acb74a81b332f2a9b0e8e6f7298732dc171915dcf20db671c5b47df77c6b76444eaa215d732a2dbbf769fc3ed02016cc8ca885c96c202fb6f719b3f8db0e37c40b2c0db586c6f5da121660d0faab172033b91194c5a38a51c03e8396e0db8fe70c457dcdfa8614ed95ae9d114b8eacb542e0042f4aac9a2c5d97c791e229a4a6a722920488c143502ea0505dfc6900d922d4d15aaaad761fefe32a6f670d226c80d73ebefb6e7489c363334614e36d2576954ffb75d4c436f8f15217b13ddbae110052560b3adbd10b2be6cf824fea3a063b3c60cfaaffc9e7123d7c1a1d23695e5850dacff5a55b6ed73ec51f0936af241acc746f164ac26bff00130211ad248f4f9d8ffe1fb037ac90ad3499f643490c2f9dead7bd13f90120aef9da7ae5104f04a3a84e2ca83eff136b60c3673ec4c677bfd0be53f10b384a5c2e157eadc2bf78811108c87f02df646acfc4c25ea97e1e7a12f08ed490937f83fb86089c5bb923081e5e967190be8365a35fa6ee8d6c598427549564597cad75271d5eec7d9a69492cbfdc817d38a6706baf85236f81813a6731dad405da75555ba99d31b6724f58a4ca663ed7bca829119b699b725bf628d5871a9a17c5918ec3b5b9c11be7fcb4dc31f45b7df10c4e7c7d68c21de83a44acffaebe811a6c5468ee43f78b430b15347db0376ce2b8a47545b0c628e13e8eb33fecb0f17b813e54c0b0921ca2aa2d1e84b4255b2deb32e0db6d2d4fed1785b3765bdfe166491407d954fffdef1781fd2791c2723442df818f470a52b4abfb5b9e78ae67f8dcdea234dcacaef79f85478ac6810c3f9d5c784d55855267a640de6d951ecacfd023a73dbbb30b60c99f2e44e23785787977ac83b8e5b475cefffb2b150836443b7be10fd5ea3c388db6f85182505cc378eb4648342b79252032b64dee927896ec9e4b79e74a2e9c8e37c12d27b4e61b3a454f06c1bd646f84e41e4754b7ff16403e09ec2a50a8b7d8c3225b9b072fc663a2d951616f03fceb2cff88cb20b915b89e30a5220e693f7a3ecc6e42feec216aca51d2ee1d1a601565bfe2f4cf26500d280c82681d46ff1ffd8a22b4757354afc852382dd509b2f2a5a2f249ea1d4c7f03e31eb61b3e503f6e91ed522cea0d4d189657c38f06382b7850a7265aaa8572befa9fb3b069aa0486ca5143d31d3f37a2fdab6a8cd0c8c414f45ed489ec0c40b15f8afb7a15a105363efd1dcdcb5a7d04bd9d8104bf3afeb376eb58dc39a62773512768c935b818764d27d354074aaf9c3e484d9ab1b4f75e754b438d88a61fa701c5f5f7ebf2a6313b7fccf072dd00bb630ed890c94d17a1274f02b748659f35cb58a31c768778a243b5b9e475827ce39eb0dbb7bc013bff18b8c0f484dd3c8ac0383ede0a6d4618ebdb0948595f86234db6c89190eb7ae270a74248d96176c573ee03a48f6ab9ba302521cc8bcf791ec3761eda783d28f484a4bccc3b05e2727e0cf948bd0666ced6974ec6dc2a9afb814ce0d4047995eb6d40acd3465762b507da4f4fd2124d60f501df933d6229e704ab65dc91a839b8c5b701344f9f7d8b62ae3e872f7af6e298a9842fb6d83e218cccb74b672c27b8ad9adcfe33146f85dd119d7ef3d7bbfbda08aecb107b85a8029832ba7de1b37414c6d63b4de32951d01bf5fc9250393fe83bcc50cd260398f5564a485f9232849ed19e96c04201a8f91fc1e3f192ec45e609878730c1dd4cb9843e5791458773ce58bdf029b1fd5df3749a17f04ab834519a091cb8fdc882d2f563b7042aa0fd65da6e81de45fed19d3500f72e1f223c0f975b296413a7c6cc35ac6814144ed70284dd20e3cc0e830beec6c69151004b501facec929ea8bcc3df7bfd45a8326656a1b807dc94c9cba1a35a4a147fb86159b03f98f4b121b387f5f769afe8780c43e9d106e34b8b36696dc8acdbb1a5c3da7a2c7588fe68d0c38f834739211f99d4e194a27c36db223f43e8f59ba69ab9a6ffc7c70c802d05dca1a0a4b71f4f0ca301625850823a7f47b6499b6582677ec5589af37b848627fd3ba7c5c456642e9ebdc5b95c0ed86222f1d060ea64c87082bc9e69f13d47be467a23801eef4563303fe5c12e58342e74214d730faabbd59ba2adc43bd94d3ca5410e4bcbe7a92e7f952892c2d7a5ca47c8ec4fa9ab5bdc7c31cae15fdf0162df75c5c94445c1498c124fa38e0349721f6f5223f08cb6918dbb6953a35fb0ac33e6a683c8cd501803101430c9ce2968f502be856a8bc01e425fea116762b817826935eb368e6128089cf818fa6b7695a28b9a87d368a2a83264b65dd65d694fac884740e904a62a689746677b6b70e6dcbdd8404d9feff63023a870cd17325d6e2017ec6e309107f952d30d1e6e3634df2bf073b60580450e82949fbb7a6a3f2aad92db449f3a2d35c78de992f810e8d53bc2d640bb39fdd722ec7b919b2f642ed93c378c121c760b5fbbd27e60c225cfe4f91758d9ea206bde0bf63db30137c7a6dccb55c31ed09b71defba8642b1e579b3da09c0527926a4ce5f6b8c6709a2092104be1dc30faad1bc88a246088fa81a159b75c318aa753139980656c4f02f75dc7e468770085ea4aac9204a0bca320cefe96ce8001a2b20c2ccd2e9251fc5e59b9c2af0b8826f8b0e1c9566634554c8261630b58ca71c064c55c2ca13243ca4ef3af9b2240a42c0f849929e4e1753d734fd991e94ff64a1483d906232834c558ba1de980064697e92a850496e2d300c96b2b6b2692ebb838ebc8bf3f22be2ad795a05b2e11c32fdf8978ea46b1d3acf2596e8cea6215a8623c16e8fac9d4785982fbf860540ddf6b"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [], "9cb82bbb8420b04b3e18039ab6d47640d4cc26b5c8c374a82f132fbe267d700067c7c42adb72172eefe9d57068edf49dd6c7f401ab9ba63bb436e2974de646d5591c91cf7bc8603c440ca20011f906adcde61356849361ab840f4a81a39f4e60d2c1f6e054b7b1b558976f6754402540cfc9325e7178a976d59ca4e00a7d6ffa8ec7f50e407ad5ab0e2d319a3dc3258b410d19415f3323e7cd533cd43e68b0a3fe3923e507ffe3f8b6105495f36b3e0ade3513c3979cde1154e5632fffa8f5a2b3adb235ac51ee010c6e894d5d526043dbbcde9d62a7ea3cf291e404c7e042"}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [0xe, 0x4, 0x0], "ec22db3010c31d9c2bbd86ae812f8d5b1d2de47362ea9a5c692c523eb47169a349ff87e25dbbb9e510b0d0af939c6b952c7ac4372ea5ca6eac4ef82fce437553aadf485f4e7f773dbd77a0b7bf234ac022d4e3ef7b49737bf8ee78bf434fd80852e44706ca74356988f89bbf2c4adfdd44d1bd99a5f2aa02c74199"}, {0x8, 0x88be, 0x4, {{0xd, 0x1, 0x24, 0x2, 0x0, 0x1, 0x1, 0xe4}, 0x1, {0x7}}}, {0x8, 0x22eb, 0x4, {{0x5, 0x2, 0x5, 0x1, 0x0, 0x2, 0x5, 0x9c}, 0x2, {0x5, 0x9, 0x3, 0x1c, 0x0, 0x1, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x2, "9107f9e9f54b5c23c42111590658d742422067aba626caa247ea757185bce297fb1d865d082702bc8028e26d25b062a6408edce3d8dff831093be540cf12bc0b657ab4b4eef3c192c2e3e21623f6b712899e567f8298f2ef3603a115f8ba73e2c0b2a39ab56606f73cb9b86eb869d24050ec9d6bc8f01b917bb355e78c387f5ce3d368601dc6bb2daac82a13c4d043c99355fbe3fc91832876d0e0d0c3eea72c8cff6f47c1ad8a5a8da6fcdc4260903fa3dfda14c70c15185345cc"}}}}}}, 0xfce) 10.282024605s ago: executing program 3 (id=3125): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, 0x0, 0x20008040) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r3) sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x34, r4, 0x405, 0x70bd2a, 0x25dfdbfb, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8008}, 0x40) sendmsg$DEVLINK_CMD_PORT_GET(r1, 0x0, 0x80) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000100)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x68, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x5}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x7}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r5}]}, 0x68}, 0x1, 0x0, 0x0, 0x40408c0}, 0x80) 9.068076387s ago: executing program 3 (id=3128): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) r1 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x680140, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0xfffffffffffffffd) syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000240)='./file0\x00', 0x402, &(0x7f0000000300)=ANY=[@ANYBLOB='iocharset=cp861,iocharset=cp932,errors=continue,errors=remount-ro,errors=continue,discard,allow_utime=00000000000000000000010,discard,allow_utime=00000000000000000000004,uid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00'], 0x1, 0x151e, &(0x7f0000007640)="$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") mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x5) socket(0x2, 0x3, 0x4) sendmsg$AUDIT_USER(r1, &(0x7f0000000140)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4048}, 0x4000090) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$restrict_keyring(0xa, r6, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000100)='ex\x0f\xac\xd1\xeb\xf4\xd8&w\xef\x9f`T3%\xfa\xbf\xef\xeb\x8e1w\xfd\xb4\xd9\x1b\xb1&\t^\xb6\xb7\xc2\xc1\xf7\x83\xad\xab?\xc2\r\f@&\xf1\xcci[5{\xc5\x17t\xd2w\x00\xac\x12\x0f\x8bM\x8eJ\x1fk\xd8\xe8\xa3\x0e\xda9\x82!Y\xd4\xbeP\xcaB\x8d\xd5/6\x81\xad\xfb+&\x87\x1b\x9f\x8bcsj@\xfc&0{L\x1f\xc8iszj\x84\xac\xc2VI\x16\xb5\xd6\x13\xae\xff\xad\xa5u\xd3Dy\xa1\x00\xa0\xd7\xfd\x8d\xd0\x85k\x19u&l5\xd2*ss\x1b\x12\x8cc|\xc6\xb52e\\\xeaB#w\x9b=\xfdF\xcb\xdbr\xfe\xfa\xb3\xad\x94J\"&\x17P\xf7=\x88Lf\xe5\\\x9agq\x9e\x17\x15L\xc7\xdco\xf4\xa4K\xb5\x06w\xa5\xe6\x9e%\xe5\xdc\xc8\xc9\xb8\xa9#\xe6\xcc\x9e\xb4\xc1\x9b\xeb\xf3\x1e\xa6?\x9f\xb5U\xae\xb3\x84\xf7\x05!z\x88\xc54-A\x10A\x8af\xc8\x82\xc9:0V\x89\xcb\xfag\xbe\xcaO[\xa9\xeb`\x026}\xff;\xe4:\'\xc1\x18\xbf\x03B\xc4N\xa0\xfd\xdbk\xa9p\xb9\x04\xfa\xa0\x13\xe5+\x95\xf5\xb1\xdc\x8b\xd2\xcbf\x84\xc6\xde!\x974\xe3\xc6\xa3Sa\x1eP\xf4\x9dd\x18gH\xf5E\xfb_\xdc0\x1d{iT\xf0o\x94') ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) 9.034761787s ago: executing program 5 (id=3129): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@pktinfo={{0x24, 0x29, 0x32, {@private1={0xfc, 0x1, '\x00', 0xfe}}}}], 0x28}, 0x4000000) 8.936043081s ago: executing program 0 (id=3130): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r5, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 8.920558622s ago: executing program 5 (id=3131): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x10) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x2, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x2, 0x2, {0x4000}}}, @TCA_STAB={0x0, 0x8, 0x0, 0x1, [{{0x0, 0x1, {0xfa, 0xf, 0x100, 0x3, 0x1, 0x3, 0xb}}, {0x0, 0x2, [0xa37, 0xfff, 0x8]}}, {{0x0, 0x1, {0xaa, 0x0, 0x7, 0x7, 0x1, 0x1, 0xfffffffe}}, {0x0, 0x2, [0x6, 0x8, 0x9]}}]}]}, 0x38}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd1e, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x8, 0x7, 0xb3}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x148, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r9, {0x10}, {}, {0xe, 0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x118, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x9, 0xf, 0x9, 0x2}}, @TCA_GRED_STAB={0x104, 0x2, "eeb71195190e53ea8a32120d2cd2ddba44af857a844ca0a39c4f7ec08b24420e572ec0b0964a1e7427d6c0f87f65a638f90418a5896497406e721229325ee8564ba553a9ad4e92e6e9272972b507985a64149c2b86679e3b2a71c5b6529aefe0fb3d1e5d23a4351a3e190f21483ddd098926158404a4f30f8cdf41114f7666b67525127be37b7d7050a928e1db6c49b01c5bfa11b1a6083556b22ad89f6658c7bb0909437c9f3917f8a321d8816452053a1c18291e976dabac662ae98a12ab8868c3ab1385f4df9b8b0c49bdccf91d77afdfe246d0d6ed2c296a9241e7ce0c653b146aec3fb595d03204d7a843ad30317f1a48680d5879714ca3c1e325340930"}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r10, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) socket$netlink(0x10, 0x3, 0x0) 7.574950308s ago: executing program 4 (id=3132): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3f}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x4000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x800000}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(0xffffffffffffffff, 0x1ca6, 0x47ae, 0x23, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000bd82000000000000000900ea71122e0000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000380)={0x0, 0xffffffd6}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000480)={r5, 0xca}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x10, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000008000000000000000a000000911133000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000240)={0x0, 0x800, 0x0, 0x2, 0x0, 0x80fd}) syz_io_uring_setup(0x6bf5, 0x0, 0x0, &(0x7f0000000180), &(0x7f0000000340)) 4.91402581s ago: executing program 4 (id=3133): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000706050000000000000000000a000005080006400000000e0900020073797a31000000000500010007020000"], 0x30}, 0x1, 0x0, 0x0, 0x20048004}, 0x20004404) 4.800658574s ago: executing program 4 (id=3134): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv2(r1, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/157, 0x9d}], 0x1, 0x2, 0x800003fd, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 3.090100283s ago: executing program 3 (id=3135): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x88, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x88}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x94, 0x0, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}]}, 0x94}}, 0x0) 2.920096789s ago: executing program 0 (id=3136): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) openat$kvm(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r3, 0x4b65, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, 0x0, 0x60}, 0x28) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4ea4, 0xfffffffc, @local, 0x1}, 0x1c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) 2.804213753s ago: executing program 4 (id=3137): socket$inet6_sctp(0xa, 0x801, 0x84) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001", @ANYBLOB, @ANYBLOB], 0x50) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$inet6(0xa, 0x80003, 0xff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.710823446s ago: executing program 3 (id=3138): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r5) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$can_raw(r3, &(0x7f0000000000)={0x1d, r4}, 0x10) socket$can_raw(0x1d, 0x3, 0x1) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0xb, 0x6}, {0xffff, 0xfff9}, {0xffff}}}, 0x24}}, 0x0) 2.525186563s ago: executing program 5 (id=3139): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x0, 0x0, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf51c}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000180)="aabb", 0x2}], 0x1}}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb0100180000000000000010d6b365a5cc2c4d3b025841000000100000000300000001000000000000"], 0x0, 0x2b, 0x0, 0x5}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r1, &(0x7f000001a240)=""/102400, 0x19000, 0x1000000000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="01010000", @ANYRES16=0x0, @ANYBLOB="05002dbd7000fcdbdf251b000000"], 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x20000080) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000c80)=ANY=[@ANYBLOB='\f\a\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x70c}, 0x1, 0x0, 0x0, 0x44}, 0x8880) r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='asymmetPic@\xe6u\x18\x8f\x8d\xd0\xb9\xb4d\x97\xee\x9bY\xb3\xa0dI$(\xed\x98S\xdcB\xdf\x99J\x9c&#m\xd0\xb0\x134m\xa7se\x8fvS\x84:\"-\x94\x84\xbd\xf4X\xf2F6\xe44\x1f\xa7f\x82\xd7aLt@%a\x8a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\xb4\xc6m39\x9e)\xa5\xe7\xdb\xdc\xb3\xb6\x1f\x1d5\x13\xde\xab\x86\xf5`S<\xd5\xc7@-X0\xa9\xe4l\xab\xf0}\xf0\xeaco\x85kM\x8aS\x1bZ\xa1\xba\xb4E\xbc', r5) r6 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r5) keyctl$chown(0x4, r6, 0xee01, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 1.675732972s ago: executing program 0 (id=3140): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@pktinfo={{0x24, 0x29, 0x32, {@private1={0xfc, 0x1, '\x00', 0xfe}}}}], 0x28}, 0x4000000) 1.671410852s ago: executing program 4 (id=3141): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$eJzs28tvG0UYAPBv13FKXySU8ugDCBRExCNp0gI9cAGBxAEkJDiUY0jSqtRtUBMkWlUQECpHVIk74ojEX8AJLgg4IXGFO6pUoVxaOBmtvZs4jp0mwY5L/ftJm8zsjjPzeXbs2Z1sAH1rJPuRROyJiN8jYqieXV1gpP7r5tLl6b+XLk8nUa2+9VdSK3dj6fJ0UbR43e48M5pGpJ8lcahFvfMXL52dqlRmL+T58YVz74/PX7z07JlzU6dnT8+enzxx4vixiReen3yuI3Fmbbpx8KO5wwdee+fqG9Mnr77787dJEX9THB0yst7BJ6rVDlfXW3sb0slADxvCppQiIuuucm38D0UpVjpvKF79tKeNA7qqWq1Wd7c/vFgF7mBJbLTk2fzzArgzFF/02fVvsW3T1OO2cP2l+gVQFvfNfKsfGYg0L1Nuur7tpJGIOLn4z1fZFt25DwEAsMr32fznmVbzvzTubyh3d742NBwR90TEvoi4NyL2R8R9EbWyD0TEg5usv3mRZO38J722pcA2KJv/vZivba2e/xWzvxgu5bm9tfjLyakzldmj+XsyGuUdWX5inTp+eOW3L9oda5z/ZVtWfzEXzNtxbWDH6tfMTC1M/ZeYG13/JOLgQKv4k+WVgCQiDkTEwS3Wceapbw63O9Yu/vJG/nAH1pmqX0c8We//xWiKv5Csvz45fldUZo+OF2fFWr/8euXNdvXfuv+7K+v/XS3P/+X4h5PG9dr5zddx5Y/P217TbPX8H0zerqUH830fTi0sXJiIGExerze6cf/kymuLfFE+i3/0SOvxvy9W3olDEZGdxA9FxMMR8Uje9kcj4rGIOLJO/D+9/Ph7W4+/u7L4ZzbV/yuJwWje0zpROvvjd6sqHd5M/Fn/H6+lRvM9G/n820i7tnY2AwAAwP9PGhF7IknHltNpOjZW/3/5/bErrczNLzx9au6D8zP1ZwSGo5wWd7qGGu6HTuSX9UV+sil/LL9v/GVpZy0/Nj1Xmel18NDndrcZ/5k/S71uHdB1nteC/mX8Q/8y/qF/Gf/Qv1qM/529aAew/Vp9/3/cg3YA269p/Fv2gz7i+h/6l/EP/cv4h740vzNu/ZC8hMSaRKS3RTMkupTo9ScTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAZ/wbAAD//9E940M=") r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x2000008e) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000000)=ANY=[], 0x361, 0x0) 784.113373ms ago: executing program 0 (id=3142): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000240004800500030001000000050003f5000000000500030000000000050003000500000008000200010000000800010000030000040008"], 0x4c}}, 0x0) 744.693234ms ago: executing program 5 (id=3143): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000006c0)={0x0, 0x2, 0x3}, 0x10}, 0x94) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 616.115839ms ago: executing program 0 (id=3144): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) 592.09401ms ago: executing program 4 (id=3145): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r5, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 438.847375ms ago: executing program 0 (id=3146): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21c91c, &(0x7f0000000440)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@grpjquota}, {@noinit_itable}, {@quota}, {@debug}, {@sysvgroups}, {@resgid, 0x32}]}, 0x1, 0x4f1, &(0x7f0000000b00)="$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") mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x115) timer_create(0x3, 0x0, &(0x7f0000000300)) syz_emit_ethernet(0x63, &(0x7f0000000500)={@local, @local, @void, {@ipv4={0x800, @generic={{0xb, 0x4, 0x1, 0x0, 0x55, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev, {[@ssrr={0x89, 0x17, 0x76, [@remote, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @local]}]}}, "95f326cdcb4700348fb30fb073259ba1d894c8782936a22241940351f63a5d49f6b05a95d6c75bec48"}}}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) userfaultfd(0x1) r4 = signalfd(0xffffffffffffffff, 0x0, 0x0) r5 = fspick(r4, &(0x7f0000000100)='./file0\x00', 0x1) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x3000, 0x1}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0) fgetxattr(r6, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000300)=""/47, 0x2f) flock(r5, 0x1e) socket$netlink(0x10, 0x3, 0x0) getdents(r0, &(0x7f0000000040)=""/61, 0x3d) write(0xffffffffffffffff, &(0x7f0000000340), 0x0) 424.076156ms ago: executing program 5 (id=3147): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd1e, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x8, 0x7, 0xb3}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x810) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 399.907006ms ago: executing program 3 (id=3148): sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x4040800) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000200)={[{@grpjquota}, {@quota}, {@discard}, {@noload}, {@resuid}]}, 0x3, 