last executing test programs: 3m18.214354194s ago: executing program 0 (id=140): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x33) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e1d, 0x4, @loopback, 0x4}, 0x1c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="ac0000001200010500"/56, @ANYRES32, @ANYBLOB="00000000000000feff"], 0xac}}, 0x4000) 3m15.5773566s ago: executing program 0 (id=142): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x20980, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x94) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={r2, 0x800, 0xfeff, 0xff, 0x2, 0x7}, 0x14) 3m15.227701107s ago: executing program 0 (id=146): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x24044000) 3m15.158643319s ago: executing program 0 (id=147): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f00000002c0)="f6eb094549002060009b8538a4ba", 0x0, 0x806, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001"], 0xc4}}, 0x20050890) syz_emit_ethernet(0x4e, 0x0, 0x0) 3m13.891726046s ago: executing program 0 (id=150): creat(0x0, 0x9e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x1fc}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, 0x0, 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) listen(r3, 0x80000003) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000012380)="580000001500add427323b470c47b45602067fffffff81004e220700000000000000a8002000eaa57b00090080020efffeffe809020000ff0004f03a007357ac8ddc1fdd00000000000004ffffffe7ee0000000044c60000", 0x58}], 0x1) 3m12.109381173s ago: executing program 0 (id=155): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8, &(0x7f0000000140)={[{@init_itable}, {@grpid}, {@quota}]}, 0x2, 0x541, &(0x7f0000000600)="$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") chdir(&(0x7f0000000400)='./file0\x00') 2m56.751380559s ago: executing program 32 (id=155): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8, &(0x7f0000000140)={[{@init_itable}, {@grpid}, {@quota}]}, 0x2, 0x541, &(0x7f0000000600)="$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") chdir(&(0x7f0000000400)='./file0\x00') 14.94178084s ago: executing program 5 (id=770): r0 = syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./file2\x00', 0x20048a, &(0x7f0000000300), 0x12, 0x51a, &(0x7f0000001200)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() writev(0xffffffffffffffff, &(0x7f0000000b00), 0x0) ioctl$XFS_IOC_SCRUB_METADATA(r0, 0xc040583c, &(0x7f0000000280)={0xb, 0x100, 0xe866, 0x1}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2000014, &(0x7f0000000480)=ANY=[], 0xfe, 0x2e8, &(0x7f0000000580)="$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") r4 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r4, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000640)="97452a307eb495fe223600"/28, 0x1c}], 0x1, &(0x7f0000000600)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x16}, @private=0xa010101}}}], 0x20}, 0x400c804) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711811000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000001f40)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x5, 0x0, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x9, 0x400a}]}) ioctl$BTRFS_IOC_SNAP_DESTROY(r2, 0x5000940f, &(0x7f0000002bc0)={{r2}, "6e7e6b35e7b4c0ff3948575143ebfb570ec9f9ffddd5cc5e72db67c6167fa1ac2fc7a60a81933a86e807c3c49644f097d9a7a407e489697d0cc29eabdf3d3c99c7d271151ca72f09f41b483c84c8f546ae22818a25c272eb00e4dd04a53693a0a36666ae525e674c4ccfb28e0fda2e5d376c4dafff9643891344d687ddffb2539aadfd018ed23729b6a42e71abaa82f7649028df7078341bea1c6dd21dbe9f96005e016eb5a8254205f8c5098137894cd49004f7f8bf826a6645fae4add8d45f86e03a2fc9ae383994e50385a340b8d206df5bbca7872258322257723e54fc0fb03e64ac8bbd3322bc3020b5792ebf240b4aac7b3c55f8b769baa9f60471889b386d08b32ec7bd332ad728b29daa70e032274fb7e5f014e588930d41462be4354207db86a7bdcdcf7cc5ff638994b60ac515e3b2e45de65e1931075ff65d7e55937ec29248064c5c83fb5824061714a48f086983a64a4afe12977690c79bf64dd35e95e26bde2b0c8f29fd079c309b1642124691bb97adac61c0a46b5499bca531eeaa1ec11da6f19096038eeeb41fc415d05f7205b430f15921be33ee80e9ef5adcdd2a8878481feeaaaabd8860825d36fc66093beb1357cdb8af87ab0ddce23b1a87026547acd23c1f6c90adbae149959e790c2224a3a9797ac197c62cf09fff03de4cae205ea6dde27d223e3853c2ec80e4b977e93e42f4e0e273c6e30d1a7914d0c9f85218965fd1b150f2a27bee9cf742fe701fb93e0532a198e2cd85cd48c6b21929a9bd18dd05c29466086654d2dc2380a492b6af2c457c5e4ef86e72ba73b516336d6e34aa629f71c014515e36ef61d77ae0b3615d1eb9dbc822358222fb3e51376649844669e9ba7bc2f20416cd5d73b8373d9de7f6ef14873eddcadde81cc825f61e95b425843baf4430964dd6f58fa82a9bb2b42e41e2cb2b4ee69787e67b1935be240ca25d42fbe4c79811dc6702ecfb644904cbae50f41b0025c39caab968a3375f268047be61da6b144e88ca8698a9d1bf1612a6498f5f0e7cf7929f08df5a4d594ea7ec6d414923553028e34ec4e33b48c34ab59be0ddcf5321edee9a629d2b433bbaea64aa4f30e2ab7e0cc8887bbd7fdb5ab65e28c70101ced7260caca9584e2309b744d89a9f8caca3825aa14b01ef3a357800e9631816933689af3dd7b473e04cfbf58c0d1c7abc67eff16b2c24d8ee5358a4e349b089cc3fa28f9e3814de3985d05785390267a972b323414c4cd11754ab30e560f7350cf15304318606b963e75a78a93d48a2e0c09b01250b5538c7bb847b982e9ac31510693e96f5871eae0c5248f9e0cfdeef000a8dc56434d0bc833225def2319af6a7bfd2e11807f47201d34b8090314338092e6650154f9920caec9b571e7f9d02f8a78ba33f9b615519a195feae24244c5705a5bc0f4ba67b0cdadbed2a387e320e526cc70c022af36e083dfc633b065087f72a8575f4f8fceb42957187326bfd32807210344df99e48ea63190a1197a048e449304f53d1c9e5a07e71c83a9f908af0317bfff2ded1b857b6393c26059778f000987b1aa953c2bfc1d99a28958e8c30e84483c284aa9fa44b475e374c810f3d13af58771a10da1db3240b064b2e5c8cdccdfe6429d7d9e911394cb5ca112f71f897e83632ffdf45a97017af031696d6ce6e943fff9a672d4590e98dd1b376e7e41f4956e43d68e71b6a2f62f1da2d5141f40fe87b3aa63eade7d0f74767541b780a1fb5efeb61165b895e5a0f2c54d1535c6fab03bea4069cdf88b4cc73f88750b63ef24f9097fc6dc04d95bbab33d21eda7b345748d84fd6bfb4c34a5b99113e672c5606f6a1befd59fd88fea2fb4060cebdd51a7943a9a36fdd9c80f4c7b8191ce1f3640c44927ac3288608293f50c3a37ea9a178b652e2c7951e6bc773d9b414b748b52986543894088f47f28612529ec3bf55643e266a11097dd3139b54b86301029dde60fecd1249600624a71beabd07a79a24c81ff54ec397b2efb0b72d28cfee9f5e4fdad275516248009adeaed04b5b167ffad5d2b68d916b6a068842fb936c2d52f30b108e407359105506861c342890690dbf6d546d970c648d51938e41e0ffcfe5d6230ddf050338bb594cfe10d819d646d9bf98d2013bd0c756f65eb1a772bf43209ecb7a4cc9dcdc371e453e5da05ce2e0f54d902b84bcb5c198830e4cf0db7bfe2dc8f04eb9f21a6cf3566f20c808caed3e8d8b40c108d16191751d57f5e565de01c2ef7a9f799b535c58b743497eadd99029e84cd35f2ee40cd3ee2524ae5391400d0014507a1adfa0c116e13b2331c4509bcf0ee0cfeab198c893bcbb40a6d398f243747a05940d65ecb1fba1e5c9c418d823e0004e08f14c3a10d97080c54690be8863273ddfe2322c1baec057b606130e9b56fac1f19b762aeaf5afd93ebcae6cdf2220f79beeccc6bd1817cdf63e526ec68df4684d69b5de934e396b86c1e3795bb8c568f06a1e92f26ab8d9b9f70f6fc3a91733aab3f0343543d7f81cef4ad647d617d1a796c48b9eb041d9ec88b088584bff40c4c057679c239a0844fe4a25af8206b10ef7b5a76b8986971928e5febf38b60d0d9276120c5f0c291e25779de79a6c15d924bd002021159aeb02be8977bced9701eb099b4a07d3e17a1a9addbea3f807324dbf8807466efdfe2a50f5d04b6fea8b5847cc171dd7dde22e1d4d23cdb1db104a7f559dad36ffea4a43758ec36941beae2946e01507e5774387405f2c0a3f9ecc95cbe3b25226d3a70e26dcf42a9b1694f6e975d1d746acee9a1c9ee34980d443393ae94059eeffa8cdb8e9b236bc4c5351cec95bf778cbc4519ccfccb19c843726bd852e72018a7c0fa7110ea7761f1d93ed8091c908b48b6c61d20baab11159833c904cc2d2cdeea5d768b3401d5ae99157f7cb0335e4fd17f1fbb25b55464add8b902c8ca8c7b253b7bcbbe69303a185f6886b596b6d3d36c504c27171665a9187eb25355203debd499e236a346cd0836fa893e159ba8acd39d64199cacf1f3148f8eb64b6c170682a094360adc9cad1cdd4f822e9fb2bf241438a3e8a577eafb6ede026a1ca20bba88de4d5823ca2c09dac92939bdeec0c33ef2d3d04951a07e18a2993b5bf086c6f8c328c3824ab9f83f00861a6b814b50e3a2d6e447bb7550dcbb0f5080bfc89692b7eb234316c0ccdf7a58000c1979b102d64b8cac9b14002ca6a41c03ce39c757ccf1aba8dd1713797f6af37471b3a970a394b86585249ae9b40e97f0ec79a08b8cdcd9b4d88846e314025018e7c5b85fa89abdc0b27af4f6f0f99fa73376cdd7ff01aa8befc2870d9c9971369ab2cae708124d6fd21347761404412637dacf96f1bf51b25578fc6cbc31e52414eb5051fb5f511ca305b211fe96ccde26b132584d5815d8b2687cd6b93f3a8b50b9517ad0ff56ea57e723c575a8f3b12e12ab279fa984b1cce91bc15f90945c742bda343fafaafa7faa3e1bec22c7f9e9d7684efddc53ef09eb652e85e0a0ed059e62b13843abf86e333a6ca5f055fd00909865aa918fa9dc2836d2ba38ed7372849ad37dc59c37fb1c2a97a2da56b4a050d29d496a67679f2f82018d150b904c424fba1860fb886229c55eae91d82df5541178c35d4621a4e3cbf807387956ea8e438eb024da1df87c36eae8b2e25aa5b3545373045f72f5df678aa668765bec5d43ba9308c9fe0e5b9ae9f4cca219078523dbc17f744f3910fb5092b48f89ed0df7f0519cd0775a99320128d95ec41e7251db860d34ffb5c8853ed221f51caf95c0fd7df2bc7a868b117f9f83bbb5b09c352d393a2f8102a75faa8b1c6fd7848a62e75ea6cfea6ae557ce24b4c0d23848b5bc6ae2e66802b694b749f1ce70a6bd64cc588a8945e22e7af3d4d15cb7e3884ef6e7432038957b1079fed48018ac24a4d1098336f794d79714d514559f8f3d1d7920d5f95653f4e6f3c0ec983575738fc56129b3b9180d3834aab870fc27034b02e2ebf336425a68d5e4b8fd59794647c45fb7a5019705c0770757c9291f7120fb69e367f0eeb54ba132f8bf0bc456c62a9effb0fa9705fc0e3ec27c3495a3a500ac3eb1a70521d50a44e84113dca105d76089e50963d3fabf5f3ab57c038d8974cd2b51a90f917c460388f23699c6c20a7643dde77aaabf862871c928937d6dbfff288eac3d1d98be0900ba46687b733d3f86aa01944a2d73bedc3297a2541164a6b0692563575203f019e8d5bd88aab11bbc0f997dc4d8835e16dfe521e915a2246e633bbe5ef524231f5cbd7144f31fe63e2d782fc9409612e285ae2b575c447a8e4503e0a0a8e6a57960c9bb69615d18cbc078f08200c31698e6720cddb27da1c508cda47d2bce155b95768a89c473568ed461797cc71ec63aa60dea01abe265df517129dde87aafe4db3bbdba449ec1062b530d095cfe7b89ad6f6ca6e41f94f667501a291789233a52b876d56dcd7197c713d0da8073ac1d163677fe29c924b6ab99fd2fdc01e7d8819ffa570c49a9a7494a15367c6508f5d397f9ee2a451ed5c6c3c6d23565eeaecdb585d72800c8c9269cf7d7f79d8aab29c1db9c5744bcb3c5e3129faac0384e661fa5aa5472f17737b3be95588aed4eddf7581f6430ce40bbb551f303bab543338f7af2d693a4d0e8e9c6cfce84a7dec51d49b6623c5a15bf302f8f73dba282ba1a389e3eaafb4a78aff9386ecdab765ba9027125dc400f33d33f85395ac4e5098d2f61aa0b082b0afaec1f61009f721388fec970abb676c779ec99e6b5e3565352229ed2b565acd6e658c0e2cd8ef5845a78db236564ba5c7f57e3fd1ddb03cf22d2ec7c554958bf7f5d525db231942679cbb1e840b974de097e49b0652c99668f8cbfb27970c9b832afbda6d359a101a1112b42763d0198280f60e7bf5dc801a7eec018b944cfc05dd9c2d074286ad363593ae7d44f8a703bbedcd24c75cbcf0672d163c7dea1bd29c71d4f09faedba79ad2f1f21ae532037553aeb6c03df8577ce2a19ea749c38266001793c2c8e7bd6fce8b2d5cc237d25f75f8dc79562253d88ccf391b30427538a5cf322a7e51a6c7e59f2e55b546fdc075b4c6ed7844c1921bd2231984f98a19808189761a4ca2b664513ce796b56b949d133941ffc2f94cdf1e966d9e3fee7333d2009a879048ea98ed35d33aab0b796f1a78846ffbf3fc3ea284c3135335d0158b713a6c175cc00956a1e1a521653fc8920731dd70ab10380353edf8dd65786356886afc2a7509138a22858c24ae200982846c834ecbf6b55ba037c5864a5215c5f5348fb276e4ed2efbdbfac1fea76e14bf3ae8b235a38c6f8597c069e51063f407e599c0236f49c9a987e7a4bba59931f36d28c8db4c0a978c8c8e7ad457dd19fe461e7778f55e86f28b03b6ffef8a56767dafa33f1be24e97baee2b074fdeeed1872cf2400c9d001b05578e749e3252d3b710e04c006c2ccf46c83182e715fd639adb57ba42895edf0825404faa49bb2dddaa534452e4cd8b89f52451d890865eb72d509694b202e438c99142e76a708c28c52933d2ce829ce97ac5aa9fff5cf530e9298c1a0e9b6685b750862e24aa38bf8a05ea53daaa06239254d02636d89cff5215ff98a742bfba59707c2e16cfb4bdcf314d9ef63ee07c53fb8a3a2f355b74c4c9f658a8ecb1ebdd8d7bc892e6a2a57082e0a4abb3829066f2b7d4cd4a37d87d504ef1c1107b1de4a101c9ac6947d17c02b9ef6b7161b5236bceb67f06678e7e43d9ed0031fb5ca610faca65580edac638"}) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r6, &(0x7f0000002b80)=[{{&(0x7f0000000040)={0x2, 0x4e24, @remote}, 0x10, 0x0, 0x0, &(0x7f00000021c0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}], 0x18}}], 0x1, 0x4) r7 = open(&(0x7f0000000040)='./file2\x00', 0x88541, 0x1) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) ioctl$BTRFS_IOC_DEFRAG(r7, 0x4c08, 0x3) 14.783148133s ago: executing program 3 (id=772): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10000, &(0x7f0000000080)={[{@quota}, {@delalloc}, {@acl}, {@journal_dev={'journal_dev', 0x3d, 0x11}}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x505, &(0x7f0000001f40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) fdatasync(0xffffffffffffffff) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 14.674380585s ago: executing program 5 (id=773): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000040)={0x3, 0x9}) 14.363851551s ago: executing program 5 (id=775): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000001200)=0x8a4, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000300)="5052e01be2a32437397c3b244961233f6d7487e70300000000000000dcf5441089c1842b5a95b468cc80487eab4bd695ea23bfc79c748967eba7d0dd1d73", 0xffffffffffffff94, 0x0, 0x0, 0xfffffffffffffefe) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 14.177439816s ago: executing program 3 (id=777): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001800)={'veth1_virt_wifi\x00', 0x0}) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r5, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) 11.504971113s ago: executing program 3 (id=782): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth1\x00', &(0x7f0000000140)=@ethtool_perm_addr}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000000, 0x200000005c831, r0, 0xffffd000) 11.473620204s ago: executing program 3 (id=783): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7501}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x2d, 0x8ff, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x10, 0x4}, {0x2, 0xfff1}, {0xfff2, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 11.339716277s ago: executing program 5 (id=784): r0 = syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./file2\x00', 0x20048a, &(0x7f0000000300), 0x12, 0x51a, &(0x7f0000001200)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() writev(0xffffffffffffffff, &(0x7f0000000b00), 0x0) ioctl$XFS_IOC_SCRUB_METADATA(r0, 0xc040583c, &(0x7f0000000280)={0xb, 0x100, 0xe866, 0x1}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2000014, &(0x7f0000000480)=ANY=[], 0xfe, 0x2e8, &(0x7f0000000580)="$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") r3 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r3, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000640)="97452a307eb495fe223600"/28, 0x1c}], 0x1, &(0x7f0000000600)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x16}, @private=0xa010101}}}], 0x20}, 0x400c804) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711811000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000001f40)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x5, 0x0, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x9, 0x400a}]}) ioctl$BTRFS_IOC_SNAP_DESTROY(r1, 0x5000940f, &(0x7f0000002bc0)={{r1}, "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"}) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r5, &(0x7f0000002b80)=[{{&(0x7f0000000040)={0x2, 0x4e24, @remote}, 0x10, 0x0, 0x0, &(0x7f00000021c0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}], 0x18}}], 0x1, 0x4) r6 = open(&(0x7f0000000040)='./file2\x00', 0x88541, 0x1) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) ioctl$BTRFS_IOC_DEFRAG(r6, 0x4c08, 0x3) 9.366742679s ago: executing program 3 (id=788): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000480)=0x5d4, 0x4) 9.221099352s ago: executing program 3 (id=790): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x1fc}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, 0x0, 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) listen(r2, 0x80000003) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000012380)="580000001500add427323b470c47b45602067fffffff81004e220700000000000000a8002000eaa57b00090080020efffeffe809020000ff0004f03a007357ac8ddc1fdd00000000000004ffffffe7ee0000000044c60000", 0x58}], 0x1) 7.471258429s ago: executing program 2 (id=793): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0xad7f, 0x8, 0x2, 0x0, 0x43, 0x80000000, 0x80000001}, 0x1c) 7.291861163s ago: executing program 2 (id=794): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x11, r0) tkill(r0, 0x9) 7.231794675s ago: executing program 2 (id=796): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000003c0)=0x1, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYBLOB="00042abd7000fbdbdf2517000000780004800900010073797a31000000001c0007800800040001800000080004000080000008000100080000"], 0xd0}, 0x1, 0x0, 0x0, 0x4000}, 0x1) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280), 0x802, 0x0) ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3) getgid() recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x6}], 0x1, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40000000}, 0x4000004) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000000)='bridge0\x00') fcntl$lock(r0, 0x25, &(0x7f0000002380)={0x1, 0x0, 0x8000000000000001}) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYRES64, @ANYRES8=r0, @ANYRESDEC], 0xac}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000000) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="c40000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff02000000000000000000000000000114000400000000000000000000090000001414bb08000740fffffff83000068014000400fc0000000000000000000000000000010400038014000500fc010000000000000000000000000001"], 0xc4}}, 0x0) 4.877573155s ago: executing program 2 (id=800): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_DISCARDURB(r0, 0x8008550e, 0x0) 4.707782918s ago: executing program 2 (id=802): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r5, 0x5452, &(0x7f0000b28000)=0x20000000000000ff) fcntl$setsig(r5, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r6}], 0x2c, 0xffffffffffbffff8) r7 = dup2(r5, r6) syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r7) fcntl$setown(r5, 0x8, r4) r8 = getpid() tkill(r8, 0x13) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = socket(0x10, 0x80002, 0x4) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newtaction={0x84, 0x13, 0x53b, 0x0, 0x25dfdbfc, {}, [{0x70, 0x1, [@m_sample={0x40, 0x1d, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x6}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x4}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_ife={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0x1f, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x48001}, 0x208d4) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f00000014c0)={0xff}, 0x8) 3.261043449s ago: executing program 1 (id=806): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000900)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x566, &(0x7f0000002080)="$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") openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0xc00, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000030000006a0af2fe000000008500000009000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, 0x0) io_submit(0x0, 0x0, 0x0) 2.78383542s ago: executing program 1 (id=808): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2, 0x17, 0x5, 0x9, 0x2, 0x0, 0x70bd27, 0x25dfdbfc}, 0x10}}, 0x4000000) 2.628000743s ago: executing program 1 (id=810): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000003c0)=0x1, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYBLOB="00042abd7000fbdbdf2517000000780004800900010073797a31000000001c0007800800040001800000080004000080000008000100080000"], 0xd0}, 0x1, 0x0, 0x0, 0x4000}, 0x1) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280), 0x802, 0x0) ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3) getgid() recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x6}], 0x1, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40000000}, 0x4000004) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000000)='bridge0\x00') fcntl$lock(r0, 0x25, &(0x7f0000002380)={0x1, 0x0, 0x8000000000000001}) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYRES64, @ANYRES8=r0, @ANYRESDEC], 0xac}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000000) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="c40000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff02000000000000000000000000000114000400000000000000000000090000001414bb08000740fffffff83000068014000400fc0000000000000000000000000000010400038014000500fc010000000000000000000000000001"], 0xc4}}, 0x0) 2.407771868s ago: executing program 4 (id=812): io_uring_setup(0x136a, &(0x7f0000000080)={0x0, 0x1f8a, 0x0, 0x3, 0x3aa}) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) close(0x4) 1.531685487s ago: executing program 4 (id=813): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) connect$llc(r0, &(0x7f0000000000)={0x1a, 0x204, 0x3, 0x9, 0x4, 0x7f, @link_local}, 0x10) 1.37000449s ago: executing program 4 (id=814): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000002000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x78, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7fff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x100000000}]}]}], {0x14}}, 0xc0}}, 0x0) 1.154431655s ago: executing program 4 (id=815): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 889.14934ms ago: executing program 2 (id=816): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000900)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x566, &(0x7f0000002080)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x9000) fallocate(r0, 0x0, 0x0, 0x8800000) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 766.764703ms ago: executing program 4 (id=817): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0xdb2, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20044800, &(0x7f0000000180)={0xa, 0x4e27, 0x8041, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}, 0x627bcafb}, 0x1c) recvmmsg(r0, &(0x7f0000001840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002000)=""/4108, 0x100c}, 0x3}], 0x1, 0x40002000, 0x0) 495.762739ms ago: executing program 4 (id=818): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x3, &(0x7f0000000040)=0xe3, 0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) 337.530863ms ago: executing program 1 (id=819): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x4ff1, &(0x7f0000000040)={0x0, 0x835c, 0xf000, 0x20000a, 0x20002f3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x3) 294.639293ms ago: executing program 5 (id=820): r0 = socket$inet(0x2, 0x801, 0x0) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 131.886317ms ago: executing program 1 (id=821): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x0, 0x48) open_by_handle_at(r0, &(0x7f00000006c0)=@ceph_nfs_fh={0x8, 0xfe, {0x42}}, 0x553c00) 62.652718ms ago: executing program 1 (id=822): iopl(0x3) r0 = gettid() r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000002300)=@raw={'raw\x00', 0xc01, 0x3, 0x2298, 0x1100, 0x5002004a, 0x0, 0x0, 0x0, 0x2200, 0x3c8, 0x3c8, 0x2200, 0x3c8, 0x3, 0x0, {[{{@uncond, 0x60, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x1, 0x7], 0x6, 0x2}, {0x2, [0x0, 0x6, 0x4, 0x9, 0x0, 0x89ce99baffcf6900], 0x1, 0x1}}}}, {{@uncond, 0x0, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x1, 0x1, './cgroup.net/syz1\x00', 0x2, {0x5}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback, [0xffffff00, 0xff000000, 0xff, 0xff0000ff], 0x4e22, 0x4c20, 0x4e24, 0x4e23, 0xc9, 0x0, 0x3b, 0x83, 0x25}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x22f8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) eventfd2(0x74a6, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000005c0)='fd', 0x0, r3) write$tun(r3, &(0x7f0000000380)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r4, 0x0, 0x2) setpgid(0x0, 0x0) setpgid(0x0, 0x0) fchdir(r6) chown(&(0x7f0000000140)='./control\x00', 0xffffffffffffffff, 0x0) 0s ago: executing program 5 (id=823): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x75f, 0xa8182) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x24002de8) write(r0, &(0x7f0000000ac0)="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", 0x19b) kernel console output (not intermixed with test programs): ond: link becomes ready [ 68.644428][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.653398][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.662836][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.672714][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.681557][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.690728][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.710546][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.722592][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.742451][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.760302][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.777648][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.787395][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.828678][ T4194] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.845688][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.868757][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.877453][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.886390][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.896874][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.909162][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.940233][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.949314][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.961314][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.968827][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.988780][ T4200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.012133][ T4190] device veth0_vlan entered promiscuous mode [ 69.039466][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.047781][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.087062][ T4190] device veth1_vlan entered promiscuous mode [ 69.110547][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.119016][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.128005][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.136581][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.146786][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.156536][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.164758][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.194221][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.205065][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.215032][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.244944][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.275906][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.286238][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.302474][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.313167][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.322583][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.331046][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.339051][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.347879][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.358353][ T4200] device veth0_vlan entered promiscuous mode [ 69.373934][ T4197] device veth0_vlan entered promiscuous mode [ 69.393170][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.404008][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.418631][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.428161][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.444229][ T4200] device veth1_vlan entered promiscuous mode [ 69.453474][ T4190] device veth0_macvtap entered promiscuous mode [ 69.462538][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.473105][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.482010][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.491811][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.509159][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.520412][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.530214][ T4197] device veth1_vlan entered promiscuous mode [ 69.540937][ T4190] device veth1_macvtap entered promiscuous mode [ 69.554759][ T4191] device veth0_vlan entered promiscuous mode [ 69.562189][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.571127][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.579143][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.588159][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.608963][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.626241][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.638968][ T4191] device veth1_vlan entered promiscuous mode [ 69.663709][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.672737][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.681716][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.690723][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.700343][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.709159][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.727029][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.746797][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.761581][ T4200] device veth0_macvtap entered promiscuous mode [ 69.768928][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.778288][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.788465][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.797981][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.822698][ T4190] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.833656][ T4190] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.843817][ T4190] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.853267][ T4190] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.872878][ T4197] device veth0_macvtap entered promiscuous mode [ 69.883773][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.893307][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.906310][ T4200] device veth1_macvtap entered promiscuous mode [ 69.935991][ T4197] device veth1_macvtap entered promiscuous mode [ 69.959752][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.974297][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.983888][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.014515][ T4191] device veth0_macvtap entered promiscuous mode [ 70.052190][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.070261][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.089544][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.101051][ T4191] device veth1_macvtap entered promiscuous mode [ 70.108239][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.122012][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.132623][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.144636][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.157089][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.170252][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.192719][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.204145][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.216371][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.225304][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.234362][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.251350][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.262630][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.274512][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.319666][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.328377][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.341328][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.353970][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.364786][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.375393][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.386911][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.410602][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.418723][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.430765][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.444370][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.455752][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.466693][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.476819][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.487552][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.500959][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.509659][ T4200] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.518480][ T4200] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.527694][ T4200] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.536758][ T4200] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.548638][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.557698][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.566711][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.576170][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.585074][ T4232] Bluetooth: hci4: command 0x040f tx timeout [ 70.586445][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.591767][ T4232] Bluetooth: hci2: command 0x040f tx timeout [ 70.606055][ T4232] Bluetooth: hci0: command 0x040f tx timeout [ 70.612713][ T4232] Bluetooth: hci3: command 0x040f tx timeout [ 70.618812][ T4232] Bluetooth: hci1: command 0x040f tx timeout [ 70.622330][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.634924][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.646626][ T4197] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.655912][ T4197] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.665903][ T4197] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.675665][ T4197] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.705162][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.716018][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.726599][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.737419][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.749093][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.759615][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.771431][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.808888][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.817933][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.831597][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.841024][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.853664][ T4191] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.862874][ T4191] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.872028][ T4191] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.881499][ T4191] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.897277][ T1474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.910038][ T1474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.937402][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.947823][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.957143][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.972141][ T4194] device veth0_vlan entered promiscuous mode [ 71.046259][ T4194] device veth1_vlan entered promiscuous mode [ 71.131094][ T1474] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.139110][ T1474] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.150660][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.158694][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.172128][ T4194] device veth0_macvtap entered promiscuous mode [ 71.196505][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.207040][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.226796][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.237779][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.246911][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.258234][ T4194] device veth1_macvtap entered promiscuous mode [ 71.311686][ T1474] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.324748][ T1474] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.346061][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.357400][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.368109][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.384976][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.400730][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.407296][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.415481][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.426298][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.438430][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.449753][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.461621][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.476016][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.485165][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.493235][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.502132][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.522637][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.525589][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.537626][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.553524][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.565932][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.568208][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.576998][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.594284][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.604286][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.615215][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.627323][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.658630][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.666999][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.680611][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.692334][ T4194] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.703894][ T4194] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.713345][ T4194] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.722351][ T4194] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.817095][ T476] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.840404][ T476] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.861571][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.918793][ T1474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.952069][ T1474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.987082][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.048171][ T4283] process 'syz.0.1' launched './file0' with NULL argv: empty string added [ 72.069819][ T1474] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.098099][ T1474] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.162620][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.174765][ T1474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.224574][ T1474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.251770][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.098514][ T4235] Bluetooth: hci1: command 0x0419 tx timeout [ 73.104719][ T4235] Bluetooth: hci3: command 0x0419 tx timeout [ 73.111194][ T4235] Bluetooth: hci0: command 0x0419 tx timeout [ 73.117271][ T4235] Bluetooth: hci2: command 0x0419 tx timeout [ 73.123792][ T4235] Bluetooth: hci4: command 0x0419 tx timeout [ 73.183215][ T4289] loop4: detected capacity change from 0 to 7 [ 73.235417][ C1] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 73.246630][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 73.260016][ C1] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 73.270988][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 73.292610][ C1] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 73.303583][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 73.313336][ C1] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 73.324308][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 73.402889][ T4299] netlink: 72 bytes leftover after parsing attributes in process `syz.1.10'. [ 73.435813][ T4293] loop_set_block_size: loop4 (Cj̖P= ) has still dirty pages (nrpages=1) [ 73.497540][ C0] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 73.508552][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 73.522453][ T4302] loop3: detected capacity change from 0 to 4096 [ 73.550836][ C0] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 73.562063][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 73.575955][ C1] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 73.587086][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 73.595245][ T4264] ldm_validate_partition_table(): Disk read failed. [ 73.613742][ T4306] loop0: detected capacity change from 0 to 256 [ 73.630264][ C1] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 73.641217][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 73.653254][ C0] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 73.664345][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 73.674051][ C0] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 73.685061][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 73.708708][ T4264] Dev loop4: unable to read RDB block 0 [ 73.727544][ T4264] loop4: unable to read partition table [ 73.747110][ T4264] loop4: partition table beyond EOD, truncated [ 73.787647][ T4306] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x28ba01bf, utbl_chksum : 0xe619d30d) [ 73.805094][ T4289] ldm_validate_partition_table(): Disk read failed. [ 73.826996][ T4302] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 73.860670][ T4289] Dev loop4: unable to read RDB block 0 [ 73.890674][ T4289] loop4: unable to read partition table [ 73.924900][ T4289] loop4: partition table beyond EOD, truncated [ 73.932050][ T4289] loop_reread_partitions: partition scan of loop4 (Cj̖P= ) failed (rc=-5) [ 74.133640][ T4320] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 74.414399][ T4327] loop4: detected capacity change from 0 to 512 [ 74.503064][ T4327] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 74.621388][ T4327] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 74.645871][ T4327] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 74.654335][ T4327] System zones: 1-12 [ 74.670451][ T4327] EXT4-fs error (device loop4): ext4_orphan_get:1432: comm syz.4.17: bad orphan inode 16 [ 74.728972][ T4327] ext4_test_bit(bit=15, block=4) = 0 [ 74.995352][ T4263] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 75.037868][ T4327] EXT4-fs (loop4): 1 orphan inode deleted [ 75.132053][ T4327] EXT4-fs (loop4): mounted filesystem without journal. Opts: noinit_itable,max_dir_size_kb=0x000000000000004a,resgid=0x0000000000000000,inode_readahead_blks=0x0000000000000008,acl,stripe=0x0000000000000002,max_batch_time=0x0000000000008e6e,debug,auto_da_alloc,,errors=continue. Quota mode: none. [ 75.669454][ T4263] usb 4-1: Using ep0 maxpacket: 16 [ 75.821258][ T4263] usb 4-1: config 0 has no interfaces? [ 75.827020][ T4263] usb 4-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 75.838620][ T4338] loop2: detected capacity change from 0 to 512 [ 76.065092][ T4263] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.090178][ T4338] ======================================================= [ 76.090178][ T4338] WARNING: The mand mount option has been deprecated and [ 76.090178][ T4338] and is ignored by this kernel. Remove the mand [ 76.090178][ T4338] option from the mount to silence this warning. [ 76.090178][ T4338] ======================================================= [ 76.099327][ C0] sched: RT throttling activated [ 77.111344][ T4338] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 77.124584][ T4263] usb 4-1: config 0 descriptor?? [ 77.474250][ T4263] usb 4-1: USB disconnect, device number 2 [ 77.564575][ T26] audit: type=1800 audit(1783083319.275:2): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.19" name="file1" dev="loop2" ino=1048591 res=0 errno=0 [ 78.105040][ T4360] netlink: 277 bytes leftover after parsing attributes in process `syz.4.27'. [ 78.367830][ T4367] ODEBUG: Out of memory. ODEBUG disabled [ 79.864446][ T4376] loop1: detected capacity change from 0 to 512 [ 79.884263][ T4375] loop2: detected capacity change from 0 to 512 [ 79.929174][ T4376] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 80.017135][ T4375] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 80.045944][ T4375] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 80.074753][ T4376] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 80.088134][ T4376] System zones: 1-12 [ 80.097378][ T4375] EXT4-fs (loop2): 1 truncate cleaned up [ 80.103894][ T4376] EXT4-fs error (device loop1): ext4_orphan_get:1432: comm syz.1.32: bad orphan inode 16 [ 80.114980][ T4376] ext4_test_bit(bit=15, block=4) = 0 [ 80.120812][ T4375] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,usrjquota="data=ordered,noload,noinit_itable,grpjquota="init_itable,jqfmt=vfsold,noblock_validity,,errors=continue. Quota mode: writeback. [ 80.132575][ T4376] EXT4-fs (loop1): 1 orphan inode deleted [ 80.299338][ T4376] EXT4-fs (loop1): mounted filesystem without journal. Opts: noinit_itable,max_dir_size_kb=0x000000000000004a,resgid=0x0000000000000000,inode_readahead_blks=0x0000000000000008,acl,stripe=0x0000000000000002,max_batch_time=0x0000000000008e6e,debug,auto_da_alloc,,errors=continue. Quota mode: none. [ 81.101310][ T7] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 82.482334][ T4393] fuse: Unknown parameter 'context' [ 83.444991][ T4394] loop1: detected capacity change from 0 to 512 [ 83.556833][ T4394] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 83.989541][ T26] audit: type=1800 audit(1783083325.665:3): pid=4400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.37" name="file1" dev="loop1" ino=1048592 res=0 errno=0 [ 86.335935][ T4420] loop2: detected capacity change from 0 to 512 [ 86.415605][ T4420] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 86.433257][ T4422] loop4: detected capacity change from 0 to 256 [ 86.463387][ T4420] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 86.478254][ T4420] System zones: 1-12 [ 86.490099][ T4422] exfat: Deprecated parameter 'namecase' [ 86.516767][ T4420] EXT4-fs error (device loop2): ext4_orphan_get:1432: comm syz.2.44: bad orphan inode 16 [ 86.530850][ T4420] ext4_test_bit(bit=15, block=4) = 0 [ 86.536332][ T4420] EXT4-fs (loop2): 1 orphan inode deleted [ 86.542217][ T4420] EXT4-fs (loop2): mounted filesystem without journal. Opts: noinit_itable,max_dir_size_kb=0x000000000000004a,resgid=0x0000000000000000,inode_readahead_blks=0x0000000000000008,acl,stripe=0x0000000000000002,max_batch_time=0x0000000000008e6e,debug,auto_da_alloc,,errors=continue. Quota mode: none. [ 86.619364][ T4422] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36df086c, utbl_chksum : 0xe619d30d) [ 86.742345][ T13] cfg80211: failed to load regulatory.db [ 87.881069][ T4431] sctp: [Deprecated]: syz.0.46 (pid 4431) Use of int in max_burst socket option deprecated. [ 87.881069][ T4431] Use struct sctp_assoc_value instead [ 87.972011][ T4428] Zero length message leads to an empty skb [ 88.044684][ T4436] ieee802154 phy0 wpan0: encryption failed: -22 [ 88.741247][ T4447] loop1: detected capacity change from 0 to 512 [ 88.750316][ T4445] loop0: detected capacity change from 0 to 512 [ 88.922073][ T4445] EXT4-fs (loop0): Ignoring removed orlov option [ 88.928692][ T4447] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 88.939442][ T4445] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 89.015767][ T4449] fuse: Unknown parameter 'context' [ 89.661958][ T4445] EXT4-fs error (device loop0): ext4_iget_extra_inode:4573: inode #15: comm syz.0.52: corrupted in-inode xattr [ 89.674319][ T4447] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.53: inode #1: comm syz.1.53: iget: illegal inode # [ 89.757414][ T4445] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.52: couldn't read orphan inode 15 (err -117) [ 89.782808][ T4447] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.53: error while reading EA inode 1 err=-117 [ 89.924984][ T4445] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000004000000,orlov,noload,delalloc,mblk_io_submit,commit=0x0000000000000000,noinit_itable,nogrpid,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 89.966083][ T4447] EXT4-fs (loop1): 1 orphan inode deleted [ 89.997046][ T4447] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,stripe=0x0000000000000008,nombcache,noinit_itable,nomblk_io_submit,minixdf,nobarrier,inode_readahead_blks=0x0000000000000000,usrjquota=,block_validity,noblock_validity,noquota,,errors=continue. Quota mode: none. [ 90.028885][ T4457] loop2: detected capacity change from 0 to 256 [ 91.418571][ T4465] loop4: detected capacity change from 0 to 512 [ 91.464590][ T4464] loop0: detected capacity change from 0 to 512 [ 91.527290][ T4465] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 91.665213][ T4465] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 91.712520][ T4464] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 91.739435][ T4464] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.751189][ T4465] System zones: 1-12 [ 91.756883][ T4465] EXT4-fs error (device loop4): ext4_orphan_get:1432: comm syz.4.57: bad orphan inode 16 [ 91.779884][ T4472] usb usb5: usbfs: process 4472 (syz.1.59) did not claim interface 0 before use [ 91.843289][ T4465] ext4_test_bit(bit=15, block=4) = 0 [ 91.848652][ T4465] EXT4-fs (loop4): 1 orphan inode deleted [ 91.884640][ T4465] EXT4-fs (loop4): mounted filesystem without journal. Opts: noinit_itable,max_dir_size_kb=0x000000000000004a,resgid=0x0000000000000000,inode_readahead_blks=0x0000000000000008,acl,stripe=0x0000000000000002,max_batch_time=0x0000000000008e6e,debug,auto_da_alloc,,errors=continue. Quota mode: none. [ 92.057739][ T4475] loop1: detected capacity change from 0 to 4096 [ 92.204840][ T4475] EXT4-fs (loop1): inline encryption not supported [ 92.805918][ T4486] loop3: detected capacity change from 0 to 512 [ 92.944843][ T4475] EXT4-fs (loop1): Test dummy encryption mode enabled [ 92.977879][ T4486] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 93.037866][ T4475] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 93.052980][ T4496] loop4: detected capacity change from 0 to 256 [ 93.143609][ T4475] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 93.159708][ T4475] System zones: 0-5 [ 93.178365][ T4475] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,dioread_nolock,inlinecrypt,test_dummy_encryption,grpjquota=,auto_da_alloc,delalloc,jqfmt=vfsv0,,errors=continue. Quota mode: writeback. [ 93.328495][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 93.362800][ T26] audit: type=1800 audit(1783083335.075:4): pid=4503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.63" name="file1" dev="loop3" ino=1048594 res=0 errno=0 [ 93.484417][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 93.541935][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 93.597793][ T4475] fs-verity: sha512 using implementation "sha512-avx2" [ 93.979577][ T4515] fuse: Unknown parameter 'context' [ 96.336887][ T4532] binder: BINDER_SET_CONTEXT_MGR already set [ 96.393392][ T4532] binder: 4530:4532 ioctl 4018620d 200000000040 returned -16 [ 97.697638][ T4552] loop1: detected capacity change from 0 to 512 [ 97.708359][ T4549] loop3: detected capacity change from 0 to 512 [ 97.788699][ T4549] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 98.062193][ T26] audit: type=1800 audit(1783083339.775:5): pid=4549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.80" name="file1" dev="loop3" ino=1048595 res=0 errno=0 [ 98.183852][ T4552] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 98.252428][ T4552] ext4 filesystem being mounted at /11/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.395458][ T4566] loop4: detected capacity change from 0 to 512 [ 98.458787][ T4566] EXT4-fs (loop4): Ignoring removed orlov option [ 98.539445][ T4566] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 98.617500][ T4569] fuse: Unknown parameter 'context' [ 98.859802][ T4566] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.85: bg 0: block 5: invalid block bitmap [ 99.241798][ T4566] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 99.283246][ T4566] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.85: invalid indirect mapped block 3 (level 2) [ 99.348039][ T4566] EXT4-fs (loop4): 2 truncates cleaned up [ 99.388003][ T4566] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000000067,dioread_nolock,orlov,,errors=continue. Quota mode: writeback. [ 99.619216][ T4566] EXT4-fs (loop4): shut down requested (2) [ 102.639756][ T4580] xt_l2tp: missing protocol rule (udp|l2tpip) [ 102.950103][ T4593] loop3: detected capacity change from 0 to 512 [ 103.048166][ T4593] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 103.079435][ T4593] ext4 filesystem being mounted at /12/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.935562][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 106.982257][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 107.015502][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 107.902334][ T4636] loop2: detected capacity change from 0 to 512 [ 108.020106][ T4636] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 108.031980][ T4636] ext4 filesystem being mounted at /29/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.154598][ T4649] loop0: detected capacity change from 0 to 512 [ 109.238795][ T4649] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 109.371126][ T26] audit: type=1800 audit(1783083351.065:6): pid=4649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.111" name="file1" dev="loop0" ino=1048596 res=0 errno=0 [ 109.456336][ T4479] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.708083][ T4479] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.854717][ T4479] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.935231][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 109.986724][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 110.054061][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 110.086765][ T4655] device bridge_slave_0 left promiscuous mode [ 110.106274][ T4655] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.167983][ T4655] device bridge_slave_1 left promiscuous mode [ 110.186932][ T4655] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.219491][ T4655] bond0: (slave bond_slave_0): Releasing backup interface [ 110.312600][ T4655] bond0: (slave bond_slave_1): Releasing backup interface [ 110.397179][ T4655] team0: Port device team_slave_0 removed [ 110.436708][ T4655] team0: Port device team_slave_1 removed [ 110.458119][ T4655] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.474703][ T4655] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.489555][ T4655] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.497171][ T4655] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.557179][ T4479] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.590726][ T4655] syz.0.114 (4655) used greatest stack depth: 19664 bytes left [ 110.644069][ T4668] loop3: detected capacity change from 0 to 512 [ 110.744554][ T4668] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 110.759480][ T4668] ext4 filesystem being mounted at /syzcgroup/unified/syz3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 111.009421][ T4677] ERROR: Domain ' /sbin/init /etc/init.d/rcS /etc/init.d/S50sshd /sbin/start-stop-daemon /usr/sbin/sshd /usr/libexec/sshd-session /bin/sh /root/ci2-linux-5-15-kasan/syz-executor /root/ci2-linux-5-15-kasan/syz-executor /newroot/syzcgroup/unified/syz3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 111.186481][ T4674] device syzkaller1 entered promiscuous mode [ 111.685896][ T4686] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 111.726944][ T4686] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 111.748357][ T4688] netlink: 16 bytes leftover after parsing attributes in process `syz.0.124'. [ 111.786273][ T4686] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 111.803977][ T4691] nftables ruleset with unbound chain [ 111.890987][ T4663] chnl_net:caif_netlink_parms(): no params data found [ 111.987549][ T4698] loop0: detected capacity change from 0 to 512 [ 112.096979][ T4698] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2759: inode #11: comm syz.0.125: corrupted xattr block 95 [ 112.145214][ T4698] EXT4-fs (loop0): Remounting filesystem read-only [ 112.160485][ T4698] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2809: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 112.260321][ T4698] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.125: bg 0: block 7: invalid block bitmap [ 112.322757][ T4698] EXT4-fs (loop0): Remounting filesystem read-only [ 112.334587][ T4698] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 112.353562][ T4698] EXT4-fs (loop0): Remounting filesystem read-only [ 112.511939][ T4698] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2925: inode #11: comm syz.0.125: corrupted xattr block 95 [ 112.794823][ T4698] EXT4-fs (loop0): Remounting filesystem read-only [ 113.054259][ T4698] EXT4-fs warning (device loop0): ext4_evict_inode:304: xattr delete (err -117) [ 113.115281][ T4698] EXT4-fs (loop0): 1 orphan inode deleted [ 113.127020][ T4663] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.159351][ T4698] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrjquota=,errors=remount-ro,. Quota mode: none. [ 113.184419][ T4663] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.269713][ T4663] device bridge_slave_0 entered promiscuous mode [ 113.310172][ T4663] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.381292][ T4663] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.455818][ T4663] device bridge_slave_1 entered promiscuous mode [ 113.600767][ T4663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.704736][ T4663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.745637][ T4721] capability: warning: `syz.1.131' uses 32-bit capabilities (legacy support in use) [ 113.875876][ T4663] team0: Port device team_slave_0 added [ 113.997947][ T4663] team0: Port device team_slave_1 added [ 114.079238][ T4235] Bluetooth: hci2: command 0x0409 tx timeout [ 114.091802][ T4727] loop1: detected capacity change from 0 to 512 [ 114.184348][ T4663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.223642][ T4663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.349078][ T4663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.370963][ T4663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.381144][ T4727] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 114.388325][ T4663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.392558][ T4727] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.472754][ T4663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.366104][ T4744] loop1: detected capacity change from 0 to 512 [ 115.414492][ T4663] device hsr_slave_0 entered promiscuous mode [ 115.509798][ T4663] device hsr_slave_1 entered promiscuous mode [ 115.536486][ T4744] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 115.679705][ T4663] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 115.687366][ T4663] Cannot create hsr debugfs directory [ 115.731518][ T4744] EXT4-fs (loop1): 1 truncate cleaned up [ 115.808375][ T4744] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,noquota,discard,max_batch_time=0x0000000000000003,data_err=ignore,noblock_validity,,errors=continue. Quota mode: none. [ 115.843922][ T4752] loop2: detected capacity change from 0 to 512 [ 115.943651][ T4752] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 116.093465][ T4744] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.136: invalid indirect mapped block 4294901760 (level 0) [ 116.107621][ T4752] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.138: inode #1: comm syz.2.138: iget: illegal inode # [ 116.120911][ T4235] Bluetooth: hci2: command 0x041b tx timeout [ 116.127122][ T4752] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.138: error while reading EA inode 1 err=-117 [ 116.163060][ T4744] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.136: invalid indirect mapped block 2185560079 (level 0) [ 116.405776][ T4752] EXT4-fs (loop2): 1 orphan inode deleted [ 116.871708][ T4752] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv0,stripe=0x0000000000000008,nombcache,noinit_itable,nomblk_io_submit,minixdf,nobarrier,inode_readahead_blks=0x0000000000000000,usrjquota=,block_validity,noblock_validity,noquota,,errors=continue. Quota mode: none. [ 116.900323][ T4744] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #13: comm syz.1.136: corrupted inode contents [ 117.119779][ T4744] EXT4-fs error (device loop1): ext4_dirty_inode:6077: inode #13: comm syz.1.136: mark_inode_dirty error [ 118.104449][ T4744] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.136: invalid indirect mapped block 65535 (level 2) [ 118.329850][ T4744] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #13: comm syz.1.136: corrupted inode contents [ 118.509303][ T4744] EXT4-fs error (device loop1): ext4_truncate:4286: inode #13: comm syz.1.136: mark_inode_dirty error [ 118.613227][ T4744] EXT4-fs error (device loop1): ext4_evict_inode:295: comm syz.1.136: couldn't truncate inode 13 (err -117) [ 118.956520][ T4781] loop1: detected capacity change from 0 to 512 [ 119.090838][ T4781] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 119.139525][ T7] Bluetooth: hci2: command 0x040f tx timeout [ 119.215852][ T4781] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 119.232723][ T4781] System zones: 1-12 [ 119.498546][ T4781] EXT4-fs error (device loop1): ext4_orphan_get:1432: comm syz.1.143: bad orphan inode 16 [ 119.748347][ T4781] ext4_test_bit(bit=15, block=4) = 0 [ 119.887545][ T4781] EXT4-fs (loop1): 1 orphan inode deleted [ 119.909283][ T4781] EXT4-fs (loop1): mounted filesystem without journal. Opts: noinit_itable,max_dir_size_kb=0x000000000000004a,resgid=0x0000000000000000,inode_readahead_blks=0x0000000000000008,acl,stripe=0x0000000000000002,max_batch_time=0x0000000000008e6e,debug,auto_da_alloc,,errors=continue. Quota mode: none. [ 121.756093][ T1110] Bluetooth: hci2: command 0x0419 tx timeout [ 121.814869][ T4804] loop2: detected capacity change from 0 to 512 [ 121.987802][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 121.998768][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 122.006858][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 122.139391][ T4663] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 122.208929][ T4663] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 122.282320][ T4663] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 122.302532][ T4818] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 122.330104][ T4663] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 122.851065][ T4663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.866074][ T4829] loop0: detected capacity change from 0 to 512 [ 122.983595][ T4663] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.129553][ T4804] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 123.201371][ T4804] ext4 filesystem being mounted at /36/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.215676][ T4479] device hsr_slave_0 left promiscuous mode [ 123.278772][ T4479] device hsr_slave_1 left promiscuous mode [ 123.374035][ T4829] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 123.412098][ T4479] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.437758][ T4479] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.470199][ T4479] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.498693][ T4829] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 123.508772][ T4829] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.155: Failed to acquire dquot type 1 [ 123.523320][ T4829] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 123.545600][ T4829] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 123.551145][ T4479] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.909771][ T4829] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.155: Failed to acquire dquot type 1 [ 123.931544][ T4479] device bridge_slave_1 left promiscuous mode [ 123.939214][ T4479] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.081236][ T4479] device bridge_slave_0 left promiscuous mode [ 124.137789][ T4479] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.176939][ T4829] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.155: bg 0: block 248: padding at end of block bitmap is not set [ 124.314549][ T4479] device veth1_macvtap left promiscuous mode [ 124.370076][ T4479] device veth0_macvtap left promiscuous mode [ 124.397429][ T4829] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 124.417244][ T4479] device veth1_vlan left promiscuous mode [ 124.425538][ T4858] binder: BINDER_SET_CONTEXT_MGR already set [ 124.442517][ T4479] device veth0_vlan left promiscuous mode [ 124.457810][ T4858] binder: 4857:4858 ioctl 4018620d 200000000040 returned -16 [ 124.503618][ T4829] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 124.632276][ T4829] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 124.726443][ T4829] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.155: Failed to acquire dquot type 1 [ 124.814682][ T4829] EXT4-fs (loop0): 1 orphan inode deleted [ 124.864946][ T4829] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable,grpid,quota,,errors=continue. Quota mode: writeback. [ 124.963660][ T4829] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.606858][ T4479] team0 (unregistering): Port device team_slave_1 removed [ 125.647255][ T4479] team0 (unregistering): Port device team_slave_0 removed [ 126.859978][ T4479] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.914412][ T4875] loop2: detected capacity change from 0 to 128 [ 126.932439][ T4875] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 126.969084][ T4479] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.034091][ T4875] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 127.129929][ T4479] bond0 (unregistering): Released all slaves [ 127.237717][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 127.253486][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 127.273825][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 127.282963][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 127.292045][ T4292] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.299167][ T4292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.307616][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 127.318746][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 127.327425][ T4292] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.334567][ T4292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.344339][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 127.353947][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 127.363215][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 127.387797][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 127.411249][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 127.426853][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 127.437462][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 127.454597][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 127.468398][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 127.476959][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 127.522470][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 127.578347][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 127.646668][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 127.715547][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 127.742679][ T4888] loop2: detected capacity change from 0 to 512 [ 127.751420][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 127.800716][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 127.830258][ T4886] loop1: detected capacity change from 0 to 4096 [ 127.892717][ T4886] EXT4-fs (loop1): inline encryption not supported [ 127.933303][ T4888] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 127.957851][ T4886] EXT4-fs (loop1): Test dummy encryption mode enabled [ 128.009799][ T4888] ext4 filesystem being mounted at /42/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.021480][ T4898] binder: BINDER_SET_CONTEXT_MGR already set [ 128.027524][ T4898] binder: 4895:4898 ioctl 4018620d 200000000040 returned -16 [ 128.036649][ T4886] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 128.217907][ T4886] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 128.261894][ T4886] System zones: 0-5 [ 128.300243][ T4886] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,dioread_nolock,inlinecrypt,test_dummy_encryption,grpjquota=,auto_da_alloc,delalloc,jqfmt=vfsv0,,errors=continue. Quota mode: writeback. [ 128.349458][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 128.356967][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 128.656727][ T4663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.646594][ T4923] loop1: detected capacity change from 0 to 512 [ 130.947660][ T4923] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 130.959568][ T4923] ext4 filesystem being mounted at /24/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.081265][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.087605][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.656584][ T4958] loop1: detected capacity