last executing test programs: 8m46.589788367s ago: executing program 3 (id=709): syz_open_dev$vim2m(0x0, 0x800, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x80082) write$binfmt_script(r3, 0x0, 0x0) 8m45.961849852s ago: executing program 3 (id=712): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@bridge_newneigh={0x30, 0x1c, 0x1, 0x70bd2d, 0x25dfdbdc, {0x7, 0x0, 0x0, 0x0, 0x80, 0xc6, 0xa}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, @NDA_VLAN={0x6, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40440c4}, 0x8000) 8m45.133845232s ago: executing program 3 (id=716): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x20048a, &(0x7f00000001c0)={[{@grpjquota}, {@noinit_itable}, {@abort}, {@bsdgroups}]}, 0x1, 0x51a, &(0x7f0000001200)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0xf6) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, 0xffffffffffffffff) 8m42.74887517s ago: executing program 3 (id=725): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) umount2(&(0x7f0000000380)='./file1/file0\x00', 0x0) 8m40.637898892s ago: executing program 3 (id=730): syz_open_procfs(0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x8044805}, 0x881) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100001082abd62000000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'], 0x30}}, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x180000028) r2 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x6f3e7a39}}, 0x10) 8m40.034275366s ago: executing program 3 (id=735): syz_emit_ethernet(0x4a, &(0x7f0000000500)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02fffe9078"], 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0x401}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xe0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x5c}}, 0x20084884) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/printer.usb0/pnp_string\x00', 0x0, 0x0) 8m39.109146889s ago: executing program 32 (id=735): syz_emit_ethernet(0x4a, &(0x7f0000000500)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02fffe9078"], 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0x401}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xe0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x5c}}, 0x20084884) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/printer.usb0/pnp_string\x00', 0x0, 0x0) 7m48.729913499s ago: executing program 0 (id=946): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 7m47.683649704s ago: executing program 0 (id=952): syz_open_dev$vim2m(0x0, 0x800, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$mice(0xffffffffffffff9c, 0x0, 0x80082) 7m46.661204539s ago: executing program 0 (id=955): syz_open_procfs(0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x8044805}, 0x881) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000080004004400000008001b"], 0x30}}, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x180000028) r2 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x6f3e7a39}}, 0x10) 7m45.604877065s ago: executing program 0 (id=958): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb77d8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) r3 = socket$inet6(0xa, 0x3, 0x3) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000640)=0xcde, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r4) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="090d0000000000f0ff00070000000800", @ANYRES32, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008"], 0x58}}, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast2, @in=@empty, 0x4f23, 0x0, 0x4e23, 0x2, 0xa, 0x2a11bad3d5f03f04, 0x30, 0x2f}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x100000000, 0xfffffffffffffffb, 0x3, 0xffffffff, 0x7fff}, {0x4, 0xfffffffffffffffe, 0x4, 0x9}, 0x10001, 0x0, 0x1, 0x0, 0x2, 0x3}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x3c}, 0xa, @in=@remote, 0xfffffffe, 0x0, 0x1, 0x17, 0x0, 0x0, 0xfffffffb}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0xffe0) 7m44.56384098s ago: executing program 0 (id=966): socket$inet_sctp(0x2, 0x5, 0x84) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x4}, 0xe) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x7e6b, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x802, 0x0, 0x0, 0x0, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 7m44.300436336s ago: executing program 0 (id=969): ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f00000003c0)={0x1, 0x7, 0x6, 0x0}) r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000080)={'bridge_slave_0\x00', @random="0131be7839ff"}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000100)='trace/events/sched/sched_switch/filter\x00', 0x189003, 0x29) write(r3, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) 7m29.243239124s ago: executing program 33 (id=969): ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f00000003c0)={0x1, 0x7, 0x6, 0x0}) r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000080)={'bridge_slave_0\x00', @random="0131be7839ff"}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000100)='trace/events/sched/sched_switch/filter\x00', 0x189003, 0x29) write(r3, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) 6m57.472009249s ago: executing program 2 (id=1115): openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x40000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", 0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{r2, 0x209}], 0x1, 0x0, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) 6m56.2297174s ago: executing program 2 (id=1119): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) set_mempolicy(0xbfff, 0x0, 0xb) init_module(0x0, 0x195, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac7) syz_clone3(0x0, 0x0) r4 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_mtu(r4, 0x29, 0x1e, 0x0, 0x0) io_setup(0x8, 0x0) io_submit(0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x4b72, &(0x7f0000000240)={0x1, 0xffff, 0xa, 0x100003c, 0x5, "00f600"}) 6m55.099281397s ago: executing program 2 (id=1123): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb77d8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) r3 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000280)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f86fde300a06082a8648ce3d040302303a3138303606035529030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793020170d323430564d333232313632365a180f3231323430333d303232313632365a303a3138303626035504030c3f43657274696669636174fd98036d9c5b036520766572696669636174696f6e20454344fa253856656c662d74657374696e67206b65793059301306072a8648ce41020106082a8648ce3d0301070342000407", 0xec, 0xffffffffffffffff) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast2, @in=@empty, 0x4f23, 0x0, 0x4e23, 0x2, 0xa, 0x2a11bad3d5f03f04, 0x30, 0x2f}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x100000000, 0xfffffffffffffffb, 0x3, 0xffffffff, 0x7fff}, {0x4, 0xfffffffffffffffe, 0x4, 0x9}, 0x10001, 0x0, 0x1, 0x0, 0x2, 0x3}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x3c}, 0xa, @in=@remote, 0xfffffffe, 0x0, 0x1, 0x17, 0x0, 0x0, 0xfffffffb}}, 0xe8) 6m54.036593723s ago: executing program 2 (id=1126): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = syz_io_uring_setup(0xf04, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x10030f}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r3, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 6m52.894298331s ago: executing program 2 (id=1127): syz_open_procfs(0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x8044805}, 0x881) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100001082abd620000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004004400000008001b"], 0x30}}, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x180000028) r2 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x6f3e7a39}}, 0x10) 6m51.903370435s ago: executing program 2 (id=1131): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x2808080, &(0x7f0000000600)={[{@uni_xlate}, {@shortname_win95}, {@uni_xlateno}, {@uni_xlate}, {@utf8}, {@fat=@codepage={'codepage', 0x3d, '1250'}}, {@uni_xlateno}, {@uni_xlate}, {@utf8}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@fat=@check_strict}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}]}, 0x81, 0x2ae, &(0x7f0000001980)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$loop(0x0, 0x4, 0x2001) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) 6m36.828736283s ago: executing program 34 (id=1131): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x2808080, &(0x7f0000000600)={[{@uni_xlate}, {@shortname_win95}, {@uni_xlateno}, {@uni_xlate}, {@utf8}, {@fat=@codepage={'codepage', 0x3d, '1250'}}, {@uni_xlateno}, {@uni_xlate}, {@utf8}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@fat=@check_strict}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}]}, 0x81, 0x2ae, &(0x7f0000001980)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$loop(0x0, 0x4, 0x2001) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) 3m4.769672598s ago: executing program 5 (id=2317): openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x28, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 3m4.499390224s ago: executing program 5 (id=2319): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = dup(r0) socket$tipc(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x50}}}, &(0x7f0000000300)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r5) write$UHID_INPUT(r1, &(0x7f0000001980)={0xb, {"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", 0x1000}}, 0x1006) 3m3.48038762s ago: executing program 5 (id=2325): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c055}, 0x0) 3m3.283723284s ago: executing program 5 (id=2326): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb77d8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) r3 = socket$inet6(0xa, 0x3, 0x3) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000640)=0xcde, 0x4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="090d0000000000f0ff00070000000800", @ANYRES32, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008"], 0x58}}, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast2, @in=@empty, 0x4f23, 0x0, 0x4e23, 0x2, 0xa, 0x2a11bad3d5f03f04, 0x30, 0x2f}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x100000000, 0xfffffffffffffffb, 0x3, 0xffffffff, 0x7fff}, {0x4, 0xfffffffffffffffe, 0x4, 0x9}, 0x10001, 0x0, 0x1, 0x0, 0x2, 0x3}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x3c}, 0xa, @in=@remote, 0xfffffffe, 0x0, 0x1, 0x17, 0x0, 0x0, 0xfffffffb}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0xffe0) 3m2.677808089s ago: executing program 5 (id=2331): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_access\x00', &(0x7f0000001440)=ANY=[@ANYBLOB="0200000001000000000000000400050000000000100000000000000020"], 0x24, 0x3) 3m2.461952174s ago: executing program 5 (id=2333): unshare(0x20400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x6, 0x4, 0x6, 0xb}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) 2m47.36316547s ago: executing program 35 (id=2333): unshare(0x20400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x6, 0x4, 0x6, 0xb}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) 8.034257837s ago: executing program 7 (id=3111): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)='\x00\x00\x00\x00\x00', 0x5}], 0x1}}], 0x1, 0x41) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000240)=[{0x2, 0x2, {0x2, 0x1, 0x4}, {0x1, 0x0, 0x4}, 0xfd, 0x2}, {0x2, 0x0, {0x0, 0xf0, 0x3}, {0x1}, 0x2, 0xff}], 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 7.237298286s ago: executing program 7 (id=3125): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = socket(0x3d, 0x2, 0x10) getsockopt$inet6_tcp_int(r0, 0x6, 0x2, 0x0, &(0x7f00000002c0)) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='md0', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r2, &(0x7f0000000300), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r3, &(0x7f0000000380)='4', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/block/md0/md/chunk_size\x00', 0x1, 0x0) write(r4, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r5, &(0x7f0000000480)='1:0', 0x3) write(r5, 0x0, 0x0) write(r5, &(0x7f0000000540)='1:', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/block/md0/md/dev-ram0/slot\x00', 0x201, 0x0) write(r6, &(0x7f00000005c0), 0x0) openat(r5, 0x0, 0x22c1, 0x39) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000), 0x13f, 0x4}}, 0x20) r7 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) write(r7, &(0x7f00000007c0)='active', 0x6) 5.385683141s ago: executing program 7 (id=3121): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='sysfs\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000500)='ccgx-ucsi 0x08', 0xe) unlinkat(0xffffffffffffffff, 0x0, 0x200) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)=@ipv6_getaddrlabel={0x60, 0x4a, 0x0, 0x70bd2b, 0x25dfdbff, {0xa, 0x0, 0x3f, 0x0, 0x0, 0x7}, [@IFAL_LABEL={0x8, 0x2, 0x5}, @IFAL_ADDRESS={0x14, 0x1, @loopback}, @IFAL_ADDRESS={0x14, 0x1, @mcast2}, @IFAL_ADDRESS={0x14, 0x1, @mcast2}]}, 0x60}, 0x1, 0x0, 0x0, 0x8005}, 0x810) 4.434863484s ago: executing program 4 (id=3128): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0xa) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001800)={'veth1_virt_wifi\x00', 0x0}) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r5, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c642b4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 4.297874176s ago: executing program 1 (id=3129): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000200)={0x18, 0x0, {0x4001, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, 'vlan0\x00'}}, 0x1e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmmsg(r0, 0x0, 0x0, 0x20008050) 3.35668431s ago: executing program 1 (id=3130): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, 0x0) write$vhost_msg_v2(r0, &(0x7f00000005c0)={0x2, 0x0, {&(0x7f0000000940)=""/196, 0xc4, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000b00)={0x2, 0x0, {&(0x7f0000000080)=""/197, 0xc5, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg(r0, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg(r0, &(0x7f0000000840)={0x1, {&(0x7f0000000340)=""/185, 0xb9, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000640)=""/171, 0xfffffe7a, 0x0, 0x3, 0x3}}, 0x48) 3.35625965s ago: executing program 4 (id=3131): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r2], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, r1, 0x25, 0x2}, 0x14) syz_emit_ethernet(0x3a, &(0x7f00000001c0)=ANY=[], 0x0) 3.34106336s ago: executing program 6 (id=3132): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = socket(0x3d, 0x2, 0x10) getsockopt$inet6_tcp_int(r0, 0x6, 0x2, 0x0, &(0x7f00000002c0)) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='md0', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r2, &(0x7f0000000300), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r3, &(0x7f0000000380)='4', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/block/md0/md/chunk_size\x00', 0x1, 0x0) write(r4, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r5, &(0x7f0000000480)='1:0', 0x3) write(r5, 0x0, 0x0) write(r5, &(0x7f0000000540)='1:', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/block/md0/md/dev-ram0/slot\x00', 0x201, 0x0) write(r6, &(0x7f00000005c0), 0x0) openat(r5, 0x0, 0x22c1, 0x39) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000), 0x13f, 0x4}}, 0x20) r7 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) write(r7, &(0x7f00000007c0)='active', 0x6) 3.181452484s ago: executing program 8 (id=3133): r0 = dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_INPUT(r0, &(0x7f0000001980)={0xb, {"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", 0x1000}}, 0x1006) 3.049883337s ago: executing program 1 (id=3134): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x6c, r3}, 0x38) 3.049765837s ago: executing program 4 (id=3135): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/net/sctp/assocs\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000002b40)={0x2020}, 0x2020) 2.874242811s ago: executing program 4 (id=3136): openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 2.266681066s ago: executing program 6 (id=3137): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x20048051) sendmsg$can_bcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x5, 0x15, 0xfffffffe, {0x0, 0x2710}, {}, {}, 0x1, @can={{0x2}, 0x2, 0x6a035825891a9861}}, 0x48}, 0x1, 0x0, 0x0, 0x6686ae64641a9d97}, 0x0) 2.045943601s ago: executing program 8 (id=3138): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) io_uring_setup(0x3eab, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) 2.039737311s ago: executing program 6 (id=3139): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r2, r0, &(0x7f00000000c0)=0x58, 0x5) 1.951625224s ago: executing program 8 (id=3140): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000200)={0x18, 0x0, {0x4001, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, 'vlan0\x00'}}, 0x1e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmmsg(r0, 0x0, 0x0, 0x20008050) 1.937089604s ago: executing program 1 (id=3141): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0xa) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001800)={'veth1_virt_wifi\x00', 0x0}) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r4, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c642b4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.821121047s ago: executing program 7 (id=3142): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1215c0, 0x1a8) r1 = fanotify_init(0x8, 0x1) fanotify_mark(r1, 0x105, 0x40001032, r0, 0x0) fcntl$setlease(r0, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x10) 1.145788113s ago: executing program 4 (id=3143): socket(0x10, 0x3, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file3\x00', 0x10, &(0x7f0000000540)={[{@rodir}, {@numtail}, {@uni_xlate}, {@shortname_lower}, {@uni_xlateno}, {@utf8}, {@numtail}, {@shortname_mixed}, {@numtail}, {@fat=@codepage={'codepage', 0x3d, '863'}}, {@fat=@check_strict}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@utf8}, {@fat=@umask={'umask', 0x3d, 0x400}}, {@utf8no}]}, 0x3, 0x28e, &(0x7f0000000280)="$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") openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) r4 = socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES8=r1, @ANYRES16=r4], 0x14) 981.045557ms ago: executing program 8 (id=3144): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00', 0x7}], 0x1}}], 0x1, 