0x513, &(0x7f0000000780)="$eJzs3E9sFNUfAPDvbLu0/PvRHyIKolbR2EhsoaBwMFGMJh40MWKiHpu2EKRQQ0siBHW54NGQeDcevXrwql6I4WTiFY8mhoQYLoAJcc3szrTb7e6WLdsthc8nafe9mZ157+2bmX1/diaAh9Zg+i+phq9GxJaIKNS/YbD6cuvG+fHbN86PR6lcPvJ3UtnsZhrPZLuJjVlkqBDxehpIFqc7c/bcibGpqcnTWXxk9uSnIzNnz710vD9bcujQgf37Dr4y+nL7hWqQXlqumzu/mN614+2PL7073psvz1OrLUcr69rIxmAMNspKxfNt7Gct2FwTTnpXMSO0JT3+0+oqVs7/LdETrSqv1MWcASutXC6X+5qvLpXrXVi0BFizon+1cwCsjvyLPu3/5n+NGgLt9HvXkuuHqx2gtNy3sr+IpysL83GQYl3/tpMGI+Kj0j/fpn/RbByiZ4USBwAeSj8fzluCde2/gerMyJ0zl19LX/+XzaEMRMT/I2JrRDwSEdsi4tGI2B4Rj0XE43X7T5su5RbpD9bF59Kfm4QqXOtQURtK23+vZnNb8+2/BRkY6MlimyPyBvPk3uwzGYpi39HjU5P7WqTxy5u/f91sXaX9l+48awOm6WdtwazJXbjWWzdANzE2O3ZPha5x/ULEzt768ie9EcncTEASETsiYmcb+x2oCR9/8ftdc5HiwvfVtn/ryl+r3HAerQPzTOXvIl6I5M6tG+dLsaD+51NMFsxPnhw7Nnls8tTo3PzkSH9MTe4dSY+CvQ3TuPLbxfeapb9k+X/8s36Ttw7+dKRjnYK0/jfUHP+Rz9/Ol38giUjm5mtn2k/j4h9fNZ1bXbr+Gx//65IPKuG8X/rZ2Ozs6X0R65J3Fi8fnd82j6evUaqWf2h34/N/a7ZN+kk8ERHpQfxkRDwV1R5imvdnIuLZiNjdovy/vvHcJ22Xv9Bihx2Uln+i7vpXrfkF9T8/X98skGRzgw1W9ZwoXr3d5OLRuv6LWf0fqMSGsm0aX/+SBZeIZjnNv+3SJf925BMEAACA+18hIjbVjCVtikJheLg6BrQtNhSmpmdm9xydPnNqIl0XMRDFQj7SVR0PLib5+OdATXy0Lr4/Gzf+pmd9JT48Pj01saolBzZWzvmkMBzxYU/N+Z/6y+9O4MG3xDzag/rbP2CJ8z9txG+/1MXMAF1197+jufz5imYE6Lqa87/ZHf6lZfzuC1gDPK8FmLf0g35cM2DtKy86l8um/eAh0tZ3+R4PAYQHSW+8Pxfu0n2HwH1iuX35LzucD6Crlrivv6/pjfR3FSj3NV7VH4vfHP2td9gTy8vG+gZprUogbVmtSurrl7NV/jSFpu+JQns77Itl1mn+xJhsydF7/DRKp2eObb+rg7+dQD5o1uka/KH5eXqlr0Xt3Hug65ciAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAFfFfAAAA//9PmNtI") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086602, &(0x7f0000000080)={@desc={0x84c00, 0x0, @desc2}}) 0s ago: executing program 5 (id=3149): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) openat$kvm(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r3, 0x4b65, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, 0x0, 0x60}, 0x28) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4ea4, 0xfffffffc, @local, 0x1}, 0x1c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) kernel console output (not intermixed with test programs): luetooth: hci2: command 0x0c1a tx timeout [ 937.511052][ T4280] Bluetooth: hci1: command 0x0c1a tx timeout [ 940.937470][T13374] 9pnet_fd: Insufficient options for proto=fd [ 941.442336][T13395] loop2: detected capacity change from 0 to 1024 [ 942.160729][T13397] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 942.172101][T13397] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 942.829570][T13395] EXT4-fs: Ignoring removed nomblk_io_submit option [ 943.121941][T13395] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 948.241297][T13423] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 948.247438][T13423] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 948.253533][T13423] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 948.259559][T13423] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 948.265617][T13423] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 948.837362][T13430] 9pnet_fd: Insufficient options for proto=fd [ 949.455126][T13441] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 949.467255][T13441] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 950.282024][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 950.305031][ T4284] Bluetooth: hci1: command 0x0c1a tx timeout [ 950.311140][ T4284] Bluetooth: hci4: command 0x0c1a tx timeout [ 950.317266][ T4284] Bluetooth: hci3: command 0x0c1a tx timeout [ 950.323711][ T4280] Bluetooth: hci2: command 0x0c1a tx timeout [ 950.323731][ T9900] Bluetooth: hci0: command 0x0c1a tx timeout [ 951.521673][T13462] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 951.528360][T13462] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 951.534696][T13462] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 951.540774][T13462] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 951.546887][T13462] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 952.875085][T13474] 9pnet_fd: Insufficient options for proto=fd [ 953.111570][T13105] Bluetooth: hci0: command 0x0c1a tx timeout [ 953.154134][T13487] loop4: detected capacity change from 0 to 1024 [ 953.171732][T13487] EXT4-fs: Ignoring removed nomblk_io_submit option [ 953.273846][T13496] loop2: detected capacity change from 0 to 256 [ 953.375754][T13487] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 953.416748][T13496] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2487'. [ 953.844770][T13502] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 953.858101][T13502] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 954.729286][ T4280] Bluetooth: hci2: command 0x0c1a tx timeout [ 954.729346][ T4284] Bluetooth: hci3: command 0x0c1a tx timeout [ 954.741969][ T9900] Bluetooth: hci4: command 0x0c1a tx timeout [ 955.043523][T13105] Bluetooth: hci1: command 0x0c1a tx timeout [ 955.361782][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 956.613729][T13539] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 956.625346][T13539] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 957.119157][T13533] 9pnet_fd: Insufficient options for proto=fd [ 957.481399][T13543] loop3: detected capacity change from 0 to 256 [ 957.509947][T13547] loop4: detected capacity change from 0 to 1024 [ 957.519709][T13547] EXT4-fs: Ignoring removed nomblk_io_submit option [ 957.545369][T13543] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2502'. [ 957.607463][T13552] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 957.650597][T13547] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 959.421093][T13559] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 959.427369][T13559] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 959.433516][T13559] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 959.439692][T13559] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 959.446163][T13559] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 959.656912][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 960.109480][T13571] tap0: tun_chr_ioctl cmd 1074025681 [ 960.511484][T13589] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 960.523946][T13589] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 961.210565][T13591] 9pnet_fd: Insufficient options for proto=fd [ 961.487305][T13597] loop1: detected capacity change from 0 to 1024 [ 961.501237][T13105] Bluetooth: hci1: command 0x0c1a tx timeout [ 961.507602][T13105] Bluetooth: hci4: command 0x0c1a tx timeout [ 961.513891][ T4283] Bluetooth: hci3: command 0x0c1a tx timeout [ 961.519737][T13597] EXT4-fs: Ignoring removed nomblk_io_submit option [ 961.520015][ T4283] Bluetooth: hci2: command 0x0c1a tx timeout [ 961.533144][ T4280] Bluetooth: hci0: command 0x0c1a tx timeout [ 961.731789][T13597] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 964.751114][T13613] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 964.757311][T13613] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 964.763544][T13613] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 964.769725][T13613] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 964.775844][T13613] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 964.890564][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 965.044760][T13624] netlink: 'syz.1.2527': attribute type 1 has an invalid length. [ 965.163091][T13624] 8021q: adding VLAN 0 to HW filter on device bond1 [ 965.320302][T13631] bond1: (slave veth3): Enslaving as an active interface with a down link [ 965.442690][T13637] loop3: detected capacity change from 0 to 256 [ 965.525074][T13637] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 965.623784][T13637] input: syz0 as /devices/virtual/input/input56 [ 966.567244][T13643] 9pnet_fd: Insufficient options for proto=fd [ 966.649808][T13653] loop1: detected capacity change from 0 to 1024 [ 966.696285][T13653] EXT4-fs: Ignoring removed nomblk_io_submit option [ 966.780981][T13105] Bluetooth: hci3: command 0x0c1a tx timeout [ 966.787106][T13105] Bluetooth: hci2: command 0x0c1a tx timeout [ 966.795197][ T4283] Bluetooth: hci0: command 0x0c1a tx timeout [ 966.940894][T13105] Bluetooth: hci1: command 0x0c1a tx timeout [ 966.946991][T13105] Bluetooth: hci4: command 0x0c1a tx timeout [ 967.009099][T13653] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 968.715839][T13663] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 968.722599][T13663] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 968.728649][T13663] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 968.734813][T13663] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 968.741308][T13663] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 968.945227][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 969.029833][T13673] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2543'. [ 969.087906][T13676] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2543'. [ 969.113296][T13677] netlink: 'syz.1.2540': attribute type 1 has an invalid length. [ 969.175914][T13677] 8021q: adding VLAN 0 to HW filter on device bond2 [ 969.194704][T13679] device macvlan2 entered promiscuous mode [ 969.202753][T13679] device bond2 entered promiscuous mode [ 969.237693][T13679] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 969.251986][T13679] device bond2 left promiscuous mode [ 969.501904][T13689] netlink: 'syz.4.2546': attribute type 1 has an invalid length. [ 969.613698][T13693] loop3: detected capacity change from 0 to 256 [ 969.711426][T13693] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 969.833398][T13695] input: syz0 as /devices/virtual/input/input57 [ 970.046122][T13689] 8021q: adding VLAN 0 to HW filter on device bond3 [ 970.421715][T13691] bond3: (slave veth5): Enslaving as an active interface with a down link [ 970.780805][ T4284] Bluetooth: hci1: command 0x0c1a tx timeout [ 970.787033][ T4284] Bluetooth: hci4: command 0x0c1a tx timeout [ 970.793271][T13105] Bluetooth: hci3: command 0x0c1a tx timeout [ 970.799339][T13105] Bluetooth: hci2: command 0x0c1a tx timeout [ 970.805571][T13105] Bluetooth: hci0: command 0x0c1a tx timeout [ 970.828969][T13706] loop4: detected capacity change from 0 to 1024 [ 970.885157][T13706] EXT4-fs: Ignoring removed nomblk_io_submit option [ 970.991718][T13706] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 971.732454][T13713] loop1: detected capacity change from 0 to 512 [ 972.202020][T13713] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 972.259046][T13713] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 972.410310][T13713] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=84ec018, mo2=0002] [ 972.476600][T13713] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3861: comm syz.1.2551: Allocating blocks 41-42 which overlap fs metadata [ 972.508676][T13718] loop3: detected capacity change from 0 to 1024 [ 972.534840][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 972.542280][T13718] EXT4-fs: Ignoring removed nomblk_io_submit option [ 972.582120][T13713] Quota error (device loop1): write_blk: dquota write failed [ 972.673313][T13718] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 972.700801][T13713] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 972.741094][T13713] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 972.770295][T13713] EXT4-fs error (device loop1): ext4_acquire_dquot:6835: comm syz.1.2551: Failed to acquire dquot type 1 [ 972.798881][T13713] EXT4-fs error (device loop1): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 972.885257][T13713] EXT4-fs error (device loop1): ext4_do_update_inode:5268: inode #12: comm syz.1.2551: corrupted inode contents [ 973.773269][T13713] EXT4-fs error (device loop1): ext4_dirty_inode:6133: inode #12: comm syz.1.2551: mark_inode_dirty error [ 973.839755][T13713] EXT4-fs error (device loop1): ext4_do_update_inode:5268: inode #12: comm syz.1.2551: corrupted inode contents [ 974.089349][ T5854] EXT4-fs (loop3): unmounting filesystem. [ 974.095853][T13713] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.2551: mark_inode_dirty error [ 974.109547][T13713] EXT4-fs error (device loop1): ext4_do_update_inode:5268: inode #12: comm syz.1.2551: corrupted inode contents [ 974.123212][T13713] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 974.132486][T13713] EXT4-fs error (device loop1): ext4_do_update_inode:5268: inode #12: comm syz.1.2551: corrupted inode contents [ 974.147071][T13713] EXT4-fs error (device loop1): ext4_truncate:4314: inode #12: comm syz.1.2551: mark_inode_dirty error [ 974.148573][T13730] 9pnet_fd: Insufficient options for proto=fd [ 974.160093][T13713] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 974.247911][T13724] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 974.254395][T13724] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 974.260860][T13724] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 974.267023][T13724] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 974.273262][T13724] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 974.290143][T13713] EXT4-fs (loop1): 1 truncate cleaned up [ 974.300781][T13713] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 974.415210][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 976.457369][T13759] loop4: detected capacity change from 0 to 1024 [ 977.398801][ T4283] Bluetooth: hci0: command 0x0c1a tx timeout [ 977.404966][ T4283] Bluetooth: hci1: command 0x0c1a tx timeout [ 977.411080][ T4283] Bluetooth: hci4: command 0x0c1a tx timeout [ 977.417412][ T4283] Bluetooth: hci3: command 0x0c1a tx timeout [ 977.434467][T13105] Bluetooth: hci2: command 0x0c1a tx timeout [ 977.443017][T13759] EXT4-fs: Ignoring removed nomblk_io_submit option [ 977.491456][ T26] audit: type=1326 audit(1775043450.741:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13753 comm="syz.2.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1b8f9c819 code=0x7ffc0000 [ 977.517221][ T26] audit: type=1326 audit(1775043450.741:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13753 comm="syz.2.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1b8f9c819 code=0x7ffc0000 [ 977.540249][ T26] audit: type=1326 audit(1775043450.741:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13753 comm="syz.2.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1b8f9c819 code=0x7ffc0000 [ 977.635662][ T26] audit: type=1326 audit(1775043450.741:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13753 comm="syz.2.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fa1b8f9c819 code=0x7ffc0000 [ 977.766932][ T26] audit: type=1326 audit(1775043450.741:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13753 comm="syz.2.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1b8f9c819 code=0x7ffc0000 [ 977.901275][ T26] audit: type=1326 audit(1775043450.741:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13753 comm="syz.2.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa1b8f5d04e code=0x7ffc0000 [ 977.931983][T13759] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 978.294582][ T26] audit: type=1326 audit(1775043450.741:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13753 comm="syz.2.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1b8f9c819 code=0x7ffc0000 [ 981.270872][T13779] xt_connbytes: Forcing CT accounting to be enabled [ 981.277947][T13779] Cannot find set identified by id 0 to match [ 981.324619][T13780] block device autoloading is deprecated and will be removed. [ 981.579996][ T26] audit: type=1326 audit(1775043450.741:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13753 comm="syz.2.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa1b8f5d04e code=0x7ffc0000 [ 981.583950][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 981.604639][ T26] audit: type=1326 audit(1775043450.791:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13753 comm="syz.2.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa1b8f5d04e code=0x7ffc0000 [ 981.634670][ T26] audit: type=1326 audit(1775043450.791:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13753 comm="syz.2.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa1b8f5d04e code=0x7ffc0000 [ 981.657568][ T26] audit: type=1326 audit(1775043450.821:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13753 comm="syz.2.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa1b8f5d04e code=0x7ffc0000 [ 981.681743][ T26] audit: type=1326 audit(1775043450.821:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13753 comm="syz.2.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa1b8f5d04e code=0x7ffc0000 [ 981.704407][ T26] audit: type=1326 audit(1775043450.821:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13753 comm="syz.2.