change from 0 to 512 [ 134.788651][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 134.834304][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 134.932031][ T4958] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 134.968327][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 134.982880][ T4958] ext4 filesystem being mounted at /26/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.005399][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 135.061627][ T4663] device veth0_vlan entered promiscuous mode [ 135.083516][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 135.100297][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 135.113820][ T4663] device veth1_vlan entered promiscuous mode [ 135.145455][ T4663] device veth0_macvtap entered promiscuous mode [ 135.158075][ T4663] device veth1_macvtap entered promiscuous mode [ 135.170062][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 135.178893][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 135.194476][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 135.230217][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 135.257531][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 135.481302][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 135.589593][ T4663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.662472][ T4663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.819456][ T4663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.879220][ T4663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.934767][ T4663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.007260][ T4663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.060135][ T4663] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.098496][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 136.130619][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 136.232884][ T4663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.316234][ T4663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.435075][ T4663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.525997][ T4663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.747459][ T4987] loop2: detected capacity change from 0 to 4096 [ 136.759102][ T4663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.798506][ T4663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.874327][ T4663] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.195128][ T4987] EXT4-fs (loop2): inline encryption not supported [ 137.391784][ T4663] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.429561][ T4987] EXT4-fs (loop2): Test dummy encryption mode enabled [ 137.489441][ T4663] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.577714][ T4663] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.609279][ T4663] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.618281][ T4987] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 137.651420][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 137.690047][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 137.838734][ T4987] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 137.889394][ T4987] System zones: 0-5 [ 138.058231][ T4987] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,dioread_nolock,inlinecrypt,test_dummy_encryption,grpjquota=,auto_da_alloc,delalloc,jqfmt=vfsv0,,errors=continue. Quota mode: writeback. [ 139.314231][ T5006] loop1: detected capacity change from 0 to 512 [ 141.185290][ T5006] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 141.197086][ T5006] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.628021][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.861490][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.986399][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 142.346200][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.379292][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.476193][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 144.100013][ T13] Bluetooth: hci5: command 0x0409 tx timeout [ 144.870954][ T5036] loop2: detected capacity change from 0 to 512 [ 144.922866][ T5015] chnl_net:caif_netlink_parms(): no params data found [ 145.001560][ T5036] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 145.035651][ T5036] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 145.060043][ T5036] System zones: 1-12 [ 145.090557][ T5036] EXT4-fs error (device loop2): ext4_orphan_get:1432: comm syz.2.201: bad orphan inode 16 [ 145.101304][ T5036] ext4_test_bit(bit=15, block=4) = 0 [ 145.106630][ T5036] EXT4-fs (loop2): 1 orphan inode deleted [ 145.112535][ T5036] EXT4-fs (loop2): mounted filesystem without journal. Opts: noinit_itable,max_dir_size_kb=0x000000000000004a,resgid=0x0000000000000000,inode_readahead_blks=0x0000000000000008,acl,stripe=0x0000000000000002,max_batch_time=0x0000000000008e6e,debug,auto_da_alloc,,errors=continue. Quota mode: none. [ 145.197037][ T5048] futex_wake_op: syz.4.204 tries to shift op by 144; fix this program [ 145.926496][ T5059] sctp: [Deprecated]: syz.1.206 (pid 5059) Use of struct sctp_assoc_value in delayed_ack socket option. [ 145.926496][ T5059] Use struct sctp_sack_info instead [ 146.000943][ T5015] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.180285][ T4266] Bluetooth: hci5: command 0x041b tx timeout [ 146.198636][ T5015] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.248188][ T5015] device bridge_slave_0 entered promiscuous mode [ 146.397169][ T5015] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.431479][ T5015] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.439713][ T5015] device bridge_slave_1 entered promiscuous mode [ 146.464227][ T5015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.476944][ T5015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.570415][ T5067] loop1: detected capacity change from 0 to 512 [ 147.118978][ T5067] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 147.133060][ T5067] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.655047][ T5015] team0: Port device team_slave_0 added [ 147.936467][ T5015] team0: Port device team_slave_1 added [ 148.950357][ T5015] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.986002][ T5079] loop2: detected capacity change from 0 to 736 [ 149.015218][ T5015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.082014][ T1110] Bluetooth: hci5: command 0x040f tx timeout [ 149.089546][ T5015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.101785][ T5015] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.108751][ T5015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.252183][ T5015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.636511][ T5015] device hsr_slave_0 entered promiscuous mode [ 149.667996][ T5015] device hsr_slave_1 entered promiscuous mode [ 149.680498][ T5015] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 149.688107][ T5015] Cannot create hsr debugfs directory [ 150.381340][ T5015] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 150.480866][ T5015] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 150.508152][ T5015] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 150.544977][ T5015] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 150.647719][ T4479] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.798547][ T4479] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.896682][ T4479] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.982298][ T5015] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.025395][ T4479] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.138224][ T5015] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.140272][ T4266] Bluetooth: hci5: command 0x0419 tx timeout [ 151.184578][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 151.220073][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 151.268871][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 151.288953][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 151.334864][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.342130][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.376886][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 151.388538][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 151.645478][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.652631][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.329398][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 152.367582][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 152.395086][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 152.549043][ T5117] loop1: detected capacity change from 0 to 1764 [ 152.629463][ T5117] attempt to access beyond end of device [ 152.629463][ T5117] loop1: rw=0, want=7180648576, limit=1764 [ 152.665560][ T5117] buffer_io_error: 25 callbacks suppressed [ 152.665577][ T5117] Buffer I/O error on dev loop1, logical block 1795162143, async page read [ 152.691142][ T5117] attempt to access beyond end of device [ 152.691142][ T5117] loop1: rw=0, want=7180648576, limit=1764 [ 152.709273][ T5117] Buffer I/O error on dev loop1, logical block 1795162143, async page read [ 152.718377][ T26] audit: type=1800 audit(1783083394.425:7): pid=5117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.225" name="file0" dev="loop1" ino=1923 res=0 errno=0 [ 153.101796][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 153.112342][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 153.121333][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 153.611952][ T5130] loop1: detected capacity change from 0 to 512 [ 153.719637][ T5136] futex_wake_op: syz.3.229 tries to shift op by 144; fix this program [ 153.739473][ T5130] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 153.750759][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 153.762014][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 153.824587][ T5130] ext4 filesystem being mounted at /39/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.955302][ T5133] loop4: detected capacity change from 0 to 512 [ 153.970674][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 153.979546][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 154.066569][ T5015] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 154.144689][ T5015] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 154.190516][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 154.226624][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 154.300123][ T5133] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 154.310325][ T5133] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 154.320364][ T5133] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.231: Failed to acquire dquot type 1 [ 154.332934][ T5133] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 154.343193][ T5133] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 154.353312][ T5133] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.231: Failed to acquire dquot type 1 [ 154.368168][ T5133] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.231: bg 0: block 248: padding at end of block bitmap is not set [ 154.383720][ T5133] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 154.393416][ T5133] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 154.487905][ T5133] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 154.500479][ T5133] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.231: Failed to acquire dquot type 1 [ 154.514367][ T5133] EXT4-fs (loop4): 1 orphan inode deleted [ 154.520442][ T5133] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,grpid,quota,,errors=continue. Quota mode: writeback. [ 154.533935][ T5133] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.555972][ T5133] EXT4-fs error (device loop4): ext4_lookup:1862: inode #2: comm syz.4.231: deleted inode referenced: 12 [ 154.714203][ T5144] device syzkaller1 entered promiscuous mode [ 156.248695][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 156.271161][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 156.307398][ T5015] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.389087][ T5189] syz.1.240 uses obsolete (PF_INET,SOCK_PACKET) [ 159.104780][ T5212] program syz.4.246 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 159.166530][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 159.191093][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 159.312391][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 159.331346][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 159.362673][ T5015] device veth0_vlan entered promiscuous mode [ 159.424597][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 159.451911][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 159.476533][ T5015] device veth1_vlan entered promiscuous mode [ 162.614298][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 162.807521][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 162.847855][ T5235] loop2: detected capacity change from 0 to 512 [ 162.861763][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 162.892998][ T5015] device veth0_macvtap entered promiscuous mode [ 162.991784][ T4479] device hsr_slave_0 left promiscuous mode [ 163.028672][ T5248] loop4: detected capacity change from 0 to 1024 [ 163.039841][ T5235] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 163.060507][ T4479] device hsr_slave_1 left promiscuous mode [ 163.096791][ T5235] ext4 filesystem being mounted at /64/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.120325][ T4479] device veth1_macvtap left promiscuous mode [ 163.126406][ T4479] device veth0_macvtap left promiscuous mode [ 163.164345][ T4479] device veth1_vlan left promiscuous mode [ 163.199361][ T4479] device veth0_vlan left promiscuous mode [ 163.261310][ T5248] EXT4-fs (loop4): invalid inodes per group: 2147418144 [ 163.261310][ T5248] [ 165.096711][ T4479] bond0 (unregistering): Released all slaves [ 165.221161][ T5015] device veth1_macvtap entered promiscuous mode [ 165.253588][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 165.272157][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 165.442175][ T5015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.587901][ T5278] futex_wake_op: syz.2.258 tries to shift op by 144; fix this program [ 165.785916][ T5015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.079323][ T5015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.156018][ T5015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.208533][ T5015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.219815][ T5015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.229818][ T5015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.240444][ T5015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.252432][ T5015] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.264486][ T5015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.282432][ T5015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.302578][ T5015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.336444][ T5015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.377050][ T5015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.409860][ T5015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.446649][ T5015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.476567][ T5015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.510665][ T5015] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.527081][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 166.546223][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 166.606824][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 166.650017][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 166.700836][ T5015] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.887558][ T5015] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.116664][ T5015] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.322080][ T5015] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.950242][ T4334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.958114][ T4334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.480988][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 168.859546][ T1474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.867417][ T1474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.905509][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 170.056981][ T5331] loop1: detected capacity change from 0 to 512 [ 170.347692][ T5331] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 170.709215][ T5331] ext4 filesystem being mounted at /46/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.983697][ T5381] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 175.053050][ T5381] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 175.090478][ T5392] futex_wake_op: syz.2.280 tries to shift op by 144; fix this program [ 175.119548][ T5381] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 176.253128][ T5405] loop4: detected capacity change from 0 to 512 [ 177.076839][ T5405] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 177.305972][ T5405] ext4 filesystem being mounted at /18/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.964814][ T5436] netlink: 8 bytes leftover after parsing attributes in process `syz.1.290'. [ 181.300965][ T5466] serio: Serial port ptm0 [ 182.466057][ T5477] fuse: Unknown parameter 'context' [ 