last executing test programs: 2m27.526493071s ago: executing program 32 (id=235): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000000) 2m24.218812054s ago: executing program 33 (id=246): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x8c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0xff, 0x0}}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2m17.71039406s ago: executing program 0 (id=273): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d105012000060102030109021200080000000009"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000340)={0x20, 0x3, 0x3, "2d1948"}, 0x0, 0x0, 0x0, 0x0}) 2m14.666571875s ago: executing program 0 (id=285): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) creat(0x0, 0x17e) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0), 0x6df8}}, 0x0) 2m14.435236379s ago: executing program 34 (id=286): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x30) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x6, 0x9, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 2m13.701233255s ago: executing program 0 (id=292): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000006c0)=@sack_info={r2, 0x40, 0xfffffbff}, &(0x7f0000000240)=0xc) 2m13.607992248s ago: executing program 0 (id=293): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mkdir(&(0x7f0000000280)='./file0/file1\x00', 0xb) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180)='./file0/file1\x00', 0x0, 0x2243005, 0x0) 2m13.607140617s ago: executing program 0 (id=294): socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r1, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m13.157303499s ago: executing program 0 (id=297): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x3, 0x8d) ioctl(0xffffffffffffffff, 0x8916, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&'], 0x10) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="580000001000ffff2abd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15010000000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00v'], 0x58}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) 2m13.081169094s ago: executing program 35 (id=297): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x3, 0x8d) ioctl(0xffffffffffffffff, 0x8916, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&'], 0x10) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="580000001000ffff2abd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15010000000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00v'], 0x58}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) 1m52.233281014s ago: executing program 5 (id=418): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd1, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 1m51.737637448s ago: executing program 5 (id=424): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) socket$packet(0x11, 0x3, 0x300) openat$vcsu(0xffffffffffffff9c, 0x0, 0x101000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) setpriority(0x2, 0x0, 0x7) mkdirat(0xffffffffffffff9c, 0x0, 0x1c6) mount(0x0, 0x0, 0x0, 0xc00, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r3, 0x0, 0x0, 0x40) sendto$inet(r3, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 1m50.446755485s ago: executing program 5 (id=427): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000001080)={[{@discard}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@quota}]}, 0x3, 0x43a, &(0x7f0000001100)="$eJzs28tvG1UXAPAzfrRfX19CVR59AIGCqHgkTVpKF2xAILEACQkWZRmStCp1G9QEiVYRBITKCqFK7BFLJP4CVrBBwAqJLexRpQpl08LKaOyZxHYcNzFOnOLfT5r23plr3XM8c+07c+MABtZI+k8SsTcifouIoXq1ucFI/b/bSwtTfy0tTCVRrb7xZ1Jrd2tpYSpvmr9uT14pRRQ+SeJwm37nrly9MFmpzFzO6mPzF98dm7ty9ZnzFyfPzZybuTRx+vTJE+PPnZp4tid5pnndOvTB7JGDr7x1/bWpM9ff/umbJM+/JY8eGel08PFqtcfd9de+hnJS6mMgbEixPkyjXBv/Q1GMlZM3FC9/3NfggE1VrVar9619eLEK/Icl0e8IgP7Iv+jT+99826Kpx7Zw84X6DVCa9+1sqx8pRSFrU265v+2lkYg4s/j3l+kWm/McAgCgyXfp/OfpdvO/QjQ+F/p/toYyHBH3RMT+iDgVEQci4t6IWtv7I+KBDfbfukiyev5TuNFVYuuUzv+ez9a2mud/+ewvhotZbV8t/3Jy9nxl5nj2nhyL8s60Pt6hj+9f+vXztY41zv/SLe0/nwtmcdwo7Wx+zfTk/GRziN27+VHEoVK7/JPllYAkIg5GxKEu+zj/5NdH1jp25/w76ME6U/WriCfq538xWvLPJZ3XJ8f+F5WZ42P5VbHaz79ce32t/v9V/j2Qnv/dba//5fyHk8b12rmN93Ht90/XvKfp9vrfkbzZtO/9yfn5y+MRO5JX60E37p9oaTex0j7N/9jR9uN/f6y8E4cjIr2IH4yIhyLi4Sz2RyLi0Yg42iH/H1987J3u899caf7TGzr/K4Ud0bqnfaF44Ydvmzod3kj+6fk/WSsdy/Ysf/51sJ64uruaAQAA4O5TiIi9kRRGl8uFwuho/W/4D8TuQmV2bv6ps7PvXZqu/0ZgOMqF/EnXUMPz0PHstj6vT7TUT2TPjb8o7qrVR6dmK9P9Th4G3J4otR3/qT+K/Y4O2HR+rwWDy/iHwWX8w+Ay/mFwtRn/u/oRB7D12n3/f9iHOICt1zL+LfvBAHH/D4PL+IfBZfzDQJrbFXf+kbyCwqpCFLZFGOssfFbeFmHcRYV+fzIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0xj8BAAD//3g65pw=") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) write$cgroup_subtree(r2, &(0x7f0000003940)=ANY=[], 0xfe1b) 1m49.837674776s ago: executing program 5 (id=431): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mkdir(&(0x7f0000000280)='./file0/file1\x00', 0xb) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180)='./file0/file1\x00', 0x0, 0x2243005, 0x0) 1m49.795672697s ago: executing program 5 (id=432): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 1m49.621092263s ago: executing program 6 (id=434): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0xfffffffd, 0x35}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'sh\x00'}, 0x2c) 1m49.290527519s ago: executing program 6 (id=435): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) creat(0x0, 0x17e) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) sendmsg$nl_route_sched(r3, 0x0, 0x0) 1m48.025567641s ago: executing program 6 (id=441): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14}}, 0xb8}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x22, 0x3, "3318000058a8056dd9a87f963d140de6993ac869f3a8609133b07523679a"}, @NFTA_TARGET_NAME={0xa, 0x1, 'HMARK\x00'}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xa4}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @random="d8be17d19221", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2, 0x0, 0xe7}}}}}}, 0x0) 1m47.649452557s ago: executing program 2 (id=442): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f0000000400)={&(0x7f00000008c0), 0x58, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) 1m47.624289942s ago: executing program 6 (id=443): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mkdir(&(0x7f0000000280)='./file0/file1\x00', 0xb) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180)='./file0/file1\x00', 0x0, 0x2243005, 0x0) 1m47.476732804s ago: executing program 2 (id=445): syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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") setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x98) truncate(&(0x7f0000000340)='./file1\x00', 0x20fffbfffc) write$FUSE_NOTIFY_POLL(r0, 0x0, 0x0) truncate(&(0x7f0000000340)='./file1\x00', 0x20fffbfffc) write$binfmt_register(r0, &(0x7f0000000100)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'udf\x00', 0x3a, 'udf\x00', 0x3a, './file1'}, 0x2f) 1m47.475894994s ago: executing program 6 (id=446): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x4}, {0xffff, 0xffff}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x3, 0x1, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4005c}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) close(0x4) 1m47.215115722s ago: executing program 2 (id=448): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/udp6\x00') r1 = fanotify_init(0x40, 0x40000) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0xa880, 0x97) fanotify_mark(r1, 0x1, 0x40001019, r3, 0x0) close_range(r0, r3, 0x0) getdents64(r0, 0x0, 0x0) 1m46.709637734s ago: executing program 5 (id=452): r0 = syz_io_uring_setup(0x12ac, &(0x7f00000002c0)={0x0, 0x7495, 0x0, 0x2, 0x29e}, &(0x7f0000000380)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$l2tp(0x2, 0x2, 0x73) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000000c0)=@in={0x2, 0x4e21, @multicast1}, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) 1m46.659847473s ago: executing program 36 (id=452): r0 = syz_io_uring_setup(0x12ac, &(0x7f00000002c0)={0x0, 0x7495, 0x0, 0x2, 0x29e}, &(0x7f0000000380)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$l2tp(0x2, 0x2, 0x73) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000000c0)=@in={0x2, 0x4e21, @multicast1}, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) 1m46.64219124s ago: executing program 6 (id=455): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e22, @empty}}, 0xcde, 0x9}, &(0x7f0000000000)=0x90) 1m46.471134366s ago: executing program 37 (id=455): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e22, @empty}}, 0xcde, 0x9}, &(0x7f0000000000)=0x90) 1m46.323787788s ago: executing program 2 (id=457): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mkdir(&(0x7f0000000280)='./file0/file1\x00', 0xb) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180)='./file0/file1\x00', 0x0, 0x2243005, 0x0) 1m46.178419409s ago: executing program 2 (id=458): chdir(&(0x7f0000000000)='./cgroup\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000380)=""/40, 