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa1b8f5d04e code=0x7ffc0000 [ 981.985510][T13787] 9pnet_fd: Insufficient options for proto=fd [ 982.849606][T13808] loop1: detected capacity change from 0 to 512 [ 983.234398][T13808] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 983.851420][T13810] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 983.857582][T13810] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 983.864074][T13810] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 983.870454][T13810] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 983.876604][T13810] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 984.461186][T13823] device hsr0 entered promiscuous mode [ 985.113407][T13828] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2583'. [ 985.370160][T13823] loop3: detected capacity change from 0 to 1024 [ 985.462070][T13823] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 985.521862][T13823] netlink: 'syz.3.2581': attribute type 16 has an invalid length. [ 985.559190][T13823] netlink: 'syz.3.2581': attribute type 3 has an invalid length. [ 985.577792][T13823] netlink: 64066 bytes leftover after parsing attributes in process `syz.3.2581'. [ 985.595523][ T26] kauditd_printk_skb: 15 callbacks suppressed [ 985.595541][ T26] audit: type=1800 audit(1775043458.841:85): pid=13824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2581" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 985.740933][ T4284] Bluetooth: hci0: command 0x0c1a tx timeout [ 985.874797][T13837] 9pnet_fd: Insufficient options for proto=fd [ 985.900937][ T4284] Bluetooth: hci1: command 0x0c1a tx timeout [ 985.907099][ T4284] Bluetooth: hci4: command 0x0c1a tx timeout [ 985.913607][ T4283] Bluetooth: hci3: command 0x0c1a tx timeout [ 985.919745][ T4283] Bluetooth: hci2: command 0x0c1a tx timeout [ 986.155720][ T5854] EXT4-fs (loop3): unmounting filesystem. [ 987.386559][T13858] loop4: detected capacity change from 0 to 1024 [ 987.440141][T13858] EXT4-fs: Ignoring removed nomblk_io_submit option [ 987.565548][T13858] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 988.232137][ T26] audit: type=1326 audit(1775043461.451:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13872 comm="syz.3.2596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff01359c819 code=0x7ffc0000 [ 988.496269][T13875] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 988.502460][T13875] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 988.508499][T13875] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 988.514656][T13875] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 988.520762][T13875] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 988.681968][ T26] audit: type=1326 audit(1775043461.451:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13872 comm="syz.3.2596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff01359c819 code=0x7ffc0000 [ 988.839555][ T26] audit: type=1326 audit(1775043461.451:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13872 comm="syz.3.2596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff01359c819 code=0x7ffc0000 [ 988.906055][T13890] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2599'. [ 988.949407][ T26] audit: type=1326 audit(1775043461.451:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13872 comm="syz.3.2596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff01359c819 code=0x7ffc0000 [ 989.047552][ T26] audit: type=1326 audit(1775043461.451:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13872 comm="syz.3.2596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7ff01359c819 code=0x7ffc0000 [ 989.113604][T13893] tipc: Enabled bearer , priority 0 [ 989.148585][T13893] device syzkaller0 entered promiscuous mode [ 989.154875][ T26] audit: type=1326 audit(1775043461.461:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13872 comm="syz.3.2596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff01359c819 code=0x7ffc0000 [ 989.154919][ T26] audit: type=1326 audit(1775043461.461:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13872 comm="syz.3.2596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff01359c819 code=0x7ffc0000 [ 989.154953][ T26] audit: type=1326 audit(1775043461.461:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13872 comm="syz.3.2596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff01355d04e code=0x7ffc0000 [ 989.154988][ T26] audit: type=1326 audit(1775043461.461:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13872 comm="syz.3.2596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff01355d04e code=0x7ffc0000 [ 989.181422][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 989.256423][T13894] 9pnet_fd: Insufficient options for proto=fd [ 989.344433][T13893] tipc: Resetting bearer [ 989.435449][T13901] loop4: detected capacity change from 0 to 512 [ 989.461309][T13891] tipc: Resetting bearer [ 989.467874][T13901] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 989.575182][T13903] loop3: detected capacity change from 0 to 256 [ 989.597148][T13891] tipc: Disabling bearer [ 990.060761][ T4283] Bluetooth: hci0: command 0x0c1a tx timeout [ 990.550990][ T4280] Bluetooth: hci3: command 0x0c1a tx timeout [ 990.557342][ T4284] Bluetooth: hci4: command 0x0c1a tx timeout [ 990.564322][ T4283] Bluetooth: hci1: command 0x0c1a tx timeout [ 990.576354][ T4284] Bluetooth: hci2: command 0x0c1a tx timeout [ 991.032330][T13920] loop2: detected capacity change from 0 to 512 [ 991.115075][T13920] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 991.140859][T13920] ext4 filesystem being mounted at /509/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 991.621210][T13931] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 991.627435][T13931] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 991.633768][T13931] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 991.639852][T13931] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 991.646087][T13931] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 991.671765][T13936] loop3: detected capacity change from 0 to 128 [ 991.711529][T13936] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 991.766340][T13936] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 991.978592][ T11] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 991.997896][T13938] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2616'. [ 992.241725][ T26] kauditd_printk_skb: 60 callbacks suppressed [ 992.241745][ T26] audit: type=1800 audit(1775043465.491:155): pid=13943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2612" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 992.791693][T13944] loop3: detected capacity change from 0 to 8192 [ 993.023594][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.030135][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.312280][T13946] 9pnet_fd: Insufficient options for proto=fd [ 993.500937][T13105] Bluetooth: hci0: command 0x0c1a tx timeout [ 993.632853][T13953] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun! [ 993.660907][T13105] Bluetooth: hci1: command 0x0c1a tx timeout [ 993.667044][T13105] Bluetooth: hci4: command 0x0c1a tx timeout [ 993.673041][ T4284] Bluetooth: hci3: command 0x0c1a tx timeout [ 993.673087][ T4284] Bluetooth: hci2: command 0x0c1a tx timeout [ 993.943864][T13959] loop1: detected capacity change from 0 to 1024 [ 993.965645][T13959] EXT4-fs: inline encryption not supported [ 994.007431][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 994.060114][T13959] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 994.132252][T13959] ext4 filesystem being mounted at /488/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 994.344523][T13762] EXT4-fs error (device loop1): ext4_map_blocks:745: inode #15: comm kworker/u4:17: lblock 0 mapped to illegal pblock 0 (length 1) [ 994.394081][T13762] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 994.440356][T13762] EXT4-fs (loop1): This should not happen!! Data will be lost [ 994.440356][T13762] [ 994.608846][T13969] loop2: detected capacity change from 0 to 512 [ 994.619449][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 994.743295][T13969] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 996.171762][T13979] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 996.177889][T13979] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 996.184167][T13979] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 996.190276][T13979] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 996.196478][T13979] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 997.282187][T13995] netlink: 'syz.4.2635': attribute type 1 has an invalid length. [ 997.552245][T13999] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun! [ 997.698965][T13995] 8021q: adding VLAN 0 to HW filter on device bond4 [ 997.800251][T14000] bond4: (slave veth7): Enslaving as an active interface with a down link [ 997.826144][ T4283] Bluetooth: hci0: command 0x0c1a tx timeout [ 998.239538][ T4283] Bluetooth: hci1: command 0x0c1a tx timeout [ 998.242093][T13105] Bluetooth: hci4: command 0x0c1a tx timeout [ 998.245635][ T4283] Bluetooth: hci3: command 0x0c1a tx timeout [ 998.251711][T13105] Bluetooth: hci2: command 0x0c1a tx timeout [ 998.327576][T14016] loop1: detected capacity change from 0 to 256 [ 999.981881][T14038] loop3: detected capacity change from 0 to 1024 [ 999.989191][T14038] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1000.122148][T14038] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1000.431025][ T4461] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1001.105696][T14055] loop2: detected capacity change from 0 to 256 [ 1001.173529][ T5854] EXT4-fs (loop3): unmounting filesystem. [ 1001.371462][ T4461] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1001.379342][ T4461] usb 5-1: can't read configurations, error -61 [ 1001.460016][T14058] loop3: detected capacity change from 0 to 2048 [ 1001.526660][T14058] EXT4-fs: Ignoring removed oldalloc option [ 1001.652599][T14058] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c018, mo2=0102] [ 1001.681108][T14058] System zones: 0-7 [ 1001.690805][ T4461] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1001.921989][ T4461] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1001.932820][T14058] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1001.980542][ T4461] usb 5-1: can't read configurations, error -61 [ 1002.134760][ T4461] usb usb5-port1: attempt power cycle [ 1002.370814][T14058] EXT4-fs error (device loop3): ext4_find_extent:945: inode #2: comm syz.3.2656: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 1002.482014][T14063] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1002.488127][T14063] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1002.494296][T14063] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1002.500342][T14063] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1002.556529][ T5854] EXT4-fs (loop3): unmounting filesystem. [ 1002.649388][ T4284] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1002.671167][ T4284] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1002.680443][ T4284] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1002.710979][ T4283] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1002.721064][ T4283] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1002.728357][ T4283] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1002.772249][T14069] loop2: detected capacity change from 0 to 512 [ 1002.779699][T14069] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1002.903382][ T5639] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.914262][ T4461] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1002.955917][ T4461] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1002.978282][ T4461] usb 5-1: can't read configurations, error -61 [ 1003.088487][ T5639] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.181072][ T4461] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1003.211028][ T5639] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.367968][ T5639] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.442855][ T4461] usb 5-1: device not accepting address 39, error -71 [ 1003.456543][ T4461] usb usb5-port1: unable to enumerate USB device [ 1004.199708][T14066] chnl_net:caif_netlink_parms(): no params data found [ 1004.259259][T14098] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2667'. [ 1004.280038][T14097] loop3: detected capacity change from 0 to 1024 [ 1004.311692][T14097] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1004.391777][T14097] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1004.541086][T13105] Bluetooth: hci1: command 0x0c1a tx timeout [ 1004.547250][T13105] Bluetooth: hci3: command 0x0c1a tx timeout [ 1004.553824][ T4284] Bluetooth: hci2: command 0x0c1a tx timeout [ 1004.560111][ T4284] Bluetooth: hci0: command 0x0c1a tx timeout [ 1004.639455][T14066] bridge0: port 1(bridge_slave_0) entered blocking state [ 1004.647149][T14066] bridge0: port 1(bridge_slave_0) entered disabled state [ 1004.656193][T14066] device bridge_slave_0 entered promiscuous mode [ 1004.668462][T14066] bridge0: port 2(bridge_slave_1) entered blocking state [ 1004.676354][T14066] bridge0: port 2(bridge_slave_1) entered disabled state [ 1004.700895][T14066] device bridge_slave_1 entered promiscuous mode [ 1004.791046][ T4283] Bluetooth: hci4: command 0x0409 tx timeout [ 1006.869264][ T4283] Bluetooth: hci4: command 0x041b tx timeout [ 1007.081348][ T5854] EXT4-fs (loop3): unmounting filesystem. [ 1007.190947][T14066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1007.240365][T14066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1007.273818][T14111] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1007.279907][T14111] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1007.286047][T14111] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1007.292149][T14111] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1007.298200][T14111] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1007.304217][T14111] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1007.314568][T14111] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 1007.715028][T14066] team0: Port device team_slave_0 added [ 1007.776654][T14066] team0: Port device team_slave_1 added [ 1008.499524][T14066] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1008.553232][T14066] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1008.910943][T14066] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1008.953640][T14133] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2672'. [ 1008.965200][T14066] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1008.987803][T14066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1009.129567][T14066] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1009.350882][T13105] Bluetooth: hci4: command 0x0419 tx timeout [ 1009.357004][T13105] Bluetooth: hci1: command 0x0c1a tx timeout [ 1009.363397][ T4283] Bluetooth: hci3: command 0x0c1a tx timeout [ 1009.363419][ T4284] Bluetooth: hci2: command 0x0c1a tx timeout [ 1009.369430][ T4283] Bluetooth: hci0: command 0x0c1a tx timeout [ 1009.763633][T14066] device hsr_slave_0 entered promiscuous mode [ 1009.807701][T14066] device hsr_slave_1 entered promiscuous mode [ 1009.846232][T14066] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1009.864630][T14066] Cannot create hsr debugfs directory [ 1010.402005][T14169] loop1: detected capacity change from 0 to 1024 [ 1010.436231][T14169] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1010.571779][T14169] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1011.656247][ T4283] Bluetooth: hci4: command 0x0c1a tx timeout [ 1011.691821][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 1012.247115][ T5639] device hsr_slave_0 left promiscuous mode [ 1012.288408][T14187] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1012.294880][T14187] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1012.301389][T14187] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1012.307434][T14187] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1012.313646][T14187] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1012.319608][T14187] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1012.354071][T14187] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 1012.363577][ T5639] device hsr_slave_1 left promiscuous mode [ 1012.373175][ T5639] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1012.549442][ T5639] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1012.916326][ T5639] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1013.065851][ T5639] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1013.138333][ T5639] device bridge_slave_1 left promiscuous mode [ 1013.165518][ T5639] bridge0: port 2(bridge_slave_1) entered disabled state [ 1013.197009][ T5639] device bridge_slave_0 left promiscuous mode [ 1013.236573][ T5639] bridge0: port 1(bridge_slave_0) entered disabled state [ 1013.280330][ T5639] device veth1_macvtap left promiscuous mode [ 1013.286734][ T5639] device veth0_macvtap left promiscuous mode [ 1013.291294][T14201] loop3: detected capacity change from 0 to 512 [ 1013.300970][ T5639] device veth1_vlan left promiscuous mode [ 1013.310464][T14201] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1013.321117][ T5639] device veth0_vlan left promiscuous mode [ 1013.396949][T14203] loop1: detected capacity change from 0 to 128 [ 1013.498288][T14203] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fff0000) [ 1013.506503][T14203] FAT-fs (loop1): Filesystem has been set read-only [ 1014.300771][ T4283] Bluetooth: hci0: command 0x0c1a tx timeout [ 1014.301168][ T4284] Bluetooth: hci2: command 0x0c1a tx timeout [ 1014.391053][ T4283] Bluetooth: hci4: command 0x0c1a tx timeout [ 1014.397226][ T4283] Bluetooth: hci3: command 0x0c1a tx timeout [ 1014.400774][ T4284] Bluetooth: hci1: command 0x0c1a tx timeout [ 1015.793144][ T5639] team0 (unregistering): Port device team_slave_1 removed [ 1015.854298][ T5639] team0 (unregistering): Port device team_slave_0 removed [ 1015.914836][ T5639] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1015.975175][ T5639] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1016.457805][ T5639] bond0 (unregistering): Released all slaves [ 1016.463964][T13105] Bluetooth: hci4: command 0x0406 tx timeout [ 1016.577221][T14196] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2683'. [ 1017.444104][T14250] random: crng reseeded on system resumption [ 1017.585274][T14252] loop4: detected capacity change from 0 to 256 [ 1017.786963][T14255] loop1: detected capacity change from 0 to 256 [ 1017.825495][T14255] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 1018.342067][T14252] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1018.440866][T14252] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 1018.480128][T14066] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1018.559162][T14252] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1018.599874][T14066] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1018.722702][T14066] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1018.806515][T14066] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1018.982947][T14264] loop2: detected capacity change from 0 to 128 [ 1019.082913][T14264] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0000) [ 1019.091046][T14264] FAT-fs (loop2): Filesystem has been set read-only [ 1019.709426][T14262] loop3: detected capacity change from 0 to 1024 [ 1019.808653][T14262] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1019.875699][T14245] netlink: 'syz.3.2691': attribute type 16 has an invalid length. [ 1019.906463][T14066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1019.950818][T14245] netlink: 'syz.3.2691': attribute type 3 has an invalid length. [ 1019.958643][T14245] netlink: 64066 bytes leftover after parsing attributes in process `syz.3.2691'. [ 1020.045892][T14066] 8021q: adding VLAN 0 to HW filter on device team0 [ 1020.085901][T13696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1020.131188][T13696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1020.165285][T13696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1020.199682][T13696] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1020.239921][T13696] bridge0: port 1(bridge_slave_0) entered blocking state [ 1020.241015][T14277] loop2: detected capacity change from 0 to 512 [ 1020.247273][T13696] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1020.302739][T13696] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1020.355827][T13696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1020.366392][ T5854] EXT4-fs (loop3): unmounting filesystem. [ 1020.368658][T13696] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1020.391664][T14277] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1020.397902][T13696] bridge0: port 2(bridge_slave_1) entered blocking state [ 1020.407932][T13696] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1020.416320][T13696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1020.480067][T10576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1020.506482][T10576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1020.528374][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 1020.662904][T10576] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1020.742104][T10576] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1020.812039][ T5639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1020.848621][ T5639] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1020.876353][ T5639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1020.896133][ T5639] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1020.911661][ T5639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1020.931502][ T5639] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1021.022632][T14291] loop3: detected capacity change from 0 to 512 [ 1021.061807][T14066] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1021.081748][T14291] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1021.182863][T14297] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2698'. [ 1023.052726][T13696] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1023.060333][T13696] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1023.098663][T14066] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1023.178016][T14204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1023.204884][T14204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1023.245323][T14204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1023.273273][T14204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1023.299885][T14066] device veth0_vlan entered promiscuous mode [ 1023.317945][T14204] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1023.332845][T14204] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1023.359576][T14066] device veth1_vlan entered promiscuous mode [ 1023.723848][T14327] loop1: detected capacity change from 0 to 128 [ 1023.841209][T14327] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fff0000) [ 1023.849194][T14327] FAT-fs (loop1): Filesystem has been set read-only [ 1024.259188][T13696] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1024.292503][T13696] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1024.347439][T13696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1024.428673][T13696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1024.513272][T14066] device veth0_macvtap entered promiscuous mode [ 1024.556500][T14066] device veth1_macvtap entered promiscuous mode [ 1024.646569][T14066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1024.705486][T14066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1024.746214][T14066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1024.794453][T14066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1024.864990][T14066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1024.943186][T14342] loop4: detected capacity change from 0 to 256 [ 1025.005700][T14066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.195808][T14342] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 1025.562560][T14066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1025.640696][T14066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.672259][T14066] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1025.711108][T14066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1025.766696][T14066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.824023][T14066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1025.834675][T14066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.844704][T14066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1025.867580][T14066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.920690][T14066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1025.998331][T14066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1026.189030][T14066] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1026.266531][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1026.306978][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1026.382154][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1026.391449][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1026.400343][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1026.428704][T14344] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2710'. [ 1026.441996][T14066] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.488857][T14066] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.510782][T14066] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.536251][T14332] loop1: detected capacity change from 0 to 1024 [ 1026.548546][T14066] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.691792][T14332] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1026.764495][T14332] netlink: 'syz.1.2707': attribute type 16 has an invalid length. [ 1026.820895][T14332] netlink: 'syz.1.2707': attribute type 3 has an invalid length. [ 1026.834590][T14332] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.2707'. [ 1026.974671][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1026.999546][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1027.089602][T14368] random: crng reseeded on system resumption [ 1027.188101][T14369] loop3: detected capacity change from 0 to 256 [ 1027.234637][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 1027.250408][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1027.385410][T14372] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1027.397296][T14372] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1027.641807][T14369] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1028.002849][T14204] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1028.021286][T14204] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1028.109579][T14369] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 1028.118136][T14204] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1028.252704][T14369] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1028.564196][T14386] netlink: 'syz.0.2653': attribute type 1 has an invalid length. [ 1028.647981][T14389] loop2: detected capacity change from 0 to 128 [ 1028.780584][T14389] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0000) [ 1028.788658][T14389] FAT-fs (loop2): Filesystem has been set read-only [ 1029.637794][T14399] loop1: detected capacity change from 0 to 512 [ 1029.675639][T14398] tipc: Started in network mode [ 1029.681920][T14399] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1029.685169][T14398] tipc: Node identity aaaaaaaaaa38, cluster identity 4711 [ 1029.715904][T14398] tipc: Enabled bearer , priority 0 [ 1030.670872][T14410] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2722'. [ 1030.933314][T11247] tipc: Node number set to 9611946 [ 1031.537230][T14424] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1031.549066][T14424] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1031.926442][T14423] device hsr0 entered promiscuous mode [ 1033.422366][T14442] loop3: detected capacity change from 0 to 128 [ 1033.520384][T14442] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fff0000) [ 1033.528587][T14442] FAT-fs (loop3): Filesystem has been set read-only [ 1033.974482][T14425] loop0: detected capacity change from 0 to 1024 [ 1034.155290][T14425] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1034.228565][T14453] netlink: 'syz.3.2732': attribute type 1 has an invalid length. [ 1034.266154][T14423] netlink: 'syz.0.2724': attribute type 16 has an invalid length. [ 1034.314632][T14423] netlink: 'syz.0.2724': attribute type 3 has an invalid length. [ 1034.364494][T14423] netlink: 64066 bytes leftover after parsing attributes in process `syz.0.2724'. [ 1034.444444][T14453] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1034.544599][T14455] bond1: (slave veth3): Enslaving as an active interface with a down link [ 1034.597866][T14456] device veth0_to_bond entered promiscuous mode [ 1034.609091][T14456] device veth0_to_bond left promiscuous mode [ 1034.630077][T14456] bond1: (slave vlan2): making interface the new active one [ 1034.656399][T14456] device veth0_to_bond entered promiscuous mode [ 1034.675594][T14456] device vlan2 entered promiscuous mode [ 1034.738521][T14456] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 1034.800996][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 1035.634411][T14469] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2734'. [ 1036.012956][T14483] random: crng reseeded on system resumption [ 1036.143894][T14485] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1036.155498][T14485] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1036.494945][T14066] EXT4-fs (loop0): unmounting filesystem. [ 1036.785652][T14486] loop3: detected capacity change from 0 to 256 [ 1036.937954][T14486] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1037.055081][T14486] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 1037.134584][T14486] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1037.446850][T14499] loop4: detected capacity change from 0 to 128 [ 1037.473901][T14499] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fff0000) [ 1037.482131][T14499] FAT-fs (loop4): Filesystem has been set read-only [ 1040.099055][T14528] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2749'. [ 1040.856894][T14529] loop1: detected capacity change from 0 to 256 [ 1040.989578][T14529] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 1041.060136][T14529] input: syz0 as /devices/virtual/input/input59 [ 1041.988982][T14537] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1042.000960][T14537] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1042.788101][T14542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2755'. [ 1042.904127][T14527] loop0: detected capacity change from 0 to 1024 [ 1043.008247][T14527] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1043.139011][T14527] netlink: 'syz.0.2750': attribute type 16 has an invalid length. [ 1043.183942][T14527] netlink: 'syz.0.2750': attribute type 3 has an invalid length. [ 1043.221799][T14527] netlink: 64066 bytes leftover after parsing attributes in process `syz.0.2750'. [ 1043.257819][ T26] audit: type=1800 audit(1775045052.508:156): pid=14539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2750" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 1043.571551][T14066] EXT4-fs (loop0): unmounting filesystem. [ 1043.663525][T14567] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2761'. [ 1044.909789][T14582] loop0: detected capacity change from 0 to 256 [ 1045.021474][T14582] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 1045.093342][T14582] input: syz0 as /devices/virtual/input/input60 [ 1046.032058][T14595] random: crng reseeded on system resumption [ 1046.142657][T14599] loop3: detected capacity change from 0 to 256 [ 1046.202842][T14599] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1046.266039][T14602] loop1: detected capacity change from 0 to 128 [ 1046.294020][T14602] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1046.303930][T14599] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 1046.314123][T14603] device hsr0 entered promiscuous mode [ 1046.407804][T14599] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1048.069716][T14615] loop2: detected capacity change from 0 to 1024 [ 1048.377153][T14615] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1050.002009][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 1050.735282][T14628] loop0: detected capacity change from 0 to 256 [ 1050.908787][T14628] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 1050.966441][T14628] input: syz0 as /devices/virtual/input/input61 [ 1051.594149][T14633] autofs4:pid:14633:autofs_fill_super: called with bogus options [ 1051.662648][ T46] device vlan2 left promiscuous mode [ 1052.268220][T14649] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1052.280272][T14649] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1054.463746][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.470257][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.010023][T14661] loop0: detected capacity change from 0 to 128 [ 1055.573209][T14661] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fff0000) [ 1055.581567][T14661] FAT-fs (loop0): Filesystem has been set read-only [ 1055.610999][T14673] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1055.617120][T14673] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1055.623432][T14673] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1055.629495][T14673] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1055.635641][T14673] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1056.028253][T14680] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2794'. [ 1056.157778][T14682] loop2: detected capacity change from 0 to 256 [ 1056.205429][T14682] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 1056.346932][T14682] input: syz0 as /devices/virtual/input/input62 [ 1056.506182][T14685] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1056.517969][T14685] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1057.740791][T13105] Bluetooth: hci4: command 0x0c1a tx timeout [ 1057.744291][ T4283] Bluetooth: hci1: command 0x0c1a tx timeout [ 1057.747233][ T4280] Bluetooth: hci2: command 0x0c1a tx timeout [ 1057.753495][ T9900] Bluetooth: hci0: command 0x0c1a tx timeout [ 1057.759637][ T4284] Bluetooth: hci3: command 0x0c1a tx timeout [ 1058.039772][T14701] loop3: detected capacity change from 0 to 512 [ 1058.185202][T14701] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1058.229744][T14701] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 1058.283941][T14701] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=84ec018, mo2=0002] [ 1058.457406][T14701] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3861: comm syz.3.2802: Allocating blocks 41-42 which overlap fs metadata [ 1058.763798][T14701] Quota error (device loop3): write_blk: dquota write failed [ 1058.980023][T14701] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 1059.061129][T14701] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3861: comm syz.3.2802: Allocating blocks 41-42 which overlap fs metadata [ 1059.141273][T14701] Quota error (device loop3): write_blk: dquota write failed [ 1059.148836][T14701] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 1059.200982][T14701] EXT4-fs error (device loop3): ext4_acquire_dquot:6835: comm syz.3.2802: Failed to acquire dquot type 1 [ 1059.236476][T14701] EXT4-fs error (device loop3): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 1059.267370][T14710] loop0: detected capacity change from 0 to 512 [ 1059.281059][T14701] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #12: comm syz.3.2802: corrupted inode contents [ 1059.375597][T14710] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 1059.427742][T14701] EXT4-fs error (device loop3): ext4_dirty_inode:6133: inode #12: comm syz.3.2802: mark_inode_dirty error [ 1059.460588][T14701] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #12: comm syz.3.2802: corrupted inode contents [ 1059.798542][T14701] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.2802: mark_inode_dirty error [ 1059.969288][T14701] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #12: comm syz.3.2802: corrupted inode contents [ 1060.143949][T14715] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1060.150176][T14715] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1060.156701][T14715] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1060.162836][T14715] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1060.168855][T14715] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1060.250756][T14701] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 1060.331146][T14701] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #12: comm syz.3.2802: corrupted inode contents [ 1060.398857][T14719] loop0: detected capacity change from 0 to 1024 [ 1060.421572][T14719] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1060.441244][T14701] EXT4-fs error (device loop3): ext4_truncate:4314: inode #12: comm syz.3.2802: mark_inode_dirty error [ 1060.499681][T14719] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1060.515023][T14701] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 1060.531159][T14719] EXT4-fs error (device loop0): __ext4_get_inode_loc:4509: comm syz.0.2808: Invalid inode table block 0 in block_group 0 [ 1060.558657][T14701] EXT4-fs (loop3): 1 truncate cleaned up [ 1060.560653][T14719] EXT4-fs (loop0): Remounting filesystem read-only [ 1060.564990][T14701] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1060.630851][T14719] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5929: Corrupt filesystem [ 1060.644390][T14719] EXT4-fs (loop0): Remounting filesystem read-only [ 1060.664413][T14719] EXT4-fs error (device loop0): ext4_quota_write:7247: inode #3: comm syz.0.2808: mark_inode_dirty error [ 1060.685991][T14719] EXT4-fs (loop0): Remounting filesystem read-only [ 1060.695735][T14719] Quota error (device loop0): write_blk: dquota write failed [ 1060.709895][T14727] Quota error (device loop3): write_blk: dquota write failed [ 1060.772940][T14727] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 1060.783687][T14719] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1060.917875][T14719] EXT4-fs error (device loop0): ext4_acquire_dquot:6835: comm syz.0.2808: Failed to acquire dquot type 0 [ 1060.954292][T14727] EXT4-fs error (device loop3): ext4_acquire_dquot:6835: comm syz.3.2802: Failed to acquire dquot type 1 [ 1060.972202][T14730] loop4: detected capacity change from 0 to 128 [ 1060.994582][T14722] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fff0000) [ 1061.002784][T14722] FAT-fs (loop4): Filesystem has been set read-only [ 1061.032921][T14719] EXT4-fs (loop0): Remounting filesystem read-only [ 1061.039619][T14719] EXT4-fs error (device loop0): __ext4_get_inode_loc:4509: comm syz.0.2808: Invalid inode table block 0 in block_group 0 [ 1061.053115][T14732] loop2: detected capacity change from 0 to 512 [ 1061.076031][T14719] EXT4-fs (loop0): Remounting filesystem read-only [ 1061.085610][T14719] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5929: Corrupt filesystem [ 1061.096315][T14719] EXT4-fs (loop0): Remounting