185.464450][ T5500] loop4: detected capacity change from 0 to 512 [ 185.572752][ T5500] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 185.635873][ T5500] ext4 filesystem being mounted at /25/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.735535][ T5529] loop4: detected capacity change from 0 to 512 [ 189.812702][ T5531] loop5: detected capacity change from 0 to 512 [ 189.873252][ T5531] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 189.889768][ T5529] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 189.937431][ T5529] EXT4-fs (loop4): 1 truncate cleaned up [ 189.983610][ T5529] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,nolazytime,discard,max_batch_time=0x0000000000000003,data_err=ignore,noblock_validity,,errors=continue. Quota mode: none. [ 191.279798][ T5558] fuse: Unknown parameter 'context' [ 192.196944][ T5561] loop4: detected capacity change from 0 to 512 [ 192.396672][ T5561] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 192.439431][ T5561] ext4 filesystem being mounted at /30/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.079234][ T7] Bluetooth: hci0: command 0x0406 tx timeout [ 193.091925][ T7] Bluetooth: hci4: command 0x0406 tx timeout [ 193.352053][ T7] Bluetooth: hci1: command 0x0406 tx timeout [ 194.319681][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.326087][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.710950][ T5628] loop2: detected capacity change from 0 to 512 [ 195.884535][ T5628] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 195.895805][ T5628] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.167063][ T5644] loop1: detected capacity change from 0 to 512 [ 196.309335][ T5647] loop4: detected capacity change from 0 to 512 [ 196.401272][ T5647] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 196.452725][ T5644] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 196.464583][ T5647] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 196.509483][ T5644] ext4 filesystem being mounted at /60/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.533933][ T5647] System zones: 1-12 [ 196.540929][ T5647] EXT4-fs error (device loop4): ext4_orphan_get:1432: comm syz.4.331: bad orphan inode 16 [ 196.629701][ T5647] ext4_test_bit(bit=15, block=4) = 0 [ 196.675923][ T5647] EXT4-fs (loop4): 1 orphan inode deleted [ 196.716505][ T5647] EXT4-fs (loop4): mounted filesystem without journal. Opts: noinit_itable,max_dir_size_kb=0x000000000000004a,resgid=0x0000000000000000,inode_readahead_blks=0x0000000000000008,acl,stripe=0x0000000000000002,max_batch_time=0x0000000000008e6e,debug,auto_da_alloc,,errors=continue. Quota mode: none. [ 199.417748][ T5697] overlayfs: failed to resolve './file0': -2 [ 199.885137][ T5710] loop4: detected capacity change from 0 to 512 [ 200.052304][ T5710] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 200.086052][ T5710] ext4 filesystem being mounted at /43/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.260494][ T5738] loop4: detected capacity change from 0 to 128 [ 201.753395][ T5755] loop4: detected capacity change from 0 to 512 [ 201.913077][ T5755] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,,errors=continue. Quota mode: writeback. [ 201.972622][ T5755] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.369036][ T5771] loop4: detected capacity change from 0 to 512 [ 203.607611][ T5771] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 204.351008][ T5771] ext4 filesystem being mounted at /48/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.849912][ T5788] netlink: 'syz.5.364': attribute type 5 has an invalid length. [ 204.935431][ T5788] netlink: 4 bytes leftover after parsing attributes in process `syz.5.364'. [ 205.211594][ T5797] binder_alloc: 5792: pid 5792 spamming oneway? 2 buffers allocated for a total size of 5120 [ 205.329262][ T5797] binder_alloc: 5792: pid 5792 spamming oneway? 3 buffers allocated for a total size of 5184 [ 206.734139][ T5844] loop2: detected capacity change from 0 to 512 [ 206.850863][ T5844] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 206.926688][ T5844] ext4 filesystem being mounted at /75/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.589428][ T5862] loop2: detected capacity change from 0 to 512 [ 208.714021][ T5862] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 208.829360][ T5862] ext4 filesystem being mounted at /78/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.097419][ T5882] loop4: detected capacity change from 0 to 1024 [ 210.214367][ T5885] binder_alloc: 5884: pid 5884 spamming oneway? 2 buffers allocated for a total size of 5120 [ 210.335299][ T5885] binder_alloc: 5884: pid 5884 spamming oneway? 3 buffers allocated for a total size of 5184 [ 211.613208][ T5918] loop2: detected capacity change from 0 to 512 [ 212.004209][ T5918] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 212.015835][ T5918] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.885695][ T5964] loop2: detected capacity change from 0 to 512 [ 215.916957][ T5966] binder: BINDER_SET_CONTEXT_MGR already set [ 215.964528][ T5966] binder: 5965:5966 ioctl 4018620d 200000000040 returned -16 [ 216.026979][ T5964] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 216.039390][ T5964] ext4 filesystem being mounted at /82/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.330830][ T5984] netlink: 24 bytes leftover after parsing attributes in process `syz.1.405'. [ 218.421429][ T6044] netlink: 8 bytes leftover after parsing attributes in process `syz.5.417'. [ 218.707993][ T6051] loop5: detected capacity change from 0 to 128 [ 219.025008][ T6061] program syz.5.421 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 220.015261][ T6067] ieee802154 phy0 wpan0: encryption failed: -22 [ 222.256848][ T6098] loop5: detected capacity change from 0 to 164 [ 222.416437][ T6105] netlink: 104 bytes leftover after parsing attributes in process `syz.3.434'. [ 228.030454][ T6174] binder: BINDER_SET_CONTEXT_MGR already set [ 228.036496][ T6174] binder: 6172:6174 ioctl 4018620d 200000000040 returned -16 [ 228.263508][ T6184] loop5: detected capacity change from 0 to 512 [ 229.021144][ T6184] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 229.032579][ T6184] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.094608][ T26] audit: type=1804 audit(1783083470.805:8): pid=6184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.456" name="/newroot/29/file1/file1" dev="loop5" ino=15 res=1 errno=0 [ 229.121522][ T6184] EXT4-fs error (device loop5): ext4_lookup:1858: inode #12: comm syz.5.456: iget: bad i_size value: 2533274857506816 [ 229.148892][ T26] audit: type=1804 audit(1783083470.855:9): pid=6184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.456" name="/newroot/29/file1/file1" dev="loop5" ino=15 res=1 errno=0 [ 230.345558][ T6217] ieee802154 phy0 wpan0: encryption failed: -22 [ 230.935965][ T6231] binder_alloc: 6230: pid 6230 spamming oneway? 2 buffers allocated for a total size of 5120 [ 230.947289][ T6231] binder_alloc: 6230: pid 6230 spamming oneway? 3 buffers allocated for a total size of 5184 [ 232.370994][ T6255] loop2: detected capacity change from 0 to 512 [ 232.458888][ T6257] loop5: detected capacity change from 0 to 512 [ 232.481303][ T6255] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 232.545435][ T6255] ext4 filesystem being mounted at /85/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.688670][ T6257] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 232.723865][ T6257] ext4 filesystem being mounted at /34/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.632848][ T6295] binder: BINDER_SET_CONTEXT_MGR already set [ 235.669369][ T6295] binder: 6294:6295 ioctl 4018620d 200000000040 returned -16 [ 235.763956][ T6300] loop2: detected capacity change from 0 to 512 [ 241.551694][ T6324] fuse: Unknown parameter 'context' [ 242.338512][ T6328] loop5: detected capacity change from 0 to 1024 [ 244.000214][ T6328] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 244.017033][ T6328] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 244.035545][ T26] audit: type=1800 audit(1783083485.745:10): pid=6328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.494" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 244.059805][ T6328] EXT4-fs error (device loop5): ext4_map_blocks:741: inode #15: block 3: comm syz.5.494: lblock 3 mapped to illegal pblock 3 (length 3) [ 244.083105][ T6328] EXT4-fs error (device loop5): ext4_ext_remove_space:2944: inode #15: comm syz.5.494: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 244.260164][ T6341] binder_alloc: 6340: pid 6340 spamming oneway? 2 buffers allocated for a total size of 5120 [ 244.300036][ T6341] binder_alloc: 6340: pid 6340 spamming oneway? 3 buffers allocated for a total size of 5184 [ 245.253118][ T6353] loop4: detected capacity change from 0 to 512 [ 245.473493][ T6353] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 245.484097][ T6353] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 245.494240][ T6353] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.501: Failed to acquire dquot type 1 [ 245.513257][ T6353] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 245.523832][ T6353] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 245.533943][ T6353] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.501: Failed to acquire dquot type 1 [ 245.550639][ T6353] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.501: bg 0: block 248: padding at end of block bitmap is not set [ 245.566533][ T6353] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 245.579494][ T6353] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 245.590028][ T6353] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 245.600129][ T6353] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.501: Failed to acquire dquot type 1 [ 245.620230][ T6353] EXT4-fs (loop4): 1 orphan inode deleted [ 245.626086][ T6353] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,grpid,quota,,errors=continue. Quota mode: writeback. [ 245.639850][ T6353] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.690388][ T6353] EXT4-fs error (device loop4): ext4_lookup:1862: inode #2: comm syz.4.501: deleted inode referenced: 12 [ 247.796553][ T7] Bluetooth: hci2: command 0x0406 tx timeout [ 249.194939][ T6396] loop5: detected capacity change from 0 to 512 [ 250.700738][ T6396] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 250.795917][ T6396] ext4 filesystem being mounted at /40/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.662239][ T6440] netlink: 'syz.1.529': attribute type 2 has an invalid length. [ 252.731412][ T6440] netlink: 16 bytes leftover after parsing attributes in process `syz.1.529'. [ 253.179797][ T6446] loop4: detected capacity change from 0 to 512 [ 253.271524][ T6446] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 253.470171][ T6442] sg_write: data in/out 498016/136 bytes for SCSI command 0x0-- guessing data in; [ 253.470171][ T6442] program syz.5.530 not setting count and/or reply_len properly [ 253.838463][ T6456] 9pnet: Insufficient options for proto=fd [ 254.140417][ T6461] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.180478][ T6461] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.308984][ T6465] netlink: 'syz.5.535': attribute type 16 has an invalid length. [ 254.332691][ T6465] netlink: 'syz.5.535': attribute type 17 has an invalid length. [ 254.424979][ T6465] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 254.441688][ T6465] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 254.484745][ T6465] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 254.540122][ T6478] loop2: detected capacity change from 0 to 512 [ 254.587521][ T6478] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 255.039784][ T6478] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,nouid32,mblk_io_submit,,errors=continue. Quota mode: writeback. [ 255.118990][ T6485] sctp: [Deprecated]: syz.3.545 (pid 6485) Use of struct sctp_assoc_value in delayed_ack socket option. [ 255.118990][ T6485] Use struct sctp_sack_info instead [ 255.365117][ T6478] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.597171][ T6492] loop1: detected capacity change from 0 to 2048 [ 255.711729][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.718188][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.987268][ T6505] loop5: detected capacity change from 0 to 512 [ 256.017702][ T6492] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x0000000000000001,errors=remount-ro,resgid=0x0000000000000000,barrier,quota,noblock_validity,. Quota mode: writeback. [ 256.085824][ T6492] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 256.105996][ T6492] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.546: bg 0: block 345: padding at end of block bitmap is not set [ 256.126226][ T6492] EXT4-fs (loop1): Remounting filesystem read-only [ 256.137103][ T6492] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 256.225950][ T6492] EXT4-fs (loop1): Remounting filesystem read-only [ 256.326388][ T6505] Quota error (device loop5): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 256.420943][ T6505] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 256.432451][ T6505] EXT4-fs error (device loop5): ext4_acquire_dquot:6236: comm syz.5.548: Failed to acquire dquot type 1 [ 256.525757][ T6505] Quota error (device loop5): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 256.539213][ T6521] loop4: detected capacity change from 0 to 512 [ 256.619632][ T6505] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 256.649644][ T6521] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 256.713203][ T6521] ext4 filesystem being mounted at /97/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 256.811064][ T6505] EXT4-fs error (device loop5): ext4_acquire_dquot:6236: comm syz.5.548: Failed to acquire dquot type 1 [ 256.849952][ T6529] binder_alloc: 6528: pid 6528 spamming oneway? 2 buffers allocated for a total size of 5120 [ 256.894511][ T6505] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.548: bg 0: block 248: padding at end of block bitmap is not set [ 256.927414][ T6505] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 256.939784][ T6529] binder_alloc: 6528: pid 6528 spamming oneway? 3 buffers allocated for a total size of 5184 [ 256.965887][ T6505] Quota error (device loop5): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 257.010410][ T6505] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 257.068814][ T6505] EXT4-fs error (device loop5): ext4_acquire_dquot:6236: comm syz.5.548: Failed to acquire dquot type 1 [ 257.099231][ T6505] EXT4-fs (loop5): 1 orphan inode deleted [ 257.123584][ T6505] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable,grpid,quota,,errors=continue. Quota mode: writeback. [ 257.173362][ T6505] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.373385][ T6505] EXT4-fs error (device loop5): ext4_lookup:1862: inode #2: comm syz.5.548: deleted inode referenced: 12 [ 257.691611][ T6534] loop2: detected capacity change from 0 to 8 [ 257.764061][ C0] print_req_error: 25 callbacks suppressed [ 257.764080][ C0] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 257.780957][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 257.829305][ T6535] loop1: detected capacity change from 0 to 512 [ 257.872563][ C0] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 257.883558][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 257.987226][ C0] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 257.998227][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 258.079331][ C0] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 258.090309][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 258.154167][ C0] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 258.165199][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 258.249406][ C0] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 258.260383][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 258.368414][ C0] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 258.379391][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 258.469482][ C0] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 258.480463][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 258.496662][ T6535] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 258.503243][ T4264] ldm_validate_partition_table(): Disk read failed. [ 258.523634][ T6535] EXT4-fs (loop1): mount failed [ 258.611009][ C0] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 258.622099][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 258.699471][ C0] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 258.710464][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 258.796315][ T4264] Dev loop2: unable to read RDB block 0 [ 258.806945][ T4264] loop2: unable to read partition table [ 258.853208][ T4264] loop2: partition table beyond EOD, truncated [ 258.921016][ T6534] ldm_validate_partition_table(): Disk read failed. [ 258.987149][ T6534] Dev loop2: unable to read RDB block 0 [ 259.004557][ T6534] loop2: unable to read partition table [ 259.029525][ T6534] loop2: partition table beyond EOD, truncated [ 259.035831][ T6534] loop_reread_partitions: partition scan of loop2 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 259.389007][ T6549] tmpfs: Bad value for 'mpol' [ 259.700717][ T6559] binder_alloc: 6558: pid 6558 spamming oneway? 