0xffa0) 1m45.581577632s ago: executing program 2 (id=461): syz_emit_ethernet(0xe, &(0x7f00000078c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @broadcast, @void, {@generic={0x8035}}}, 0x0) 1m45.280667554s ago: executing program 38 (id=461): syz_emit_ethernet(0xe, &(0x7f00000078c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @broadcast, @void, {@generic={0x8035}}}, 0x0) 1m22.025321273s ago: executing program 9 (id=631): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20041090}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/meminfo\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) 1m21.800563819s ago: executing program 9 (id=634): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x4, 0x8}) readv(r0, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4087, 0xff7}], 0x1) 1m21.693291307s ago: executing program 9 (id=636): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f0000000400000004000000a2"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000140), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) 1m21.453480231s ago: executing program 9 (id=639): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mmap(&(0x7f00000c4000/0x2000)=nil, 0x2000, 0x7000002, 0x204031, 0xffffffffffffffff, 0xb320e000) r4 = dup3(r1, r0, 0x80000) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000000)={r7}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000500)={r7, 0x5, 0x7d8a}, &(0x7f00000006c0)=0x8) timer_create(0x3, 0x0, &(0x7f00000001c0)) r8 = getpid() r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r9, 0xffffffffffffffff, 0x4, 0x0, @void}, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x1) sched_setscheduler(r8, 0x1, &(0x7f0000000200)=0x7) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)=0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000380)={'\x00', 0x6, 0x0, 0x1, 0x9, 0x0, 0x0}) syz_clone3(&(0x7f0000000440)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0), {0x19}, &(0x7f0000000200)=""/223, 0xdf, &(0x7f0000000100)=""/181, &(0x7f0000000400)=[r8, 0x0, r10, r11], 0x4}, 0x58) syz_open_dev$tty1(0xc, 0x4, 0x1) 1m20.302048085s ago: executing program 9 (id=646): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000840)={0x16, 0x98, 0xfa00, {0x0, 0x4, 0xffffffffffffffff, 0x30, 0x1, @ib={0x1b, 0x2, 0x3, {"24ac19cdd1b59147998ea951c8f4f8f2"}, 0x7, 0x0, 0x5}}}, 0xa0) 1m20.125665671s ago: executing program 9 (id=648): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) sendmmsg$inet(r1, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000740)="b3", 0x1}], 0x1, &(0x7f0000000640)=ANY=[], 0xf0}}], 0x1, 0x24004c41) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x1004800, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1m4.260961446s ago: executing program 39 (id=648): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) sendmmsg$inet(r1, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000740)="b3", 0x1}], 0x1, &(0x7f0000000640)=ANY=[], 0xf0}}], 0x1, 0x24004c41) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x1004800, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 5.864387248s ago: executing program 4 (id=1184): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_delete(0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, 0x0, 0x0) fsopen(&(0x7f0000000080)='binder\x00', 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="bc000000000000007910480000000000630a04ff000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x21) 5.00853203s ago: executing program 7 (id=1190): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448c9, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r5 = dup3(r3, 0xffffffffffffffff, 0x0) ioctl$MON_IOCG_STATS(r5, 0xc0109207, &(0x7f00000001c0)) syz_clone(0x80000400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x1de, 0x0, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, &(0x7f0000001680)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)}) bind$unix(0xffffffffffffffff, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000006c0)=[{0x6, 0x0, 0x4, 0x7fff8000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 3.498239525s ago: executing program 7 (id=1197): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000014c0)={'syz_tun\x00', 0x400}) 3.274248781s ago: executing program 3 (id=1198): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2, &(0x7f0000000280)={[{@dioread_nolock}, {@nodiscard}, {@quota}]}, 0x1, 0x558, &(0x7f0000000c00)="$eJzs3c9vI1cdAPDvTH52d9vsQg9QAbtAYUGrtTfedlX10nIBoaoSouKAOGxD4o3C2nGIndKESKR/A0ggcYI/gQMSB6SeOHDjiMQBEOWAVCACbZA4GM14kriJw5rEsdn485Fm58ebme979s6852dnXgBj60ZE7ETEdES8GRFzxfakmOLVzpTt92h3e3Fvd3sxiXb7jb8leXq2LbqOyVwuzjkbEV/9UsQ3k+Nxm5tbDxdqtep6sV5u1dfKzc2t2yv1heXqcnW1Urk3f+/OS3dfrAysrNfrP3v/iyuvfe2Xv/j4e7/Z+fx3s2xdKdK6yzFInaJPHcTJTEbEa+cRbAQmivn0iPPB6aQR8aGI+FR+/c/FRP6/EwC4yNrtuWjPda8DABddmveBJWkpItK0aASUOn14z8altNZotm49aGysLnX6yq7GVPpgpVa9c23md9/Od55KsvX5PC1Pz9crR9bvRsS1iPjBzFP5emmxUVsaTZMHAMbe5e76PyL+OZOmpVJfh/b4Vg8AeGLMjjoDAMDQqf8BYPyo/wFg/PRR/xdf9u+ce14AgOHw+R8Axo/6HwDGj/ofAMbKV15/PZvae8Xzr5fe2tx42Hjr9lK1+bBU31gsLTbW10rLjcZy/sye+uPOV2s01uZfiI23y61qs1Vubm7drzc2Vlv38+d6369ODaVUAMB/c+36u79NImLn5afyKbrGclBXw8WWDnAv4MkycZaDNRDgiWa0LxhffVXheSPh1+eeF2A0ej7Me7bn4gf96H8I4ndG8H/l5kf77/83xjNcLHr2YXydrv//lYHnAxi+U/f//2Gw+QCGr91Ojo75P32QBABcSGf4CV/7e4NqhAAj9bjBvAfy/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcMFci4luRpKV8LPA0+zctlSKejoirMZU8WKlV70TEM3E9IqZmsvX5UWcaADij9C9JMf7XzbnnrxxNnU7+NZPPI+I7P37jh28vtFrr89n2vx9sn9kfPqxyeNwZxhUEAPr3p352yuvvSjHv+iD/aHd7cX86xzwe8/4XDgYfXdzb3c6nTspktNvtdsRs3pa49I8kJotjZiPiuYiYGED8nXci4iO9yp/kfSNXi5FPu+NHEfvpocZPPxA/zdM68+zl+/AA8gLj5t3s/vNqr+svjRv5vPf1P5vfoc4uv//NRuzf+/a64k8WkSZ6xM+u+Rv9xnjhV18+trE910l7J+K5yV7xk4P4yQnxn+8z/u8/9onvv3JCWvsnETejd/zuWOVWfa3c3Ny6vVJfWK4uV1crlXvz9+68dPfFSjnvoy7v91Qf99eXbz1zUt6y8l86IX7nnb98pPzTB8d+ps/y//Tfb37jk4erM0fjf+7Tvd//Z/N579c/qxM/22f8hUs/P3H47iz+0gnlf9z7f6vP+O/9eWupz10BgCFobm49XKjVqutnWsg+hQ7iPMcWsiz2t/N+c/FsQf8Y+cLhy5JEEoMuV9YY62fnqfN6Vc99YfKgrTjYM389O+OQi5MOvBSnWYirxcKjYQUd3T0JGI7Di37UOQEAAAAAAAAAAAAAAE4yjL9hGnUZAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLj+EwAA//8GP8IF") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x92800, 0x20) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x8, 0x40000cca8, 0x9}) 3.173611331s ago: executing program 8 (id=1199): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004640)={0x0}}, 0x0) r0 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x78bf, 0x0, 0x40204, 0x100039}, &(0x7f0000000340)=0x0, &(0x7f0000000f80)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000040)=0xefefffd7, 0x0, 0x4) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) io_uring_enter(r0, 0x3516, 0xc2de, 0x8, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 3.099517587s ago: executing program 7 (id=1201): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f00000000c0)={[{@lazytime}, {@errors_remount}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") r0 = open(&(0x7f0000000000)='./file1\x00', 0x143142, 0x80) ftruncate(r0, 0x2007ffb) sendfile(r0, r0, 0x0, 0x1000000201008) r1 = open(&(0x7f0000000080)='./file1\x00', 0x10d002, 0x0) sendfile(r1, r1, 0x0, 0x800000009) 3.06649839s ago: executing program 8 (id=1202): socket$kcm(0x10, 0x2, 0x0) socket(0x400000000010, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r0}, &(0x7f0000000280), &(0x7f0000000340)=r1}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[], 0x0) 2.932369444s ago: executing program 1 (id=1203): syz_mount_image$ext4(&(0x7f0000001d40)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000a40)={[{@auto_da_alloc}, {@barrier}, {@noblock_validity}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@delalloc}, {@auto_da_alloc}]}, 0x1, 0x490, &(0x7f0000000580)="$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") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x3, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c67808cf335263bd9bffbcc2542ded71038259ca171ce1a311ef07ec3ad71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x9]}) 2.833644055s ago: executing program 8 (id=1204): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000010c0)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, 0x0, &(0x7f0000000040)) 2.833461014s ago: executing program 3 (id=1205): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = dup(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb7020000"], 0x0, 0x8, 0x0, 0x0, 0x0, 0xa}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000040)={0x0, 0x0}) 2.660362681s ago: executing program 3 (id=1206): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="aefdda9d240103005ad8df7f02703aeff0f64eb9ee07962c220852f426072a000000000000000000000050", 0x2b}], 0x1) 2.559100331s ago: executing program 7 (id=1207): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {}, {0x7, 0xfffd}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x4}, @TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xd0}, 0x0) 2.509673461s ago: executing program 3 (id=1208): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f00000020c0), 