last executing test programs: 1m22.869309846s ago: executing program 32 (id=56): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x4030582b, &(0x7f0000000c00)={0x0, 0x1, 0x4, 0x40000000000000, 0x0, 0xf0}) 49.71566796s ago: executing program 3 (id=970): r0 = memfd_create(&(0x7f0000000040)='];\x00\x00\x00\x00\x96\t\xb27\x87Ge@{\xb7\xff]\ah\xd9\xb7\x13W\xb14\xfe\xe7FW\x96\x7f\xe8\xce(Ep\x93\xc9\xdd-\xfc\xf6\xdc\xec9H\x85\xa0\xf2p\x19\xa6\xd3z\x9c\xf0\x16Ax\x18<\x05\b\xa5\x19FN{U\x8b\xb0M5^\x7f+\xc9]E\x1a\x02x\xdc8\xa5|@<\x12\xcc@\xd6\x00\xb9\xf0', 0x0) mmap(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x1, 0x12, r0, 0x7000) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000240)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fe3000/0x4000)=nil, 0x3000}) 49.603847201s ago: executing program 3 (id=977): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 49.531274341s ago: executing program 3 (id=982): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x52142, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) 49.441802983s ago: executing program 3 (id=984): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x14) mount_setattr(r0, &(0x7f00000001c0)='./file0/../file0\x00', 0x8000, &(0x7f00000002c0)={0x1, 0xa, 0x80000, {r0}}, 0x20) 49.328214805s ago: executing program 3 (id=988): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x1c, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x56}]}}}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x90}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r3, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) 49.005019295s ago: executing program 3 (id=996): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x2000000000001005, 0x19dff}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x2}}, 0xfe5e) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x2000000000001005, 0x19dff}}}, 0x90) 48.945606383s ago: executing program 33 (id=996): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x2000000000001005, 0x19dff}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x2}}, 0xfe5e) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x2000000000001005, 0x19dff}}}, 0x90) 43.070543608s ago: executing program 4 (id=1084): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x8402, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x7) r1 = openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) close_range(r0, r1, 0x2) syz_usb_connect$uac2(0x6, 0x7b, &(0x7f0000004d40)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x0, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x3, 0xa0, 0x80, {0x8, 0xb, 0x0, 0x0, 0x1, 0xb, 0x20, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x6, 0xa, 0x9, 0xe}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x7, 0x6, 0x9, {0x8, 0x25, 0x1, 0x82, 0xf, 0x96, 0xd6d3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xc6, 0x3, 0xb, {0x8, 0x25, 0x1, 0x82, 0x3c, 0x2, 0xd55}}}}}}}}]}}, 0x0) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, 0x0) syz_usb_connect$midi(0x4, 0x0, 0x0, 0x0) 42.516318697s ago: executing program 4 (id=1096): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000340)={0xaa, 0xe0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_io_uring_setup(0x42c8, &(0x7f0000000000)={0x0, 0xfe85, 0x9000, 0x3, 0x227}, &(0x7f0000000100), &(0x7f0000ff4000), &(0x7f0000000000)) 42.473656906s ago: executing program 4 (id=1097): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 42.361423995s ago: executing program 4 (id=1101): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x30, 0x0, &(0x7f0000000100)) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth1\x00', &(0x7f0000000340)=@ethtool_channels={0x3d, 0x9, 0x5, 0x7, 0x0, 0x0, 0xe7, 0x101, 0x66e}}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x300000f, 0x11, r0, 0xcfa3e000) 42.041401402s ago: executing program 4 (id=1109): socket$unix(0x1, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800002, &(0x7f0000000000)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x464, &(0x7f0000000ac0)="$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") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f0000006300)="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", 0x2000, &(0x7f00000017c0)={&(0x7f00000000c0)={0x50, 0x0, 0x3, {0x7, 0x2b, 0x9, 0xffffffffd0065de0, 0x1, 0x6, 0xfffffffc, 0x9, 0x0, 0x0, 0x35, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000040)={0x200004, 0x200004, 0x4, 0x0, 0x9, 0x5}) openat2$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000140)={0x474203, 0x596}, 0x18) 41.178239941s ago: executing program 4 (id=1130): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r0) socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @local}, 0x2, 0x3, 0x802}}, 0x2e) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000280)) 40.276168552s ago: executing program 5 (id=1149): ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "268435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xf3d8}}}}}}}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e1f, 0x1, @empty, 0x7ff}}, 0x0, 0x0, 0x6, 0x0, "30fa9375120054c1b5a34f91c57d8c79f12c8b720f1c000000000000370ca14e54018280a3d3e78f7a7bac5800008d01b9c346583f91776f8976917a0500000005000000000200"}, 0xd8) syz_emit_ethernet(0x4a, &(0x7f0000000280)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ab0001", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x0, 0xa388}}}}}}}, 0x0) 40.229488164s ago: executing program 5 (id=1152): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x4000}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) 40.04009514s ago: executing program 5 (id=1155): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80400000, 0x0, 0x8, 0x2, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x800c, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0xe, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xfffbffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x9, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x2fcd0, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x7ffd, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0xffff, 0x6, 0x96, 0xfbfffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x6, 0xe, 0x5, 0x7, 0x6, 0x2, 0x2, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x8000c584, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x7, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x1, 0x5, 0x4001000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x101, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x86, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x6]}, 0x45c) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4) ioctl$UI_DEV_CREATE(r0, 0x5501) readv(r0, &(0x7f0000001240)=[{&(0x7f00000012c0)=""/41, 0x18}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 39.905041691s ago: executing program 5 (id=1161): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x48c5, &(0x7f0000000440)={[{@shortname_lower}, {@shortname_winnt}, {@fat=@nfs}, {@fat=@discard}, {@uni_xlate}, {@utf8}, {@fat=@sys_immutable}, {@utf8}, {@fat=@dmask={'dmask', 0x3d, 0x4007}}, {@rodir}, {@utf8no}, {@uni_xlate}, {@rodir}]}, 0x0, 0x2b2, &(0x7f0000000840)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x3b3741e, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020) 39.814045322s ago: executing program 5 (id=1165): mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000ff3000/0xd000)=nil, 0xd000) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}}) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf) 39.535930255s ago: executing program 5 (id=1173): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00020076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r2, {0x7, 0x9e3d206e4ff0beee}, {0xd, 0x6}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x48044) 39.510747863s ago: executing program 34 (id=1173): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00020076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r2, {0x7, 0x9e3d206e4ff0beee}, {0xd, 0x6}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x48044) 33.047908782s ago: executing program 6 (id=1259): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000003400)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x1, @a={0x5f, 0x3, 0x2, 0x0, 0x9, 0x6e, 0x40, {0x1, 0x94, "38d8936b127de2b4d25de0cc04a970858805c02274973b4c48a247381f2a5588fbe1dff61c5d50c4ceeeb7452fd299ea2c085aee0d9b96335fcabae2fbb365211d9c943d05cd8e0a59a984c28233dcadf70fb9c3729a7974d5a1f7b109260c01e8135a94701772c7a51456a3916dbd90531890f71057807f570cb405013c617def0c3af5c5ce216fccd847bd3e66f17a0d4e0810", 0x7, 0x40}, 0x9, 0x84, 0xb7, 0xef}}, 0xa7) 30.017810447s ago: executing program 6 (id=1284): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x142, 0x1ef) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000200)=ANY=[]) 29.944274627s ago: executing program 6 (id=1288): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) munmap(&(0x7f00002e0000/0x2000)=nil, 0x2000) pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) 29.876610604s ago: executing program 6 (id=1291): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x8000, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) 29.758072508s ago: executing program 6 (id=1297): r0 = socket$nl_generic(0x10, 0x3, 0x10) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000003340)=[{{&(0x7f00000003c0)={0xa, 0x4e22, 0x7fff, @loopback, 0x9}, 0x1c, &(0x7f0000001b00)=[{&(0x7f0000001a80)='g', 0x1}], 0x1}}, {{&(0x7f0000001bc0)={0xa, 0x4e20, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f00000021c0)=[{&(0x7f0000001c00)="1b", 0x1}], 0x1}}], 0x2, 0x40) sendto$inet6(r1, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r1, 0x1) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x134}, 0x1, 0x0, 0x0, 0x24000080}, 0x4000011) 29.324003084s ago: executing program 6 (id=1309): socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000002040), 0x82401, 0x0) r0 = syz_io_uring_setup(0x6c14, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x1, 0x11}, &(0x7f0000000100)=0x0, &(0x7f00000003c0)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x7, 0x8, 0x0, 0x0, 0x14, 0x1}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 29.271891156s ago: executing program 35 (id=1309): socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000002040), 0x82401, 0x0) r0 = syz_io_uring_setup(0x6c14, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x1, 0x11}, &(0x7f0000000100)=0x0, &(0x7f00000003c0)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x7, 0x8, 0x0, 0x0, 0x14, 0x1}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 25.87058679s ago: executing program 36 (id=1130): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r0) socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @local}, 0x2, 0x3, 0x802}}, 0x2e) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000280)) 13.532955848s ago: executing program 7 (id=1611): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x19) ioctl$TCXONC(r0, 0x540a, 0x2) 13.256723121s ago: executing program 7 (id=1620): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, 0x0, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0xfea000, 0x2000402) lseek(r0, 0x5, 0x3) 13.186805313s ago: executing program 7 (id=1625): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x8, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {}, {0xfff2, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x3a}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x24000000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 13.097497461s ago: executing program 7 (id=1627): mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x21b7049, 0x0) mount$tmpfs(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f00000001c0), 0x800, 0x0) 12.996049131s ago: executing program 7 (id=1631): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket(0x2b, 0x1, 0x1) listen(r0, 0x5) accept4$vsock_stream(r0, 0x0, 0x0, 0x80800) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0) 12.380172246s ago: executing program 7 (id=1644): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000004, 0x5d032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) close(0x3) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 12.23818991s ago: executing program 37 (id=1644): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000004, 0x5d032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) close(0x3) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 1.262544507s ago: executing program 8 (id=1900): mount$fuse(0x0, 0x0, 0x0, 0x80, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {0x0, 0x4, 0x0, 0x1000}, 0x1c, [0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xff, 0xeb93], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x7, 0x0, 0x8, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xb5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000000580)={0x8, 0x519, 0xff, 0x7, 0x0, 0x4}) 1.168613694s ago: executing program 8 (id=1902): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r2 = fspick(r1, &(0x7f00000000c0)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) 808.232011ms ago: executing program 0 (id=1911): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000280)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) listen(r1, 0x1) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) accept4(r1, 0x0, 0x0, 0x80800) 807.894105ms ago: executing program 0 (id=1913): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x40000000}, 0x24}}, 0x4000001) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b00)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7, 0x8000}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=@newtfilter={0x4c, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x0, 0x4}, {}, {0x8, 0xe}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xf1, 0x4, 0x2}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2004c8d0}, 0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 799.464796ms ago: executing program 0 (id=1914): bpf$MAP_CREATE(0x0, 0x0, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tw'], 0xa) write$cgroup_devices(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="61201500000000"], 0x9) 776.276382ms ago: executing program 0 (id=1915): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c00)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xe, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x8, 0x2, [@TCA_CGROUP_POLICE={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) 691.925661ms ago: executing program 0 (id=1919): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x16, 0x0, @void}, 0x10) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0x4) 666.153372ms ago: executing program 0 (id=1920): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0xfffffffd) userfaultfd(0x801) pselect6(0x40, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, &(0x7f0000000100)={0x18, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1981}, 0x0, 0x0) io_setup(0x4, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffe, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) shutdown(r0, 0x1) 655.273386ms ago: executing program 9 (id=1921): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newsa={0x144, 0x10, 0x1, 0x1, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast2, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x80, 0x3c}, {@in6=@loopback, 0x4d4, 0x6c}, @in6=@mcast1, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8, 0x2}, {0xffffffffffffffff, 0x2a, 0x1f, 0x7b8}, {0x2, 0xfffffffc, 0xfffffbbc}, 0x70bd2a, 0x0, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075b, 0x8}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x3, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 621.276203ms ago: executing program 9 (id=1922): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0xfac7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 513.774446ms ago: executing program 2 (id=1924): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x2f00020b, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40002000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x400c804) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) 484.206903ms ago: executing program 2 (id=1925): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r0, &(0x7f0000000240)=[{{&(0x7f0000000480)={0xa, 0x4e24, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8e}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000c40)="ea", 0x1}], 0x1}}], 0x1, 0x40) shutdown(r0, 0x1) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000380)={r2, @in6={{0xa, 0x4e22, 0x100000, @empty, 0x2}}, 0xad7, 0x2, 0x5, 0x3, 0x50, 0x1, 0x6}, &(0x7f0000000440)=0x9c) 454.435673ms ago: executing program 2 (id=1926): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r0, &(0x7f0000001a00)=[{0x0}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x2) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0xc921d000) 372.717731ms ago: executing program 1 (id=1927): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) close(0xffffffffffffffff) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000500)='GPL\x00', 0x2, 0x0, 0x0, 0xe0e4f3ee43f6dc44, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 356.569877ms ago: executing program 9 (id=1928): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec777000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 294.57103ms ago: executing program 1 (id=1929): openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x141842, 0x8) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x1000) fanotify_mark(r1, 0x105, 0x5000003a, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 293.981902ms ago: executing program 8 (id=1930): openat(0xffffffffffffff9c, 0x0, 0x141842, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000006c0)={0x0, 'bridge0\x00', {0x101}, 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) 288.599355ms ago: executing program 9 (id=1931): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x1ff}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}, {0x0, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x40000) 262.238093ms ago: executing program 1 (id=1932): openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) lseek(r1, 0x6, 0x0) getdents64(r1, 0x0, 0x0) 238.551882ms ago: executing program 1 (id=1933): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x2, 0x3, 0xfffffff9, 0x9, 0x101, 0x2, 0xffff}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r1, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x5a}, @TCA_ROUTE4_IIF={0x8, 0x4, r1}]}}]}, 0x44}}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 223.353671ms ago: executing program 2 (id=1934): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r0, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/65, 0x41}], 0x1}}], 0x1, 0x0, 0x0) recvmmsg$unix(r0, &(0x7f0000006200)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/232, 0xe8}], 0x1}}], 0x1, 0x0, 0x0) 188.607386ms ago: executing program 8 (id=1935): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r2 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r2, 0xc0404806, &(0x7f0000000040)) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 188.224837ms ago: executing program 1 (id=1936): r0 = landlock_create_ruleset(&(0x7f0000000180)={0x8201, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) 137.948496ms ago: executing program 9 (id=1937): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c582", 0x5) r1 = accept4$alg(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4044011}], 0x1, 0x40040) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r2, 0x2000000000000225, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0xfffb, r1, &(0x7f0000000340), 0x2d}]) 137.446267ms ago: executing program 1 (id=1938): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newvlan={0x30, 0x70, 0x20c, 0x70bd27, 0x25dfdbfb, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x6}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x9}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x20000014) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x52, 0x0, 0xfffffffc, 0x0, 0x10000}, 0x28) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x100000, @rand_addr=' \x01\x00'}]}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r0, 0x1, 0x52, &(0x7f0000000040)=0x92c, 0x4) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000043c0)=""/69, 0x45}, 0x2}], 0x1c, 0x10022, 0x0) 102.686065ms ago: executing program 8 (id=1939): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000540)=[{{&(0x7f0000000480)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}, 0x0, 0x2}}, 0x80, 0x0}}], 0x1, 0x4000000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="501a00000d0a010800000000000000000a0000000900020073797a31000000000900010073797a3100000000241a0380180000800c00018006000100000000000800034000000002"], 0x1a50}, 0x1, 0x0, 0x0, 0x805}, 0x0) 67.444364ms ago: executing program 2 (id=1940): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40040}], 0x1, 0x8040) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[], 0x30}}, 0x4000041) recvmsg(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001240)=""/47, 0x2f}], 0x1}, 0x10002) 47.080423ms ago: executing program 9 (id=1941): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x1000892, &(0x7f0000000080), 0xfe, 0x572, &(0x7f0000001700)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x4002, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000100)=ANY=[], 0x1, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 232.993µs ago: executing program 2 (id=1942): syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x141000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') 0s ago: executing program 8 (id=1943): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3380, 0x1, 0x40024e}, 0x0, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) kernel console output (not intermixed with test programs): : couldn't mark inode dirty (err -117) [ 63.236692][ T7272] EXT4-fs (loop4): 1 orphan inode deleted [ 63.271071][ T15] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 63.276211][ T15] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 63.278115][ T15] EXT4-fs error (device loop4): ext4_release_dquot:7070: comm kworker/u8:1: Failed to release dquot type 0 [ 63.284436][ T7272] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 63.520996][ T7299] __nla_validate_parse: 2 callbacks suppressed [ 63.521034][ T7299] netlink: 16 bytes leftover after parsing attributes in process `syz.1.895'. [ 63.577449][ T7305] loop4: detected capacity change from 0 to 256 [ 63.586711][ T7305] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 63.624393][ T7307] loop5: detected capacity change from 0 to 8192 [ 63.741672][ T7318] "syz.4.904" (7318) uses obsolete ecb(arc4) skcipher [ 63.753287][ T4722] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 64.393714][ T4718] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 64.476904][ T1595] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.476960][ T1595] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.481041][ T1027] cfg80211: failed to load regulatory.db [ 64.576227][ T7377] loop3: detected capacity change from 0 to 256 [ 64.592338][ T7377] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 64.874455][ T7393] input: syz1 as /devices/virtual/input/input11 [ 64.931735][ T7397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.933778][ T7397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.000746][ T7399] loop2: detected capacity change from 0 to 128 [ 65.009256][ T7399] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 65.011620][ T7399] FAT-fs (loop2): Filesystem has been set read-only [ 65.013561][ T7399] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 65.013599][ T7399] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 65.013613][ T7399] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 65.013624][ T7399] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 65.013635][ T7399] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 65.013646][ T7399] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 65.013656][ T7399] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 65.013666][ T7399] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 65.013694][ T7399] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 65.565115][ T7409] loop5: detected capacity change from 0 to 512 [ 65.584630][ T7409] EXT4-fs mount: 32 callbacks suppressed [ 65.584659][ T7409] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.630204][ T7409] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #18: comm syz.5.939: corrupted inode contents [ 65.630267][ T7409] loop5: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 65.631376][ T7409] EXT4-fs error (device loop5): ext4_dirty_inode:6587: inode #18: comm syz.5.939: mark_inode_dirty error [ 65.631471][ T7409] loop5: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 65.631655][ T7409] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #18: comm syz.5.939: corrupted inode contents [ 65.631679][ T7409] loop5: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 65.631803][ T7409] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3001: inode #18: comm syz.5.939: mark_inode_dirty error [ 65.631825][ T7409] loop5: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 65.631951][ T7409] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3004: inode #18: comm syz.5.939: mark inode dirty (error -117) [ 65.631972][ T7409] loop5: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 65.632555][ T7409] EXT4-fs warning (device loop5): ext4_evict_inode:287: xattr delete (err -117) [ 65.648236][ T5034] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.040491][ T7429] loop1: detected capacity change from 0 to 512 [ 66.057726][ T7429] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 66.059518][ T7429] EXT4-fs (loop1): orphan cleanup on readonly fs [ 66.061130][ T7429] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 66.062217][ T7429] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 66.062366][ T7429] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #13: comm syz.1.945: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 66.062385][ T7429] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 66.062540][ T7429] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.945: couldn't read orphan inode 13 (err -117) [ 66.062553][ T7429] loop1: lost filesystem error report for type 5 error -117 [ 66.063945][ T7429] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 66.143936][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.646600][ T7472] loop2: detected capacity change from 0 to 512 [ 66.652651][ T7472] FAT-fs (loop2): Directory bread(block 199916) failed [ 66.654246][ T7472] FAT-fs (loop2): Directory bread(block 199917) failed [ 66.655850][ T7472] FAT-fs (loop2): Directory bread(block 199918) failed [ 66.657240][ T7472] FAT-fs (loop2): Directory bread(block 199919) failed [ 66.658579][ T7472] FAT-fs (loop2): Directory bread(block 199920) failed [ 66.659934][ T7472] FAT-fs (loop2): Directory bread(block 199921) failed [ 66.661332][ T7472] FAT-fs (loop2): Directory bread(block 199922) failed [ 66.661351][ T7472] FAT-fs (loop2): Directory bread(block 199923) failed [ 66.670184][ T7472] FAT-fs (loop2): Directory bread(block 199916) failed [ 66.671874][ T7472] FAT-fs (loop2): Directory bread(block 199917) failed [ 66.841659][ T7480] loop3: detected capacity change from 0 to 2048 [ 66.885349][ T7480] loop3: p1 < > p3 p4 [ 66.885349][ T7480] p4: [ 66.886015][ T7480] loop3: p3 start 458752 is beyond EOD, truncated [ 66.886045][ T7480] loop3: p4 size 722688 extends beyond EOD, truncated [ 66.887775][ T7480] loop3: p5 start 262464109 is beyond EOD, truncated [ 66.887806][ T7480] loop3: p6 size 2304 extends beyond EOD, truncated [ 66.905718][ T4340] loop3: p1 < > p3 p4 [ 66.905718][ T4340] p4: [ 66.907882][ T4340] loop3: p3 start 458752 is beyond EOD, truncated [ 66.907923][ T4340] loop3: p4 size 722688 extends beyond EOD, truncated [ 66.909149][ T4340] loop3: p5 start 262464109 is beyond EOD, truncated [ 66.909163][ T4340] loop3: p6 size 2304 extends beyond EOD, truncated [ 66.945961][ T4700] udevd[4700]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 66.946978][ T4698] udevd[4698]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 66.954319][ T5051] udevd[5051]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 66.985949][ T4700] udevd[4700]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 66.990692][ T5051] udevd[5051]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 66.992860][ T4698] udevd[4698]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 67.075596][ T7486] loop2: detected capacity change from 0 to 512 [ 67.090577][ T7486] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 67.098807][ T7486] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.118229][ T7486] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.966: bg 0: block 217: padding at end of block bitmap is not set [ 67.123145][ T7486] EXT4-fs (loop2): Remounting filesystem read-only [ 67.127864][ T7492] netlink: 'syz.1.969': attribute type 1 has an invalid length. [ 67.127878][ T7492] netlink: 56 bytes leftover after parsing attributes in process `syz.1.969'. [ 67.166797][ T7494] EXT4-fs: Ignoring removed i_version option [ 67.168043][ T7494] EXT4-fs: Ignoring removed nobh option [ 67.168916][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.192657][ T7494] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 67.192712][ T7494] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 67.330549][ T7518] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.345559][ T7517] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.396379][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.421406][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.666225][ T7547] Bluetooth: hci0: invalid len left 7, exp >= 131 [ 67.875204][ T15] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.929391][ T4722] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.931217][ T4722] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.933541][ T4722] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.936070][ T4722] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.938066][ T4722] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.959071][ T15] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.025704][ T15] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.089999][ T15] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.237215][ T7581] input: syz0 as /devices/virtual/input/input12 [ 68.281526][ T7556] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.284327][ T7556] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.284519][ T7556] bridge_slave_0: entered allmulticast mode [ 68.287917][ T7556] bridge_slave_0: entered promiscuous mode [ 68.293829][ T7556] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.296625][ T7556] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.298228][ T7556] bridge_slave_1: entered allmulticast mode [ 68.304246][ T7556] bridge_slave_1: entered promiscuous mode [ 68.502536][ T7604] netlink: 'syz.5.1010': attribute type 2 has an invalid length. [ 68.504248][ T7604] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1010'. [ 68.553194][ T15] bridge_slave_1: left allmulticast mode [ 68.553224][ T15] bridge_slave_1: left promiscuous mode [ 68.554000][ T15] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.556276][ T15] bridge_slave_0: left allmulticast mode [ 68.556291][ T15] bridge_slave_0: left promiscuous mode [ 68.556365][ T15] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.716242][ T15] team0: Port device bond0 removed [ 68.717887][ T15] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 68.754462][ T15] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 68.765004][ T15] bond0 (unregistering): Released all slaves [ 68.767537][ T15] bond1 (unregistering): Released all slaves [ 68.772591][ T7556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.776019][ T7556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.814635][ T7556] team0: Port device team_slave_0 added [ 68.818751][ T15] tipc: Left network mode [ 68.819376][ T7556] team0: Port device team_slave_1 added [ 68.839089][ T7556] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.839115][ T7556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.839140][ T7556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.840264][ T7556] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.840273][ T7556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.840286][ T7556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.845041][ T7608] set_capacity_and_notify: 4 callbacks suppressed [ 68.845051][ T7608] loop1: detected capacity change from 0 to 512 [ 68.851035][ T7608] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.858231][ T7556] hsr_slave_0: entered promiscuous mode [ 68.858547][ T7556] hsr_slave_1: entered promiscuous mode [ 68.858733][ T7556] debugfs: 'hsr0' already exists in 'hsr' [ 68.858743][ T7556] Cannot create hsr debugfs directory [ 68.945496][ T7608] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #18: comm syz.1.1012: corrupted inode contents [ 68.949049][ T7608] loop1: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 68.949367][ T7608] EXT4-fs error (device loop1): ext4_dirty_inode:6587: inode #18: comm syz.1.1012: mark_inode_dirty error [ 68.953688][ T7608] loop1: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 68.954168][ T7608] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #18: comm syz.1.1012: corrupted inode contents [ 68.954225][ T7608] loop1: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 68.955012][ T7608] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3001: inode #18: comm syz.1.1012: mark_inode_dirty error [ 68.955045][ T7608] loop1: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 68.955191][ T7608] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3004: inode #18: comm syz.1.1012: mark inode dirty (error -117) [ 68.955336][ T7608] EXT4-fs warning (device loop1): ext4_evict_inode:287: xattr delete (err -117) [ 68.973885][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.125936][ T15] hsr_slave_0: left promiscuous mode [ 69.127186][ T15] hsr_slave_1: left promiscuous mode [ 69.127668][ T15] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.127679][ T15] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.128573][ T15] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.128584][ T15] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.134721][ T15] veth1_macvtap: left promiscuous mode [ 69.134775][ T15] veth0_macvtap: left promiscuous mode [ 69.134863][ T15] veth1_vlan: left promiscuous mode [ 69.134895][ T15] veth0_vlan: left promiscuous mode [ 69.210116][ T7621] loop1: detected capacity change from 0 to 2048 [ 69.227370][ T7621] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.288193][ T15] team0 (unregistering): Port device team_slave_1 removed [ 69.292569][ T15] team0 (unregistering): Port device team_slave_0 removed [ 69.294817][ T7619] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 69.299205][ T7619] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 69.302068][ T7619] EXT4-fs (loop1): This should not happen!! Data will be lost [ 69.302068][ T7619] [ 69.304969][ T7619] EXT4-fs (loop1): Total free blocks count 0 [ 69.306840][ T7619] EXT4-fs (loop1): Free/Dirty block details [ 69.306903][ T7619] EXT4-fs (loop1): free_blocks=4096 [ 69.306927][ T7619] EXT4-fs (loop1): dirty_blocks=512 [ 69.306938][ T7619] EXT4-fs (loop1): Block reservation details [ 69.306948][ T7619] EXT4-fs (loop1): i_reserved_data_blocks=32 [ 69.314961][ T7621] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 480 with error 28 [ 69.343092][ T4711] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 69.993762][ T4722] Bluetooth: hci2: command tx timeout [ 70.255370][ T7642] loop4: detected capacity change from 0 to 1024 [ 70.256036][ T7642] EXT4-fs: Ignoring removed nomblk_io_submit option [ 70.258730][ T7642] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 70.263360][ T7642] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 2: comm syz.4.1024: lblock 2 mapped to illegal pblock 2 (length 1) [ 70.266767][ T7642] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 70.266802][ T7642] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 48: comm syz.4.1024: lblock 0 mapped to illegal pblock 48 (length 1) [ 70.271554][ T7642] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 70.273671][ C1] EXT4-fs (loop4): error count since last fsck: 2 [ 70.273681][ C1] EXT4-fs (loop4): initial error at time 70: ext4_map_blocks:791: inode 3: block 2 [ 70.273700][ C1] EXT4-fs (loop4): last error at time 70: ext4_map_blocks:791: inode 3: block 48 [ 70.274061][ T7642] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.1024: Failed to acquire dquot type 0 [ 70.274077][ T7642] loop4: lost filesystem error report for type 5 error -117 [ 70.283326][ T7642] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 70.286839][ T7642] loop4: lost filesystem error report for type 5 error -117 [ 70.287043][ T7642] EXT4-fs error (device loop4): ext4_evict_inode:267: inode #11: comm syz.4.1024: mark_inode_dirty error [ 70.287847][ T7642] EXT4-fs warning (device loop4): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 70.287891][ T7642] EXT4-fs (loop4): 1 orphan inode deleted [ 70.288357][ T7642] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.294729][ T7642] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 1: comm syz.4.1024: lblock 1 mapped to illegal pblock 1 (length 1) [ 70.296229][ T7642] Quota error (device loop4): find_tree_dqentry: Can't read quota tree block 1 [ 70.296248][ T7642] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 980643439 [ 70.296259][ T7642] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.1024: Failed to acquire dquot type 0 [ 70.307186][ T4707] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.307357][ T1249] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 70.307449][ T1249] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 70.307462][ T1249] EXT4-fs error (device loop4): ext4_release_dquot:7070: comm kworker/u8:5: Failed to release dquot type 0 [ 70.307471][ T1249] loop4: lost filesystem error report for type 5 error -117 [ 70.307889][ T4707] EXT4-fs error (device loop4): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 70.307900][ T4707] loop4: lost filesystem error report for type 5 error -117 [ 70.308614][ T4707] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 70.308626][ T4707] loop4: lost filesystem error report for type 5 error -117 [ 70.308688][ T4707] EXT4-fs error (device loop4): ext4_quota_off:7318: inode #3: comm syz-executor: mark_inode_dirty error [ 70.313680][ T7519] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 70.324605][ T7556] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 70.348426][ T7556] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 70.348764][ T7556] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 70.385578][ T7556] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 70.386078][ T7556] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 70.395143][ T7556] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 70.395445][ T7556] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 70.397392][ T7556] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 70.465727][ T7556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.477493][ T7556] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.481126][ T6477] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.481171][ T6477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.489893][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.489936][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.692726][ T4396] 8021q: adding VLAN 0 to HW filter on device eth4 [ 70.798370][ T7556] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.847738][ T7730] netlink: 'syz.5.1046': attribute type 2 has an invalid length. [ 70.849965][ T7730] netlink: 'syz.5.1046': attribute type 2 has an invalid length. [ 70.902473][ T7735] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1048'. [ 70.977496][ T7556] veth0_vlan: entered promiscuous mode [ 70.989242][ T7556] veth1_vlan: entered promiscuous mode [ 71.008785][ T7556] veth0_macvtap: entered promiscuous mode [ 71.013888][ T7556] veth1_macvtap: entered promiscuous mode [ 71.019888][ T7556] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.024942][ T7556] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.029979][ T6471] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.030072][ T6471] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.030128][ T6471] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.030186][ T6471] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.073698][ T7759] netlink: 'syz.1.1054': attribute type 2 has an invalid length. [ 71.073727][ T7759] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1054'. [ 71.099591][ T4396] 8021q: adding VLAN 0 to HW filter on device eth5 [ 72.073165][ T4722] Bluetooth: hci2: command tx timeout [ 72.171170][ T7791] loop4: detected capacity change from 0 to 2048 [ 72.179118][ T7793] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1066'. [ 72.183684][ T7793] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1066'. [ 72.183986][ T15] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.184013][ T15] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.184029][ T15] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.184043][ T15] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.200116][ T7791] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.231876][ T4707] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.239140][ T7798] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.240926][ T7798] bridge_slave_1: left allmulticast mode [ 72.242008][ T7798] bridge_slave_1: left promiscuous mode [ 72.243472][ T7798] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.255997][ T7798] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 72.286716][ T7802] loop4: detected capacity change from 0 to 2048 [ 72.308967][ T7802] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.315594][ T7806] loop5: detected capacity change from 0 to 1024 [ 72.315979][ T7806] EXT4-fs: Ignoring removed nomblk_io_submit option [ 72.316300][ T7806] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 72.319420][ T7806] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 2: comm syz.5.1070: lblock 2 mapped to illegal pblock 2 (length 1) [ 72.319437][ T7806] fserror_report: 6 callbacks suppressed [ 72.319443][ T7806] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 72.319518][ T7806] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 72.319531][ T7806] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 48: comm syz.5.1070: lblock 0 mapped to illegal pblock 48 (length 1) [ 72.319543][ T7806] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 72.319608][ T7806] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 72.319615][ T7806] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.1070: Failed to acquire dquot type 0 [ 72.319625][ T7806] loop5: lost filesystem error report for type 5 error -117 [ 72.319701][ T7806] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 72.319710][ T7806] loop5: lost filesystem error report for type 5 error -117 [ 72.319802][ T7806] EXT4-fs error (device loop5): ext4_evict_inode:267: inode #11: comm syz.5.1070: mark_inode_dirty error [ 72.319813][ T7806] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 72.319878][ T7806] EXT4-fs warning (device loop5): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 72.319907][ T7806] EXT4-fs (loop5): 1 orphan inode deleted [ 72.320376][ T7806] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.340485][ T15] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 72.340697][ T15] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 72.340711][ T15] EXT4-fs error (device loop5): ext4_release_dquot:7070: comm kworker/u8:1: Failed to release dquot type 0 [ 72.349783][ T7806] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 1: comm syz.5.1070: lblock 1 mapped to illegal pblock 1 (length 1) [ 72.349977][ T7806] Quota error (device loop5): find_tree_dqentry: Can't read quota tree block 1 [ 72.349992][ T7806] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 980643439 [ 72.350003][ T7806] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.1070: Failed to acquire dquot type 0 [ 72.364400][ T5034] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.365056][ T1249] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 72.365077][ T1249] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 72.365170][ T1249] EXT4-fs error (device loop5): ext4_release_dquot:7070: comm kworker/u8:5: Failed to release dquot type 0 [ 72.365181][ T1249] loop5: lost filesystem error report for type 5 error -117 [ 72.366047][ T5034] EXT4-fs error (device loop5): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 72.366060][ T5034] loop5: lost filesystem error report for type 5 error -117 [ 72.366153][ T5034] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 72.366161][ T5034] loop5: lost filesystem error report for type 5 error -117 [ 72.366231][ T5034] EXT4-fs error (device loop5): ext4_quota_off:7318: inode #3: comm syz-executor: mark_inode_dirty error [ 72.366241][ T5034] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 72.407577][ T7809] loop5: detected capacity change from 0 to 256 [ 72.425314][ T7801] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 72.428427][ T7801] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 72.430718][ T7801] EXT4-fs (loop4): This should not happen!! Data will be lost [ 72.430718][ T7801] [ 72.432558][ T7801] EXT4-fs (loop4): Total free blocks count 0 [ 72.433848][ T7801] EXT4-fs (loop4): Free/Dirty block details [ 72.435044][ T7801] EXT4-fs (loop4): free_blocks=4096 [ 72.436031][ T7801] EXT4-fs (loop4): dirty_blocks=864 [ 72.437023][ T7801] EXT4-fs (loop4): Block reservation details [ 72.438181][ T7801] EXT4-fs (loop4): i_reserved_data_blocks=54 [ 72.440045][ T7802] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 832 with error 28 [ 72.466747][ T4707] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 73.723874][ T7838] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 73.726467][ T7838] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 73.734562][ T7838] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 73.734601][ T7838] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3) [ 73.994870][ T7751] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 74.022965][ T1249] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.022989][ T1249] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.057160][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.057188][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.147108][ T7862] batman_adv: batadv0: Adding interface: dummy0 [ 74.147139][ T7862] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.147155][ T7862] batman_adv: batadv0: Interface activated: dummy0 [ 74.147499][ T7866] netlink: 'syz.6.997': attribute type 22 has an invalid length. [ 74.147509][ T7866] netlink: 4 bytes leftover after parsing attributes in process `syz.6.997'. [ 74.153227][ T4722] Bluetooth: hci2: command tx timeout [ 74.154403][ T40] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.154435][ T40] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.154452][ T40] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.154468][ T40] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.157763][ T7866] netlink: 'syz.6.997': attribute type 22 has an invalid length. [ 74.157777][ T7866] netlink: 4 bytes leftover after parsing attributes in process `syz.6.997'. [ 74.170971][ T7862] batadv0: mtu less than device minimum [ 74.172885][ T7862] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 74.174675][ T7862] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 74.176342][ T7862] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 74.178002][ T7862] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 74.179665][ T7862] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 74.181341][ T7862] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 74.183003][ T7862] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 74.184703][ T7862] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 74.186371][ T7862] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 74.340816][ T4396] 8021q: adding VLAN 0 to HW filter on device eth6 [ 74.528374][ T7904] loop6: detected capacity change from 0 to 2048 [ 74.561088][ T7904] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.634541][ T7903] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 74.634644][ T7903] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 74.634655][ T7903] EXT4-fs (loop6): This should not happen!! Data will be lost [ 74.634655][ T7903] [ 74.634662][ T7903] EXT4-fs (loop6): Total free blocks count 0 [ 74.634668][ T7903] EXT4-fs (loop6): Free/Dirty block details [ 74.634676][ T7903] EXT4-fs (loop6): free_blocks=4096 [ 74.634683][ T7903] EXT4-fs (loop6): dirty_blocks=512 [ 74.634689][ T7903] EXT4-fs (loop6): Block reservation details [ 74.634694][ T7903] EXT4-fs (loop6): i_reserved_data_blocks=32 [ 74.635168][ T7904] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 480 with error 28 [ 74.665883][ T7556] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 74.732558][ T4396] 8021q: adding VLAN 0 to HW filter on device eth7 [ 74.820145][ T7933] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1107'. [ 74.822087][ T7933] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1107'. [ 74.828375][ T7934] loop4: detected capacity change from 0 to 512 [ 74.846448][ T7934] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 74.847202][ T7934] EXT4-fs (loop4): 1 truncate cleaned up [ 74.847655][ T7934] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.967634][ T7950] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1114'. [ 74.970760][ T7950] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1114'. [ 75.630985][ T7989] loop2: detected capacity change from 0 to 512 [ 75.654575][ T4707] EXT4-fs error (device loop4): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: directory entry overrun - offset=108, inode=4294901777, rec_len=1024, size=1024 fake=0 [ 75.655652][ T7989] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 75.664620][ T4707] EXT4-fs (loop4): Remounting filesystem read-only [ 75.944058][ T7968] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 76.231811][ T8020] loop5: detected capacity change from 0 to 512 [ 76.233241][ T4722] Bluetooth: hci2: command tx timeout [ 76.235150][ T8020] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 76.248983][ T8020] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.272088][ T8020] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1141: bg 0: block 217: padding at end of block bitmap is not set [ 76.272421][ T8020] EXT4-fs (loop5): Remounting filesystem read-only [ 76.280274][ T5034] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.459242][ T8035] loop6: detected capacity change from 0 to 512 [ 76.469206][ T8035] EXT4-fs (loop6): Test dummy encryption mode enabled [ 76.476272][ T8035] EXT4-fs error (device loop6): ext4_orphan_get:1397: inode #15: comm syz.6.1147: inode has both inline data and extents flags [ 76.476322][ T8035] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 76.476992][ T8035] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.1147: couldn't read orphan inode 15 (err -117) [ 76.477010][ T8035] loop6: lost filesystem error report for type 5 error -117 [ 76.477547][ T8035] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.496528][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 76.537770][ T7556] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.610587][ T8046] input: syz0 as /devices/virtual/input/input13 [ 76.775616][ T8057] input: syz1 as /devices/virtual/input/input14 [ 76.889986][ T8066] __nla_validate_parse: 2 callbacks suppressed [ 76.891246][ T8066] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1159'. [ 76.891273][ T8066] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1159'. [ 76.958556][ T8074] loop5: detected capacity change from 0 to 128 [ 77.147279][ T8088] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1168'. [ 77.386888][ T4718] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.391134][ T4718] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.392736][ T4718] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.394488][ T4718] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.396092][ T4718] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.574008][ T8102] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.574093][ T8102] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.574159][ T8102] bridge_slave_0: entered allmulticast mode [ 77.574675][ T8102] bridge_slave_0: entered promiscuous mode [ 77.575647][ T8102] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.575692][ T8102] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.575746][ T8102] bridge_slave_1: entered allmulticast mode [ 77.576184][ T8102] bridge_slave_1: entered promiscuous mode [ 77.592054][ T8102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.593564][ T8102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.600741][ T8102] team0: Port device team_slave_0 added [ 77.601958][ T8102] team0: Port device team_slave_1 added [ 77.608459][ T8102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.608480][ T8102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.608492][ T8102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.609027][ T8102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.609034][ T8102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.609050][ T8102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.620461][ T8102] hsr_slave_0: entered promiscuous mode [ 77.620872][ T8102] hsr_slave_1: entered promiscuous mode [ 77.691723][ T1249] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 77.691767][ T1249] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.698681][ T8102] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 77.701416][ T8102] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 77.705915][ T8102] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 77.708286][ T8102] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 77.710153][ T8102] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 77.712523][ T8102] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 77.714623][ T8102] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 77.718530][ T8102] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 77.726626][ T8102] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.726666][ T8102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.726759][ T8102] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.726793][ T8102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.751770][ T8102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.758538][ T1249] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 77.758575][ T1249] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.769418][ T6477] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.771339][ T6477] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.778154][ T8102] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.781889][ T6471] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.781931][ T6471] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.786508][ T6477] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.786533][ T6477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.798967][ T8102] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 77.801132][ T8102] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.829180][ T1249] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 77.831451][ T1249] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.890198][ T1249] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 77.890236][ T1249] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.952905][ T8102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.154719][ T1249] bridge_slave_0: left allmulticast mode [ 78.154754][ T1249] bridge_slave_0: left promiscuous mode [ 78.154865][ T1249] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.401129][ T1249] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.435447][ T1249] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 78.447255][ T1249] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 78.464289][ T1249] bond0 (unregistering): Released all slaves [ 78.490215][ T8165] bridge0: entered promiscuous mode [ 78.491882][ T8165] bridge0: entered allmulticast mode [ 78.521278][ T1249] tipc: Left network mode [ 78.560303][ T8176] netlink: 'syz.6.1188': attribute type 8 has an invalid length. [ 78.560335][ T8176] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1188'. [ 78.610090][ T8176] veth1_to_team: entered promiscuous mode [ 78.610618][ T8176] gretap0: entered promiscuous mode [ 78.613616][ T8176] veth1_to_team: left promiscuous mode [ 78.614733][ T8176] gretap0: left promiscuous mode [ 78.624401][ C0] Unknown status report in ack skb [ 78.633876][ T8102] veth0_vlan: entered promiscuous mode [ 78.641400][ T8102] veth1_vlan: entered promiscuous mode [ 78.669356][ T8102] veth0_macvtap: entered promiscuous mode [ 78.679513][ T8102] veth1_macvtap: entered promiscuous mode [ 78.695133][ T8102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.704208][ T8102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.774739][ T4396] 8021q: adding VLAN 0 to HW filter on device eth10 [ 78.775019][ T6471] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.775050][ T6471] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.775067][ T6471] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.775083][ T6471] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.837210][ T1249] hsr_slave_0: left promiscuous mode [ 78.839033][ T1249] hsr_slave_1: left promiscuous mode [ 78.839326][ T1249] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.839336][ T1249] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.840403][ T1249] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.840414][ T1249] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.844826][ T1249] veth1_macvtap: left promiscuous mode [ 78.844847][ T1249] veth0_macvtap: left promiscuous mode [ 78.844881][ T1249] veth1_vlan: left promiscuous mode [ 78.844905][ T1249] veth0_vlan: left promiscuous mode [ 79.046061][ T1249] team0 (unregistering): Port device team_slave_1 removed [ 79.051720][ T1249] team0 (unregistering): Port device team_slave_0 removed [ 79.300438][ T8201] syzkaller1: entered promiscuous mode [ 79.300464][ T8201] syzkaller1: entered allmulticast mode [ 79.320615][ T4396] 8021q: adding VLAN 0 to HW filter on device eth9 [ 79.335642][ T6477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.335674][ T6477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.363949][ T6477] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.363978][ T6477] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.434789][ T4722] Bluetooth: hci0: command tx timeout [ 79.532863][ T8235] loop2: detected capacity change from 0 to 128 [ 79.533732][ T8235] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 79.658963][ T8246] loop2: detected capacity change from 0 to 512 [ 79.660191][ T8246] EXT4-fs: Ignoring removed orlov option [ 79.662667][ T8246] EXT4-fs: Ignoring removed i_version option [ 79.665220][ T8246] EXT4-fs: Ignoring removed nomblk_io_submit option [ 79.680786][ T8246] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 79.680822][ T8246] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 79.680964][ T8246] EXT4-fs (loop2): orphan cleanup on readonly fs [ 79.681003][ T8246] __quota_error: 1 callbacks suppressed [ 79.681011][ T8246] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 79.681045][ T8246] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 79.681057][ T8246] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 79.681811][ T8246] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1201: bg 0: block 40: padding at end of block bitmap is not set [ 79.681826][ T8246] loop2: lost filesystem error report for type 5 error -117 [ 79.683052][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 79.683065][ C1] EXT4-fs (loop2): initial error at time 79: ext4_validate_block_bitmap:441 [ 79.683080][ C1] EXT4-fs (loop2): last error at time 79: ext4_validate_block_bitmap:441 [ 79.698699][ T8246] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 79.698720][ T8246] loop2: lost filesystem error report for type 5 error -117 [ 79.699279][ T8246] EXT4-fs (loop2): 1 truncate cleaned up [ 79.699734][ T8246] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 79.756811][ T8246] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.839160][ T4396] 8021q: adding VLAN 0 to HW filter on device eth8 [ 79.920962][ T8276] Bluetooth: MGMT ver 1.23 [ 80.052576][ T4396] 8021q: adding VLAN 0 to HW filter on device eth11 [ 81.000005][ T8317] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1218'. [ 81.351206][ T8295] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 81.515146][ T4722] Bluetooth: hci0: command tx timeout [ 81.982574][ T8344] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 81.985540][ T8344] overlayfs: failed to set xattr on upper [ 81.985581][ T8344] overlayfs: ...falling back to redirect_dir=nofollow. [ 81.986041][ T8344] overlayfs: ...falling back to uuid=null. [ 81.986184][ T8344] overlayfs: maximum fs stacking depth exceeded [ 82.006365][ T8344] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 82.370770][ T8348] vlan0: entered promiscuous mode [ 82.374556][ T8348] team0: Port device vlan0 added [ 82.575966][ T8358] loop7: detected capacity change from 0 to 512 [ 82.636558][ T8358] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.733274][ T8102] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 82.838529][ T8102] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.973742][ T8369] loop6: detected capacity change from 0 to 128 [ 82.980914][ T8369] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 83.594147][ T4722] Bluetooth: hci0: command tx timeout [ 84.066570][ T8428] Injecting memory failure for pfn 0x11f601 at process virtual address 0x20001000 [ 84.071990][ T8428] Memory failure: 0x11f601: Sending SIGBUS to syz.2.1261:8428 due to hardware memory corruption [ 84.072437][ T8428] Memory failure: 0x11f601: recovery action for unsplit thp: Failed [ 84.169612][ T8433] loop2: detected capacity change from 0 to 4096 [ 84.171355][ T8433] EXT4-fs: inline encryption not supported [ 84.176026][ T8433] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 84.176066][ T8433] EXT4-fs (loop2): Test dummy encryption mode enabled [ 84.182286][ T8433] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 84.182549][ T8433] System zones: 0-5 [ 84.184418][ T8433] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.205146][ T8433] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 84.272962][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.326672][ T8437] loop2: detected capacity change from 0 to 1024 [ 84.344243][ T8437] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.363144][ T8437] EXT4-fs (loop2): shut down requested (1) [ 84.407095][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.564362][ T8440] loop2: detected capacity change from 0 to 32768 [ 84.617312][ T8440] loop2: p1 p2 p3 < p5 > [ 84.617414][ T8440] loop2: p1 size 242222080 extends beyond EOD, truncated [ 84.618308][ T8440] loop2: p2 start 16777215 is beyond EOD, truncated [ 84.747779][ T8448] loop2: detected capacity change from 0 to 1024 [ 84.770238][ T4698] udevd[4698]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 84.774009][ T8448] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.778699][ T4700] udevd[4700]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 84.780404][ T5051] udevd[5051]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 84.812601][ T8454] loop1: detected capacity change from 0 to 512 [ 84.836191][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.847444][ T8454] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.904984][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.943881][ T8458] netlink: 'syz.2.1270': attribute type 16 has an invalid length. [ 84.943913][ T8458] netlink: 'syz.2.1270': attribute type 17 has an invalid length. [ 84.951109][ T8458] bridge0: left promiscuous mode [ 84.951787][ T8458] bridge0: left allmulticast mode [ 84.968786][ T8458] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.968849][ T8458] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.969780][ T8458] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.969801][ T8458] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.994383][ C1] net_ratelimit: 10 callbacks suppressed [ 84.994419][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 85.363421][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 85.363549][ C1] IPv6: bridge0: IPv6 duplicate address fe80::a8aa:aaff:feaa:aa1b used by aa:aa:aa:aa:aa:1b detected! [ 85.573167][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 85.673077][ T4722] Bluetooth: hci0: command tx timeout [ 85.976678][ T8493] loop2: detected capacity change from 0 to 4096 [ 85.978516][ T8493] EXT4-fs: Ignoring removed orlov option [ 85.981614][ T8493] EXT4-fs (loop2): Test dummy encryption mode enabled [ 86.000104][ T8493] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.057761][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.243179][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 86.773430][ T8417] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 86.840625][ T8526] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1283'. [ 86.927176][ T8538] syzkaller0: entered promiscuous mode [ 86.927209][ T8538] syzkaller0: entered allmulticast mode [ 86.991947][ T8542] loop6: detected capacity change from 0 to 128 [ 87.008470][ T8542] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 87.068171][ T8549] loop2: detected capacity change from 0 to 128 [ 87.080620][ T8549] EXT4-fs (loop2): Test dummy encryption mode enabled [ 87.089919][ T8549] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 87.107669][ T7556] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 87.215774][ T4715] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 87.324805][ T8577] netlink: 'syz.2.1302': attribute type 8 has an invalid length. [ 87.324841][ T8577] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1302'. [ 87.376250][ T8577] veth1_to_team: entered promiscuous mode [ 87.380570][ T8577] gretap0: entered promiscuous mode [ 87.380993][ T8577] debugfs: 'hsr0' already exists in 'hsr' [ 87.381004][ T8577] Cannot create hsr debugfs directory [ 87.381016][ T8577] hsr0: entered promiscuous mode [ 87.541524][ T8597] capability: warning: `syz.2.1308' uses 32-bit capabilities (legacy support in use) [ 87.557138][ T40] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 87.559289][ T40] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.678240][ T8612] netlink: 'syz.1.1314': attribute type 10 has an invalid length. [ 87.679351][ T40] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 87.679373][ T40] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.694981][ T8612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.695490][ T8612] team0: Port device netdevsim1 added [ 87.726052][ T4718] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.727124][ T4718] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.727459][ T4718] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.728124][ T4718] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.729315][ T4718] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.779319][ T40] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 87.779363][ T40] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.793908][ T8622] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 87.860875][ T40] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 87.860918][ T40] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.000404][ T8638] loop7: detected capacity change from 0 to 1024 [ 88.018105][ T8638] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.095762][ T8102] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.304879][ T40] bridge_slave_1: left allmulticast mode [ 88.304914][ T40] bridge_slave_1: left promiscuous mode [ 88.304983][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.307765][ T40] bridge_slave_0: left allmulticast mode [ 88.307776][ T40] bridge_slave_0: left promiscuous mode [ 88.307840][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.452204][ T8653] loop2: detected capacity change from 0 to 4096 [ 88.483501][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 88.504256][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 88.515324][ T40] bond0 (unregistering): Released all slaves [ 88.536430][ T8653] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1325'. [ 88.716851][ T8669] syzkaller1: entered promiscuous mode [ 88.717374][ T8673] loop2: detected capacity change from 0 to 2048 [ 88.717696][ T8673] EXT4-fs: Ignoring removed i_version option [ 88.718140][ T8669] syzkaller1: entered allmulticast mode [ 88.734545][ T4396] 8021q: adding VLAN 0 to HW filter on device eth12 [ 88.736652][ T8678] Bluetooth: MGMT ver 1.23 [ 88.736695][ T8678] Bluetooth: hci1: expected 4473 bytes, got 2 bytes [ 88.736814][ T8673] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.757852][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.860835][ T8614] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.860976][ T8614] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.861058][ T8614] bridge_slave_0: entered allmulticast mode [ 88.861526][ T8614] bridge_slave_0: entered promiscuous mode [ 88.862981][ T8686] ªªªªªª: renamed from vlan0 (while UP) [ 88.867837][ T8614] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.867891][ T8614] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.867960][ T8614] bridge_slave_1: entered allmulticast mode [ 88.869327][ T8614] bridge_slave_1: entered promiscuous mode [ 88.888708][ T8614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.898775][ T8614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.972568][ T40] hsr_slave_0: left promiscuous mode [ 88.974515][ T40] hsr_slave_1: left promiscuous mode [ 88.974800][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.974886][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.975635][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.975644][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.992175][ T40] veth1_macvtap: left promiscuous mode [ 88.992216][ T40] veth0_macvtap: left promiscuous mode [ 88.992252][ T40] veth1_vlan: left promiscuous mode [ 88.992276][ T40] veth0_vlan: left promiscuous mode [ 89.198712][ T40] team0 (unregistering): Port device team_slave_1 removed [ 89.213216][ T40] team0 (unregistering): Port device team_slave_0 removed [ 89.282208][ T8614] team0: Port device team_slave_0 added [ 89.291170][ T4396] 8021q: adding VLAN 0 to HW filter on device eth13 [ 89.302672][ T8614] team0: Port device team_slave_1 added [ 89.317841][ T8614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.317872][ T8614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.317891][ T8614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.319245][ T8614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.319256][ T8614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.319270][ T8614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.351504][ T8614] hsr_slave_0: entered promiscuous mode [ 89.351817][ T8614] hsr_slave_1: entered promiscuous mode [ 89.352018][ T8614] debugfs: 'hsr0' already exists in 'hsr' [ 89.352027][ T8614] Cannot create hsr debugfs directory [ 89.526432][ T8614] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 89.532541][ T8614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.533184][ T8614] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 89.540069][ T8614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.544909][ T8614] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 89.552219][ T8614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.554384][ T8614] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 89.560931][ T8614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.673817][ T8614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.690010][ T8614] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.707220][ T6477] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.707280][ T6477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.717935][ T6477] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.717992][ T6477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.754519][ T4722] Bluetooth: hci2: command tx timeout [ 89.815866][ T4396] 8021q: adding VLAN 0 to HW filter on device eth15 [ 89.949324][ T8749] loop2: detected capacity change from 0 to 128 [ 89.962881][ T8749] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 89.971343][ T8749] syz.2.1338 (pid 8749) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 89.981548][ T8614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.024134][ T8749] fscrypt: Adiantum using implementation "adiantum(xchacha12-lib,aes-lib)" [ 90.052741][ T4715] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 90.053106][ T4808] IPVS: starting estimator thread 0... [ 90.109370][ T8614] veth0_vlan: entered promiscuous mode [ 90.111166][ T8614] veth1_vlan: entered promiscuous mode [ 90.136525][ T8614] veth0_macvtap: entered promiscuous mode [ 90.139201][ T8614] veth1_macvtap: entered promiscuous mode [ 90.143173][ T8766] IPVS: using max 59 ests per chain, 141600 per kthread [ 90.147967][ T8614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.155554][ T8614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.163477][ T6477] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.163517][ T6477] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.163616][ T6477] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.163678][ T6477] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.994062][ T7634] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.011261][ T4718] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 91.015789][ T4718] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 91.018163][ T4718] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 91.019815][ T4718] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 91.021366][ T4718] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 91.210451][ T8779] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.213225][ T8779] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.214690][ T8779] bridge_slave_0: entered allmulticast mode [ 91.216450][ T8779] bridge_slave_0: entered promiscuous mode [ 91.220756][ T8779] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.220809][ T8779] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.220891][ T8779] bridge_slave_1: entered allmulticast mode [ 91.221325][ T8779] bridge_slave_1: entered promiscuous mode [ 91.233612][ T8779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.236441][ T8779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.244827][ T8779] team0: Port device team_slave_0 added [ 91.246857][ T8779] team0: Port device team_slave_1 added [ 91.254049][ T8779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.255372][ T8779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.258726][ T8779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.259407][ T8779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.259414][ T8779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.259429][ T8779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.270172][ T8779] hsr_slave_0: entered promiscuous mode [ 91.270486][ T8779] hsr_slave_1: entered promiscuous mode [ 91.270836][ T8779] debugfs: 'hsr0' already exists in 'hsr' [ 91.270851][ T8779] Cannot create hsr debugfs directory [ 91.833096][ T4722] Bluetooth: hci2: command tx timeout [ 92.659027][ T8727] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 92.678740][ T4025] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.678764][ T4025] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.679629][ T8779] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 92.698608][ T8779] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.700537][ T8779] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 92.702857][ T8779] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.708309][ T8779] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 92.710447][ T8779] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.718982][ T8779] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 92.721276][ T8779] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.731559][ T6477] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.731585][ T6477] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.787220][ T8779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.793983][ T8779] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.799427][ T1249] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.799473][ T1249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.799987][ T1249] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.800005][ T1249] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.819033][ T8779] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 92.823837][ T8779] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.923609][ T4396] 8021q: adding VLAN 0 to HW filter on device eth14 [ 92.952958][ T8779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.033128][ T4722] Bluetooth: hci5: command tx timeout [ 93.072108][ T8779] veth0_vlan: entered promiscuous mode [ 93.081739][ T8779] veth1_vlan: entered promiscuous mode [ 93.096693][ T8779] veth0_macvtap: entered promiscuous mode [ 93.097900][ T8779] veth1_macvtap: entered promiscuous mode [ 93.107612][ T8779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.109727][ T8779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.120660][ T6471] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.121297][ T6471] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.121318][ T6471] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.121333][ T6471] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.353171][ T4718] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 93.353215][ T4722] Bluetooth: hci1: command 0x1003 tx timeout [ 93.574158][ T8931] Injecting memory failure for pfn 0x164bc8 at process virtual address 0x20000000 [ 93.594356][ T8931] Memory failure: 0x164bc8: Sending SIGBUS to syz.2.1365:8931 due to hardware memory corruption [ 93.596611][ T8931] Memory failure: 0x164bc8: recovery action for dirty LRU page: Recovered [ 93.626633][ T8823] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 93.660393][ T1249] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.660421][ T1249] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.693349][ T1249] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.693379][ T1249] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.727348][ T8941] loop2: detected capacity change from 0 to 512 [ 93.732191][ T8941] EXT4-fs: inline encryption not supported [ 93.732563][ T8941] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 93.732573][ T8941] EXT4-fs (loop2): Invalid default hash set in the superblock [ 93.816348][ T8945] batman_adv: batadv0: Adding interface: dummy0 [ 93.816376][ T8945] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.816396][ T8945] batman_adv: batadv0: Interface activated: dummy0 [ 93.821535][ T8945] batadv0: mtu less than device minimum [ 93.823481][ T8945] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 93.825257][ T8945] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 93.826925][ T8945] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 93.828596][ T8945] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 93.830261][ T8945] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 93.831920][ T8945] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 93.833596][ T8945] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 93.835255][ T8945] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 93.836907][ T8945] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 93.913330][ T4718] Bluetooth: hci2: command tx timeout [ 94.262118][ T8969] loop9: detected capacity change from 0 to 256 [ 94.285943][ T8969] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1379'. [ 94.595675][ T8990] 9pnet: p9_errstr2errno: server reported unknown error 0x00000 [ 94.644176][ T8995] netlink: 68 bytes leftover after parsing attributes in process `syz.9.1391'. [ 94.646185][ T8995] netlink: 68 bytes leftover after parsing attributes in process `syz.9.1391'. [ 94.699673][ T9001] loop9: detected capacity change from 0 to 512 [ 94.741166][ T9003] netlink: 'syz.1.1392': attribute type 1 has an invalid length. [ 94.951586][ T9019] netlink: 'syz.1.1398': attribute type 4 has an invalid length. [ 94.951619][ T9019] netlink: 'syz.1.1398': attribute type 1 has an invalid length. [ 94.951641][ T9019] netlink: 15314 bytes leftover after parsing attributes in process `syz.1.1398'. [ 94.987374][ T9025] netlink: 'syz.8.1401': attribute type 1 has an invalid length. [ 95.113227][ T4718] Bluetooth: hci5: command tx timeout [ 95.137580][ T30] audit: type=1400 audit(95.130:9): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=wx pid=9046 comm="syz.8.1409" name="10" dev="tmpfs" ino=63 [ 95.492942][ T9093] loop2: detected capacity change from 0 to 1024 [ 95.517514][ T9093] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.577254][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.794847][ T9112] loop1: detected capacity change from 0 to 8192 [ 95.848918][ T9117] loop8: detected capacity change from 0 to 512 [ 95.855735][ T9117] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 95.866559][ T9117] EXT4-fs (loop8): 1 truncate cleaned up [ 95.867082][ T9117] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.898834][ T8614] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.993565][ T4718] Bluetooth: hci2: command tx timeout [ 96.012969][ T9129] syzkaller1: entered promiscuous mode [ 96.014665][ T9129] syzkaller1: entered allmulticast mode [ 96.035378][ T9059] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 96.067511][ T9132] bridge1: entered allmulticast mode [ 96.071841][ T9132] team0: Port device bridge1 added [ 96.084544][ T9132] bridge0: port 3(team0) entered blocking state [ 96.084717][ T9132] bridge0: port 3(team0) entered disabled state [ 96.084889][ T9132] team0: entered allmulticast mode [ 96.084898][ T9132] team_slave_0: entered allmulticast mode [ 96.084914][ T9132] team_slave_1: entered allmulticast mode [ 96.086858][ T9132] team0: entered promiscuous mode [ 96.086869][ T9132] team_slave_0: entered promiscuous mode [ 96.086928][ T9132] team_slave_1: entered promiscuous mode [ 96.086978][ T9132] bridge1: entered promiscuous mode [ 96.087421][ T9132] bridge0: port 3(team0) entered blocking state [ 96.087466][ T9132] bridge0: port 3(team0) entered forwarding state [ 97.203085][ T4718] Bluetooth: hci5: command tx timeout [ 97.669182][ T9198] loop7: detected capacity change from 0 to 1024 [ 97.969989][ T9200] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1470'. [ 97.970018][ T9200] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1470'. [ 97.970242][ T9200] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1470'. [ 97.970250][ T9200] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1470'. [ 98.043367][ T9207] loop7: detected capacity change from 0 to 512 [ 98.049505][ T9207] EXT4-fs error (device loop7): ext4_iget_extra_inode:5128: inode #15: comm syz.7.1473: corrupted in-inode xattr: invalid ea_ino [ 98.052673][ T9207] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 98.053739][ T9207] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.1473: couldn't read orphan inode 15 (err -117) [ 98.053765][ T9207] loop7: lost filesystem error report for type 5 error -117 [ 98.058583][ T9207] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.128265][ T8102] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.208815][ T9227] lo: entered allmulticast mode [ 98.210876][ T9226] lo: left allmulticast mode [ 98.285590][ T9236] netlink: 'syz.2.1483': attribute type 7 has an invalid length. [ 98.285625][ T9236] netlink: 'syz.2.1483': attribute type 5 has an invalid length. [ 98.286049][ T9236] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1483'. [ 98.542450][ T9258] loop1: detected capacity change from 0 to 512 [ 98.558717][ T9258] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.590006][ T9258] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 98.593778][ T9258] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 98.596739][ T9258] EXT4-fs (loop1): This should not happen!! Data will be lost [ 98.596739][ T9258] [ 98.598908][ T9258] EXT4-fs (loop1): Total free blocks count 0 [ 98.600149][ T9258] EXT4-fs (loop1): Free/Dirty block details [ 98.601435][ T9258] EXT4-fs (loop1): free_blocks=65280 [ 98.602434][ T9258] EXT4-fs (loop1): dirty_blocks=511 [ 98.603472][ T9258] EXT4-fs (loop1): Block reservation details [ 98.604708][ T9258] EXT4-fs (loop1): i_reserved_data_blocks=511 [ 98.688378][ T4711] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 98.689588][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.273082][ T4722] Bluetooth: hci5: command tx timeout [ 99.591582][ T9298] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 99.610094][ T9298] net_ratelimit: 10 callbacks suppressed [ 99.610133][ T9298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.675679][ T9307] Invalid ELF header magic: != ELF [ 99.700433][ T9309] loop7: detected capacity change from 0 to 1024 [ 99.702184][ T9309] EXT4-fs: Ignoring removed bh option [ 99.716192][ T9309] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.723663][ T9309] EXT4-fs (loop7): shut down requested (0) [ 99.813297][ T8102] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.923572][ T9326] loop8: detected capacity change from 0 to 1024 [ 99.929454][ T9326] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.036526][ T8614] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.341172][ T9351] netlink: 'syz.7.1531': attribute type 1 has an invalid length. [ 100.342404][ T9351] netlink: 'syz.7.1531': attribute type 4 has an invalid length. [ 100.342417][ T9351] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.1531'. [ 100.713518][ T4718] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 100.853649][ T9380] syzkaller1: entered promiscuous mode [ 100.854782][ T9380] syzkaller1: entered allmulticast mode [ 100.927056][ T9382] loop7: detected capacity change from 0 to 512 [ 100.937905][ T9382] EXT4-fs (loop7): 1 truncate cleaned up [ 100.938380][ T9382] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.191985][ T9400] sctp: [Deprecated]: syz.8.1552 (pid 9400) Use of struct sctp_assoc_value in delayed_ack socket option. [ 101.191985][ T9400] Use struct sctp_sack_info instead [ 101.294267][ T9402] block nbd8: shutting down sockets [ 101.433762][ T9411] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1557'. [ 101.440506][ T9411] 8021q: adding VLAN 0 to HW filter on device bond1 [ 101.469164][ T9402] block nbd8: NBD_DISCONNECT [ 101.469217][ T9402] block nbd8: Send disconnect failed -32 [ 101.475890][ T9411] 8021q: adding VLAN 0 to HW filter on device bond2 [ 101.476720][ T9411] bond1: (slave bond2): Enslaving as an active interface with an up link [ 101.518121][ T9411] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1557'. [ 101.531163][ T9411] bond1 (unregistering): (slave bond2): Releasing backup interface [ 101.545095][ T9411] bond1 (unregistering): Released all slaves [ 101.670209][ T9429] loop2: detected capacity change from 0 to 128 [ 101.678532][ T9429] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 101.682156][ T9432] loop9: detected capacity change from 0 to 512 [ 101.699415][ T9432] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.711209][ T9436] loop8: detected capacity change from 0 to 512 [ 101.715597][ T9436] EXT4-fs error (device loop8): ext4_orphan_get:1397: inode #15: comm syz.8.1566: inode has both inline data and extents flags [ 101.715628][ T9436] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 101.715742][ T9436] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.1566: couldn't read orphan inode 15 (err -117) [ 101.715760][ T9436] loop8: lost filesystem error report for type 5 error -117 [ 101.716763][ T9436] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.750207][ T9432] EXT4-fs (loop9): shut down requested (2) [ 101.758501][ T9276] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 101.783986][ T8614] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.787289][ T8779] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.794979][ T8102] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.902339][ T4715] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 101.991014][ T9463] loop8: detected capacity change from 0 to 128 [ 101.998358][ T9463] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 102.114285][ T9475] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 102.158629][ T9484] loop8: detected capacity change from 0 to 1024 [ 102.173733][ T9484] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.194883][ T8614] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.642441][ T9518] loop8: detected capacity change from 0 to 1024 [ 102.643819][ T9518] EXT4-fs: Ignoring removed bh option [ 102.655001][ T9518] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.714551][ T8614] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.760319][ T9528] loop1: detected capacity change from 0 to 256 [ 102.859426][ T9536] netlink: 84 bytes leftover after parsing attributes in process `syz.9.1606'. [ 103.196237][ T9547] loop9: detected capacity change from 0 to 512 [ 103.200085][ T9547] EXT4-fs error (device loop9): ext4_orphan_get:1397: inode #15: comm syz.9.1609: inode has both inline data and extents flags [ 103.200126][ T9547] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 103.200345][ T9547] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.1609: couldn't read orphan inode 15 (err -117) [ 103.200363][ T9547] loop9: lost filesystem error report for type 5 error -117 [ 103.203799][ T9547] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.237516][ T8779] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.383446][ T9556] loop9: detected capacity change from 0 to 128 [ 103.390889][ T9556] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1614'. [ 103.390928][ T9556] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1614'. [ 103.485196][ T9565] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 103.485306][ T9565] Error validating options; rc = [-22] [ 103.540211][ T9570] netlink: 76 bytes leftover after parsing attributes in process `syz.9.1617'. [ 103.770632][ T9592] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1622'. [ 103.823179][ T4801] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 103.841813][ T4801] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 103.854877][ T9609] EXT4-fs: Ignoring removed orlov option [ 103.863374][ T9609] EXT4-fs (loop9): Test dummy encryption mode enabled [ 103.886356][ T9609] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.955572][ T8779] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.965181][ T9623] fido_id[9623]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 104.037281][ T9633] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 104.037316][ T9633] overlayfs: failed to set xattr on upper [ 104.037321][ T9633] overlayfs: ...falling back to redirect_dir=nofollow. [ 104.037325][ T9633] overlayfs: ...falling back to uuid=null. [ 104.298495][ T9666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.298697][ T9666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.370398][ T9668] bridge0: port 3(team0) entered disabled state [ 104.384445][ T9668] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.392072][ T9668] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.420979][ T9678] netlink: 'syz.9.1641': attribute type 16 has an invalid length. [ 104.421012][ T9678] netlink: 'syz.9.1641': attribute type 17 has an invalid length. [ 104.477957][ T6459] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.556787][ T9678] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.556844][ T9678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.560197][ T9678] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.560243][ T9678] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.613648][ T39] bridge0: port 3(team0) entered blocking state [ 104.613697][ T39] bridge0: port 3(team0) entered forwarding state [ 104.664677][ T6459] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.724278][ T9688] netlink: 'syz.9.1647': attribute type 11 has an invalid length. [ 104.729497][ T4722] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 104.732634][ T4722] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 104.735343][ T4722] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 104.737933][ T4722] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 104.739528][ T4722] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 104.781008][ T6459] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.849897][ T6459] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.944248][ T9713] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1653'. [ 104.948166][ T9713] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1653'. [ 105.008782][ T9720] netlink: 'syz.1.1656': attribute type 1 has an invalid length. [ 105.043228][ T9720] bond2: entered promiscuous mode [ 105.043380][ T9720] 8021q: adding VLAN 0 to HW filter on device bond2 [ 105.054589][ T9720] 8021q: adding VLAN 0 to HW filter on device bond2 [ 105.054866][ T9720] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 105.054880][ T9720] bond2: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 105.059176][ T9720] bond2: (slave vti0): making interface the new active one [ 105.059205][ T9720] vti0: entered promiscuous mode [ 105.061017][ T9720] bond2: (slave vti0): Enslaving as an active interface with an up link [ 105.325997][ T6459] bridge_slave_1: left allmulticast mode [ 105.326035][ T6459] bridge_slave_1: left promiscuous mode [ 105.326146][ T6459] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.332011][ T6459] bridge_slave_0: left allmulticast mode [ 105.332036][ T6459] bridge_slave_0: left promiscuous mode [ 105.332118][ T6459] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.348798][ T9757] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 105.359216][ T9757] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 2: comm syz.1.1664: lblock 2 mapped to illegal pblock 2 (length 1) [ 105.363271][ T9757] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 105.367373][ T9757] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 105.367411][ T9757] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 48: comm syz.1.1664: lblock 0 mapped to illegal pblock 48 (length 1) [ 105.367442][ T9757] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 105.367662][ T9757] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 105.367672][ T9757] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.1664: Failed to acquire dquot type 0 [ 105.367686][ T9757] loop1: lost filesystem error report for type 5 error -117 [ 105.368222][ T9757] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 105.368240][ T9757] loop1: lost filesystem error report for type 5 error -117 [ 105.368367][ T9757] EXT4-fs error (device loop1): ext4_evict_inode:267: inode #11: comm syz.1.1664: mark_inode_dirty error [ 105.368379][ T9757] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 105.368457][ T9757] EXT4-fs warning (device loop1): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 105.368489][ T9757] EXT4-fs (loop1): 1 orphan inode deleted [ 105.368956][ T9757] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.384029][ T4025] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 105.384215][ T4025] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 105.384229][ T4025] EXT4-fs error (device loop1): ext4_release_dquot:7070: comm kworker/u8:6: Failed to release dquot type 0 [ 105.481148][ T6459] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.514788][ T6459] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.524679][ T6459] bond0 (unregistering): Released all slaves [ 105.531594][ T4396] 8021q: adding VLAN 0 to HW filter on device eth16 [ 105.541031][ T9691] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.547419][ T9691] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.547515][ T9691] bridge_slave_0: entered allmulticast mode [ 105.547979][ T9691] bridge_slave_0: entered promiscuous mode [ 105.548656][ T9691] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.548675][ T9691] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.548729][ T9691] bridge_slave_1: entered allmulticast mode [ 105.549158][ T9691] bridge_slave_1: entered promiscuous mode [ 105.579212][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.579595][ T4711] EXT4-fs error (device loop1): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 105.579608][ T4711] loop1: lost filesystem error report for type 5 error -117 [ 105.579716][ T4711] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 105.579725][ T4711] loop1: lost filesystem error report for type 5 error -117 [ 105.579793][ T4711] EXT4-fs error (device loop1): ext4_quota_off:7318: inode #3: comm syz-executor: mark_inode_dirty error [ 105.579804][ T4711] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 105.580763][ T9691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.581773][ T9691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.621762][ T9691] team0: Port device team_slave_0 added [ 105.706751][ T9775] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.708911][ T9777] Bluetooth: MGMT ver 1.23 [ 105.727468][ T9691] team0: Port device team_slave_1 added [ 105.761744][ T8614] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 105.771475][ T9769] netlink: 52 bytes leftover after parsing attributes in process `syz.9.1668'. [ 105.802743][ T9691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.802768][ T9691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.802783][ T9691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.820921][ T9795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1672'. [ 105.879798][ T9691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.879834][ T9691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.880069][ T9691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.247882][ T4396] 8021q: adding VLAN 0 to HW filter on device eth17 [ 106.283421][ T9691] hsr_slave_0: entered promiscuous mode [ 106.284544][ T9691] hsr_slave_1: entered promiscuous mode [ 106.284785][ T9691] debugfs: 'hsr0' already exists in 'hsr' [ 106.284796][ T9691] Cannot create hsr debugfs directory [ 106.364932][ T6459] hsr_slave_0: left promiscuous mode [ 106.388552][ T6459] hsr_slave_1: left promiscuous mode [ 106.388901][ T6459] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.388927][ T6459] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.401789][ T6459] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.405091][ T6459] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.417772][ T6459] veth1_macvtap: left promiscuous mode [ 106.417812][ T6459] veth0_macvtap: left promiscuous mode [ 106.417875][ T6459] veth1_vlan: left promiscuous mode [ 106.527400][ T6459] team0 (unregistering): Port device vlan0 removed [ 106.532626][ T9855] set_capacity_and_notify: 5 callbacks suppressed [ 106.532934][ T9855] loop8: detected capacity change from 0 to 512 [ 106.559397][ T9855] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.574091][ T9855] EXT4-fs error (device loop8): ext4_do_update_inode:5690: inode #2: comm syz.8.1693: corrupted inode contents [ 106.575865][ T9855] EXT4-fs error (device loop8): ext4_dirty_inode:6587: inode #2: comm syz.8.1693: mark_inode_dirty error [ 106.576810][ T9855] EXT4-fs error (device loop8): ext4_do_update_inode:5690: inode #2: comm syz.8.1693: corrupted inode contents [ 106.577182][ T9855] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #2: comm syz.8.1693: mark_inode_dirty error [ 106.582903][ T9855] EXT4-fs error (device loop8): ext4_do_update_inode:5690: inode #2: comm syz.8.1693: corrupted inode contents [ 106.583368][ T9855] EXT4-fs error (device loop8): ext4_setattr:5946: inode #2: comm syz.8.1693: mark_inode_dirty error [ 106.609903][ T8614] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.642744][ T6459] team0 (unregistering): Port device team_slave_1 removed [ 106.650689][ T6459] team0 (unregistering): Port device team_slave_0 removed [ 106.737071][ T4396] 8021q: adding VLAN 0 to HW filter on device eth18 [ 106.793982][ T4718] Bluetooth: hci0: command tx timeout [ 107.017902][ T4396] 8021q: adding VLAN 0 to HW filter on device eth19 [ 107.028211][ T9894] syzkaller1: entered