filesystem read-only [ 1061.103278][T14719] EXT4-fs error (device loop0): ext4_ext_truncate:4518: inode #15: comm syz.0.2808: mark_inode_dirty error [ 1061.115480][T14719] EXT4-fs (loop0): Remounting filesystem read-only [ 1061.122349][T14719] EXT4-fs error (device loop0): __ext4_get_inode_loc:4509: comm syz.0.2808: Invalid inode table block 0 in block_group 0 [ 1061.146861][T14732] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1061.181182][T14719] EXT4-fs (loop0): Remounting filesystem read-only [ 1061.193266][T14719] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5929: Corrupt filesystem [ 1061.226884][T14732] ext4 filesystem being mounted at /555/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1061.258194][T14719] EXT4-fs (loop0): Remounting filesystem read-only [ 1061.294100][T14719] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 1061.480705][T14719] EXT4-fs (loop0): Remounting filesystem read-only [ 1061.520808][T14719] EXT4-fs error (device loop0): __ext4_get_inode_loc:4509: comm syz.0.2808: Invalid inode table block 0 in block_group 0 [ 1061.640087][T14719] EXT4-fs (loop0): Remounting filesystem read-only [ 1061.650913][T14719] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5929: Corrupt filesystem [ 1061.664250][T14719] EXT4-fs (loop0): Remounting filesystem read-only [ 1061.686344][T14719] EXT4-fs error (device loop0): ext4_truncate:4314: inode #15: comm syz.0.2808: mark_inode_dirty error [ 1061.766886][T14719] EXT4-fs (loop0): Remounting filesystem read-only [ 1061.935930][ T4283] Bluetooth: hci0: command 0x0c1a tx timeout [ 1061.942436][ T26] audit: type=1800 audit(1775045583.039:157): pid=14744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2811" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 1061.976629][T14719] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 1062.230809][ T4283] Bluetooth: hci4: command 0x0c1a tx timeout [ 1062.237071][ T4283] Bluetooth: hci1: command 0x0c1a tx timeout [ 1062.243331][ T9900] Bluetooth: hci3: command 0x0c1a tx timeout [ 1062.249418][ T9900] Bluetooth: hci2: command 0x0c1a tx timeout [ 1062.260472][T14719] EXT4-fs (loop0): Remounting filesystem read-only [ 1062.291045][T14719] EXT4-fs (loop0): 1 truncate cleaned up [ 1062.318713][T14719] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1062.429834][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 1062.473376][T14719] EXT4-fs error (device loop0): __ext4_get_inode_loc:4509: comm syz.0.2808: Invalid inode table block 0 in block_group 0 [ 1062.556449][ T5854] EXT4-fs (loop3): unmounting filesystem. [ 1062.749258][T14066] EXT4-fs (loop0): unmounting filesystem. [ 1064.810158][T14757] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1064.816297][T14757] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1064.822425][T14757] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1064.828445][T14757] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1064.834499][T14757] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1065.064243][T14770] loop2: detected capacity change from 0 to 512 [ 1065.127980][T14770] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 1065.153911][T14770] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 1065.809238][T14784] loop0: detected capacity change from 0 to 512 [ 1065.901130][T14786] loop1: detected capacity change from 0 to 512 [ 1065.931350][T14786] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1066.006594][T14786] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1066.032450][T14784] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1066.048494][T14784] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1066.077543][T14786] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=84ec018, mo2=0002] [ 1066.138159][T14786] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3861: comm syz.1.2827: Allocating blocks 41-42 which overlap fs metadata [ 1066.231697][T14795] loop2: detected capacity change from 0 to 1024 [ 1066.288267][T14786] Quota error (device loop1): write_blk: dquota write failed [ 1066.311913][T14795] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1066.341043][T14786] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 1066.600915][ T26] audit: type=1800 audit(1775045587.719:158): pid=14798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2826" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 1066.656519][T14786] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1066.964220][T14795] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1066.983283][T14786] EXT4-fs error (device loop1): ext4_acquire_dquot:6835: comm syz.1.2827: Failed to acquire dquot type 1 [ 1067.106311][T14786] EXT4-fs error (device loop1): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 1067.176862][ T4283] Bluetooth: hci4: command 0x0c1a tx timeout [ 1067.183205][ T4283] Bluetooth: hci1: command 0x0c1a tx timeout [ 1067.189426][ T4283] Bluetooth: hci3: command 0x0c1a tx timeout [ 1067.196644][T14786] EXT4-fs error (device loop1): ext4_do_update_inode:5268: inode #12: comm syz.1.2827: corrupted inode contents [ 1067.208782][T13105] Bluetooth: hci2: command 0x0c1a tx timeout [ 1067.214893][T13105] Bluetooth: hci0: command 0x0c1a tx timeout [ 1067.248311][T14066] EXT4-fs (loop0): unmounting filesystem. [ 1067.257317][T14786] EXT4-fs error (device loop1): ext4_dirty_inode:6133: inode #12: comm syz.1.2827: mark_inode_dirty error [ 1067.315249][T14786] EXT4-fs error (device loop1): ext4_do_update_inode:5268: inode #12: comm syz.1.2827: corrupted inode contents [ 1067.333352][T14786] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.2827: mark_inode_dirty error [ 1067.566230][T14786] EXT4-fs error (device loop1): ext4_do_update_inode:5268: inode #12: comm syz.1.2827: corrupted inode contents [ 1067.791272][T14786] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 1067.878846][T14786] EXT4-fs error (device loop1): ext4_do_update_inode:5268: inode #12: comm syz.1.2827: corrupted inode contents [ 1067.988166][T14786] EXT4-fs error (device loop1): ext4_truncate:4314: inode #12: comm syz.1.2827: mark_inode_dirty error [ 1068.035301][T14786] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 1068.049294][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 1068.060583][T14786] EXT4-fs (loop1): 1 truncate cleaned up [ 1068.066541][T14786] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1068.964528][T14810] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1068.970814][T14810] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1068.976912][T14810] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1068.983132][T14810] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1068.989311][T14810] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1069.268192][T14831] loop3: detected capacity change from 0 to 512 [ 1069.302536][T14831] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 1069.336391][T14831] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 1069.591722][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 1070.028961][T14847] loop4: detected capacity change from 0 to 1024 [ 1070.036149][T14841] loop0: detected capacity change from 0 to 1024 [ 1070.181826][T14847] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1070.243918][T14841] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1070.322611][T14847] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1070.398491][ T26] audit: type=1800 audit(1775045591.649:159): pid=14833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2840" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 1072.905925][ T4283] Bluetooth: hci0: command 0x0c1a tx timeout [ 1072.913000][ T4283] Bluetooth: hci4: command 0x0c1a tx timeout [ 1072.919143][ T4283] Bluetooth: hci1: command 0x0c1a tx timeout [ 1072.925926][ T9900] Bluetooth: hci3: command 0x0c1a tx timeout [ 1072.932590][T13105] Bluetooth: hci2: command 0x0c1a tx timeout [ 1073.248202][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 1073.601259][T14869] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1073.607369][T14869] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1073.613561][T14869] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1073.619638][T14869] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1073.625911][T14869] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1073.808838][T14877] loop1: detected capacity change from 0 to 512 [ 1073.902072][T14877] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1073.910589][T14877] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1074.178620][T14882] loop4: detected capacity change from 0 to 256 [ 1074.600255][T14877] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=84ec018, mo2=0002] [ 1074.945846][T14877] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3861: comm syz.1.2852: Allocating blocks 41-42 which overlap fs metadata [ 1075.181588][T14877] Quota error (device loop1): write_blk: dquota write failed [ 1075.282683][T14877] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 1075.413030][T14877] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3861: comm syz.1.2852: Allocating blocks 41-42 which overlap fs metadata [ 1075.460291][T14882] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 1075.540138][T14877] Quota error (device loop1): write_blk: dquota write failed [ 1075.680741][T13105] Bluetooth: hci4: command 0x0c1a tx timeout [ 1075.686872][T13105] Bluetooth: hci1: command 0x0c1a tx timeout [ 1075.688434][ T4283] Bluetooth: hci3: command 0x0c1a tx timeout [ 1075.693079][T13105] Bluetooth: hci2: command 0x0c1a tx timeout [ 1075.699102][ T4283] Bluetooth: hci0: command 0x0c1a tx timeout [ 1075.711459][T14877] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1075.726125][T14066] EXT4-fs (loop0): unmounting filesystem. [ 1075.780167][T14877] EXT4-fs error (device loop1): ext4_acquire_dquot:6835: comm syz.1.2852: Failed to acquire dquot type 1 [ 1075.826689][T14891] loop4: detected capacity change from 0 to 512 [ 1075.855226][T14877] EXT4-fs error (device loop1): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 1075.881720][T14891] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 1075.923633][T14891] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 1075.932068][T14877] EXT4-fs error (device loop1): ext4_do_update_inode:5268: inode #12: comm syz.1.2852: corrupted inode contents [ 1075.967369][T14895] netlink: 'syz.0.2854': attribute type 1 has an invalid length. [ 1076.011315][T14877] EXT4-fs error (device loop1): ext4_dirty_inode:6133: inode #12: comm syz.1.2852: mark_inode_dirty error [ 1076.046336][T14877] EXT4-fs error (device loop1): ext4_do_update_inode:5268: inode #12: comm syz.1.2852: corrupted inode contents [ 1076.087083][T14877] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.2852: mark_inode_dirty error [ 1076.133262][T14877] EXT4-fs error (device loop1): ext4_do_update_inode:5268: inode #12: comm syz.1.2852: corrupted inode contents [ 1076.196313][T14877] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 1076.208161][T14877] EXT4-fs error (device loop1): ext4_do_update_inode:5268: inode #12: comm syz.1.2852: corrupted inode contents [ 1076.232148][T14877] EXT4-fs error (device loop1): ext4_truncate:4314: inode #12: comm syz.1.2852: mark_inode_dirty error [ 1076.251150][T14877] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 1076.276724][T14895] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1076.289094][T14877] EXT4-fs (loop1): 1 truncate cleaned up [ 1076.300731][T14877] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1076.389474][T14897] bond1: (slave veth3): Enslaving as an active interface with a down link [ 1077.075876][T14920] Quota error (device loop1): write_blk: dquota write failed [ 1077.083571][T14920] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 1077.093774][T14920] EXT4-fs error (device loop1): ext4_acquire_dquot:6835: comm syz.1.2852: Failed to acquire dquot type 1 [ 1077.276733][T14923] loop2: detected capacity change from 0 to 1024 [ 1077.330136][T14923] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1077.437836][T14923] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1077.647968][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 1078.513285][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 1079.301081][T14939] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1079.307233][T14939] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1079.313361][T14939] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1079.319465][T14939] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1079.325576][T14939] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1079.689479][T14948] loop2: detected capacity change from 0 to 256 [ 1079.968487][T14947] netlink: 'syz.1.2869': attribute type 1 has an invalid length. [ 1081.011257][T14948] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 1081.081582][T14947] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1081.097917][T14956] loop0: detected capacity change from 0 to 512 [ 1081.124675][T14956] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 1081.150687][T14956] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 1081.179839][T14949] bond3: (slave veth5): Enslaving as an active interface with a down link [ 1081.342647][ T4283] Bluetooth: hci4: command 0x0c1a tx timeout [ 1081.348731][ T4283] Bluetooth: hci1: command 0x0c1a tx timeout [ 1081.355414][T13105] Bluetooth: hci3: command 0x0c1a tx timeout [ 1081.361617][T13105] Bluetooth: hci2: command 0x0c1a tx timeout [ 1081.367646][T13105] Bluetooth: hci0: command 0x0c1a tx timeout [ 1083.679848][T14992] loop3: detected capacity change from 0 to 512 [ 1083.887653][T14992] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1083.901024][T14992] EXT4-fs warning (device loop3): ext4_enable_quotas:7087: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 1083.917085][T14992] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1083.944362][T14992] EXT4-fs error (device loop3): ext4_ext_check_inode:530: inode #13: comm syz.3.2878: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 1083.965650][T14992] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.2878: couldn't read orphan inode 13 (err -117) [ 1083.983800][T14992] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1084.045065][T14992] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2878'. [ 1084.615947][T15000] device hsr0 entered promiscuous mode [ 1084.825252][ T5854] EXT4-fs (loop3): unmounting filesystem. [ 1084.943040][T15011] loop2: detected capacity change from 0 to 256 [ 1084.987167][T15011] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 1086.234154][ T26] audit: type=1326 audit(1775045607.489:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15017 comm="syz.0.2886" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb531b9c819 code=0x0 [ 1086.252587][T15020] netlink: 'syz.1.2885': attribute type 1 has an invalid length. [ 1086.387870][T15020] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1086.413400][T15028] loop3: detected capacity change from 0 to 512 [ 1086.440485][T15028] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 1086.481874][T15028] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 1086.510350][T15024] bond4: (slave veth7): Enslaving as an active interface with a down link [ 1087.445127][T15034] loop1: detected capacity change from 0 to 256 [ 1089.096009][T15062] loop0: detected capacity change from 0 to 256 [ 1089.290115][T15062] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 1090.086846][T15084] loop4: detected capacity change from 0 to 512 [ 1090.112626][T15084] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 1090.127920][T15084] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 1090.356538][T15087] loop3: detected capacity change from 0 to 256 [ 1090.372244][T15089] loop1: detected capacity change from 0 to 1024 [ 1090.379671][T15089] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1090.383822][T15087] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 1090.740503][T15089] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1091.618180][T15095] netlink: 'syz.4.2906': attribute type 9 has an invalid length. [ 1091.622942][T15046] input: syz0 as /devices/virtual/input/input67 [ 1092.895043][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 1094.847576][T15118] sctp: [Deprecated]: syz.1.2914 (pid 15118) Use of int in maxseg socket option. [ 1094.847576][T15118] Use struct sctp_assoc_value instead [ 1095.255329][T15132] loop0: detected capacity change from 0 to 512 [ 1095.272201][T15135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2918'. [ 1095.329501][T15132] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 1095.419773][T15132] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 1095.506635][T15140] loop3: detected capacity change from 0 to 1024 [ 1095.549986][T15140] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1096.496322][T15140] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1097.702815][T15160] xt_connbytes: Forcing CT accounting to be enabled [ 1097.709701][T15160] Cannot find set identified by id 0 to match [ 1097.757467][ T5854] EXT4-fs (loop3): unmounting filesystem. [ 1098.436779][T15170] loop1: detected capacity change from 0 to 256 [ 1098.525544][T15172] loop2: detected capacity change from 0 to 256 [ 1098.545946][T15172] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 1098.582537][T15172] input: syz0 as /devices/virtual/input/input69 [ 1098.618094][T15170] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 1101.893274][T15181] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1101.941290][T15181] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1102.047937][T15198] netlink: 'syz.3.2935': attribute type 1 has an invalid length. [ 1102.136069][T15198] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1102.158423][T15200] bond2: (slave veth5): Enslaving as an active interface with a down link [ 1103.040664][T15221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2945'. [ 1103.087979][T15221] device syzkaller0 entered promiscuous mode [ 1103.153000][T15212] input: syz0 as /devices/virtual/input/input70 [ 1103.459611][T15226] device syzkaller0 entered promiscuous mode [ 1103.633773][T15229] loop0: detected capacity change from 0 to 512 [ 1103.696461][T15229] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1103.743092][T15229] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 1103.841686][T15229] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=84ec018, mo2=0002] [ 1103.882886][T15229] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3861: comm syz.0.2947: Allocating blocks 41-42 which overlap fs metadata [ 1103.922278][T15229] Quota error (device loop0): write_blk: dquota write failed [ 1103.936629][T15229] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 1103.970108][T15229] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1104.048427][T15229] EXT4-fs error (device loop0): ext4_acquire_dquot:6835: comm syz.0.2947: Failed to acquire dquot type 1 [ 1104.114748][T15229] EXT4-fs error (device loop0): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 1104.190744][T15229] EXT4-fs error (device loop0): ext4_do_update_inode:5268: inode #12: comm syz.0.2947: corrupted inode contents [ 1104.233648][T15229] EXT4-fs error (device loop0): ext4_dirty_inode:6133: inode #12: comm syz.0.2947: mark_inode_dirty error [ 1104.270185][T15242] loop1: detected capacity change from 0 to 256 [ 1104.319646][T15229] EXT4-fs error (device loop0): ext4_do_update_inode:5268: inode #12: comm syz.0.2947: corrupted inode contents [ 1104.392240][T15229] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm syz.0.2947: mark_inode_dirty error [ 1104.416706][T15242] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 1104.429678][T15245] netlink: 'syz.3.2953': attribute type 1 has an invalid length. [ 1104.459187][T15229] EXT4-fs error (device loop0): ext4_do_update_inode:5268: inode #12: comm syz.0.2947: corrupted inode contents [ 1104.474593][T15229] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 1104.490403][T15229] EXT4-fs error (device loop0): ext4_do_update_inode:5268: inode #12: comm syz.0.2947: corrupted inode contents [ 1104.503764][T15229] EXT4-fs error (device loop0): ext4_truncate:4314: inode #12: comm syz.0.2947: mark_inode_dirty error [ 1104.517000][T15229] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 1104.528722][T15229] EXT4-fs (loop0): 1 truncate cleaned up [ 1104.534643][T15229] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1104.643439][T15245] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1104.749264][T15250] bond3: (slave veth7): Enslaving as an active interface with a down link [ 1105.936200][T15270] loop2: detected capacity change from 0 to 4096 [ 1106.049908][T15276] loop3: detected capacity change from 0 to 256 [ 1106.122933][T15276] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 1106.240820][T15277] input: syz0 as /devices/virtual/input/input72 [ 1106.665671][T15270] EXT4-fs warning (device loop2): ext4_enable_quotas:7087: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1107.006639][T15270] EXT4-fs (loop2): mount failed [ 1107.457455][T15285] device syzkaller0 entered promiscuous mode [ 1107.584975][T15286] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1107.596623][T15286] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1108.681553][T15294] netlink: 'syz.2.2968': attribute type 1 has an invalid length. [ 1108.753341][T15294] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1108.843614][T15297] bond1: (slave veth3): Enslaving as an active interface with a down link [ 1108.915220][T15294] device veth0_to_bond entered promiscuous mode [ 1108.920832][T15308] xt_hashlimit: size too large, truncated to 1048576 [ 1108.983682][T15294] device veth0_to_bond left promiscuous mode [ 1109.056352][T15294] bond1: (slave vlan2): making interface the new active one [ 1109.111894][T15294] device veth0_to_bond entered promiscuous mode [ 1109.119108][T15294] device vlan2 entered promiscuous mode [ 1109.159019][T15294] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 1109.205529][T11253] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 1109.229768][T14066] EXT4-fs (loop0): unmounting filesystem. [ 1109.370670][ T4487] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1109.449487][T15314] loop0: detected capacity change from 0 to 512 [ 1109.474382][T15316] loop2: detected capacity change from 0 to 256 [ 1109.476663][T15314] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1109.775561][ T4487] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1109.787259][ T4487] usb 4-1: can't read configurations, error -61 [ 1109.961127][ T4487] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1110.173658][ T4487] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1110.220791][ T4487] usb 4-1: can't read configurations, error -61 [ 1110.238183][ T4487] usb usb4-port1: attempt power cycle [ 1110.350845][T15325] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1110.362569][T15325] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1111.043688][T15326] loop1: detected capacity change from 0 to 128 [ 1111.161177][T15326] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fff0000) [ 1111.169312][T15326] FAT-fs (loop1): Filesystem has been set read-only [ 1111.930797][ T4487] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1111.973774][ T4487] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1111.986461][ T4487] usb 4-1: can't read configurations, error -61 [ 1112.150995][ T4487] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1112.179010][T15333] loop1: detected capacity change from 0 to 1024 [ 1112.198427][T15333] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1112.249364][T15333] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1112.380900][ T4487] usb 4-1: device not accepting address 42, error -71 [ 1112.391671][ T4487] usb usb4-port1: unable to enumerate USB device [ 1112.515225][T15333] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 1112.674859][T15333] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 1114.363012][T15349] netlink: 'syz.3.2987': attribute type 1 has an invalid length. [ 1114.447523][T15349] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1114.668911][T15351] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1114.680015][T15351] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1115.043340][T15356] bond4: (slave veth9): Enslaving as an active interface with a down link [ 1115.928578][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.940765][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.174851][T13762] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1116.959064][T15381] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2994'. [ 1117.115584][T13762] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1117.222783][T15390] loop0: detected capacity change from 0 to 512 [ 1117.418117][T15390] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1117.468083][T15390] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1117.545701][T13762] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1117.713659][T15398] netlink: 'syz.4.2999': attribute type 1 has an invalid length. [ 1117.743664][ T4283] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1117.760121][ T4283] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1117.769299][ T4283] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1117.770903][T15398] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1117.785049][ T4280] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1117.921020][ T26] audit: type=1800 audit(1775045639.139:161): pid=15405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2997" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 1117.944022][ T4283] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1117.954306][ T4283] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1118.183384][T15400] bond5: (slave veth9): Enslaving as an active interface with a down link [ 1118.322658][T13762] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1118.451963][T15410] loop3: detected capacity change from 0 to 512 [ 1118.475849][T14066] EXT4-fs (loop0): unmounting filesystem. [ 1118.503275][T15410] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1118.528462][T15410] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 1118.627253][T15410] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=84ec018, mo2=0002] [ 1118.703029][T15410] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3861: comm syz.3.3003: Allocating blocks 41-42 which overlap fs metadata [ 1118.813022][T15410] Quota error (device loop3): write_blk: dquota write failed [ 1118.820485][T15410] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 1118.941139][T15410] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 1118.957335][T15410] EXT4-fs error (device loop3): ext4_acquire_dquot:6835: comm syz.3.3003: Failed to acquire dquot type 1 [ 1119.056996][T15421] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1119.068602][T15421] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1119.273294][T15410] EXT4-fs error (device loop3): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 1119.592721][T15410] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #12: comm syz.3.3003: corrupted inode contents [ 1119.691333][T15410] EXT4-fs error (device loop3): ext4_dirty_inode:6133: inode #12: comm syz.3.3003: mark_inode_dirty error [ 1119.749987][T15410] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #12: comm syz.3.3003: corrupted inode contents [ 1119.799608][T13762] tipc: Left network mode [ 1119.814147][T15410] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.3003: mark_inode_dirty error [ 1119.831357][T15410] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #12: comm syz.3.3003: corrupted inode contents [ 1120.107909][T15410] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 1120.141191][ T4283] Bluetooth: hci0: command 0x0409 tx timeout [ 1120.152377][T15410] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #12: comm syz.3.3003: corrupted inode contents [ 1120.386919][T15410] EXT4-fs error (device loop3): ext4_truncate:4314: inode #12: comm syz.3.3003: mark_inode_dirty error [ 1120.517291][T15410] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 1120.808129][T15410] EXT4-fs (loop3): 1 truncate cleaned up [ 1120.833074][T15399] chnl_net:caif_netlink_parms(): no params data found [ 1120.876478][T15410] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1120.941799][T15436] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1120.947964][T15436] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1120.955045][T15436] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1120.961381][T15436] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1120.967466][T15436] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1120.973534][T15436] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1120.984221][T15436] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 1121.903536][T15451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3009'. [ 1121.990124][ T5854] EXT4-fs (loop3): unmounting filesystem. [ 1122.005306][T15461] loop4: detected capacity change from 0 to 512 [ 1122.145011][T15461] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1122.176695][T15461] ext4 filesystem being mounted at /582/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1123.046131][ T4280] Bluetooth: hci1: command 0x0c1a tx timeout [ 1123.052453][ T9900] Bluetooth: hci3: command 0x0c1a tx timeout [ 1123.058528][ T4284] Bluetooth: hci2: command 0x0c1a tx timeout [ 1123.058644][ T4283] Bluetooth: hci4: command 0x0c1a tx timeout [ 1123.070949][T13105] Bluetooth: hci0: command 0x040f tx timeout [ 1123.139606][ T26] audit: type=1800 audit(1775045644.389:162): pid=15474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3011" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 1123.464255][T15455] device syzkaller0 entered promiscuous mode [ 1123.747726][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 1123.821933][T15481] netlink: 'syz.3.3012': attribute type 1 has an invalid length. [ 1123.980930][T15481] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1124.120839][T15484] bond5: (slave veth11): Enslaving as an active interface with a down link [ 1124.165339][ T38] device vlan2 left promiscuous mode [ 1124.292357][T15399] bridge0: port 1(bridge_slave_0) entered blocking state [ 1124.300787][T15399] bridge0: port 1(bridge_slave_0) entered disabled state [ 1124.330685][T15399] device bridge_slave_0 entered promiscuous mode [ 1124.433683][T15399] bridge0: port 2(bridge_slave_1) entered blocking state [ 1124.449406][T15399] bridge0: port 2(bridge_slave_1) entered disabled state [ 1124.472510][T15399] device bridge_slave_1 entered promiscuous mode [ 1124.580446][T15399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1124.620308][T15399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1124.819239][T15494] loop4: detected capacity change from 0 to 1024 [ 1124.967906][T15494] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1124.996379][T15399] team0: Port device team_slave_0 added [ 1125.004019][ T26] audit: type=1800 audit(1775045646.259:163): pid=15494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3014" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 1125.033622][T15399] team0: Port device team_slave_1 added [ 1125.111030][ T4284] Bluetooth: hci0: command 0x0419 tx timeout [ 1125.496096][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 1125.504225][T15399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1125.512851][T15399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1125.587888][T15529] loop3: detected capacity change from 0 to 512 [ 1125.625678][T15399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1125.645355][T15529] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1125.680360][T15529] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 1125.694400][T15517] tipc: Started in network mode [ 1125.699384][T15517] tipc: Node identity 8e46f45f891c, cluster identity 4711 [ 1125.721081][T15517] tipc: Enabled bearer , priority 0 [ 1125.752769][T15521] device syzkaller0 entered promiscuous mode [ 1125.829930][T13762] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1125.849691][T13762] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1125.904808][T13762] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1125.910560][T15529] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=84ec018, mo2=0002] [ 1125.912606][T13762] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1125.929143][T13762] device bridge_slave_1 left promiscuous mode [ 1125.936026][T13762] bridge0: port 2(bridge_slave_1) entered disabled state [ 1125.967642][T15529] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3861: comm syz.3.3021: Allocating blocks 41-42 which overlap fs metadata [ 1126.254993][T13762] device bridge_slave_0 left promiscuous mode [ 1126.347428][T13762] bridge0: port 1(bridge_slave_0) entered disabled state [ 1126.448695][T15529] Quota error (device loop3): write_blk: dquota write failed [ 1126.649369][T15529] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 1126.681624][T15529] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 1126.709268][T15529] EXT4-fs error (device loop3): ext4_acquire_dquot:6835: comm syz.3.3021: Failed to acquire dquot type 1 [ 1126.759055][T15529] EXT4-fs error (device loop3): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 1126.778526][T13762] device veth1_macvtap left promiscuous mode [ 1126.781226][T15529] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #12: comm syz.3.3021: corrupted inode contents [ 1126.790684][T13762] device veth0_macvtap left promiscuous mode [ 1126.809493][T15529] EXT4-fs error (device loop3): ext4_dirty_inode:6133: inode #12: comm syz.3.3021: mark_inode_dirty error [ 1126.820796][T13762] device veth1_vlan left promiscuous mode [ 1126.829051][T15529] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #12: comm syz.3.3021: corrupted inode contents [ 1126.839129][T13762] device veth0_vlan left promiscuous mode [ 1126.852522][T15529] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.3021: mark_inode_dirty error [ 1126.875210][T15529] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #12: comm syz.3.3021: corrupted inode contents [ 1126.894379][T15529] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 1126.907820][T15529] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #12: comm syz.3.3021: corrupted inode contents [ 1126.937825][T15529] EXT4-fs error (device loop3): ext4_truncate:4314: inode #12: comm syz.3.3021: mark_inode_dirty error [ 1126.962054][T15529] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 1126.987696][T15529] EXT4-fs (loop3): 1 truncate cleaned up [ 1126.997646][T15529] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1127.180964][ T4284] Bluetooth: hci0: command 0x0c1a tx timeout [ 1127.713754][T13762] bond4 (unregistering): (slave veth7): Releasing active interface [ 1128.006703][ T5854] EXT4-fs (loop3): unmounting filesystem. [ 1128.187326][T13762] bond4 (unregistering): Released all slaves [ 1128.247836][T13762] bond3 (unregistering): (slave veth5): Releasing active interface [ 1128.708149][T13762] bond3 (unregistering): Released all slaves [ 1129.174418][T13762] bond2 (unregistering): Released all slaves [ 1129.216611][T13762] bond1 (unregistering): (slave veth3): Releasing active interface [ 1129.269625][ T4280] Bluetooth: hci0: command 0x0406 tx timeout [ 1129.438446][T13762] bond1 (unregistering): Released all slaves [ 1130.108109][T13762] team0 (unregistering): Port device team_slave_1 removed [ 1130.172924][T13762] team0 (unregistering): Port device team_slave_0 removed [ 1130.237660][T13762] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1130.300191][T13762] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1130.798650][T13762] bond0 (unregistering): Released all slaves [ 1130.896421][T15530] tipc: Resetting bearer [ 1130.909871][T15399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1130.917704][T15399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1130.951312][T15399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1130.989954][T15516] tipc: Resetting bearer [ 1131.019415][T15516] tipc: Disabling bearer [ 1131.034464][T15549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3024'. [ 1131.126897][ T4313] tipc: Node number set to 123401311 [ 1131.155187][T15552] device syzkaller0 entered promiscuous mode [ 1131.275325][T15399] device hsr_slave_0 entered promiscuous mode [ 1131.358284][T15399] device hsr_slave_1 entered promiscuous mode [ 1131.407113][T15575] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3027'. [ 1131.781129][T15585] loop4: detected capacity change from 0 to 1024 [ 1131.816731][T15585] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1131.906023][T15585] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1135.301592][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 1137.118933][T15622] netlink: 'syz.2.3037': attribute type 1 has an invalid length. [ 