0x1, 0x4fe, &(0x7f00000000c0)="$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") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140), 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[], 0x454}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.437703757s ago: executing program 4 (id=1209): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40000000000029a, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x3c}, 0x2, @in=@empty, 0x3504, 0x4, 0x3, 0x0, 0x0, 0xfffffffe, 0x20000}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ftruncate(r4, 0x200004) sendfile(0xffffffffffffffff, r4, 0x0, 0x80001d00c0d1) 2.411220872s ago: executing program 1 (id=1210): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) geteuid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10122, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x8, 0x0, 0x0, 'queue0\x00', 0x3}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) 1.488648041s ago: executing program 8 (id=1211): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) 1.488050681s ago: executing program 4 (id=1212): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x0}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$kcm(0x29, 0x2, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x119, 0x487, 0x0, &(0x7f0000000480)) 1.353509225s ago: executing program 8 (id=1213): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8b, 0xd, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xe, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x4, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r7, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x45, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) 1.264466437s ago: executing program 4 (id=1214): r0 = socket$inet_udp(0x2, 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4) 908.772188ms ago: executing program 7 (id=1215): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) writev(r0, &(0x7f0000001700)=[{&(0x7f00000016c0)="f56327", 0x3}], 0x1) 530.796004ms ago: executing program 3 (id=1216): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x1}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2000002, 0xfffffffe}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x4, 0x2}, 0x10) sendmsg$tipc(r0, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x2, {{0x1, 0x3}, 0x2}}, 0x10, 0x0}, 0x10) 421.685482ms ago: executing program 4 (id=1217): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000080)={0x14, r1, 0x1, 0x70bd2a, 0x35dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x4080080) 421.330532ms ago: executing program 1 (id=1218): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e25, 0xb, @loopback, 0x5}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)="800037bbfa9ba1ce", 0x8, 0x10, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x20da, 0x4) socket(0x2000000015, 0x80005, 0x0) read(r0, &(0x7f0000002400)=""/4062, 0xfde) 391.193786ms ago: executing program 7 (id=1219): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_delete(0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, 0x0, 0x0) fsopen(&(0x7f0000000080)='binder\x00', 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="bc000000000000007910480000000000630a04ff000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x21) 320.345183ms ago: executing program 4 (id=1220): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) close_range(r0, 0xffffffffffffffff, 0x0) 229.730835ms ago: executing program 1 (id=1221): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x8047) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0x80000018}) 229.506195ms ago: executing program 3 (id=1222): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000010c0)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, 0x0, &(0x7f0000000040)) 123.146134ms ago: executing program 1 (id=1223): capset(&(0x7f0000000000)={0x20080522}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) 6.068711ms ago: executing program 1 (id=1224): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000300)={[{@grpquota}, {@quota}, {@quota}, {}, {@dioread_lock}]}, 0xff, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r0 = creat(&(0x7f0000000e40)='./file1\x00', 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x108) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x51) fallocate(r2, 0x0, 0x9, 0x10001) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) fallocate(r0, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x18, 0x0, 0xfffffffffe000001}) 0s ago: executing program 8 (id=1225): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x57, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @rumble={0x1, 0x8}}) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r0 = open(&(0x7f0000000140)='./file0/file0\x00', 0x64942, 0x106) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)=""/24, 0x18}, {&(0x7f0000000600)=""/120, 0x78}], 0x2) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x3) kernel console output (not intermixed with test programs): HANGE): macvlan0: link becomes ready [ 138.685466][ T4801] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.727672][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 138.766596][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 138.828103][ T5767] EXT4-fs (loop5): Ignoring removed orlov option [ 138.891895][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 138.900230][ T5767] EXT4-fs (loop5): Ignoring removed nobh option [ 138.940039][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 138.987368][ T5767] EXT4-fs (loop5): mounted filesystem without journal. Opts: data_err=ignore,errors=remount-ro,sysvgroups,norecovery,nodioread_nolock,orlov,nogrpid,noauto_da_alloc,nobh,. Quota mode: none. [ 139.027631][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 139.103454][ T5423] device veth1_macvtap entered promiscuous mode [ 139.124044][ T5776] netlink: 'syz.6.370': attribute type 4 has an invalid length. [ 139.131861][ T5776] netlink: 'syz.6.370': attribute type 2 has an invalid length. [ 139.188420][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 139.277106][ T5423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.328473][ T5423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.370993][ T5423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.398103][ T5423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.515208][ T5423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.575532][ T5423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.607014][ T5423] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.274735][ T4486] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.293617][ T5423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.314459][ T4486] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.369652][ T5423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.400442][ T5423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.427784][ T5423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.446503][ T5797] netlink: 256 bytes leftover after parsing attributes in process `syz.6.375'. [ 140.457613][ T5423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.475265][ T5797] netlink: 72 bytes leftover after parsing attributes in process `syz.6.375'. [ 140.486618][ T5423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.519032][ T5423] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.539983][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 140.616198][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 140.644037][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 140.666333][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 140.701370][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 140.748727][ T5423] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.963215][ T5423] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.005684][ T5423] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.048403][ T5423] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.266951][ T4235] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.282810][ T4235] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.321307][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 141.363707][ T5815] loop5: detected capacity change from 0 to 2048 [ 141.374727][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.398562][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.441159][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 141.453274][ T5818] loop7: detected capacity change from 0 to 512 [ 141.483225][ T5815] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 141.611964][ T5815] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.380: bg 0: block 234: padding at end of block bitmap is not set [ 141.646036][ T5825] loop8: detected capacity change from 0 to 2048 [ 141.669184][ T5818] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpquota,journal_ioprio=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 141.685210][ T5818] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.710470][ T5815] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 720 with error 28 [ 141.755236][ T5815] EXT4-fs (loop5): This should not happen!! Data will be lost [ 141.755236][ T5815] [ 141.765770][ T5815] EXT4-fs (loop5): Total free blocks count 0 [ 141.808120][ T5825] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 141.833361][ T5815] EXT4-fs (loop5): Free/Dirty block details [ 141.851128][ T5815] EXT4-fs (loop5): free_blocks=0 [ 141.856137][ T5815] EXT4-fs (loop5): dirty_blocks=720 [ 141.882726][ T5815] EXT4-fs (loop5): Block reservation details [ 141.888748][ T5815] EXT4-fs (loop5): i_reserved_data_blocks=45 [ 142.079292][ T5840] loop7: detected capacity change from 0 to 128 [ 142.578838][ T818] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.721803][ T818] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.928994][ T818] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.015671][ T5879] loop2: detected capacity change from 0 to 2048 [ 143.083711][ T5879] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 143.096123][ T818] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.405415][ T5892] loop8: detected capacity change from 0 to 512 [ 143.482249][ T5892] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 143.516689][ T5897] loop2: detected capacity change from 0 to 512 [ 143.566965][ T5892] EXT4-fs error (device loop8): ext4_validate_block_bitmap:429: comm syz.8.402: bg 0: block 104: invalid block bitmap [ 143.593792][ T5897] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 143.630916][ T5892] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 143.643051][ T5892] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.402: invalid indirect mapped block 1 (level 1) [ 143.692136][ T5892] EXT4-fs (loop8): 1 truncate cleaned up [ 143.698294][ T5892] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 143.701328][ T5897] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.404: bad orphan inode 16 [ 143.795044][ T26] audit: type=1800 audit(1771956387.462:11): pid=5892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.402" name="file1" dev="loop8" ino=18 res=0 errno=0 [ 143.815712][ T5897] ext4_test_bit(bit=15, block=4) = 0 [ 143.828910][ T5897] EXT4-fs (loop2): 1 orphan inode deleted [ 143.835269][ T5897] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,max_dir_size_kb=0x000000000000004a,resgid=0x0000000000000000,inode_readahead_blks=0x0000000000000100,acl,stripe=0x0000000000000001,init_itable=0x0000000000000008,journal_dev=0x000000007ffffffe,auto_da_alloc,,errors=continue. Quota mode: none. [ 143.887709][ T5919] netlink: 20 bytes leftover after parsing attributes in process `syz.5.409'. [ 143.917053][ T5897] capability: warning: `syz.2.404' uses 32-bit capabilities (legacy support in use) [ 143.944271][ T5924] netlink: 8 bytes leftover after parsing attributes in process `syz.7.410'. [ 144.235197][ T5931] loop5: detected capacity change from 0 to 2048 [ 144.292963][ T5931] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 144.923727][ T5963] netlink: 'syz.8.423': attribute type 16 has an invalid length. [ 144.941790][ T5963] netlink: 'syz.8.423': attribute type 17 has an invalid length. [ 144.972525][ T5963] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.982789][ T5963] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.312866][ T5976] loop7: detected capacity change from 0 to 1024 [ 146.316778][ T5978] loop5: detected capacity change from 0 to 512 [ 146.328148][ T818] device hsr_slave_0 left promiscuous mode [ 146.340935][ T818] device hsr_slave_1 left promiscuous mode [ 146.367878][ T818] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.388165][ T5978] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 146.430468][ T818] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.442702][ T5976] EXT4-fs (loop7): inline encryption not supported [ 146.466964][ T5976] EXT4-fs (loop7): Ignoring removed bh option [ 146.521030][ T5976] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 146.534010][ T818] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.550453][ T5978] EXT4-fs (loop5): 1 truncate cleaned up [ 146.588031][ T5978] EXT4-fs (loop5): mounted filesystem without journal. Opts: discard,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,bsdgroups,quota,,errors=continue. Quota mode: writeback. [ 146.617870][ T818] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.656224][ T818] device bridge_slave_1 left promiscuous mode [ 146.681207][ T5976] EXT4-fs (loop7): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,noauto_da_alloc,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,lazytime,bh,errors=remount-ro,. Quota mode: writeback. [ 146.689740][ T818] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.713270][ T818] device bridge_slave_0 left promiscuous mode [ 146.719500][ T818] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.773457][ T818] device veth1_macvtap left promiscuous mode [ 146.789762][ T818] device veth0_macvtap left promiscuous mode [ 146.820505][ T818] device veth1_vlan left promiscuous mode [ 146.879701][ T6000] loop6: detected capacity change from 0 to 2048 [ 146.890469][ T818] device veth0_vlan left promiscuous mode [ 146.928073][ T6000] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 146.938921][ T26] audit: type=1800 audit(1771956390.602:12): pid=5976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.425" name="file0" dev="loop7" ino=13 res=0 errno=0 [ 147.324355][ T5998] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 149.287402][ T818] team0 (unregistering): Port device team_slave_1 removed [ 149.299749][ T6038] loop2: detected capacity change from 0 to 2048 [ 149.311791][ T6040] loop7: detected capacity change from 0 to 512 [ 149.315166][ T818] team0 (unregistering): Port device team_slave_0 removed [ 149.338854][ T818] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.355883][ T818] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.370511][ T6038] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 149.381219][ T6040] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 149.417589][ T6040] EXT4-fs (loop7): 1 truncate cleaned up [ 149.450432][ T6040] EXT4-fs (loop7): mounted filesystem without journal. Opts: noload,stripe=0x00000000000000dc,data_err=abort,noload,data_err=ignore,auto_da_alloc,,errors=continue. Quota mode: none. [ 149.595594][ T818] bond0 (unregistering): Released all slaves [ 149.719320][ T6049] netlink: 14 bytes leftover after parsing attributes in process `syz.7.449'. [ 149.767924][ T6051] netlink: 8 bytes leftover after parsing attributes in process `syz.8.450'. [ 149.777892][ T6051] netlink: 8 bytes leftover after parsing attributes in process `syz.8.450'. [ 149.789016][ T6049] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.806820][ T6049] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.839329][ T6049] bond0 (unregistering): Released all slaves [ 150.117297][ T6062] loop7: detected capacity change from 0 to 512 [ 150.290435][ T6062] EXT4-fs (loop7): Quota format mount options ignored when QUOTA feature is enabled [ 150.299865][ T6062] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option [ 150.342962][ T6062] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 150.452956][ T6062] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:3887: comm syz.7.454: Allocating blocks 41-42 which overlap fs metadata [ 150.492918][ T6062] EXT4-fs (loop7): Remounting filesystem read-only [ 150.512339][ T6062] Quota error (device loop7): write_blk: dquota write failed [ 150.563597][ T6062] Quota error (device loop7): find_free_dqentry: Can't write quota data block 5 [ 150.590113][ T6062] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:3887: comm syz.7.454: Allocating blocks 41-42 which overlap fs metadata [ 150.624311][ T6062] EXT4-fs (loop7): Remounting filesystem read-only [ 150.646527][ T6062] Quota error (device loop7): write_blk: dquota write failed [ 150.654317][ T6062] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 150.703893][ T6062] EXT4-fs error (device loop7): ext4_acquire_dquot:6234: comm syz.7.454: Failed to acquire dquot type 1 [ 150.791354][ T6062] EXT4-fs (loop7): Remounting filesystem read-only [ 150.798280][ T6062] EXT4-fs error (device loop7): mb_free_blocks:1876: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 150.833952][ T6083] loop8: detected capacity change from 0 to 2048 [ 150.920755][ T6083] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 150.946751][ T6062] EXT4-fs (loop7): Remounting filesystem read-only [ 150.962583][ T6062] EXT4-fs error (device loop7): ext4_do_update_inode:5222: inode #12: comm syz.7.454: corrupted inode contents [ 150.964216][ T6069] chnl_net:caif_netlink_parms(): no params data found [ 150.984991][ T6062] EXT4-fs (loop7): Remounting filesystem read-only [ 151.000593][ T6062] EXT4-fs error (device loop7): ext4_dirty_inode:6058: inode #12: comm syz.7.454: mark_inode_dirty error [ 151.045650][ T6062] EXT4-fs (loop7): Remounting filesystem