0x41) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000240)=[{0x2, 0x2, {0x2, 0x1, 0x4}, {0x1, 0x0, 0x4}, 0xfd, 0x2}, {0x2, 0x0, {0x0, 0xf0, 0x3}, {0x1}, 0x2, 0xff}], 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 907.276009ms ago: executing program 6 (id=3145): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r2], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, r1, 0x25, 0x2}, 0x14) syz_emit_ethernet(0x3a, &(0x7f00000001c0)=ANY=[], 0x0) 760.743122ms ago: executing program 7 (id=3146): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, 0x0) write$vhost_msg_v2(r0, &(0x7f00000005c0)={0x2, 0x0, {&(0x7f0000000940)=""/196, 0xc4, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000b00)={0x2, 0x0, {&(0x7f0000000080)=""/197, 0xc5, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg(r0, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg(r0, &(0x7f0000000840)={0x1, {&(0x7f0000000340)=""/185, 0xb9, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000640)=""/171, 0xfffffe7a, 0x0, 0x3, 0x3}}, 0x48) 745.262573ms ago: executing program 1 (id=3147): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = socket(0x3d, 0x2, 0x10) getsockopt$inet6_tcp_int(r0, 0x6, 0x2, 0x0, &(0x7f00000002c0)) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='md0', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='ra', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r3, &(0x7f0000000380)='4', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/block/md0/md/chunk_size\x00', 0x1, 0x0) write(r4, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r5, &(0x7f0000000480)='1:0', 0x3) write(r5, 0x0, 0x0) write(r5, &(0x7f0000000540)='1:', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/block/md0/md/dev-ram0/slot\x00', 0x201, 0x0) write(r6, &(0x7f00000005c0), 0x0) openat(r5, 0x0, 0x22c1, 0x39) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000), 0x13f, 0x4}}, 0x20) r7 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) write(r7, &(0x7f00000007c0)='active', 0x6) 672.150274ms ago: executing program 4 (id=3148): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = dup(r0) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_INPUT(r1, &(0x7f0000001980)={0xb, {"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", 0x1000}}, 0x1006) 572.400206ms ago: executing program 6 (id=3149): syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000180)=ANY=[]) r0 = socket(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x4000) write(r0, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r2, 0x0, 0x0, 0x20008000) shutdown(r2, 0x1) r3 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r3, 0x0) recvmmsg(r0, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) 505.805928ms ago: executing program 7 (id=3150): syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000056, &(0x7f00000000c0)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@inlinecrypt}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$eJzs3T1sG3UbAPDnznHTj7xv+krvK72gDhUgFamqk/QDClO7IipV6oDEApHjRlWcuIodaKJIpHuF6IAAdSkbDIwgBgbEwsjKwseMVNEIpKYDGDk+p2nqFCfEMcS/n3TJ/3939vP8fX7OvtOdHEDfOtr4k0Y8EREXk4jhdcsGIlt4tLneyvJi8f7yYjGJev3Sz0kkEXFvebHYWj/J/h+KiKWI+H9EfJWPOJ6uPeW+VqM6vzA1Xi6XZrP+SG366kh1fuHElenxydJkaebU8y+cOXv6zNjJsfXp3q+v7+W3NtYb3998+8Y3L92++fEnR5aK744ncS6GsmXrx7GTmq9JPs5tmH+6G8F6KOl1AmxLLqvzRin9L4Yjl1V9O/X1O4fBXUkP6KL6YER9zbom0AcSRQ99qvU9oHH825p28/vHnfPNA5BG3JXlxeJb0Yo/0Dw3EftXj00O/pI8dGTSON48vJuJsictXY+I0YGBR9//Sfb+277RnUiQrvryfHNDPbr907X9T7TZ/wy1zp3+Ra3930q2/1tpEz+3yf7vYocxfnv1xw82jX99MJ5sGz9Zi5+0iZ9GxOsdxr/1yudnN1tW/zDiWLSP35I8/vzwyOUr5dJo82/bGF8cO/Li5uOPOLhJ/OY52/2riawf/74sp7TD8X/29adPLT0m/rNPP377t3v9D0TEOx3G/8+9j17ebNmd68ndxreArW7/JPJxu8P4z507+l3WdNYQAAAAAAAAAAB2ULp6LVuSFtbaaVooNO/h/W8cTMuVau345crczETzmrfDkU9bV1oNN/tJoz+WXY/b6p/c0D+VywLmDqz2C8VKeaLHYwcAAAAAAAAAAAAAAAAAAIC/i0Mb7v//Nbd6///Gn6sG9qrNf/Ib2OvUP/Svh+s/6VkewO7z+Q99q67+oX+pf+hf6h/6l/qH/tW2/g/sfh7A7vP5D/1L/QMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChMdXvLy8WG/2Jgfm5qcobJyZK1anC9FyxUKzMXi1MViqT5VKhWJn+s+dLKpWrozEzd22kVqrWRqrzC69NV+ZmWr8pWsp3fUQAAAAAAAAAAAAAAAAAAADwzzO0OiVpISLf7KdpoRDxr4g4nERy+Uq5NBoR/46Ib3P5wUZ/rNdJAwAAAAAAAAAAAAAAAAAAwB5TnV+YGi+XS7PdawxkoTp71A+1ruYzsJWVI2JpZ9NoPOOWH5XPXsDubqY+aeQ6fB/2faOHOyUAAAAAAAAAAAAAAAAAAOhTD2767fQRv3c3IQAAAAAAAAAAAAAAAAAAAOhL6U9JRDSmY8PPDG1cui9Zya3+j4g3b11679p4rTY71ph/d21+7f1s/sle5A90qlWnaUQ06hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4oDq/MDVeLpdmt9kY7GCdXo8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDv+CAAA//9bQM66") r0 = socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x180, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x7fffe, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {0xb, 0xb}, {0x0, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x1, 0x9, 0x1, 0x8}, 0x0, 0xfffffffc, 0x32, 0x5, 0x9, 0x7, 0x9, 0x1d, 0x1, 0xffffff5c, {0xffff1c76, 0x1f, 0x3, 0x1008, 0xfffffffe, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x404c800}, 0x400c000) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031620d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 288.912063ms ago: executing program 8 (id=3151): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r0, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002b40)={0x2020}, 0x2020) 199.443206ms ago: executing program 6 (id=3152): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='sysfs\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000500)='ccgx-ucsi 0x08', 0xe) unlinkat(0xffffffffffffffff, 0x0, 0x200) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)=@ipv6_getaddrlabel={0x60, 0x4a, 0x0, 0x70bd2b, 0x25dfdbff, {0xa, 0x0, 0x3f, 0x0, 0x0, 0x7}, [@IFAL_LABEL={0x8, 0x2, 0x5}, @IFAL_ADDRESS={0x14, 0x1, @loopback}, @IFAL_ADDRESS={0x14, 0x1, @mcast2}, @IFAL_ADDRESS={0x14, 0x1, @mcast2}]}, 0x60}, 0x1, 0x0, 0x0, 0x8005}, 0x810) 725.84µs ago: executing program 1 (id=3153): socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = msgget$private(0x0, 0x1c0) msgctl$IPC_RMID(r3, 0x0) 0s ago: executing program 8 (id=3154): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x200000005c831, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa004}, 0x4) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x800, 0x3) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) kernel console output (not intermixed with test programs): fd: Insufficient options for proto=fd [ 413.253773][ T9551] md: personality for level rai is not loaded! [ 413.876430][ T9586] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1416'. [ 414.324286][ T9593] md: could not open device unknown-block(1,0). [ 414.426178][ T9591] loop4: detected capacity change from 0 to 512 [ 414.501412][ T9591] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 414.564126][ T9591] EXT4-fs (loop4): 1 truncate cleaned up [ 414.608443][ T9591] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 414.737394][ T9611] 9pnet_fd: Insufficient options for proto=fd [ 415.974070][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 416.140832][ T9630] md: could not open device unknown-block(1,0). [ 416.587771][ T9643] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1434'. [ 416.880950][ T9630] md: personality for level rai is not loaded! [ 417.142405][ T9644] md: could not open device unknown-block(1,0). [ 417.294563][ T9647] md: could not open device unknown-block(1,0). [ 418.317685][ T9659] 9pnet_fd: Insufficient options for proto=fd [ 418.837749][ T9666] loop6: detected capacity change from 0 to 512 [ 418.889247][ T9666] EXT4-fs: Ignoring removed nobh option [ 419.526858][ T9666] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 419.545949][ T9666] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 419.670533][ T9683] can0: slcan on ptm0. [ 419.993357][ T9685] i2c i2c-0: Failed to register i2c client ccgx-ucsi at 0x08 (-16) [ 420.525609][ T9687] md: could not open device unknown-block(1,0). [ 420.547713][ T9681] can0 (unregistered): slcan off ptm0. [ 420.600803][ T7966] EXT4-fs (loop6): unmounting filesystem. [ 421.042970][ T9705] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1448'. [ 421.863516][ T9719] md: could not open device unknown-block(1,0). [ 423.048002][ T9738] loop4: detected capacity change from 0 to 512 [ 423.077454][ T9740] md: could not open device unknown-block(1,0). [ 423.100354][ T9738] EXT4-fs: Ignoring removed nobh option [ 423.171107][ T9738] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 423.254220][ T9738] ext4 filesystem being mounted at /295/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 423.568646][ T9756] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1466'. [ 423.662730][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 424.098262][ T4318] kernel write not supported for file /vcs (pid: 4318 comm: kworker/0:6) [ 424.166972][ T9764] md: could not open device unknown-block(1,0). [ 425.581808][ T9791] md: could not open device unknown-block(1,0). [ 425.942252][ T9802] loop6: detected capacity change from 0 to 512 [ 426.006472][ T9802] EXT4-fs: Ignoring removed nobh option [ 426.186772][ T9810] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1482'. [ 426.508754][ T9802] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 426.611253][ T9802] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 426.766468][ T9817] md: could not open device unknown-block(1,0). [ 426.770402][ T7966] EXT4-fs (loop6): unmounting filesystem. [ 426.972904][ T9817] md: personality for level rai is not loaded! [ 427.441933][ T9844] md: could not open device unknown-block(1,0). [ 428.325521][ T9844] md: personality for level rai is not loaded! [ 428.531248][ T9858] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1496'. [ 429.228878][ T9864] loop6: detected capacity change from 0 to 512 [ 429.256891][ T9864] EXT4-fs: Ignoring removed nobh option [ 429.324040][ T9868] binder: BINDER_SET_CONTEXT_MGR already set [ 429.351064][ T9868] binder: 9867:9868 ioctl 4018620d 200000004a80 returned -16 [ 429.394269][ T9864] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 429.462407][ T9864] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 429.656898][ T7966] EXT4-fs (loop6): unmounting filesystem. [ 429.675448][ T9878] md: could not open device unknown-block(1,0). [ 429.940745][ T9878] md: personality for level rai is not loaded! [ 430.964772][ T9907] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1508'. [ 431.372100][ T9904] md: could not open device unknown-block(1,0). [ 431.707546][ T4276] Bluetooth: hci5: command 0x0406 tx timeout [ 432.327525][ T9904] md: personality for level rai is not loaded! [ 432.415913][ T9920] binder: BINDER_SET_CONTEXT_MGR already set [ 432.467380][ T9920] binder: 9919:9920 ioctl 4018620d 200000004a80 returned -16 [ 433.560618][ T9947] md: could not open device unknown-block(1,0). [ 433.781932][ T9947] md: personality for level rai is not loaded! [ 435.361748][ T9970] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1523'. [ 435.374972][ T4286] Bluetooth: hci4: command 0x1003 tx timeout [ 435.381455][ T4276] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 435.812535][ T9949] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1519'. [ 437.904252][ T9998] md: could not open device unknown-block(1,0). [ 438.084625][ T9998] md: personality for level rai is not loaded! [ 438.531154][T10014] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1535'. [ 439.135517][T10017] md: could not open device unknown-block(1,0). [ 439.293654][T10023] loop1: detected capacity change from 0 to 512 [ 439.331933][T10023] EXT4-fs: Ignoring removed nobh option [ 439.414036][T10027] Set syz1 is full, maxelem 1029 reached [ 439.421862][T10023] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 439.437851][T10031] loop5: detected capacity change from 0 to 128 [ 439.457534][T10023] ext4 filesystem being mounted at /288/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 439.525503][T10017] md: personality for level rai is not loaded! [ 439.546071][ T4266] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 439.677728][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 439.834617][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.841068][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.167402][T10051] md: could not open device unknown-block(1,0). [ 440.600009][T10051] md: personality for level rai is not loaded! [ 440.694598][T10068] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1548'. [ 441.546815][T10077] loop1: detected capacity change from 0 to 512 [ 441.569884][T10077] EXT4-fs: Ignoring removed nobh option [ 441.627280][T10081] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 441.642583][T10077] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 441.672268][T10077] ext4 filesystem being mounted at /291/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 441.876064][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 442.021807][ T4359] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 442.089984][ T4359] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 442.965529][T10117] loop5: detected capacity change from 0 to 512 [ 443.031615][T10117] EXT4-fs: Ignoring removed nobh option [ 443.265217][T10123] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1562'. [ 443.596101][T10117] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 443.770787][T10117] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 443.950001][ T6853] EXT4-fs (loop5): unmounting filesystem. [ 445.271166][T10173] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1576'. [ 445.914323][T10175] loop1: detected capacity change from 0 to 512 [ 445.921483][T10175] EXT4-fs: Ignoring removed nobh option [ 445.979299][T10175] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 446.004238][T10132] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1566'. [ 446.116256][T10175] ext4 filesystem being mounted at /295/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 446.381887][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 446.623900][T10187] Set syz1 is full, maxelem 1029 reached [ 446.675172][T10187] loop1: detected capacity change from 0 to 128 [ 447.645312][T10214] loop5: detected capacity change from 0 to 512 [ 447.669932][T10214] EXT4-fs: Ignoring removed nobh option [ 447.752394][T10219] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1588'. [ 448.169393][T10214] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 448.278267][T10214] ext4 filesystem being mounted at /182/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 448.569887][ T6853] EXT4-fs (loop5): unmounting filesystem. [ 449.942366][T10255] loop6: detected capacity change from 0 to 256 [ 450.225794][T10235] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1592'. [ 450.353531][T10264] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1602'. [ 451.186760][T10272] can0: slcan on ptm0. [ 451.250787][T10273] Set syz1 is full, maxelem 1029 reached [ 451.466088][T10281] i2c i2c-0: Failed to register i2c client ccgx-ucsi at 0x08 (-16) [ 452.096873][T10270] can0 (unregistered): slcan off ptm0. [ 454.181625][T10326] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1616'. [ 455.110831][T10339] can0: slcan on ptm0. [ 455.325425][T10343] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1618'. [ 455.425654][T10348] i2c i2c-0: Failed to register i2c client ccgx-ucsi at 0x08 (-16) [ 456.035969][T10338] can0 (unregistered): slcan off ptm0. [ 457.828387][T10382] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1629'. [ 458.544590][T10384] md: personality for level rai is not loaded! [ 460.391752][T10431] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1643'. [ 462.820247][T10479] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1656'. [ 463.579289][T10477] loop7: detected capacity change from 0 to 8192 [ 464.079914][T10500] 8021q: VLANs not supported on gre0 [ 464.898415][T10525] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1670'. [ 465.951544][T10532] md: personality for level rai is not loaded! [ 466.152254][T10547] md: could not open device unknown-block(1,0). [ 466.305795][ T4276] Bluetooth: hci4: command 0x1003 tx timeout [ 466.313871][ T4286] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 466.442721][T10547] md: personality for level rai is not loaded! [ 467.011795][T10572] Set syz1 is full, maxelem 1029 reached [ 468.146837][T10605] md: could not open device unknown-block(1,0). [ 468.326184][T10605] md: personality for level rai is not loaded! [ 468.362527][T10615] Set syz1 is full, maxelem 1029 reached [ 468.406523][T10616] md: could not open device unknown-block(1,0). [ 468.636966][T10610] md: personality for level rai is not loaded! [ 468.889517][T10636] netlink: 'syz.6.1700': attribute type 39 has an invalid length. [ 469.415540][T10647] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1702'. [ 470.264318][T10656] can0: slcan on ptm0. [ 471.146792][T10654] can0 (unregistered): slcan off ptm0. [ 471.283215][T10667] md: could not open device unknown-block(1,0). [ 471.332713][T10669] Set syz1 is full, maxelem 1029 reached [ 471.501102][T10667] md: personality for level rai is not loaded! [ 471.873233][T10690] binder: 10689:10690 ioctl 4018620d 0 returned -22 [ 471.874837][T10688] md: could not open device unknown-block(1,0). [ 472.063830][T10694] loop6: detected capacity change from 0 to 512 [ 472.122453][T10688] md: personality for level rai is not loaded! [ 472.426432][T10701] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1716'. [ 472.612499][T10694] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 472.741930][T10694] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 473.108148][T10709] can0: slcan on ptm0. [ 473.241500][ T7966] EXT4-fs (loop6): unmounting filesystem. [ 473.316710][T10713] loop1: detected capacity change from 0 to 8192 [ 473.964062][T10716] md: could not open device unknown-block(1,0). [ 473.971303][T10708] can0 (unregistered): slcan off ptm0. [ 474.207312][T10716] md: personality for level rai is not loaded! [ 474.321493][T10733] binder: 10732:10733 ioctl 4018620d 0 returned -22 [ 474.657270][T10735] md: personality for level rai is not loaded! [ 474.736357][T10742] md: could not open device unknown-block(1,0). [ 475.318724][T10758] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1730'. [ 475.581215][T10742] md: personality for level rai is not loaded! [ 475.593227][T10759] loop7: detected capacity change from 0 to 256 [ 476.001247][T10768] netlink: 'syz.7.1734': attribute type 39 has an invalid length. [ 476.420547][T10782] Set syz1 is full, maxelem 1029 reached [ 476.550351][T10787] binder: 10786:10787 ioctl 4018620d 0 returned -22 [ 