1137.307367][T15622] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1138.011980][T15629] loop0: detected capacity change from 0 to 256 [ 1138.155943][T15629] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 1138.257569][T15625] bond2: (slave veth5): Enslaving as an active interface with a down link [ 1138.318164][T15629] input: syz0 as /devices/virtual/input/input73 [ 1138.653653][T15399] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1138.692973][T15399] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1138.778213][T15399] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1138.819223][T15644] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3039'. [ 1138.864297][T15399] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1139.171396][T15399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1139.249792][T15399] 8021q: adding VLAN 0 to HW filter on device team0 [ 1139.280872][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1139.302671][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1139.349360][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1139.391609][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1139.430843][ T4328] bridge0: port 1(bridge_slave_0) entered blocking state [ 1139.438323][ T4328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1139.477831][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1139.539646][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1139.573999][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1139.609110][ T4328] bridge0: port 2(bridge_slave_1) entered blocking state [ 1139.616443][ T4328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1139.676311][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1139.715135][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1139.770311][T14996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1139.813938][T14996] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1139.856212][T14996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1139.884023][T14996] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1139.932356][T14996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1139.967509][T14996] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1140.005388][T15399] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1140.054395][T15399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1140.113098][T14996] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1140.124414][T14996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1140.157830][T14996] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1140.289464][T15665] loop2: detected capacity change from 0 to 1024 [ 1140.331984][T15665] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1140.483918][T15665] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1142.357081][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 1142.390479][T15685] netlink: 'syz.4.3048': attribute type 1 has an invalid length. [ 1142.478117][T15685] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1142.522799][T15690] bond6: (slave veth11): Enslaving as an active interface with a down link [ 1142.814154][T15399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1142.861425][T15476] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1142.891717][T15476] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1143.683838][T15715] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3050'. [ 1143.856614][T15721] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3053'. [ 1144.771609][T15744] loop3: detected capacity change from 0 to 1024 [ 1144.817696][T15744] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1144.952775][T15744] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1145.052335][T15751] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1145.064010][T15751] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1145.888313][T15754] netlink: 'syz.2.3059': attribute type 1 has an invalid length. [ 1146.119809][T15754] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1146.348479][T15757] bond3: (slave veth7): Enslaving as an active interface with a down link [ 1146.383329][ T5854] EXT4-fs (loop3): unmounting filesystem. [ 1146.545553][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1146.565536][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1146.683364][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1146.716873][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1146.725557][T15771] loop2: detected capacity change from 0 to 512 [ 1146.763723][T15399] device veth0_vlan entered promiscuous mode [ 1146.783146][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1146.798425][T15771] EXT4-fs: Ignoring removed bh option [ 1146.800187][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1146.848746][T15771] EXT4-fs: inline encryption not supported [ 1146.850777][T15773] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3064'. [ 1146.888598][T15771] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 1147.017585][T15399] device veth1_vlan entered promiscuous mode [ 1147.085637][T15771] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1147.186690][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1147.208094][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1147.218303][T15771] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.3063: bg 0: block 248: padding at end of block bitmap is not set [ 1147.255602][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1147.329312][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1147.343380][T15771] Quota error (device loop2): write_blk: dquota write failed [ 1147.360897][T15771] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1147.371463][T15399] device veth0_macvtap entered promiscuous mode [ 1147.390765][T15771] EXT4-fs error (device loop2): ext4_acquire_dquot:6835: comm syz.2.3063: Failed to acquire dquot type 1 [ 1147.407996][T15399] device veth1_macvtap entered promiscuous mode [ 1147.427485][T15476] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1147.455019][T15476] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1147.468169][T15771] EXT4-fs (loop2): 1 truncate cleaned up [ 1147.478878][T15771] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1147.509027][T15399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1147.543250][T15791] loop3: detected capacity change from 0 to 512 [ 1147.559325][T15399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1147.582436][T15791] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1147.596898][T15399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1147.620761][T15399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1147.678552][T15399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1147.747509][T15399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1147.789932][T15399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1147.805264][T15399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1147.818974][T15399] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1147.830550][T15399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1147.841302][T15399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1147.855770][T15399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1147.867267][T15399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1147.877392][T15399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1147.917599][T15399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1147.937662][T15399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1147.961514][T15399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1147.984959][T15399] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1148.004167][T15477] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1148.026961][T15477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1148.049718][T15477] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1148.075829][T15477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1148.104481][T15399] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1148.120272][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 1148.124394][T15399] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1148.176204][T15399] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1148.195232][T15399] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1148.404406][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1148.418787][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1148.426881][T15809] netlink: 'syz.2.3072': attribute type 1 has an invalid length. [ 1148.557412][T15809] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1148.594221][T15477] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1148.738902][T15812] bond4: (slave veth9): Enslaving as an active interface with a down link [ 1148.771238][T15815] device syzkaller0 entered promiscuous mode [ 1148.923956][ T4328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1148.947665][ T4328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1148.990816][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1149.307987][T15830] loop5: detected capacity change from 0 to 512 [ 1149.399105][T15830] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1150.925772][T15849] loop4: detected capacity change from 0 to 512 [ 1150.991208][T15849] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1151.072602][T15849] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1151.085052][T15849] ext4 filesystem being mounted at /602/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1151.226107][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 1151.633490][ T4284] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1151.645548][ T4284] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1151.654906][ T4284] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1151.663139][ T4284] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1151.680817][T13105] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1151.688256][T13105] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1151.783506][T15860] netlink: 'syz.5.3084': attribute type 1 has an invalid length. [ 1152.079932][ T38] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1152.319583][ T38] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1152.455049][T15877] loop5: detected capacity change from 0 to 4096 [ 1152.679898][T15877] EXT4-fs error (device loop5): ext4_quota_enable:7039: comm syz.5.3087: Bad quota inum: 2, type: 1 [ 1152.718068][T15877] EXT4-fs warning (device loop5): ext4_enable_quotas:7087: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 1152.848550][ T38] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1153.079882][T15877] EXT4-fs (loop5): mount failed [ 1153.295698][T15885] loop0: detected capacity change from 0 to 512 [ 1153.543415][T15885] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1153.560056][T15885] ext4 filesystem being mounted at /65/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1153.777784][T13105] Bluetooth: hci3: command 0x0409 tx timeout [ 1153.782637][ T38] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1154.072354][ T26] audit: type=1800 audit(1775045675.179:164): pid=15901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3090" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 1154.971983][T14066] EXT4-fs (loop0): unmounting filesystem. [ 1155.280446][ T5854] EXT4-fs (loop3): unmounting filesystem. [ 1155.348443][T15914] loop5: detected capacity change from 0 to 512 [ 1155.377522][T15857] chnl_net:caif_netlink_parms(): no params data found [ 1155.379416][T15916] loop0: detected capacity change from 0 to 512 [ 1155.392496][T15914] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1155.502904][T15916] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1155.688579][T15916] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1155.705907][T15916] ext4 filesystem being mounted at /66/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1155.820879][T13105] Bluetooth: hci3: command 0x041b tx timeout [ 1155.865984][T14066] EXT4-fs (loop0): unmounting filesystem. [ 1156.055429][T15857] bridge0: port 1(bridge_slave_0) entered blocking state [ 1156.127562][T15857] bridge0: port 1(bridge_slave_0) entered disabled state [ 1156.162939][T15857] device bridge_slave_0 entered promiscuous mode [ 1156.182296][T15932] netlink: 'syz.0.3097': attribute type 1 has an invalid length. [ 1156.315054][T15936] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1156.326728][T15936] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1156.880338][T15932] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1156.985724][T15933] bond2: (slave vlan2): making interface the new active one [ 1157.035817][T15933] bond2: (slave vlan2): Enslaving as an active interface with an up link [ 1157.062066][T15857] bridge0: port 2(bridge_slave_1) entered blocking state [ 1157.069346][T15857] bridge0: port 2(bridge_slave_1) entered disabled state [ 1157.091175][T15857] device bridge_slave_1 entered promiscuous mode [ 1157.390410][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 1157.900824][T13105] Bluetooth: hci3: command 0x040f tx timeout [ 1158.349381][T15857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1158.528868][T15959] hub 9-0:1.0: USB hub found [ 1158.529818][T15959] hub 9-0:1.0: 1 port detected [ 1159.162907][T15857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1159.186145][T15857] team0: Port device team_slave_0 added [ 1159.188615][T15857] team0: Port device team_slave_1 added [ 1159.226093][T15857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1159.244626][T15857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1159.244656][T15857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1159.246699][T15857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1159.246717][T15857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1159.246743][T15857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1159.327994][T15857] device hsr_slave_0 entered promiscuous mode [ 1159.335520][T15959] tty tty30: ldisc open failed (-12), clearing slot 29 [ 1159.482440][T15857] device hsr_slave_1 entered promiscuous mode [ 1159.510892][T15857] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1159.518617][T15857] Cannot create hsr debugfs directory [ 1159.934681][ T4470] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1159.980857][T13105] Bluetooth: hci3: command 0x0419 tx timeout [ 1160.011956][T15974] loop0: detected capacity change from 0 to 1024 [ 1160.122299][T15974] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 1160.144976][ T4470] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1160.153802][T15974] EXT4-fs error (device loop0): ext4_get_journal_inode:5756: comm syz.0.3107: inode #4294967295: comm syz.0.3107: iget: illegal inode # [ 1160.161586][ T4470] usb 4-1: can't read configurations, error -61 [ 1160.199477][T15974] EXT4-fs (loop0): no journal found [ 1160.216985][T15974] EXT4-fs (loop0): can't get journal size [ 1160.293480][T15974] EXT4-fs (loop0): failed to initialize system zone (-22) [ 1160.325241][T15974] EXT4-fs (loop0): mount failed [ 1160.358404][T15977] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3108'. [ 1160.391033][ T4470] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1160.745781][ T4470] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1160.768492][ T4470] usb 4-1: can't read configurations, error -61 [ 1160.822670][ T4470] usb usb4-port1: attempt power cycle [ 1161.800070][T15984] loop4: detected capacity change from 0 to 1024 [ 1161.831219][ T4470] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1161.913867][T15984] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1161.924849][ T4470] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1162.061317][ T26] audit: type=1800 audit(1775045683.249:165): pid=15984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3110" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 1162.222085][ T4470] usb 4-1: can't read configurations, error -61 [ 1162.521155][ T4470] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1162.743910][ T4470] usb 4-1: device descriptor read/8, error -71 [ 1162.871199][ T4470] usb usb4-port1: unable to enumerate USB device [ 1163.178670][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 1164.336227][T16026] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3118'. [ 1164.351864][T16030] device syzkaller0 entered promiscuous mode [ 1164.540535][T16036] loop0: detected capacity change from 0 to 1024 [ 1164.548449][T16036] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1164.656892][T16036] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1165.696893][T15857] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1165.713293][T14066] EXT4-fs (loop0): unmounting filesystem. [ 1165.740897][T15857] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1165.899649][T15857] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1166.250050][T15857] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1167.252453][ T38] device hsr_slave_0 left promiscuous mode [ 1167.259108][ T38] device hsr_slave_1 left promiscuous mode [ 1167.423880][ T38] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1167.474460][ T38] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1167.545558][ T38] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1167.578058][ T38] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1167.598500][ T38] device bridge_slave_1 left promiscuous mode [ 1167.627228][ T38] bridge0: port 2(bridge_slave_1) entered disabled state [ 1167.678393][T16091] loop3: detected capacity change from 0 to 256 [ 1167.734725][T16091] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 1168.327755][ T38] device bridge_slave_0 left promiscuous mode [ 1168.376013][ T38] bridge0: port 1(bridge_slave_0) entered disabled state [ 1168.618672][ T38] device veth0_to_bond left promiscuous mode [ 1168.689929][ T38] device veth1_macvtap left promiscuous mode [ 1168.730745][ T38] device veth1_vlan left promiscuous mode [ 1168.761839][ T38] device veth0_vlan left promiscuous mode [ 1169.129334][ T38] bond4 (unregistering): (slave veth9): Releasing active interface [ 1170.186710][ T38] bond4 (unregistering): Released all slaves [ 1170.229441][ T38] bond3 (unregistering): (slave veth7): Releasing active interface [ 1170.483930][ T38] bond3 (unregistering): Released all slaves [ 1170.566442][ T38] bond2 (unregistering): (slave veth5): Releasing active interface [ 1170.939271][ T38] bond2 (unregistering): Released all slaves [ 1170.982995][ T38] bond1 (unregistering): (slave vlan2): Releasing active