last executing test programs: 15.590259391s ago: executing program 0 (id=527): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbb00020a63cdec5908060001080006"], 0x0) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 15.500129575s ago: executing program 0 (id=530): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000300)='./file2\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1, 0x29b, &(0x7f0000000ac0)="$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") socket$netlink(0x10, 0x3, 0x0) setresuid(0xee00, 0xee00, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000140)='H\x00', 0x2}], 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 15.276702968s ago: executing program 0 (id=534): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)}, {&(0x7f0000000900)}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6e", 0x71}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f17", 0x19}], 0x3, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x60}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeee", 0x7}], 0x1}}], 0x4, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 15.068895438s ago: executing program 0 (id=540): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000300)='./file0\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0xc8d0, &(0x7f0000000280)=ANY=[@ANYRES32=0x0], 0x1, 0x314, &(0x7f00000002c0)="$eJzs3M9rE1sUwPGTNEnTlHayeLzHE6QX3ehmaONeDNKCNGCpjfgDxGkz0ZAxKZlQiYhtV25ciH+Ei9JldwXtP9CNO1du3HUjuLALcSQzkx9tE1vTpLH2+4Eyh7n3zNybacK5AzM7d14/yWdtPWuUJRhVEhAR2RWJS1BqAv426MYRabYil4e/fjx/6+696WQqNTmr1FRy7kpCKTU69u7p8yG/2+agbMcf7HxJfN7+d/v/nR9zj3O2ytmqUCwrQ80XP5WNectUmZyd15WasUzDNlWuYJslr91ZFrFMlbWKi4sVZRQyI7HFkmnbyihUVN6sqHJRlUsVZTwycgWl67oaiQkOk16bnTWSHSYvdHkw6JFSKWkMiMjQgZb0Wl8GBAAA+sqv/+vVfrBa0ndS/4emk6mQv7NR/69f2CoP394Y9ev/zUi1/hdpqv8fNo5lqkywXv9HRaRR/xe99UG36/+DFdHp9mrvxRHHqYeRVv2PVf/jlKjW/zH/++tavb8+7gbU/wAAAAAAAAAAAAAAAAAAAAAAnAa7jqM5jqN52wF/r6MNikjUfYLEa+/zMNEje69/44/rfzY0XtwRGhWxXi6ll9Le1u+wJSKWmDIumnx3/x981TiyotxOqiou761lP395Ke39liSzknPzJ0ST+P58x5m6kZqcUJ69+WGJNecnRJN/Wucn9ueHq9uIXLrYlK+LJh8WpCiWZPwn42r5LyaUun4zte/8Q24/AAAAAAD+Brqqq6/fB5vb9YPt3vrYa/fW1yFpfX/AW1+Pt1zfh+RcqF+zBgAAAADgbLErz/KGZZmlHgWrItLjU7QJajM8albtBblt+gQk0K6pC0Ht5J2lV8fWtfGEj/SJBTsa6ljkNy9Ky6B226hdH5np5MiOJnLcz/C/N2+//bqPd2dM5CgHvLoRPWSmnQaRw2YaPrEfIAAAAAAnplH01/Zc6++AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4g07iVXz9niMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwp/gZAAD//8mG/kg=") 14.906434617s ago: executing program 0 (id=543): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4040001) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000810) sendmsg$key(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0x70}, 0x19}, 0x20040814) 14.394478064s ago: executing program 0 (id=552): r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, 0x0, 0x0) getsockopt$sock_buf(r0, 0x1, 0x37, 0x0, &(0x7f00000002c0)) 14.187104145s ago: executing program 32 (id=552): r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, 0x0, 0x0) getsockopt$sock_buf(r0, 0x1, 0x37, 0x0, &(0x7f00000002c0)) 3.42278034s ago: executing program 1 (id=648): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)}, {&(0x7f0000000900)}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {0x0}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f", 0x1c}], 0x3, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x60}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeee", 0x7}], 0x1}}], 0x4, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.034299251s ago: executing program 1 (id=650): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4f23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x7}}], 0x18}, 0x0) 2.86896449s ago: executing program 1 (id=652): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getgroups(0x27, &(0x7f0000002540)) 1.887730911s ago: executing program 5 (id=554): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000300)={0x3, 0x40, 0xfa02, {{0x6000000, 0xfffd, 0x10000, @empty, 0xffffffff}, {0xa, 0x1c, 0x2, @empty, 0x9}, r1, 0x73}}, 0x48) 1.800854305s ago: executing program 4 (id=659): unshare(0x6a040000) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x288, 0x0, 0x4c, 0x1a, 0x190, 0x73, 0x270, 0x258, 0x258, 0x270, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'netdevsim0\x00', 'macvlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) socket$inet6_icmp(0xa, 0x2, 0x3a) 1.789129716s ago: executing program 5 (id=660): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)}, {&(0x7f0000000900)}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000bc0)}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f", 0x1c}], 0x3, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x60}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeee", 0x7}], 0x1}}], 0x4, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.786858776s ago: executing program 1 (id=661): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x51b, &(0x7f0000001200)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000100)={0x0, 0x2904c, 0x1, 0x10003, '\x00', [{0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x10000000007ff}, {0xffffffff, 0x0, 0x9, 0xa, 0xffffffffffffffff}], ['\x00']}) 1.576317937s ago: executing program 2 (id=663): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='veth1\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000002d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000600)="2b0268660fce2501c6d96ff2541b1853a7c34bdc309a4aaaa024a68b56aeb6ea0cf36ddcce3c5b1c03ffec031e929dc221453201d9dd169ea4239984838c5287f48c8eaa56b7a49bad97c3ca007d76e4ed3f11316166", 0x56}], 0x1}}, {{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000000b40)="e8f2362d79058b", 0x7}], 0x1, &(0x7f0000002580)}}], 0x3, 0x4009015) 1.575549967s ago: executing program 5 (id=664): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0xe8) 1.396806917s ago: executing program 5 (id=665): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e21, 0x1, @loopback, 0x13}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5998c867c22b401046a89606ffcf92e", "2c5be7ad", "a0ca05c0707e52f4"}, 0x28) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x300, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x10000008ebc, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 1.060466624s ago: executing program 4 (id=669): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000200), &(0x7f0000000340)=0x40) 958.14899ms ago: executing program 4 (id=671): syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000001080)='./bus\x00', 0x2000000, &(0x7f0000000700)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES8=0x0, @ANYRES16, @ANYBLOB="13489f000c08be60e3ce951cc9dda86479be697a58b753d3729abd15c906a52bfab2eaec10e75f571fc3e3b5ae12bc713ca14f34b7547afa27ac10b8f08e8caffb3848c4b9aad9ee0d5f059909141aa620947b8726f541d78dab6b40bf2c9b6983fb46", @ANYRESDEC=0x0, @ANYBLOB="7acdc62767d1455e1a3c4fa27ea07f1c1f370627aad37e04cb18531f2fa287174a97679379d0255cc76276a7919ec63aaf19a673ded58056f6248939ad798a738589e8bc6ce5c754c8fdb94717594eccc0ce507e0c200f5a914ee72681e92a88e2be182e1407b97c96c46b85f003c087a172f864fc7cc41e3417622c241609326e38c0e32a666d45d82d6ba026ca99a25cb332ba013278ebbd2b9a84eaf6790e58900605129b9f7b1c7849c3da2fd23a2cfb8dc5ba86c9ca97294da57141e04515d1a7d2162d491a3557e42e756b4f73eb63afa1c27aac792aad59da8d275e885657c57721139181eeec4e3251bc"], 0x1, 0x15e, &(0x7f0000000180)="$eJzs27Hq01AUB+CTf6utunQWh4CLU1GfQJEKYkBROuikUF1aKdglOvUZfAJfxzfwJQTp1O2KRtpa28EhibTft/TAj3LPhSSHG8irG++mk/ni7fzpKvpZFt17kcc6i0FcRCcqywAATsk6pfieUkq9ZVz5HCmltjsCAOpm/gPA+TH/AeD8/DX/L9ruCACo2/MXLx/fL4rRszzvR3xbluNyXP1W+cNHxeh2/stg+69VWY47m/xOled/5pfi6u/87sH8cty6WeU/swdPir38Wkzq3z4AAACchWG+cfB8Pxwey6tq5/3A3vm9G9e7jW0DAPgHiw8fp69nszfvmyk+TSOaWkvRQpFFFk2s9fXLSV1Ivfgv2tgt2n4yAXXb3vRtdwIAAAAAAAAAAAAAABzTxOdEbe8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9v0IAAD//93zTfw=") syz_read_part_table(0x59d, &(0x7f0000000000)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x40, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 953.90655ms ago: executing program 1 (id=672): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1, &(0x7f00000000c0)={[{@errors_remount}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000940)="$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") setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 844.833745ms ago: executing program 3 (id=673): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000003c0)={0xf}, 0x1) 792.545888ms ago: executing program 3 (id=674): socket(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4682}, 0x1c) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002440)=@newlink={0x48, 0x10, 0x437, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, 0x51b0b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @mcast2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendto$packet(r0, &(0x7f0000000000)='o', 0x12, 0x4, &(0x7f0000000180)={0x11, 0x8100, r3, 0x1, 0xe9, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) 637.298097ms ago: executing program 2 (id=675): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)}, {&(0x7f0000000900)}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000bc0)}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f", 0x1c}], 0x3, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x60}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeee", 0x7}], 0x1}}], 0x4, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 580.88649ms ago: executing program 4 (id=676): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a0f0000}, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0xf, &(0x7f0000000000)={0xb, 0x10ff, 0x8001}) 576.45724ms ago: executing program 2 (id=677): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x4, 0xa08eae501ea3e17c}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_MARK_MASK={0x8, 0x60, 0x8}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x10) 515.748923ms ago: executing program 3 (id=678): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x42, &(0x7f0000000100)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x34, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x10, 0x2, 0x0, 0xe7, {[@timestamp={0x8, 0xa, 0x6, 0x40000000}]}}}}}}}, 0x0) 436.723517ms ago: executing program 4 (id=679): setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0xe22}, 0x1c) syz_emit_ethernet(0x9a, &(0x7f0000000140)=ANY=[], 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000480)={{{@in=@private=0xa010100, @in=@remote, 0x0, 0x0, 0x0, 0x843, 0x2, 0x0, 0x0, 0x2e}, {0x0, 0x1}, {0xfffffffffffffffc, 0x7fffffffffd, 0x4, 0x1000000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@private, 0x1, 0x3c}, 0xa, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1001}}, 0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005180), &(0x7f00000051c0)=0xc) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x9}, 0x1c) syz_open_dev$usbfs(0x0, 0x76, 0x101701) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0xd, @initdev={0xac, 0x1e, 0xff, 0x0}}, {0x2, 0x4e22, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x26}) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffe}) 377.95931ms ago: executing program 4 (id=680): connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x20008050) socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x386, 0x20, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f0000000180)=0x1, 0x4) 319.219903ms ago: executing program 2 (id=681): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000140)={0x37, 0x5, 0xe, 0xffff, 0x0, "4a3ae17df2e98e69ba36090800", 0xf6, 0x4000002}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x9) 247.514137ms ago: executing program 3 (id=682): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x9) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101100, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x1f, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 183.03443ms ago: executing program 2 (id=683): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x3, 0xb, 0x0, 0x700, 0x0, [@sadb_key={0x1, 0x9}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private=0xa010104}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0xb4, 0x5, 0xfe}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x100, @dev}}]}, 0x58}, 0x1, 0x7}, 0x10) 127.564684ms ago: executing program 3 (id=684): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d1"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 72.879786ms ago: executing program 1 (id=685): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x8, &(0x7f00000000c0), 0x8) recvmsg(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x20) 68.943807ms ago: executing program 2 (id=686): syz_mount_image$ext4(&(0x7f0000000480)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000c00)={[{@journal_dev={'journal_dev', 0x3d, 0x6}}, {@user_xattr}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nodiscard}, {@noload}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x6}}]}, 0x1, 0x487, &(0x7f0000000fc0)="$eJzs3M9vFFUcAPDvTH8AChQRf4CoVWLSaGxpQeXgRaOJMRhN9IDH2i6kYaGGViNIpBjjycSQ6Jl4NPoXeDMmRj2ZcPXkyZAQ5QJ4qpnZGdhddvnhbtml/XyS2b4382bfe/vmx5v3dhvAmjWavSQRGyPij4gYqUUbE4zW/ly+eHLmysWTM0ksL7/9d5Knu3Tx5EyZtNzv3iIylkaknyVFJo0Wjp84PF2tVo4V8YnFI+9PLBw/8eyHR6YPVQ5Vjk7t27d3z+QLz08915V6ZvW6tOOT+Z3bX3v3zBszB8689+v3WXk3Ftvr69Eto1nF/1nONW97qtuZ9dimunAy2MOCcFsGIiJrrqH8/B+JgbjWeCPx6qc9LRyworJ707r2m5eWgVUsiYbohuKiAKx65Y0+e/4tlzvU9egLF16qPQBl9b5cLLUtg5EWaYaanm+7aTQiDiz9ezZbYoXGIQAA6n0x8/X+4Yj4+Mp3r2d9j5GIKMeDHsxf/8xfNxdzKFsi4r6I2BoR90fEtoh4oEj7UEQ83GF5ru//pOc7fMsbyvp/LxZzW439v7L3F1sGitimvP5DycG5amV3rMs/k7EYWpfFJ2+Qx4+vnPuy3bb6/l+2ZPmXfcGiHOcHmwboZqcXp/NOaRdcOB2xY7BV/ZOrMwFJRGyPiB2399aby8Dc09/ubJeodf0vnb2lHLowz7T8TVa9paz+S9FU/1JSPz85d9385MT6qFZ2T9SOilZ++/3zt9rlf/P2X1kXKrW/de3fnGRLUj9fu9Dd/P/n8Z8OJ+/k88zDxbqPphcXj01GDCf783jD+qlr+5bxMn12/I/tan3+by32yer/SERkB/GjEfFYRDxelP2JiHgyInbdoI6/vHzz+kfao/Y/HTHb8vp39fhvav/bDwwc/vmHdvnfWvvvzUNjxZr8+ncTrYqTXS6aC9jJZwcAAAB3izT/DnySjl8Np+n4eO07/NvinrQ6v7D4zMH5D47OxrnNtfHPtBzpGinGQ6tz1cpkslS841BycO7a2Fk5XrqnGDf+amBDHh+fma/O9qzWQBS/1Wl1/mf+Guh16YAVtqHl2qnhO14QoAea59HTxuipN8PFAFaruvM/7WU5gDuvPP/bPO/X/w4GWGX8vxZYu1qd/6ea4uYCYHVy/4e1y/kPa1T6Uwc7eyqAu537P6xJnfyufwUD6/ujGL0J9Guj5IGIMpD2RXn6NLCxP4rRQaDXVyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDu+C8AAP//SVvh+g==") 0s ago: executing program 3 (id=687): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)}, {&(0x7f0000000900)}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000bc0)}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f", 0x1c}], 0x3, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x60}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeee", 0x7}], 0x1}}], 0x4, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) kernel console output (not intermixed with test