476.586748][T10789] md: could not open device unknown-block(1,0). [ 476.901935][T10789] md: personality for level rai is not loaded! [ 476.979094][T10801] loop1: detected capacity change from 0 to 256 [ 477.172585][T10808] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1742'. [ 477.717065][T10810] md: could not open device unknown-block(1,0). [ 477.941162][T10810] md: personality for level rai is not loaded! [ 478.893385][T10842] binder: BINDER_SET_CONTEXT_MGR already set [ 478.907395][T10842] binder: 10841:10842 ioctl 4018620d 200000004a80 returned -16 [ 479.461470][T10857] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1757'. [ 479.886393][T10801] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 480.152553][ T4286] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 480.171284][T10860] md: personality for level rai is not loaded! [ 480.664078][T10879] Set syz1 is full, maxelem 1029 reached [ 480.693052][T10881] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 481.542476][T10897] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1771'. [ 481.604544][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 482.114914][T10901] loop6: detected capacity change from 0 to 256 [ 482.443205][T10913] loop5: detected capacity change from 0 to 512 [ 482.958418][T10913] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.1773: invalid block [ 482.974208][T10913] EXT4-fs (loop5): Remounting filesystem read-only [ 482.981507][T10913] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.1773: invalid indirect mapped block 4294967295 (level 1) [ 483.004688][T10913] EXT4-fs (loop5): Remounting filesystem read-only [ 483.011314][T10913] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.1773: invalid indirect mapped block 4294967295 (level 1) [ 483.031214][T10913] EXT4-fs (loop5): Remounting filesystem read-only [ 483.040148][T10913] EXT4-fs (loop5): 2 truncates cleaned up [ 483.046057][T10913] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 483.312920][ T4574] Bluetooth: hci4: Frame reassembly failed (-84) [ 484.117966][ T6853] EXT4-fs (loop5): unmounting filesystem. [ 484.139999][T10926] binder: BINDER_SET_CONTEXT_MGR already set [ 484.148274][T10926] binder: 10925:10926 ioctl 4018620d 200000004a80 returned -16 [ 484.924275][T10901] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 485.346867][ T4276] Bluetooth: hci4: command 0x1003 tx timeout [ 485.354598][ T4286] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 485.493320][T10948] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1784'. [ 486.116824][T10955] md: could not open device unknown-block(1,0). [ 486.395230][T10955] md: personality for level rai is not loaded! [ 486.430256][T10964] binder: 10963:10964 ioctl c0306201 0 returned -14 [ 487.682308][T10993] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1799'. [ 487.985817][ T4286] Bluetooth: hci0: command 0x0406 tx timeout [ 488.352018][T11000] binder: 10999:11000 ioctl c0306201 0 returned -14 [ 488.514585][T11004] md: could not open device unknown-block(1,0). [ 488.761482][T11004] md: personality for level rai is not loaded! [ 489.007763][T11024] md: could not open device unknown-block(1,0). [ 489.192445][T11024] md: personality for level rai is not loaded! [ 489.314029][T11032] loop4: detected capacity change from 0 to 256 [ 489.368877][T11032] FAT-fs (loop4): Unrecognized mount option "check=ste=mixed" or missing value [ 489.403646][T11035] binder: 11033:11035 ioctl c0306201 0 returned -14 [ 489.811728][T11036] loop7: detected capacity change from 0 to 512 [ 490.077153][ T4286] Bluetooth: hci2: unexpected event for opcode 0x0c22 [ 490.294395][T11036] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.1815: invalid indirect mapped block 4294967295 (level 1) [ 490.315152][T11036] EXT4-fs (loop7): Remounting filesystem read-only [ 490.321818][T11036] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.1815: invalid indirect mapped block 4294967295 (level 1) [ 490.340387][T11036] EXT4-fs (loop7): Remounting filesystem read-only [ 490.348190][T11036] EXT4-fs (loop7): 2 truncates cleaned up [ 490.354036][T11036] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 491.819283][ T8751] EXT4-fs (loop7): unmounting filesystem. [ 491.885558][T11056] md: could not open device unknown-block(1,0). [ 492.331469][T11056] md: personality for level rai is not loaded! [ 492.440537][T11067] md: could not open device unknown-block(1,0). [ 492.681167][T11067] md: personality for level rai is not loaded! [ 493.845524][T11103] can0: slcan on ptm0. [ 494.647335][T11112] md: could not open device unknown-block(1,0). [ 494.716753][T11102] can0 (unregistered): slcan off ptm0. [ 494.957378][T11112] md: personality for level rai is not loaded! [ 495.031808][T11127] loop4: detected capacity change from 0 to 128 [ 495.116336][T11129] md: could not open device unknown-block(1,0). [ 495.412422][T11129] md: personality for level rai is not loaded! [ 495.412535][T11123] loop6: detected capacity change from 0 to 512 [ 495.548281][T11141] loop1: detected capacity change from 0 to 256 [ 495.765904][T11123] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.1838: invalid indirect mapped block 4294967295 (level 1) [ 495.774557][T11156] loop5: detected capacity change from 0 to 512 [ 495.973135][T11156] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 496.413375][T11156] EXT4-fs (loop5): 1 truncate cleaned up [ 496.420390][T11156] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 496.511550][T11123] EXT4-fs (loop6): Remounting filesystem read-only [ 496.585796][T11123] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.1838: invalid indirect mapped block 4294967295 (level 1) [ 496.605902][T11169] can0: slcan on ptm0. [ 496.617294][ T6853] EXT4-fs (loop5): unmounting filesystem. [ 496.692945][T11123] EXT4-fs (loop6): Remounting filesystem read-only [ 496.778883][T11123] EXT4-fs (loop6): 2 truncates cleaned up [ 496.784753][T11123] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 497.346522][T11155] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 497.443220][T11155] EXT4-fs (loop6): Remounting filesystem read-only [ 497.495881][T11166] can0 (unregistered): slcan off ptm0. [ 497.690984][T11183] Set syz1 is full, maxelem 1029 reached [ 497.944453][T11194] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1868'. [ 497.972971][T11195] md: could not open device unknown-block(1,0). [ 498.202093][T11195] md: personality for level rai is not loaded! [ 498.317218][T11202] loop5: detected capacity change from 0 to 256 [ 499.334945][T11218] can0: slcan on ptm0. [ 499.496195][T11221] md: could not open device unknown-block(1,0). [ 500.176023][T11217] can0 (unregistered): slcan off ptm0. [ 500.214063][T11229] Set syz1 is full, maxelem 1029 reached [ 500.236994][T11221] md: personality for level rai is not loaded! [ 500.547792][T11239] md: could not open device unknown-block(1,0). [ 500.750469][T11239] md: personality for level rai is not loaded! [ 501.534047][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.571594][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.850365][T11266] loop5: detected capacity change from 0 to 256 [ 502.007701][T11272] loop1: detected capacity change from 0 to 512 [ 502.014882][T11272] EXT4-fs: Ignoring removed nobh option [ 502.268345][T11272] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 502.319468][T11272] ext4 filesystem being mounted at /342/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 502.343051][T11281] md: could not open device unknown-block(1,0). [ 502.474727][T11287] Set syz1 is full, maxelem 1029 reached [ 502.572210][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 502.654639][T11281] md: personality for level rai is not loaded! [ 502.751068][T11293] loop4: detected capacity change from 0 to 512 [ 502.828443][T11293] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 502.895833][T11293] EXT4-fs (loop4): group descriptors corrupted! [ 503.041045][T11300] md: could not open device unknown-block(1,0). [ 503.156343][T11300] md: personality for level rai is not loaded! [ 504.119355][T11316] loop5: detected capacity change from 0 to 512 [ 504.134358][T11316] EXT4-fs: Ignoring removed nobh option [ 504.188884][T11318] loop4: detected capacity change from 0 to 256 [ 504.221143][T11316] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 504.241939][T11326] Set syz1 is full, maxelem 1029 reached [ 504.247855][T11316] ext4 filesystem being mounted at /246/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 504.488079][ T6853] EXT4-fs (loop5): unmounting filesystem. [ 504.559550][ T7966] EXT4-fs (loop6): unmounting filesystem. [ 504.633183][T11337] md: could not open device unknown-block(1,0). [ 504.762801][T11340] loop6: detected capacity change from 0 to 256 [ 504.822890][T11337] md: personality for level rai is not loaded! [ 504.850934][T11340] FAT-fs (loop6): Unrecognized mount option "+YÂù¼û^\°Xuni_xlate=1" or missing value [ 504.985331][ T4266] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 506.034859][T11363] loop6: detected capacity change from 0 to 512 [ 506.122580][T11363] EXT4-fs: Ignoring removed nobh option [ 506.208348][T11370] Set syz1 is full, maxelem 1029 reached [ 506.243238][T11363] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 506.257400][T11363] ext4 filesystem being mounted at /176/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 506.433068][ T7966] EXT4-fs (loop6): unmounting filesystem. [ 507.047186][T11387] loop1: detected capacity change from 0 to 512 [ 507.887435][T11392] md: could not open device unknown-block(1,0). [ 508.138367][T11387] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1920: invalid indirect mapped block 4294967295 (level 1) [ 508.168352][T11387] EXT4-fs (loop1): Remounting filesystem read-only [ 508.174992][T11387] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1920: invalid indirect mapped block 4294967295 (level 1) [ 508.192408][T11387] EXT4-fs (loop1): Remounting filesystem read-only [ 508.200005][T11387] EXT4-fs (loop1): 2 truncates cleaned up [ 508.205946][T11387] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 508.793423][T11390] md: personality for level rai is not loaded! [ 508.976474][T11401] tmpfs: Unknown parameter 'usrquota' [ 509.151578][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 509.438795][T11413] Set syz1 is full, maxelem 1029 reached [ 509.693798][T11421] device syzkaller0 entered promiscuous mode [ 510.094965][T11440] loop6: detected capacity change from 0 to 2048 [ 510.227576][T11440] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 510.274851][T11440] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 510.320014][T11450] md: personality for level rai is not loaded! [ 510.336157][T11440] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 510.375423][T11440] EXT4-fs (loop6): This should not happen!! Data will be lost [ 510.375423][T11440] [ 510.400909][T11440] EXT4-fs (loop6): Total free blocks count 0 [ 510.425055][T11440] EXT4-fs (loop6): Free/Dirty block details [ 510.449508][T11440] EXT4-fs (loop6): free_blocks=66060288 [ 510.482348][T11440] EXT4-fs (loop6): dirty_blocks=32 [ 510.489836][T11440] EXT4-fs (loop6): Block reservation details [ 510.501806][T11440] EXT4-fs (loop6): i_reserved_data_blocks=2 [ 510.513682][T11452] md: personality for level rai is not loaded! [ 510.608461][ T4330] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 511.581880][T11471] md: personality for level rai is not loaded! [ 511.824775][T11485] binder: 11484:11485 ioctl 4018620d 0 returned -22 [ 512.093240][T11495] md: personality for level rai is not loaded! [ 513.365537][T11521] loop1: detected capacity change from 0 to 256 [ 513.374055][T11527] Set syz1 is full, maxelem 1029 reached [ 513.416869][T11529] tmpfs: Unknown parameter 'usrquota' [ 514.632473][T11538] md: personality for level rai is not loaded! [ 515.629527][T11570] loop7: detected capacity change from 0 to 256 [ 515.893115][T11579] loop5: detected capacity change from 0 to 2048 [ 516.025041][T11579] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 516.155481][T11579] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 516.262633][T11579] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 516.276225][T11579] EXT4-fs (loop5): This should not happen!! Data will be lost [ 516.276225][T11579] [ 516.286102][T11579] EXT4-fs (loop5): Total free blocks count 0 [ 516.292341][T11579] EXT4-fs (loop5): Free/Dirty block details [ 516.298569][T11579] EXT4-fs (loop5): free_blocks=66060288 [ 516.309797][T11579] EXT4-fs (loop5): dirty_blocks=32 [ 516.317205][T11579] EXT4-fs (loop5): Block reservation details [ 516.323303][T11579] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 516.425230][ T2939] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 516.499208][T11600] md: could not open device unknown-block(1,0). [ 517.317960][T11600] md: personality for level rai is not loaded! [ 517.423659][T11609] Set syz1 is full, maxelem 1029 reached [ 517.539232][T11612] loop1: detected capacity change from 0 to 256 [ 517.663099][T11623] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2002'. [ 517.998679][T11634] loop6: detected capacity change from 0 to 2048 [ 518.142490][T11634] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 518.179232][T11634] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 518.987836][ T7966] EXT4-fs (loop6): unmounting filesystem. [ 519.019953][T11647] md: could not open device unknown-block(1,0). [ 519.222232][T11647] md: personality for level rai is not loaded! [ 519.293861][T11656] Set syz1 is full, maxelem 1029 reached [ 520.100140][T11664] loop6: detected capacity change from 0 to 256 [ 520.186221][T11676] tmpfs: Unknown parameter 'usrquota' [ 520.589972][T11685] loop6: detected capacity change from 0 to 2048 [ 521.000520][T11685] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 521.344533][T11685] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 521.542955][T11698] md: could not open device unknown-block(1,0). [ 521.558577][ T7966] EXT4-fs (loop6): unmounting filesystem. [ 521.579820][T11702] Set syz1 is full, maxelem 1029 reached [ 521.775115][T11713] loop5: detected capacity change from 0 to 256 [ 521.791965][T11711] loop7: detected capacity change from 0 to 512 [ 521.854933][ T26] audit: type=1326 audit(1786622664.608:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11718 comm="syz.4.2035" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37cc19e0d9 code=0x7ffc0000 [ 521.893691][T11711] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 521.905530][ T26] audit: type=1326 audit(1786622664.608:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11718 comm="syz.4.2035" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37cc19e0d9 code=0x7ffc0000 [ 521.930023][ T26] audit: type=1326 audit(1786622664.648:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11718 comm="syz.4.2035" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f37cc19e0d9 code=0x7ffc0000 [ 521.954817][ T26] audit: type=1326 audit(1786622664.658:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11718 comm="syz.4.2035" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37cc19e0d9 code=0x7ffc0000 [ 521.979737][ T26] audit: type=1326 audit(1786622664.658:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11718 comm="syz.4.2035" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37cc19e0d9 code=0x7ffc0000 [ 521.991999][T11711] ext4 filesystem being mounted at /167/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 522.016334][T11698] md: personality for level rai is not loaded! [ 522.380746][T11726] loop6: detected capacity change from 0 to 8 [ 522.425906][T11726] SQUASHFS error: zlib decompression failed, data probably corrupt [ 522.434346][T11726] SQUASHFS error: Failed to read block 0x9b: -5 [ 522.440689][T11726] SQUASHFS error: Unable to read metadata cache entry [99] [ 522.448637][T11726] SQUASHFS error: Unable to read inode 0x127 [ 523.624642][ T8751] EXT4-fs (loop7): unmounting filesystem. [ 524.133321][T11742] loop1: detected capacity change from 0 to 256 [ 524.145319][T11742] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 524.285670][T11747] Set syz1 is full, maxelem 1029 reached [ 524.301928][T11746] loop7: detected capacity change from 0 to 2048 [ 524.360308][T11746] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 524.423965][T11746] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 524.541498][T11752] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2047'. [ 524.576620][ T8751] EXT4-fs (loop7): unmounting filesystem. [ 524.587072][T11753] loop4: detected capacity change from 0 to 256 [ 524.921964][T11762] md: could not open device unknown-block(1,0). [ 525.025193][ T26] audit: type=1800 audit(1786622667.778:9): pid=11742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2045" name="file1" dev="loop1" ino=1048616 res=0 errno=0 [ 525.045158][ C1] vkms_vblank_simulate: vblank timer overrun [ 525.095202][T11767] loop7: detected capacity change from 0 to 1024 [ 525.111747][T11762] md: personality for level rai is not loaded! [ 525.126741][T11767] EXT4-fs: inline encryption not supported [ 525.169891][T11767] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 525.232298][T11767] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 525.383460][T11767] device syzkaller0 entered promiscuous mode [ 525.616425][T11781] Set syz1 is full, maxelem 1029 reached [ 525.792793][ T8751] EXT4-fs (loop7): unmounting filesystem. [ 525.962423][T11788] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2060'. [ 526.182325][T11790] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2061'. [ 526.900431][T11792] loop7: detected capacity change from 0 to 256 [ 526.945156][T11800] md: could not open device unknown-block(1,0). [ 527.147256][T11800] md: personality for level rai is not loaded! [ 527.309820][T11809] Set syz1 is full, maxelem 1029 reached [ 527.490913][T11814] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2070'. [ 527.568222][T11815] loop4: detected capacity change from 0 to 8 [ 527.672637][T11815] SQUASHFS error: zlib decompression failed, data probably corrupt [ 527.680813][T11815] SQUASHFS error: Failed to read block 0x9b: -5 [ 527.687199][T11815] SQUASHFS error: Unable to read metadata cache entry [99] [ 527.694453][T11815] SQUASHFS error: Unable to read inode 0x127 [ 528.411177][T11818] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2072'. [ 529.196812][T11829] can0: slcan on ptm0. [ 529.403384][T11831] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2074'. [ 