2 buffers allocated for a total size of 5120 [ 259.749960][ T6559] binder_alloc: 6558: pid 6558 spamming oneway? 3 buffers allocated for a total size of 5184 [ 261.450259][ T6569] loop1: detected capacity change from 0 to 512 [ 261.561125][ T6569] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 261.572347][ T6569] ext4 filesystem being mounted at /127/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.234887][ T6598] binder_alloc: 6597: pid 6597 spamming oneway? 2 buffers allocated for a total size of 5120 [ 263.301196][ T6598] binder_alloc: 6597: pid 6597 spamming oneway? 3 buffers allocated for a total size of 5184 [ 264.313899][ T6621] loop5: detected capacity change from 0 to 1024 [ 264.418318][ T6621] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 264.932602][ T6637] device syzkaller0 entered promiscuous mode [ 267.828560][ T6671] loop2: detected capacity change from 0 to 1024 [ 267.873929][ T6674] loop5: detected capacity change from 0 to 512 [ 267.989717][ T6674] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 268.010388][ T6671] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 268.019468][ T13] Bluetooth: hci5: command 0x0406 tx timeout [ 268.059480][ T6674] EXT4-fs (loop5): 1 orphan inode deleted [ 268.065282][ T6674] EXT4-fs (loop5): 1 truncate cleaned up [ 268.117978][ T6674] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,usrjquota=,bsddf,nolazytime,jqfmt=vfsv0,quota,grpid,max_dir_size_kb=0x0000000000000003,. Quota mode: writeback. [ 268.281729][ T6674] EXT4-fs error (device loop5): ext4_inlinedir_to_tree:1457: inode #12: block 7: comm syz.5.610: path /52/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0 [ 268.365934][ T6674] EXT4-fs (loop5): Remounting filesystem read-only [ 268.378753][ T6686] EXT4-fs error (device loop5): ext4_inlinedir_to_tree:1457: inode #12: block 7: comm syz.5.610: path /52/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0 [ 268.430341][ T6686] EXT4-fs (loop5): Remounting filesystem read-only [ 268.839048][ T6696] loop2: detected capacity change from 0 to 512 [ 268.938882][ T6696] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 268.984273][ T6696] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 269.053781][ T6696] System zones: 1-12 [ 269.120714][ T6696] EXT4-fs error (device loop2): ext4_orphan_get:1432: comm syz.2.617: bad orphan inode 16 [ 269.184653][ T6696] ext4_test_bit(bit=15, block=4) = 0 [ 269.214935][ T6696] EXT4-fs (loop2): 1 orphan inode deleted [ 269.244978][ T6696] EXT4-fs (loop2): mounted filesystem without journal. Opts: noinit_itable,max_dir_size_kb=0x000000000000004a,resgid=0x0000000000000000,inode_readahead_blks=0x0000000000000008,acl,stripe=0x0000000000000002,max_batch_time=0x0000000000008e6e,debug,auto_da_alloc,,errors=continue. Quota mode: none. [ 270.632554][ T6713] autofs4:pid:6713:autofs_fill_super: called with bogus options [ 271.152116][ T6720] netlink: 12 bytes leftover after parsing attributes in process `syz.1.625'. [ 271.379943][ T6720] bond1: (slave macvlan1): Enslaving as an active interface with an up link [ 271.943879][ T6723] bond1 (unregistering): (slave macvlan1): Releasing backup interface [ 272.241549][ T6723] bond1 (unregistering): Released all slaves [ 272.498811][ T6735] loop5: detected capacity change from 0 to 512 [ 272.644485][ T6735] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 272.948043][ T6735] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 273.083196][ T6735] System zones: 1-12 [ 273.509609][ T6735] EXT4-fs error (device loop5): ext4_orphan_get:1432: comm syz.5.630: bad orphan inode 16 [ 273.529864][ T6735] ext4_test_bit(bit=15, block=4) = 0 [ 273.535223][ T6735] EXT4-fs (loop5): 1 orphan inode deleted [ 273.545978][ T6735] EXT4-fs (loop5): mounted filesystem without journal. Opts: noinit_itable,max_dir_size_kb=0x000000000000004a,resgid=0x0000000000000000,inode_readahead_blks=0x0000000000000008,acl,stripe=0x0000000000000002,max_batch_time=0x0000000000008e6e,debug,auto_da_alloc,,errors=continue. Quota mode: none. [ 274.477898][ T6763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.640'. [ 274.550570][ T6766] loop2: detected capacity change from 0 to 512 [ 274.572619][ T6766] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 274.598732][ T6766] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.641: inode #1: comm syz.2.641: iget: illegal inode # [ 274.616964][ T6766] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.641: error while reading EA inode 1 err=-117 [ 274.631181][ T6766] EXT4-fs (loop2): 1 orphan inode deleted [ 274.637073][ T6766] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv0,stripe=0x0000000000000008,nombcache,noinit_itable,nomblk_io_submit,minixdf,nobarrier,inode_readahead_blks=0x0000000000000000,usrjquota=,block_validity,noblock_validity,noquota,,errors=continue. Quota mode: none. [ 276.858498][ T6789] loop1: detected capacity change from 0 to 512 [ 276.893411][ T6791] loop2: detected capacity change from 0 to 1024 [ 276.904491][ T6789] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 276.930601][ T6789] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 276.938808][ T6789] System zones: 1-12 [ 276.945845][ T6789] EXT4-fs error (device loop1): ext4_orphan_get:1432: comm syz.1.648: bad orphan inode 16 [ 276.956625][ T6789] ext4_test_bit(bit=15, block=4) = 0 [ 276.962228][ T6789] EXT4-fs (loop1): 1 orphan inode deleted [ 276.977457][ T6789] EXT4-fs (loop1): mounted filesystem without journal. Opts: noinit_itable,max_dir_size_kb=0x000000000000004a,resgid=0x0000000000000000,inode_readahead_blks=0x0000000000000008,acl,stripe=0x0000000000000002,max_batch_time=0x0000000000008e6e,debug,auto_da_alloc,,errors=continue. Quota mode: none. [ 277.087422][ T6791] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 277.193819][ T6744] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 277.419262][ T6812] loop2: detected capacity change from 0 to 512 [ 277.479454][ T6812] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 277.522738][ T6812] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.656: inode #1: comm syz.2.656: iget: illegal inode # [ 277.574004][ T6814] loop4: detected capacity change from 0 to 8192 [ 277.631145][ T6812] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.656: error while reading EA inode 1 err=-117 [ 277.689515][ T6812] EXT4-fs (loop2): 1 orphan inode deleted [ 277.779459][ T6812] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv0,stripe=0x0000000000000008,nombcache,noinit_itable,nomblk_io_submit,minixdf,nobarrier,inode_readahead_blks=0x0000000000000000,usrjquota=,block_validity,noblock_validity,noquota,,errors=continue. Quota mode: none. [ 279.202388][ T6836] loop4: detected capacity change from 0 to 128 [ 279.338661][ T6841] loop1: detected capacity change from 0 to 1024 [ 279.406151][ T6844] loop5: detected capacity change from 0 to 512 [ 279.433102][ T6841] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 279.446777][ T6841] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 279.474900][ T6841] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (24168!=20869) [ 279.488640][ T6844] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 279.536123][ T6841] EXT4-fs error (device loop1): ext4_get_journal_inode:5187: comm syz.1.667: inode #4294967295: comm syz.1.667: iget: illegal inode # [ 279.640518][ T6841] EXT4-fs (loop1): no journal found [ 279.650322][ T6844] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 279.658489][ T6841] EXT4-fs (loop1): can't get journal size [ 279.673971][ T6844] System zones: 1-12 [ 279.703446][ T6844] EXT4-fs error (device loop5): ext4_orphan_get:1432: comm syz.5.668: bad orphan inode 16 [ 279.784753][ T6844] ext4_test_bit(bit=15, block=4) = 0 [ 279.834742][ T6841] EXT4-fs error (device loop1): ext4_fill_super:4872: inode #2: comm syz.1.667: iget: special inode unallocated [ 279.889951][ T6844] EXT4-fs (loop5): 1 orphan inode deleted [ 279.916947][ T6841] EXT4-fs (loop1): get root inode failed [ 279.948642][ T6844] EXT4-fs (loop5): mounted filesystem without journal. Opts: noinit_itable,max_dir_size_kb=0x000000000000004a,resgid=0x0000000000000000,inode_readahead_blks=0x0000000000000008,acl,stripe=0x0000000000000002,max_batch_time=0x0000000000008e6e,debug,auto_da_alloc,,errors=continue. Quota mode: none. [ 279.976862][ T6841] EXT4-fs (loop1): mount failed [ 280.941500][ T6886] loop5: detected capacity change from 0 to 256 [ 281.053605][ T6886] FAT-fs (loop5): Directory bread(block 64) failed [ 281.084108][ T6886] FAT-fs (loop5): Directory bread(block 65) failed [ 281.190389][ T6886] FAT-fs (loop5): Directory bread(block 66) failed [ 281.202408][ T6886] FAT-fs (loop5): Directory bread(block 67) failed [ 281.256731][ T6886] FAT-fs (loop5): Directory bread(block 68) failed [ 281.292169][ T6886] FAT-fs (loop5): Directory bread(block 69) failed [ 281.337436][ T6886] FAT-fs (loop5): Directory bread(block 70) failed [ 281.373573][ T6886] FAT-fs (loop5): Directory bread(block 71) failed [ 281.408218][ T6886] FAT-fs (loop5): Directory bread(block 72) failed [ 281.443454][ T6886] FAT-fs (loop5): Directory bread(block 73) failed [ 281.897525][ T6898] loop2: detected capacity change from 0 to 512 [ 282.046972][ T6898] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 282.310551][ T6898] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 282.461666][ T6898] System zones: 1-12 [ 282.609614][ T6898] EXT4-fs error (device loop2): ext4_orphan_get:1432: comm syz.2.686: bad orphan inode 16 [ 282.755297][ T6898] ext4_test_bit(bit=15, block=4) = 0 [ 282.787121][ T6898] EXT4-fs (loop2): 1 orphan inode deleted [ 282.820133][ T6898] EXT4-fs (loop2): mounted filesystem without journal. Opts: noinit_itable,max_dir_size_kb=0x000000000000004a,resgid=0x0000000000000000,inode_readahead_blks=0x0000000000000008,acl,stripe=0x0000000000000002,max_batch_time=0x0000000000008e6e,debug,auto_da_alloc,,errors=continue. Quota mode: none. [ 282.931868][ T6908] loop5: detected capacity change from 0 to 512 [ 283.160777][ T6908] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 283.508468][ T6919] loop2: detected capacity change from 0 to 256 [ 283.576981][ T6920] loop4: detected capacity change from 0 to 512 [ 283.615851][ T6922] loop5: detected capacity change from 0 to 512 [ 283.668912][ T6922] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 283.740613][ T6922] EXT4-fs (loop5): warning: maximal mount count reached, running e2fsck is recommended [ 283.842608][ T6922] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.694: inode #15: comm syz.5.694: iget: illegal inode # [ 283.856836][ T6925] program syz.2.695 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 283.893412][ T6920] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 283.949256][ T6922] EXT4-fs (loop5): Remounting filesystem read-only [ 283.955993][ T6922] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.694: couldn't read orphan inode 15 (err -117) [ 283.968703][ T6922] EXT4-fs (loop5): Remounting filesystem read-only [ 283.975554][ T6922] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 284.046584][ T6920] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.057518][ T6922] EXT4-fs error (device loop5): ext4_lookup:1858: comm syz.5.694: inode #15: comm syz.5.694: iget: illegal inode # [ 284.113718][ T6922] EXT4-fs (loop5): Remounting filesystem read-only [ 284.962550][ T6940] loop2: detected capacity change from 0 to 512 [ 285.027221][ T6940] EXT4-fs (loop2): Ignoring removed orlov option [ 285.065926][ T6940] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 285.147044][ T6940] EXT4-fs error (device loop2): ext4_iget_extra_inode:4573: inode #15: comm syz.2.698: corrupted in-inode xattr [ 285.179733][ T6940] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.698: couldn't read orphan inode 15 (err -117) [ 285.259333][ T6940] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000004000000,orlov,noload,delalloc,mblk_io_submit,commit=0x0000000000000000,noinit_itable,nogrpid,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 285.986943][ T6952] loop2: detected capacity change from 0 to 512 [ 286.034274][ T6952] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 286.084223][ T6952] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 286.099397][ T6952] System zones: 1-12 [ 286.113901][ T6952] EXT4-fs error (device loop2): ext4_orphan_get:1432: comm syz.2.703: bad orphan inode 16 [ 286.136699][ T6952] ext4_test_bit(bit=15, block=4) = 0 [ 286.142202][ T6952] EXT4-fs (loop2): 1 orphan inode deleted [ 286.148082][ T6952] EXT4-fs (loop2): mounted filesystem without journal. Opts: noinit_itable,max_dir_size_kb=0x000000000000004a,resgid=0x0000000000000000,inode_readahead_blks=0x0000000000000008,acl,stripe=0x0000000000000002,max_batch_time=0x0000000000008e6e,debug,auto_da_alloc,,errors=continue. Quota mode: none. [ 287.587024][ T6962] loop5: detected capacity change from 0 to 256 [ 289.164328][ T6974] loop1: detected capacity change from 0 to 512 [ 289.289258][ T6974] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 289.298695][ T6974] EXT4-fs (loop1): inline encryption not supported [ 289.360392][ T6974] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 289.458561][ T6974] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 289.543340][ T6974] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.710: bg 0: block 248: padding at end of block bitmap is not set [ 289.568338][ T6974] Quota error (device loop1): write_blk: dquota write failed [ 289.579387][ T6974] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 289.629303][ T6974] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.710: Failed to acquire dquot type 1 [ 289.691837][ T6974] EXT4-fs (loop1): 1 truncate cleaned up [ 289.697538][ T6974] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,inlinecrypt,nombcache,,errors=continue. Quota mode: writeback. [ 289.962097][ T4479] Quota error (device loop1): remove_tree: Getting block too big (0 >= 6) [ 289.989415][ T6978] netlink: 12 bytes leftover after parsing attributes in process `syz.2.711'. [ 289.998663][ T6978] netlink: 32 bytes leftover after parsing attributes in process `syz.2.711'. [ 290.019249][ T4479] EXT4-fs error (device loop1): ext4_release_dquot:6272: comm kworker/u4:16: Failed to release dquot type 1 [ 290.237975][ T6980] loop1: detected capacity change from 0 to 2048 [ 290.410694][ T6980] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,noinit_itable,i_version,init_itable,,errors=continue. Quota mode: none. [ 290.459457][ T6980] ext4 filesystem being mounted at /150/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 290.644738][ T26] audit: type=1326 audit(1783083532.355:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6991 comm="syz.5.716" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c1733e59 code=0x7ffc0000 [ 290.687572][ T6992] loop5: detected capacity change from 0 to 256 [ 290.731812][ T6992] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 290.739647][ T26] audit: type=1326 audit(1783083532.395:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6991 comm="syz.5.716" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c1733e59 code=0x7ffc0000 [ 290.815082][ T26] audit: type=1326 audit(1783083532.395:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6991 comm="syz.5.716" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c1733e59 code=0x7ffc0000 [ 290.842284][ T6992] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 290.937092][ T26] audit: type=1326 audit(1783083532.395:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6991 comm="syz.5.716" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff5c16f468e code=0x7ffc0000 [ 291.083537][ T26] audit: type=1326 audit(1783083532.395:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6991 comm="syz.5.716" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c1733e59 code=0x7ffc0000 [ 291.149466][ T26] audit: type=1326 audit(1783083532.395:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6991 comm="syz.5.716" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c1733e59 code=0x7ffc0000 [ 291.215645][ T6999] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 291.252830][ T26] audit: type=1326 audit(1783083532.395:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6991 comm="syz.5.716" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c1733e59 code=0x7ffc0000 [ 291.511247][ T7015] netlink: 148 bytes leftover after parsing attributes in process `syz.4.722'. [ 291.541907][ T7015] netlink: 8 bytes leftover after parsing attributes in process `syz.4.722'. [ 291.574693][ T7015] netlink: 8 bytes leftover after parsing attributes in process `syz.4.722'. [ 291.683953][ T7024] loop4: detected capacity change from 0 to 512 [ 291.767487][ T7024] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 291.899375][ T7024] ext4 filesystem being mounted at /127/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 292.033191][ T7034] loop1: detected capacity change from 0 to 512 [ 292.478769][ T7034] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.728: Failed to acquire dquot type 1 [ 292.490660][ T7034] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.728: Failed to acquire dquot type 1 [ 292.503569][ T7034] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.728: bg 0: block 248: padding at end of block bitmap is not set [ 292.519019][ T7034] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 292.529449][ T7034] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.728: Failed to acquire dquot type 1 [ 292.541222][ T7034] EXT4-fs (loop1): 1 orphan inode deleted [ 292.546985][ T7034] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable,grpid,quota,,errors=continue. Quota mode: writeback. [ 292.560267][ T7034] ext4 filesystem being mounted at /155/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 292.574400][ T7034] EXT4-fs error (device loop1): ext4_lookup:1862: inode #2: comm syz.1.728: deleted inode referenced: 12 [ 292.855596][ T7040] loop5: detected capacity change from 0 to 512 [ 292.972850][ T7040] EXT4-fs (loop5): Ignoring removed orlov option [ 293.005159][ T7040] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 293.048671][ T7040] EXT4-fs error (device loop5): ext4_iget_extra_inode:4573: inode #15: comm syz.5.734: corrupted in-inode xattr [ 293.099472][ T7040] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.734: couldn't read orphan inode 15 (err -117) [ 293.146483][ T7040] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000004000000,orlov,noload,delalloc,mblk_io_submit,commit=0x0000000000000000,noinit_itable,nogrpid,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 294.018545][ T7053] loop4: detected capacity change from 0 to 1024 [ 295.667734][ T7053] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #3: block 2: comm syz.4.739: lblock 2 mapped to illegal pblock 2 (length 1) [ 295.724041][ T7053] __quota_error: 33 callbacks suppressed [ 295.724062][ T7053] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 295.768912][ T7053] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #3: block 48: comm syz.4.739: lblock 0 mapped to illegal pblock 48 (length 1) [ 295.871580][ T7077] loop1: detected capacity change from 0 to 128 [ 295.890908][ T7078] loop5: detected capacity change from 0 to 128 [ 295.905491][ T7053] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 295.932452][ T7053] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.739: Failed to acquire dquot type 0 [ 295.943337][ T7078] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 295.972051][ T7053] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 295.975812][ T7077] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 296.004605][ T7053] EXT4-fs error (device loop4): ext4_evict_inode:284: inode #11: comm syz.4.739: mark_inode_dirty error [ 296.025450][ T7053] EXT4-fs warning (device loop4): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 296.079310][ T7053] EXT4-fs (loop4): 1 orphan inode deleted [ 296.085101][ T7053] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x0000000000000007,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none. [ 296.107879][ T476] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 296.115461][ T476] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 296.123165][ T7077] System zones: 1-3, 19-19, 35-36 [ 296.137430][ T7077] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,debug,,errors=continue. Quota mode: writeback. [ 296.149845][ T7077] ext4 filesystem being mounted at /161/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 296.204368][ T476] EXT4-fs error (device loop4): ext4_release_dquot:6272: comm kworker/u4:3: Failed to release dquot type 0 [ 296.218086][ T7053] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #3: block 1: comm syz.4.739: lblock 1 mapped to illegal pblock 1 (length 1) [ 296.245131][ T26] audit: type=1800 audit(1783083537.955:45): pid=7077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.745" name="file1" dev="loop1" ino=12 res=0 errno=0 [ 296.267434][ T7053] Quota error (device loop4): find_next_id: Can't read quota tree block 1 [ 296.405800][ T4663] EXT4-fs error (device loop4): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 296.478691][ T4663] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 296.545120][ T4663] EXT4-fs error (device loop4): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 296.746622][ T7092] loop5: detected capacity change from 0 to 128 [ 296.874905][ T26] audit: type=1800 audit(1783083538.585:46): pid=7092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.751" name="bus" dev="loop5" ino=1048610 res=0 errno=0 [ 297.204386][ T7106] binder: 7104:7106 ioctl c0306201 0 returned -14 [ 299.029704][ T7128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.767'. [ 299.104689][ T7130] netlink: 12 bytes leftover after parsing attributes in process `syz.1.768'. [ 299.314282][ T7132] loop5: detected capacity change from 0 to 512 [ 299.451720][ T7132] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 299.482914][ T7132] ext4 filesystem being mounted at /86/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.702448][ T7148] usb usb7: usbfs: process 7148 (syz.5.773) did not claim interface 3 before use [ 302.487972][ T7165] 0: reclassify loop, rule prio 0, protocol 700 [ 303.480511][ T7178] loop5: detected capacity change from 0 to 512 [ 303.558971][ T7178] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 303.592140][ T7178] ext4 filesystem being mounted at /89/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 304.947118][ T7190] loop1: detected capacity change from 0 to 4096 [ 305.193309][ T7190] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: writeback. [ 305.372806][ T26] audit: type=1800 audit(1783083547.085:47): pid=7205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.785" name="file0" dev="loop1" ino=13 res=0 errno=0 [ 306.671549][ T7215] loop1: detected capacity change from 0 to 512 [ 306.735002][ T7215] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 307.608519][ T7228] loop1: detected capacity change from 0 to 512 [ 308.143304][ T7228] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #16: comm syz.1.797: corrupted inode contents [ 308.239420][ T7228] EXT4-fs error (device loop1): ext4_dirty_inode:6077: inode #16: comm syz.1.797: mark_inode_dirty error [ 308.305492][ T7228] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #16: comm syz.1.797: corrupted inode contents [ 308.366390][ T7228] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #16: comm syz.1.797: mark_inode_dirty error [ 308.425174][ T7228] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #16: comm syz.1.797: corrupted inode contents [ 308.508885][ T7228] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 308.586628][ T7228] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #16: comm syz.1.797: corrupted inode contents [ 308.622953][ T7228] EXT4-fs error (device loop1): ext4_truncate:4286: inode #16: comm syz.1.797: mark_inode_dirty error [ 308.675146][ T7228] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 308.716417][ T7228] EXT4-fs (loop1): 1 truncate cleaned up [ 308.735774][ T7228] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 308.777766][ T7228] ext4 filesystem being mounted at /179/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 310.667587][ T7234] loop4: detected capacity change from 0 to 512 [ 310.712072][ T7234] EXT4-fs (loop4): filesystem is read-only [ 310.739279][ T7234] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 310.810463][ T7234] EXT4-fs (loop4): failed to initialize system zone (-117) [ 310.818017][ T7234] EXT4-fs (loop4): mount failed [ 311.057932][ T7257] loop1: detected capacity change from 0 to 1024 [ 311.239601][ T7257] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 311.298429][ T7262] bond0: (slave bridge_slave_0): Error: Device is in use and cannot be enslaved [ 311.438162][ T7264] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 313.501022][ T7283] loop2: detected capacity change from 0 to 1024 [ 313.646235][ T7283] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 314.222428][ T7302] BUG: sleeping function called from invalid context at kernel/locking/rwsem.c:1497 [ 314.232429][ T7302] in_atomic(): 1, irqs_disabled(): 1, non_block: 0, pid: 7302, name: syz.1.822 [ 314.241415][ T7302] 1 lock held by syz.1.822/7302: [ 314.246376][ T7302] #0: ffffffff8c344838 (css_set_lock){..-.}-{2:2}, at: cgroup_get_from_path+0x26/0x2f0 [ 314.256227][ T7302] irq event stamp: 322 [ 314.260320][ T7302] hardirqs last enabled at (321): [] _raw_spin_unlock_irqrestore+0x82/0x120 [ 314.270691][ T7302] hardirqs last disabled at (322): [] _raw_spin_lock_irq+0x86/0xf0 [ 314.280187][ T7302] softirqs last enabled at (304): [] ip_setsockopt+0x58a/0x31e0 [ 314.289492][ T7302] softirqs last disabled at (302): [] release_sock+0x2b/0x1b0 [ 314.298515][ T7302] Preemption disabled at: [ 314.298521][ T7302] [<0000000000000000>] 0x0 [ 314.307336][ T7302] CPU: 1 PID: 7302 Comm: syz.1.822 Not tainted syzkaller #0 [ 314.314628][ T7302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 314.324681][ T7302] Call Trace: [ 314.327957][ T7302] [ 314.330880][ T7302] dump_stack_lvl+0x188/0x250 [ 314.335574][ T7302] ? ip_setsockopt+0x58a/0x31e0 [ 314.340424][ T7302] ? show_regs_print_info+0x20/0x20 [ 314.345614][ T7302] ? load_image+0x410/0x410 [ 314.350124][ T7302] ___might_sleep+0x493/0x610 [ 314.354800][ T7302] ? __might_sleep+0xf0/0xf0 [ 314.359403][ T7302] down_read+0x20/0x2e0 [ 314.363654][ T7302] kernfs_walk_and_get_ns+0x7e/0x2c0 [ 314.368954][ T7302] ? kernfs_find_ns+0x510/0x510 [ 314.373806][ T7302] ? current_cgns_cgroup_from_root+0x2a9/0x2f0 [ 314.379966][ T7302] cgroup_get_from_path+0x5f/0x2f0 [ 314.385081][ T7302] cgroup_mt_check_v1+0x1d2/0x2d0 [ 314.390106][ T7302] xt_check_match+0x499/0xc50 [ 314.394781][ T7302] ? xt_check_proc_name+0x240/0x240 [ 314.400028][ T7302] ? pcpu_alloc+0x11e6/0x16d0 [ 314.404717][ T7302] ? xt_find_match+0x1e1/0x210 [ 314.409484][ T7302] translate_table+0x1481/0x1f60 [ 314.414439][ T7302] ? ipt_register_table+0x7b0/0x7b0 [ 314.419660][ T7302] ? __might_fault+0xb7/0x110 [ 314.424347][ T7302] ? __lock_acquire+0x7b50/0x7b50 [ 314.429376][ T7302] ? _copy_from_user+0x111/0x170 [ 314.434315][ T7302] do_ipt_set_ctl+0x963/0xd70 [ 314.438999][ T7302] ? nf_setsockopt+0x218/0x280 [ 314.443764][ T7302] ? ipt_unregister_table_exit+0x220/0x220 [ 314.449571][ T7302] ? __lock_acquire+0x7b50/0x7b50 [ 314.454591][ T7302] ? __mutex_lock_common+0x435/0x2400 [ 314.459972][ T7302] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 314.465609][ T7302] ? mutex_unlock+0x10/0x10 [ 314.470112][ T7302] ? __local_bh_enable_ip+0x136/0x1c0 [ 314.475479][ T7302] ? lockdep_hardirqs_on+0x94/0x140 [ 314.480669][ T7302] ? __local_bh_enable_ip+0x136/0x1c0 [ 314.486036][ T7302] nf_setsockopt+0x25f/0x280 [ 314.490628][ T7302] ip_setsockopt+0x29c3/0x31e0 [ 314.495401][ T7302] ? ipv4_pktinfo_prepare+0x6b0/0x6b0 [ 314.500775][ T7302] ? __might_sleep+0xf0/0xf0 [ 314.505361][ T7302] ? rcu_lock_release+0x9/0x20 [ 314.510120][ T7302] tcp_setsockopt+0x229/0x1e60 [ 314.514883][ T7302] ? aa_sk_perm+0x7dc/0x910 [ 314.519386][ T7302] ? tcp_set_window_clamp+0x1a0/0x1a0 [ 314.524765][ T7302] ? aa_af_perm+0x340/0x340 [ 314.529266][ T7302] ? __fget_files+0x402/0x470 [ 314.533943][ T7302] ? aa_sock_opt_perm+0x74/0x100 [ 314.538878][ T7302] ? sock_common_setsockopt+0x32/0xb0 [ 314.544249][ T7302] ? sock_common_recvmsg+0x1c0/0x1c0 [ 314.549532][ T7302] __sys_setsockopt+0x2bf/0x3d0 [ 314.554435][ T7302] __x64_sys_setsockopt+0xb1/0xc0 [ 314.559460][ T7302] do_syscall_64+0x4c/0xa0 [ 314.563870][ T7302] ? clear_bhb_loop+0x30/0x80 [ 314.568541][ T7302] ? clear_bhb_loop+0x30/0x80 [ 314.573224][ T7302] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 314.579128][ T7302] RIP: 0033:0x7f6623405e59 [ 314.583540][ T7302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.603151][ T7302] RSP: 002b:00007f662165e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 314.611563][ T7302] RAX: ffffffffffffffda RBX: 00007f662368dfa0 RCX: 00007f6623405e59 [ 314.619532][ T7302] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000003 [ 314.627505][ T7302] RBP: 00007f662349be6f R08: 00000000000022f8 R09: 0000000000000000 [ 314.635473][ T7302] R10: 0000200000002300 R11: 0000000000000246 R12: 0000000000000000 [ 314.643440][ T7302] R13: 00007f662368e038 R14: 00007f662368dfa0 R15: 00007ffff700b488 [ 314.651424][ T7302] [ 314.654537][ T7302] [ 314.656857][ T7302] ============================= [ 314.661691][ T7302] [ BUG: Invalid wait context ] [ 314.666531][ T7302] syzkaller #0 Tainted: G W [ 314.672331][ T7302] ----------------------------- [ 314.677166][ T7302] syz.1.822/7302 is trying to lock: [ 314.682355][ T7302] ffffffff8c44fc30 (kernfs_rwsem){++++}-{3:3}, at: kernfs_walk_and_get_ns+0x7e/0x2c0 [ 314.691837][ T7302] other info that might help us debug this: [ 314.697711][ T7302] context-{4:4} [ 314.701179][ T7302] 1 lock held by syz.1.822/7302: [ 314.706106][ T7302] #0: ffffffff8c344838 (css_set_lock){..-.}-{2:2}, at: cgroup_get_from_path+0x26/0x2f0 [ 314.715851][ T7302] stack backtrace: [ 314.719558][ T7302] CPU: 1 PID: 7302 Comm: syz.1.822 Tainted: G W syzkaller #0 [ 314.728229][ T7302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 314.738282][ T7302] Call Trace: [ 314.741549][ T7302] [ 314.744473][ T7302] dump_stack_lvl+0x188/0x250 [ 314.749148][ T7302] ? show_regs_print_info+0x20/0x20 [ 314.754350][ T7302] ? load_image+0x410/0x410 [ 314.758860][ T7302] ? _printk+0xda/0x130 [ 314.763011][ T7302] __lock_acquire+0x1bb7/0x7b50 [ 314.767868][ T7302] ? verify_lock_unused+0x140/0x140 [ 314.773234][ T7302] ? __printk_cpu_unlock+0x5f/0x70 [ 314.778339][ T7302] ? dump_stack_lvl+0x1fd/0x250 [ 314.783197][ T7302] ? ip_setsockopt+0x58a/0x31e0 [ 314.788046][ T7302] ? show_regs_print_info+0x20/0x20 [ 314.793261][ T7302] ? load_image+0x410/0x410 [ 314.797861][ T7302] lock_acquire+0x19e/0x400 [ 314.802444][ T7302] ? kernfs_walk_and_get_ns+0x7e/0x2c0 [ 314.807909][ T7302] ? __might_sleep+0xf0/0xf0 [ 314.812486][ T7302] ? read_lock_is_recursive+0x10/0x10 [ 314.817855][ T7302] down_read+0x44/0x2e0 [ 314.821997][ T7302] ? kernfs_walk_and_get_ns+0x7e/0x2c0 [ 314.827448][ T7302] kernfs_walk_and_get_ns+0x7e/0x2c0 [ 314.832722][ T7302] ? kernfs_find_ns+0x510/0x510 [ 314.837651][ T7302] ? current_cgns_cgroup_from_root+0x2a9/0x2f0 [ 314.843796][ T7302] cgroup_get_from_path+0x5f/0x2f0 [ 314.848900][ T7302] cgroup_mt_check_v1+0x1d2/0x2d0 [ 314.853919][ T7302] xt_check_match+0x499/0xc50 [ 314.858599][ T7302] ? xt_check_proc_name+0x240/0x240 [ 314.863786][ T7302] ? pcpu_alloc+0x11e6/0x16d0 [ 314.868563][ T7302] ? xt_find_match+0x1e1/0x210 [ 314.873325][ T7302] translate_table+0x1481/0x1f60 [ 314.878270][ T7302] ? ipt_register_table+0x7b0/0x7b0 [ 314.883466][ T7302] ? __might_fault+0xb7/0x110 [ 314.888140][ T7302] ? __lock_acquire+0x7b50/0x7b50 [ 314.893173][ T7302] ? _copy_from_user+0x111/0x170 [ 314.898129][ T7302] do_ipt_set_ctl+0x963/0xd70 [ 314.902819][ T7302] ? nf_setsockopt+0x218/0x280 [ 314.907574][ T7302] ? ipt_unregister_table_exit+0x220/0x220 [ 314.913375][ T7302] ? __lock_acquire+0x7b50/0x7b50 [ 314.918410][ T7302] ? __mutex_lock_common+0x435/0x2400 [ 314.923779][ T7302] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 314.929407][ T7302] ? mutex_unlock+0x10/0x10 [ 314.933922][ T7302] ? __local_bh_enable_ip+0x136/0x1c0 [ 314.939307][ T7302] ? lockdep_hardirqs_on+0x94/0x140 [ 314.944513][ T7302] ? __local_bh_enable_ip+0x136/0x1c0 [ 314.949891][ T7302] nf_setsockopt+0x25f/0x280 [ 314.954497][ T7302] ip_setsockopt+0x29c3/0x31e0 [ 314.959280][ T7302] ? ipv4_pktinfo_prepare+0x6b0/0x6b0 [ 314.964679][ T7302] ? __might_sleep+0xf0/0xf0 [ 314.969268][ T7302] ? rcu_lock_release+0x9/0x20 [ 314.974028][ T7302] tcp_setsockopt+0x229/0x1e60 [ 314.978792][ T7302] ? aa_sk_perm+0x7dc/0x910 [ 314.983289][ T7302] ? tcp_set_window_clamp+0x1a0/0x1a0 [ 314.988657][ T7302] ? aa_af_perm+0x340/0x340 [ 314.993164][ T7302] ? __fget_files+0x402/0x470 [ 314.997971][ T7302] ? aa_sock_opt_perm+0x74/0x100 [ 315.002923][ T7302] ? sock_common_setsockopt+0x32/0xb0 [ 315.008308][ T7302] ? sock_common_recvmsg+0x1c0/0x1c0 [ 315.013598][ T7302] __sys_setsockopt+0x2bf/0x3d0 [ 315.018450][ T7302] __x64_sys_setsockopt+0xb1/0xc0 [ 315.023473][ T7302] do_syscall_64+0x4c/0xa0 [ 315.027883][ T7302] ? clear_bhb_loop+0x30/0x80 [ 315.032561][ T7302] ? clear_bhb_loop+0x30/0x80 [ 315.037257][ T7302] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 315.043151][ T7302] RIP: 0033:0x7f6623405e59 [ 315.047566][ T7302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 315.067162][ T7302] RSP: 002b:00007f662165e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 315.075586][ T7302] RAX: ffffffffffffffda RBX: 00007f662368dfa0 RCX: 00007f6623405e59 [ 315.083550][ T7302] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000003 [ 315.091516][ T7302] RBP: 00007f662349be6f R08: 00000000000022f8 R09: 0000000000000000 [ 315.099505][ T7302] R10: 0000200000002300 R11: 0000000000000246 R12: 0000000000000000 [ 315.107477][ T7302] R13: 00007f662368e038 R14: 00007f662368dfa0 R15: 00007ffff700b488 [ 315.115447][ T7302] [ 315.327110][ T7302] xt_cgroup: invalid path, errno=-2 [ 315.411732][ T7302] autofs4:pid:7302:autofs_fill_super: called with bogus options [ 317.140682][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.147016][ T1422] ieee802154 phy1 wpan1: encryption failed: -22