programs): B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.553336][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.566485][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.573667][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.582921][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.591655][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.599696][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.620515][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.629536][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.639203][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.646274][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.681650][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.690145][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.699619][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.709508][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.719105][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.726576][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.735205][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.745168][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.760568][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.771314][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.803696][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.812407][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.821253][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.842030][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.860954][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.870899][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.882512][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.904608][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.915266][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.924933][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.932665][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.941697][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.950557][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.960428][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.967626][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.975542][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.984236][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.993125][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.002108][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.011835][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.023184][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.033850][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.045839][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.062874][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.097018][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.108341][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.122020][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.131928][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.170499][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.186261][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.196774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.206424][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.216242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.225596][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.235918][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.243796][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.252312][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.261571][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.270295][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.277444][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.285419][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.294786][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.303972][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.312949][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.322604][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.363191][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.375702][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.394416][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.406112][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.416722][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.425662][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.435401][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.445990][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.463882][ T4185] device veth0_vlan entered promiscuous mode [ 64.478862][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.486755][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.495520][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.505665][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.514654][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.525390][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.534742][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.548976][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.558881][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.573592][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.582858][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.599311][ T4185] device veth1_vlan entered promiscuous mode [ 64.608622][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.630837][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.645366][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.654912][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.665277][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.677971][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.708910][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.717991][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.726012][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.737027][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.750235][ T4228] Bluetooth: hci0: command 0x041b tx timeout [ 64.762707][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.774364][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.786272][ T4185] device veth0_macvtap entered promiscuous mode [ 64.806684][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.817759][ T4228] Bluetooth: hci1: command 0x041b tx timeout [ 64.825108][ T4228] Bluetooth: hci2: command 0x041b tx timeout [ 64.831125][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.839961][ T4228] Bluetooth: hci3: command 0x041b tx timeout [ 64.857465][ T4228] Bluetooth: hci4: command 0x041b tx timeout [ 64.860828][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.875393][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.882695][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.896659][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.905736][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.915870][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.922973][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.931210][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.940140][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.962193][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.971419][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.981219][ T4185] device veth1_macvtap entered promiscuous mode [ 65.001510][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.030496][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.048483][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.064138][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.074876][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.085563][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.101013][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.110780][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.122537][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.134907][ T4185] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.144555][ T4185] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.153721][ T4185] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.162649][ T4185] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.174501][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.183500][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.192207][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.233182][ T4186] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.245534][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.259362][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.268373][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.276898][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.285727][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.294796][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.303319][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.311579][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.320877][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.329876][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.340088][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.372950][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.388240][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.396736][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.410021][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.430613][ T4192] device veth0_vlan entered promiscuous mode [ 65.461934][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.471647][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.480367][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.490855][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.500467][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.509898][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.524855][ T4192] device veth1_vlan entered promiscuous mode [ 65.544079][ T4194] device veth0_vlan entered promiscuous mode [ 65.569677][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.579470][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.587757][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.595692][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.606235][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.625086][ T4194] device veth1_vlan entered promiscuous mode [ 65.652223][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.664707][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.673707][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.683705][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.691421][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.722514][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.732773][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.741904][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.755527][ T4184] device veth0_vlan entered promiscuous mode [ 65.774134][ T4194] device veth0_macvtap entered promiscuous mode [ 65.779420][ T1222] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.801666][ T1222] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.802775][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.819480][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.829885][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.841240][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.851471][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.862859][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.872579][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.882920][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.896868][ T4194] device veth1_macvtap entered promiscuous mode [ 65.912189][ T4192] device veth0_macvtap entered promiscuous mode [ 65.940963][ T4184] device veth1_vlan entered promiscuous mode [ 65.950208][ T4192] device veth1_macvtap entered promiscuous mode [ 65.960316][ T1222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.966168][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.978455][ T1222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.988010][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.003903][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.015624][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.028956][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.041592][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.051897][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.061892][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.070723][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.080618][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.089931][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.099359][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.109202][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.121527][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.131432][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.152926][ T4194] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.162591][ T4194] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.172413][ T4194] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.181925][ T4194] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.205813][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.219939][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.250796][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.270073][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.283352][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.295265][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.307312][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.340059][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.352190][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.361851][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.370938][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.381950][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.392156][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.406862][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.433079][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.450740][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.454543][ T4265] loop2: detected capacity change from 0 to 256 [ 66.465235][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.480409][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.494354][ T4186] device veth0_vlan entered promiscuous mode [ 66.504974][ T4184] device veth0_macvtap entered promiscuous mode [ 66.535191][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.549196][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.561910][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.562218][ T4265] FAT-fs (loop2): Directory bread(block 64) failed [ 66.579135][ T4265] FAT-fs (loop2): Directory bread(block 65) failed [ 66.586196][ T4265] FAT-fs (loop2): Directory bread(block 66) failed [ 66.588386][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.595098][ T4265] FAT-fs (loop2): Directory bread(block 67) failed [ 66.610037][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.614981][ T4265] FAT-fs (loop2): Directory bread(block 68) failed [ 66.621585][ T4192] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.625083][ T4265] FAT-fs (loop2): Directory bread(block 69) failed [ 66.639298][ T4192] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.641712][ T4265] FAT-fs (loop2): Directory bread(block 70) failed [ 66.654913][ T4192] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.656534][ T4265] FAT-fs (loop2): Directory bread(block 71) failed [ 66.664822][ T4192] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.687413][ T4186] device veth1_vlan entered promiscuous mode [ 66.687724][ T4265] FAT-fs (loop2): Directory bread(block 72) failed [ 66.700473][ T4265] FAT-fs (loop2): Directory bread(block 73) failed [ 66.701961][ T4184] device veth1_macvtap entered promiscuous mode [ 66.762854][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.776884][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.811075][ T4186] device veth0_macvtap entered promiscuous mode [ 66.828990][ T4236] Bluetooth: hci0: command 0x040f tx timeout [ 66.854938][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.892857][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.904883][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.918025][ T4236] Bluetooth: hci4: command 0x040f tx timeout [ 66.923134][ T4270] loop2: detected capacity change from 0 to 512 [ 66.924836][ T4236] Bluetooth: hci3: command 0x040f tx timeout [ 66.937847][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.966693][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.971898][ T4236] Bluetooth: hci2: command 0x040f tx timeout [ 66.984533][ T4236] Bluetooth: hci1: command 0x040f tx timeout [ 66.987838][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.004874][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.012934][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.021340][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.027329][ T4270] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.7: iget: bad i_size value: 38620345925642 [ 67.030581][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.049827][ T4270] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.7: couldn't read orphan inode 15 (err -117) [ 67.052678][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.070607][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.072839][ T4270] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,delalloc,acl,journal_dev=0x0000000000000011,usrjquota=,bsdgroups,,errors=continue. Quota mode: writeback. [ 67.081105][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.146789][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.160388][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.183318][ T4186] device veth1_macvtap entered promiscuous mode [ 67.224262][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.225163][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.249824][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.258259][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.269260][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.280438][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.297818][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.327650][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.351335][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.360426][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.370387][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.381042][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.390367][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.401205][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.432613][ T4184] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.445308][ T4184] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.455124][ T4184] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.465791][ T4184] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.493308][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.505886][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.516997][ T4236] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 67.525020][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.539902][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.551553][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.563381][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.575016][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.586255][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.599091][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.631725][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.642209][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.669751][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.692415][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.710617][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.754858][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.767277][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.781537][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.792416][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.803371][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.815603][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.829510][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.862294][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.885594][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.894657][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.909128][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.927707][ T4236] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 67.933220][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.938274][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.954728][ T4236] usb 3-1: config 0 has no interfaces? [ 67.963726][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.981050][ T4186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.990678][ T4186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.000625][ T4186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.009929][ T4186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.048231][ T4236] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 68.071004][ T4236] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 68.085279][ T4236] usb 3-1: Manufacturer: syz [ 68.095738][ T4281] loop4: detected capacity change from 0 to 8192 [ 68.105421][ T4236] usb 3-1: config 0 descriptor?? [ 68.152913][ T4281] ======================================================= [ 68.152913][ T4281] WARNING: The mand mount option has been deprecated and [ 68.152913][ T4281] and is ignored by this kernel. Remove the mand [ 68.152913][ T4281] option from the mount to silence this warning. [ 68.152913][ T4281] ======================================================= [ 68.247809][ T1222] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.249450][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.291959][ T1222] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.292822][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.316979][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.338459][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.349223][ T145] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm kworker/u4:2: bg 0: block 5: invalid block bitmap [ 68.377963][ T4281] loop_set_status: loop4 () has still dirty pages (nrpages=3) [ 68.389147][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.399081][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.407246][ T145] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 68.409738][ T4286] capability: warning: `syz.1.9' uses 32-bit capabilities (legacy support in use) [ 68.443745][ T145] EXT4-fs (loop2): This should not happen!! Data will be lost [ 68.443745][ T145] [ 68.450432][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.454107][ T145] EXT4-fs (loop2): Total free blocks count 0 [ 68.474126][ T145] EXT4-fs (loop2): Free/Dirty block details [ 68.480419][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.507193][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.515272][ T145] EXT4-fs (loop2): free_blocks=0 [ 68.530353][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.538293][ T4194] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 68.538357][ T4194] FAT-fs (loop4): Filesystem has been set read-only [ 68.571055][ T4288] program syz.1.9 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 68.572996][ T145] EXT4-fs (loop2): dirty_blocks=16012 [ 68.648954][ T145] EXT4-fs (loop2): Block reservation details [ 68.658867][ T145] EXT4-fs (loop2): i_reserved_data_blocks=16012 [ 68.704606][ T4287] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 68.728238][ T4287] EXT4-fs (loop2): This should not happen!! Data will be lost [ 68.728238][ T4287] [ 68.898125][ T4236] Bluetooth: hci0: command 0x0419 tx timeout [ 68.937883][ T4303] netlink: 'syz.0.1': attribute type 1 has an invalid length. [ 68.994148][ T4227] Bluetooth: hci3: command 0x0419 tx timeout [ 69.000485][ T4227] Bluetooth: hci4: command 0x0419 tx timeout [ 69.006875][ T4303] device gretap1 entered promiscuous mode [ 69.064492][ T4227] Bluetooth: hci1: command 0x0419 tx timeout [ 69.081796][ T4227] Bluetooth: hci2: command 0x0419 tx timeout [ 69.165975][ T4313] loop1: detected capacity change from 0 to 256 [ 69.216710][ T4313] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 69.283426][ T26] audit: type=1800 audit(1776557861.199:2): pid=4313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.15" name="file1" dev="loop1" ino=1048601 res=0 errno=0 [ 69.315778][ T4313] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 69.360877][ T4313] FAT-fs (loop1): Filesystem has been set read-only [ 69.368828][ T4313] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 69.522327][ T4326] Zero length message leads to an empty skb [ 69.545008][ T4230] usb 3-1: USB disconnect, device number 2 [ 69.742719][ T4337] device pim6reg1 entered promiscuous mode [ 70.046970][ T4333] infiniband syz0: set down [ 70.058791][ T4333] infiniband syz0: added ipvlan0 [ 70.859712][ T4333] RDS/IB: syz0: added [ 70.876858][ T4333] smc: adding ib device syz0 with port count 1 [ 70.886032][ T4333] smc: ib device syz0 port 1 has pnetid [ 71.332696][ T4386] netlink: 20 bytes leftover after parsing attributes in process `syz.2.37'. [ 71.381596][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.388528][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.847690][ T4408] loop2: detected capacity change from 0 to 1024 [ 71.939393][ T4408] EXT4-fs (loop2): Ignoring removed orlov option [ 71.945865][ T4408] EXT4-fs (loop2): Ignoring removed nobh option [ 72.048261][ T4408] EXT4-fs (loop2): mounted filesystem without journal. Opts: data_err=ignore,errors=remount-ro,sysvgroups,jqfmt=vfsv1,nodioread_nolock,orlov,nogrpid,noauto_da_alloc,nobh,. Quota mode: none. [ 72.167040][ T4420] loop1: detected capacity change from 0 to 2048 [ 72.224765][ T4423] loop2: detected capacity change from 0 to 1024 [ 72.284261][ T4420] EXT4-fs (loop1): mounted filesystem without journal. Opts: min_batch_time=0x000000000000000d,mb_optimize_scan=0x0000000000000001,noblock_validity,,errors=continue. Quota mode: none. [ 72.360071][ T4423] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 72.388692][ T4420] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 72.419686][ T4431] netlink: 'syz.0.62': attribute type 2 has an invalid length. [ 72.441819][ T4420] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 72.470239][ T4435] loop3: detected capacity change from 0 to 2048 [ 72.478952][ T4431] netlink: 132 bytes leftover after parsing attributes in process `syz.0.62'. [ 72.497880][ T4420] EXT4-fs (loop1): This should not happen!! Data will be lost [ 72.497880][ T4420] [ 72.510301][ T4431] netlink: 'syz.0.62': attribute type 2 has an invalid length. [ 72.524312][ T4435] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 72.535334][ T4420] EXT4-fs (loop1): Total free blocks count 0 [ 72.545511][ T4431] netlink: 124 bytes leftover after parsing attributes in process `syz.0.62'. [ 72.555835][ T4420] EXT4-fs (loop1): Free/Dirty block details [ 72.562757][ T4420] EXT4-fs (loop1): free_blocks=66060288 [ 72.578058][ T4420] EXT4-fs (loop1): dirty_blocks=16 [ 72.587887][ T4420] EXT4-fs (loop1): Block reservation details [ 72.596810][ T4435] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,nomblk_io_submit,stripe=0x000000000004ffff,norecovery,errors=remount-ro,max_batch_time=0x000000000000186b,. Quota mode: writeback. [ 72.623023][ T4420] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 72.633125][ T26] audit: type=1804 audit(1776557864.549:3): pid=4435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.64" name="/newroot/16/file1/bus" dev="loop3" ino=18 res=1 errno=0 [ 72.863574][ T4445] loop2: detected capacity change from 0 to 128 [ 72.867779][ T4447] loop3: detected capacity change from 0 to 512 [ 72.956728][ T4447] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.68: inode has both inline data and extents flags [ 72.985940][ T4447] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.68: couldn't read orphan inode 15 (err -117) [ 73.092908][ T4447] EXT4-fs (loop3): mounted filesystem without journal. Opts: noinit_itable,,errors=continue. Quota mode: writeback. [ 73.119834][ T4461] loop1: detected capacity change from 0 to 1024 [ 73.200157][ T4461] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,journal_dev=0x0000000000000007,quota,noinit_itable,resuid=0x0000000000000000,nodiscard,jqfmt=vfsv0,noinit_itable,mb_optimize_scan=0x0000000000000000,usrquota,nojournal_checksum,,errors=continue. Quota mode: writeback. [ 73.281994][ T4461] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.295508][ T4468] loop4: detected capacity change from 0 to 1024 [ 73.414040][ T4468] EXT4-fs (loop4): Ignoring removed bh option [ 73.462258][ T4477] device syzkaller0 entered promiscuous mode [ 73.490278][ T4468] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 73.551227][ T4482] loop1: detected capacity change from 0 to 512 [ 73.573013][ T4468] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 73.602644][ T4483] loop0: detected capacity change from 0 to 512 [ 73.667011][ T4482] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,mb_optimize_scan=0x0000000000000001,stripe=0x0000000000000006,,errors=continue. Quota mode: writeback. [ 73.692033][ T4483] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 73.721938][ T4482] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.735809][ T4482] tmpfs: Unknown parameter 'inode31' [ 73.831413][ T26] audit: type=1800 audit(1776557865.749:4): pid=4482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.82" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 73.870697][ T4490] loop3: p1 < > p4 [ 73.870697][ T4490] p4: [ 73.904940][ T4490] loop3: p4 size 722688 extends beyond EOD, truncated [ 74.133455][ T4502] syz.0.89 uses obsolete (PF_INET,SOCK_PACKET) [ 74.185911][ T4463] udevd[4463]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 74.261849][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 74.487678][ T4229] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 74.727517][ T4229] usb 4-1: Using ep0 maxpacket: 32 [ 74.847545][ T4229] usb 4-1: unable to get BOS descriptor or descriptor too short [ 74.917756][ T4229] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 74.925638][ T4229] usb 4-1: can't read configurations, error -71 [ 75.611102][ T4565] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000c01c, mo2=0002] [ 75.626968][ T4565] System zones: 0-1, 3-36 [ 75.644600][ T4565] EXT4-fs error (device loop3): ext4_orphan_get:1432: comm syz.3.111: bad orphan inode 134217728 [ 75.694276][ T4565] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000101,debug,journal_dev=0x0000000000000008,,errors=continue. Quota mode: writeback. [ 75.772665][ T4518] capability: warning: `syz.1.95' uses deprecated v2 capabilities in a way that may be insecure [ 76.309372][ T4583] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 76.409718][ T4583] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 76.490833][ T4583] EXT4-fs (loop3): 1 truncate cleaned up [ 76.507476][ T4583] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 77.341456][ T4603] set_capacity_and_notify: 4 callbacks suppressed [ 77.341469][ T4603] loop0: detected capacity change from 0 to 256 [ 77.454156][ T4605] loop3: detected capacity change from 0 to 1024 [ 77.557140][ T4605] EXT4-fs (loop3): inline encryption not supported [ 77.580587][ T4605] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 77.611853][ T4606] loop4: detected capacity change from 0 to 512 [ 77.627481][ T4605] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 77.703850][ T4610] netlink: 52 bytes leftover after parsing attributes in process `syz.0.122'. [ 77.717166][ T4605] EXT4-fs error (device loop3): ext4_get_journal_inode:5187: inode #5: comm syz.3.120: unexpected bad inode w/o EXT4_IGET_BAD [ 77.770237][ T4605] EXT4-fs (loop3): no journal found [ 77.775677][ T4605] EXT4-fs (loop3): can't get journal size [ 77.864976][ T4605] EXT4-fs (loop3): failed to initialize system zone (-117) [ 77.865069][ T4606] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 77.887560][ T4605] EXT4-fs (loop3): mount failed [ 77.914996][ T4614] loop0: detected capacity change from 0 to 164 [ 78.056945][ T4617] loop3: detected capacity change from 0 to 128 [ 78.663726][ T4630] loop3: detected capacity change from 0 to 1024 [ 78.763390][ T4630] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 79.179156][ T4651] netlink: 12 bytes leftover after parsing attributes in process `syz.3.139'. [ 79.266161][ T4651] 8021q: adding VLAN 0 to HW filter on device bond1 [ 79.425959][ T4654] device macsec1 entered promiscuous mode [ 79.453893][ T4654] device bond1 entered promiscuous mode [ 79.481222][ T4654] device bond1 left promiscuous mode [ 79.596143][ T4674] sch_tbf: burst 548 is lower than device syzkaller0 mtu (1500) ! [ 79.632226][ T4676] loop1: detected capacity change from 0 to 512 [ 79.653809][ T4674] device syzkaller0 entered promiscuous mode [ 79.692713][ T4676] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 79.853350][ T4676] EXT4-fs (loop1): 1 truncate cleaned up [ 79.894298][ T4676] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,resgid=0x0000000000000000,,errors=continue. Quota mode: none. [ 79.944481][ T26] audit: type=1800 audit(1776557871.859:5): pid=4676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.149" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 80.032829][ T26] audit: type=1326 audit(1776557871.949:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4696 comm="syz.1.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7600aa9819 code=0x7ffc0000 [ 80.170149][ T26] audit: type=1326 audit(1776557871.979:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4696 comm="syz.1.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7600aa9819 code=0x7ffc0000 [ 80.294694][ T26] audit: type=1326 audit(1776557871.979:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4696 comm="syz.1.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7600aa9819 code=0x7ffc0000 [ 80.342487][ T4721] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 80.372177][ T26] audit: type=1326 audit(1776557871.979:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4696 comm="syz.1.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f7600aa9819 code=0x7ffc0000 [ 80.418943][ T4724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.169'. [ 80.440739][ T26] audit: type=1326 audit(1776557871.979:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4696 comm="syz.1.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7600aa9819 code=0x7ffc0000 [ 80.479921][ T26] audit: type=1326 audit(1776557871.979:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4696 comm="syz.1.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f7600aa9819 code=0x7ffc0000 [ 80.547967][ T26] audit: type=1326 audit(1776557871.979:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4696 comm="syz.1.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f7600aa9819 code=0x7ffc0000 [ 81.077134][ T4187] kernel write not supported for file /vcs (pid: 4187 comm: kworker/0:3) [ 81.242927][ T4769] loop3: detected capacity change from 0 to 256 [ 81.736904][ T4787] loop1: detected capacity change from 0 to 512 [ 81.806526][ T4791] loop3: detected capacity change from 0 to 256 [ 81.841483][ T4787] EXT4-fs (loop1): Unrecognized mount option "permit_directio" or missing value [ 81.912440][ T4791] FAT-fs (loop3): invalid media value (0x00) [ 81.928100][ T4791] FAT-fs (loop3): Can't find a valid FAT filesystem [ 82.193271][ T4795] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.397997][ T4809] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 82.433339][ T4795] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.462354][ T4815] set_capacity_and_notify: 1 callbacks suppressed [ 82.462369][ T4815] loop3: detected capacity change from 0 to 128 [ 82.480425][ T4809] EXT4-fs (loop4): 1 truncate cleaned up [ 82.507931][ T4809] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,noload,data_err=abort,noload,data_err=ignore,auto_da_alloc,,errors=continue. Quota mode: none. [ 82.568471][ T4795] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.732211][ T4795] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.017001][ T4795] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.111393][ T4795] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.146599][ T4795] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.191055][ T4795] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.252860][ T4832] netlink: 'syz.4.216': attribute type 10 has an invalid length. [ 83.292622][ T4832] netlink: 55 bytes leftover after parsing attributes in process `syz.4.216'. [ 83.371634][ T4839] loop1: detected capacity change from 0 to 128 [ 83.435424][ T4839] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 83.450548][ T4839] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.725712][ T4867] loop0: detected capacity change from 0 to 2048 [ 83.773921][ T4872] loop3: detected capacity change from 0 to 512 [ 83.791293][ T4176] loop0: p1 < > p4 [ 83.791293][ T4176] p4: [ 83.814762][ T4176] loop0: p4 size 722688 extends beyond EOD, truncated [ 83.860881][ T4867] loop0: p1 < > p4 [ 83.860881][ T4867] p4: [ 83.864081][ T4870] loop2: detected capacity change from 0 to 8192 [ 83.888919][ T4867] loop0: p4 size 722688 extends beyond EOD, truncated [ 83.899335][ T4872] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 83.980493][ T4870] loop2: p1 p3 p4 [ 83.984496][ T4870] loop2: partition table partially beyond EOD, truncated [ 83.996911][ T4870] loop2: p3 start 150994944 is beyond EOD, truncated [ 84.003956][ T4870] loop2: p4 size 50331648 extends beyond EOD, truncated [ 84.018780][ T4872] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -61 [ 84.031532][ T4872] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #13: comm syz.3.234: iget: bad i_size value: 12154757448730 [ 84.053182][ T4880] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 84.104080][ T4872] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.234: couldn't read orphan inode 13 (err -117) [ 84.127304][ T4872] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,stripe=0x000000000000ffff,sysvgroups,jqfmt=vfsold,nouid32,grpjquota=.grpquota,nolazytime,,errors=continue. Quota mode: writeback. [ 84.137495][ T4463] udevd[4463]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 84.181096][ T4872] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 84.193373][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 84.212150][ T4872] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 84.279885][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 84.291586][ T4174] udevd[4174]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 84.314120][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 84.330497][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 84.433192][ T4890] loop4: detected capacity change from 0 to 2048 [ 84.451833][ T4892] loop3: detected capacity change from 0 to 512 [ 84.513965][ T4890] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 84.644844][ T4890] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.244: bg 0: block 234: padding at end of block bitmap is not set [ 84.648542][ T4892] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #16: comm syz.3.243: corrupted inode contents [ 84.670965][ T4908] loop1: detected capacity change from 0 to 512 [ 84.678789][ T4890] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 834 with error 28 [ 84.712045][ T4890] EXT4-fs (loop4): This should not happen!! Data will be lost [ 84.712045][ T4890] [ 84.722736][ T4892] EXT4-fs error (device loop3): ext4_dirty_inode:6077: inode #16: comm syz.3.243: mark_inode_dirty error [ 84.730423][ T4909] loop0: detected capacity change from 0 to 4096 [ 84.741046][ T4892] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #16: comm syz.3.243: corrupted inode contents [ 84.744848][ T4890] EXT4-fs (loop4): Total free blocks count 0 [ 84.771783][ T4890] EXT4-fs (loop4): Free/Dirty block details [ 84.773296][ T4908] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 84.778242][ T4890] EXT4-fs (loop4): free_blocks=0 [ 84.793792][ T4890] EXT4-fs (loop4): dirty_blocks=848 [ 84.796330][ T4892] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #16: comm syz.3.243: mark_inode_dirty error [ 84.799084][ T4890] EXT4-fs (loop4): Block reservation details [ 84.816826][ T4890] EXT4-fs (loop4): i_reserved_data_blocks=53 [ 84.844514][ T4892] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #16: comm syz.3.243: corrupted inode contents [ 84.877000][ T4892] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 84.928534][ T4892] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #16: comm syz.3.243: corrupted inode contents [ 84.959629][ T4909] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 84.991350][ T4892] EXT4-fs error (device loop3): ext4_truncate:4286: inode #16: comm syz.3.243: mark_inode_dirty error [ 85.000248][ T4914] loop2: detected capacity change from 0 to 1024 [ 85.034901][ T4892] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 85.079876][ T4914] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 85.197929][ T4892] EXT4-fs (loop3): 1 truncate cleaned up [ 85.205063][ T4892] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 85.253322][ T4892] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.297672][ T26] audit: type=1800 audit(1776557877.209:13): pid=4909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.250" name="file0" dev="loop0" ino=13 res=0 errno=0 [ 85.924052][ T26] audit: type=1800 audit(1776557877.839:14): pid=4892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.243" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 86.061916][ T4914] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,nobarrier,norecovery,errors=remount-ro,grpid,. Quota mode: writeback. [ 86.069480][ T4932] tipc: Enabling of bearer <Üth:v> rejected, media not registered [ 86.175387][ T4914] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 48: comm syz.2.253: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=16, rec_len=5, size=1024 fake=0 [ 86.274697][ T4938] netlink: 4 bytes leftover after parsing attributes in process `syz.0.261'. [ 86.319610][ T4938] device vlan2 entered promiscuous mode [ 86.355184][ T4938] device bridge0 entered promiscuous mode [ 86.435744][ T4950] device syzkaller0 entered promiscuous mode [ 86.643125][ T4962] usb usb7: usbfs: process 4962 (syz.4.271) did not claim interface 0 before use [ 86.740691][ T1108] cfg80211: failed to load regulatory.db [ 86.774714][ T4960] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #11: comm syz.0.270: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 65535(4), depth 65535(65535) [ 86.863673][ T4960] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.270: couldn't read orphan inode 11 (err -117) [ 86.897613][ T4973] autofs4:pid:4973:autofs_fill_super: called with bogus options [ 86.902445][ T4960] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 87.001818][ T4977] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 87.067547][ T4977] EXT4-fs (loop4): bad geometry: first data block is 0 with a 1k block and cluster size [ 87.369424][ T4996] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ1 [ 87.456875][ T5001] netlink: 4 bytes leftover after parsing attributes in process `syz.2.288'. [ 87.645968][ T5011] set_capacity_and_notify: 3 callbacks suppressed [ 87.645984][ T5011] loop1: detected capacity change from 0 to 512 [ 87.761161][ T5011] EXT4-fs (loop1): Ignoring removed nobh option [ 87.801346][ T5015] loop2: detected capacity change from 0 to 2048 [ 87.845755][ T5022] autofs4:pid:5022:autofs_fill_super: called with bogus options [ 87.865703][ T5011] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #3: comm syz.1.293: corrupted inode contents [ 87.891322][ T5011] EXT4-fs (loop1): Remounting filesystem read-only [ 87.911504][ T5011] EXT4-fs error (device loop1): ext4_dirty_inode:6077: inode #3: comm syz.1.293: mark_inode_dirty error [ 87.926346][ T5015] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,,errors=continue. Quota mode: none. [ 87.978664][ T5011] EXT4-fs (loop1): Remounting filesystem read-only [ 87.992081][ T5027] binder: 5026:5027 ioctl 400c620e 200000000200 returned -22 [ 88.045867][ T5011] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #3: comm syz.1.293: corrupted inode contents [ 88.065343][ T5011] EXT4-fs (loop1): Remounting filesystem read-only [ 88.085875][ T5011] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #3: comm syz.1.293: mark_inode_dirty error [ 88.127445][ T5011] EXT4-fs (loop1): Remounting filesystem read-only [ 88.143664][ T5011] Quota error (device loop1): write_blk: dquota write failed [ 88.195486][ T5011] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 88.236908][ T5011] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.293: Failed to acquire dquot type 0 [ 88.266047][ T5011] EXT4-fs (loop1): Remounting filesystem read-only [ 88.322795][ T5011] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #16: comm syz.1.293: corrupted inode contents [ 88.359946][ T5011] EXT4-fs (loop1): Remounting filesystem read-only [ 88.366508][ T5011] EXT4-fs error (device loop1): ext4_dirty_inode:6077: inode #16: comm syz.1.293: mark_inode_dirty error [ 88.405641][ T5047] netlink: 76 bytes leftover after parsing attributes in process `syz.0.307'. [ 88.422699][ T5011] EXT4-fs (loop1): Remounting filesystem read-only [ 88.452527][ T5011] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #16: comm syz.1.293: corrupted inode contents [ 88.474549][ T5011] EXT4-fs (loop1): Remounting filesystem read-only [ 88.491585][ T5011] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #16: comm syz.1.293: mark_inode_dirty error [ 88.513816][ T5011] EXT4-fs (loop1): Remounting filesystem read-only [ 88.532944][ T5011] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #16: comm syz.1.293: corrupted inode contents [ 88.546139][ T5011] EXT4-fs (loop1): Remounting filesystem read-only [ 88.558488][ T5011] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 88.572238][ T5011] EXT4-fs (loop1): Remounting filesystem read-only [ 88.581004][ T5011] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #16: comm syz.1.293: corrupted inode contents [ 88.661766][ T5011] EXT4-fs (loop1): Remounting filesystem read-only [ 88.681985][ T5011] EXT4-fs error (device loop1): ext4_truncate:4286: inode #16: comm syz.1.293: mark_inode_dirty error [ 88.716226][ T5011] EXT4-fs (loop1): Remounting filesystem read-only [ 88.726645][ T5011] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 88.739596][ T5011] EXT4-fs (loop1): Remounting filesystem read-only [ 88.747280][ T5011] EXT4-fs (loop1): 1 truncate cleaned up [ 88.777350][ T5011] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nobh,. Quota mode: writeback. [ 88.794751][ T5011] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.007663][ T26] audit: type=1326 audit(1776557880.929:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5064 comm="syz.3.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7a3371819 code=0x7ffc0000 [ 89.097143][ T26] audit: type=1326 audit(1776557880.929:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5064 comm="syz.3.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7fc7a3371819 code=0x7ffc0000 [ 89.178265][ T26] audit: type=1326 audit(1776557880.929:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5064 comm="syz.3.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7a3371819 code=0x7ffc0000 [ 89.195101][ T5073] loop3: detected capacity change from 0 to 764 [ 89.356991][ T5087] loop0: detected capacity change from 0 to 128 [ 89.528043][ T5092] netlink: 12 bytes leftover after parsing attributes in process `syz.3.325'. [ 89.589011][ T5092] netlink: 580 bytes leftover after parsing attributes in process `syz.3.325'. [ 89.666018][ T5102] loop1: detected capacity change from 0 to 256 [ 89.781671][ T5109] loop0: detected capacity change from 0 to 128 [ 89.901434][ T26] audit: type=1800 audit(1776557881.819:18): pid=5102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.330" name="bus" dev="loop1" ino=1048605 res=0 errno=0 [ 90.783309][ T5115] device bond_slave_0 entered promiscuous mode [ 90.789853][ T5115] device bond_slave_1 entered promiscuous mode [ 90.836623][ T5117] loop1: detected capacity change from 0 to 128 [ 90.915671][ T5115] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 90.959927][ T5115] team0: Port device macvlan2 added [ 91.121390][ T5125] loop2: detected capacity change from 0 to 128 [ 91.201211][ T5127] loop4: detected capacity change from 0 to 512 [ 91.422125][ T145] attempt to access beyond end of device [ 91.422125][ T145] loop0: rw=1, want=1041, limit=128 [ 91.438095][ T5117] FAT-fs (loop1): Unrecognized mount option "" or missing value [ 91.487020][ T5125] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 91.507889][ T5127] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 91.544683][ T5125] ext4 filesystem being mounted at /52/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 91.611516][ T5136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.340'. [ 91.625306][ T26] audit: type=1800 audit(1776557883.539:19): pid=5127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.337" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 91.695044][ T5136] netlink: 20 bytes leftover after parsing attributes in process `syz.3.340'. [ 91.736412][ T5136] batman_adv: Cannot find parent device [ 91.821282][ T5125] EXT4-fs error (device loop2): dx_make_map:1328: inode #2: block 18: comm syz.2.336: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 91.984763][ T5146] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 91.999748][ T5125] EXT4-fs error (device loop2) in do_split:2095: Corrupt filesystem [ 92.018197][ T5146] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 92.095894][ T5146] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 92.468155][ T5173] netlink: 24 bytes leftover after parsing attributes in process `syz.4.357'. [ 92.470604][ T5174] sctp: [Deprecated]: syz.0.356 (pid 5174) Use of struct sctp_assoc_value in delayed_ack socket option. [ 92.470604][ T5174] Use struct sctp_sack_info instead [ 92.744173][ T5186] loop0: detected capacity change from 0 to 128 [ 92.785974][ T5188] netlink: 20 bytes leftover after parsing attributes in process `syz.4.363'. [ 92.835225][ T26] audit: type=1800 audit(1776557884.749:20): pid=5186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.362" name="file1" dev="loop0" ino=1048607 res=0 errno=0 [ 92.839105][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 92.895604][ T5186] FAT-fs (loop0): Filesystem has been set read-only [ 92.912408][ T26] audit: type=1800 audit(1776557884.749:21): pid=5186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.362" name="file1" dev="loop0" ino=1048607 res=0 errno=0 [ 92.923635][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 93.041870][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 93.082099][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 93.110340][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 93.129321][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 93.157592][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 93.175740][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 93.186135][ T5203] loop3: detected capacity change from 0 to 4096 [ 93.196272][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 93.247679][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 93.254129][ T5212] loop2: detected capacity change from 0 to 1024 [ 93.286187][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 93.303798][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 93.317571][ T5212] EXT4-fs (loop2): Encoding requested by superblock is unknown [ 93.333273][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 93.401655][ T5219] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 93.407448][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 93.408655][ T5219] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 93.445457][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 93.466796][ T5219] vhci_hcd vhci_hcd.0: Device attached [ 93.505270][ T5223] loop1: detected capacity change from 0 to 4096 [ 93.522590][ T5220] vhci_hcd: connection closed [ 93.525671][ T145] vhci_hcd: stop threads [ 93.554584][ T145] vhci_hcd: release socket [ 93.560693][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 93.563830][ T145] vhci_hcd: disconnect device [ 93.602087][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 93.612434][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 93.626046][ T5223] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 93.639862][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 93.668055][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 93.677341][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 93.685255][ T5223] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x0000000000000101,stripe=0x0000000000000061,journal_ioprio=0x0000000000000006,minixdf,nodiscard,nomblk_io_submit,acl,nojournal_checksum,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 93.686935][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 93.722146][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 93.737561][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 93.745852][ T5233] loop3: detected capacity change from 0 to 1024 [ 93.760656][ T26] audit: type=1800 audit(1776557885.679:22): pid=5223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.379" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 93.762851][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 93.800829][ T5235] sctp: [Deprecated]: syz.2.384 (pid 5235) Use of struct sctp_assoc_value in delayed_ack socket option. [ 93.800829][ T5235] Use struct sctp_sack_info instead [ 93.831966][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 93.840656][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 93.849908][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 93.864132][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 93.874737][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 93.885017][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 93.895848][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 93.904816][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 93.914118][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 93.916436][ T5233] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 93.924069][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 93.942493][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 93.951234][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 93.970025][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 93.979028][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 93.987708][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 93.996425][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 94.008385][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 94.017725][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 94.035921][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 94.044586][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 94.053944][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 94.062810][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 94.071626][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 94.080815][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 94.118286][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 94.156659][ T26] audit: type=1804 audit(1776557886.069:23): pid=5233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.383" name="/newroot/82/file1/bus" dev="loop3" ino=18 res=1 errno=0 [ 94.183952][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 94.212444][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 94.250127][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 94.279485][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 94.323614][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 94.350212][ T5255] loop1: detected capacity change from 0 to 512 [ 94.358051][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 94.375326][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 94.392150][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 94.404671][ T5258] loop4: detected capacity change from 0 to 164 [ 94.411745][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 94.445289][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 94.471351][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 94.519538][ T5255] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 94.567529][ T5255] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.582275][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 94.592747][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 94.627648][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 94.637955][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 94.647136][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 94.670707][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 94.679351][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 94.688175][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 94.752423][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 94.797557][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 94.866695][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 94.941697][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 94.954313][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 94.967889][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 94.998863][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 95.022037][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 95.060731][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 95.107522][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 95.116402][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 95.134087][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 95.166641][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 95.188251][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 95.197073][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 95.237130][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 95.274205][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 95.310293][ T5290] sch_tbf: burst 548 is lower than device syzkaller0 mtu (1500) ! [ 95.318089][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 95.326644][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 95.332888][ T5290] device syzkaller0 entered promiscuous mode [ 95.338895][ T5293] loop4: detected capacity change from 0 to 1024 [ 95.367666][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 95.378858][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 95.404923][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 95.414069][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 95.423252][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 95.443817][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 95.452602][ T5293] EXT4-fs (loop4): Ignoring removed bh option [ 95.488548][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 95.503129][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 95.512049][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 95.521555][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 95.530745][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 95.540060][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 95.549006][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 95.555672][ T5293] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,mb_optimize_scan=0x0000000000000000,. Quota mode: none. [ 95.559117][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 95.600746][ T5296] netlink: 'syz.3.409': attribute type 44 has an invalid length. [ 95.616234][ T5296] netlink: 'syz.3.409': attribute type 46 has an invalid length. [ 95.624320][ T5296] netlink: 'syz.3.409': attribute type 47 has an invalid length. [ 95.631153][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 95.632794][ T5296] netlink: 'syz.3.409': attribute type 48 has an invalid length. [ 95.646684][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 95.663457][ T5296] netlink: 'syz.3.409': attribute type 49 has an invalid length. [ 95.677481][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 95.686037][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 95.705258][ T5300] loop1: detected capacity change from 0 to 512 [ 95.715928][ T5296] netlink: 'syz.3.409': attribute type 50 has an invalid length. [ 95.726663][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 95.745805][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 95.756299][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 95.768271][ T5296] netlink: 'syz.3.409': attribute type 51 has an invalid length. [ 95.793840][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 95.806014][ T5300] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 95.840308][ T5306] loop4: detected capacity change from 0 to 128 [ 95.846823][ T5300] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.850273][ T5296] netlink: 732 bytes leftover after parsing attributes in process `syz.3.409'. [ 95.885025][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 95.893612][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 95.902548][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 95.911590][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 95.921417][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 95.932397][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 95.941055][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 95.962592][ T5306] FAT-fs (loop4): count of clusters too big (2147483774) [ 95.964235][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 95.986807][ T5306] FAT-fs (loop4): Can't find a valid FAT filesystem [ 96.017636][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 96.055355][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 96.080646][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 96.090345][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 96.157528][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 96.187533][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 96.196687][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 96.252822][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 96.290970][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 96.327010][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 96.349853][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 96.401082][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 96.411181][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 96.420601][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 96.430045][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 96.447454][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 96.456158][ T5331] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 96.469399][ T5333] EXT4-fs (loop3): Ignoring removed orlov option [ 96.476026][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 96.495150][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 96.528002][ T5331] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 96.536999][ T5331] EXT4-fs (loop4): orphan cleanup on readonly fs [ 96.548130][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 96.556598][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 96.565980][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 96.574663][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 96.583491][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 96.599221][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 96.604538][ T5333] EXT4-fs (loop3): mounted filesystem without journal. Opts: stripe=0x0000000000000009,inode_readahead_blks=0x0000000000000008,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 96.608157][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 96.645416][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 96.653456][ T5331] EXT4-fs error (device loop4): ext4_free_blocks:6231: comm syz.4.425: Freeing blocks not in datazone - block = 0, count = 4096 [ 96.654648][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 96.677025][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 96.686956][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 96.687257][ T26] audit: type=1800 audit(1776557888.609:24): pid=5333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.424" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 96.695746][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 96.695771][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 96.695789][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 96.695809][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 96.695828][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 96.695857][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 96.695974][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 96.695992][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 96.786911][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 96.800855][ T5331] EXT4-fs (loop4): 1 orphan inode deleted [ 96.806618][ T5331] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,journal_dev=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 96.837599][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 96.846202][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 96.857464][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 96.865923][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 96.906023][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 96.921985][ T5331] EXT4-fs error (device loop4): ext4_lookup:1858: inode #15: comm syz.4.425: iget: bad i_size value: 1970324836974602 [ 96.939283][ T5349] netlink: 165 bytes leftover after parsing attributes in process `syz.3.430'. [ 96.952278][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 96.963080][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 96.973506][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 96.988640][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.005280][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.014496][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.023287][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.035927][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.045454][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.054444][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.068889][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.079397][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.088926][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.099252][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.119603][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.143087][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.163075][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.172064][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.181342][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.190069][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.243134][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.261640][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.271102][ T26] audit: type=1326 audit(1776557889.189:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5357 comm="syz.1.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7600aa9819 code=0x7ffc0000 [ 97.293543][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.304263][ T5361] syz.1.436 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 97.344875][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.364832][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.384771][ T26] audit: type=1326 audit(1776557889.219:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5357 comm="syz.1.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7600aa9819 code=0x7ffc0000 [ 97.437725][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.446203][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.496626][ T26] audit: type=1326 audit(1776557889.219:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5357 comm="syz.1.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7600aa9819 code=0x7ffc0000 [ 97.529955][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.560504][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.596198][ T26] audit: type=1326 audit(1776557889.219:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5357 comm="syz.1.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f7600aa9819 code=0x7ffc0000 [ 97.609261][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.637852][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.666059][ T26] audit: type=1326 audit(1776557889.269:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5357 comm="syz.1.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7600aa9819 code=0x7ffc0000 [ 97.677425][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.747947][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.756512][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.756537][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.756553][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.756574][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.756706][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.756726][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.756754][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.756774][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.756793][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.756812][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.756832][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.756852][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.756875][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.756987][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.757007][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.757027][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.757046][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.757066][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.757085][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.757103][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.757121][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.757142][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.757246][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.757266][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.757286][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.757305][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.757325][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.757344][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.770219][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.770247][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.770273][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.770408][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.770429][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.770448][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.770468][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.770487][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.770507][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.770524][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.770542][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.770564][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.770670][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.770690][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.770710][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.770729][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.770755][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.770775][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.770795][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.770814][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.770836][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.770949][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.770968][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.770988][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.771008][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.771028][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.771047][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.771066][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.771085][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.771107][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.771210][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.771230][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.771249][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.771269][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.771288][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.771308][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.771328][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.771347][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.771369][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.771490][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.771511][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.771530][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.771550][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.771569][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.771589][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.771608][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.771628][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.771649][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.771808][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.771829][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.771848][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.771868][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.771887][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.771907][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.771927][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.771946][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.771968][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.772072][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.772092][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.772112][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.772131][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.772151][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.772170][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.772190][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.772209][ T5186] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.786651][ T26] audit: type=1326 audit(1776557889.269:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5357 comm="syz.1.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f7600aa9819 code=0x7ffc0000 [ 98.135381][ T5401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.455'. [ 98.148587][ T26] audit: type=1326 audit(1776557889.269:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5357 comm="syz.1.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f7600aa9819 code=0x7ffc0000 [ 98.710569][ T5405] set_capacity_and_notify: 2 callbacks suppressed [ 98.710585][ T5405] loop3: detected capacity change from 0 to 512 [ 98.951773][ T5405] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 99.067533][ T5405] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.093733][ T5420] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 99.123822][ T5420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.462'. [ 99.512736][ T5440] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 99.705226][ T5449] netlink: 16 bytes leftover after parsing attributes in process `syz.0.474'. [ 99.815122][ T5455] loop0: detected capacity change from 0 to 512 [ 99.973899][ T5455] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 100.017747][ T5455] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.048762][ T5468] loop1: detected capacity change from 0 to 128 [ 100.072759][ T5469] loop3: detected capacity change from 0 to 764 [ 100.166058][ T5476] Restarting kernel threads ... done. [ 100.324758][ T5478] loop0: detected capacity change from 0 to 1024 [ 100.400781][ T5482] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.483084][ T5478] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,nolazytime,jqfmt=vfsv0,noauto_da_alloc,,errors=continue. Quota mode: none. [ 100.501881][ T5482] device bridge_slave_0 left promiscuous mode [ 100.518056][ T5482] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.902933][ T5499] loop4: detected capacity change from 0 to 512 [ 100.917483][ T4227] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 101.025859][ T5499] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 101.082507][ T5499] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.127483][ T4227] usb 4-1: device descriptor read/64, error -71 [ 101.226058][ T5511] netlink: 16 bytes leftover after parsing attributes in process `syz.2.493'. [ 101.406451][ T5515] loop4: detected capacity change from 0 to 512 [ 101.413062][ T4227] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 101.430086][ T5513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.494'. [ 101.633041][ T4227] usb 4-1: device descriptor read/64, error -71 [ 101.757735][ T4227] usb usb4-port1: attempt power cycle [ 101.823225][ T5533] netlink: 'syz.4.503': attribute type 39 has an invalid length. [ 101.999847][ T5541] loop0: detected capacity change from 0 to 128 [ 102.045284][ T5541] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 102.130051][ T5541] ext4 filesystem being mounted at /99/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 102.187657][ T4227] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 102.249471][ T5541] netlink: 16 bytes leftover after parsing attributes in process `syz.0.506'. [ 102.289470][ T5541] netlink: 40 bytes leftover after parsing attributes in process `syz.0.506'. [ 102.305197][ T4227] usb 4-1: device descriptor read/8, error -71 [ 102.417323][ T5546] loop4: detected capacity change from 0 to 4096 [ 102.506914][ T5546] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 102.533562][ T5546] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000101,stripe=0x0000000000000061,journal_ioprio=0x0000000000000006,minixdf,nodiscard,nomblk_io_submit,acl,nojournal_checksum,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 102.587953][ T4227] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 102.685781][ T5559] loop1: detected capacity change from 0 to 512 [ 102.702483][ T4227] usb 4-1: device descriptor read/8, error -71 [ 102.837763][ T4227] usb usb4-port1: unable to enumerate USB device [ 102.877523][ T26] audit: type=1800 audit(1776557894.789:32): pid=5557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.514" name="bus" dev="loop4" ino=1048609 res=0 errno=0 [ 102.920738][ T5559] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 103.777338][ T5602] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,max_dir_size_kb=0x0000000000000a32,acl,,errors=continue. Quota mode: writeback. [ 103.812063][ T5602] ext4 filesystem being mounted at /108/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 103.875920][ T5622] set_capacity_and_notify: 3 callbacks suppressed [ 103.875933][ T5622] loop0: detected capacity change from 0 to 128 [ 103.877752][ T5620] sctp: [Deprecated]: syz.1.539 (pid 5620) Use of struct sctp_assoc_value in delayed_ack socket option. [ 103.877752][ T5620] Use struct sctp_sack_info instead [ 104.302310][ T5637] loop2: detected capacity change from 0 to 128 [ 104.368180][ T5636] IPv6: NLM_F_CREATE should be specified when creating new route [ 104.453537][ T5642] loop3: detected capacity change from 0 to 1024 [ 104.541305][ T5642] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 104.603704][ T4599] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.636818][ T5647] loop4: detected capacity change from 0 to 512 [ 104.696636][ T5642] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,sysvgroups,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,barrier=0x0000000000000005,user_xattr,errors=remount-ro,. Quota mode: none. [ 104.798981][ T4599] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.799586][ T5653] loop2: detected capacity change from 0 to 512 [ 104.823721][ T5647] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 104.892478][ T4599] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.905063][ T5647] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.928326][ T5653] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 104.985171][ T4599] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.214980][ T5670] loop3: detected capacity change from 0 to 512 [ 105.332007][ T5676] tipc: Started in network mode [ 105.336958][ T5676] tipc: Node identity fe800000000000000000000000000043, cluster identity 4711 [ 105.352512][ T5676] tipc: Enabled bearer , priority 10 [ 105.368594][ T5670] EXT4-fs (loop3): orphan cleanup on readonly fs [ 105.447248][ T5670] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.556: invalid indirect mapped block 256 (level 2) [ 105.557782][ T5670] EXT4-fs (loop3): 2 truncates cleaned up [ 105.563851][ T5670] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,journal_dev=0x0000000000000006,,errors=continue. Quota mode: writeback. [ 105.686256][ T5691] loop1: detected capacity change from 0 to 512 [ 105.701293][ T5690] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.566'. [ 105.801662][ T5672] chnl_net:caif_netlink_parms(): no params data found [ 105.813258][ T5691] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 105.848041][ T5691] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.885745][ T5691] EXT4-fs error (device loop1): ext4_get_first_dir_block:3597: inode #12: comm syz.1.567: Attempting to read directory block (0) that is past i_size (3) [ 105.986576][ T5672] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.006313][ T5672] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.060926][ T5672] device bridge_slave_0 entered promiscuous mode [ 106.523957][ T5716] loop4: detected capacity change from 0 to 1024 [ 106.554170][ T5716] EXT4-fs (loop4): Ignoring removed bh option [ 106.591325][ T5716] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a00fc018, mo2=0002] [ 106.617497][ T5716] System zones: 0-1, 3-12 [ 106.623427][ T5716] EXT4-fs (loop4): mounted filesystem without journal. Opts: nojournal_checksum,auto_da_alloc,barrier,debug,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,noauto_da_alloc,bh,init_itable,,errors=continue. Quota mode: writeback. [ 107.106285][ T5723] ieee802154 phy0 wpan0: encryption failed: -22 [ 107.301379][ T5672] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.314516][ T4275] Bluetooth: hci2: command 0x0409 tx timeout [ 107.317472][ T5672] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.350786][ T5672] device bridge_slave_1 entered promiscuous mode [ 107.424814][ T13] tipc: Node number set to 4269801539 [ 107.452100][ T5672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.576427][ T5672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.750998][ T5672] team0: Port device team_slave_0 added [ 107.814459][ T5672] team0: Port device team_slave_1 added [ 108.033555][ T5672] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.045888][ T5672] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.111379][ T5753] loop1: detected capacity change from 0 to 512 [ 108.136182][ T5672] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.170646][ T5753] EXT4-fs (loop1): Journaled quota options ignored when QUOTA feature is enabled [ 108.195573][ T5753] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 108.202047][ T5672] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.230077][ T5672] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.276211][ T5753] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 108.292294][ T5672] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.325619][ T5753] EXT4-fs (loop1): Remounting filesystem read-only [ 108.383546][ T5753] Quota error (device loop1): write_blk: dquota write failed [ 108.407914][ T5753] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 108.441568][ T5753] Quota error (device loop1): write_blk: dquota write failed [ 108.464410][ T5753] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 108.481132][ T5753] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.587: Failed to acquire dquot type 1 [ 108.507137][ T5753] EXT4-fs (loop1): Remounting filesystem read-only [ 108.533332][ T5753] EXT4-fs (loop1): 1 truncate cleaned up [ 108.549627][ T5753] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,noblock_validity,inode_readahead_blks=0x0000000000010000,errors=remount-ro,abort,quota,noinit_itable,noauto_da_alloc,usrjquota=2. Quota mode: writeback. [ 108.609047][ T5672] device hsr_slave_0 entered promiscuous mode [ 108.610449][ T5753] EXT4-fs error (device loop1): ext4_remount:6062: comm syz.1.587: Abort forced by user [ 108.645357][ T5753] EXT4-fs (loop1): Remounting filesystem read-only [ 108.657762][ T5672] device hsr_slave_1 entered promiscuous mode [ 108.669215][ T5753] EXT4-fs (loop1): re-mounted. Opts: . Quota mode: writeback. [ 108.684287][ T5672] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 108.724236][ T5672] Cannot create hsr debugfs directory [ 108.740568][ T5753] syz.1.587 (5753) used greatest stack depth: 21080 bytes left [ 108.932843][ T5777] netlink: 128 bytes leftover after parsing attributes in process `syz.1.595'. [ 109.278548][ T5703] ODEBUG: Out of memory. ODEBUG disabled [ 109.377658][ T4227] Bluetooth: hci2: command 0x041b tx timeout [ 109.392889][ T5791] loop4: detected capacity change from 0 to 128 [ 109.479364][ T5789] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.492551][ T5794] loop2: detected capacity change from 0 to 128 [ 109.520414][ T5791] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 109.537703][ T5791] ext4 filesystem being mounted at /146/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 109.652934][ T5789] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.853253][ T5794] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 109.873564][ T4227] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 109.884424][ T5794] ext4 filesystem being mounted at /104/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 110.179371][ T4227] usb 2-1: no configurations [ 110.196921][ T4227] usb 2-1: can't read configurations, error -22 [ 110.377691][ T4227] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 110.435212][ T5789] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.671650][ T5789] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.687753][ T4227] usb 2-1: no configurations [ 110.692380][ T4227] usb 2-1: can't read configurations, error -22 [ 110.702312][ T4227] usb usb2-port1: attempt power cycle [ 110.804504][ T5789] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.888207][ T5789] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.909892][ T5810] loop4: detected capacity change from 0 to 512 [ 110.931497][ T5789] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.987297][ T5810] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,noblock_validity,. Quota mode: writeback. [ 111.046025][ T5810] ext4 filesystem being mounted at /150/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.052692][ T5789] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.137499][ T4227] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 111.155879][ T5672] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 111.183063][ T5672] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 111.264681][ T5672] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 111.297801][ T4227] usb 2-1: no configurations [ 111.302439][ T4227] usb 2-1: can't read configurations, error -22 [ 111.338446][ T4599] device hsr_slave_0 left promiscuous mode [ 111.371611][ T4599] device hsr_slave_1 left promiscuous mode [ 111.392281][ T5819] autofs4:pid:5819:autofs_fill_super: called with bogus options [ 111.401520][ T4599] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.413671][ T4599] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.426354][ T4599] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.436726][ T4599] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.446001][ T4599] device bridge_slave_1 left promiscuous mode [ 111.454159][ T4599] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.469447][ T4599] device bridge_slave_0 left promiscuous mode [ 111.474660][ T1335] Bluetooth: hci2: command 0x040f tx timeout [ 111.485970][ T4599] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.503152][ T4227] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 111.623066][ T5824] loop2: detected capacity change from 0 to 512 [ 111.637591][ T4599] device veth1_macvtap left promiscuous mode [ 111.652428][ T4599] device veth0_macvtap left promiscuous mode [ 111.678439][ T4599] device veth1_vlan left promiscuous mode [ 111.696992][ T4599] device veth0_vlan left promiscuous mode [ 111.697740][ T4227] usb 2-1: no configurations [ 111.723150][ T4227] usb 2-1: can't read configurations, error -22 [ 111.735687][ T5824] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 111.760362][ T5824] ext4 filesystem being mounted at /106/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 111.765732][ T4227] usb usb2-port1: unable to enumerate USB device [ 111.828095][ T5824] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 3: comm syz.2.612: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 112.150718][ T4599] team0 (unregistering): Port device team_slave_1 removed [ 112.165498][ T4599] team0 (unregistering): Port device team_slave_0 removed [ 112.192782][ T4599] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.223748][ T4599] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.333747][ T4599] bond0 (unregistering): Released all slaves [ 112.399313][ T5837] loop1: detected capacity change from 0 to 512 [ 112.436272][ T5672] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 112.465113][ T5837] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 112.516580][ T5837] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.600064][ T5844] netlink: 16 bytes leftover after parsing attributes in process `syz.2.617'. [ 112.606033][ T5672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.645823][ T5672] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.654760][ T5111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 112.704875][ T5111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 112.770704][ T5848] loop2: detected capacity change from 0 to 256 [ 112.815976][ T5111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 112.850007][ T5111] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 112.899256][ T5111] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.902174][ T5848] FAT-fs (loop2): Directory bread(block 64) failed [ 112.906423][ T5111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.966825][ T5848] FAT-fs (loop2): Directory bread(block 65) failed [ 112.976569][ T5856] loop1: detected capacity change from 0 to 512 [ 112.994720][ T5111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 113.020249][ T5848] FAT-fs (loop2): Directory bread(block 66) failed [ 113.026905][ T5848] FAT-fs (loop2): Directory bread(block 67) failed [ 113.026925][ T5111] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 113.038868][ T5848] FAT-fs (loop2): Directory bread(block 68) failed [ 113.050595][ T5848] FAT-fs (loop2): Directory bread(block 69) failed [ 113.057234][ T5848] FAT-fs (loop2): Directory bread(block 70) failed [ 113.064352][ T5111] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.064487][ T5848] FAT-fs (loop2): Directory bread(block 71) failed [ 113.071983][ T5111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.087799][ T5111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 113.093001][ T5848] FAT-fs (loop2): Directory bread(block 72) failed [ 113.109910][ T5856] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 113.128712][ T5111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 113.147713][ T5848] FAT-fs (loop2): Directory bread(block 73) failed [ 113.150734][ T5856] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 113.168268][ T5111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 113.217876][ T5856] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8800c01d, mo2=0102] [ 113.227058][ T5856] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 113.240119][ T5111] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 113.243052][ T5856] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features [ 113.249026][ T5111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 113.265772][ T5111] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 113.277651][ T5856] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,abort,nomblk_io_submit,noblock_validity,nolazytime,noblock_validity,resgid=0x0000000000000000,nobarrier,jqfmt=vfsold,,errors=continue. Quota mode: none. [ 113.298752][ T5111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 113.307791][ T5856] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.623: dx entry: limit 65535 != root limit 120 [ 113.307861][ T5856] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.623: Corrupt directory, running e2fsck is recommended [ 113.410809][ T5111] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 113.499079][ T5111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 113.518237][ T5111] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 113.537742][ T4275] Bluetooth: hci2: command 0x0419 tx timeout [ 113.570200][ T5111] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 113.611481][ T5111] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 114.145745][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 114.168437][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 114.187780][ T5672] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.221831][ T5905] loop1: detected capacity change from 0 to 2048 [ 114.398255][ T5905] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,,errors=continue. Quota mode: none. [ 114.523837][ T26] audit: type=1800 audit(1776557906.439:33): pid=5905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.637" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 115.026443][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 115.048473][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 115.119695][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 115.160262][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 115.202433][ T5672] device veth0_vlan entered promiscuous mode [ 115.223452][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 115.258013][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 115.270657][ T5672] device veth1_vlan entered promiscuous mode [ 115.352696][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 115.383291][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 115.408499][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 115.432827][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 115.465483][ T5672] device veth0_macvtap entered promiscuous mode [ 115.491741][ T5672] device veth1_macvtap entered promiscuous mode [ 115.516957][ T5938] netlink: 4 bytes leftover after parsing attributes in process `syz.3.647'. [ 115.613159][ T5672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.662107][ T5672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.673029][ T5672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.700860][ T5672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.720544][ T5672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.740747][ T5672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.761739][ T5672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.785657][ T5672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.812848][ T5672] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.846602][ T5111] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 115.874570][ T5111] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 115.914094][ T5111] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 115.946160][ T5111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 116.003158][ T5672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.048700][ T5672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.077455][ T5672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.102758][ T5672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.132686][ T5672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.157483][ T5672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.187443][ T5672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.228107][ T5672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.287097][ T5672] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.326107][ T5111] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 116.345521][ T5111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 116.397225][ T5672] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.415213][ T5672] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.460731][ T5672] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.490584][ T5672] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.754685][ T5111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.805417][ T5111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.835820][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 116.894757][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.918674][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.926200][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 117.211606][ T5978] loop1: detected capacity change from 0 to 512 [ 117.229982][ T5979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.662'. [ 117.428456][ T5978] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #16: comm syz.1.661: corrupted inode contents [ 117.468910][ T5978] EXT4-fs error (device loop1): ext4_dirty_inode:6077: inode #16: comm syz.1.661: mark_inode_dirty error [ 117.511064][ T5978] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #16: comm syz.1.661: corrupted inode contents [ 117.526669][ T5978] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #16: comm syz.1.661: mark_inode_dirty error [ 117.547988][ T5978] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #16: comm syz.1.661: corrupted inode contents [ 117.594405][ T5978] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 117.647801][ T5978] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #16: comm syz.1.661: corrupted inode contents [ 117.713357][ T5978] EXT4-fs error (device loop1): ext4_truncate:4286: inode #16: comm syz.1.661: mark_inode_dirty error [ 117.754888][ T5978] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 117.791011][ T5978] EXT4-fs (loop1): 1 truncate cleaned up [ 117.808525][ T5978] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 117.831419][ T5978] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.060973][ T6008] loop4: detected capacity change from 0 to 128 [ 118.190055][ T6012] loop1: detected capacity change from 0 to 512 [ 118.247702][ T6012] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 118.255818][ T6014] device ip6gre1 entered promiscuous mode [ 118.306308][ T6012] EXT4-fs (loop1): orphan cleanup on readonly fs [ 118.332318][ T6012] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 118.489270][ T6012] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.672: attempt to clear invalid blocks 2 len 1 [ 118.506289][ T6012] EXT4-fs (loop1): Remounting filesystem read-only [ 118.515103][ T6012] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 118.575406][ T6012] EXT4-fs (loop1): Remounting filesystem read-only [ 118.610602][ T6012] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.672: invalid indirect mapped block 1819239214 (level 0) [ 118.635085][ T6012] EXT4-fs (loop1): Remounting filesystem read-only [ 118.642686][ T6012] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.672: invalid indirect mapped block 1819239214 (level 1) [ 118.665845][ T6012] EXT4-fs (loop1): Remounting filesystem read-only [ 118.675749][ T6012] EXT4-fs (loop1): 1 truncate cleaned up [ 118.686166][ T6012] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,init_itable=0x0000000000000004,mblk_io_submit,minixdf,jqfmt=vfsv0,usrjquota=... Quota mode: writeback. [ 118.903734][ T6041] loop2: detected capacity change from 0 to 512 [ 119.030293][ T6041] [ 119.032917][ T6041] ====================================================== [ 119.040116][ T6041] WARNING: possible circular locking dependency detected [ 119.047154][ T6041] syzkaller #0 Not tainted [ 119.051573][ T6041] ------------------------------------------------------ [ 119.058680][ T6041] syz.2.686/6041 is trying to acquire lock: [ 119.064734][ T6041] ffff88807c51ac58 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x20f/0x2df0 [ 119.074859][ T6041] [ 119.074859][ T6041] but task is already holding lock: [ 119.082316][ T6041] ffff888060d4da80 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3e8/0x700 [ 119.092354][ T6041] [ 119.092354][ T6041] which lock already depends on the new lock. [ 119.092354][ T6041] [ 119.102943][ T6041] [ 119.102943][ T6041] the existing dependency chain (in reverse order) is: [ 119.112124][ T6041] [ 119.112124][ T6041] -> #1 (&ei->xattr_sem){++++}-{3:3}: [ 119.120066][ T6041] down_write+0x38/0x60 [ 119.124844][ T6041] ext4_destroy_inline_data+0x24/0xe0 [ 119.131118][ T6041] ext4_writepages+0x670/0x2df0 [ 119.136511][ T6041] do_writepages+0x476/0x6e0 [ 119.141721][ T6041] filemap_fdatawrite_wbc+0x1eb/0x240 [ 119.147628][ T6041] filemap_flush+0xd4/0x130 [ 119.152754][ T6041] ext4_convert_inline_data+0x18b/0x5f0 [ 119.158922][ T6041] ext4_fallocate+0xf4/0x1ed0 [ 119.164246][ T6041] vfs_fallocate+0x587/0x6f0 [ 119.169371][ T6041] __x64_sys_fallocate+0xbd/0x100 [ 119.174945][ T6041] do_syscall_64+0x4c/0xa0 [ 119.179901][ T6041] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 119.186355][ T6041] [ 119.186355][ T6041] -> #0 (&sbi->s_writepages_rwsem){.+.+}-{0:0}: [ 119.194845][ T6041] __lock_acquire+0x2c42/0x7d10 [ 119.200326][ T6041] lock_acquire+0x19e/0x400 [ 119.205491][ T6041] percpu_down_read+0x46/0x1b0 [ 119.210786][ T6041] ext4_writepages+0x20f/0x2df0 [ 119.216200][ T6041] do_writepages+0x476/0x6e0 [ 119.221383][ T6041] __writeback_single_inode+0x153/0xda0 [ 119.227475][ T6041] writeback_single_inode+0x3cb/0x8e0 [ 119.233469][ T6041] write_inode_now+0x23b/0x2c0 [ 119.238766][ T6041] iput+0x5ab/0x8a0 [ 119.243289][ T6041] ext4_xattr_set_entry+0x34f4/0x3ea0 [ 119.249319][ T6041] ext4_xattr_block_set+0x4fd/0x2d20 [ 119.255244][ T6041] ext4_expand_extra_isize_ea+0xf3f/0x19b0 [ 119.262027][ T6041] __ext4_expand_extra_isize+0x301/0x3e0 [ 119.268584][ T6041] __ext4_mark_inode_dirty+0x469/0x700 [ 119.274606][ T6041] ext4_evict_inode+0xa8d/0x1090 [ 119.280172][ T6041] evict+0x4c9/0x8d0 [ 119.284598][ T6041] ext4_orphan_cleanup+0xad2/0x1320 [ 119.290332][ T6041] ext4_fill_super+0x8d6e/0x94f0 [ 119.295990][ T6041] mount_bdev+0x287/0x3c0 [ 119.300859][ T6041] legacy_get_tree+0xe6/0x180 [ 119.306286][ T6041] vfs_get_tree+0x88/0x270 [ 119.311321][ T6041] do_new_mount+0x24a/0xa40 [ 119.316554][ T6041] __se_sys_mount+0x2e3/0x3d0 [ 119.321763][ T6041] do_syscall_64+0x4c/0xa0 [ 119.326896][ T6041] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 119.333326][ T6041] [ 119.333326][ T6041] other info that might help us debug this: [ 119.333326][ T6041] [ 119.343680][ T6041] Possible unsafe locking scenario: [ 119.343680][ T6041] [ 119.351227][ T6041] CPU0 CPU1 [ 119.356776][ T6041] ---- ---- [ 119.362174][ T6041] lock(&ei->xattr_sem); [ 119.366518][ T6041] lock(&sbi->s_writepages_rwsem); [ 119.374891][ T6041] lock(&ei->xattr_sem); [ 119.381873][ T6041] lock(&sbi->s_writepages_rwsem); [ 119.387163][ T6041] [ 119.387163][ T6041] *** DEADLOCK *** [ 119.387163][ T6041] [ 119.396006][ T6041] 3 locks held by syz.2.686/6041: [ 119.401399][ T6041] #0: ffff88807c51c0e0 (&type->s_umount_key#28/1){+.+.}-{3:3}, at: alloc_super+0x201/0x950 [ 119.411727][ T6041] #1: ffff88807c51c650 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x44a/0x1090 [ 119.421326][ T6041] #2: ffff888060d4da80 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3e8/0x700 [ 119.432065][ T6041] [ 119.432065][ T6041] stack backtrace: [ 119.438001][ T6041] CPU: 1 PID: 6041 Comm: syz.2.686 Not tainted syzkaller #0 [ 119.445692][ T6041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 119.456129][ T6041] Call Trace: [ 119.459515][ T6041] [ 119.462451][ T6041] dump_stack_lvl+0x188/0x250 [ 119.467148][ T6041] ? load_image+0x400/0x400 [ 119.471680][ T6041] ? show_regs_print_info+0x20/0x20 [ 119.476897][ T6041] ? print_circular_bug+0x12b/0x1a0 [ 119.482196][ T6041] check_noncircular+0x296/0x330 [ 119.487147][ T6041] ? look_up_lock_class+0x71/0x110 [ 119.492544][ T6041] ? add_chain_block+0x940/0x940 [ 119.497488][ T6041] ? lockdep_lock+0xf1/0x1f0 [ 119.502086][ T6041] ? mark_lock+0x94/0x320 [ 119.506425][ T6041] __lock_acquire+0x2c42/0x7d10 [ 119.511467][ T6041] ? mark_lock+0x94/0x320 [ 119.515887][ T6041] ? verify_lock_unused+0x140/0x140 [ 119.521095][ T6041] ? verify_lock_unused+0x140/0x140 [ 119.526301][ T6041] ? __lock_acquire+0x13bc/0x7d10 [ 119.531598][ T6041] ? 0xffffffffa0016000 [ 119.535777][ T6041] lock_acquire+0x19e/0x400 [ 119.540294][ T6041] ? ext4_writepages+0x20f/0x2df0 [ 119.545329][ T6041] ? check_noncircular+0x189/0x330 [ 119.550458][ T6041] ? __might_sleep+0xf0/0xf0 [ 119.555156][ T6041] ? read_lock_is_recursive+0x10/0x10 [ 119.560641][ T6041] ? mark_lock+0x94/0x320 [ 119.564980][ T6041] ? __lock_acquire+0x13bc/0x7d10 [ 119.570189][ T6041] percpu_down_read+0x46/0x1b0 [ 119.574995][ T6041] ? ext4_writepages+0x20f/0x2df0 [ 119.580109][ T6041] ext4_writepages+0x20f/0x2df0 [ 119.585073][ T6041] ? rcu_is_watching+0x11/0xa0 [ 119.589874][ T6041] ? lock_release+0xb5/0x8a0 [ 119.594478][ T6041] ? rcu_lock_release+0x5/0x20 [ 119.599249][ T6041] ? verify_lock_unused+0x140/0x140 [ 119.604553][ T6041] ? mark_lock+0x94/0x320 [ 119.609149][ T6041] ? ext4_readpage+0x2e0/0x2e0 [ 119.613942][ T6041] ? __lock_acquire+0x13bc/0x7d10 [ 119.618992][ T6041] ? rcu_lock_release+0x5/0x20 [ 119.623860][ T6041] ? __lock_acquire+0x7d10/0x7d10 [ 119.628916][ T6041] ? do_raw_spin_lock+0x128/0x2f0 [ 119.634039][ T6041] ? do_raw_spin_unlock+0x11d/0x230 [ 119.639405][ T6041] ? ext4_readpage+0x2e0/0x2e0 [ 119.644256][ T6041] do_writepages+0x476/0x6e0 [ 119.648840][ T6041] ? __writepage+0x130/0x130 [ 119.653522][ T6041] ? writeback_single_inode+0x3c0/0x8e0 [ 119.659069][ T6041] ? __lock_acquire+0x7d10/0x7d10 [ 119.664167][ T6041] ? do_raw_spin_lock+0x128/0x2f0 [ 119.669174][ T6041] __writeback_single_inode+0x153/0xda0 [ 119.674715][ T6041] writeback_single_inode+0x3cb/0x8e0 [ 119.680068][ T6041] ? write_inode_now+0x2c0/0x2c0 [ 119.684992][ T6041] write_inode_now+0x23b/0x2c0 [ 119.689745][ T6041] ? bdi_split_work_to_wbs+0x8a0/0x8a0 [ 119.695197][ T6041] ? do_raw_spin_unlock+0x11d/0x230 [ 119.700379][ T6041] iput+0x5ab/0x8a0 [ 119.704174][ T6041] ext4_xattr_set_entry+0x34f4/0x3ea0 [ 119.709567][ T6041] ? ext4_xattr_ibody_set+0x330/0x330 [ 119.715031][ T6041] ? rcu_is_watching+0x11/0xa0 [ 119.719867][ T6041] ? kmem_cache_free+0x14c/0x210 [ 119.724792][ T6041] ? mb_cache_entry_delete_or_get+0x1bd/0x1e0 [ 119.730928][ T6041] ext4_xattr_block_set+0x4fd/0x2d20 [ 119.736206][ T6041] ? ext4_get_inode_loc+0x120/0x120 [ 119.741444][ T6041] ? __ext4_xattr_check_block+0x7d8/0x8d0 [ 119.747152][ T6041] ? ext4_xattr_block_find+0x500/0x500 [ 119.752606][ T6041] ? ext4_xattr_block_find+0x433/0x500 [ 119.758064][ T6041] ext4_expand_extra_isize_ea+0xf3f/0x19b0 [ 119.763863][ T6041] __ext4_expand_extra_isize+0x301/0x3e0 [ 119.769498][ T6041] __ext4_mark_inode_dirty+0x469/0x700 [ 119.774945][ T6041] ext4_evict_inode+0xa8d/0x1090 [ 119.779883][ T6041] ? _raw_spin_unlock+0x24/0x40 [ 119.784718][ T6041] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 119.790684][ T6041] ? do_raw_spin_unlock+0x11d/0x230 [ 119.795877][ T6041] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 119.801769][ T6041] evict+0x4c9/0x8d0 [ 119.805664][ T6041] ? proc_nr_inodes+0x320/0x320 [ 119.810500][ T6041] ? do_raw_spin_unlock+0x11d/0x230 [ 119.815696][ T6041] ? _raw_spin_unlock+0x24/0x40 [ 119.820631][ T6041] ? iput+0x706/0x8a0 [ 119.824685][ T6041] ext4_orphan_cleanup+0xad2/0x1320 [ 119.830135][ T6041] ? ext4_orphan_del+0xbf0/0xbf0 [ 119.835059][ T6041] ? errseq_check_and_advance+0x62/0x120 [ 119.840738][ T6041] ext4_fill_super+0x8d6e/0x94f0 [ 119.845668][ T6041] ? format_decode+0x898/0x1300 [ 119.850509][ T6041] ? ext4_mount+0x40/0x40 [ 119.854822][ T6041] ? set_blocksize+0x1f3/0x370 [ 119.859673][ T6041] ? sb_set_blocksize+0xa5/0xe0 [ 119.864518][ T6041] mount_bdev+0x287/0x3c0 [ 119.868939][ T6041] ? ext4_mount+0x40/0x40 [ 119.873427][ T6041] legacy_get_tree+0xe6/0x180 [ 119.878298][ T6041] ? ext4_errno_to_code+0x160/0x160 [ 119.883481][ T6041] vfs_get_tree+0x88/0x270 [ 119.887913][ T6041] do_new_mount+0x24a/0xa40 [ 119.892433][ T6041] __se_sys_mount+0x2e3/0x3d0 [ 119.897095][ T6041] ? __x64_sys_mount+0xc0/0xc0 [ 119.901868][ T6041] ? lockdep_hardirqs_on+0x94/0x140 [ 119.907052][ T6041] ? __x64_sys_mount+0x1c/0xc0 [ 119.911797][ T6041] do_syscall_64+0x4c/0xa0 [ 119.916202][ T6041] ? clear_bhb_loop+0x30/0x80 [ 119.920959][ T6041] ? clear_bhb_loop+0x30/0x80 [ 119.925617][ T6041] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 119.931502][ T6041] RIP: 0033:0x7fbf890b4a8a [ 119.935904][ T6041] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.955756][ T6041] RSP: 002b:00007fbf8730ce58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 119.964276][ T6041] RAX: ffffffffffffffda RBX: 00007fbf8730cee0 RCX: 00007fbf890b4a8a [ 119.972425][ T6041] RDX: 0000200000000480 RSI: 0000200000000000 RDI: 00007fbf8730cea0 [ 119.980391][ T6041] RBP: 0000200000000480 R08: 00007fbf8730cee0 R09: 0000000000000000 [ 119.988343][ T6041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 119.996411][ T6041] R13: 00007fbf8730cea0 R14: 0000000000000487 R15: 0000200000000c00 [ 120.004546][ T6041] [ 120.116620][ T6041] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #11: comm syz.2.686: iget: bad extra_isize 90 (inode size 256) [ 120.132445][ T6041] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.686: error while reading EA inode 11 err=-117 [ 120.146297][ T6041] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #11: comm syz.2.686: iget: bad extra_isize 90 (inode size 256) [ 120.184801][ T6041] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.686: error while reading EA inode 11 err=-117 [ 120.202309][ T6041] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #18: comm syz.2.686: iget: bad extra_isize 90 (inode size 256) [ 120.216550][ T6041] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.686: error while reading EA inode 18 err=-117 [ 120.230983][ T6041] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #18: comm syz.2.686: iget: bad extra_isize 90 (inode size 256) [ 120.248624][ T6041] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.686: error while reading EA inode 18 err=-117 [ 120.267652][ T6041] EXT4-fs (loop2): 1 orphan inode deleted [ 120.275867][ T6041] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_dev=0x0000000000000006,user_xattr,debug_want_extra_isize=0x000000000000005a,nodiscard,noload,min_batch_time=0x0000000000000003,min_batch_time=0x0000000000000006,,errors=continue. Quota mode: none.