529.915830][T11827] can0 (unregistered): slcan off ptm0. [ 530.313940][T11853] loop4: detected capacity change from 0 to 1024 [ 530.375458][T11853] EXT4-fs: Ignoring removed oldalloc option [ 530.434230][T11853] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 530.481293][ T26] audit: type=1804 audit(1786622673.238:10): pid=11853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2080" name="/newroot/429/file1/bus" dev="loop4" ino=18 res=1 errno=0 [ 530.580891][T11859] EXT4-fs (loop4): shut down requested (2) [ 530.805943][T11863] md: could not open device unknown-block(1,0). [ 530.817037][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 531.570680][T11867] loop1: detected capacity change from 0 to 2048 [ 531.589576][T11863] md: personality for level rai is not loaded! [ 531.660328][T11874] loop6: detected capacity change from 0 to 512 [ 531.722876][T11867] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 531.733498][T11877] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2085'. [ 531.756072][T11874] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 531.792053][T11867] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 531.833671][T11874] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 531.865231][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 531.891465][T11882] loop5: detected capacity change from 0 to 1024 [ 531.898230][T11874] ext4 filesystem being mounted at /214/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 531.997920][T11882] EXT4-fs: inline encryption not supported [ 532.130647][ T7966] EXT4-fs (loop6): unmounting filesystem. [ 532.222313][T11890] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2088'. [ 532.289252][T11882] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 532.440216][T11882] ext4 filesystem being mounted at /273/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 532.928911][T11882] device syzkaller0 entered promiscuous mode [ 533.124108][T11904] loop1: detected capacity change from 0 to 8 [ 533.206794][T11904] SQUASHFS error: zlib decompression failed, data probably corrupt [ 533.214944][T11904] SQUASHFS error: Failed to read block 0x9b: -5 [ 533.221411][T11904] SQUASHFS error: Unable to read metadata cache entry [99] [ 533.228691][T11904] SQUASHFS error: Unable to read inode 0x127 [ 535.062415][ T6853] EXT4-fs (loop5): unmounting filesystem. [ 535.884257][T11933] md: could not open device unknown-block(1,0). [ 535.894366][T11934] 9pnet_fd: Insufficient options for proto=fd [ 536.088732][T11939] loop4: detected capacity change from 0 to 512 [ 536.155168][T11933] md: personality for level rai is not loaded! [ 536.211839][T11939] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 536.255733][T11945] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2100'. [ 536.264882][T11939] ext4 filesystem being mounted at /434/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 536.634308][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 537.148658][T11961] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2103'. [ 537.786589][T11966] loop5: detected capacity change from 0 to 8 [ 537.873804][T11966] SQUASHFS error: zlib decompression failed, data probably corrupt [ 538.031607][T11966] SQUASHFS error: Failed to read block 0x9b: -5 [ 538.081105][T11974] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2111'. [ 538.086625][T11966] SQUASHFS error: Unable to read metadata cache entry [99] [ 538.096387][T11972] 9pnet_fd: Insufficient options for proto=fd [ 538.184712][T11966] SQUASHFS error: Unable to read inode 0x127 [ 538.956063][T11977] md: could not open device unknown-block(1,0). [ 539.051944][T11982] loop4: detected capacity change from 0 to 1024 [ 539.072685][T11982] EXT4-fs: inline encryption not supported [ 539.117014][T11977] md: personality for level rai is not loaded! [ 539.211197][T11982] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 539.236020][T11982] ext4 filesystem being mounted at /438/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 539.402841][T11982] device syzkaller0 entered promiscuous mode [ 539.790738][T11997] md: could not open device unknown-block(1,0). [ 540.002124][T12004] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2118'. [ 540.536605][T11997] md: personality for level rai is not loaded! [ 540.555452][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 541.516446][T12012] 9pnet_fd: Insufficient options for proto=fd [ 541.587340][T12016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2124'. [ 541.603084][T12019] loop7: detected capacity change from 0 to 8 [ 541.693541][T12019] SQUASHFS error: zlib decompression failed, data probably corrupt [ 541.752869][T12019] SQUASHFS error: Failed to read block 0x9b: -5 [ 541.760448][T12019] SQUASHFS error: Unable to read metadata cache entry [99] [ 541.768639][T12019] SQUASHFS error: Unable to read inode 0x127 [ 541.845845][T12027] md: could not open device unknown-block(1,0). [ 542.175729][T12040] binder: 12039:12040 ioctl c0306201 0 returned -14 [ 542.229500][T12027] md: personality for level rai is not loaded! [ 542.389838][T12053] loop1: detected capacity change from 0 to 256 [ 542.397290][T12043] md: could not open device unknown-block(1,0). [ 542.488811][T12059] 9pnet_fd: Insufficient options for proto=fd [ 542.627105][T12042] md: personality for level rai is not loaded! [ 542.882808][T12067] loop1: detected capacity change from 0 to 256 [ 543.268549][T12084] loop6: detected capacity change from 0 to 8 [ 543.290447][T12084] SQUASHFS error: zlib decompression failed, data probably corrupt [ 543.302503][T12084] SQUASHFS error: Failed to read block 0x9b: -5 [ 543.317863][T12084] SQUASHFS error: Unable to read metadata cache entry [99] [ 543.325402][T12084] SQUASHFS error: Unable to read inode 0x127 [ 543.671908][T12092] binder: 12090:12092 ioctl c0306201 0 returned -14 [ 543.723357][T12094] md: could not open device unknown-block(1,0). [ 543.858771][T12098] 9pnet_fd: Insufficient options for proto=fd [ 543.951989][T12094] md: personality for level rai is not loaded! [ 544.040141][T12102] md: could not open device unknown-block(1,0). [ 544.224957][T12102] md: personality for level rai is not loaded! [ 544.626875][T12115] loop6: detected capacity change from 0 to 256 [ 545.256913][T12128] loop6: detected capacity change from 0 to 8 [ 545.431225][T12128] SQUASHFS error: zlib decompression failed, data probably corrupt [ 545.439419][T12128] SQUASHFS error: Failed to read block 0x9b: -5 [ 545.445770][T12128] SQUASHFS error: Unable to read metadata cache entry [99] [ 545.453012][T12128] SQUASHFS error: Unable to read inode 0x127 [ 546.084295][T12132] binder: BINDER_SET_CONTEXT_MGR already set [ 546.129518][T12132] binder: 12130:12132 ioctl 4018620d 200000004a80 returned -16 [ 546.174168][T12132] binder: 12130:12132 ioctl c0306201 0 returned -14 [ 546.229166][T12135] 9pnet_fd: Insufficient options for proto=fd [ 546.580673][T12140] usb usb1: usbfs: process 12140 (syz.4.2165) did not claim interface 0 before use [ 546.661051][T12144] md: could not open device unknown-block(1,0). [ 547.005461][T12144] md: personality for level rai is not loaded! [ 547.077083][T12149] md: could not open device unknown-block(1,0). [ 547.270595][T12148] md: personality for level rai is not loaded! [ 547.835776][T12172] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2175'. [ 548.594224][T12187] md: could not open device unknown-block(1,0). [ 548.743789][T12187] md: personality for level rai is not loaded! [ 549.374412][T12203] loop6: detected capacity change from 0 to 8 [ 549.404294][T12203] SQUASHFS error: zlib decompression failed, data probably corrupt [ 549.412473][T12203] SQUASHFS error: Failed to read block 0x9b: -5 [ 549.418822][T12203] SQUASHFS error: Unable to read metadata cache entry [99] [ 549.426795][T12203] SQUASHFS error: Unable to read inode 0x127 [ 550.314584][T12209] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2189'. [ 552.716366][T12253] loop4: detected capacity change from 0 to 2048 [ 552.776548][T12253] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 552.800636][T12253] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 552.972064][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 553.603604][T12260] loop4: detected capacity change from 0 to 8 [ 553.832405][T12260] SQUASHFS error: zlib decompression failed, data probably corrupt [ 553.840551][T12260] SQUASHFS error: Failed to read block 0x9b: -5 [ 553.846904][T12260] SQUASHFS error: Unable to read metadata cache entry [99] [ 553.854142][T12260] SQUASHFS error: Unable to read inode 0x127 [ 555.058156][T12269] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2208'. [ 555.247768][T12275] binder: BINDER_SET_CONTEXT_MGR already set [ 555.253929][T12275] binder: 12274:12275 ioctl 4018620d 200000004a80 returned -16 [ 555.594808][T12284] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2212'. [ 556.273392][T12286] 9pnet_fd: Insufficient options for proto=fd [ 556.352574][T12288] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2214'. [ 556.828900][ C1] hrtimer: interrupt took 45400 ns [ 557.627531][T12309] loop7: detected capacity change from 0 to 1024 [ 557.650293][T12309] EXT4-fs: inline encryption not supported [ 557.894647][T12309] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 557.895276][T12315] loop4: detected capacity change from 0 to 8 [ 557.927421][T12315] SQUASHFS error: zlib decompression failed, data probably corrupt [ 557.929213][T12309] ext4 filesystem being mounted at /201/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 557.935372][T12315] SQUASHFS error: Failed to read block 0x9b: -5 [ 557.935387][T12315] SQUASHFS error: Unable to read metadata cache entry [99] [ 557.959655][T12315] SQUASHFS error: Unable to read inode 0x127 [ 558.168454][T12309] device syzkaller0 entered promiscuous mode [ 558.335799][T12321] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2225'. [ 558.851966][T12317] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 559.306744][ T8751] EXT4-fs (loop7): unmounting filesystem. [ 559.314633][T12329] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2228'. [ 559.553414][ T22] kernel read not supported for file /video9 (pid: 22 comm: kworker/1:0) [ 560.436220][T12344] loop4: detected capacity change from 0 to 256 [ 560.591432][T12349] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2235'. [ 560.842106][T12362] loop6: detected capacity change from 0 to 256 [ 560.970355][T12363] loop1: detected capacity change from 0 to 8 [ 561.007804][T12363] SQUASHFS error: zlib decompression failed, data probably corrupt [ 561.016563][T12363] SQUASHFS error: Failed to read block 0x9b: -5 [ 561.022852][T12363] SQUASHFS error: Unable to read metadata cache entry [99] [ 561.030228][T12363] SQUASHFS error: Unable to read inode 0x127 [ 561.316998][T12368] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2238'. [ 561.935749][T12370] loop4: detected capacity change from 0 to 1024 [ 561.967512][T12370] EXT4-fs: inline encryption not supported [ 562.002977][T12374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2241'. [ 562.078082][T12370] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 562.110999][T12370] ext4 filesystem being mounted at /470/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 562.155470][ T126] kernel read not supported for file /video9 (pid: 126 comm: kworker/0:2) [ 562.238349][T12370] device syzkaller0 entered promiscuous mode [ 562.709963][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.717151][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.836607][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 562.953965][T12400] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2248'. [ 563.269632][T12406] netlink: 'syz.7.2252': attribute type 1 has an invalid length. [ 563.278130][T12406] netlink: 'syz.7.2252': attribute type 2 has an invalid length. [ 563.635713][T12415] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2255'. [ 563.684314][T12413] loop1: detected capacity change from 0 to 8 [ 563.693451][T12413] SQUASHFS error: zlib decompression failed, data probably corrupt [ 563.701880][T12413] SQUASHFS error: Failed to read block 0x9b: -5 [ 563.708213][T12413] SQUASHFS error: Unable to read metadata cache entry [99] [ 563.716045][T12413] SQUASHFS error: Unable to read inode 0x127 [ 563.826888][T12418] loop4: detected capacity change from 0 to 2048 [ 563.898791][T12418] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 563.940215][T12418] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 563.970651][ T22] kernel read not supported for file /video9 (pid: 22 comm: kworker/1:0) [ 564.004741][T12426] loop6: detected capacity change from 0 to 1024 [ 564.054022][T12426] EXT4-fs: inline encryption not supported [ 564.061120][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 564.446426][T12426] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 564.467529][T12426] ext4 filesystem being mounted at /253/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 564.812853][T12426] device syzkaller0 entered promiscuous mode [ 565.162661][ T7966] EXT4-fs (loop6): unmounting filesystem. [ 565.632818][T12455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2267'. [ 565.800385][T12459] loop4: detected capacity change from 0 to 2048 [ 565.847847][T12462] loop1: detected capacity change from 0 to 512 [ 565.855079][T12462] EXT4-fs: Ignoring removed nobh option [ 565.873932][T12459] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 565.909313][T12462] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 565.932070][T12462] ext4 filesystem being mounted at /423/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 566.131315][ T7314] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 566.150269][ T7314] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 566.168762][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 566.176286][ T7314] EXT4-fs (loop4): This should not happen!! Data will be lost [ 566.176286][ T7314] [ 566.187112][ T7314] EXT4-fs (loop4): Total free blocks count 0 [ 566.193538][ T7314] EXT4-fs (loop4): Free/Dirty block details [ 566.199728][ T7314] EXT4-fs (loop4): free_blocks=66060288 [ 566.205375][ T7314] EXT4-fs (loop4): dirty_blocks=32 [ 566.210945][ T7314] EXT4-fs (loop4): Block reservation details [ 566.217109][ T7314] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 566.224423][ T7314] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 566.572345][T12482] md: could not open device unknown-block(1,0). [ 566.719927][T12482] md: personality for level rai is not loaded! [ 566.750423][T12487] loop4: detected capacity change from 0 to 8 [ 566.761862][T12487] SQUASHFS error: zlib decompression failed, data probably corrupt [ 566.770056][T12487] SQUASHFS error: Failed to read block 0x9b: -5 [ 566.776454][T12487] SQUASHFS error: Unable to read metadata cache entry [99] [ 566.783735][T12487] SQUASHFS error: Unable to read inode 0x127 [ 566.879202][T12489] loop5: detected capacity change from 0 to 1024 [ 566.908596][T12489] EXT4-fs: Ignoring removed nomblk_io_submit option [ 566.938146][T12489] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 567.101655][ T6853] EXT4-fs (loop5): unmounting filesystem. [ 567.554830][T12504] loop6: detected capacity change from 0 to 2048 [ 568.080592][T12504] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 568.302354][T12513] loop4: detected capacity change from 0 to 512 [ 568.318765][T12513] EXT4-fs: Ignoring removed nobh option [ 568.376247][ T9574] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 568.405268][T12513] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 568.436259][T12513] ext4 filesystem being mounted at /479/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 568.469824][ T9574] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 568.482807][ T9574] EXT4-fs (loop6): This should not happen!! Data will be lost [ 568.482807][ T9574] [ 568.492980][ T9574] EXT4-fs (loop6): Total free blocks count 0 [ 568.499423][ T9574] EXT4-fs (loop6): Free/Dirty block details [ 568.505504][ T9574] EXT4-fs (loop6): free_blocks=66060288 [ 568.511824][ T9574] EXT4-fs (loop6): dirty_blocks=32 [ 568.517283][ T9574] EXT4-fs (loop6): Block reservation details [ 568.523272][ T9574] EXT4-fs (loop6): i_reserved_data_blocks=2 [ 568.533709][ T8583] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 568.624839][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 568.688368][T12521] md: could not open device unknown-block(1,0). [ 568.761766][T12526] binder: Bad value for 'stats' [ 568.949833][T12521] md: personality for level rai is not loaded! [ 569.271479][T12533] loop5: detected capacity change from 0 to 1024 [ 569.313085][T12533] EXT4-fs: inline encryption not supported [ 569.373868][T12533] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 569.385921][T12533] ext4 filesystem being mounted at /301/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 569.544564][T12533] device syzkaller0 entered promiscuous mode [ 569.587747][T12539] loop1: detected capacity change from 0 to 1024 [ 569.617229][T12539] EXT4-fs: Ignoring removed nomblk_io_submit option [ 569.672740][T12539] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 569.911008][ T6853] EXT4-fs (loop5): unmounting filesystem. [ 569.964534][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 569.995211][T12546] loop4: detected capacity change from 0 to 2048 [ 570.421956][T12546] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 571.126744][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 571.507307][T12569] md: could not open device unknown-block(1,0). [ 571.704919][ T126] kernel read not supported for file /video9 (pid: 126 comm: kworker/0:2) [ 571.716606][T12569] md: personality for level rai is not loaded! [ 571.984335][T12583] loop5: detected capacity change from 0 to 1024 [ 572.020812][T12583] EXT4-fs: inline encryption not supported [ 572.080670][T12583] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 572.105691][T12583] ext4 filesystem being mounted at /306/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 572.146582][T12583] device syzkaller0 entered promiscuous mode [ 572.619178][ T6853] EXT4-fs (loop5): unmounting filesystem. [ 572.754407][ T26] audit: type=1326 audit(1786622715.508:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12598 comm="syz.6.2316" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f622e79e0d9 code=0x7ffc0000 [ 572.849557][ T26] audit: type=1326 audit(1786622715.508:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12598 comm="syz.6.2316" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f622e79e0d9 code=0x7ffc0000 [ 572.866203][T12604] loop1: detected capacity change from 0 to 2048 [ 572.936295][ T26] audit: type=1326 audit(1786622715.548:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12598 comm="syz.6.2316" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7f622e79e0d9 code=0x7ffc0000 [ 572.985238][T12604] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 573.093962][T12613] 9pnet_fd: Insufficient options for proto=fd [ 573.120591][ T26] audit: type=1326 audit(1786622715.548:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12598 comm="syz.6.2316" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f622e79e0d9 code=0x7ffc0000 [ 573.144581][ C0] vkms_vblank_simulate: vblank timer overrun [ 573.165420][T12611] md: could not open device unknown-block(1,0). [ 573.172099][ T26] audit: type=1326 audit(1786622715.568:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12598 comm="syz.6.2316" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f622e79e0d9 code=0x7ffc0000 [ 573.205638][ T26] audit: type=1326 audit(1786622715.568:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12598 comm="syz.6.2316" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f622e79e0d9 code=0x7ffc0000 [ 573.833059][ T11] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 573.883531][T12611] md: personality for level rai is not loaded! [ 573.951068][ T11] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 574.005982][ T11] EXT4-fs (loop1): This should not happen!! Data will be lost [ 574.005982][ T11] [ 574.016838][ T26] audit: type=1326 audit(1786622715.568:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12598 comm="syz.6.2316" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f622e79e0d9 code=0x7ffc0000 [ 574.063920][ T11] EXT4-fs (loop1): Total free blocks count 0 [ 574.064448][ T26] audit: type=1326 audit(1786622715.568:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12598 comm="syz.6.2316" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f622e79e0d9 code=0x7ffc0000 [ 574.080357][ T11] EXT4-fs (loop1): Free/Dirty block details [ 574.149766][T12626] loop6: detected capacity change from 0 to 1024 [ 574.169092][T12626] EXT4-fs: Ignoring removed bh option [ 574.275142][T12626] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 574.297809][ T11] EXT4-fs (loop1): free_blocks=66060288 [ 574.303509][ T11] EXT4-fs (loop1): dirty_blocks=32 [ 574.336601][ T11] EXT4-fs (loop1): Block reservation details [ 574.342625][ T11] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 574.349440][ T9574] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 574.690579][ T7966] EXT4-fs (loop6): unmounting filesystem. [ 574.828559][T12644] loop9: detected capacity change from 0 to 524287997 [ 574.907432][T12646] loop4: detected capacity change from 0 to 2048 [ 575.231951][T12651] loop6: detected capacity change from 0 to 8 [ 575.242503][T12651] SQUASHFS error: zlib decompression failed, data probably corrupt [ 575.250763][T12651] SQUASHFS error: Failed to read block 0x9b: -5 [ 575.257174][T12651] SQUASHFS error: Unable to read metadata cache entry [99] [ 575.264459][T12651] SQUASHFS error: Unable to read inode 0x127 [ 575.348388][T12646] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 575.813288][T12655] 9pnet_fd: Insufficient options for proto=fd [ 575.884622][ T4330] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 575.991126][ T4330] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 576.120054][ T4330] EXT4-fs (loop4): This should not happen!! Data will be lost [ 576.120054][ T4330] [ 576.185842][ T4330] EXT4-fs (loop4): Total free blocks count 0 [ 576.220586][ T4330] EXT4-fs (loop4): Free/Dirty block details [ 576.252001][T12659] md: could not open device unknown-block(1,0). [ 576.259414][ T4330] EXT4-fs (loop4): free_blocks=66060288 [ 576.265009][ T4330] EXT4-fs (loop4): dirty_blocks=32 [ 576.313482][ T4330] EXT4-fs (loop4): Block reservation details [ 576.351685][ T4330] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 576.381021][ T4330] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 576.468349][ T4262] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 576.696837][T12664] can0: slcan on ptm0. [ 576.708202][T12659] md: personality for level rai is not loaded! [ 577.136765][T12663] can0 (unregistered): slcan off ptm0. [ 577.872135][T12674] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2340'. [ 578.183475][T12683] loop7: detected capacity change from 0 to 1024 [ 578.269517][T12683] EXT4-fs: inline encryption not supported [ 578.344826][T12683] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 578.369227][T12683] ext4 filesystem being mounted at /222/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 578.474667][T12683] device syzkaller0 entered promiscuous mode [ 578.771265][ T8751] EXT4-fs (loop7): unmounting filesystem. [ 578.879413][T12698] loop4: detected capacity change from 0 to 512 [ 579.124699][T12698] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 579.209594][T12698] EXT4-fs error (device loop4): ext4_validate_block_bitmap:420: comm syz.4.2345: bg 0: bad block bitmap checksum [ 579.284688][T12698] Quota error (device loop4): write_blk: dquota write failed [ 579.309351][T12698] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 579.344694][T12698] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.2345: Failed to acquire dquot type 0 [ 579.508218][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 579.523964][T12712] loop6: detected capacity change from 0 to 2048 [ 579.622299][T12715] 9pnet_fd: Insufficient options for proto=fd [ 579.649796][T12712] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 579.919359][T12722] loop4: detected capacity change from 0 to 8 [ 579.938789][T12722] SQUASHFS error: zlib decompression failed, data probably corrupt [ 579.946872][T12722] SQUASHFS error: Failed to read block 0x9b: -5 [ 579.953147][T12722] SQUASHFS error: Unable to read metadata cache entry [99] [ 579.960509][T12722] SQUASHFS error: Unable to read inode 0x127 [ 580.027965][ T4265] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 580.043405][ T4528] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 580.129352][T12724] can0: slcan on ptm0. [ 580.148303][ T4528] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 580.640688][ T4528] EXT4-fs (loop6): This should not happen!! Data will be lost [ 580.640688][ T4528] [ 580.720464][ T4528] EXT4-fs (loop6): Total free blocks count 0 [ 580.765715][ T4528] EXT4-fs (loop6): Free/Dirty block details [ 580.802127][ T4528] EXT4-fs (loop6): free_blocks=66060288 [ 580.846831][ T4528] EXT4-fs (loop6): dirty_blocks=32 [ 580.851999][ T4528] EXT4-fs (loop6): Block reservation details [ 580.930583][ T4528] EXT4-fs (loop6): i_reserved_data_blocks=2 [ 580.970415][ T4528] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 581.286631][T12723] can0 (unregistered): slcan off ptm0. [ 581.798934][T12741] loop4: detected capacity change from 0 to 1024 [ 581.889029][T12741] EXT4-fs: inline encryption not supported [ 582.135933][T12741] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 582.184779][T12741] ext4 filesystem being mounted at /498/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 582.304993][T12741] device syzkaller0 entered promiscuous mode [ 582.455798][T12587] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 582.633410][T12753] loop6: detected capacity change from 0 to 1024 [ 582.664211][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 582.671649][T12753] EXT4-fs: Ignoring removed nomblk_io_submit option [ 582.760577][T12753] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 583.971390][T12771] can0: slcan on ptm0. [ 584.053176][ T7966] EXT4-fs (loop6): unmounting filesystem. [ 584.386265][T12776] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2364'. [ 584.427524][T12770] can0 (unregistered): slcan off ptm0. [ 584.518948][ T4286] Bluetooth: hci5: Unknown advertising packet type: 0x14 [ 584.519020][ T4286] Bluetooth: hci5: Unknown advertising packet type: 0x20 [ 586.270531][T12797] loop6: detected capacity change from 0 to 512 [ 586.311367][T12797] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 586.577613][T12797] EXT4-fs (loop6): 1 truncate cleaned up [ 586.583311][T12797] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 586.588747][T12803] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2370'. [ 586.981916][T12809] loop7: detected capacity change from 0 to 8 [ 587.169566][T12809] SQUASHFS error: zlib decompression failed, data probably corrupt [ 587.177736][T12809] SQUASHFS error: Failed to read block 0x9b: -5 [ 587.184027][T12809] SQUASHFS error: Unable to read metadata cache entry [99] [ 587.191368][T12809] SQUASHFS error: Unable to read inode 0x127 [ 587.691588][ T4266] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 587.702132][ T7966] EXT4-fs (loop6): unmounting filesystem. [ 587.856977][T12820] loop4: detected capacity change from 0 to 1024 [ 587.941663][T12821] can0: slcan on ptm0. [ 588.072553][T12820] EXT4-fs: Ignoring removed nomblk_io_submit option [ 588.185074][T12820] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 588.541529][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 588.878035][T12817] can0 (unregistered): slcan off ptm0. [ 588.995106][T12847] loop4: detected capacity change from 0 to 512 [ 589.032346][T12849] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2382'. [ 589.259795][T12855] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2383'. [ 589.482184][T12847] EXT4-fs (loop4): Test dummy encryption mode enabled [ 589.513359][T12847] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.2381: inode has both inline data and extents flags [ 589.545472][T12847] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.2381: couldn't read orphan inode 15 (err -117) [ 589.566428][T12847] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 589.816100][T12847] fscrypt (loop4): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 589.971724][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 590.174079][T12876] use of bytesused == 0 is deprecated and will be removed in the future, [ 590.235696][T12876] use the actual size instead. [ 590.526597][T12881] loop1: detected capacity change from 0 to 8 [ 590.538846][T12881] SQUASHFS error: zlib decompression failed, data probably corrupt [ 590.547632][T12881] SQUASHFS error: Failed to read block 0x9b: -5 [ 590.553907][T12881] SQUASHFS error: Unable to read metadata cache entry [99] [ 590.561362][T12881] SQUASHFS error: Unable to read inode 0x127 [ 591.761438][T12897] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2391'. [ 591.917088][ T4276] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 591.926925][ T4276] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 591.935045][ T4276] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 591.943889][ T4276] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 591.956847][ T4276] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 591.965175][ T4276] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 592.173364][T12909] loop4: detected capacity change from 0 to 256 [ 592.248069][ T5462] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.419652][T12911] can0: slcan on ptm0. [ 593.027430][T12922] loop7: detected capacity change from 0 to 512 [ 593.093989][T12922] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 593.237013][ T5462] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.260301][T12922] EXT4-fs (loop7): 1 truncate cleaned up [ 593.266079][T12922] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 593.465540][ T5462] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.617747][ T8751] EXT4-fs (loop7): unmounting filesystem. [ 593.800853][ T5462] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.946686][T12910] can0 (unregistered): slcan off ptm0. [ 594.085817][ T4276] Bluetooth: hci1: command 0x0409 tx timeout [ 594.185294][T12944] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2403'. [ 594.274336][T12904] chnl_net:caif_netlink_parms(): no params data found [ 594.703719][T12904] bridge0: port 1(bridge_slave_0) entered blocking state [ 594.751499][T12904] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.858138][T12904] device bridge_slave_0 entered promiscuous mode [ 594.966008][T12904] bridge0: port 2(bridge_slave_1) entered blocking state [ 594.984343][T12904] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.004529][T12904] device bridge_slave_1 entered promiscuous mode [ 595.053984][T12962] md: could not open device unknown-block(1,0). [ 595.159687][T12904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 595.306171][T12962] md: personality for level rai is not loaded! [ 595.318237][T12904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 595.468220][T12904] team0: Port device team_slave_0 added [ 595.560954][T12904] team0: Port device team_slave_1 added [ 596.172041][T12977] loop4: detected capacity change from 0 to 512 [ 596.334697][ T4286] Bluetooth: hci1: command 0x041b tx timeout [ 596.354077][T12977] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 596.417506][T12904] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 596.451531][T12904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 596.477976][T12904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 596.479622][T12977] EXT4-fs (loop4): 1 truncate cleaned up [ 596.491050][T12904] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 596.495056][T12977] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 596.502020][T12904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 596.546889][T12904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 597.232976][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 597.332547][T12989] md: could not open device unknown-block(1,0). [ 597.412081][T12987] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2413'. [ 597.689851][T12989] md: personality for level rai is not loaded! [ 597.716230][T12904] device hsr_slave_0 entered promiscuous mode [ 597.740617][T12904] device hsr_slave_1 entered promiscuous mode [ 597.947652][T13007] loop6: detected capacity change from 0 to 512 [ 597.965098][T13002] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2418'. [ 597.977472][T13007] EXT4-fs (loop6): Test dummy encryption mode enabled [ 598.004985][T13007] EXT4-fs error (device loop6): ext4_orphan_get:1405: inode #15: comm syz.6.2419: inode has both inline data and extents flags [ 598.036035][T13007] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.2419: couldn't read orphan inode 15 (err -117) [ 598.056940][T13007] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 598.386214][ T4276] Bluetooth: hci1: command 0x040f tx timeout [ 598.434153][T13020] md: could not open device unknown-block(1,0). [ 598.594160][T13020] md: personality for level rai is not loaded! [ 598.614783][ T5462] device hsr_slave_0 left promiscuous mode [ 598.629333][ T5462] device hsr_slave_1 left promiscuous mode [ 598.646884][ T5462] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 598.677961][ T5462] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 598.696844][ T5462] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 598.720919][ T5462] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 598.791133][ T5462] device bridge_slave_1 left promiscuous mode [ 598.799474][ T5462] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.815146][ T5462] device bridge_slave_0 left promiscuous mode [ 598.833786][ T7966] EXT4-fs (loop6): unmounting filesystem. [ 598.845951][ T5462] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.961478][T13033] loop7: detected capacity change from 0 to 8 [ 598.976885][T13033] SQUASHFS error: zlib decompression failed, data probably corrupt [ 598.984998][T13033] SQUASHFS error: Failed to read block 0x9b: -5 [ 598.991341][T13033] SQUASHFS error: Unable to read metadata cache entry [99] [ 598.998685][T13033] SQUASHFS error: Unable to read inode 0x127 [ 599.340918][ T5462] device veth1_macvtap left promiscuous mode [ 599.440325][ T5462] device veth0_macvtap left promiscuous mode [ 599.538722][ T5462] device veth1_vlan left promiscuous mode [ 599.629052][ T5462] device veth0_vlan left promiscuous mode [ 600.526879][ T4276] Bluetooth: hci1: command 0x0419 tx timeout [ 600.569290][ T4265] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 601.657560][T13026] slcan: can't register candev [ 601.662793][T13026] Falling back ldisc for ptm0. [ 602.313802][T13048] md: could not open device unknown-block(1,0). [ 602.453187][T13048] md: personality for level rai is not loaded! [ 602.699990][ T5462] team0 (unregistering): Port device team_slave_1 removed [ 602.861659][ T5462] team0 (unregistering): Port device team_slave_0 removed [ 602.971082][ T5462] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 603.057894][T13058] md: could not open device unknown-block(1,0). [ 603.090097][ T5462] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 603.169184][T13058] md: personality for level rai is not loaded! [ 603.979330][ T5462] bond0 (unregistering): Released all slaves [ 604.154635][T13043] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2426'. [ 604.180112][T13063] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2434'. [ 604.330624][T12904] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 604.349531][T12904] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 604.368778][T12904] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 604.387357][T12904] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 604.513806][T12904] 8021q: adding VLAN 0 to HW filter on device bond0 [ 604.625471][ T8583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 604.899598][ T8583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 605.174075][T12904] 8021q: adding VLAN 0 to HW filter on device team0 [ 605.332094][T12129] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 605.362497][T12129] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 605.386455][T12129] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.393597][T12129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 605.424168][T13082] md: could not open device unknown-block(1,0). [ 605.459176][T13079] can0: slcan on ptm0. [ 605.474663][T12129] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 605.503910][T12129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 605.543289][T12129] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 605.586688][T12129] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.593843][T12129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 605.641417][T12129] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 605.709442][T13082] md: personality for level rai is not loaded! [ 605.715703][T12129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 605.716535][T12129] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 605.761109][T12129] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 605.922663][T12904] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 605.964970][T12904] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 605.982800][T12129] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 605.998585][T12129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 606.034474][T12129] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 606.063041][T12129] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 606.081422][T12129] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 606.095513][T12129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 606.134278][T12129] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 606.149939][T12129] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 606.375952][T13076] can0 (unregistered): slcan off ptm0. [ 608.074389][T12129] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 608.094692][T12129] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 608.175471][T12904] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 608.519183][T13135] loop1: detected capacity change from 0 to 8 [ 608.636025][T13135] SQUASHFS error: zlib decompression failed, data probably corrupt [ 608.643996][T13135] SQUASHFS error: Failed to read block 0x9b: -5 [ 608.656400][T13135] SQUASHFS error: Unable to read metadata cache entry [99] [ 608.687540][T13135] SQUASHFS error: Unable to read inode 0x127 [ 609.155440][T13150] md: could not open device unknown-block(1,0). [ 609.335260][T13150] md: personality for level rai is not loaded! [ 609.381315][T13161] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2455'. [ 609.518416][ T5944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 609.541256][ T5944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 609.596812][T12129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 609.626873][T12129] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 609.653398][T12129] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 609.678682][T12129] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 609.710367][T12904] device veth0_vlan entered promiscuous mode [ 609.740082][T12904] device veth1_vlan entered promiscuous mode [ 609.786122][T12129] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 609.790186][T13168] loop6: detected capacity change from 0 to 1024 [ 609.822649][T12129] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 609.827308][T13168] EXT4-fs: inline encryption not supported [ 609.848820][T12129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 609.876718][T12129] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 609.909532][T12904] device veth0_macvtap entered promiscuous mode [ 609.929634][T13168] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 609.959726][T13168] ext4 filesystem being mounted at /304/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 609.977175][T12904] device veth1_macvtap entered promiscuous mode [ 610.153942][T12904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 610.205785][T12904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.223622][T12904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 610.253690][T12904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.294067][T12904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 610.335657][T12904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.345516][T12904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 610.415381][T12904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.446981][T12904] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 610.468733][T12129] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 610.486496][T12129] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 610.496125][T12129] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 610.525155][T12129] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 610.586199][T12904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 610.610464][T12904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.642181][T12904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 610.662997][T12904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.682321][T12904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 610.693255][T12904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.703470][T12904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 610.714771][T12904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.728594][T12904] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 610.749731][T12129] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 610.761311][T12129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 610.782911][T12904] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.802202][T12904] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.824395][T12904] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.850339][T12904] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.875943][ T7966] EXT4-fs (loop6): unmounting filesystem. [ 611.030089][ T5944] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 611.057766][ T5944] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 611.109160][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 611.171017][ T4377] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 611.208104][ T4377] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 611.243747][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 611.265852][T13199] loop6: detected capacity change from 0 to 1024 [ 611.303350][T13199] EXT4-fs: Ignoring removed nomblk_io_submit option [ 611.420248][T13199] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 611.663919][T13215] can0: slcan on ptm0. [ 611.798133][ T7966] EXT4-fs (loop6): unmounting filesystem. [ 612.605875][T13214] can0 (unregistered): slcan off ptm0. [ 615.142427][T13247] md: could not open device unknown-block(1,0). [ 615.191037][T13249] loop6: detected capacity change from 0 to 1024 [ 615.236205][T13249] EXT4-fs: Ignoring removed nomblk_io_submit option [ 615.306783][T13249] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 615.314630][T13247] md: personality for level rai is not loaded! [ 615.493302][ T7966] EXT4-fs (loop6): unmounting filesystem. [ 617.392263][T13294] loop8: detected capacity change from 0 to 8 [ 617.511708][T13298] md: could not open device unknown-block(1,0). [ 617.531881][T13294] SQUASHFS error: Failed to read block 0x4de: -5 [ 617.577866][T13294] SQUASHFS error: Failed to read block 0x4de: -5 [ 617.637060][ T26] audit: type=1800 audit(1786622760.388:19): pid=13294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2485" name="file1" dev="loop8" ino=5 res=0 errno=0 [ 617.722417][T13298] md: personality for level rai is not loaded! [ 619.853244][T13347] md: could not open device unknown-block(1,0). [ 619.911763][T13353] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2502'. [ 620.005030][T13347] md: personality for level rai is not loaded! [ 620.145833][ T4276] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 620.707938][T13375] random: crng reseeded on system resumption [ 621.722666][T13386] loop1: detected capacity change from 0 to 1024 [ 621.730746][T13386] EXT4-fs: inline encryption not supported [ 621.807200][T13386] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 621.866574][T13386] ext4 filesystem being mounted at /461/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 622.017921][T13398] md: could not open device unknown-block(1,0). [ 622.271904][T13398] md: personality for level rai is not loaded! [ 622.410901][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 623.002633][T13430] 8021q: VLANs not supported on gre0 [ 623.495236][ T4276] Bluetooth: hci5: Malformed LE Event: 0x02 [ 623.640838][T13444] loop1: detected capacity change from 0 to 1024 [ 623.694648][T13444] EXT4-fs: inline encryption not supported [ 623.705525][T13449] random: crng reseeded on system resumption [ 623.727556][T13447] md: could not open device unknown-block(1,0). [ 623.860264][T13444] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 623.872278][T13444] ext4 filesystem being mounted at /463/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 623.941337][T13447] md: personality for level rai is not loaded! [ 624.071313][T13462] md: could not open device unknown-block(1,0). [ 624.161331][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.167994][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.402749][T13462] md: personality for level rai is not loaded! [ 624.630786][T13454] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 625.080486][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 625.432558][T13501] loop8: detected capacity change from 0 to 512 [ 625.472379][T13501] EXT4-fs error (device loop8): ext4_orphan_get:1405: inode #15: comm syz.8.2543: iget: bad i_size value: 38620345925642 [ 625.504450][T13501] EXT4-fs error (device loop8): ext4_orphan_get:1410: comm syz.8.2543: couldn't read orphan inode 15 (err -117) [ 625.526170][T13501] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 625.764951][T13506] md: could not open device unknown-block(1,0). [ 626.286640][T13506] md: personality for level rai is not loaded! [ 626.352821][T12904] EXT4-fs (loop8): unmounting filesystem. [ 626.441585][T13517] md: could not open device unknown-block(1,0). [ 627.193123][T13517] md: personality for level rai is not loaded! [ 627.551855][T13534] loop8: detected capacity change from 0 to 1024 [ 627.608797][T13534] EXT4-fs: inline encryption not supported [ 627.746449][T13534] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 627.754996][T13534] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 628.786555][T12904] EXT4-fs (loop8): unmounting filesystem. [ 629.485489][T13576] loop6: detected capacity change from 0 to 1024 [ 629.506289][T13576] EXT4-fs: Ignoring removed nomblk_io_submit option [ 630.178223][T13576] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 630.936040][T13589] md: could not open device unknown-block(1,0). [ 631.168316][ T7966] EXT4-fs (loop6): unmounting filesystem. [ 631.192847][T13598] loop4: detected capacity change from 0 to 1024 [ 631.267124][T13598] EXT4-fs: inline encryption not supported [ 631.280118][T13594] md: personality for level rai is not loaded! [ 631.524908][T13598] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 631.535665][T13598] ext4 filesystem being mounted at /542/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 631.874828][T13618] loop7: detected capacity change from 0 to 8 [ 631.923685][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 631.926746][T13618] SQUASHFS error: Failed to read block 0x4de: -5 [ 631.969064][T13618] SQUASHFS error: Failed to read block 0x4de: -5 [ 631.994475][ T26] audit: type=1800 audit(1786622774.748:20): pid=13618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2571" name="file1" dev="loop7" ino=5 res=0 errno=0 [ 632.087450][T13621] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2572'. [ 632.563089][T13631] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2576'. [ 632.751471][T13637] loop4: detected capacity change from 0 to 1024 [ 632.805327][T13637] EXT4-fs: Ignoring removed nomblk_io_submit option [ 632.884907][T13637] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 633.133017][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 633.398302][T13653] loop6: detected capacity change from 0 to 1024 [ 633.412169][T13657] md: could not open device unknown-block(1,0). [ 633.419599][T13653] EXT4-fs: inline encryption not supported [ 633.516851][T13653] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 633.558596][T13653] ext4 filesystem being mounted at /340/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 633.702491][T13657] md: personality for level rai is not loaded! [ 633.903108][ T7966] EXT4-fs (loop6): unmounting filesystem. [ 634.085749][T13677] loop4: detected capacity change from 0 to 8 [ 634.155018][T13675] SQUASHFS error: Failed to read block 0x4de: -5 [ 634.221489][T13675] SQUASHFS error: Failed to read block 0x4de: -5 [ 634.266482][ T26] audit: type=1800 audit(1786622777.018:21): pid=13675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2588" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 635.283444][T13693] loop1: detected capacity change from 0 to 1024 [ 635.306628][T13693] EXT4-fs: Ignoring removed nomblk_io_submit option [ 635.435107][T13693] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 635.839373][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 635.853542][T13708] md: could not open device unknown-block(1,0). [ 635.881587][T13710] loop4: detected capacity change from 0 to 1024 [ 635.913069][T13710] EXT4-fs: inline encryption not supported [ 635.960492][T13710] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 635.980490][T13710] ext4 filesystem being mounted at /551/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 636.004316][T13708] md: personality for level rai is not loaded! [ 636.210289][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 636.411489][T13721] loop6: detected capacity change from 0 to 256 [ 636.980386][T13735] loop1: detected capacity change from 0 to 8 [ 637.061803][T13735] SQUASHFS error: Failed to read block 0x4de: -5 [ 637.087408][T13735] SQUASHFS error: Failed to read block 0x4de: -5 [ 637.101463][ T26] audit: type=1800 audit(1786622779.858:22): pid=13735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2603" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 637.253288][T13738] md: could not open device unknown-block(1,0). [ 637.514733][T13745] loop1: detected capacity change from 0 to 1024 [ 637.573245][T13745] EXT4-fs: Ignoring removed nomblk_io_submit option [ 637.675022][T13738] md: personality for level rai is not loaded! [ 637.713726][T13745] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 637.839315][ T3600] kernel write not supported for file /input/mice (pid: 3600 comm: kworker/0:3) [ 637.938890][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 638.041201][T13759] loop6: detected capacity change from 0 to 1024 [ 638.059512][T13759] EXT4-fs: inline encryption not supported [ 638.236871][T13759] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 638.306790][T13759] ext4 filesystem being mounted at /348/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 638.633562][ T7966] EXT4-fs (loop6): unmounting filesystem. [ 638.812981][T13779] loop6: detected capacity change from 0 to 8 [ 638.836229][T13779] SQUASHFS error: Failed to read block 0x4de: -5 [ 638.842973][T13779] SQUASHFS error: Failed to read block 0x4de: -5 [ 638.849834][ T26] audit: type=1800 audit(1786622781.608:23): pid=13779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2615" name="file1" dev="loop6" ino=5 res=0 errno=0 [ 639.131860][T13792] md: could not open device unknown-block(1,0). [ 639.469000][T13792] md: personality for level rai is not loaded! [ 639.541742][T13801] loop1: detected capacity change from 0 to 1024 [ 639.599683][ T4359] kernel write not supported for file /vcs (pid: 4359 comm: kworker/1:5) [ 639.609418][T13801] EXT4-fs: Ignoring removed nomblk_io_submit option [ 639.676055][T13801] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 639.868228][T13810] loop4: detected capacity change from 0 to 1024 [ 639.875424][T13810] EXT4-fs: inline encryption not supported [ 640.009819][T13810] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 640.010522][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 640.063831][T13810] ext4 filesystem being mounted at /556/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 641.241107][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 641.361603][T13833] loop6: detected capacity change from 0 to 1024 [ 641.394367][T13835] loop1: detected capacity change from 0 to 8 [ 641.420169][T13833] EXT4-fs: inline encryption not supported [ 641.501109][T13835] SQUASHFS error: Failed to read block 0x4de: -5 [ 641.531964][T13835] SQUASHFS error: Failed to read block 0x4de: -5 [ 641.561804][T13833] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 641.573271][ T26] audit: type=1800 audit(1786622784.338:24): pid=13835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2631" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 641.581033][T13833] ext4 filesystem being mounted at /352/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 641.979754][T13847] loop1: detected capacity change from 0 to 8 [ 642.018040][ T7966] EXT4-fs (loop6): unmounting filesystem. [ 642.040899][T13847] SQUASHFS error: zstd decompression failed, data probably corrupt [ 642.414449][T13847] SQUASHFS error: Failed to read block 0x4ec: -5 [ 642.459472][T13847] SQUASHFS error: Unable to read metadata cache entry [4ea] [ 642.474304][T13847] SQUASHFS error: Unable to read inode 0x2011f [ 642.597899][T13854] md: could not open device unknown-block(1,0). [ 642.750948][T13854] md: personality for level rai is not loaded! [ 642.782502][T13863] loop6: detected capacity change from 0 to 1024 [ 642.794661][T13863] EXT4-fs: Ignoring removed nomblk_io_submit option [ 642.875164][T13863] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 643.856978][ T7966] EXT4-fs (loop6): unmounting filesystem. [ 644.109181][T13894] loop7: detected capacity change from 0 to 8 [ 644.204900][T13892] SQUASHFS error: Failed to read block 0x4de: -5 [ 644.208734][T13897] loop6: detected capacity change from 0 to 1024 [ 644.232071][T13892] SQUASHFS error: Failed to read block 0x4de: -5 [ 644.246728][T13897] EXT4-fs: inline encryption not supported [ 644.283173][ T26] audit: type=1800 audit(1786622787.038:25): pid=13892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2647" name="file1" dev="loop7" ino=5 res=0 errno=0 [ 644.346365][T13897] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 644.377084][T13897] ext4 filesystem being mounted at /355/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 644.690845][ T7966] EXT4-fs (loop6): unmounting filesystem. [ 644.994391][T13921] loop7: detected capacity change from 0 to 1024 [ 645.030062][T13921] EXT4-fs: Ignoring removed nomblk_io_submit option [ 645.160748][T13921] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 645.374304][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802ed41800: rx timeout, send abort [ 645.479485][ T8751] EXT4-fs (loop7): unmounting filesystem. [ 645.874351][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801964fc00: rx timeout, send abort [ 645.884369][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802ed41800: abort rx timeout. Force session deactivation [ 646.085782][T13944] loop1: detected capacity change from 0 to 8 [ 646.382639][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801964fc00: abort rx timeout. Force session deactivation [ 646.406572][T13940] SQUASHFS error: Failed to read block 0x4de: -5 [ 646.528137][T13940] SQUASHFS error: Failed to read block 0x4de: -5 [ 646.574452][ T26] audit: type=1800 audit(1786622789.328:26): pid=13940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2660" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 648.598377][T13983] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2672'. [ 650.505923][T14016] loop1: detected capacity change from 0 to 1024 [ 650.541224][T14016] EXT4-fs: Ignoring removed nomblk_io_submit option [ 650.634947][T14016] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 651.597884][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 651.842727][T14045] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2688'. [ 652.151626][T14048] loop1: detected capacity change from 0 to 256 [ 652.764390][T14050] loop7: detected capacity change from 0 to 8 [ 652.821116][T14050] SQUASHFS error: Failed to read block 0x4de: -5 [ 652.875446][T14050] SQUASHFS error: Failed to read block 0x4de: -5 [ 653.025671][ T26] audit: type=1800 audit(1786622795.758:27): pid=14050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2689" name="file1" dev="loop7" ino=5 res=0 errno=0 [ 654.767742][T14079] loop4: detected capacity change from 0 to 1024 [ 654.876976][T14079] EXT4-fs: Ignoring removed nomblk_io_submit option [ 654.976640][T14079] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 655.026734][T14085] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2699'. [ 655.307700][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 655.423952][T14099] loop4: detected capacity change from 0 to 8 [ 655.573344][T14099] SQUASHFS error: Failed to read block 0x4de: -5 [ 655.753690][T14099] SQUASHFS error: Failed to read block 0x4de: -5 [ 655.788978][ T26] audit: type=1800 audit(1786622798.551:28): pid=14099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2702" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 658.113973][T14142] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2713'. [ 658.126346][T14140] loop4: detected capacity change from 0 to 1024 [ 658.167745][T14140] EXT4-fs: Ignoring removed nomblk_io_submit option [ 658.296802][T14140] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 658.822546][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 658.931928][T14164] loop8: detected capacity change from 0 to 256 [ 662.235999][T14204] loop4: detected capacity change from 0 to 1024 [ 662.350459][T14204] EXT4-fs: Ignoring removed nomblk_io_submit option [ 662.560179][T14204] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 663.458174][T14217] loop7: detected capacity change from 0 to 256 [ 663.570828][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 664.212121][T14239] loop4: detected capacity change from 0 to 8 [ 664.257181][T14239] SQUASHFS error: zlib decompression failed, data probably corrupt [ 664.265143][T14239] SQUASHFS error: Failed to read block 0x9b: -5 [ 664.388472][T14239] SQUASHFS error: Unable to read metadata cache entry [99] [ 664.431469][T14239] SQUASHFS error: Unable to read inode 0x127 [ 665.684164][T14254] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 666.059055][T14262] block nbd6: NBD_DISCONNECT [ 666.978233][T14271] loop1: detected capacity change from 0 to 8 [ 667.031454][T14271] SQUASHFS error: Failed to read block 0x4de: -5 [ 667.068302][T14271] SQUASHFS error: Failed to read block 0x4de: -5 [ 667.074861][ T26] audit: type=1800 audit(1786622809.831:29): pid=14271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2743" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 667.158875][T14273] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2744'. [ 667.341722][T14277] loop1: detected capacity change from 0 to 1024 [ 667.377317][T14277] EXT4-fs: Ignoring removed nomblk_io_submit option [ 667.474762][T14277] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 667.906789][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 668.129994][T14295] loop1: detected capacity change from 0 to 256 [ 669.654126][T14312] loop6: detected capacity change from 0 to 256 [ 672.212738][T14337] loop6: detected capacity change from 0 to 8 [ 672.314708][T14337] SQUASHFS error: Failed to read block 0x4de: -5 [ 672.394416][T14337] SQUASHFS error: Failed to read block 0x4de: -5 [ 672.480732][ T26] audit: type=1800 audit(1786622815.241:30): pid=14337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2756" name="file1" dev="loop6" ino=5 res=0 errno=0 [ 672.603789][T14346] loop8: detected capacity change from 0 to 1024 [ 672.661807][T14346] EXT4-fs: Ignoring removed nomblk_io_submit option [ 672.759003][T14346] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 672.836133][T14352] loop6: detected capacity change from 0 to 256 [ 673.123481][T12904] EXT4-fs (loop8): unmounting filesystem. [ 674.574495][T14395] loop7: detected capacity change from 0 to 8 [ 674.689807][T14390] SQUASHFS error: Failed to read block 0x4de: -5 [ 674.736360][T14390] SQUASHFS error: Failed to read block 0x4de: -5 [ 674.765638][ T26] audit: type=1800 audit(1786622817.521:31): pid=14390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2770" name="file1" dev="loop7" ino=5 res=0 errno=0 [ 674.875071][T14400] loop6: detected capacity change from 0 to 1024 [ 674.894275][T14400] EXT4-fs: Ignoring removed nomblk_io_submit option [ 674.981980][T14400] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 675.023800][T14400] overlayfs: failed to resolve './bus': -2 [ 675.148774][ T7966] EXT4-fs (loop6): unmounting filesystem. [ 675.462657][T14408] loop6: detected capacity change from 0 to 256 [ 677.916268][T14442] loop6: detected capacity change from 0 to 1024 [ 677.933918][T14442] EXT4-fs: Ignoring removed nomblk_io_submit option [ 677.982434][T14442] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 678.064298][T14442] overlayfs: failed to resolve './bus': -2 [ 678.090575][T14451] loop7: detected capacity change from 0 to 256 [ 678.348870][ T7966] EXT4-fs (loop6): unmounting filesystem. [ 679.064604][T14467] loop6: detected capacity change from 0 to 4096 [ 679.419840][T14467] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 679.903553][T14477] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2794'. [ 679.973953][ T7966] EXT4-fs (loop6): unmounting filesystem. [ 680.297049][T14487] loop6: detected capacity change from 0 to 1024 [ 680.327016][T14487] EXT4-fs: Ignoring removed nomblk_io_submit option [ 680.393535][T14487] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 680.430766][T14490] loop7: detected capacity change from 0 to 256 [ 680.431064][T14487] overlayfs: failed to resolve './bus': -2 [ 681.102886][ T7966] EXT4-fs (loop6): unmounting filesystem. [ 682.512232][T14526] loop1: detected capacity change from 0 to 256 [ 683.807528][T14567] md: could not open device unknown-block(1,0). [ 684.003897][T14567] md: personality for level rai is not loaded! [ 685.588321][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.594651][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.691986][T14587] loop4: detected capacity change from 0 to 256 [ 686.242626][T14603] loop1: detected capacity change from 0 to 1024 [ 686.273975][T14602] md: could not open device unknown-block(1,0). [ 686.326452][T14603] EXT4-fs: inline encryption not supported [ 686.386000][T14603] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 686.409229][T14602] md: personality for level rai is not loaded! [ 686.449298][T14603] ext4 filesystem being mounted at /529/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 686.896944][T14619] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2833'. [ 686.982187][T14619] device bond1 entered promiscuous mode [ 686.999083][T14619] 8021q: adding VLAN 0 to HW filter on device bond1 [ 687.037968][T14621] device erspan1 entered promiscuous mode [ 687.044293][T14621] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 687.085774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 687.335272][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 689.029586][T14644] loop6: detected capacity change from 0 to 256 [ 689.557890][T14655] md: could not open device unknown-block(1,0). [ 689.746437][T14655] md: personality for level rai is not loaded! [ 689.880880][T14662] loop8: detected capacity change from 0 to 8 [ 689.901053][T14662] SQUASHFS error: zlib decompression failed, data probably corrupt [ 689.910088][T14662] SQUASHFS error: Failed to read block 0x9b: -5 [ 689.916488][T14662] SQUASHFS error: Unable to read metadata cache entry [99] [ 689.923695][T14662] SQUASHFS error: Unable to read inode 0x127 [ 691.113975][T14672] loop4: detected capacity change from 0 to 256 [ 692.383894][T14686] loop1: detected capacity change from 0 to 1024 [ 692.525096][T14686] EXT4-fs: Ignoring removed nomblk_io_submit option [ 692.917403][T14686] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 692.950853][T14690] loop4: detected capacity change from 0 to 256 [ 693.038651][T14686] overlayfs: failed to resolve './bus': -2 [ 693.339305][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 693.806811][T14710] loop1: detected capacity change from 0 to 512 [ 693.888181][T14710] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 695.504127][T14734] loop1: detected capacity change from 0 to 1024 [ 695.536857][T14734] EXT4-fs: Ignoring removed nomblk_io_submit option [ 695.549802][T14739] loop6: detected capacity change from 0 to 256 [ 695.839819][T14734] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 695.912653][T14734] overlayfs: failed to resolve './bus': -2 [ 696.373325][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 698.660803][T14780] loop4: detected capacity change from 0 to 256 [ 698.980406][T14792] loop8: detected capacity change from 0 to 256 [ 699.052111][T14795] loop7: detected capacity change from 0 to 1024 [ 699.068693][T14795] EXT4-fs: Ignoring removed nomblk_io_submit option [ 699.352392][T14795] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 699.413756][T14795] overlayfs: failed to resolve './bus': -2 [ 699.562091][ T8751] EXT4-fs (loop7): unmounting filesystem. [ 701.539276][T14780] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 701.642550][T14836] loop1: detected capacity change from 0 to 8 [ 701.870768][T14836] SQUASHFS error: zlib decompression failed, data probably corrupt [ 702.023745][T14836] SQUASHFS error: Failed to read block 0x9b: -5 [ 702.138982][T14843] loop8: detected capacity change from 0 to 1024 [ 702.172225][T14836] SQUASHFS error: Unable to read metadata cache entry [99] [ 702.239010][T14843] EXT4-fs: Ignoring removed nomblk_io_submit option [ 702.354164][T14836] SQUASHFS error: Unable to read inode 0x127 [ 702.372602][T14843] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 703.399235][T12904] EXT4-fs (loop8): unmounting filesystem. [ 703.908929][T14865] loop8: detected capacity change from 0 to 256 [ 704.457033][T14871] md: could not open device unknown-block(1,0). [ 704.612413][T14877] loop4: detected capacity change from 0 to 256 [ 704.683241][T14871] md: personality for level rai is not loaded! [ 705.392744][T14891] loop8: detected capacity change from 0 to 1024 [ 705.426228][T14891] EXT4-fs: Ignoring removed nomblk_io_submit option [ 705.527651][T14891] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 705.743000][T12904] EXT4-fs (loop8): unmounting filesystem. [ 707.561102][T14877] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 707.740253][T14916] md: could not open device unknown-block(1,0). [ 707.767956][T14918] loop8: detected capacity change from 0 to 256 [ 708.559520][T14916] md: personality for level rai is not loaded! [ 708.601523][T14925] loop4: detected capacity change from 0 to 1024 [ 708.623835][T14925] EXT4-fs: Ignoring removed nomblk_io_submit option [ 708.790711][T14925] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 708.854927][T14933] loop7: detected capacity change from 0 to 256 [ 709.225676][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 710.634057][T14951] loop6: detected capacity change from 0 to 256 [ 711.964264][T14975] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2934'. [ 711.979608][T14974] md: could not open device unknown-block(1,0). [ 712.074939][T14974] md: personality for level rai is not loaded! [ 712.780439][T14996] loop4: detected capacity change from 0 to 1024 [ 712.796656][T14996] EXT4-fs: Ignoring removed nomblk_io_submit option [ 713.143920][T15000] loop7: detected capacity change from 0 to 256 [ 713.214474][T14996] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 714.100089][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 714.203563][T15022] md: could not open device unknown-block(1,0). [ 714.914950][T15022] md: personality for level rai is not loaded! [ 715.361508][T15047] loop6: detected capacity change from 0 to 256 [ 716.004926][ T4286] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 716.015810][ T4286] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 716.032469][ T4286] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 716.040243][ T4286] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 716.048670][ T4286] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 716.060858][ T4286] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 716.120208][T15058] loop1: detected capacity change from 0 to 256 [ 716.326549][T15063] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2961'. [ 716.464609][T15055] chnl_net:caif_netlink_parms(): no params data found [ 716.761665][T15055] bridge0: port 1(bridge_slave_0) entered blocking state [ 716.768987][T15055] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.782453][T15055] device bridge_slave_0 entered promiscuous mode [ 716.791723][T15055] bridge0: port 2(bridge_slave_1) entered blocking state [ 716.799070][T15055] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.807726][T15055] device bridge_slave_1 entered promiscuous mode [ 716.833843][T15055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 716.845593][T15055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 716.887349][T15055] team0: Port device team_slave_0 added [ 716.900677][T15055] team0: Port device team_slave_1 added [ 716.931419][T15055] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 716.944796][T15055] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 717.064929][T15055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 717.077542][T15055] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 717.084510][T15055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 717.115139][T15055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 717.967378][T15055] device hsr_slave_0 entered promiscuous mode [ 717.975217][T15055] device hsr_slave_1 entered promiscuous mode [ 718.000698][T15055] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 718.043382][T15055] Cannot create hsr debugfs directory [ 718.092867][T15094] loop6: detected capacity change from 0 to 256 [ 718.145771][ T4286] Bluetooth: hci2: command 0x0409 tx timeout [ 718.244435][T15096] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2971'. [ 718.267883][T15100] binder: 15099:15100 unknown command 1074553619 [ 718.274325][T15100] binder: 15099:15100 ioctl c0306201 200000000900 returned -22 [ 718.385730][ T4286] Bluetooth: hci1: command 0x0406 tx timeout [ 718.689700][T15108] loop6: detected capacity change from 0 to 1024 [ 718.731526][T15108] EXT4-fs: Ignoring removed nomblk_io_submit option [ 718.833502][T15108] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 719.671645][T15108] overlayfs: missing 'lowerdir' [ 719.822541][T15055] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.941794][ T7966] EXT4-fs (loop6): unmounting filesystem. [ 720.071847][T15055] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.143237][T15055] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.148836][T15130] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2982'. [ 720.225628][ T4286] Bluetooth: hci2: command 0x041b tx timeout [ 720.331672][T15132] loop8: detected capacity change from 0 to 256 [ 720.398004][T15055] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.167848][T15055] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 721.214048][T15055] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 721.398219][T15055] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 721.627093][T15055] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 722.305601][ T4276] Bluetooth: hci2: command 0x040f tx timeout [ 722.336785][T15055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 722.354659][ T9574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 722.380659][ T9574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 722.394005][T15158] loop8: detected capacity change from 0 to 1024 [ 722.410531][T15158] EXT4-fs: Ignoring removed nomblk_io_submit option [ 722.421076][T15055] 8021q: adding VLAN 0 to HW filter on device team0 [ 722.434430][ T9587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 722.456960][ T9587] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 722.465599][ T9587] bridge0: port 1(bridge_slave_0) entered blocking state [ 722.472871][ T9587] bridge0: port 1(bridge_slave_0) entered forwarding state [ 722.492229][T15158] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 722.562515][ T9587] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 722.595891][ T9587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 722.650204][T15162] overlayfs: missing 'lowerdir' [ 722.653042][ T9587] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 722.689261][ T9587] bridge0: port 2(bridge_slave_1) entered blocking state [ 722.696473][ T9587] bridge0: port 2(bridge_slave_1) entered forwarding state [ 722.733772][ T9587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 722.751727][ T9587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 722.761766][T12904] EXT4-fs (loop8): unmounting filesystem. [ 722.780403][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 722.818424][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 722.851809][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 722.911890][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 722.937854][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 722.957053][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 722.976688][T15170] loop1: detected capacity change from 0 to 256 [ 722.991145][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 723.022987][T15055] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 723.045606][T15055] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 723.056196][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 723.101698][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 724.408416][T15200] loop1: detected capacity change from 0 to 1024 [ 724.414905][T15198] md: could not open device unknown-block(1,0). [ 724.441520][T15200] EXT4-fs: Ignoring removed nomblk_io_submit option [ 724.442048][ T4276] Bluetooth: hci2: command 0x0419 tx timeout [ 724.528142][T15198] md: personality for level rai is not loaded! [ 724.554735][T15200] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 724.610562][T15200] overlayfs: missing 'lowerdir' [ 724.693280][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 724.804634][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 724.939704][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 724.982714][T15055] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 725.003461][T15215] device syzkaller1 entered promiscuous mode [ 725.660994][T15223] loop8: detected capacity change from 0 to 256 [ 726.948691][ T9587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 727.042372][ T9587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 727.181358][ T9587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 727.192230][T15253] md: could not open device unknown-block(1,0). [ 727.200221][T15248] loop1: detected capacity change from 0 to 1024 [ 727.206733][ T9587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 727.209384][T15055] device veth0_vlan entered promiscuous mode [ 727.295738][T15254] file system registered [ 727.372164][T15248] EXT4-fs: Ignoring removed nomblk_io_submit option [ 727.440015][ T9587] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 727.596750][T15248] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 727.632306][ T9587] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 727.807008][T15055] device veth1_vlan entered promiscuous mode [ 727.819012][T15248] overlayfs: missing 'lowerdir' [ 727.967754][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 727.979347][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 728.009684][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 728.019149][T15253] md: personality for level rai is not loaded! [ 728.080089][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 728.087914][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 728.130958][T15055] device veth0_macvtap entered promiscuous mode [ 728.183026][T15055] device veth1_macvtap entered promiscuous mode [ 728.252438][T15055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 728.272459][T15055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 728.283996][T15055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 728.298730][T15055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 728.308709][T15055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 728.319586][T15055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 728.329777][T15055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 728.340450][T15055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 728.350621][T15055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 728.361484][T15055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 728.383840][T15055] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 728.408897][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 728.449575][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 728.493754][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 728.505696][T15055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 728.524834][T15055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 728.540481][T15055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 728.553115][T15055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 728.564646][T15055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 728.650317][T15055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 728.664478][T15223] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 728.776955][T15055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 728.947672][T15055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 728.961448][T15055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 728.989873][T15055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.019712][T15055] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 729.069905][ T9587] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 729.084702][ T9587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 729.260094][T15055] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.269450][T15055] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.278517][T15055] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.287527][T15055] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.531804][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 729.557068][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 729.594077][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 729.633193][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 730.570888][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 730.619680][ T4743] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 730.765811][T15290] md: could not open device unknown-block(1,0). [ 731.167292][T15297] overlayfs: failed to resolve './file0': -2 [ 731.519497][T15290] md: personality for level rai is not loaded! [ 731.769017][T15305] loop4: detected capacity change from 0 to 256 [ 731.784950][T15311] loop7: detected capacity change from 0 to 256 [ 732.029909][T15315] loop1: detected capacity change from 0 to 4096 [ 732.100151][T15315] EXT4-fs (loop1): Test dummy encryption mode enabled [ 732.166027][T15315] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 732.834248][T15323] overlayfs: statfs failed on './file0' [ 732.889640][T15315] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 733.483192][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 733.541112][T15339] device syzkaller1 entered promiscuous mode [ 733.864322][T15350] md: could not open device unknown-block(1,0). [ 734.038113][T15350] md: personality for level rai is not loaded! [ 734.725981][T15305] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 734.864878][T15360] loop1: detected capacity change from 0 to 256 [ 736.945339][T15395] md: could not open device unknown-block(1,0). [ 737.019571][T15397] loop6: detected capacity change from 0 to 256 [ 737.181683][T15395] md: personality for level rai is not loaded! [ 737.185348][T15404] loop8: detected capacity change from 0 to 256 [ 737.394384][T15410] loop4: detected capacity change from 0 to 1024 [ 737.410376][T15410] EXT4-fs: Ignoring removed nomblk_io_submit option [ 738.216156][T15410] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 738.618439][T15410] overlayfs: missing 'workdir' [ 738.915471][T15055] EXT4-fs (loop4): unmounting filesystem. [ 739.257517][T15441] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3072'. [ 739.966015][T15445] loop4: detected capacity change from 0 to 256 [ 740.002945][T15397] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 740.218049][T15449] md: could not open device unknown-block(1,0). [ 740.637880][T15449] md: personality for level rai is not loaded! [ 743.039435][T15493] loop4: detected capacity change from 0 to 256 [ 743.618112][T15497] loop6: detected capacity change from 0 to 256 [ 744.290510][T15506] md: could not open device unknown-block(1,0). [ 745.634625][T15506] md: personality for level rai is not loaded! [ 747.032676][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.040536][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.058563][T15546] loop6: detected capacity change from 0 to 256 [ 747.739815][T15565] loop8: detected capacity change from 0 to 8 [ 747.772375][T15565] SQUASHFS error: zlib decompression failed, data probably corrupt [ 747.780566][T15565] SQUASHFS error: Failed to read block 0x9b: -5 [ 747.786987][T15565] SQUASHFS error: Unable to read metadata cache entry [99] [ 747.794287][T15565] SQUASHFS error: Unable to read inode 0x127 [ 748.667682][ T4266] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 749.284862][T15570] md: could not open device unknown-block(1,0). [ 749.558491][T15575] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3111'. [ 749.582675][T15570] md: personality for level rai is not loaded! [ 750.044617][T15546] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 751.044737][T15589] md: could not open device unknown-block(1,0). [ 751.395004][T15603] loop1: detected capacity change from 0 to 256 [ 751.557868][T15589] md: personality for level rai is not loaded! [ 752.725662][ T9] tipc: Left network mode [ 752.734621][T15618] device syzkaller0 entered promiscuous mode [ 752.912696][T15624] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3126'. [ 753.229200][T15632] loop8: detected capacity change from 0 to 256 [ 754.168702][T15643] md: could not open device unknown-block(1,0). [ 754.405412][T15643] md: personality for level rai is not loaded! [ 756.392494][T15676] loop4: detected capacity change from 0 to 256 [ 756.513246][T15681] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3144'. [ 756.770275][T15688] md: could not open device unknown-block(1,0). [ 757.022864][T15695] loop7: detected capacity change from 0 to 1024 [ 757.030498][T15688] md: personality for level ra is not loaded! [ 757.122089][T15695] EXT4-fs: inline encryption not supported [ 757.138871][T15695] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 757.235844][T15695] ext4 filesystem being mounted at /403/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 757.504122][T15710] mmap: syz.8.3154 (15710) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 757.561649][T15710] ------------[ cut here ]------------ [ 757.561853][T15710] WARNING: CPU: 1 PID: 15710 at include/linux/fs.h:503 hugetlb_split+0x234/0x2a0 [ 757.562041][T15710] Modules linked in: [ 757.562062][T15710] CPU: 1 PID: 15710 Comm: syz.8.3154 Not tainted syzkaller #0 [ 757.562114][T15710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 757.562132][T15710] RIP: 0010:hugetlb_split+0x234/0x2a0 [ 757.562183][T15710] Code: b4 ff 4c 89 f7 48 89 de 4c 89 fa 31 c9 5b 41 5c 41 5d 41 5e 41 5f 5d eb 7d e8 08 7e b4 ff 0f 0b e9 65 fe ff ff e8 fc 7d b4 ff <0f> 0b e9 2d ff ff ff 48 c7 c1 a4 3f 21 8e 80 e1 07 80 c1 03 38 c1 [ 757.562226][T15710] RSP: 0018:ffffc90005ea75a8 EFLAGS: 00010287 [ 757.562273][T15710] RAX: ffffffff81cdb024 RBX: 0000200000000000 RCX: 0000000000080000 [ 757.562286][T15710] RDX: ffffc90016948000 RSI: 0000000000004e80 RDI: 0000000000004e81 [ 757.562299][T15710] RBP: 0000000000000000 R08: ffff88807675f8ef R09: 1ffff1100ecebf1d [ 757.562311][T15710] R10: dffffc0000000000 R11: ffffed100ecebf1e R12: ffff88801e67c148 [ 757.562324][T15710] R13: dffffc0000000000 R14: ffff88801e67c0d8 R15: ffff88802e5f61b8 [ 757.562337][T15710] FS: 00007f30bb2c86c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 757.562353][T15710] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 757.562364][T15710] CR2: 00007f30bb2a7d58 CR3: 000000005d0a2000 CR4: 00000000003506e0 [ 757.562380][T15710] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 757.562391][T15710] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 757.562403][T15710] Call Trace: [ 757.562439][T15710] [ 757.562507][T15710] __vma_adjust+0x553/0x1d00 [ 757.562612][T15710] ? lockdep_init_map_type+0x98/0x8d0 [ 757.562649][T15710] ? lockdep_softirqs_off+0x430/0x430 [ 757.562674][T15710] ? validate_mm+0x2e0/0x2e0 [ 757.562709][T15710] ? __init_rwsem+0x11e/0x160 [ 757.562732][T15710] ? hugetlb_vm_op_open+0x332/0x540 [ 757.562755][T15710] __split_vma+0x3a2/0x4f0 [ 757.562782][T15710] do_mas_align_munmap+0x399/0x12d0 [ 757.562815][T15710] ? do_mas_munmap+0x2b0/0x2b0 [ 757.562846][T15710] ? mtree_range_walk+0x664/0x780 [ 757.562939][T15710] ? mas_walk+0x15f/0x180 [ 757.562961][T15710] ? mas_find+0x1ba/0x220 [ 757.562984][T15710] do_mas_munmap+0x240/0x2b0 [ 757.563013][T15710] mmap_region+0x7ab/0x1c50 [ 757.563048][T15710] ? file_mmap_ok+0x170/0x170 [ 757.563071][T15710] ? validate_mm+0x23f/0x2e0 [ 757.563095][T15710] ? vma_expand+0x850/0x850 [ 757.563115][T15710] ? cap_mmap_addr+0x153/0x2c0 [ 757.563185][T15710] ? file_mmap_ok+0x11c/0x170 [ 757.563208][T15710] do_mmap+0x9ce/0x10d0 [ 757.563235][T15710] ? mlock_future_check+0x100/0x100 [ 757.563255][T15710] ? ima_file_mmap+0xf7/0x140 [ 757.563336][T15710] ? ima_file_free+0x3e0/0x3e0 [ 757.563359][T15710] ? common_file_perm+0x171/0x1c0 [ 757.563414][T15710] ? bpf_lsm_mmap_file+0x5/0x10 [ 757.563544][T15710] __se_sys_remap_file_pages+0x5ba/0x7b0 [ 757.563580][T15710] ? __x64_sys_remap_file_pages+0xc0/0xc0 [ 757.563604][T15710] ? lock_chain_count+0x20/0x20 [ 757.563634][T15710] ? lockdep_hardirqs_on+0x94/0x140 [ 757.563660][T15710] ? __x64_sys_remap_file_pages+0x1c/0xc0 [ 757.563686][T15710] do_syscall_64+0x4c/0xa0 [ 757.563716][T15710] ? clear_bhb_loop+0x60/0xb0 [ 757.563794][T15710] ? clear_bhb_loop+0x60/0xb0 [ 757.563819][T15710] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 757.563841][T15710] RIP: 0033:0x7f30ba39e0d9 [ 757.563872][T15710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 757.563888][T15710] RSP: 002b:00007f30bb2c8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 757.563909][T15710] RAX: ffffffffffffffda RBX: 00007f30ba625fa0 RCX: 00007f30ba39e0d9 [ 757.563923][T15710] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000800000 [ 757.563936][T15710] RBP: 00007f30ba435024 R08: 0000000000000003 R09: 0000000000000000 [ 757.563949][T15710] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000000 [ 757.563961][T15710] R13: 00007f30ba626038 R14: 00007f30ba625fa0 R15: 00007fffca4f2c98 [ 757.563990][T15710] [ 757.564003][T15710] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 757.564013][T15710] CPU: 1 PID: 15710 Comm: syz.8.3154 Not tainted syzkaller #0 [ 757.564030][T15710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 757.564039][T15710] Call Trace: [ 757.564045][T15710] [ 757.564052][T15710] dump_stack_lvl+0x188/0x24e [ 757.564075][T15710] ? memcpy+0x3c/0x60 [ 757.564121][T15710] ? show_regs_print_info+0x12/0x12 [ 757.564145][T15710] ? load_image+0x410/0x410 [ 757.564182][T15710] panic+0x2d3/0x710 [ 757.564204][T15710] ? bpf_jit_dump+0xd0/0xd0 [ 757.564234][T15710] __warn+0x2f8/0x4f0 [ 757.564250][T15710] ? hugetlb_split+0x234/0x2a0 [ 757.564270][T15710] ? hugetlb_split+0x234/0x2a0 [ 757.564288][T15710] report_bug+0x2ba/0x4f0 [ 757.564309][T15710] ? hugetlb_split+0x234/0x2a0 [ 757.564332][T15710] handle_bug+0x3a/0x70 [ 757.564354][T15710] exc_invalid_op+0x16/0x40 [ 757.564376][T15710] asm_exc_invalid_op+0x16/0x20 [ 757.564395][T15710] RIP: 0010:hugetlb_split+0x234/0x2a0 [ 757.564414][T15710] Code: b4 ff 4c 89 f7 48 89 de 4c 89 fa 31 c9 5b 41 5c 41 5d 41 5e 41 5f 5d eb 7d e8 08 7e b4 ff 0f 0b e9 65 fe ff ff e8 fc 7d b4 ff <0f> 0b e9 2d ff ff ff 48 c7 c1 a4 3f 21 8e 80 e1 07 80 c1 03 38 c1 [ 757.564429][T15710] RSP: 0018:ffffc90005ea75a8 EFLAGS: 00010287 [ 757.564444][T15710] RAX: ffffffff81cdb024 RBX: 0000200000000000 RCX: 0000000000080000 [ 757.564456][T15710] RDX: ffffc90016948000 RSI: 0000000000004e80 RDI: 0000000000004e81 [ 757.564468][T15710] RBP: 0000000000000000 R08: ffff88807675f8ef R09: 1ffff1100ecebf1d [ 757.564481][T15710] R10: dffffc0000000000 R11: ffffed100ecebf1e R12: ffff88801e67c148 [ 757.564494][T15710] R13: dffffc0000000000 R14: ffff88801e67c0d8 R15: ffff88802e5f61b8 [ 757.564513][T15710] ? hugetlb_split+0x234/0x2a0 [ 757.564537][T15710] ? hugetlb_split+0x234/0x2a0 [ 757.564557][T15710] __vma_adjust+0x553/0x1d00 [ 757.564582][T15710] ? lockdep_init_map_type+0x98/0x8d0 [ 757.564608][T15710] ? lockdep_softirqs_off+0x430/0x430 [ 757.564630][T15710] ? validate_mm+0x2e0/0x2e0 [ 757.564663][T15710] ? __init_rwsem+0x11e/0x160 [ 757.564683][T15710] ? hugetlb_vm_op_open+0x332/0x540 [ 757.564704][T15710] __split_vma+0x3a2/0x4f0 [ 757.564729][T15710] do_mas_align_munmap+0x399/0x12d0 [ 757.564763][T15710] ? do_mas_munmap+0x2b0/0x2b0 [ 757.564793][T15710] ? mtree_range_walk+0x664/0x780 [ 757.564825][T15710] ? mas_walk+0x15f/0x180 [ 757.564846][T15710] ? mas_find+0x1ba/0x220 [ 757.564874][T15710] do_mas_munmap+0x240/0x2b0 [ 757.564899][T15710] mmap_region+0x7ab/0x1c50 [ 757.564933][T15710] ? file_mmap_ok+0x170/0x170 [ 757.564955][T15710] ? validate_mm+0x23f/0x2e0 [ 757.564979][T15710] ? vma_expand+0x850/0x850 [ 757.564996][T15710] ? cap_mmap_addr+0x153/0x2c0 [ 757.565027][T15710] ? file_mmap_ok+0x11c/0x170 [ 757.565049][T15710] do_mmap+0x9ce/0x10d0 [ 757.565076][T15710] ? mlock_future_check+0x100/0x100 [ 757.565094][T15710] ? ima_file_mmap+0xf7/0x140 [ 757.565116][T15710] ? ima_file_free+0x3e0/0x3e0 [ 757.565135][T15710] ? common_file_perm+0x171/0x1c0 [ 757.565158][T15710] ? bpf_lsm_mmap_file+0x5/0x10 [ 757.565181][T15710] __se_sys_remap_file_pages+0x5ba/0x7b0 [ 757.565212][T15710] ? __x64_sys_remap_file_pages+0xc0/0xc0 [ 757.565233][T15710] ? lock_chain_count+0x20/0x20 [ 757.565259][T15710] ? lockdep_hardirqs_on+0x94/0x140 [ 757.565274][T15710] ? __x64_sys_remap_file_pages+0x1c/0xc0 [ 757.565298][T15710] do_syscall_64+0x4c/0xa0 [ 757.565318][T15710] ? clear_bhb_loop+0x60/0xb0 [ 757.565338][T15710] ? clear_bhb_loop+0x60/0xb0 [ 757.565360][T15710] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 757.565380][T15710] RIP: 0033:0x7f30ba39e0d9 [ 757.565394][T15710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 757.565408][T15710] RSP: 002b:00007f30bb2c8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 757.565425][T15710] RAX: ffffffffffffffda RBX: 00007f30ba625fa0 RCX: 00007f30ba39e0d9 [ 757.565438][T15710] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000800000 [ 757.565451][T15710] RBP: 00007f30ba435024 R08: 0000000000000003 R09: 0000000000000000 [ 757.565462][T15710] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000000 [ 757.565476][T15710] R13: 00007f30ba626038 R14: 00007f30ba625fa0 R15: 00007fffca4f2c98 [ 757.565500][T15710] [ 757.565749][T15710] Kernel Offset: disabled [ 758.375171][T15710] Rebooting in 86400 seconds..