promiscuous mode [ 107.028244][ T9894] syzkaller1: entered allmulticast mode [ 107.225780][ T9691] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 107.243397][ T9691] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 107.243709][ T9691] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 107.247160][ T9691] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 107.249345][ T9691] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 107.252544][ T9691] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 107.260389][ T9691] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 107.266141][ T9691] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 107.297883][ T9691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.299469][ T9919] netlink: 'syz.1.1703': attribute type 8 has an invalid length. [ 107.299505][ T9919] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1703'. [ 107.307047][ T9919] veth1_to_team: entered promiscuous mode [ 107.311907][ T9919] gretap0: entered promiscuous mode [ 107.313006][ T9919] veth1_to_team: left promiscuous mode [ 107.315836][ T9919] gretap0: left promiscuous mode [ 107.338372][ T9691] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.347815][ T6459] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.347862][ T6459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.352219][ T6468] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.352265][ T6468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.407835][ T9691] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 107.407871][ T9691] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 107.627384][ T9953] loop9: detected capacity change from 0 to 1024 [ 107.649319][ T9953] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 107.655196][ T9691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.671711][ T9953] EXT4-fs error (device loop9): ext4_map_blocks:833: inode #15: block 3: comm syz.9.1708: lblock 3 mapped to illegal pblock 3 (length 3) [ 107.676821][ T9953] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 107.676857][ T9953] EXT4-fs (loop9): This should not happen!! Data will be lost [ 107.676857][ T9953] [ 107.696470][ T9953] EXT4-fs (loop9): shut down requested (1) [ 107.696882][ T9691] veth0_vlan: entered promiscuous mode [ 107.704698][ T9691] veth1_vlan: entered promiscuous mode [ 107.721037][ T9691] veth0_macvtap: entered promiscuous mode [ 107.737494][ T9691] veth1_macvtap: entered promiscuous mode [ 107.749745][ T8779] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 107.765625][ T9691] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.783991][ T9691] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.816013][ T6475] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.816067][ T6475] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.816088][ T6475] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.816105][ T6475] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.009310][ T9984] loop8: detected capacity change from 0 to 2048 [ 108.017356][ T9984] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.031131][ T8614] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.667835][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.667865][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.717915][ T6468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.717946][ T6468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.723697][T10025] netlink: 'syz.2.1725': attribute type 1 has an invalid length. [ 108.760066][T10025] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.781852][T10025] bond1: option tlb_dynamic_lb: unable to set because the bond device is up [ 108.826755][T10035] netlink: 60 bytes leftover after parsing attributes in process `syz.9.1726'. [ 108.870221][T10047] loop2: detected capacity change from 0 to 1024 [ 108.873190][ T4718] Bluetooth: hci0: command tx timeout [ 108.879965][T10047] EXT4-fs: Ignoring removed bh option [ 108.892975][T10052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1645'. [ 108.893007][T10052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1645'. [ 108.916555][T10047] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.022299][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.130988][T10084] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1741'. [ 109.213383][T10093] loop2: detected capacity change from 0 to 4096 [ 109.234205][T10093] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.257830][T10093] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #15: comm syz.2.1745: corrupted inode contents [ 109.258694][T10093] EXT4-fs error (device loop2): ext4_dirty_inode:6587: inode #15: comm syz.2.1745: mark_inode_dirty error [ 109.259106][T10093] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #15: comm syz.2.1745: corrupted inode contents [ 109.259293][T10093] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #15: comm syz.2.1745: mark_inode_dirty error [ 109.259697][T10093] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #15: comm syz.2.1745: corrupted inode contents [ 109.260828][T10093] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #15: comm syz.2.1745: mark_inode_dirty error [ 109.261359][T10093] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #15: comm syz.2.1745: corrupted inode contents [ 109.270925][T10093] EXT4-fs error (device loop2): ext4_truncate:4690: inode #15: comm syz.2.1745: mark_inode_dirty error [ 109.271283][T10093] EXT4-fs error (device loop2) in ext4_setattr:6120: Corrupt filesystem [ 109.291916][T10093] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #15: comm syz.2.1745: corrupted inode contents [ 109.355242][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.995398][T10200] syzkaller1: entered promiscuous mode [ 109.995431][T10200] syzkaller1: entered allmulticast mode [ 110.241987][T10250] loop8: detected capacity change from 0 to 512 [ 110.251383][T10250] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.288333][T10258] veth1_macvtap: left promiscuous mode [ 110.349796][T10230] loop1: detected capacity change from 0 to 32768 [ 110.386987][ T8614] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.402193][T10230] loop1: p1 p3 < > [ 110.552838][T10286] loop2: detected capacity change from 0 to 512 [ 110.557985][T10286] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 110.574744][T10286] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 110.575102][T10286] EXT4-fs (loop2): orphan cleanup on readonly fs [ 110.576041][T10286] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 110.576074][T10286] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 110.577541][T10286] EXT4-fs (loop2): 1 orphan inode deleted [ 110.616929][T10286] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 110.666011][T10302] loop0: detected capacity change from 0 to 1024 [ 110.667873][T10302] EXT4-fs: Ignoring removed bh option [ 110.676519][T10302] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 110.677358][ T4698] udevd[4698]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 110.678224][ T4700] udevd[4700]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 110.686550][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.701333][T10302] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.732629][T10311] loop8: detected capacity change from 0 to 512 [ 110.751750][T10302] EXT4-fs error (device loop0): ext4_find_dest_de:2050: inode #12: block 7: comm syz.0.1777: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 110.764783][T10311] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.769974][T10302] EXT4-fs (loop0): Remounting filesystem read-only [ 110.841174][ T9691] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.846871][ T8614] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.882224][T10326] EXT4-fs (loop2): 1 truncate cleaned up [ 110.882697][T10326] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.901225][T10333] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1785'. [ 110.910341][T10333] macvtap2: entered promiscuous mode [ 110.911676][T10333] erspan0: entered promiscuous mode [ 110.911772][T10333] macvtap2: entered allmulticast mode [ 110.911787][T10333] erspan0: entered allmulticast mode [ 110.918043][T10326] EXT4-fs warning (device loop2): ext4_group_add:1735: No reserved GDT blocks, can't resize [ 110.920925][T10334] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 110.920975][T10334] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 110.920998][T10334] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.1782: Corrupt directory, running e2fsck is recommended [ 110.929143][T10334] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 110.931074][T10334] EXT4-fs error (device loop0): ext4_iget_extra_inode:5128: inode #15: comm syz.0.1782: corrupted in-inode xattr: e_name out of bounds [ 110.931103][T10334] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 110.934195][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 110.934213][ C0] EXT4-fs (loop0): initial error at time 110: ext4_iget_extra_inode:5128: inode 15 [ 110.934230][ C0] EXT4-fs (loop0): last error at time 110: ext4_iget_extra_inode:5128: inode 15 [ 110.935287][T10334] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.1782: couldn't read orphan inode 15 (err -117) [ 110.935309][T10334] loop0: lost filesystem error report for type 5 error -117 [ 110.935731][T10333] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1785'. [ 110.936741][T10334] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.948687][T10333] erspan0: left allmulticast mode [ 110.948718][T10333] erspan0: left promiscuous mode [ 110.953418][ T4718] Bluetooth: hci0: command tx timeout [ 110.972772][T10334] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 110.972815][T10334] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 110.972828][T10334] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.1782: Corrupt directory, running e2fsck is recommended [ 110.978156][T10334] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 110.978175][T10334] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 110.978185][T10334] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.1782: Corrupt directory, running e2fsck is recommended [ 110.983729][T10334] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 110.983747][T10334] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 110.983758][T10334] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.1782: Corrupt directory, running e2fsck is recommended [ 110.988671][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.989043][T10334] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 110.999254][T10333] macvtap2: left promiscuous mode [ 110.999294][T10333] macvtap2: left allmulticast mode [ 111.058433][ T9691] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.418051][ T4718] Bluetooth: Frame is too long (len 24, expected len 4) [ 111.458487][T10394] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.1797: inode has both inline data and extents flags [ 111.461825][T10394] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 111.462127][T10394] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1797: couldn't read orphan inode 15 (err -117) [ 111.463910][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 111.463922][ C0] EXT4-fs (loop2): initial error at time 111: ext4_orphan_get:1397: inode 15 [ 111.463941][ C0] EXT4-fs (loop2): last error at time 111: ext4_orphan_get:1397: inode 15 [ 111.483156][T10394] loop2: lost filesystem error report for type 5 error -117 [ 111.483966][T10394] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.529684][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.692934][T10405] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 111.693978][T10418] set_capacity_and_notify: 3 callbacks suppressed [ 111.696796][T10418] loop9: detected capacity change from 0 to 1024 [ 111.697535][T10418] EXT4-fs: Ignoring removed i_version option [ 111.697586][T10418] EXT4-fs: Ignoring removed oldalloc option [ 111.702109][T10418] EXT4-fs (loop9): Test dummy encryption mode enabled [ 111.709547][T10418] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.750987][T10424] loop1: detected capacity change from 0 to 128 [ 111.762581][T10424] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 111.826710][ T4711] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 111.871965][ T8779] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.959300][ T4396] veth1_macvtap: entered promiscuous mode [ 112.076040][T10466] loop9: detected capacity change from 0 to 512 [ 112.078182][T10466] EXT4-fs: Ignoring removed bh option [ 112.079876][T10466] EXT4-fs: Ignoring removed mblk_io_submit option [ 112.084071][T10466] EXT4-fs (loop9): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 112.086183][T10466] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 112.086300][T10466] EXT4-fs (loop9): orphan cleanup on readonly fs [ 112.088510][T10466] Quota error (device loop9): do_insert_tree: Free block already used in tree: block 4 [ 112.088546][T10466] Quota error (device loop9): qtree_write_dquot: Error -5 occurred while creating quota [ 112.088577][T10466] EXT4-fs error (device loop9): ext4_acquire_dquot:7034: comm syz.9.1812: Failed to acquire dquot type 1 [ 112.088591][T10466] loop9: lost filesystem error report for type 5 error -5 [ 112.090080][T10466] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm syz.9.1812: Invalid block bitmap block 0 in block_group 0 [ 112.090097][T10466] loop9: lost filesystem error report for type 5 error -117 [ 112.093079][ C1] EXT4-fs (loop9): error count since last fsck: 2 [ 112.093091][ C1] EXT4-fs (loop9): last error at time 112: ext4_read_block_bitmap_nowait:483 [ 112.094430][T10466] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm syz.9.1812: Invalid block bitmap block 0 in block_group 0 [ 112.094455][T10466] loop9: lost filesystem error report for type 5 error -117 [ 112.109074][T10466] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm syz.9.1812: Invalid block bitmap block 0 in block_group 0 [ 112.109103][T10466] loop9: lost filesystem error report for type 5 error -117 [ 112.120212][T10466] Quota error (device loop9): write_blk: dquota write failed [ 112.120266][T10466] Quota error (device loop9): qtree_write_dquot: Error -28 occurred while creating quota [ 112.120294][T10466] EXT4-fs error (device loop9): ext4_acquire_dquot:7034: comm syz.9.1812: Failed to acquire dquot type 1 [ 112.120310][T10466] loop9: lost filesystem error report for type 5 error -28 [ 112.128026][T10466] Quota error (device loop9): write_blk: dquota write failed [ 112.128093][T10466] Quota error (device loop9): qtree_write_dquot: Error -28 occurred while creating quota [ 112.128117][T10466] EXT4-fs error (device loop9): ext4_acquire_dquot:7034: comm syz.9.1812: Failed to acquire dquot type 1 [ 112.128132][T10466] loop9: lost filesystem error report for type 5 error -28 [ 112.136521][T10466] EXT4-fs (loop9): 1 orphan inode deleted [ 112.140400][T10466] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 112.279137][ T8779] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.342348][T10478] VFS: Mount too revealing [ 112.557212][T10503] loop9: detected capacity change from 0 to 128 [ 112.560654][T10503] FAT-fs (loop9): bogus logical sector size 0 [ 112.562102][T10503] FAT-fs (loop9): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 112.584639][T10503] FAT-fs (loop9): Can't find a valid FAT filesystem [ 112.714934][T10507] team0: left allmulticast mode [ 112.716070][T10507] team_slave_0: left allmulticast mode [ 112.717251][T10507] team_slave_1: left allmulticast mode [ 112.718529][T10507] bridge1: left allmulticast mode [ 112.721665][T10507] team0: left promiscuous mode [ 112.721698][T10507] team_slave_0: left promiscuous mode [ 112.721777][T10507] team_slave_1: left promiscuous mode [ 112.725462][T10507] bridge1: left promiscuous mode [ 112.726681][T10507] bridge0: port 3(team0) entered disabled state [ 112.730212][T10507] batman_adv: batadv0: Interface deactivated: dummy0 [ 112.731740][T10507] batman_adv: batadv0: Removing interface: dummy0 [ 112.736718][T10511] loop8: detected capacity change from 0 to 1024 [ 112.739881][T10507] bridge_slave_0: left allmulticast mode [ 112.741090][T10507] bridge_slave_0: left promiscuous mode [ 112.742412][T10507] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.745368][T10507] bridge_slave_1: left allmulticast mode [ 112.745399][T10507] bridge_slave_1: left promiscuous mode [ 112.746222][T10507] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.753181][T10511] EXT4-fs: Ignoring removed bh option [ 112.754948][T10511] EXT4-fs (loop8): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 112.760279][T10507] bond0: (slave bond_slave_0): Releasing backup interface [ 112.765526][T10511] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.787401][T10507] bond0: (slave bond_slave_1): Releasing backup