interface [ 1171.044412][ T38] bond1 (unregistering): (slave veth3): Releasing active interface [ 1171.415441][ T38] bond1 (unregistering): Released all slaves [ 1172.179820][ T38] team0 (unregistering): Port device team_slave_1 removed [ 1172.249556][ T38] team0 (unregistering): Port device team_slave_0 removed [ 1172.314754][ T38] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1172.383313][ T38] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1172.889936][ T38] bond0 (unregistering): Released all slaves [ 1173.010502][T16083] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3131'. [ 1173.080243][T16088] device syzkaller0 entered promiscuous mode [ 1174.328489][T16135] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3138'. [ 1174.711380][T16145] loop4: detected capacity change from 0 to 512 [ 1174.825220][T16147] hub 9-0:1.0: USB hub found [ 1174.830907][T16147] hub 9-0:1.0: 1 port detected [ 1175.098326][T16145] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1175.349687][T16145] EXT4-fs (loop4): 1 truncate cleaned up [ 1175.387946][T16145] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1175.650278][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 1175.922574][T15857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1175.942544][T16162] loop0: detected capacity change from 0 to 512 [ 1176.004887][T16162] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1176.019271][T16166] loop3: detected capacity change from 0 to 512 [ 1176.029680][T16162] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 1176.094200][ T5774] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1176.104176][ T5774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1176.135558][T16166] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1176.149011][T15857] 8021q: adding VLAN 0 to HW filter on device team0 [ 1176.171549][T16162] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=84ec018, mo2=0002] [ 1176.199073][T16162] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3861: comm syz.0.3146: Allocating blocks 41-42 which overlap fs metadata [ 1176.263335][T16166] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.3148: invalid indirect mapped block 4294967295 (level 1) [ 1176.292433][T16162] Quota error (device loop0): write_blk: dquota write failed [ 1176.299986][T16162] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 1176.314371][T16166] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.3148: invalid indirect mapped block 4294967295 (level 1) [ 1176.316678][T16162] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1176.341835][T16162] EXT4-fs error (device loop0): ext4_acquire_dquot:6835: comm syz.0.3146: Failed to acquire dquot type 1 [ 1176.359488][T11253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1176.368807][T16162] EXT4-fs error (device loop0): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 1176.395530][T16162] EXT4-fs error (device loop0): ext4_do_update_inode:5268: inode #12: comm syz.0.3146: corrupted inode contents [ 1176.408284][T16166] EXT4-fs (loop3): 2 truncates cleaned up [ 1176.430366][T11253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1176.470870][T11253] bridge0: port 1(bridge_slave_0) entered blocking state [ 1176.478251][T11253] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1176.510753][T16166] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1176.540413][T16162] EXT4-fs error (device loop0): ext4_dirty_inode:6133: inode #12: comm syz.0.3146: mark_inode_dirty error [ 1176.561170][T11253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1176.605312][T16162] EXT4-fs error (device loop0): ext4_do_update_inode:5268: inode #12: comm syz.0.3146: corrupted inode contents [ 1176.623770][T11253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1176.631589][T16166] [ 1176.632596][T16162] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm syz.0.3146: mark_inode_dirty error [ 1176.634694][T16166] ====================================================== [ 1176.653175][T16166] WARNING: possible circular locking dependency detected [ 1176.660412][T16166] syzkaller #0 Not tainted [ 1176.665033][T16166] ------------------------------------------------------ [ 1176.672268][T16166] syz.3.3148/16166 is trying to acquire lock: [ 1176.678678][T16166] ffff88804c49ef20 (&ei->xattr_sem){++++}-{3:3}, at: ext4_xattr_get+0x107/0x650 [ 1176.682801][T16162] EXT4-fs error (device loop0): ext4_do_update_inode:5268: inode #12: comm syz.0.3146: corrupted inode contents [ 1176.687941][T16166] [ 1176.687941][T16166] but task is already holding lock: [ 1176.687951][T16166] ffff88807c170b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_ext_migrate+0x2d7/0xe60 [ 1176.688065][T16166] [ 1176.688065][T16166] which lock already depends on the new lock. [ 1176.688065][T16166] [ 1176.688073][T16166] [ 1176.688073][T16166] the existing dependency chain (in reverse order) is: [ 1176.688079][T16166] [ 1176.688079][T16166] -> #1 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 1176.688111][T16166] percpu_down_read+0x44/0x1a0 [ 1176.688133][T16166] ext4_writepages+0x20f/0x2f40 [ 1176.688153][T16166] do_writepages+0x3ba/0x640 [ 1176.702148][T11253] bridge0: port 2(bridge_slave_1) entered blocking state [ 1176.707783][T16166] __writeback_single_inode+0x156/0x1160 [ 1176.718730][T11253] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1176.729315][T16166] writeback_single_inode+0x3cb/0x8e0 [ 1176.729344][T16166] write_inode_now+0x17f/0x210 [ 1176.768634][T16162] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 1176.770257][T16166] iput+0x613/0x980 [ 1176.784518][T16162] EXT4-fs error (device loop0): ext4_do_update_inode:5268: inode #12: comm syz.0.3146: corrupted inode contents [ 1176.790042][T16166] ext4_xattr_block_set+0x249a/0x32b0 [ 1176.790075][T16166] ext4_expand_extra_isize_ea+0x120b/0x1dc0 [ 1176.790099][T16166] __ext4_expand_extra_isize+0x301/0x3e0 [ 1176.790118][T16166] __ext4_mark_inode_dirty+0x47f/0x770 [ 1176.790202][T16166] ext4_evict_inode+0xa7f/0x1110 [ 1176.790228][T16166] evict+0x4c9/0x8d0 [ 1176.790251][T16166] ext4_orphan_cleanup+0xbeb/0x1420 [ 1176.814731][T16162] EXT4-fs error (device loop0): ext4_truncate:4314: inode #12: comm syz.0.3146: mark_inode_dirty error [ 1176.820796][T16166] ext4_fill_super+0x7829/0x7dc0 [ 1176.820828][T16166] get_tree_bdev+0x3f1/0x610 [ 1176.883044][T16166] vfs_get_tree+0x88/0x270 [ 1176.887998][T16166] do_new_mount+0x24a/0xa40 [ 1176.893044][T16166] __se_sys_mount+0x2e3/0x3d0 [ 1176.898273][T16166] do_syscall_64+0x4c/0xa0 [ 1176.903263][T16166] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1176.909778][T16166] [ 1176.909778][T16166] -> #0 (&ei->xattr_sem){++++}-{3:3}: [ 1176.917364][T16166] __lock_acquire+0x2d07/0x7d10 [ 1176.922906][T16166] lock_acquire+0x1bb/0x4a0 [ 1176.927953][T16166] down_read+0x42/0x2d0 [ 1176.932773][T16166] ext4_xattr_get+0x107/0x650 [ 1176.937989][T16166] ext4_get_acl+0x80/0x660 [ 1176.942947][T16166] get_acl+0x154/0x250 [ 1176.947665][T16166] posix_acl_create+0x124/0x430 [ 1176.953052][T16166] ext4_init_acl+0xb7/0x330 [ 1176.958089][T16166] __ext4_new_inode+0x2ed4/0x3ad0 [ 1176.963642][T16166] ext4_ext_migrate+0x5f1/0xe60 [ 1176.969022][T16166] ext4_fileattr_set+0xf71/0x1770 [ 1176.974578][T16166] vfs_fileattr_set+0x859/0xb10 [ 1176.979964][T16166] do_vfs_ioctl+0x16ef/0x1d40 [ 1176.985346][T16166] __se_sys_ioctl+0x83/0x170 [ 1176.990564][T16166] do_syscall_64+0x4c/0xa0 [ 1176.995685][T16166] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1177.002202][T16166] [ 1177.002202][T16166] other info that might help us debug this: [ 1177.002202][T16166] [ 1177.012450][T16166] Possible unsafe locking scenario: [ 1177.012450][T16166] [ 1177.019995][T16166] CPU0 CPU1 [ 1177.025378][T16166] ---- ---- [ 1177.030831][T16166] lock(&sbi->s_writepages_rwsem); [ 1177.036191][T16166] lock(&ei->xattr_sem); [ 1177.043142][T16166] lock(&sbi->s_writepages_rwsem); [ 1177.050873][T16166] lock(&ei->xattr_sem); [ 1177.055212][T16166] [ 1177.055212][T16166] *** DEADLOCK *** [ 1177.055212][T16166] [ 1177.063357][T16166] 3 locks held by syz.3.3148/16166: [ 1177.068562][T16166] #0: ffff88807c176460 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write_file+0x5c/0x200 [ 1177.078332][T16166] #1: ffff88804c49f258 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: vfs_fileattr_set+0x150/0xb10 [ 1177.088884][T16166] #2: ffff88807c170b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_ext_migrate+0x2d7/0xe60 [ 1177.099432][T16166] [ 1177.099432][T16166] stack backtrace: [ 1177.105321][T16166] CPU: 0 PID: 16166 Comm: syz.3.3148 Not tainted syzkaller #0 [ 1177.112780][T16166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1177.122851][T16166] Call Trace: [ 1177.126137][T16166] [ 1177.129076][T16166] dump_stack_lvl+0x188/0x24e [ 1177.133772][T16166] ? load_image+0x400/0x400 [ 1177.138393][T16166] ? show_regs_print_info+0x12/0x12 [ 1177.143606][T16166] ? print_circular_bug+0x12b/0x1a0 [ 1177.148906][T16166] check_noncircular+0x296/0x330 [ 1177.153858][T16166] ? __kernel_text_address+0x9/0x30 [ 1177.159129][T16166] ? add_chain_block+0x940/0x940 [ 1177.164169][T16166] ? lockdep_lock+0xf1/0x1f0 [ 1177.168923][T16166] ? _find_first_zero_bit+0xcf/0x100 [ 1177.174409][T16166] __lock_acquire+0x2d07/0x7d10 [ 1177.179276][T16166] ? __lock_acquire+0x12f4/0x7d10 [ 1177.184325][T16166] ? verify_lock_unused+0x140/0x140 [ 1177.189539][T16166] ? verify_lock_unused+0x140/0x140 [ 1177.194838][T16166] lock_acquire+0x1bb/0x4a0 [ 1177.199446][T16166] ? ext4_xattr_get+0x107/0x650 [ 1177.204311][T16166] ? __might_sleep+0xd0/0xd0 [ 1177.208961][T16166] ? read_lock_is_recursive+0x10/0x10 [ 1177.214383][T16166] ? get_cached_acl+0xe1/0x540 [ 1177.219186][T16166] ? __lock_acquire+0x7d10/0x7d10 [ 1177.224233][T16166] down_read+0x42/0x2d0 [ 1177.228414][T16166] ? ext4_xattr_get+0x107/0x650 [ 1177.233367][T16166] ext4_xattr_get+0x107/0x650 [ 1177.238064][T16166] ext4_get_acl+0x80/0x660 [ 1177.242493][T16166] ? get_random_u32+0x4cd/0x910 [ 1177.247518][T16166] ? lockdep_hardirqs_on+0x94/0x140 [ 1177.252820][T16166] get_acl+0x154/0x250 [ 1177.256905][T16166] posix_acl_create+0x124/0x430 [ 1177.261780][T16166] ext4_init_acl+0xb7/0x330 [ 1177.266472][T16166] ? __ext4_set_acl+0x610/0x610 [ 1177.271514][T16166] ? _raw_spin_unlock+0x24/0x40 [ 1177.276457][T16166] ? insert_inode_locked+0x385/0x3e0 [ 1177.281751][T16166] ? ext4_has_metadata_csum+0x132/0x1d0 [ 1177.287414][T16166] __ext4_new_inode+0x2ed4/0x3ad0 [ 1177.292544][T16166] ? ext4_has_group_desc_csum+0x1f0/0x1f0 [ 1177.298365][T16166] ? rcu_is_watching+0x11/0xa0 [ 1177.303205][T16166] ? from_kgid+0x169/0x690 [ 1177.307650][T16166] ? make_kgid+0x660/0x660 [ 1177.312076][T16166] ext4_ext_migrate+0x5f1/0xe60 [ 1177.317118][T16166] ? mb_regenerate_buddy+0x4e0/0x4e0 [ 1177.322678][T16166] ? ext4_set_inode_flags+0x245/0x5b0 [ 1177.328226][T16166] ? ext4_change_inode_journal_flag+0x168/0x6b0 [ 1177.334737][T16166] ext4_fileattr_set+0xf71/0x1770 [ 1177.339778][T16166] ? verify_lock_unused+0x140/0x140 [ 1177.345079][T16166] ? ext4_fileattr_get+0x200/0x200 [ 1177.350571][T16166] ? rwsem_write_trylock+0x135/0x1c0 [ 1177.355869][T16166] ? memset+0x1e/0x40 [ 1177.359907][T16166] ? fileattr_fill_flags+0x1cc/0x300 [ 1177.365241][T16166] ? fscrypt_prepare_setflags+0x5e/0x210 [ 1177.370913][T16166] vfs_fileattr_set+0x859/0xb10 [ 1177.375775][T16166] ? copy_fsxattr_to_user+0x230/0x230 [ 1177.381170][T16166] do_vfs_ioctl+0x16ef/0x1d40 [ 1177.386034][T16166] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 1177.391773][T16166] ? tomoyo_path_number_perm+0x205/0x650 [ 1177.397639][T16166] ? __lock_acquire+0x7d10/0x7d10 [ 1177.402681][T16166] ? slab_free_freelist_hook+0x131/0x1a0 [ 1177.408350][T16166] ? tomoyo_path_number_perm+0x4fb/0x650 [ 1177.414020][T16166] ? __kmem_cache_free+0xb6/0x1f0 [ 1177.419086][T16166] ? tomoyo_path_number_perm+0x205/0x650 [ 1177.424842][T16166] ? tomoyo_path_number_perm+0x5a4/0x650 [ 1177.430488][T16166] ? tomoyo_path_number_perm+0x205/0x650 [ 1177.436136][T16166] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1177.441627][T16166] ? __fget_files+0x28/0x4b0 [ 1177.446254][T16166] ? __fget_files+0x28/0x4b0 [ 1177.450856][T16166] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1177.455873][T16166] ? security_file_ioctl+0x7c/0xa0 [ 1177.461022][T16166] __se_sys_ioctl+0x83/0x170 [ 1177.465626][T16166] do_syscall_64+0x4c/0xa0 [ 1177.470054][T16166] ? clear_bhb_loop+0x60/0xb0 [ 1177.474781][T16166] ? clear_bhb_loop+0x60/0xb0 [ 1177.479557][T16166] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1177.485572][T16166] RIP: 0033:0x7ff01359c819 [ 1177.490001][T16166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1177.509625][T16166] RSP: 002b:00007ff0143b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1177.518058][T16166] RAX: ffffffffffffffda RBX: 00007ff013815fa0 RCX: 00007ff01359c819 [ 1177.526052][T16166] RDX: 0000200000000080 RSI: 0000000040086602 RDI: 0000000000000004 [ 1177.534033][T16166] RBP: 00007ff013632c91 R08: 0000000000000000 R09: 0000000000000000 [ 1177.542069][T16166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1177.550223][T16166] R13: 00007ff013816038 R14: 00007ff013815fa0 R15: 00007ffdd9f579e8 [ 1177.558233][T16166] [ 1177.808079][T15857] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1177.819002][T15857] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1177.861057][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.867675][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.934824][T16162] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 1177.947305][ T5854] EXT4-fs (loop3): unmounting filesystem. [ 1177.954522][T16162] EXT4-fs (loop0): 1 truncate cleaned up [ 1177.963416][T16162] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1177.980068][T11253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1178.025850][T11253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1178.058451][T11253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1178.107466][T11253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1178.136591][T11253] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1178.165530][T11253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1178.195407][T11253] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1178.212139][T11253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1178.231432][T11253] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1178.247733][T11253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1178.327677][T11253] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1178.489983][T11253] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1178.524159][T11253] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1178.652144][T14066] EXT4-fs (loop0): unmounting filesystem. [ 1178.719742][T11253] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1178.729550][T11253] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1178.744286][T15857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1178.767115][T14204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1178.777027][T14204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1178.797314][ T5438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1178.806192][ T5438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1178.819383][ T5438] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1178.827488][ T5438] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1178.839820][T15857] device veth0_vlan entered promiscuous mode [ 1178.854726][T15857] device veth1_vlan entered promiscuous mode [ 1178.880493][ T5438] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1178.889959][ T5438] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1178.900543][ T5438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1178.909307][ T5438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1178.921469][T15857] device veth0_macvtap entered promiscuous mode [ 1178.932691][T15857] device veth1_macvtap entered promiscuous mode [ 1178.956607][T15857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1178.967511][T15857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1178.977980][T15857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1178.989128][T15857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1178.999225][T15857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1179.009924][T15857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1179.023363][T15857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1179.035561][T15857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1179.047802][T15857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1179.056595][T11253] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1179.065630][T11253] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1179.073964][T11253] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1179.082609][T11253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1179.096539][T15857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1179.107599][T15857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1179.117803][T15857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1179.128503][T15857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1179.138584][T15857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1179.149706][T15857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1179.159757][T15857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1179.171926][T15857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1179.183247][T15857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1179.193223][T11253] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1179.202009][T11253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1179.212197][T15857] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1179.221662][T15857] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1179.230380][T15857] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1179.239768][T15857] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1179.266566][T15857] ieee80211 phy19: Selected rate control algorithm 'minstrel_ht' [ 1179.286238][T11253] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1179.287076][T15857] ieee80211 phy20: Selected rate control algorithm 'minstrel_ht' [ 1179.295183][T11253] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1179.311309][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1179.325139][T11253] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1179.333076][T11253] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1179.340511][T11253] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready