last executing test programs: 2m7.370435666s ago: executing program 32 (id=512): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc40, &(0x7f0000000000), 0xfe, 0x27a, &(0x7f0000000980)="$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") symlinkat(0x0, 0xffffffffffffff9c, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 1m36.962632259s ago: executing program 33 (id=1294): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) r1 = landlock_create_ruleset(&(0x7f00000001c0)={0x2, 0xa, 0x1, 0x2, 0x8}, 0x30, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000240)={0x0, r0}, 0x1) 1m21.685552617s ago: executing program 5 (id=1656): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x1, 0x0) write(r0, 0x0, 0x48) 1m21.591380985s ago: executing program 5 (id=1658): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002bc0)=""/64, 0x40}, {0x0}], 0x2}, 0x41a}], 0x1, 0x1, 0x0) 1m21.478657601s ago: executing program 5 (id=1661): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0xfffffffb, "abacd211119ca94c63377526aeb5ab2c7b9ca5ea07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r2}) 1m21.384957404s ago: executing program 5 (id=1664): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000580)={[{@acl}, {@debug}, {@bsdgroups}, {@noload}, {@delalloc}, {@resuid}, {@norecovery}, {@minixdf}, {@min_batch_time={'min_batch_time', 0x3d, 0x7fffffff}}, {@errors_remount}]}, 0xfa, 0x477, &(0x7f0000000dc0)="$eJzs3M9vFFUcAPDvTH/w21bEHyBIFY3EHy0tP+TgRaMJB01M9IDxVNtCKgs1tCZCiFYPeDQk3o3/hfGkF6NeNPGqd0NCDBdQL2tmZwaWZbfd0m0X2M8nme57M6/73ndm3u6bebsbQM8ayf4kEVsj4o+IGMqztxYYyR+uX70w9c/VC1NJVKtv/53Uyl27emGqLFr+35Y8U60W+Q1N6r34XsRkpTJztsiPLZz+cGz+3PkXZ09Pnpw5OXNm4ujRQwf3DB6ZONyROLO4ru36ZG73zmPvXnpz6vil939O0sjjjoY4OmUk37tNPdPpyrpsW1066a/fsvfXm+lmZwLd1BcR2eEaqPX/oeiLTTe2DcXrn3e1ccCaqlar1SVelRerwH0siW63AOiO8o0+u/4tl3UaetwVrrySXwBlcV8vlnxLf6R5Yu9Aw/Xt1g7WPxIRxxf//TpbYo3uQwAA1Ps+G/+80Gz8l8YjeWIw+/NAMYcyHBEPRsT2iHgoInZExMMRtbKPRsRjK6y/cYbk9vFPevmOg2tDNv57uZjbunX8l5ZFhvuK3LZa/APJidnKzIFin+yPgQ0nZpOZ8SXq+OG1379sta1+/JctWf3lWLBox+X+hht005MLk6uJud6VzyJ29TeLP4lyGieJiJ0RsesO65h9rr/ltuXjX0Lrp21b9ZuIZ/PjvxgN8ZeSlvOT4y8dmTg8tjEqMwfGyrPidr/8dvGtVvWvKv4OyI7/5qbn/434h5ONEfPnzp+qzdfOr+jps64TF//8ouU1TRF/1r3aOf+PbSvO/8HkndqKwWLDx5MLC2fHIwaTN25fP3Hz2cp8WT6Lf/++5v1/e9zcE49HxO6I2BMRT2QXhUXbn4yIpyJi3xI74adXn/5gmfibHP/1mSvN4p9e7vhH/fFfeaLv1I/fLR//xohodfwP1VL7izXtvP6128DV7DsAAAC4V+SfgU/S0RvpNB0dzT/DvyM2p5W5+YXnT8x9dGY6n/cejoG0vNM1VHc/dLy4N1zmJxryB4v7xl/1barlR6fmKtPdDh563JYW/T/zV1+3WwesuQ7MowH3KP0fepf+D70p0f+hp+n/0Lua9f9PW5Ye/XZNGwOsK+//0Lva6P+L+UPrUQFwb/L+D71L/4ee1PK78emqvvK/7on/it8zvFvac/8nIr0rmnH/J/rb/jGLFSSqQ3n/z9ZsaFqm269MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnfF/AAAA//8Qi+Nc") r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020) 1m21.153835583s ago: executing program 5 (id=1666): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)="77776e6e3d3078333333333333333333333333333333332c7777706e3d3078343434343434343434343434343434342c726f6c65733d33322c6c7077776e6e3d307831313131313131313131313131311131", 0x52) 1m20.738855252s ago: executing program 5 (id=1675): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvfrom$phonet(r1, 0x0, 0x0, 0x102, 0x0, 0x0) 1m20.647257397s ago: executing program 34 (id=1675): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvfrom$phonet(r1, 0x0, 0x0, 0x102, 0x0, 0x0) 1m5.910883172s ago: executing program 4 (id=1966): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000a40)=[{0x6, 0x72, 0x3, 0x7fff0003}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) 1m5.795543958s ago: executing program 4 (id=1969): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dri/0/name\x00', 0x0, 0x0) read(r0, &(0x7f0000000100)=""/256, 0x100) 1m5.688816554s ago: executing program 4 (id=1972): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000800)={0x0, 0x0, 0x80, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_WRITE_FIXED={0x5, 0x40, 0x4007, @fd_index=0x1, 0x2, 0x0, 0x10000, 0x8, 0x1, {0x1}}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000240)=""/152, 0x98}], 0x2) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) 1m5.582732812s ago: executing program 4 (id=1975): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x800000, &(0x7f0000000080)={[{@journal_ioprio}, {@debug}, {@nombcache}]}, 0x1, 0x533, &(0x7f0000000b00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) 1m5.333904029s ago: executing program 4 (id=1982): r0 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000001c0), &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000140)="d8", 0x1, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000240)=@chain={'key_or_keyring:', r1}) request_key(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, 0x0, r0) 1m4.740136907s ago: executing program 3 (id=1997): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0x2, @empty, 0x3}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@sack_info={0x0, 0x8, 0x1}, 0xc) 1m4.411097246s ago: executing program 4 (id=2006): syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x11}, @hci_ev_le_direct_adv_info={{}, {0x3, 0x0, @any, 0x5e, @none, 0x4}}}}, 0x14) syz_emit_vhci(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) munmap$binder(0x0, 0xffffffff) 1m4.285326424s ago: executing program 35 (id=2006): syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x11}, @hci_ev_le_direct_adv_info={{}, {0x3, 0x0, @any, 0x5e, @none, 0x4}}}}, 0x14) syz_emit_vhci(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) munmap$binder(0x0, 0xffffffff) 1m3.778067806s ago: executing program 3 (id=2017): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @remote, 'ip6gre0\x00'}}, 0x1e) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmmsg(r0, &(0x7f00000072c0)=[{{&(0x7f0000000300)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(aegis128-aesni)\x00'}, 0x80, 0x0}}, {{&(0x7f0000002780)=@x25, 0x80, 0x0, 0x0, &(0x7f0000007640)=ANY=[], 0x228}}], 0x2, 0x84) 1m3.68292497s ago: executing program 3 (id=2020): sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x20040894) 1m3.570165089s ago: executing program 3 (id=2023): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x800000, &(0x7f0000000080)={[{@journal_ioprio}, {@debug}, {@nombcache}]}, 0x1, 0x533, &(0x7f0000000b00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) 1m3.240256303s ago: executing program 3 (id=2029): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x2}, {&(0x7f0000000300)='l', 0x1}], 0x3}], 0x1, 0x0) 1m2.182788493s ago: executing program 3 (id=2045): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020605000000000000000000000000030c000300686173683a6970000900020073797a32000000000500040000000000050005000a00000005000100060000001400078008"], 0x58}}, 0x20000000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 1m1.950811799s ago: executing program 36 (id=2045): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020605000000000000000000000000030c000300686173683a6970000900020073797a32000000000500040000000000050005000a00000005000100060000001400078008"], 0x58}}, 0x20000000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 55.841159244s ago: executing program 6 (id=2149): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44040) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a740000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000480003801c0000800c00018006000100d10300000c000440000000002df31ab3240000800c00044000000000000000050800034000000002"], 0x9c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 55.750464669s ago: executing program 6 (id=2152): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x100, 0x5, 0x400, 0x9, 0x81, 0x101, 0xe, 0xc40, 0x7fffffff, 0xfffffffc, 0x20, 0xb, 0xff, 0x6, 0x7, 0xffff}}, @TCA_GRED_STAB={0x10b, 0x2, "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"}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x240400d0}, 0x24008004) 55.677743905s ago: executing program 6 (id=2154): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000019300), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000019340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24002001}, 0x4000000) 55.587120907s ago: executing program 6 (id=2157): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='!\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="2800128008000100687372001c00028008000100", @ANYRES32=r1, @ANYBLOB="08000200", @ANYRES32=r2, @ANYBLOB="0500070001"], 0x50}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 55.367803636s ago: executing program 6 (id=2162): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) utimensat(r1, 0x0, 0x0, 0x0) 55.152108609s ago: executing program 6 (id=2176): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="cf042cbd7000fcdbdf259200000008000300", @ANYRES32=r2, @ANYBLOB="0a0006"], 0x38}, 0x1, 0x0, 0x0, 0x40880}, 0x8008) 54.578661035s ago: executing program 8 (id=2181): r0 = syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x5, 0x50}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0xa, 0x0, 0x2, 0x3, 0x0, 0x1000982, 0x0, 0x1}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000001900)={&(0x7f0000002000)={[{0x0, 0x0, 0x2}, {0x0, 0x0, 0x3}, {0x0, 0x0, 0x2}, {0x0}, {0x0, 0x0, 0x3}, {0x0, 0x0, 0x2}, {0x0}, {0x0, 0x0, 0x1}]}, 0x8, 0x0, 0x2}, 0x1) 54.442990767s ago: executing program 8 (id=2185): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01032757c38d085641a726"], 0x20}, 0x1, 0x0, 0x0, 0x20000805}, 0x48d4) 54.323187721s ago: executing program 8 (id=2188): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x20048a, &(0x7f0000000300), 0x12, 0x51a, &(0x7f0000001740)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) preadv2(r0, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/165, 0xa5}], 0x1, 0x4, 0x7, 0xa) 53.945936729s ago: executing program 8 (id=2191): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01080000000000000000010000000900010073797a30000000000900030073797b320000000014000000060a010400000000002ca8000100150014000000110001"], 0x88}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d0000000000000000020000000000000600000000060015000100000018001680140001"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 53.860909417s ago: executing program 8 (id=2192): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) utimensat(r1, 0x0, 0x0, 0x0) 53.766422744s ago: executing program 8 (id=2194): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='prev)', 0x5) 40.100593699s ago: executing program 37 (id=2176): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="cf042cbd7000fcdbdf259200000008000300", @ANYRES32=r2, @ANYBLOB="0a0006"], 0x38}, 0x1, 0x0, 0x0, 0x40880}, 0x8008) 38.618341008s ago: executing program 38 (id=2194): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='prev)', 0x5) 2.111553913s ago: executing program 9 (id=3146): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/sys/net/sctp/auth_enable\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 2.040519254s ago: executing program 2 (id=3147): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000880)={[{@orlov}, {@nodioread_nolock}, {@noblock_validity}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@nodioread_nolock}, {@dioread_nolock}, {@noinit_itable}, {@mb_optimize_scan}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$eJzs3T1sG3UbAPDnznHTj7xv+krvK72gDhUgFamqk/QDClO7IipV6oDEApHjRlWcuIodaKJIpHuF6IAAdSkbDIwgBgbEwsjKwseMVNEIpKYDGDk+p2nqFCfEMcS/n3TJ/3939vP8fX7OvtOdHEDfOtr4k0Y8EREXk4jhdcsGIlt4tLneyvJi8f7yYjGJev3Sz0kkEXFvebHYWj/J/h+KiKWI+H9EfJWPOJ6uPeW+VqM6vzA1Xi6XZrP+SG366kh1fuHElenxydJkaebU8y+cOXv6zNjJsfXp3q+v7+W3NtYb3998+8Y3L92++fEnR5aK744ncS6GsmXrx7GTmq9JPs5tmH+6G8F6KOl1AmxLLqvzRin9L4Yjl1V9O/X1O4fBXUkP6KL6YER9zbom0AcSRQ99qvU9oHH825p28/vHnfPNA5BG3JXlxeJb0Yo/0Dw3EftXj00O/pI8dGTSON48vJuJsictXY+I0YGBR9//Sfb+277RnUiQrvryfHNDPbr907X9T7TZ/wy1zp3+Ra3930q2/1tpEz+3yf7vYocxfnv1xw82jX99MJ5sGz9Zi5+0iZ9GxOsdxr/1yudnN1tW/zDiWLSP35I8/vzwyOUr5dJo82/bGF8cO/Li5uOPOLhJ/OY52/2riawf/74sp7TD8X/29adPLT0m/rNPP377t3v9D0TEOx3G/8+9j17ebNmd68ndxreArW7/JPJxu8P4z507+l3WdNYQAAAAAAAAAAB2ULp6LVuSFtbaaVooNO/h/W8cTMuVau345crczETzmrfDkU9bV1oNN/tJoz+WXY/b6p/c0D+VywLmDqz2C8VKeaLHYwcAAAAAAAAAAAAAAAAAAIC/i0Mb7v//Nbd6///Gn6sG9qrNf/Ib2OvUP/Svh+s/6VkewO7z+Q99q67+oX+pf+hf6h/6l/qH/tW2/g/sfh7A7vP5D/1L/QMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChMdXvLy8WG/2Jgfm5qcobJyZK1anC9FyxUKzMXi1MViqT5VKhWJn+s+dLKpWrozEzd22kVqrWRqrzC69NV+ZmWr8pWsp3fUQAAAAAAAAAAAAAAAAAAADwzzO0OiVpISLf7KdpoRDxr4g4nERy+Uq5NBoR/46Ib3P5wUZ/rNdJAwAAAAAAAAAAAAAAAAAAwB5TnV+YGi+XS7PdawxkoTp71A+1ruYzsJWVI2JpZ9NoPOOWH5XPXsDubqY+aeQ6fB/2faOHOyUAAAAAAAAAAAAAAAAAAOhTD2767fQRv3c3IQAAAAAAAAAAAAAAAAAAAOhL6U9JRDSmY8PPDG1cui9Zya3+j4g3b11679p4rTY71ph/d21+7f1s/sle5A90qlWnaUQ06hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4oDq/MDVeLpdmt9kY7GCdXo8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDv+CAAA//9bQM66") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40) fallocate(r0, 0x0, 0xfff, 0x9) write$uinput_user_dev(r0, &(0x7f0000000940)={'syz0\x00', {0x1ff, 0x7, 0x7, 0x1}, 0x41, [0x6, 0x40, 0x5, 0x7fffffff, 0xcc1, 0x6, 0x6, 0x1b, 0x9f, 0x7, 0xdee00000, 0x7, 0x7, 0x6, 0xa7a, 0xe78, 0x101, 0x8, 0x5, 0x9, 0xffffffff, 0x2, 0x0, 0x2, 0x512, 0x5586, 0x85b, 0x0, 0xfffffff8, 0x81000000, 0x2, 0x2, 0x1, 0x3, 0x0, 0xfffffffe, 0x9, 0x80, 0x5, 0x6, 0x6, 0x9, 0xe4, 0x8, 0x3, 0x1, 0x7, 0x8, 0x476, 0x1ab4, 0xfffff801, 0x7f, 0x8ba, 0x8, 0x3, 0x1, 0x8, 0xfffffff7, 0x5, 0xd, 0x1, 0x10001, 0xce9, 0x9], [0x80000000, 0x9, 0x3, 0x107d, 0x2, 0x5, 0x6, 0x4, 0x3, 0xf7, 0x3, 0x10, 0x9, 0x2, 0x3ff, 0x7, 0x1, 0xffffffff, 0xb5e, 0x8, 0x7, 0x7, 0x5, 0xffffffff, 0x3, 0x9, 0x4, 0xba5, 0x9, 0x8, 0x8, 0x10, 0x4, 0x8, 0x772c, 0x4, 0x7ff, 0x8, 0x7fffffff, 0x2, 0xb18, 0x0, 0x4, 0x38e6, 0x6, 0x7, 0x100, 0xc29d, 0x4, 0x4, 0x4, 0xfffffffa, 0x4, 0xca, 0xfda7, 0xf90, 0x80, 0xd, 0xb7ab, 0x1fa0000, 0x8, 0x1, 0xf835, 0xc8], [0x7, 0xffff8001, 0x401, 0xf, 0x4, 0x3, 0xfffffe01, 0x7ff, 0xc05, 0x0, 0x10, 0x5, 0x5, 0x10000, 0x80000001, 0x8000, 0x8, 0x0, 0x97de, 0x955a, 0x3918fac2, 0x9c08, 0x4a, 0x72, 0x401, 0x1, 0x4, 0x4, 0x6, 0x1, 0x4, 0x7ff, 0x0, 0x2, 0x40000, 0x1, 0x7f, 0x2, 0x3, 0x1ff, 0x4, 0x55f5, 0x3, 0xa79d, 0x5, 0x8, 0xd9, 0x8, 0xfffffffb, 0x4, 0x9, 0x1, 0xd36a, 0x5, 0x8, 0x7ff, 0xab22, 0x0, 0x4, 0x9, 0xad0, 0x8, 0x6af, 0x2e0d], [0x1, 0x5, 0x7ff, 0xffffffbe, 0x2, 0x40, 0x1, 0x10000, 0xb7a, 0x2, 0x1000, 0x633, 0x0, 0x3, 0x1, 0xd05, 0xdce, 0x1, 0x4, 0xa, 0xe004, 0xb, 0xfffffe01, 0x0, 0x8, 0x4, 0xe60a, 0x3, 0x3, 0x7, 0x8, 0x0, 0x5, 0x3, 0x4, 0x4, 0x9, 0x4, 0x7, 0x20000000, 0x0, 0x5, 0x20, 0x5, 0x3c7a, 0xa, 0x9, 0x969, 0x4, 0x7fffffff, 0x6061, 0xc38, 0x5, 0xee, 0x8, 0xa, 0x4, 0x7f, 0x100, 0x3, 0xfffffc1e, 0x1, 0x1ff]}, 0x45c) 1.999351302s ago: executing program 9 (id=3149): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) madvise(&(0x7f00005dd000/0x4000)=nil, 0x4000, 0x12) syz_clone(0x80000400, 0x0, 0x0, 0x0, 0x0, 0x0) 1.824530547s ago: executing program 2 (id=3154): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xd}, {0x0, 0xfff3}, {0xd, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x7}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x4000004) 1.749154984s ago: executing program 9 (id=3156): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ce}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="630500020000000adf3da7b33389", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.719650272s ago: executing program 1 (id=3157): r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010029bd7000ffdbdf25030000000800010000000000100007800c00018008000100", @ANYRES32=r1], 0x2c}, 0x1, 0x0, 0x0, 0xe256610c62001369}, 0x600000c0) 1.588728297s ago: executing program 1 (id=3160): r0 = socket$inet(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) connect$l2tp(r0, &(0x7f00000001c0)={0x2, 0x0, @local, 0x1}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) 1.551617843s ago: executing program 9 (id=3161): r0 = socket$kcm(0x2, 0x5, 0x84) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)}], 0x1}], 0x1, 0x40800) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000), 0x8) 1.540477447s ago: executing program 2 (id=3163): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@ipv6_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0xc7, 0x3}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x0, @SEG6_LOCAL_ACTION={0x8, 0x1, 0x4}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x40810}, 0x20000000) 1.433218375s ago: executing program 1 (id=3165): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@nodelalloc}, {@abort}]}, 0x0, 0x60a, &(0x7f0000000a40)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r0, &(0x7f0000000400)=""/4096, 0x1000) 1.429821845s ago: executing program 9 (id=3166): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000480), 0x5, 0x3e2, &(0x7f0000000a00)="$eJzs3M1uG0UcAPD/br5I2tRB4oAKh0igEiRI6kCAAhKFKx8XyomTlaSlwv1QEyRaciiIEycOiBuHvgAHHqCqEBISr8ALoEoVSnOAW9Dau44b26mt2F3a/n7SaGd2x5n5ezer2fXuBPDYmo+I0xExFhHLEVHJ16d5iuvNlNW7u721urO9tZrE7u7HfyeR5OuKv5XkyyN5YSGNSL+NeOZ6Z7sbV699XqvX16/k5aXNC5eXNq5ee/n8hdq59XPrF6uvn6pWV5bfqL46tFh/fP7FU2PvnT7+05+VWyuTk9NZf4/m29rjGJb5mG99J/utDLuxkk2W3QEAAPqS5mP/8cb4vxJjjVxTJZa2Su0cAAAAMBS77+TLA316op9aAAAAwP9V4qoeAAAAHnHFcwB3t7dWi1TWswhluPNuRMztvdu804p/PJ7I60yM8P3W+Yi4fCKpZClG9B4yAEC7W9n452S38V8aT7fVm4pojIemh9z+/L5y5/gnvT3kJu+Rjf/ejoidjvFfWlSZG8tLs42h4kRy9nx9/WREHIuIhZiYysrVA9p4/5+fP+q1LYv/t2T2WJGy9rPlXo309vjUvZ9Zq23WDhNzuztfRxwf7xZ/0hr/JhExc4g2xr668WavbfePf7R2b0S80G3/tw34k4PnJ1pqHA9LxVHR6d9vfvmwV/tlx5/t/5mux39r5qK5pH2+po3GujNvDdDGzc/+eLbXtvbrn0GO/8nkTCNf7KYva5ubV6oRk8kHneuX9z5blIv6WfwLz3X//y/Of0k+p9XR/BwwqO++//WlfuLPUtZ+cS34IGTxrw20/wfPvHbz9096tX//+LP935wDbCFf08/5r98OHua7AwAAgIdF2rivkaSLrXyaLi4273c8FTNpfXYm4uylLy6uNe9/zMVEWtzpqrTdD602f0ZvlZf3lV+JiCcj4ofKdKO8uHqpvlZ28AAAAPCYONLj+j/z1wN7CgEAAAAYubmyOwAAAACMXJfr/6ky+gEAAACMxGHm9ZORkXlUM2WfmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5u/wUAAP//YkyuJA==") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x40, 0x41, 0xffffffffffffffff, 0x9}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000b80)={r0, &(0x7f0000000a80), 0x0}, 0x20) 1.325044275s ago: executing program 7 (id=3167): bpf$PROG_LOAD(0x5, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x9000004, 0x81, 0xffffffff}) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000040), 0x4) 1.286981273s ago: executing program 2 (id=3168): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x58, &(0x7f0000000980)={[{@errors_remount}, {@delalloc}, {@nomblk_io_submit}, {@stripe={'stripe', 0x3d, 0x4ffff}}, {@norecovery}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x186b}}]}, 0xfe, 0x799, &(0x7f00000001c0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280), 0x2810000, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) 1.177563232s ago: executing program 7 (id=3169): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x280440e, &(0x7f0000000380)={[{@debug}, {@test_dummy_encryption_v1}, {@inlinecrypt}, {@user_xattr}, {@noinit_itable}, {@norecovery}, {@minixdf}, {@nodioread_nolock}, {@errors_remount}, {@jqfmt_vfsv0}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0x1, 0xbdb, &(0x7f0000001000)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a) fallocate(r0, 0x0, 0x8, 0x8000) read$FUSE(r0, &(0x7f0000001c00)={0x2020}, 0x2020) 1.106506311s ago: executing program 0 (id=3170): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000180)={[{@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@nombcache}, {@errors_remount}, {@quota}]}, 0xff, 0x44b, &(0x7f0000000dc0)="$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") syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8480, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRES8], 0x3, 0x232, &(0x7f0000000640)="$eJzs2r+LHGUYB/BnzsSLFy574i8SEF+0UJshd7VFDklAXFA0K0RBMvFmddlx99hZDlbEbKWtf4K1WNoJktLmGv8CC7trrkwhjmz21GzYFEHNJfHzaeaBd77M+zLvvDzFHLz29af9bp13i3GsZFmsXIhp3MxiI1biT9N49eUrPz3/7pX339xuty++k9Kl7cubWymlMy/8+MHn3714Y3z6ve/P/LAa+xsfHhxu/br/7P7Zg98vf9KrU69Og+E4FenacDgurlVl2unV/Tylt6uyqMvUG9TlaGG8Ww13dyepGOysr+2OyrpOxWCS+uUkjYdpPJqk4uOiN0h5nqf1teCf6Hx7s2nisDl5NZqmeeKbOH0j1n+JVmRPpuypC9kzV7PnptnZw6ZpHfdU+U94//9vtx3qpyKqr/Y6e535dT6+3Y1eVFHG+WjFbzHbJkfm9aU32hfPp1s24svq+lH++l7nscX8ZrRiY3l+c55Pi/nVWIs4GXGU34pWPL08v7U0fypeeem25+fRip8/imFUsROz7N/5LzZTev2t9h35c7fuAwB41OTpL0v7tzy/2/g8fw/94R391Yk4d+J4105EPfmsX1RVOXpki9kqH4BpKP7NYjXuKZVFTGf74IGY/OMPx6d3rMcS98niOQkAAAAAAAAAAMDD4n79gQsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHA3fwQAAP//rHDMJg==") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) 1.082758513s ago: executing program 1 (id=3171): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e23, 0x6, @private1, 0x1}, {0xa, 0xfffe, 0xffffffff, @private0={0xfc, 0x0, '\x00', 0x1}}, r1, 0x27f9}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000), r1, 0x0, 0x2, 0x4}}, 0x20) 1.074182421s ago: executing program 9 (id=3172): r0 = socket(0xf, 0x3, 0x2) r1 = memfd_create(&(0x7f0000000700)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh~\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebb8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97\xfb\xad\'\fL\xe6\x1f]\xe0\x80\v}\x91\xa1\xe1;\x1a\\\xa7\x13-:\x11\xdc)\x98\xe8\x9f- \x9d\xc5\xdft\xc0\xb0\xb5\xdfU;]\xef\xeft\x85\xb3M$\xf9\x80\xb1\x1e@\x04\x81\x8do\x84\xe3\xe9\xc1\x10\xceb\x91\xb2\xdfy:\xaf\x81\x1b\x82\x13d\xc24C\xd8\x15\xb4\x8co\\\xbb@\xba\xb4K\xd3\x88\rrc\xce\x82\xd8\xf9\xd9\xa1R\xe4\x99\xcf\xe3#M\xfc\x8c\xbe\xad\x8eH\xf7q\x89\x14\xd7\x06\bw9\x18B\x12\xf1\x8c0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010065bd7000ffdbdf252100000008000300", @ANYRES32=r2, @ANYBLOB="24002d8005000100030000000500040000000000080002"], 0x40}, 0x1, 0x0, 0x0, 0x24880}, 0x4000880) 887.336373ms ago: executing program 0 (id=3174): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=@bridge_dellink={0x2c, 0x13, 0x1, 0x0, 0x2000000, {0x7, 0x0, 0x0, r1, 0x0, 0x8008}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x5, 0x0, 0x1, {0x4}}]}]}, 0x2c}}, 0x0) 851.629779ms ago: executing program 1 (id=3175): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040)=0x18, 0x4) 787.769438ms ago: executing program 7 (id=3176): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48c4}, 0x18) 726.639898ms ago: executing program 0 (id=3177): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x2c, r2, 0x1, 0xfffffffe, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) 723.757064ms ago: executing program 1 (id=3178): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000004c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={r1, 0x0, r0}) 608.414474ms ago: executing program 0 (id=3179): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50020000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000080001000000000004000480080002000100000010000c7d0c000b8008000a00b4ed000004000880c8000c8024"], 0x250}}, 0x2000c000) 513.021555ms ago: executing program 0 (id=3180): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0xfffffffe) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 504.862011ms ago: executing program 7 (id=3181): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x4, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5, 0x9, 0x5, 0xffff2d37, 0x0, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0xe, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x47, 0x4c74, 0x80000000, 0x242, 0x3, 0x4, 0x0, 0x80008071, 0x7, 0x8, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0xffff, 0x3, 0x5, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x7, 0x209, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x8000047, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x81, 0x24f, 0x42, 0x3], [0x7, 0x408, 0x2, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x3, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x0, 0x4, 0x2950bfaf, 0x1000, 0x4b2760ed, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x1, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2eb, 0x0, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x6, 0x1, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x201, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x6b, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x9, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x400007, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000004c00048024000180090001006d65746100000000140002800800014000000001080002400000001724000180090001006d61737100000000140002800800024000000008080003"], 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) 366.71951ms ago: executing program 2 (id=3182): sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000d1", @ANYRES16, @ANYBLOB="04"], 0x14}}, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xe, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 180.811725ms ago: executing program 39 (id=3182): sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000d1", @ANYRES16, @ANYBLOB="04"], 0x14}}, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xe, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 146.230644ms ago: executing program 7 (id=3184): setns(0xc9, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 145.269983ms ago: executing program 0 (id=3185): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00444, &(0x7f0000000080)={[{@grpquota}, {@noblock_validity}]}, 0x1, 0xbbb, &(0x7f0000001800)="$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") syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x1014015, &(0x7f0000000000)={[{@prjquota}, {@nodiscard}]}, 0x1, 0xbf3, &(0x7f0000000c00)="$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") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, &(0x7f0000000000)) 0s ago: executing program 7 (id=3186): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x10, 0x0, r0}, 0x50) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000380), 0x800000, &(0x7f0000002780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) kernel console output (not intermixed with test programs): 1 [ 91.655043][ T8975] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 91.658834][ T8975] EXT4-fs error (device loop6): __ext4_get_inode_loc:4886: comm syz.6.1663: Invalid inode table block 0 in block_group 0 [ 91.658857][ T8975] loop6: lost filesystem error report for type 5 error -117 [ 91.660346][ C0] EXT4-fs (loop6): error count since last fsck: 4 [ 91.660356][ C0] EXT4-fs (loop6): initial error at time 347: ext4_read_block_bitmap_nowait:483 [ 91.660369][ C0] EXT4-fs (loop6): last error at time 347: __ext4_get_inode_loc:4886 [ 91.673771][ T8975] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 91.673804][ T8975] loop6: lost filesystem error report for type 5 error -117 [ 91.691317][ T8975] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 91.692721][ T8975] loop6: lost filesystem error report for type 5 error -117 [ 91.697956][ T8975] EXT4-fs error (device loop6): __ext4_get_inode_loc:4886: comm syz.6.1663: Invalid inode table block 0 in block_group 0 [ 91.697996][ T8975] loop6: lost filesystem error report for type 5 error -117 [ 91.701711][ T8975] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 91.701743][ T8975] loop6: lost filesystem error report for type 5 error -117 [ 91.705491][ T8975] EXT4-fs error (device loop6): ext4_truncate:4691: inode #11: comm syz.6.1663: mark_inode_dirty error [ 91.705543][ T8975] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 91.709278][ T8975] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 91.709307][ T8975] loop6: lost filesystem error report for type 5 error -117 [ 91.713981][ T8975] EXT4-fs error (device loop6): __ext4_get_inode_loc:4886: comm syz.6.1663: Invalid inode table block 0 in block_group 0 [ 91.714014][ T8975] loop6: lost filesystem error report for type 5 error -117 [ 91.719602][ T8975] EXT4-fs (loop6): 1 truncate cleaned up [ 91.720174][ T8975] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.837915][ T8062] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.901898][ T6527] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.175097][ T15] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.225923][ T15] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.273357][ T15] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.342248][ T15] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.366090][ T4710] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 92.368930][ T4710] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 92.373797][ T4710] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 92.376558][ T4710] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 92.379020][ T4710] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.490154][ T4711] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 92.566116][ T15] bridge_slave_1: left allmulticast mode [ 92.566159][ T15] bridge_slave_1: left promiscuous mode [ 92.566265][ T15] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.589384][ T15] bridge_slave_0: left allmulticast mode [ 92.589418][ T15] bridge_slave_0: left promiscuous mode [ 92.589506][ T15] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.045333][ T15] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.071573][ T15] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.079032][ T15] bond0 (unregistering): Released all slaves [ 93.097647][ T9046] loop4: detected capacity change from 0 to 512 [ 93.144911][ T9046] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 93.174576][ T15] tipc: Disabling bearer [ 93.174752][ T15] tipc: Left network mode [ 93.232717][ T9053] loop6: detected capacity change from 0 to 1024 [ 93.281058][ T9053] EXT4-fs: Ignoring removed oldalloc option [ 93.281086][ T9053] EXT4-fs: Ignoring removed orlov option [ 93.293742][ T9053] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a042c118, mo2=0002] [ 93.293790][ T9053] System zones: 0-1, 3-12 [ 93.294348][ T9053] EXT4-fs (loop6): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.305479][ T9060] __nla_validate_parse: 1 callbacks suppressed [ 93.305524][ T9060] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1693'. [ 93.402883][ T8062] EXT4-fs (loop6): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 93.452955][ T9066] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1693'. [ 93.627746][ T9080] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 93.652675][ T9072] loop6: detected capacity change from 0 to 8192 [ 93.722788][ T9072] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 93.722835][ T9072] FAT-fs (loop6): Filesystem has been set read-only [ 93.722862][ T9072] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 93.722897][ T9072] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 93.722946][ T9072] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 93.722963][ T9072] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 93.736803][ T9072] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 93.736851][ T9072] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 93.736892][ T9072] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 93.736914][ T9072] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 93.940111][ T9100] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1705'. [ 94.082108][ T15] hsr_slave_0: left promiscuous mode [ 94.088975][ T15] hsr_slave_1: left promiscuous mode [ 94.089310][ T15] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.089338][ T15] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.122096][ T15] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.122133][ T15] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.131373][ T15] batman_adv: batadv0: Interface deactivated: macvlan2 [ 94.131401][ T15] batman_adv: batadv0: Removing interface: macvlan2 [ 94.157931][ T15] batadv_slave_1: left allmulticast mode [ 94.157966][ T15] batadv_slave_1: left promiscuous mode [ 94.158008][ T15] veth1_macvtap: left promiscuous mode [ 94.158112][ T15] veth0_macvtap: left promiscuous mode [ 94.158164][ T15] veth1_vlan: left promiscuous mode [ 94.158202][ T15] veth0_vlan: left promiscuous mode [ 94.412673][ T4710] Bluetooth: hci1: command tx timeout [ 94.633936][ T15] team0 (unregistering): Port device team_slave_1 removed [ 94.656942][ T15] team0 (unregistering): Port device team_slave_0 removed [ 94.907357][ T9110] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.913542][ T9110] bridge_slave_1: left allmulticast mode [ 94.915743][ T9110] bridge_slave_1: left promiscuous mode [ 94.915894][ T9110] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.926617][ T9110] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 94.931707][ T9116] virt_wifi0: entered promiscuous mode [ 94.932637][ T9116] batman_adv: batadv0: Adding interface: virt_wifi0 [ 94.932654][ T9116] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.932677][ T9116] batman_adv: batadv0: Interface activated: virt_wifi0 [ 95.271981][ T9140] loop4: detected capacity change from 0 to 2048 [ 95.485550][ T9008] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.485600][ T9008] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.485719][ T9008] bridge_slave_0: entered allmulticast mode [ 95.486198][ T9008] bridge_slave_0: entered promiscuous mode [ 95.486941][ T9008] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.486970][ T9008] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.487031][ T9008] bridge_slave_1: entered allmulticast mode [ 95.487471][ T9008] bridge_slave_1: entered promiscuous mode [ 95.517853][ T9140] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=8842c029, mo2=0003] [ 95.526956][ T9140] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.539060][ T9008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.541989][ T9165] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 95.545051][ T9165] EXT4-fs (loop4): Remounting filesystem read-only [ 95.576730][ T9008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.653466][ T9008] team0: Port device team_slave_0 added [ 95.659520][ T4718] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.676037][ T9008] team0: Port device team_slave_1 added [ 95.737275][ T9008] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.737311][ T9008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.737339][ T9008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.737985][ T9008] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.737999][ T9008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.738020][ T9008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.844193][ T9008] hsr_slave_0: entered promiscuous mode [ 95.844566][ T9008] hsr_slave_1: entered promiscuous mode [ 95.844815][ T9008] debugfs: 'hsr0' already exists in 'hsr' [ 95.844832][ T9008] Cannot create hsr debugfs directory [ 95.910603][ T9185] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1729'. [ 95.927579][ T9187] loop4: detected capacity change from 0 to 512 [ 96.062342][ T9187] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #15: comm syz.4.1727: corrupted inode contents [ 96.080878][ T9187] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 96.083927][ T9187] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 96.086969][ T9187] loop4: lost filesystem error report for type 5 error -117 [ 96.089951][ C0] EXT4-fs (loop4): error count since last fsck: 2 [ 96.089974][ C0] EXT4-fs (loop4): initial error at time 352: ext4_do_update_inode:5742: inode 15 [ 96.090010][ C0] EXT4-fs (loop4): last error at time 352: ext4_orphan_del:303 [ 96.122300][ T9187] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #15: comm syz.4.1727: corrupted inode contents [ 96.122344][ T9187] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 96.125735][ T9187] EXT4-fs error (device loop4): ext4_evict_inode:315: inode #15: comm syz.4.1727: mark_inode_dirty error [ 96.125779][ T9187] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 96.130305][ T9187] EXT4-fs (loop4): 1 orphan inode deleted [ 96.142640][ T9187] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.346083][ T4718] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.392249][ T9008] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 96.393853][ T9212] Injecting memory failure for pfn 0x13d27a at process virtual address 0x20000000 [ 96.401792][ T9008] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.406708][ T9212] Memory failure: 0x13d27a: Sending SIGBUS to syz.2.1740:9212 due to hardware memory corruption [ 96.406782][ T9212] Memory failure: 0x13d27a: recovery action for dirty LRU page: Recovered [ 96.406818][ T9212] Injecting memory failure for pfn 0x219270 at process virtual address 0x20001000 [ 96.406846][ T9212] Memory failure: 0x219270: Sending SIGBUS to syz.2.1740:9212 due to hardware memory corruption [ 96.406861][ T9212] Memory failure: 0x219270: recovery action for already poisoned page: Failed [ 96.417666][ T9008] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 96.446538][ T9008] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.456005][ T9008] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 96.481986][ T9008] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.492682][ T4710] Bluetooth: hci1: command tx timeout [ 96.505883][ T9008] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 96.533891][ T9008] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.564190][ T9223] loop3: detected capacity change from 0 to 512 [ 96.609713][ T9223] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.642245][ T9223] EXT4-fs error (device loop3): ext4_resize_begin:60: comm syz.3.1743: resize_inode disabled but reserved GDT blocks non-zero [ 96.742202][ T9008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.769253][ T4717] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.801225][ T9008] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.863404][ T1129] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.863456][ T1129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.864054][ T1129] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.864082][ T1129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.877416][ T9008] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 96.899553][ T9008] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.963839][ T4400] 8021q: adding VLAN 0 to HW filter on device eth8 [ 97.090622][ T9257] loop2: detected capacity change from 0 to 1024 [ 97.092237][ T9257] EXT4-fs: Ignoring removed orlov option [ 97.096063][ T9259] loop3: detected capacity change from 0 to 512 [ 97.103711][ T9257] EXT4-fs (loop2): stripe (7) is not aligned with cluster size (4096), stripe is disabled [ 97.111837][ T9257] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 97.111984][ T9257] EXT4-fs (loop2): orphan cleanup on readonly fs [ 97.116009][ T9259] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.124878][ T9257] EXT4-fs error (device loop2): __ext4_get_inode_loc:4886: comm syz.2.1750: Invalid inode table block 0 in block_group 0 [ 97.124913][ T9257] loop2: lost filesystem error report for type 5 error -117 [ 97.131058][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 97.131086][ C0] EXT4-fs (loop2): initial error at time 353: __ext4_get_inode_loc:4886 [ 97.131118][ C0] EXT4-fs (loop2): last error at time 353: __ext4_get_inode_loc:4886 [ 97.140452][ T9257] EXT4-fs (loop2): Remounting filesystem read-only [ 97.140489][ T9257] Quota error (device loop2): write_blk: dquota write failed [ 97.140542][ T9257] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 97.140612][ T9257] EXT4-fs (loop2): 1 truncate cleaned up [ 97.153689][ T9257] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 97.182885][ T9257] EXT4-fs (loop2): shut down requested (0) [ 97.271063][ T4717] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.364006][ T4708] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.448201][ T9280] loop2: detected capacity change from 0 to 1024 [ 97.475780][ T9280] EXT4-fs: Ignoring removed nomblk_io_submit option [ 97.502081][ T9280] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.584832][ T9008] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.746313][ T4708] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.821304][ T9304] loop4: detected capacity change from 0 to 512 [ 97.879303][ T9304] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.910194][ T9304] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #2: comm syz.4.1761: corrupted inode contents [ 97.917559][ T9304] EXT4-fs error (device loop4): ext4_dirty_inode:6639: inode #2: comm syz.4.1761: mark_inode_dirty error [ 97.927485][ T9304] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #2: comm syz.4.1761: corrupted inode contents [ 97.931578][ T9304] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.1761: mark_inode_dirty error [ 97.948391][ T9304] EXT4-fs warning (device loop4): ext4_es_cache_extent:1082: inode #2: comm syz.4.1761: ES cache extent failed: add [0,1,22,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 97.948391][ T9304] [ 97.953093][ T9304] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #2: comm syz.4.1761: corrupted inode contents [ 97.956132][ T9304] EXT4-fs error (device loop4): ext4_append:88: inode #2: comm syz.4.1761: mark_inode_dirty error [ 97.958442][ T9304] EXT4-fs error (device loop4) in ext4_append:100: Corrupt filesystem [ 97.982045][ T9304] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #2: comm syz.4.1761: corrupted inode contents [ 97.984357][ T9304] EXT4-fs error (device loop4): add_dirent_to_buf:2151: inode #2: comm syz.4.1761: mark_inode_dirty error [ 98.026195][ T4400] 8021q: adding VLAN 0 to HW filter on device eth9 [ 98.065669][ T4718] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.074901][ T9008] veth0_vlan: entered promiscuous mode [ 98.130882][ T9008] veth1_vlan: entered promiscuous mode [ 98.166563][ T9008] veth0_macvtap: entered promiscuous mode [ 98.189669][ T9008] veth1_macvtap: entered promiscuous mode [ 98.215221][ T9008] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.258595][ T9008] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.278456][ T9331] loop2: detected capacity change from 0 to 8 [ 98.320677][ T9331] SQUASHFS error: Unknown inode type 0 in squashfs_iget! [ 98.361892][ T40] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.512248][ T15] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.512269][ T15] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.530024][ T1129] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.532570][ T1129] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.560075][ T40] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.569991][ T4710] Bluetooth: hci1: command tx timeout [ 98.573381][ T1129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.574968][ T1129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.812621][ T9358] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1778'. [ 98.815134][ T9358] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1778'. [ 98.816708][ T9358] netlink: 592 bytes leftover after parsing attributes in process `syz.3.1778'. [ 98.889170][ T4400] 8021q: adding VLAN 0 to HW filter on device eth10 [ 98.898152][ T4710] Bluetooth: hci4: link tx timeout [ 98.899775][ T4710] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 98.902397][ T4710] Bluetooth: hci4: link tx timeout [ 98.903380][ T4710] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 99.209067][ T4400] 8021q: adding VLAN 0 to HW filter on device eth11 [ 99.505121][ T9388] loop2: detected capacity change from 0 to 512 [ 99.544075][ T9388] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.645808][ T9398] loop3: detected capacity change from 0 to 128 [ 99.646302][ T9398] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 99.772469][ T4708] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.891984][ T9417] loop6: detected capacity change from 0 to 256 [ 99.927670][ T9417] FAT-fs (loop6): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 99.927718][ T9417] FAT-fs (loop6): Filesystem has been set read-only [ 99.964048][ T9422] loop2: detected capacity change from 0 to 1024 [ 99.979679][ T9422] EXT4-fs: inline encryption not supported [ 99.981832][ T9422] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 99.986284][ T9422] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.157871][ T9436] loop7: detected capacity change from 0 to 1024 [ 100.158223][ T9436] EXT4-fs: inline encryption not supported [ 100.168563][ T9436] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 100.168644][ T9436] EXT4-fs (loop7): stripe (7) is not aligned with cluster size (4096), stripe is disabled [ 100.186035][ T9436] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 100.186185][ T9436] EXT4-fs (loop7): orphan cleanup on readonly fs [ 100.189318][ T9436] EXT4-fs error (device loop7): ext4_quota_enable:7228: comm syz.7.1799: Bad quota inum: 9, type: 2 [ 100.189345][ T9436] loop7: lost filesystem error report for type 5 error -117 [ 100.191590][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 100.191605][ C0] EXT4-fs (loop7): initial error at time 356: ext4_quota_enable:7228 [ 100.191623][ C0] EXT4-fs (loop7): last error at time 356: ext4_quota_enable:7228 [ 100.198522][ T9436] EXT4-fs (loop7): Remounting filesystem read-only [ 100.198545][ T9436] EXT4-fs warning (device loop7): ext4_enable_quotas:7276: Failed to enable quota tracking (type=2, err=-117, ino=9). Please run e2fsck to fix. [ 100.198650][ T9436] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 100.199124][ T9436] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 100.246673][ T9436] netlink: 100 bytes leftover after parsing attributes in process `syz.7.1799'. [ 100.296291][ T9008] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.324407][ T9443] loop3: detected capacity change from 0 to 512 [ 100.326196][ T9443] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 100.339057][ T9443] EXT4-fs (loop3): 1 truncate cleaned up [ 100.339526][ T9443] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.475919][ T4717] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.535937][ T4708] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.650009][ T4711] Bluetooth: hci1: command tx timeout [ 100.660501][ T9463] nvme_fcloop: unknown parameter or missing value 'w' [ 100.765357][ T9473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.767223][ T9473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.778829][ T9473] loop4: detected capacity change from 0 to 512 [ 100.793582][ T9473] EXT4-fs: Ignoring removed nobh option [ 100.801556][ T9476] erspan0: entered promiscuous mode [ 100.801631][ T9476] macsec1: entered promiscuous mode [ 100.806821][ T9473] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 100.822118][ T9473] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.1816: attempt to clear invalid blocks 1 len 1 [ 100.822169][ T9473] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 100.827039][ T9473] EXT4-fs (loop4): Remounting filesystem read-only [ 100.830341][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 100.830356][ C0] EXT4-fs (loop4): initial error at time 356: ext4_clear_blocks:876: inode 13 [ 100.830376][ C0] EXT4-fs (loop4): last error at time 356: ext4_clear_blocks:876: inode 13 [ 100.837117][ T9473] EXT4-fs (loop4): 1 truncate cleaned up [ 100.837610][ T9473] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.884634][ T9478] loop3: detected capacity change from 0 to 4096 [ 100.902773][ T9478] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 100.913012][ T9478] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.943257][ T9478] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1819'. [ 100.945230][ T9478] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1819'. [ 100.971692][ T4711] Bluetooth: hci4: command 0x0406 tx timeout [ 101.004300][ T9487] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1821'. [ 101.024757][ T4717] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.147786][ T9497] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1834'. [ 101.351427][ T9510] Soft offlining pfn 0x133fab at process virtual address 0x209bb000 [ 101.376234][ T9510] Soft offline: 0x133fab: invalidated [ 101.386615][ T9514] netlink: 116 bytes leftover after parsing attributes in process `syz.6.1829'. [ 101.425839][ T4718] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.992115][ T9548] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1840'. [ 102.910828][ T9613] vlan2: entered allmulticast mode [ 102.915392][ T9613] macsec0: entered allmulticast mode [ 102.915435][ T9613] veth1_macvtap: entered allmulticast mode [ 103.053992][ T4711] Bluetooth: hci4: command 0x0406 tx timeout [ 103.249290][ T9631] loop7: detected capacity change from 0 to 1024 [ 103.280428][ T9631] EXT4-fs: inline encryption not supported [ 103.285061][ T9631] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 103.295214][ T9631] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.341076][ T9634] loop4: detected capacity change from 0 to 8 [ 103.677547][ T9654] vhci_hcd vhci_hcd.2: default hub control req: 8001 v0000 i0000 l22933 [ 103.779607][ T9664] loop4: detected capacity change from 0 to 512 [ 103.802297][ T9008] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.826496][ T9664] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.862606][ T9664] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.1881: corrupted xattr block 33: invalid header [ 103.877604][ T9664] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.1881: corrupted xattr block 33: invalid header [ 103.882780][ T9664] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.1881: corrupted xattr block 33: invalid header [ 103.961114][ T9682] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.1881: corrupted xattr block 33: invalid header [ 103.994378][ T9682] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 103.995165][ T9682] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 31 with error 28 [ 103.995191][ T9682] EXT4-fs (loop4): This should not happen!! Data will be lost [ 103.995191][ T9682] [ 103.995204][ T9682] EXT4-fs (loop4): Total free blocks count 0 [ 103.995215][ T9682] EXT4-fs (loop4): Free/Dirty block details [ 103.995234][ T9682] EXT4-fs (loop4): free_blocks=65280 [ 103.995253][ T9682] EXT4-fs (loop4): dirty_blocks=31 [ 103.995264][ T9682] EXT4-fs (loop4): Block reservation details [ 103.995273][ T9682] EXT4-fs (loop4): i_reserved_data_blocks=31 [ 104.035463][ T9683] loop3: detected capacity change from 0 to 512 [ 104.035889][ T9683] EXT4-fs: Ignoring removed nomblk_io_submit option [ 104.035933][ T9683] EXT4-fs: Ignoring removed mblk_io_submit option [ 104.051160][ T9682] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 28 [ 104.065152][ T9683] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 104.065184][ T9683] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 104.073687][ T9683] EXT4-fs (loop3): 1 truncate cleaned up [ 104.075266][ T9683] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.214912][ T4717] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.217441][ T4718] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 104.276008][ T9697] usb_storage.quirks: string doesn't fit in 127 chars. [ 104.297140][ T9701] loop2: detected capacity change from 0 to 256 [ 104.792741][ T9741] loop7: detected capacity change from 0 to 128 [ 104.805163][ T9743] netlink: 'syz.6.1912': attribute type 12 has an invalid length. [ 104.806671][ T9743] netlink: 'syz.6.1912': attribute type 29 has an invalid length. [ 104.808232][ T9743] __nla_validate_parse: 1 callbacks suppressed [ 104.809656][ T9743] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1912'. [ 104.812450][ T9743] netlink: 'syz.6.1912': attribute type 1 has an invalid length. [ 104.813965][ T9743] netlink: 'syz.6.1912': attribute type 2 has an invalid length. [ 104.825862][ T9741] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 104.861381][ T9741] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 104.996882][ T9008] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 105.061335][ T9760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1917'. [ 105.061379][ T9760] netlink: 'syz.3.1917': attribute type 21 has an invalid length. [ 105.072024][ T30] audit: type=1400 audit(361.047:6): lsm=SMACK fn=smack_inode_setxattr action=denied subject="_" object="l" requested=w pid=9757 comm="syz.4.1915" name="file0" dev="tmpfs" ino=2064 [ 105.228640][ T9774] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1921'. [ 105.303619][ T9783] pim6reg: entered allmulticast mode [ 105.344322][ T9778] pim6reg: left allmulticast mode [ 105.755091][ T9807] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1932'. [ 105.757037][ T9807] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1932'. [ 105.835959][ T9813] IPv6: NLM_F_CREATE should be specified when creating new route [ 105.836068][ T9813] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 105.836092][ T9813] IPv6: NLM_F_CREATE should be set when creating new route [ 105.837025][ T9813] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 105.941534][ T9819] loop6: detected capacity change from 0 to 128 [ 105.973868][ T9823] skbuff: bad partial csum: csum=65506/2 headroom=162 headlen=65526 [ 106.161872][ T9830] loop7: detected capacity change from 0 to 4096 [ 106.196681][ T9830] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.288009][ T9830] EXT4-fs: Cannot change journaled quota options when quota turned on [ 106.424417][ T9850] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1948'. [ 106.432361][ T9008] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.382826][ T9925] loop4: detected capacity change from 0 to 512 [ 107.404354][ T9925] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e019, mo2=0002] [ 107.404400][ T9925] System zones: 0-2, 18-18, 34-34 [ 107.426151][ T9925] EXT4-fs (loop4): 1 orphan inode deleted [ 107.426647][ T9925] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.483043][ T9925] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 107.494431][ T9925] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 107.555461][ T4718] EXT4-fs error (device loop4): ext4_readdir:265: inode #11: block 4: comm syz-executor: path /409/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 107.565076][ T4718] EXT4-fs error (device loop4): ext4_empty_dir:3091: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 107.575890][ T4718] EXT4-fs warning (device loop4): ext4_empty_dir:3094: inode #11: comm syz-executor: directory missing '.' [ 107.576115][ T4718] EXT4-fs error (device loop4): ext4_readdir:265: inode #11: block 4: comm syz-executor: path /409/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 107.582819][ T4718] EXT4-fs error (device loop4): ext4_empty_dir:3091: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 107.587363][ T4718] EXT4-fs warning (device loop4): ext4_empty_dir:3094: inode #11: comm syz-executor: directory missing '.' [ 107.590312][ T4718] EXT4-fs error (device loop4): ext4_readdir:265: inode #11: block 4: comm syz-executor: path /409/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 107.597009][ T4718] EXT4-fs error (device loop4): ext4_empty_dir:3091: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 107.600770][ T4718] EXT4-fs warning (device loop4): ext4_empty_dir:3094: inode #11: comm syz-executor: directory missing '.' [ 107.603105][ T4718] EXT4-fs error (device loop4): ext4_readdir:265: inode #11: block 4: comm syz-executor: path /409/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 107.623760][ T4718] EXT4-fs error (device loop4): ext4_empty_dir:3091: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 107.629654][ T4718] EXT4-fs warning (device loop4): ext4_empty_dir:3094: inode #11: comm syz-executor: directory missing '.' [ 107.631379][ T4718] EXT4-fs error (device loop4): ext4_readdir:265: inode #11: block 4: comm syz-executor: path /409/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 107.646588][ T4718] EXT4-fs error (device loop4): ext4_empty_dir:3091: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 107.650695][ T4718] EXT4-fs warning (device loop4): ext4_empty_dir:3094: inode #11: comm syz-executor: directory missing '.' [ 107.662211][ T4718] EXT4-fs warning (device loop4): ext4_empty_dir:3094: inode #11: comm syz-executor: directory missing '.' [ 107.666761][ T4718] EXT4-fs warning (device loop4): ext4_empty_dir:3094: inode #11: comm syz-executor: directory missing '.' [ 107.672753][ T4718] EXT4-fs warning (device loop4): ext4_empty_dir:3094: inode #11: comm syz-executor: directory missing '.' [ 107.676434][ T4718] EXT4-fs warning (device loop4): ext4_empty_dir:3094: inode #11: comm syz-executor: directory missing '.' [ 107.694951][ T4718] EXT4-fs warning (device loop4): ext4_empty_dir:3094: inode #11: comm syz-executor: directory missing '.' [ 107.883724][ T9957] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1987'. [ 107.892099][ T9960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1988'. [ 108.007120][ T9966] loop2: detected capacity change from 0 to 256 [ 108.111882][ T9974] loop7: detected capacity change from 0 to 256 [ 108.377187][ T9989] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2002'. [ 108.419232][ T5626] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.671030][T10003] loop2: detected capacity change from 0 to 1024 [ 108.702241][T10003] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 108.737469][T10003] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: comm syz.2.2011: lblock 0 mapped to illegal pblock 0 (length 6) [ 108.749979][T10003] EXT4-fs (loop2): Remounting filesystem read-only [ 108.786051][T10009] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 108.786084][T10009] IPv6: NLM_F_CREATE should be set when creating new route [ 108.786121][T10009] IPv6: NLM_F_CREATE should be set when creating new route [ 108.806114][ T4711] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 108.808621][ T4711] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 108.811411][ T4711] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 108.814222][ T4711] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 108.816638][ T4711] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 108.844557][ T4708] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 108.909630][T10015] loop7: detected capacity change from 0 to 512 [ 108.925043][T10015] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #15: comm syz.7.2014: iget: bad i_size value: 38620345925642 [ 108.925076][T10015] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 108.927991][T10015] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.2014: couldn't read orphan inode 15 (err -117) [ 108.928023][T10015] loop7: lost filesystem error report for type 5 error -117 [ 108.929864][ C0] EXT4-fs (loop7): error count since last fsck: 2 [ 108.929877][ C0] EXT4-fs (loop7): initial error at time 620: ext4_orphan_get:1399: inode 15 [ 108.929893][ C0] EXT4-fs (loop7): last error at time 620: ext4_orphan_get:1404 [ 108.941903][T10015] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.027227][ T9008] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.214158][T10030] netlink: 'syz.2.2018': attribute type 83 has an invalid length. [ 109.248133][T10033] loop7: detected capacity change from 0 to 1024 [ 109.298128][T10038] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2021'. [ 109.325413][T10033] tipc: Invalid UDP bearer configuration [ 109.325459][T10033] tipc: Enabling of bearer rejected, failed to enable media [ 109.453461][T10042] loop3: detected capacity change from 0 to 512 [ 109.473749][T10042] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e019, mo2=0002] [ 109.473803][T10042] System zones: 0-2, 18-18, 34-34 [ 109.483401][T10042] EXT4-fs (loop3): 1 orphan inode deleted [ 109.483916][T10042] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.492372][T10047] loop2: detected capacity change from 0 to 4096 [ 109.520944][T10047] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.529772][T10042] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 109.542984][T10054] loop6: detected capacity change from 0 to 512 [ 109.544355][T10042] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 109.585592][T10054] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.2026: iget: bad i_size value: 38620345925642 [ 109.585625][T10054] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 109.588647][T10054] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.2026: couldn't read orphan inode 15 (err -117) [ 109.588689][T10054] loop6: lost filesystem error report for type 5 error -117 [ 109.590747][ C0] EXT4-fs (loop6): error count since last fsck: 2 [ 109.590766][ C0] EXT4-fs (loop6): initial error at time 621: ext4_orphan_get:1399: inode 15 [ 109.590782][ C0] EXT4-fs (loop6): last error at time 621: ext4_orphan_get:1404 [ 109.599417][T10054] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.613751][ T4717] EXT4-fs error (device loop3): ext4_readdir:265: inode #11: block 4: comm syz-executor: path /451/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 109.617996][T10047] EXT4-fs: Cannot change journaled quota options when quota turned on [ 109.631485][ T4717] EXT4-fs error (device loop3): ext4_empty_dir:3091: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 109.635507][ T4717] EXT4-fs warning (device loop3): ext4_empty_dir:3094: inode #11: comm syz-executor: directory missing '.' [ 109.635701][ T4717] EXT4-fs error (device loop3): ext4_readdir:265: inode #11: block 4: comm syz-executor: path /451/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 109.646908][ T4717] EXT4-fs error (device loop3): ext4_empty_dir:3091: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 109.675081][ T4717] EXT4-fs warning (device loop3): ext4_empty_dir:3094: inode #11: comm syz-executor: directory missing '.' [ 109.675590][ T4717] EXT4-fs error (device loop3): ext4_readdir:265: inode #11: block 4: comm syz-executor: path /451/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 109.675928][ T4717] EXT4-fs error (device loop3): ext4_empty_dir:3091: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 109.683612][ T4717] EXT4-fs warning (device loop3): ext4_empty_dir:3094: inode #11: comm syz-executor: directory missing '.' [ 109.683768][ T4717] EXT4-fs error (device loop3): ext4_readdir:265: inode #11: block 4: comm syz-executor: path /451/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 109.694220][ T4717] EXT4-fs error (device loop3): ext4_empty_dir:3091: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 109.697837][ T4717] EXT4-fs warning (device loop3): ext4_empty_dir:3094: inode #11: comm syz-executor: directory missing '.' [ 109.698018][ T4717] EXT4-fs error (device loop3): ext4_readdir:265: inode #11: block 4: comm syz-executor: path /451/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 109.706070][ T4717] EXT4-fs error (device loop3): ext4_empty_dir:3091: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 109.714995][ T4717] EXT4-fs warning (device loop3): ext4_empty_dir:3094: inode #11: comm syz-executor: directory missing '.' [ 109.717825][ T4717] EXT4-fs warning (device loop3): ext4_empty_dir:3094: inode #11: comm syz-executor: directory missing '.' [ 109.718357][ T4717] EXT4-fs warning (device loop3): ext4_empty_dir:3094: inode #11: comm syz-executor: directory missing '.' [ 109.729954][ T4717] EXT4-fs warning (device loop3): ext4_empty_dir:3094: inode #11: comm syz-executor: directory missing '.' [ 109.735000][ T4708] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.738350][ T4717] EXT4-fs warning (device loop3): ext4_empty_dir:3094: inode #11: comm syz-executor: directory missing '.' [ 109.755911][ T4717] EXT4-fs warning (device loop3): ext4_empty_dir:3094: inode #11: comm syz-executor: directory missing '.' [ 109.806009][ T8062] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.921622][T10063] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.016185][ T30] audit: type=1400 audit(621.999:7): lsm=SMACK fn=smack_inode_setxattr action=denied subject="_" object="l" requested=w pid=10070 comm="syz.7.2035" name="file0" dev="tmpfs" ino=298 [ 110.145414][T10063] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.163213][T10063] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.279236][T10063] veth1_macvtap: left allmulticast mode [ 110.393556][T10069] macvlan2: entered promiscuous mode [ 110.394763][T10069] bridge0: entered promiscuous mode [ 110.572171][ T5879] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.581651][ T1129] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.581747][ T1129] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.581783][ T1129] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.600364][ T1129] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.603305][T10086] loop6: detected capacity change from 0 to 4096 [ 110.608525][T10010] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.641485][T10086] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.650657][T10094] loop2: detected capacity change from 0 to 128 [ 110.652797][T10094] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 110.657700][T10094] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 110.664916][T10010] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.666546][T10010] bridge_slave_0: entered allmulticast mode [ 110.672520][T10010] bridge_slave_0: entered promiscuous mode [ 110.675358][T10010] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.680541][T10010] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.680655][T10010] bridge_slave_1: entered allmulticast mode [ 110.681123][T10010] bridge_slave_1: entered promiscuous mode [ 110.712733][T10086] EXT4-fs: Cannot change journaled quota options when quota turned on [ 110.734771][ T4708] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 110.748191][ T8062] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.762785][T10010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.795078][T10010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.818601][T10010] team0: Port device team_slave_0 added [ 110.831952][T10010] team0: Port device team_slave_1 added [ 110.854004][T10010] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.883546][T10010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.888416][T10010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.893823][ T4711] Bluetooth: hci3: command tx timeout [ 110.896770][T10010] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.898249][T10010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.904389][T10010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.001176][T10010] hsr_slave_0: entered promiscuous mode [ 111.002792][T10010] hsr_slave_1: entered promiscuous mode [ 111.006974][T10010] debugfs: 'hsr0' already exists in 'hsr' [ 111.020663][T10010] Cannot create hsr debugfs directory [ 111.221519][T10112] usb_storage.quirks: string doesn't fit in 127 chars. [ 111.245489][ T4710] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 111.250916][ T4710] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 111.255389][ T4710] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 111.269739][ T4710] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 111.283702][ T4710] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 111.523342][T10010] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 111.537290][T10010] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 111.552476][T10010] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 111.562999][T10010] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 111.571724][T10010] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 111.587502][T10010] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 111.591077][T10010] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 111.606776][T10010] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 111.799302][T10144] loop6: detected capacity change from 0 to 4096 [ 111.807709][T10144] EXT4-fs (loop6): Test dummy encryption mode enabled [ 111.811160][T10010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.816002][T10144] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.858348][T10144] EXT4-fs (loop6): shut down requested (1) [ 111.889277][T10010] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.901438][ T8062] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.978392][ T4873] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.978445][ T4873] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.979082][ T4873] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.979109][ T4873] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.066441][T10010] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 112.581878][T10113] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.583629][T10113] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.585448][T10113] bridge_slave_0: entered allmulticast mode [ 112.591365][T10113] bridge_slave_0: entered promiscuous mode [ 112.605178][T10113] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.608118][T10113] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.612791][T10113] bridge_slave_1: entered allmulticast mode [ 112.624802][T10113] bridge_slave_1: entered promiscuous mode [ 112.718932][T10113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.726292][T10113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.780154][T10113] team0: Port device team_slave_0 added [ 112.787125][T10113] team0: Port device team_slave_1 added [ 112.844981][T10113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.847072][T10113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.852588][T10113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.864945][T10113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.868593][T10113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.868647][T10113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.870033][T10010] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.963723][T10113] hsr_slave_0: entered promiscuous mode [ 112.970154][ T4710] Bluetooth: hci3: command tx timeout [ 112.974262][T10113] hsr_slave_1: entered promiscuous mode [ 112.979198][T10113] debugfs: 'hsr0' already exists in 'hsr' [ 112.980668][T10113] Cannot create hsr debugfs directory [ 113.370145][ T4710] Bluetooth: hci4: command tx timeout [ 113.379022][T10239] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.379280][T10239] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.488349][T10250] loop2: detected capacity change from 0 to 128 [ 113.507854][T10250] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 113.576305][T10239] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.592340][T10239] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.599097][ T4708] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 113.777704][T10266] loop2: detected capacity change from 0 to 512 [ 113.817023][T10266] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 113.960598][ T15] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.960690][ T15] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.960732][ T15] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.960757][ T15] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.033630][T10113] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 114.054966][ T4708] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 114.071599][T10113] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 114.106734][T10010] veth0_vlan: entered promiscuous mode [ 114.108666][T10010] veth1_vlan: entered promiscuous mode [ 114.127070][T10113] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 114.141071][T10113] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 114.141461][T10113] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 114.167593][T10113] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 114.177483][T10113] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 114.195635][T10113] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 114.247287][T10010] veth0_macvtap: entered promiscuous mode [ 114.250541][T10295] loop7: detected capacity change from 0 to 128 [ 114.296657][T10010] veth1_macvtap: entered promiscuous mode [ 114.339252][T10010] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.386242][T10010] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.401280][T10307] loop7: detected capacity change from 0 to 512 [ 114.439375][T10307] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.495158][ T1129] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.497719][ T1129] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.516083][ T9008] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.526525][ T1129] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.526570][ T1129] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.654864][T10113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.683665][T10113] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.710541][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.710845][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.711428][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.711458][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.805221][ T1129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.805239][ T1129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.828182][T10113] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 114.846318][T10113] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 114.923628][ T15] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.923662][ T15] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.998645][T10328] loop6: detected capacity change from 0 to 4096 [ 115.007329][T10328] EXT4-fs (loop6): Test dummy encryption mode enabled [ 115.037714][T10328] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.050429][ T4710] Bluetooth: hci3: command tx timeout [ 115.205361][ T8062] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.343077][T10350] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 115.456770][ T4710] Bluetooth: hci4: command tx timeout [ 115.486143][T10113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.905744][T10113] veth0_vlan: entered promiscuous mode [ 115.959337][T10113] veth1_vlan: entered promiscuous mode [ 115.976551][T10113] veth0_macvtap: entered promiscuous mode [ 116.014892][T10113] veth1_macvtap: entered promiscuous mode [ 116.045538][T10113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.052159][T10113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.100184][ T1129] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.101097][ T1129] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.101293][ T1129] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.102218][ T1129] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.206137][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.206170][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.229095][T10399] __nla_validate_parse: 1 callbacks suppressed [ 116.229136][T10399] netlink: 11 bytes leftover after parsing attributes in process `syz.6.2129'. [ 116.251648][T10397] nbd1: detected capacity change from 0 to 549764202496 [ 116.256236][ T4710] block nbd1: Receive control failed (result -32) [ 116.287087][ T4391] block nbd1: Dead connection, failed to find a fallback [ 116.289000][ T4391] block nbd1: shutting down sockets [ 116.290732][ T4391] blk_print_req_error: 20 callbacks suppressed [ 116.290760][ T4391] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 116.290786][ T4391] buffer_io_error: 20 callbacks suppressed [ 116.290799][ T4391] Buffer I/O error on dev nbd1, logical block 0, async page read [ 116.312228][ T4391] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 116.312272][ T4391] Buffer I/O error on dev nbd1, logical block 0, async page read [ 116.331331][ T1129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.331367][ T1129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.338861][ T4391] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 116.341309][ T4391] Buffer I/O error on dev nbd1, logical block 0, async page read [ 116.344078][ T4391] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 116.344106][ T4391] Buffer I/O error on dev nbd1, logical block 0, async page read [ 116.367184][ T4391] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 116.367219][ T4391] Buffer I/O error on dev nbd1, logical block 0, async page read [ 116.397777][ T4391] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 116.397824][ T4391] Buffer I/O error on dev nbd1, logical block 0, async page read [ 116.415324][ T4391] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 116.416978][ T4391] Buffer I/O error on dev nbd1, logical block 0, async page read [ 116.434233][ T4391] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 116.434267][ T4391] Buffer I/O error on dev nbd1, logical block 0, async page read [ 116.443139][ T5077] ldm_validate_partition_table(): Disk read failed. [ 116.447371][ T4391] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 116.447412][ T4391] Buffer I/O error on dev nbd1, logical block 0, async page read [ 116.461760][ T4391] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 116.461801][ T4391] Buffer I/O error on dev nbd1, logical block 0, async page read [ 116.468797][ T5077] Dev nbd1: unable to read RDB block 0 [ 116.472451][ T5077] nbd1: unable to read partition table [ 116.588693][ T5077] ldm_validate_partition_table(): Disk read failed. [ 116.617235][ T5077] Dev nbd1: unable to read RDB block 0 [ 116.654202][T10415] netlink: 76 bytes leftover after parsing attributes in process `syz.8.2135'. [ 116.657825][ T5077] nbd1: unable to read partition table [ 116.665588][ T5077] ldm_validate_partition_table(): Disk read failed. [ 116.682251][ T5077] Dev nbd1: unable to read RDB block 0 [ 116.684227][ T5077] nbd1: unable to read partition table [ 117.094432][T10445] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2149'. [ 117.098538][T10445] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2149'. [ 117.130016][ T4710] Bluetooth: hci3: command tx timeout [ 117.186548][T10451] netlink: 260 bytes leftover after parsing attributes in process `syz.6.2152'. [ 117.353742][T10463] bond0: entered promiscuous mode [ 117.356030][T10463] bond_slave_0: entered promiscuous mode [ 117.356164][T10463] bond_slave_1: entered promiscuous mode [ 117.366663][T10463] batadv0: entered promiscuous mode [ 117.377166][T10463] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 117.385127][T10463] bond0: left promiscuous mode [ 117.386037][T10463] bond_slave_0: left promiscuous mode [ 117.387630][T10463] bond_slave_1: left promiscuous mode [ 117.391529][T10463] batadv0: left promiscuous mode [ 117.536005][ T4710] Bluetooth: hci4: command tx timeout [ 117.634118][T10477] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2174'. [ 117.636024][T10477] netlink: 'syz.2.2174': attribute type 7 has an invalid length. [ 117.637588][T10477] netlink: 'syz.2.2174': attribute type 8 has an invalid length. [ 117.639274][T10477] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2174'. [ 117.648736][T10477] gretap0: entered promiscuous mode [ 117.657891][T10477] gretap0: left promiscuous mode [ 117.785276][T10481] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2165'. [ 117.785337][T10481] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2165'. [ 118.143400][T10495] nbd2: detected capacity change from 0 to 549764202496 [ 118.146008][ T4710] block nbd2: Receive control failed (result -32) [ 118.149610][ T4391] block nbd2: Dead connection, failed to find a fallback [ 118.149634][ T4391] block nbd2: shutting down sockets [ 118.238346][ T5077] ldm_validate_partition_table(): Disk read failed. [ 118.244975][ T5077] Dev nbd2: unable to read RDB block 0 [ 118.246148][ T5077] nbd2: unable to read partition table [ 118.310931][ T5077] ldm_validate_partition_table(): Disk read failed. [ 118.351367][ T5077] Dev nbd2: unable to read RDB block 0 [ 118.390131][ T5077] nbd2: unable to read partition table [ 118.399056][ T5077] ldm_validate_partition_table(): Disk read failed. [ 118.400809][ T5077] Dev nbd2: unable to read RDB block 0 [ 118.402307][ T5077] nbd2: unable to read partition table [ 118.632948][T10529] loop8: detected capacity change from 0 to 512 [ 118.676297][T10529] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 118.753975][T10535] bond0: entered promiscuous mode [ 118.755146][T10535] bond_slave_0: entered promiscuous mode [ 118.756293][T10535] bond_slave_1: entered promiscuous mode [ 118.766104][T10535] batadv0: entered promiscuous mode [ 118.770862][T10535] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 118.782481][T10535] bond0: left promiscuous mode [ 118.782528][T10535] bond_slave_0: left promiscuous mode [ 118.782635][T10535] bond_slave_1: left promiscuous mode [ 118.801653][T10535] batadv0: left promiscuous mode [ 118.902017][T10010] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 119.006678][T10539] netlink: 76 bytes leftover after parsing attributes in process `syz.9.2190'. [ 119.612478][ T4710] Bluetooth: hci4: command tx timeout [ 121.239549][T10616] loop2: detected capacity change from 0 to 256 [ 121.272187][T10616] FAT-fs (loop2): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 121.278843][T10616] FAT-fs (loop2): Filesystem has been set read-only [ 121.475121][T10624] loop2: detected capacity change from 0 to 256 [ 121.510730][T10624] binder: Bad value for 'max' [ 121.552076][T10626] loop9: detected capacity change from 0 to 512 [ 121.585142][T10626] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.705028][T10113] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.235965][T10653] loop2: detected capacity change from 0 to 1024 [ 122.236381][T10653] EXT4-fs: Ignoring removed orlov option [ 122.239284][ T30] audit: type=1400 audit(635.219:8): lsm=SMACK fn=smack_inode_permission action=denied subject="_" object="l" requested=r pid=10652 comm="syz.9.2244" name="file1" dev="tmpfs" ino=159 [ 122.579943][ T1129] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.580030][ T1129] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.580063][ T1129] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.580083][ T1129] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.595360][T10674] loop7: detected capacity change from 0 to 2048 [ 122.691140][T10672] ftl_cs: FTL header not found. [ 122.702386][T10674] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.2253: bg 0: block 345: padding at end of block bitmap is not set [ 122.714986][T10674] fs-verity (loop7, inode 13): Error -28 writing Merkle tree block 0 [ 122.716772][T10674] fs-verity (loop7, inode 13): Error -28 building Merkle tree [ 122.759648][T10672] block2mtd: mtd1: [/dev/loop0] erase_size = 4KiB [4096] [ 123.190944][T10699] loop2: detected capacity change from 0 to 8 [ 123.484093][T10712] loop7: detected capacity change from 0 to 1024 [ 123.538124][T10714] tap0: tun_chr_ioctl cmd 1074025677 [ 123.538317][T10714] tap0: linktype set to 778 [ 123.648130][T10719] loop9: detected capacity change from 0 to 1024 [ 123.718499][T10719] EXT4-fs error (device loop9): ext4_readdir:265: inode #2: block 16: comm syz.9.2272: path /36/file1: bad entry in directory: inode out of bounds - offset=0, inode=1538, rec_len=12, size=1024 fake=1 [ 123.725924][T10719] EXT4-fs (loop9): Remounting filesystem read-only [ 123.822043][ T9] IPVS: starting estimator thread 0... [ 123.919872][T10730] IPVS: using max 58 ests per chain, 139200 per kthread [ 124.084853][T10739] loop7: detected capacity change from 0 to 128 [ 124.088204][T10739] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 124.115778][T10739] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 124.296886][T10747] block2mtd: error: cannot open device /dev/loop0 [ 124.494409][T10755] loop7: detected capacity change from 0 to 512 [ 124.515408][T10755] EXT4-fs: Ignoring removed i_version option [ 124.641033][T10757] EXT4-fs error (device loop2): ext4_readdir:265: inode #2: block 16: comm syz.2.2288: path /491/file1: bad entry in directory: inode out of bounds - offset=0, inode=1538, rec_len=12, size=1024 fake=1 [ 124.652719][T10757] EXT4-fs (loop2): Remounting filesystem read-only [ 124.729468][ T4810] IPVS: starting estimator thread 0... [ 124.820003][T10764] IPVS: using max 58 ests per chain, 139200 per kthread [ 124.857064][T10766] __nla_validate_parse: 1 callbacks suppressed [ 124.859947][T10766] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2291'. [ 124.861787][T10766] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2291'. [ 125.058440][T10772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2294'. [ 125.117654][T10774] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2295'. [ 125.246594][T10778] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2297'. [ 125.931943][ T1595] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.933350][ T1595] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.592090][T10800] set_capacity_and_notify: 1 callbacks suppressed [ 126.600243][T10800] loop7: detected capacity change from 0 to 512 [ 126.600650][T10800] EXT4-fs: inline encryption not supported [ 126.603517][T10800] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 126.634444][T10800] EXT4-fs (loop7): 1 truncate cleaned up [ 126.634916][T10800] EXT4-fs mount: 12 callbacks suppressed [ 126.634938][T10800] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.683948][T10804] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2309'. [ 126.797254][ T9008] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.002522][T10810] loop2: detected capacity change from 0 to 4096 [ 127.034919][T10810] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.076088][T10810] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #15: comm syz.2.2312: corrupted inode contents [ 127.078930][T10810] EXT4-fs error (device loop2): ext4_dirty_inode:6639: inode #15: comm syz.2.2312: mark_inode_dirty error [ 127.081726][T10810] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #15: comm syz.2.2312: corrupted inode contents [ 127.084972][T10810] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #15: comm syz.2.2312: mark_inode_dirty error [ 127.089659][T10810] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #15: comm syz.2.2312: corrupted inode contents [ 127.099070][T10810] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #15: comm syz.2.2312: mark_inode_dirty error [ 127.104543][T10810] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #15: comm syz.2.2312: corrupted inode contents [ 127.107339][T10810] EXT4-fs error (device loop2): ext4_truncate:4691: inode #15: comm syz.2.2312: mark_inode_dirty error [ 127.107556][T10810] EXT4-fs error (device loop2) in ext4_setattr:6172: Corrupt filesystem [ 127.141443][T10810] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #15: comm syz.2.2312: corrupted inode contents [ 127.202901][ T4708] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 127.205194][ T4708] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 127.220478][ T4708] EXT4-fs warning (device loop2): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 127.233280][ T4708] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.733428][T10834] netlink: 76 bytes leftover after parsing attributes in process `syz.7.2323'. [ 127.735959][T10834] netlink: 76 bytes leftover after parsing attributes in process `syz.7.2323'. [ 128.122731][T10844] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2328'. [ 128.576475][T10858] loop9: detected capacity change from 0 to 512 [ 128.581704][T10858] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 128.608919][T10858] EXT4-fs (loop9): 1 truncate cleaned up [ 128.609425][T10858] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.715329][T10113] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.804988][ T30] audit: type=1400 audit(641.789:9): lsm=SMACK fn=smack_inode_getattr action=denied subject="_" object="er" requested=r pid=10866 comm="syz.7.2340" path="/145/file1" dev="tmpfs" ino=782 [ 129.056204][T10883] netlink: 'syz.2.2345': attribute type 1 has an invalid length. [ 129.056240][T10883] netlink: 'syz.2.2345': attribute type 2 has an invalid length. [ 129.366240][T10892] loop2: detected capacity change from 0 to 1024 [ 129.373557][T10892] EXT4-fs: quotafile must be on filesystem root [ 129.389423][T10893] tap0: tun_chr_ioctl cmd 1074025677 [ 129.394779][T10893] tap0: linktype set to 805 [ 129.505043][T10896] netlink: 'syz.9.2352': attribute type 2 has an invalid length. [ 129.510930][T10896] netlink: 'syz.9.2352': attribute type 1 has an invalid length. [ 129.512599][T10896] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2352'. [ 129.514830][T10896] netlink: 'syz.9.2352': attribute type 2 has an invalid length. [ 129.514861][T10896] netlink: 'syz.9.2352': attribute type 1 has an invalid length. [ 129.514877][T10896] iwpm_mapping_error_cb: Received msg seq = 0 err code = 5 client = 2 [ 129.886583][T10909] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.740023][T10943] bridge0: port 3(syz_tun) entered blocking state [ 130.747043][T10943] bridge0: port 3(syz_tun) entered disabled state [ 130.747215][T10943] syz_tun: entered allmulticast mode [ 130.747974][T10943] syz_tun: entered promiscuous mode [ 130.773576][T10944] i2c i2c-0: new_device: Instantiated device isp1301 at 0x2c [ 132.892657][ T4711] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 132.895193][ T4711] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 132.897144][ T4711] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 132.899194][ T4711] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 132.901916][ T4711] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 133.340934][T10976] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.349982][T10976] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.350146][T10976] bridge_slave_0: entered allmulticast mode [ 133.350619][T10976] bridge_slave_0: entered promiscuous mode [ 133.356849][T10976] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.356912][T10976] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.357044][T10976] bridge_slave_1: entered allmulticast mode [ 133.357549][T10976] bridge_slave_1: entered promiscuous mode [ 133.394501][T10976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.398797][T10976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.431990][T10976] team0: Port device team_slave_0 added [ 133.434251][T10976] team0: Port device team_slave_1 added [ 133.454858][T10976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.456289][T10976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 133.461803][T10976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.464848][T10976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.466455][T10976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 133.471209][T10976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.515225][T10976] hsr_slave_0: entered promiscuous mode [ 133.516709][T10976] hsr_slave_1: entered promiscuous mode [ 133.518331][T10976] debugfs: 'hsr0' already exists in 'hsr' [ 133.519657][T10976] Cannot create hsr debugfs directory [ 134.527135][ T4710] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 134.528358][ T4710] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 134.529082][ T4710] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 134.533469][ T4710] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 134.535032][ T4710] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 134.595720][ T30] audit: type=1400 audit(647.569:10): lsm=SMACK fn=smack_inode_rmdir action=denied subject="_" object="lowerdir" requested=w pid=10995 comm="syz.7.2391" name="file0" dev="tmpfs" ino=866 [ 134.943008][T11020] __nla_validate_parse: 2 callbacks suppressed [ 134.944451][T11020] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2399'. [ 134.952137][T11020] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2399'. [ 134.968449][T11020] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2399'. [ 134.968487][T11020] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2399'. [ 134.970063][ T4710] Bluetooth: hci5: command tx timeout [ 135.073963][T11029] netlink: 124 bytes leftover after parsing attributes in process `syz.7.2402'. [ 135.284529][T11040] sctp: [Deprecated]: syz.2.2405 (pid 11040) Use of int in max_burst socket option deprecated. [ 135.284529][T11040] Use struct sctp_assoc_value instead [ 135.445114][ T1129] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.694184][ T1129] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.845744][ T1129] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.865355][T11083] loop7: detected capacity change from 0 to 256 [ 135.909622][ T1129] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.965434][T11087] loop2: detected capacity change from 0 to 1024 [ 136.025544][T11087] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.057637][T11087] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: comm syz.2.2420: lblock 0 mapped to illegal pblock 0 (length 1) [ 136.071703][T11087] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 136.071768][T11087] EXT4-fs (loop2): This should not happen!! Data will be lost [ 136.071768][T11087] [ 136.082129][T11087] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2420: bg 0: block 112: padding at end of block bitmap is not set [ 136.119366][T11087] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 136.123861][T11087] EXT4-fs (loop2): This should not happen!! Data will be lost [ 136.123861][T11087] [ 136.123903][T11087] EXT4-fs (loop2): Total free blocks count 0 [ 136.123920][T11087] EXT4-fs (loop2): Free/Dirty block details [ 136.123938][T11087] EXT4-fs (loop2): free_blocks=0 [ 136.123983][T11087] EXT4-fs (loop2): dirty_blocks=64 [ 136.123999][T11087] EXT4-fs (loop2): Block reservation details [ 136.213718][ T4708] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 136.260071][T10976] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 136.272182][T10976] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 136.274489][T10976] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 136.288446][T10976] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 136.322300][T10976] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 136.340367][T10976] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 136.351073][T10976] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 136.374424][T10976] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 136.475086][ T1129] bridge_slave_1: left allmulticast mode [ 136.475125][ T1129] bridge_slave_1: left promiscuous mode [ 136.475225][ T1129] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.499289][ T1129] bridge_slave_0: left allmulticast mode [ 136.504314][ T1129] bridge_slave_0: left promiscuous mode [ 136.505560][ T1129] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.570242][ T4710] Bluetooth: hci6: command tx timeout [ 136.812700][ T1129] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.819381][ T1129] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.825926][ T1129] bond0 (unregistering): Released all slaves [ 137.049918][ T4710] Bluetooth: hci5: command tx timeout [ 137.183737][T11161] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2436'. [ 137.183781][T11161] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2436'. [ 137.219110][ T4710] Bluetooth: hci0: Dropping invalid advertising data [ 137.219143][ T4710] Bluetooth: hci0: Malformed LE Event: 0x02 [ 137.308014][T11172] loop2: detected capacity change from 0 to 256 [ 137.328133][T10994] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.333338][T10994] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.335278][T10994] bridge_slave_0: entered allmulticast mode [ 137.343086][T10994] bridge_slave_0: entered promiscuous mode [ 137.516434][ T9] kernel write not supported for file /175/net/netstat (pid: 9 comm: kworker/0:0) [ 137.526628][ T1129] hsr_slave_0: left promiscuous mode [ 137.526948][ T1129] hsr_slave_1: left promiscuous mode [ 137.527211][ T1129] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.527229][ T1129] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.527610][ T1129] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.527627][ T1129] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.568959][ T1129] veth1_macvtap: left promiscuous mode [ 137.569026][ T1129] veth0_macvtap: left promiscuous mode [ 137.569091][ T1129] veth1_vlan: left promiscuous mode [ 137.569135][ T1129] veth0_vlan: left promiscuous mode [ 137.821891][T11194] loop2: detected capacity change from 0 to 256 [ 137.839110][T11194] FAT-fs (loop2): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 137.842208][T11194] FAT-fs (loop2): Filesystem has been set read-only [ 137.948215][ T1129] team0 (unregistering): Port device team_slave_1 removed [ 137.956276][ T1129] team0 (unregistering): Port device team_slave_0 removed [ 138.051857][T10994] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.051914][T10994] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.052051][T10994] bridge_slave_1: entered allmulticast mode [ 138.052574][T10994] bridge_slave_1: entered promiscuous mode [ 138.138238][T10994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.156198][T10994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.209343][T10976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.259450][T10994] team0: Port device team_slave_0 added [ 138.294662][T10994] team0: Port device team_slave_1 added [ 138.373192][T10976] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.404503][T11216] loop2: detected capacity change from 0 to 512 [ 138.428891][T10976] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 138.445699][T11216] EXT4-fs: Ignoring removed nomblk_io_submit option [ 138.485649][T10976] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 138.499726][T11216] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.520248][T10994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.520275][T10994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 138.520300][T10994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.520940][T10994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.520954][T10994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 138.520975][T10994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.551075][T11216] EXT4-fs error (device loop2): ext4_readdir:265: inode #2: block 3: comm syz.2.2454: path /548/bus: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=15, rec_len=4, size=2048 fake=0 [ 138.616038][ T4708] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.641733][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.641781][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.645228][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.645267][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.650198][ T4710] Bluetooth: hci6: command tx timeout [ 138.692049][T10994] hsr_slave_0: entered promiscuous mode [ 138.693637][T10994] hsr_slave_1: entered promiscuous mode [ 138.695225][T10994] debugfs: 'hsr0' already exists in 'hsr' [ 138.702568][T10994] Cannot create hsr debugfs directory [ 138.838428][T11245] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2462'. [ 139.131675][ T4710] Bluetooth: hci5: command tx timeout [ 139.351102][T11281] loop2: detected capacity change from 0 to 2048 [ 139.385086][T11281] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.403938][T10976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.587893][T10976] veth0_vlan: entered promiscuous mode [ 139.707038][T10976] veth1_vlan: entered promiscuous mode [ 139.728910][ T12] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 139.739486][ T12] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 512 with error 28 [ 139.742252][ T12] EXT4-fs (loop2): This should not happen!! Data will be lost [ 139.742252][ T12] [ 139.744016][ T12] EXT4-fs (loop2): Total free blocks count 0 [ 139.745140][ T12] EXT4-fs (loop2): Free/Dirty block details [ 139.745170][ T12] EXT4-fs (loop2): free_blocks=4096 [ 139.745189][ T12] EXT4-fs (loop2): dirty_blocks=512 [ 139.745202][ T12] EXT4-fs (loop2): Block reservation details [ 139.745213][ T12] EXT4-fs (loop2): i_reserved_data_blocks=32 [ 139.773589][ T4708] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 139.774771][ T4708] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.829735][T10976] veth0_macvtap: entered promiscuous mode [ 139.869181][T10976] veth1_macvtap: entered promiscuous mode [ 139.953412][T10976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.000965][T11309] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2480'. [ 140.002668][T11309] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2480'. [ 140.009432][T10976] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.027438][T11309] gretap0: entered promiscuous mode [ 140.028576][T11309] macvlan2: entered allmulticast mode [ 140.030346][T11309] gretap0: entered allmulticast mode [ 140.060449][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.060505][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.060543][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.060563][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.145049][T10994] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 140.152895][T11313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2479'. [ 140.152926][T11313] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2479'. [ 140.174740][T10994] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 140.176635][T10994] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 140.197134][T10994] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 140.249713][T11321] loop7: detected capacity change from 0 to 256 [ 140.251431][T10994] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 140.269095][T10994] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 140.280458][T10994] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 140.291094][T11321] FAT-fs (loop7): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 140.291122][T11321] FAT-fs (loop7): Filesystem has been set read-only [ 140.301972][T10994] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 140.373113][ T3420] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.373148][ T3420] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.445169][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.445203][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.587494][T11340] loop9: detected capacity change from 0 to 8192 [ 140.589069][T10994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.653583][T11340] syz.9.2487: attempt to access beyond end of device [ 140.653583][T11340] loop9: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 140.669242][T10994] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.717472][ T15] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.717536][ T15] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.718133][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.718179][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.733933][ T4710] Bluetooth: hci6: command tx timeout [ 140.755398][T10994] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 141.129341][T11377] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2496'. [ 141.210010][ T4710] Bluetooth: hci5: command tx timeout [ 141.461296][T11392] loop2: detected capacity change from 0 to 4096 [ 141.471144][T11396] loop1: detected capacity change from 0 to 128 [ 141.482625][T11396] FAT-fs (loop1): bogus number of reserved sectors [ 141.482663][T11396] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 141.482692][T11396] FAT-fs (loop1): Can't find a valid FAT filesystem [ 141.494899][T11392] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.505063][T10994] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.601810][T10994] veth0_vlan: entered promiscuous mode [ 141.603803][T10994] veth1_vlan: entered promiscuous mode [ 141.654311][T10994] veth0_macvtap: entered promiscuous mode [ 141.663571][T10994] veth1_macvtap: entered promiscuous mode [ 141.691546][ T4708] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.728018][T10994] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.746199][T10994] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.822408][ T1129] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.874168][ T3420] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.874227][ T3420] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.874263][ T3420] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.929140][ T3420] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.929159][ T3420] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.960624][T11425] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2509'. [ 142.058803][ T15] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.058838][ T15] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.282322][T11447] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2517'. [ 142.811768][ T4710] Bluetooth: hci6: command tx timeout [ 142.879797][T11490] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2533'. [ 143.080249][T11496] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2535'. [ 143.671816][T11531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2543'. [ 143.893425][T11546] Injecting memory failure for pfn 0x14050f at process virtual address 0x20f0f000 [ 143.978145][T11546] Memory failure: 0x14050f: recovery action for dirty LRU page: Recovered [ 144.066617][T11556] loop2: detected capacity change from 0 to 256 [ 144.198211][T11560] loop1: detected capacity change from 0 to 1024 [ 144.265299][T11560] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 144.302181][T11560] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: comm syz.1.2553: lblock 0 mapped to illegal pblock 0 (length 1) [ 144.306278][T11560] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 144.308788][T11560] EXT4-fs (loop1): This should not happen!! Data will be lost [ 144.308788][T11560] [ 144.320702][T11560] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: comm syz.1.2553: lblock 0 mapped to illegal pblock 0 (length 1) [ 144.325770][T11560] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: comm syz.1.2553: lblock 0 mapped to illegal pblock 0 (length 1) [ 144.399718][T10976] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 144.400802][T10976] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 145.312231][T11629] loop7: detected capacity change from 0 to 512 [ 145.327425][T11629] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 145.352274][T11629] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.2573: bg 0: block 4: invalid block bitmap [ 145.357778][T11629] loop7: lost filesystem error report for type 5 error -117 [ 145.359862][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 145.359895][ C0] EXT4-fs (loop7): initial error at time 658: ext4_validate_block_bitmap:432 [ 145.359928][ C0] EXT4-fs (loop7): last error at time 658: ext4_validate_block_bitmap:432 [ 145.362946][T11629] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 145.362963][T11629] loop7: lost filesystem error report for type 5 error -117 [ 145.370526][T11629] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.2573: invalid indirect mapped block 1 (level 1) [ 145.370563][T11629] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 145.383554][T11629] EXT4-fs (loop7): 1 truncate cleaned up [ 145.387366][T11629] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.568602][ T9008] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.645991][T11648] loop1: detected capacity change from 0 to 256 [ 145.835360][T11661] loop2: detected capacity change from 0 to 128 [ 145.855331][T11661] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 145.861583][T11662] loop1: detected capacity change from 0 to 128 [ 145.869768][ T4400] 8021q: adding VLAN 0 to HW filter on device eth0 [ 145.907656][T11661] fscrypt (loop2, inode 12): Unsupported encryption flags (0x10) [ 145.931904][T11544] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 146.002717][ T4708] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 146.265715][T11694] loop7: detected capacity change from 0 to 128 [ 146.277221][T11694] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 146.395530][ T9008] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 146.782639][ T4400] 8021q: adding VLAN 0 to HW filter on device eth1 [ 146.803913][T11734] ima: policy update failed [ 146.808991][ T30] audit: type=1802 audit(659.789:11): pid=11734 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.9.2612" res=0 errno=0 [ 146.881522][T11739] __nla_validate_parse: 2 callbacks suppressed [ 146.892921][T11739] netlink: 316 bytes leftover after parsing attributes in process `syz.2.2613'. [ 146.977874][T11746] vxcan3: entered promiscuous mode [ 146.977912][T11746] vxcan3: entered allmulticast mode [ 146.978245][T11746] team0: Device vxcan3 is up. Set it down before adding it as a team port [ 147.198262][T11764] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2623'. [ 147.497639][T11783] loop7: detected capacity change from 0 to 2048 [ 147.544410][T11783] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.613165][T11796] Injecting memory failure for pfn 0x13a342 at process virtual address 0x20036000 [ 147.615341][T11796] Memory failure: 0x13a342: recovery action for clean LRU page: Recovered [ 147.617052][T11796] Injecting memory failure for pfn 0x13a424 at process virtual address 0x20037000 [ 147.624032][T11796] Memory failure: 0x13a424: recovery action for clean LRU page: Recovered [ 147.624067][T11796] Injecting memory failure for pfn 0x11fb37 at process virtual address 0x20038000 [ 147.624122][T11796] Memory failure: 0x11fb37: recovery action for clean LRU page: Recovered [ 147.624137][T11796] Injecting memory failure for pfn 0x139e27 at process virtual address 0x20039000 [ 147.624180][T11796] Memory failure: 0x139e27: recovery action for clean LRU page: Recovered [ 147.818471][ T4400] 8021q: adding VLAN 0 to HW filter on device eth2 [ 148.042739][ T1129] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 148.042840][ T1129] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 512 with error 28 [ 148.042857][ T1129] EXT4-fs (loop7): This should not happen!! Data will be lost [ 148.042857][ T1129] [ 148.042869][ T1129] EXT4-fs (loop7): Total free blocks count 0 [ 148.042880][ T1129] EXT4-fs (loop7): Free/Dirty block details [ 148.042892][ T1129] EXT4-fs (loop7): free_blocks=4096 [ 148.042904][ T1129] EXT4-fs (loop7): dirty_blocks=512 [ 148.042914][ T1129] EXT4-fs (loop7): Block reservation details [ 148.042923][ T1129] EXT4-fs (loop7): i_reserved_data_blocks=32 [ 148.084051][ T9008] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 148.146912][ T9008] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.235044][T11829] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2643'. [ 148.439358][T11833] loop7: detected capacity change from 0 to 4096 [ 148.551312][T11833] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.577269][T11847] loop9: detected capacity change from 0 to 256 [ 148.665585][ T9008] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.775285][ T4400] 8021q: adding VLAN 0 to HW filter on device eth3 [ 148.795918][T11865] capability: warning: `syz.1.2657' uses 32-bit capabilities (legacy support in use) [ 148.805682][T11863] tap0: tun_chr_ioctl cmd 1074025677 [ 148.806969][T11863] tap0: linktype set to 774 [ 149.286767][T11904] loop9: detected capacity change from 0 to 512 [ 149.314418][T11904] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.175551][T11952] loop1: detected capacity change from 0 to 4096 [ 150.212672][T11952] EXT4-fs: Ignoring removed orlov option [ 150.220154][T11952] EXT4-fs (loop1): Test dummy encryption mode enabled [ 150.237935][T11952] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.272113][T11952] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 150.526916][T10113] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.635148][T10976] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.679611][T11979] loop7: detected capacity change from 0 to 128 [ 150.691004][T11979] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 150.818050][ T9008] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 150.894199][T11993] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2697'. [ 151.082861][ T40] Bluetooth: hci2: Frame reassembly failed (-84) [ 151.650612][T12049] loop1: detected capacity change from 0 to 512 [ 151.653637][T12049] EXT4-fs: Ignoring removed nomblk_io_submit option [ 151.659302][T12051] vivid-000: disconnect [ 151.660414][T12049] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 151.672444][T12051] vivid-000: reconnect [ 151.683829][T12049] EXT4-fs (loop1): 1 truncate cleaned up [ 151.684307][T12049] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.955081][T12066] loop9: detected capacity change from 0 to 1024 [ 151.977382][T12066] EXT4-fs: Ignoring removed orlov option [ 151.986360][T12066] EXT4-fs (loop9): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 151.994134][T12066] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.013779][T10976] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.260700][T10113] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.367257][T12093] loop9: detected capacity change from 0 to 512 [ 152.399768][T12093] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.481615][T10113] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.545691][T12102] loop1: detected capacity change from 0 to 512 [ 152.567285][T12102] EXT4-fs: Ignoring removed oldalloc option [ 152.594287][T12102] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 152.601830][T12102] EXT4-fs (loop1): 1 truncate cleaned up [ 152.605055][T12102] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.717158][ T4711] block nbd3: Receive control failed (result -32) [ 152.720644][ T4725] block nbd3: Receive control failed (result -32) [ 152.727731][T10976] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.130039][ T4710] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 153.161690][T12134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2741'. [ 153.161738][T12134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2741'. [ 153.421054][T12150] [ 153.949726][T12189] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2761'. [ 153.965032][T12189] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2761'. [ 154.096809][T12197] loop2: detected capacity change from 0 to 1024 [ 154.100309][T12197] EXT4-fs: inline encryption not supported [ 154.108413][T12197] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 154.125195][T12197] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #3: block 1: comm syz.2.2764: lblock 1 mapped to illegal pblock 1 (length 1) [ 154.125236][T12197] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 154.129837][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 154.129865][ C0] EXT4-fs (loop2): initial error at time 667: ext4_map_blocks:833: inode 3: block 1 [ 154.129918][ C0] EXT4-fs (loop2): last error at time 667: ext4_map_blocks:833: inode 3: block 1 [ 154.137143][T12197] EXT4-fs (loop2): Remounting filesystem read-only [ 154.137177][T12197] Quota error (device loop2): write_blk: dquota write failed [ 154.137208][T12197] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 154.137304][T12197] EXT4-fs (loop2): 1 orphan inode deleted [ 154.138254][T12197] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.214590][T12197] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 154.247663][T12205] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2765'. [ 154.285905][ T4708] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.593572][T12225] loop9: detected capacity change from 0 to 4096 [ 154.689176][T12237] loop7: detected capacity change from 0 to 256 [ 154.693362][T12238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2777'. [ 154.693391][T12238] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2777'. [ 154.693414][T12238] netlink: 'syz.0.2777': attribute type 12 has an invalid length. [ 154.693427][T12238] netlink: 'syz.0.2777': attribute type 13 has an invalid length. [ 154.725866][T12225] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.846644][T12225] EXT4-fs error (device loop9): ext4_get_first_dir_block:3548: inode #12: comm syz.9.2772: directory missing '.' [ 154.850432][T12225] EXT4-fs (loop9): Remounting filesystem read-only [ 154.921507][T12254] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2779'. [ 154.956757][T10113] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.306657][T12272] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2788'. [ 155.478175][ T1129] bond0: (slave bond_slave_0): interface is now down [ 155.478218][ T1129] bond0: (slave bond_slave_1): interface is now down [ 155.494898][ T1129] bond0: now running without any active interface! [ 155.612717][T12290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2793'. [ 155.999980][ T4803] IPVS: starting estimator thread 0... [ 156.009141][T12310] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 156.092265][T12311] IPVS: using max 58 ests per chain, 139200 per kthread [ 156.772798][T12352] vhci_hcd vhci_hcd.2: invalid port number 96 [ 156.772835][T12352] vhci_hcd vhci_hcd.2: default hub control req: 2000 vfffc i0060 l7 [ 157.433453][T12402] loop2: detected capacity change from 0 to 512 [ 157.453203][T12402] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 157.463364][T12402] EXT4-fs (loop2): 1 truncate cleaned up [ 157.464961][T12402] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.505563][T12402] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1332: inode #12: block 7: comm syz.2.2831: path /619/bus/file0: bad entry in directory: directory entry overrun - offset=80, inode=2147483648, rec_len=1024, size=60 fake=0 [ 157.516777][T12402] EXT4-fs (loop2): Remounting filesystem read-only [ 157.526955][T12410] tipc: Started in network mode [ 157.527932][T12410] tipc: Node identity 78563412785634122143658721436587, cluster identity 4711 [ 157.583600][ T4708] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.779163][T12423] pimreg3: entered allmulticast mode [ 157.807852][T12421] pimreg3: left allmulticast mode [ 157.865551][T12428] loop7: detected capacity change from 0 to 256 [ 158.376857][T12461] nfs: Deprecated parameter 'nointr' [ 158.693091][T12479] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 158.695661][T12479] overlayfs: conflicting lowerdir path [ 158.825882][T12488] loop7: detected capacity change from 0 to 7 [ 158.922661][T12488] Dev loop7: unable to read RDB block 7 [ 158.922703][T12488] loop7: unable to read partition table [ 158.922788][T12488] loop7: partition table beyond EOD, truncated [ 158.922810][T12488] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 158.932173][T12485] loop1: detected capacity change from 0 to 8192 [ 158.941635][T12485] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 159.101553][T12504] __nla_validate_parse: 3 callbacks suppressed [ 159.101590][T12504] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2862'. [ 159.182678][T12507] loop2: detected capacity change from 0 to 512 [ 159.188579][T12507] EXT4-fs: Ignoring removed nomblk_io_submit option [ 159.201018][T12507] EXT4-fs: Ignoring removed nobh option [ 159.201084][T12507] EXT4-fs: Ignoring removed nomblk_io_submit option [ 159.201102][T12507] EXT4-fs: Ignoring removed bh option [ 159.221224][T12507] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 159.226220][T12507] EXT4-fs (loop2): 1 orphan inode deleted [ 159.228260][T12507] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.384215][ T4708] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.406518][T12520] netlink: 'syz.7.2868': attribute type 1 has an invalid length. [ 159.569607][ T4400] veth0_vlan: left promiscuous mode [ 159.578756][ T4810] veth0_vlan: entered promiscuous mode [ 160.020669][T12559] loop9: detected capacity change from 0 to 512 [ 160.021048][T12559] EXT4-fs: inline encryption not supported [ 160.030147][T12559] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 160.035283][T12559] EXT4-fs (loop9): 1 truncate cleaned up [ 160.037188][T12559] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.077120][ T30] audit: type=1400 audit(673.059:12): lsm=SMACK fn=smack_inode_removexattr action=denied subject="_" object="lowerdir" requested=w pid=12561 comm="syz.1.2885" name="file1" dev="tmpfs" ino=510 [ 160.166161][T10113] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.677329][T12588] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 160.788188][T12588] bond1 (unregistering): Released all slaves [ 161.126945][T12598] macvlan2: left allmulticast mode [ 161.128539][T12598] gretap0: left allmulticast mode [ 161.140111][ T3420] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.140168][ T3420] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.140194][ T3420] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.140216][ T3420] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.586154][T12655] loop9: detected capacity change from 0 to 256 [ 161.624009][T12655] FAT-fs (loop9): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 161.626150][T12655] FAT-fs (loop9): Filesystem has been set read-only [ 161.826762][ T4810] IPVS: starting estimator thread 0... [ 161.920036][T12673] IPVS: using max 58 ests per chain, 139200 per kthread [ 162.348075][T12703] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2939'. [ 162.522767][T12716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2945'. [ 162.524713][T12716] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2945'. [ 162.614657][T12722] netlink: 'syz.2.2947': attribute type 11 has an invalid length. [ 162.616525][T12722] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2947'. [ 162.618760][T12722] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 162.706038][T12726] loop2: detected capacity change from 0 to 512 [ 162.734672][T12726] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.823306][ T4708] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.900572][T12736] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2953'. [ 162.904229][T12736] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2953'. [ 162.989743][T12739] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2954'. [ 162.992807][T12739] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2954'. [ 164.152376][T12777] netlink: 'syz.0.2972': attribute type 2 has an invalid length. [ 164.388135][T12790] loop2: detected capacity change from 0 to 512 [ 164.413804][T12790] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.2980: corrupted in-inode xattr: invalid ea_ino [ 164.413845][T12790] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 164.416690][T12790] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.2980: couldn't read orphan inode 15 (err -117) [ 164.416718][T12790] loop2: lost filesystem error report for type 5 error -117 [ 164.420628][ C0] EXT4-fs (loop2): error count since last fsck: 2 [ 164.420640][ C0] EXT4-fs (loop2): initial error at time 677: ext4_iget_extra_inode:5180: inode 15 [ 164.420656][ C0] EXT4-fs (loop2): last error at time 677: ext4_orphan_get:1404 [ 164.421256][T12790] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.459632][T12790] EXT4-fs warning (device loop2): ext4_empty_dir:3094: inode #2: comm syz.2.2980: directory missing '.' [ 164.528004][ T4708] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.893974][T12826] xt_hashlimit: size too large, truncated to 1048576 [ 164.961233][T12830] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2996'. [ 165.365164][T12857] tap0: tun_chr_ioctl cmd 1074025677 [ 165.365374][T12857] tap0: linktype set to 776 [ 165.796699][T12898] loop7: detected capacity change from 0 to 512 [ 165.805343][T12898] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 165.807896][T12898] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c840e018, mo2=0002] [ 165.808002][T12898] EXT4-fs (loop7): orphan cleanup on readonly fs [ 165.826248][T12898] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3027: bg 0: block 361: padding at end of block bitmap is not set [ 165.826299][T12898] loop7: lost filesystem error report for type 5 error -117 [ 165.826457][T12898] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 165.826473][T12898] loop7: lost filesystem error report for type 5 error -117 [ 165.826569][T12898] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #11: comm syz.7.3027: attempt to clear invalid blocks 33619980 len 1 [ 165.826589][T12898] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 165.830705][ C0] EXT4-fs (loop7): error count since last fsck: 3 [ 165.830721][ C0] EXT4-fs (loop7): initial error at time 678: ext4_validate_block_bitmap:441 [ 165.830736][ C0] EXT4-fs (loop7): last error at time 678: ext4_clear_blocks:876: inode 11 [ 165.845603][T12898] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.3027: invalid indirect mapped block 1811939328 (level 0) [ 165.845650][T12898] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 165.845786][T12898] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.3027: invalid indirect mapped block 2185560079 (level 1) [ 165.845805][T12898] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 165.846028][T12898] EXT4-fs (loop7): 1 truncate cleaned up [ 165.885992][T12898] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 165.956188][T12907] loop2: detected capacity change from 0 to 128 [ 165.968281][ T9008] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 166.059347][T12912] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3032'. [ 166.084880][T12915] loop1: detected capacity change from 0 to 256 [ 166.103912][T12910] Bluetooth: hci2: Frame reassembly failed (-84) [ 166.533136][T12947] bridge0: port 3(vlan2) entered blocking state [ 166.534501][T12947] bridge0: port 3(vlan2) entered disabled state [ 166.536069][T12947] vlan2: entered allmulticast mode [ 166.537231][T12947] bridge0: entered allmulticast mode [ 166.555943][T12947] vlan2: left allmulticast mode [ 166.555977][T12947] bridge0: left allmulticast mode [ 166.938929][T12977] sch_fq: defrate 512 ignored. [ 167.502783][T13014] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3078'. [ 167.537291][T13016] dummy0: entered promiscuous mode [ 167.537743][T13016] gretap0: entered promiscuous mode [ 167.538186][T13016] hsr1: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network [ 167.538204][T13016] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 167.555543][T13016] hsr1: entered allmulticast mode [ 167.555581][T13016] dummy0: entered allmulticast mode [ 167.555615][T13016] gretap0: entered allmulticast mode [ 167.942447][T13035] loop2: detected capacity change from 0 to 512 [ 167.954635][T13035] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.170950][ T4711] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 168.190885][T13047] netlink: 'syz.9.3092': attribute type 8 has an invalid length. [ 168.262558][T13051] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3093'. [ 168.551084][T13067] input: syz1 as /devices/virtual/input/input8 [ 168.600143][T13069] loop1: detected capacity change from 0 to 128 [ 168.616921][T13069] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 168.657781][T13069] fscrypt (loop1, inode 12): Can't use IV_INO_LBLK_64 policy with contents mode other than AES-256-XTS [ 168.727446][T13076] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3105'. [ 168.767610][T10976] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 168.815845][ T4708] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.868825][T13078] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.881960][T13085] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3106'. [ 168.881992][T13085] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3106'. [ 168.882017][T13085] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3106'. [ 168.882577][T13085] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3106'. [ 168.882595][T13085] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3106'. [ 169.307873][T13110] loop2: detected capacity change from 0 to 128 [ 169.315218][T13110] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 169.337026][T13110] overlayfs: upper fs needs to support d_type. [ 169.560942][ T4708] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 169.859934][ T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.862026][ T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.864410][ T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.866366][ T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.363422][T13154] loop7: detected capacity change from 0 to 512 [ 170.365493][T13154] EXT4-fs: Ignoring removed orlov option [ 170.370610][T13154] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 170.378350][T13154] EXT4-fs error (device loop7): ext4_ext_check_inode:521: inode #16: comm syz.7.3139: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0) [ 170.382957][T13154] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 170.383529][T13154] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.3139: couldn't read orphan inode 16 (err -117) [ 170.388977][T13154] loop7: lost filesystem error report for type 5 error -117 [ 170.389839][ C0] EXT4-fs (loop7): error count since last fsck: 2 [ 170.389889][ C0] EXT4-fs (loop7): initial error at time 683: ext4_ext_check_inode:521: inode 16 [ 170.389928][ C0] EXT4-fs (loop7): last error at time 683: ext4_orphan_get:1404 [ 170.397983][T13154] EXT4-fs (loop7): 1 orphan inode deleted [ 170.403073][T13154] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.736810][ T9008] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.913442][T13182] loop2: detected capacity change from 0 to 1024 [ 170.945038][T13182] EXT4-fs: Ignoring removed orlov option [ 170.977073][T13182] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 171.103294][ T4708] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 171.246647][T13206] block nbd0: reconnected socket [ 171.251008][ T4710] block nbd0: Receive control failed (result -32) [ 171.529129][T13231] loop9: detected capacity change from 0 to 512 [ 171.548419][T13230] loop1: detected capacity change from 0 to 1024 [ 171.552222][T13231] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.570052][T13230] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 171.571376][T13230] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 171.572615][T13230] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 171.578735][T13230] EXT4-fs error (device loop1): ext4_get_journal_inode:5900: inode #32: comm syz.1.3165: iget: special inode unallocated [ 171.578775][T13230] loop1: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 171.581131][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 171.581146][ C0] EXT4-fs (loop1): initial error at time 684: ext4_get_journal_inode:5900: inode 32 [ 171.581162][ C0] EXT4-fs (loop1): last error at time 684: ext4_get_journal_inode:5900: inode 32 [ 171.588186][T13230] EXT4-fs (loop1): no journal found [ 171.588213][T13230] EXT4-fs (loop1): can't get journal size [ 171.603140][T13230] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 171.644809][T13230] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 171.672778][T13230] EXT4-fs error (device loop1): __ext4_iget:5533: inode #15: block 1803188595: comm syz.1.3165: invalid block [ 171.718119][T13230] overlayfs: failed to look up (file1) for ino (-117) [ 171.724087][T13239] loop2: detected capacity change from 0 to 2048 [ 171.724459][T13239] EXT4-fs: Ignoring removed nomblk_io_submit option [ 171.756712][T13239] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.814149][T13239] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.3168: corrupted in-inode xattr: invalid ea_ino [ 171.817138][T13239] EXT4-fs (loop2): Remounting filesystem read-only [ 171.819629][T13239] overlayfs: failed to create directory ./bus/work (errno: 30); mounting read-only [ 171.822449][T13239] overlayfs: failed to set uuid (/file0, err=-30); falling back to uuid=null. [ 171.847438][T13245] loop7: detected capacity change from 0 to 4096 [ 171.874225][T13245] EXT4-fs: inline encryption not supported [ 171.889540][T10976] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.914535][T10113] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.962322][T13245] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 171.962355][T13245] EXT4-fs (loop7): Test dummy encryption mode enabled [ 171.966631][T13245] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0002] [ 171.966682][T13245] System zones: 0-5 [ 171.970160][T13245] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.145891][T10503] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.219122][ T9008] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.329442][T13274] netlink: 332 bytes leftover after parsing attributes in process `syz.0.3179'. [ 172.332761][T13274] netlink: 160 bytes leftover after parsing attributes in process `syz.0.3179'. [ 172.479795][ T11] kernel write not supported for file /ppp (pid: 11 comm: kworker/0:1) [ 172.817473][T13292] A link change request failed with some changes committed already. Interface enp0s0 may have been left with an inconsistent configuration, please check. [ 172.953772][ T4711] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 172.956520][ T4711] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 172.959173][ T4711] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 172.963124][ T4711] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 172.965825][ T4711] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 172.981088][ T4711] [ 172.981536][ T4711] ====================================================== [ 172.982752][ T4711] WARNING: possible circular locking dependency detected [ 172.983985][ T4711] syzkaller #0 Tainted: G L [ 172.985142][ T4711] ------------------------------------------------------ [ 172.986447][ T4711] kworker/u9:2/4711 is trying to acquire lock: [ 172.987530][ T4711] ffff0000c1919210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_link_sibling+0x290/0x370 [ 172.989425][ T4711] [ 172.989425][ T4711] but task is already holding lock: [ 172.990774][ T4711] ffff0000c1919180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x40/0x398 [ 172.992452][ T4711] [ 172.992452][ T4711] which lock already depends on the new lock. [ 172.992452][ T4711] [ 172.994294][ T4711] [ 172.994294][ T4711] the existing dependency chain (in reverse order) is: [ 172.995881][ T4711] [ 172.995881][ T4711] -> #8 (&root->kernfs_rwsem){++++}-{4:4}: [ 172.997314][ T4711] down_write+0x50/0xc0 [ 172.998164][ T4711] kernfs_add_one+0x40/0x398 [ 172.999083][ T4711] kernfs_create_dir_ns+0xe0/0x138 [ 173.000059][ T4711] sysfs_create_dir_ns+0x120/0x1f4 [ 173.001066][ T4711] kobject_add_internal+0x290/0x6f0 [ 173.002104][ T4711] kobject_add_varg+0x9c/0xe8 [ 173.003062][ T4711] kobject_add+0x110/0x1c8 [ 173.003955][ T4711] device_add+0x394/0x9e0 [ 173.004840][ T4711] device_register+0x28/0x38 [ 173.005716][ T4711] register_cpu+0x28c/0x57c [ 173.006579][ T4711] arch_register_cpu+0x160/0x224 [ 173.007505][ T4711] acpi_processor_add+0x8f0/0x13f0 [ 173.008525][ T4711] acpi_bus_attach+0x464/0x7e0 [ 173.009468][ T4711] acpi_dev_for_one_check+0xa0/0xb4 [ 173.010477][ T4711] device_for_each_child+0xf4/0x184 [ 173.011504][ T4711] acpi_dev_for_each_child+0x98/0xe4 [ 173.012569][ T4711] acpi_bus_attach+0x20c/0x7e0 [ 173.013497][ T4711] acpi_dev_for_one_check+0xa0/0xb4 [ 173.014479][ T4711] device_for_each_child+0xf4/0x184 [ 173.015437][ T4711] acpi_dev_for_each_child+0x98/0xe4 [ 173.016484][ T4711] acpi_bus_attach+0x20c/0x7e0 [ 173.017412][ T4711] acpi_bus_scan+0x104/0x310 [ 173.018312][ T4711] acpi_scan_init+0x168/0x3cc [ 173.019248][ T4711] acpi_init+0x15c/0x1f4 [ 173.020101][ T4711] do_one_initcall+0x274/0xc38 [ 173.021027][ T4711] do_initcall_level+0x12c/0x1c4 [ 173.021988][ T4711] do_initcalls+0x70/0xd0 [ 173.022829][ T4711] do_basic_setup+0x7c/0x90 [ 173.023703][ T4711] kernel_init_freeable+0x268/0x3a8 [ 173.024705][ T4711] kernel_init+0x24/0x1dc [ 173.025545][ T4711] ret_from_fork+0x10/0x20 [ 173.026356][ T4711] [ 173.026356][ T4711] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 173.027668][ T4711] cpus_read_lock+0x58/0x25c [ 173.028553][ T4711] static_key_slow_inc+0x1c/0x40 [ 173.029484][ T4711] sk_set_memalloc+0x6c/0xa0 [ 173.030351][ T4711] nbd_genl_reconfigure+0xb50/0x1430 [ 173.031289][ T4711] genl_family_rcv_msg_doit+0x1e4/0x2d4 [ 173.032284][ T4711] genl_rcv_msg+0x43c/0x620 [ 173.033116][ T4711] netlink_rcv_skb+0x238/0x414 [ 173.034001][ T4711] genl_rcv+0x38/0x50 [ 173.034749][ T4711] netlink_unicast+0x600/0x7f8 [ 173.035620][ T4711] netlink_sendmsg+0x648/0x948 [ 173.036465][ T4711] __sock_sendmsg+0xc8/0x17c [ 173.037317][ T4711] ____sys_sendmsg+0x3d0/0x6c8 [ 173.038169][ T4711] ___sys_sendmsg+0x198/0x224 [ 173.039065][ T4711] __sys_sendmsg+0x158/0x204 [ 173.039886][ T4711] __arm64_sys_sendmsg+0x88/0x9c [ 173.040782][ T4711] invoke_syscall+0x98/0x244 [ 173.041605][ T4711] el0_svc_common+0xec/0x23c [ 173.042441][ T4711] do_el0_svc+0x4c/0x5c [ 173.043255][ T4711] el0_svc+0x64/0x260 [ 173.044028][ T4711] el0t_64_sync_handler+0x48/0x148 [ 173.044974][ T4711] el0t_64_sync+0x198/0x19c [ 173.045870][ T4711] [ 173.045870][ T4711] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 173.047176][ T4711] __mutex_lock+0x164/0xf14 [ 173.047995][ T4711] mutex_lock_nested+0x24/0x30 [ 173.048860][ T4711] nbd_queue_rq+0x1f4/0xbd8 [ 173.049714][ T4711] blk_mq_dispatch_rq_list+0x3d4/0x13a8 [ 173.050768][ T4711] __blk_mq_sched_dispatch_requests+0xa48/0x10e8 [ 173.051898][ T4711] blk_mq_sched_dispatch_requests+0xa8/0x158 [ 173.053013][ T4711] blk_mq_run_work_fn+0x154/0x2e4 [ 173.053916][ T4711] process_scheduled_works+0x788/0x10b8 [ 173.054963][ T4711] worker_thread+0x798/0xbd0 [ 173.055828][ T4711] kthread+0x304/0x3d4 [ 173.056598][ T4711] ret_from_fork+0x10/0x20 [ 173.057477][ T4711] [ 173.057477][ T4711] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 173.058694][ T4711] __mutex_lock+0x164/0xf14 [ 173.059568][ T4711] mutex_lock_nested+0x24/0x30 [ 173.060495][ T4711] nbd_queue_rq+0xb0/0xbd8 [ 173.061349][ T4711] blk_mq_dispatch_rq_list+0x3d4/0x13a8 [ 173.062391][ T4711] __blk_mq_sched_dispatch_requests+0xa48/0x10e8 [ 173.063524][ T4711] blk_mq_sched_dispatch_requests+0xa8/0x158 [ 173.064711][ T4711] blk_mq_run_work_fn+0x154/0x2e4 [ 173.065728][ T4711] process_scheduled_works+0x788/0x10b8 [ 173.066758][ T4711] worker_thread+0x798/0xbd0 [ 173.067701][ T4711] kthread+0x304/0x3d4 [ 173.068540][ T4711] ret_from_fork+0x10/0x20 [ 173.069443][ T4711] [ 173.069443][ T4711] -> #4 (set->srcu){.+.+}-{0:0}: [ 173.070633][ T4711] __synchronize_srcu+0xc8/0x268 [ 173.071525][ T4711] synchronize_srcu+0x41c/0x5d4 [ 173.072408][ T4711] blk_mq_wait_quiesce_done+0x88/0xac [ 173.073417][ T4711] blk_mq_quiesce_queue+0x70/0x8c [ 173.074385][ T4711] elevator_switch+0x128/0x38c [ 173.075309][ T4711] elevator_change+0x204/0x35c [ 173.076237][ T4711] elevator_set_default+0x190/0x2b0 [ 173.077253][ T4711] blk_register_queue+0x2fc/0x3d4 [ 173.078185][ T4711] __add_disk+0x558/0xb44 [ 173.079021][ T4711] add_disk_fwnode+0xd4/0x340 [ 173.079906][ T4711] device_add_disk+0x38/0x4c [ 173.080754][ T4711] nbd_dev_add+0x598/0x880 [ 173.081584][ T4711] nbd_init+0x15c/0x174 [ 173.082348][ T4711] do_one_initcall+0x274/0xc38 [ 173.083245][ T4711] do_initcall_level+0x12c/0x1c4 [ 173.084180][ T4711] do_initcalls+0x70/0xd0 [ 173.084990][ T4711] do_basic_setup+0x7c/0x90 [ 173.085852][ T4711] kernel_init_freeable+0x268/0x3a8 [ 173.086826][ T4711] kernel_init+0x24/0x1dc [ 173.087670][ T4711] ret_from_fork+0x10/0x20 [ 173.088554][ T4711] [ 173.088554][ T4711] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 173.089929][ T4711] __mutex_lock+0x164/0xf14 [ 173.090766][ T4711] mutex_lock_nested+0x24/0x30 [ 173.091654][ T4711] elevator_change+0x188/0x35c [ 173.092602][ T4711] elevator_set_none+0xa8/0x13c [ 173.093497][ T4711] blk_mq_update_nr_hw_queues+0x4c4/0x11e0 [ 173.094530][ T4711] nbd_start_device+0x15c/0xa44 [ 173.095389][ T4711] nbd_genl_connect+0xffc/0x15d4 [ 173.096254][ T4711] genl_family_rcv_msg_doit+0x1e4/0x2d4 [ 173.097233][ T4711] genl_rcv_msg+0x43c/0x620 [ 173.098052][ T4711] netlink_rcv_skb+0x238/0x414 [ 173.098919][ T4711] genl_rcv+0x38/0x50 [ 173.099645][ T4711] netlink_unicast+0x600/0x7f8 [ 173.100467][ T4711] netlink_sendmsg+0x648/0x948 [ 173.101327][ T4711] __sock_sendmsg+0xc8/0x17c [ 173.102145][ T4711] ____sys_sendmsg+0x3d0/0x6c8 [ 173.102988][ T4711] ___sys_sendmsg+0x198/0x224 [ 173.103853][ T4711] __sys_sendmsg+0x158/0x204 [ 173.104725][ T4711] __arm64_sys_sendmsg+0x88/0x9c [ 173.105647][ T4711] invoke_syscall+0x98/0x244 [ 173.106510][ T4711] el0_svc_common+0xec/0x23c [ 173.107376][ T4711] do_el0_svc+0x4c/0x5c [ 173.108165][ T4711] el0_svc+0x64/0x260 [ 173.108932][ T4711] el0t_64_sync_handler+0x48/0x148 [ 173.109880][ T4711] el0t_64_sync+0x198/0x19c [ 173.110714][ T4711] [ 173.110714][ T4711] -> #2 (&q->q_usage_counter(io)#36){++++}-{0:0}: [ 173.112219][ T4711] blk_alloc_queue+0x488/0x590 [ 173.113125][ T4711] blk_mq_alloc_queue+0x148/0x284 [ 173.114041][ T4711] __blk_mq_alloc_disk+0x38/0x10c [ 173.115008][ T4711] nbd_dev_add+0x3d0/0x880 [ 173.115847][ T4711] nbd_init+0x15c/0x174 [ 173.116658][ T4711] do_one_initcall+0x274/0xc38 [ 173.117577][ T4711] do_initcall_level+0x12c/0x1c4 [ 173.118541][ T4711] do_initcalls+0x70/0xd0 [ 173.119306][ T4711] do_basic_setup+0x7c/0x90 [ 173.120124][ T4711] kernel_init_freeable+0x268/0x3a8 [ 173.121036][ T4711] kernel_init+0x24/0x1dc [ 173.121866][ T4711] ret_from_fork+0x10/0x20 [ 173.122684][ T4711] [ 173.122684][ T4711] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 173.123886][ T4711] fs_reclaim_acquire+0x90/0x110 [ 173.124804][ T4711] kmem_cache_alloc_noprof+0x60/0x5d8 [ 173.125801][ T4711] __kernfs_iattrs+0xd8/0x310 [ 173.126691][ T4711] __kernfs_setattr+0x48/0x2ac [ 173.127570][ T4711] kernfs_iop_setattr+0xc4/0x11c [ 173.128457][ T4711] notify_change+0x928/0xb7c [ 173.129321][ T4711] do_truncate+0x1a8/0x22c [ 173.130171][ T4711] path_openat+0x2368/0x2a60 [ 173.131032][ T4711] do_file_open+0x1c8/0x2e8 [ 173.131888][ T4711] do_sys_openat2+0x114/0x1e8 [ 173.132778][ T4711] do_sys_open+0xb0/0xe0 [ 173.133571][ T4711] __arm64_sys_openat+0xa8/0xc4 [ 173.134465][ T4711] invoke_syscall+0x98/0x244 [ 173.135338][ T4711] el0_svc_common+0xec/0x23c [ 173.136196][ T4711] do_el0_svc+0x4c/0x5c [ 173.137014][ T4711] el0_svc+0x64/0x260 [ 173.137808][ T4711] el0t_64_sync_handler+0x48/0x148 [ 173.138723][ T4711] el0t_64_sync+0x198/0x19c [ 173.139595][ T4711] [ 173.139595][ T4711] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 173.140981][ T4711] __lock_acquire+0x17c0/0x2ebc [ 173.141904][ T4711] lock_acquire+0x140/0x364 [ 173.142738][ T4711] down_write+0x50/0xc0 [ 173.143496][ T4711] kernfs_link_sibling+0x290/0x370 [ 173.144443][ T4711] kernfs_add_one+0x1d4/0x398 [ 173.145295][ T4711] kernfs_create_dir_ns+0xe0/0x138 [ 173.146236][ T4711] sysfs_create_dir_ns+0x120/0x1f4 [ 173.147170][ T4711] kobject_add_internal+0x290/0x6f0 [ 173.148146][ T4711] kobject_add_varg+0x9c/0xe8 [ 173.148990][ T4711] kobject_add+0x110/0x1c8 [ 173.149804][ T4711] device_add+0x394/0x9e0 [ 173.150612][ T4711] hci_conn_add_sysfs+0xbc/0x1e8 [ 173.151537][ T4711] hci_conn_complete_evt+0x6ec/0xe04 [ 173.152547][ T4711] hci_event_packet+0x4e0/0x9c8 [ 173.153462][ T4711] hci_rx_work+0x2f4/0xd78 [ 173.154295][ T4711] process_scheduled_works+0x788/0x10b8 [ 173.155301][ T4711] worker_thread+0x798/0xbd0 [ 173.156157][ T4711] kthread+0x304/0x3d4 [ 173.156922][ T4711] ret_from_fork+0x10/0x20 [ 173.157772][ T4711] [ 173.157772][ T4711] other info that might help us debug this: [ 173.157772][ T4711] [ 173.159497][ T4711] Chain exists of: [ 173.159497][ T4711] &root->kernfs_iattr_rwsem --> cpu_hotplug_lock --> &root->kernfs_rwsem [ 173.159497][ T4711] [ 173.161973][ T4711] Possible unsafe locking scenario: [ 173.161973][ T4711] [ 173.163159][ T4711] CPU0 CPU1 [ 173.164025][ T4711] ---- ---- [ 173.164891][ T4711] lock(&root->kernfs_rwsem); [ 173.165716][ T4711] lock(cpu_hotplug_lock); [ 173.166917][ T4711] lock(&root->kernfs_rwsem); [ 173.168168][ T4711] lock(&root->kernfs_iattr_rwsem); [ 173.169096][ T4711] [ 173.169096][ T4711] *** DEADLOCK *** [ 173.169096][ T4711] [ 173.170451][ T4711] 4 locks held by kworker/u9:2/4711: [ 173.171324][ T4711] #0: ffff0000f7e3e140 ((wq_completion)hci0#2){+.+.}-{0:0}, at: process_scheduled_works+0x734/0x10b8 [ 173.173150][ T4711] #1: ffff800094347c40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x73c/0x10b8 [ 173.175187][ T4711] #2: ffff0000caa380b8 (&hdev->lock){+.+.}-{4:4}, at: hci_conn_complete_evt+0xa4/0xe04 [ 173.176810][ T4711] #3: ffff0000c1919180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x40/0x398 [ 173.178469][ T4711] [ 173.178469][ T4711] stack backtrace: [ 173.179440][ T4711] CPU: 0 UID: 0 PID: 4711 Comm: kworker/u9:2 Tainted: G L syzkaller #0 PREEMPT [ 173.181259][ T4711] Tainted: [L]=SOFTLOCKUP [ 173.181973][ T4711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 173.183617][ T4711] Workqueue: hci0 hci_rx_work [ 173.184414][ T4711] Call trace: [ 173.184926][ T4711] show_stack+0x2c/0x3c (C) [ 173.185673][ T4711] __dump_stack+0x30/0x40 [ 173.186385][ T4711] dump_stack_lvl+0xd8/0x12c [ 173.187120][ T4711] dump_stack+0x1c/0x28 [ 173.187787][ T4711] print_circular_bug+0x328/0x330 [ 173.188579][ T4711] check_noncircular+0x158/0x174 [ 173.189407][ T4711] __lock_acquire+0x17c0/0x2ebc [ 173.190244][ T4711] lock_acquire+0x140/0x364 [ 173.191023][ T4711] down_write+0x50/0xc0 [ 173.191722][ T4711] kernfs_link_sibling+0x290/0x370 [ 173.192572][ T4711] kernfs_add_one+0x1d4/0x398 [ 173.193331][ T4711] kernfs_create_dir_ns+0xe0/0x138 [ 173.194226][ T4711] sysfs_create_dir_ns+0x120/0x1f4 [ 173.195118][ T4711] kobject_add_internal+0x290/0x6f0 [ 173.196015][ T4711] kobject_add_varg+0x9c/0xe8 [ 173.196819][ T4711] kobject_add+0x110/0x1c8 [ 173.197582][ T4711] device_add+0x394/0x9e0 [ 173.198326][ T4711] hci_conn_add_sysfs+0xbc/0x1e8 [ 173.199158][ T4711] hci_conn_complete_evt+0x6ec/0xe04 [ 173.200056][ T4711] hci_event_packet+0x4e0/0x9c8 [ 173.200858][ T4711] hci_rx_work+0x2f4/0xd78 [ 173.201608][ T4711] process_scheduled_works+0x788/0x10b8 [ 173.202710][ T4711] worker_thread+0x798/0xbd0 [ 173.203583][ T4711] kthread+0x304/0x3d4 [ 173.204275][ T4711] ret_from_fork+0x10/0x20 [ 173.222314][ T30] audit: type=1326 audit(686.189:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13265 comm="syz.1.3178" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa53781a8 code=0x7fc00000 [ 173.222363][ T30] audit: type=1326 audit(686.189:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13265 comm="syz.1.3178" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffa53781a8 code=0x7fc00000 [ 173.222389][ T30] audit: type=1326 audit(686.189:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13265 comm="syz.1.3178" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa53781a8 code=0x7fc00000 [ 173.222413][ T30] audit: type=1326 audit(686.189:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13265 comm="syz.1.3178" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa53781a8 code=0x7fc00000 [ 173.222433][ T30] audit: type=1326 audit(686.189:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13265 comm="syz.1.3178" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa53781a8 code=0x7fc00000 [ 173.222452][ T30] audit: type=1326 audit(686.189:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13265 comm="syz.1.3178" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa53781a8 code=0x7fc00000 [ 173.222470][ T30] audit: type=1326 audit(686.189:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13265 comm="syz.1.3178" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa53781a8 code=0x7fc00000 [ 173.222488][ T30] audit: type=1326 audit(686.189:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13265 comm="syz.1.3178" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa53781a8 code=0x7fc00000 [ 173.222506][ T30] audit: type=1326 audit(686.189:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13265 comm="syz.1.3178" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa53781a8 code=0x7fc00000 [ 173.222529][ T30] audit: type=1326 audit(686.189:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13265 comm="syz.1.3178" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa53781a8 code=0x7fc00000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 173.762851][T10578] syz_tun (unregistering): left allmulticast mode [ 173.762885][T10578] syz_tun (unregistering): left promiscuous mode [ 173.762920][T10578] bridge0: port 3(syz_tun) entered disabled state [ 173.955736][ T3420] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.957898][ T3420] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.975211][ T3420] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.977277][ T3420] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.013553][ T3420] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.013596][ T3420] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.034029][ T3420] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.037453][ T3420] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.087770][ T3420] bridge_slave_1: left allmulticast mode [ 174.087798][ T3420] bridge_slave_1: left promiscuous mode [ 174.087877][ T3420] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.096499][ T3420] bridge_slave_0: left allmulticast mode [ 174.096529][ T3420] bridge_slave_0: left promiscuous mode [ 174.096601][ T3420] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.163924][ T3420] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.166613][ T3420] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.169179][ T3420] bond0 (unregistering): Released all slaves [ 174.268312][ T3420] hsr_slave_0: left promiscuous mode [ 174.273352][ T3420] hsr_slave_1: left promiscuous mode [ 174.274665][ T3420] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.280072][ T3420] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.280403][ T3420] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.280419][ T3420] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.287349][ T3420] veth1_macvtap: left promiscuous mode [ 174.287391][ T3420] veth0_macvtap: left promiscuous mode [ 174.287451][ T3420] veth1_vlan: left promiscuous mode [ 174.287486][ T3420] veth0_vlan: left promiscuous mode [ 174.413032][ T3420] team0 (unregistering): Port device team_slave_1 removed [ 174.417064][ T3420] team0 (unregistering): Port device team_slave_0 removed [ 174.623344][ T4400] 8021q: adding VLAN 0 to HW filter on device eth4 [ 174.735218][ T4400] 8021q: adding VLAN 0 to HW filter on device eth5 [ 174.839411][ T4400] 8021q: adding VLAN 0 to HW filter on device eth6 [ 174.947603][ T4400] 8021q: adding VLAN 0 to HW filter on device eth7