interface [ 112.797973][T10511] EXT4-fs error (device loop8): ext4_find_dest_de:2050: inode #12: block 7: comm syz.8.1827: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 112.799651][T10511] EXT4-fs (loop8): Remounting filesystem read-only [ 112.799884][T10511] overlayfs: cleanup of 'work/#a0' failed (-30) [ 112.814153][T10507] team0: Port device team_slave_0 removed [ 112.828747][T10507] team0: Port device team_slave_1 removed [ 112.829085][T10507] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.829097][T10507] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.830966][T10507] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.830977][T10507] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.837800][T10507] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 112.850954][ T8614] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.037363][ T4718] Bluetooth: hci0: command tx timeout [ 113.154749][T10560] netlink: 'syz.9.1848': attribute type 10 has an invalid length. [ 113.158545][T10559] netlink: 'syz.1.1847': attribute type 4 has an invalid length. [ 113.165309][T10560] team0: Port device dummy0 added [ 113.167149][T10559] netlink: 'syz.1.1847': attribute type 4 has an invalid length. [ 113.168615][T10560] netlink: 'syz.9.1848': attribute type 10 has an invalid length. [ 113.180965][T10560] team0: Port device dummy0 removed [ 113.184646][T10560] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 114.136613][T10594] loop0: detected capacity change from 0 to 512 [ 114.139956][T10594] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 114.146781][T10594] EXT4-fs (loop0): 1 truncate cleaned up [ 114.148590][T10594] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.242896][ T9691] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.256940][T10605] 8021q: adding VLAN 0 to HW filter on device bond1 [ 114.309141][T10610] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1867'. [ 114.446179][T10622] netlink: 'syz.1.1873': attribute type 1 has an invalid length. [ 114.507985][T10630] loop1: detected capacity change from 0 to 1024 [ 114.508344][T10630] EXT4-fs: Ignoring removed bh option [ 114.509962][T10629] loop0: detected capacity change from 0 to 2048 [ 114.510620][T10630] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 114.549947][ T24] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 114.556429][T10629] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 114.564184][ T24] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 114.578131][T10630] EXT4-fs error (device loop1): ext4_find_dest_de:2050: inode #12: block 7: comm syz.1.1877: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 114.587988][T10630] EXT4-fs (loop1): Remounting filesystem read-only [ 114.926366][T10665] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 114.928058][T10665] overlayfs: failed to set xattr on upper [ 114.929897][T10665] overlayfs: ...falling back to redirect_dir=nofollow. [ 114.931608][T10665] overlayfs: ...falling back to uuid=null. [ 114.968434][T10668] netlink: 'syz.9.1890': attribute type 4 has an invalid length. [ 115.211128][T10673] netlink: 52 bytes leftover after parsing attributes in process `syz.8.1892'. [ 115.216084][T10673] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 115.398914][T10681] loop8: detected capacity change from 0 to 128 [ 115.402643][T10681] FAT-fs (loop8): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 115.427793][T10681] syz.8.1895: attempt to access beyond end of device [ 115.427793][T10681] loop8: rw=2049, sector=130, nr_sectors = 1 limit=128 [ 115.427837][T10681] buffer_io_error: 138 callbacks suppressed [ 115.428339][T10681] Buffer I/O error on dev loop8, logical block 130, lost async page write [ 115.428410][T10681] syz.8.1895: attempt to access beyond end of device [ 115.428410][T10681] loop8: rw=2049, sector=131, nr_sectors = 1 limit=128 [ 115.428424][T10681] Buffer I/O error on dev loop8, logical block 131, lost async page write [ 115.428448][T10681] syz.8.1895: attempt to access beyond end of device [ 115.428448][T10681] loop8: rw=2049, sector=132, nr_sectors = 1 limit=128 [ 115.428458][T10681] Buffer I/O error on dev loop8, logical block 132, lost async page write [ 115.428481][T10681] syz.8.1895: attempt to access beyond end of device [ 115.428481][T10681] loop8: rw=2049, sector=133, nr_sectors = 1 limit=128 [ 115.428491][T10681] Buffer I/O error on dev loop8, logical block 133, lost async page write [ 115.428510][T10681] syz.8.1895: attempt to access beyond end of device [ 115.428510][T10681] loop8: rw=2049, sector=134, nr_sectors = 1 limit=128 [ 115.428520][T10681] Buffer I/O error on dev loop8, logical block 134, lost async page write [ 115.428539][T10681] syz.8.1895: attempt to access beyond end of device [ 115.428539][T10681] loop8: rw=2049, sector=135, nr_sectors = 1 limit=128 [ 115.428548][T10681] Buffer I/O error on dev loop8, logical block 135, lost async page write [ 115.428567][T10681] syz.8.1895: attempt to access beyond end of device [ 115.428567][T10681] loop8: rw=2049, sector=138, nr_sectors = 1 limit=128 [ 115.428576][T10681] Buffer I/O error on dev loop8, logical block 138, lost async page write [ 115.428594][T10681] syz.8.1895: attempt to access beyond end of device [ 115.428594][T10681] loop8: rw=2049, sector=139, nr_sectors = 1 limit=128 [ 115.428603][T10681] Buffer I/O error on dev loop8, logical block 139, lost async page write [ 115.428905][T10681] syz.8.1895: attempt to access beyond end of device [ 115.428905][T10681] loop8: rw=2049, sector=148, nr_sectors = 1 limit=128 [ 115.428979][T10681] Buffer I/O error on dev loop8, logical block 148, lost async page write [ 115.429004][T10681] syz.8.1895: attempt to access beyond end of device [ 115.429004][T10681] loop8: rw=2049, sector=149, nr_sectors = 1 limit=128 [ 115.429013][T10681] Buffer I/O error on dev loop8, logical block 149, lost async page write [ 115.438367][T10681] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 115.438383][T10681] FAT-fs (loop8): Filesystem has been set read-only [ 115.476208][ T8614] FAT-fs (loop8): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 115.557396][T10686] netlink: 'syz.0.1897': attribute type 1 has an invalid length. [ 115.558893][T10686] netlink: 'syz.0.1897': attribute type 1 has an invalid length. [ 115.594686][T10691] input: syz0 as /devices/virtual/input/input16 [ 115.766100][T10706] loop2: detected capacity change from 0 to 128 [ 115.845878][T10713] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1908'. [ 115.845984][T10713] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.845998][T10713] batadv0: mtu less than device minimum [ 115.847922][T10713] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 115.849772][T10713] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 115.851432][T10713] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 115.853112][T10713] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 115.854768][T10713] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 115.856424][T10713] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 115.858069][T10713] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 115.859712][T10713] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 115.896072][T10713] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.300356][T10752] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1923'. [ 116.302633][T10752] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1923'. [ 116.467775][ T4165] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 116.468524][ T4165] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 116.468548][ T4165] EXT4-fs (loop9): This should not happen!! Data will be lost [ 116.468548][ T4165] [ 116.468566][ T4165] EXT4-fs (loop9): Total free blocks count 0 [ 116.468577][ T4165] EXT4-fs (loop9): Free/Dirty block details [ 116.468588][ T4165] EXT4-fs (loop9): free_blocks=4096 [ 116.468599][ T4165] EXT4-fs (loop9): dirty_blocks=512 [ 116.468609][ T4165] EXT4-fs (loop9): Block reservation details [ 116.468618][ T4165] EXT4-fs (loop9): i_reserved_data_blocks=32 [ 116.478107][ T39] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 320 with error 28 [ 116.478123][ T39] EXT4-fs (loop9): This should not happen!! Data will be lost [ 116.478123][ T39] [ 116.484378][ T8779] EXT4-fs warning (device loop9): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 116.501575][ T26] kernel write not supported for file bpf-prog (pid: 26 comm: kworker/1:1) [ 116.600891][T10773] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.607709][T10773] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.656657][ T4801] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 116.661855][ T4801] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 116.746793][T10794] netlink: 124 bytes leftover after parsing attributes in process `syz.8.1939'. [ 116.749087][T10794] netlink: 124 bytes leftover after parsing attributes in process `syz.8.1939'. [ 116.818173][T10801] set_capacity_and_notify: 2 callbacks suppressed [ 116.819643][T10801] loop9: detected capacity change from 0 to 1024 [ 116.842379][T10797] ================================================================== [ 116.842392][T10797] BUG: KASAN: slab-use-after-free in dvb_frontend_release+0x374/0x414 [ 116.842411][T10797] Read of size 4 at addr ffff0000cca23e3c by task syz.2.1942/10797 [ 116.842419][T10797] [ 116.842425][T10797] CPU: 1 UID: 0 PID: 10797 Comm: syz.2.1942 Tainted: G L syzkaller #0 PREEMPT [ 116.842435][T10797] Tainted: [L]=SOFTLOCKUP [ 116.842438][T10797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 116.842442][T10797] Call trace: [ 116.842445][T10797] show_stack+0x2c/0x3c (C) [ 116.842458][T10797] __dump_stack+0x30/0x40 [ 116.842467][T10797] dump_stack_lvl+0xd8/0x12c [ 116.842477][T10797] print_address_description+0xb0/0x238 [ 116.842485][T10797] print_report+0x68/0x84 [ 116.842492][T10797] kasan_report+0x8c/0xc4 [ 116.842501][T10797] __asan_report_load4_noabort+0x20/0x2c [ 116.842511][T10797] dvb_frontend_release+0x374/0x414 [ 116.842519][T10797] __fput+0x340/0x744 [ 116.842527][T10797] ____fput+0x20/0x30 [ 116.842533][T10797] task_work_run+0x1c4/0x254 [ 116.842543][T10797] exit_to_user_mode_loop+0x10c/0x17c [ 116.842551][T10797] el0_svc+0x18c/0x260 [ 116.842559][T10797] el0t_64_sync_handler+0x48/0x148 [ 116.842566][T10797] el0t_64_sync+0x198/0x19c [ 116.842574][T10797] [ 116.842576][T10797] Allocated by task 1: [ 116.842579][T10797] kasan_save_track+0x40/0x78 [ 116.842587][T10797] kasan_save_alloc_info+0x44/0x54 [ 116.842595][T10797] __kasan_kmalloc+0x9c/0xb4 [ 116.842602][T10797] __kmalloc_cache_noprof+0x2d4/0x624 [ 116.842610][T10797] dvb_register_device+0x1ac/0x16ec [ 116.842618][T10797] dvb_register_frontend+0x464/0x698 [ 116.842625][T10797] vidtv_bridge_probe+0x57c/0xa24 [ 116.842633][T10797] platform_probe+0xfc/0x198 [ 116.842641][T10797] really_probe+0x2a8/0x7e8 [ 116.842646][T10797] __driver_probe_device+0x1e0/0x33c [ 116.842652][T10797] driver_probe_device+0x6c/0x19c [ 116.842657][T10797] __driver_attach+0x164/0x374 [ 116.842662][T10797] bus_for_each_dev+0x128/0x1b4 [ 116.842670][T10797] driver_attach+0x4c/0x5c [ 116.842675][T10797] bus_add_driver+0x208/0x4fc [ 116.842682][T10797] driver_register+0x220/0x30c [ 116.842688][T10797] __platform_driver_register+0x6c/0x80 [ 116.842695][T10797] vidtv_bridge_init+0x34/0x5c [ 116.842704][T10797] do_one_initcall+0x274/0xc20 [ 116.842712][T10797] do_initcall_level+0x128/0x1c4 [ 116.842719][T10797] do_initcalls+0x70/0xd0 [ 116.842724][T10797] do_basic_setup+0x7c/0x90 [ 116.842730][T10797] kernel_init_freeable+0x268/0x3a8 [ 116.842736][T10797] kernel_init+0x24/0x1dc [ 116.842742][T10797] ret_from_fork+0x10/0x20 [ 116.842748][T10797] [ 116.842749][T10797] Freed by task 10797: [ 116.842752][T10797] kasan_save_track+0x40/0x78 [ 116.842759][T10797] kasan_save_free_info+0x58/0x70 [ 116.842767][T10797] __kasan_slab_free+0x74/0xa4 [ 116.842774][T10797] kfree+0x188/0x690 [ 116.842780][T10797] dvb_device_put+0x64/0xd0 [ 116.842788][T10797] dvb_generic_release+0xec/0x154 [ 116.842796][T10797] dvb_frontend_release+0x114/0x414 [ 116.842803][T10797] __fput+0x340/0x744 [ 116.842808][T10797] ____fput+0x20/0x30 [ 116.842813][T10797] task_work_run+0x1c4/0x254 [ 116.842821][T10797] exit_to_user_mode_loop+0x10c/0x17c [ 116.842827][T10797] el0_svc+0x18c/0x260 [ 116.842835][T10797] el0t_64_sync_handler+0x48/0x148 [ 116.842841][T10797] el0t_64_sync+0x198/0x19c [ 116.842847][T10797] [ 116.842849][T10797] The buggy address belongs to the object at ffff0000cca23e00 [ 116.842849][T10797] which belongs to the cache kmalloc-256 of size 256 [ 116.842855][T10797] The buggy address is located 60 bytes inside of [ 116.842855][T10797] freed 256-byte region [ffff0000cca23e00, ffff0000cca23f00) [ 116.842862][T10797] [ 116.842864][T10797] The buggy address belongs to the physical page: [ 116.842867][T10797] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10ca22 [ 116.842874][T10797] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 116.842880][T10797] flags: 0x5ffc00000000040(head|node=0|zone=2|lastcpupid=0x7ff) [ 116.842887][T10797] page_type: f5(slab) [ 116.842894][T10797] raw: 05ffc00000000040 ffff0000c0001b40 dead000000000100 dead000000000122 [ 116.842899][T10797] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 116.842905][T10797] head: 05ffc00000000040 ffff0000c0001b40 dead000000000100 dead000000000122 [ 116.842911][T10797] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 116.842916][T10797] head: 05ffc00000000001 fffffdffc3328881 00000000ffffffff 00000000ffffffff [ 116.842922][T10797] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 116.842925][T10797] page dumped because: kasan: bad access detected [ 116.842928][T10797] [ 116.842930][T10797] Memory state around the buggy address: [ 116.842933][T10797] ffff0000cca23d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 116.842938][T10797] ffff0000cca23d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 116.842942][T10797] >ffff0000cca23e00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 116.842946][T10797] ^ [ 116.842949][T10797] ffff0000cca23e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 116.842954][T10797] ffff0000cca23f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 116.842957][T10797] ================================================================== [ 116.845979][T10797] Disabling lock debugging due to kernel taint [ 116.877806][ T8779] EXT4-fs warning (device loop9): ext4_rmdir:3192: inode #11: comm syz-executor: empty directory 'lost+found' has too many links (111) [ 116.878579][ T8779] EXT4-fs error (device loop9): ext4_empty_dir:3082: inode #11: comm syz-executor: invalid size [ 116.878952][ T8779] EXT4-fs error (device loop9): ext4_empty_dir:3082: inode #11: comm syz-executor: invalid size [ 116.879173][ T8779] EXT4-fs error (device loop9): ext4_empty_dir:3082: inode #11: comm syz-executor: invalid size [ 116.879388][ T8779] EXT4-fs error (device loop9): ext4_empty_dir:3082: inode #11: comm syz-executor: invalid size [ 116.879597][ T8779] EXT4-fs error (device loop9): ext4_empty_dir:3082: inode #11: comm syz-executor: invalid size [ 116.879878][ T8779] EXT4-fs error (device loop9): ext4_empty_dir:3082: inode #11: comm syz-executor: invalid size [ 116.880097][ T8779] EXT4-fs error (device loop9): ext4_empty_dir:3082: inode #11: comm syz-executor: invalid size [ 116.880298][ T8779] EXT4-fs error (device loop9): ext4_empty_dir:3082: inode #11: comm syz-executor: invalid size [ 116.880499][ T8779] EXT4-fs error (device loop9): ext4_empty_dir:3082: inode #11: comm syz-executor: invalid size [ 116.880702][ T8779] EXT4-fs error (device loop9): ext4_empty_dir:3082: inode #11: comm syz-executor: invalid size [ 117.339444][ T39] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.405154][ T39] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.505192][ T39] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.544594][ T39] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.999482][ T39] team0: Port device bridge1 removed [ 118.045127][ T39] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 118.063804][ T39] bond0 (unregistering): Released all slaves [ 118.066492][ T39] bond1 (unregistering): Released all slaves [ 118.225764][ T4396] 8021q: adding VLAN 0 to HW filter on device eth0 [ 118.337398][ T4396] 8021q: adding VLAN 0 to HW filter on device eth1 [ 118.506201][ T39] hsr_slave_0: left promiscuous mode [ 118.507604][ T39] hsr_slave_1: left promiscuous mode [ 118.516609][ T39] veth0_macvtap: left promiscuous mode [ 118.517895][ T39] veth1_vlan: left promiscuous mode [ 118.517935][ T39] veth0_vlan: left promiscuous mode [ 118.695542][ T4396] 8021q: adding VLAN 0 to HW filter on device eth2 [ 118.816751][ T4396] 8021q: adding VLAN 0 to HW filter on device eth3 [ 125.913442][ T1595] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.914742][ T1595] ieee802154 phy1 wpan1: encryption failed: -22