read-only [ 151.112302][ T6062] EXT4-fs error (device loop7): ext4_do_update_inode:5222: inode #12: comm syz.7.454: corrupted inode contents [ 151.133302][ T6062] EXT4-fs (loop7): Remounting filesystem read-only [ 151.139848][ T6062] EXT4-fs error (device loop7): __ext4_ext_dirty:183: inode #12: comm syz.7.454: mark_inode_dirty error [ 151.188934][ T6062] EXT4-fs (loop7): Remounting filesystem read-only [ 151.216278][ T6062] EXT4-fs error (device loop7): ext4_do_update_inode:5222: inode #12: comm syz.7.454: corrupted inode contents [ 151.241371][ T6069] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.267748][ T6062] EXT4-fs (loop7): Remounting filesystem read-only [ 151.280385][ T6069] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.288505][ T6069] device bridge_slave_0 entered promiscuous mode [ 151.316629][ T6062] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 151.367992][ T6062] EXT4-fs (loop7): Remounting filesystem read-only [ 151.379573][ T6078] chnl_net:caif_netlink_parms(): no params data found [ 151.393377][ T6069] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.410365][ T6062] EXT4-fs error (device loop7): ext4_do_update_inode:5222: inode #12: comm syz.7.454: corrupted inode contents [ 151.422635][ T6069] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.432696][ T6069] device bridge_slave_1 entered promiscuous mode [ 151.471692][ T6062] EXT4-fs (loop7): Remounting filesystem read-only [ 151.478224][ T6062] EXT4-fs error (device loop7): ext4_truncate:4279: inode #12: comm syz.7.454: mark_inode_dirty error [ 151.520777][ T6062] EXT4-fs (loop7): Remounting filesystem read-only [ 151.527419][ T6062] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem [ 151.537681][ T6069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.610252][ T6062] EXT4-fs (loop7): Remounting filesystem read-only [ 151.625245][ T6069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.628053][ T6062] EXT4-fs (loop7): 1 truncate cleaned up [ 151.655042][ T6078] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.662417][ T6062] EXT4-fs (loop7): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000800000,noblock_validity,jqfmt=vfsold,nodelalloc,errors=remount-ro,nomblk_io_submit,usrjquota=,mb_optimize_scan=0x0000000000000001,resgid=0x00000000000000002. Quota mode: writeback. [ 151.669598][ T6078] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.716554][ T6078] device bridge_slave_0 entered promiscuous mode [ 151.790182][ T6078] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.800538][ T6078] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.808496][ T6078] device bridge_slave_1 entered promiscuous mode [ 151.943034][ T6069] team0: Port device team_slave_0 added [ 151.999102][ T6069] team0: Port device team_slave_1 added [ 152.063555][ T6078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.127665][ T6078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.149002][ T6069] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.160427][ T6069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.190256][ T6069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.237920][ T6069] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.248223][ T6069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.283691][ T6069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.313936][ T6129] loop7: detected capacity change from 0 to 2048 [ 152.321557][ T6078] team0: Port device team_slave_0 added [ 152.353838][ T6078] team0: Port device team_slave_1 added [ 152.403252][ T6129] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 152.461525][ T4260] Bluetooth: hci1: command 0x0409 tx timeout [ 152.466729][ T6069] device hsr_slave_0 entered promiscuous mode [ 152.486697][ T6069] device hsr_slave_1 entered promiscuous mode [ 152.517125][ T6078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.532511][ T6078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.566220][ T6078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.627086][ T6078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.672597][ T6138] loop7: detected capacity change from 0 to 1024 [ 152.690405][ T6078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.747256][ T6078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.803938][ T4260] Bluetooth: hci4: command 0x0409 tx timeout [ 152.844075][ T6113] chnl_net:caif_netlink_parms(): no params data found [ 152.851963][ T6138] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 152.956944][ T6138] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:3887: comm syz.7.471: Allocating blocks 385-513 which overlap fs metadata [ 152.975179][ T6078] device hsr_slave_0 entered promiscuous mode [ 152.983618][ T6078] device hsr_slave_1 entered promiscuous mode [ 152.990699][ T6078] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 152.998266][ T6078] Cannot create hsr debugfs directory [ 153.136561][ T6137] EXT4-fs (loop7): pa ffff8880614b0620: logic 16, phys. 129, len 24 [ 153.145076][ T6137] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:4904: group 0, free 0, pa_free 8 [ 153.166390][ T6113] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.173732][ T6113] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.191419][ T6113] device bridge_slave_0 entered promiscuous mode [ 153.273615][ T6113] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.288433][ T6113] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.317372][ T6113] device bridge_slave_1 entered promiscuous mode [ 153.375964][ T6113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.407175][ T6113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.516416][ T6113] team0: Port device team_slave_0 added [ 153.539335][ T6113] team0: Port device team_slave_1 added [ 153.633060][ T6069] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 153.660983][ T6069] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 153.694484][ T6113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.710310][ T6113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.718391][ T6174] loop7: detected capacity change from 0 to 2048 [ 153.750400][ T4399] Bluetooth: hci3: command 0x0409 tx timeout [ 153.775085][ T6113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.799192][ T6174] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 153.808296][ T6069] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 153.835017][ T6069] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 153.868326][ T6113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.891056][ T6113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.087955][ T6113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.087120][ T5444] Bluetooth: hci1: command 0x041b tx timeout [ 155.094407][ T4260] Bluetooth: hci4: command 0x041b tx timeout [ 155.243089][ T818] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.259002][ T6113] device hsr_slave_0 entered promiscuous mode [ 155.267514][ T6113] device hsr_slave_1 entered promiscuous mode [ 155.277572][ T6113] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 155.285638][ T6113] Cannot create hsr debugfs directory [ 155.302979][ T6069] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.334301][ T818] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.428349][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 155.445020][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 155.480245][ T818] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.519593][ T6069] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.563357][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 155.574707][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 155.583580][ T4602] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.590672][ T4602] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.619178][ T818] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.633347][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 155.643011][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 155.661655][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 155.670764][ T4602] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.677825][ T4602] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.686088][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 155.695378][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 155.715704][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 155.731622][ T6210] loop7: detected capacity change from 0 to 512 [ 155.739545][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 155.748914][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 155.806259][ T6069] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 155.818977][ T6069] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 155.832649][ T5444] Bluetooth: hci3: command 0x041b tx timeout [ 155.835991][ T5973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 155.869998][ T5973] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 155.893632][ T5973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 155.902388][ T5973] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 155.910978][ T5973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 155.919534][ T5973] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 155.960490][ T5973] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 156.037274][ T6210] EXT4-fs (loop7): mounted filesystem without journal. Opts: nombcache,barrier,journal_dev=0x00000000460b8000,,errors=continue. Quota mode: writeback. [ 156.080959][ T6210] ext4 filesystem being mounted at /32/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 156.135590][ T26] audit: type=1800 audit(1771956399.802:13): pid=6210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.485" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 156.172786][ T818] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.267004][ T818] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.297342][ T6069] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.305262][ T5973] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 156.313230][ T5973] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 156.350195][ T818] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.437234][ T818] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.577534][ T5973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 156.591253][ T5973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 156.626786][ T6078] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 156.684367][ T6078] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 156.777946][ T818] tipc: Left network mode [ 156.784244][ T6250] loop8: detected capacity change from 0 to 512 [ 156.837882][ T5973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 156.859497][ T6250] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 156.875605][ T6250] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.898052][ T5973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 156.974666][ T6078] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 156.987859][ T6251] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.004494][ T6251] device bridge_slave_1 left promiscuous mode [ 157.014649][ T6251] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.036552][ T6069] device veth0_vlan entered promiscuous mode [ 157.070569][ T26] audit: type=1326 audit(1771956400.732:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6254 comm="syz.8.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a71a5b629 code=0x7ffc0000 [ 157.110618][ T4230] Bluetooth: hci1: command 0x040f tx timeout [ 157.116732][ T26] audit: type=1326 audit(1771956400.762:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6254 comm="syz.8.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3a71a5b629 code=0x7ffc0000 [ 157.140939][ T5973] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 157.156863][ T5973] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 157.164446][ T26] audit: type=1326 audit(1771956400.762:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6254 comm="syz.8.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a71a5b629 code=0x7ffc0000 [ 157.187565][ T4230] Bluetooth: hci4: command 0x040f tx timeout [ 157.206801][ T26] audit: type=1326 audit(1771956400.762:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6254 comm="syz.8.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3a71a5b629 code=0x7ffc0000 [ 157.208924][ T6078] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 157.292827][ T6069] device veth1_vlan entered promiscuous mode [ 157.299387][ T26] audit: type=1326 audit(1771956400.962:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6254 comm="syz.8.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a71a5b629 code=0x7ffc0000 [ 157.323355][ T26] audit: type=1326 audit(1771956400.992:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6254 comm="syz.8.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a71a5b629 code=0x7ffc0000 [ 157.429936][ T6265] loop7: detected capacity change from 0 to 128 [ 157.463533][ T6069] device veth0_macvtap entered promiscuous mode [ 157.485872][ T6265] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 157.506294][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 157.529995][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 157.568794][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 157.586317][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 157.612605][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 157.702063][ T6069] device veth1_macvtap entered promiscuous mode [ 157.828353][ T6069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.840648][ T6069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.850743][ T6069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.862198][ T6069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.878976][ T6069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.906536][ T6069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.910502][ T5442] Bluetooth: hci3: command 0x040f tx timeout [ 157.932843][ T6069] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.949520][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 157.964639][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 157.999976][ T6069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.012384][ T6069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.036504][ T6069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.047180][ T6069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.071314][ T6069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.082019][ T6069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.095421][ T6069] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.113754][ T4602] Bluetooth: hci5: Frame reassembly failed (-84) [ 158.136664][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 158.145638][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 158.157379][ T6069] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.167028][ T6069] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.175790][ T6069] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.184889][ T6069] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.216283][ T6078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.248103][ T6113] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 158.277013][ T6113] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 158.288491][ T6113] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 158.321597][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 158.329337][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 158.346648][ T6113] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 158.358003][ T6078] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.417303][ T6078] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 158.444010][ T6078] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 158.469210][ T5502] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.496743][ T5502] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.506283][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 158.523925][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 158.539319][ T4486] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.546447][ T4486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.564660][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 158.585218][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 158.598026][ T4486] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.605154][ T4486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.614622][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 158.624627][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 158.633917][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 158.643862][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 158.660051][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 158.688607][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 158.717403][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 158.728266][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 158.737217][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 158.745803][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 158.754321][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 158.790861][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 158.802991][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 158.821665][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 158.886574][ T4481] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.892635][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 158.904651][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 158.925140][ T4481] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.933573][ T6078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.969031][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 159.027200][ T6113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.082641][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 159.097166][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 159.157770][ T6113] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.190902][ T4230] Bluetooth: hci1: command 0x0419 tx timeout [ 159.215030][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 159.239903][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 159.270627][ T4230] Bluetooth: hci4: command 0x0419 tx timeout [ 159.279666][ T4602] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.286820][ T4602] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.305141][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 159.345201][ T5973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 159.371322][ T5973] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 159.394225][ T5973] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.401394][ T5973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.418585][ T5973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 159.441591][ T5973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 159.468196][ T5973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 159.489025][ T5973] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 159.557957][ T5973] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 159.646327][ T5973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 159.675641][ T5973] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 159.717508][ T5973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 159.736120][ T5973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 159.761086][ T5973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 159.780243][ T5973] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 159.789013][ T5973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 159.807843][ T5973] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 159.841789][ T6113] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 159.884937][ T5502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 159.895562][ T5502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 159.945257][ T6078] device veth0_vlan entered promiscuous mode [ 159.959553][ T5502] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 159.972074][ T5502] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 159.990678][ T5442] Bluetooth: hci3: command 0x0419 tx timeout [ 160.049425][ T818] device hsr_slave_0 left promiscuous mode [ 160.065219][ T818] device hsr_slave_1 left promiscuous mode [ 160.085212][ T818] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.108600][ T818] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.134452][ T818] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.143017][ T4229] Bluetooth: hci5: command 0x1003 tx timeout [ 160.149159][ T4187] Bluetooth: hci5: sending frame failed (-49) [ 160.166295][ T818] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.176278][ T818] device bridge_slave_1 left promiscuous mode [ 160.182912][ T818] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.195889][ T818] device bridge_slave_0 left promiscuous mode [ 160.210453][ T818] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.223751][ T818] device hsr_slave_0 left promiscuous mode [ 160.230129][ T818] device hsr_slave_1 left promiscuous mode [ 160.243866][ T818] device veth1_macvtap left promiscuous mode [ 160.249982][ T818] device veth0_macvtap left promiscuous mode [ 160.256614][ T818] device veth1_vlan left promiscuous mode [ 160.262544][ T818] device veth0_vlan left promiscuous mode [ 160.271885][ T818] device veth1_macvtap left promiscuous mode [ 160.285005][ T818] device veth0_macvtap left promiscuous mode [ 160.297202][ T818] device veth1_vlan left promiscuous mode [ 160.310121][ T818] device veth0_vlan left promiscuous mode [ 160.478680][ T6335] loop9: detected capacity change from 0 to 1024 [ 160.592200][ T6335] EXT4-fs (loop9): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 160.633055][ T6334] loop8: detected capacity change from 0 to 8192 [ 160.652847][ T6335] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.668534][ T6334] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 160.765125][ T818] team0 (unregistering): Port device team_slave_1 removed [ 160.810514][ T818] team0 (unregistering): Port device team_slave_0 removed [ 160.884648][ T818] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.049892][ T818] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.175606][ T818] bond0 (unregistering): Released all slaves [ 161.437876][ T818] bond0 (unregistering): Released all slaves [ 161.498452][ T6078] device veth1_vlan entered promiscuous mode [ 161.510016][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 161.538575][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 161.556454][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 161.585192][ T6113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.630904][ T6078] device veth0_macvtap entered promiscuous mode [ 161.638948][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 161.649295][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 161.696875][ T6078] device veth1_macvtap entered promiscuous mode [ 161.760488][ T6378] netlink: 12 bytes leftover after parsing attributes in process `syz.8.526'. [ 161.864860][ T6385] loop9: detected capacity change from 0 to 8192 [ 161.883337][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 161.901161][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 161.935015][ T6078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.976690][ T6078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.015979][ T6078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.041399][ T6078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.078370][ T6078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.099322][ T6078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.115890][ T6078] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.133553][ T6389] device macvlan2 entered promiscuous mode [ 162.152481][ T6389] bond1: (slave macvlan2): Opening slave failed [ 162.202864][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 162.241364][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 162.250004][ T4230] Bluetooth: hci5: command 0x1001 tx timeout [ 162.257007][ T4187] Bluetooth: hci5: sending frame failed (-49) [ 162.269147][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 162.280391][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 162.304409][ T6078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.324901][ T6078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.345097][ T6078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.366282][ T6406] loop9: detected capacity change from 0 to 128 [ 162.368294][ T6078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.398393][ T6078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.399022][ T6406] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 162.419068][ T6078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.445250][ T6078] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.489282][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 162.505185][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 162.559464][ T6413] netlink: 16 bytes leftover after parsing attributes in process `syz.8.531'. [ 162.564442][ T6078] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.596947][ T6078] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.617150][ T6078] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.630096][ T6078] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.713607][ T6113] device veth0_vlan entered promiscuous mode [ 162.758080][ T5502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 162.777871][ T5502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 162.846420][ T5502] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 162.880994][ T5502] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 163.008008][ T6113] device veth1_vlan entered promiscuous mode [ 163.158684][ T5502] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 163.181226][ T5502] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 163.196983][ T5502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 163.203634][ T6433] ieee802154 phy0 wpan0: encryption failed: -22 [ 163.216556][ T5502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 163.245162][ T5502] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.272573][ T5502] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.293568][ T5502] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 163.310238][ T6438] loop8: detected capacity change from 0 to 512 [ 163.318350][ T6113] device veth0_macvtap entered promiscuous mode [ 163.355288][ T6113] device veth1_macvtap entered promiscuous mode [ 163.385621][ T4541] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.401615][ T4541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.442846][ T6113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.454710][ T6438] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 163.479593][ T6113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.498948][ T6438] EXT4-fs (loop8): orphan cleanup on readonly fs [ 163.502000][ T6113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.516565][ T6113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.527474][ T6113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.538248][ T6438] EXT4-fs warning (device loop8): ext4_enable_quotas:6486: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 163.548135][ T6113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.563001][ T6113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.573581][ T6113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.589608][ T6113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.597541][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 163.610093][ T6438] EXT4-fs (loop8): Cannot turn on quotas: error -22 [ 163.622416][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 163.636640][ T6438] EXT4-fs error (device loop8): ext4_ext_check_inode:501: inode #13: comm syz.8.537: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 163.651517][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 163.662913][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 163.671725][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 163.686167][ T6438] EXT4-fs error (device loop8): ext4_orphan_get:1405: comm syz.8.537: couldn't read orphan inode 13 (err -117) [ 163.702114][ T6113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.714719][ T6438] EXT4-fs (loop8): mounted filesystem without journal. Opts: sysvgroups,noblock_validity,min_batch_time=0x000000000000082f,grpquota,debug,journal_dev=0x0000000000000001,grpid,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 163.791340][ T6438] EXT4-fs (loop8): shut down requested (0) [ 163.818642][ T6113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.861264][ T6113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.883428][ T6113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.894417][ T6113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.905461][ T6113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.915400][ T6113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.925907][ T6113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.938756][ T6113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.960136][ T6113] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.969463][ T6113] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.984792][ T6113] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.995308][ T6113] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.100496][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 164.138369][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 164.302685][ T4230] Bluetooth: hci5: command 0x1009 tx timeout [ 164.344775][ T4486] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.369565][ T4486] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.439841][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 164.516577][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.540528][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.580588][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 164.583445][ T6472] loop4: detected capacity change from 0 to 764 [ 164.773618][ T6480] loop3: detected capacity change from 0 to 128 [ 165.118116][ T6493] netlink: 8 bytes leftover after parsing attributes in process `syz.9.547'. [ 165.839133][ T6514] loop3: detected capacity change from 0 to 512 [ 166.639144][ T6514] EXT4-fs error (device loop3): __ext4_iget:4912: inode #15: block 1803188595: comm syz.3.554: invalid block [ 166.656084][ T6514] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.554: couldn't read orphan inode 15 (err -117) [ 166.700735][ T6514] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 166.918771][ T6536] loop4: detected capacity change from 0 to 1024 [ 166.993554][ T6544] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 167.012863][ T6542] mip6: mip6_rthdr_init_state: spi is not 0: 224 [ 167.062951][ T6536] EXT4-fs (loop4): Ignoring removed orlov option [ 167.069367][ T6536] EXT4-fs (loop4): Ignoring removed nobh option [ 167.187584][ T6536] EXT4-fs (loop4): mounted filesystem without journal. Opts: data_err=ignore,errors=remount-ro,sysvgroups,norecovery,nodioread_nolock,orlov,nogrpid,noauto_da_alloc,nobh,. Quota mode: none. [ 167.212441][ T6556] loop3: detected capacity change from 0 to 128 [ 167.641405][ T26] audit: type=1800 audit(1771956411.302:20): pid=6536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.559" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 167.767529][ T6569] loop3: detected capacity change from 0 to 512 [ 167.857268][ T6569] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 167.923713][ T6569] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.568: invalid indirect mapped block 4294967295 (level 1) [ 167.956955][ T6569] EXT4-fs (loop3): Remounting filesystem read-only [ 168.000773][ T6569] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.568: invalid indirect mapped block 4294967295 (level 1) [ 168.023837][ T6569] EXT4-fs (loop3): Remounting filesystem read-only [ 168.031824][ T6569] EXT4-fs (loop3): 2 truncates cleaned up [ 168.037825][ T6569] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,min_batch_time=0x0000000000000009,dioread_nolock,auto_da_alloc=0x000000007fffffff,. Quota mode: writeback. [ 168.150738][ T6569] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.568: bg 0: block 5: invalid block bitmap [ 168.215766][ T6569] EXT4-fs (loop3): Remounting filesystem read-only [ 169.140159][ T6610] loop8: detected capacity change from 0 to 128 [ 169.155747][ T26] audit: type=1326 audit(1771956412.822:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6609 comm="syz.7.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f3a9ab629 code=0x7ffc0000 [ 169.210641][ T26] audit: type=1326 audit(1771956412.822:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6609 comm="syz.7.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f3a9ab629 code=0x7ffc0000 [ 169.278478][ T26] audit: type=1326 audit(1771956412.822:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6609 comm="syz.7.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f3a9ab629 code=0x7ffc0000 [ 169.580632][ T26] audit: type=1326 audit(1771956412.822:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6609 comm="syz.7.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f2f3a9ab629 code=0x7ffc0000 [ 169.672723][ T26] audit: type=1326 audit(1771956412.822:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6609 comm="syz.7.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f3a9ab629 code=0x7ffc0000 [ 169.745156][ T6627] IPv6: ADDRCONF(NETDEV_CHANGE): ipip0: link becomes ready [ 169.797589][ T6627] IPv6: ADDRCONF(NETDEV_CHANGE): ipip0: link becomes ready [ 169.959014][ T26] audit: type=1326 audit(1771956412.822:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6609 comm="syz.7.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f3a9ab629 code=0x7ffc0000 [ 169.988854][ T6639] netlink: 12 bytes leftover after parsing attributes in process `syz.8.587'. [ 170.025706][ T26] audit: type=1326 audit(1771956412.822:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6609 comm="syz.7.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f3a9ab629 code=0x7ffc0000 [ 170.128778][ T26] audit: type=1326 audit(1771956412.822:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6609 comm="syz.7.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f3a9ab629 code=0x7ffc0000 [ 170.183275][ T6651] loop3: detected capacity change from 0 to 1024 [ 170.193058][ T6649] loop8: detected capacity change from 0 to 512 [ 170.213095][ T6653] loop7: detected capacity change from 0 to 128 [ 170.217107][ T26] audit: type=1326 audit(1771956412.822:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6609 comm="syz.7.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7f2f3a9ab629 code=0x7ffc0000 [ 170.247508][ T6651] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 170.265265][ T6651] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 170.282093][ T6651] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 170.304531][ T6651] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e054c018, mo2=0002] [ 170.405776][ T6651] System zones: 0-1, 3-36 [ 170.436226][ T6651] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,sysvgroups,nomblk_io_submit,bsddf,dioread_nolock,jqfmt=vfsv0,debug,errors=continue,,errors=continue. Quota mode: writeback. [ 170.473882][ T6649] EXT4-fs warning (device loop8): ext4_enable_quotas:6486: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 170.499888][ T6651] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: writeback. [ 170.524312][ T6649] EXT4-fs (loop8): mount failed [ 172.555911][ T6703] loop7: detected capacity change from 0 to 8192 [ 172.567322][ T6708] ucma_write: process 35 (syz.3.610) changed security contexts after opening file descriptor, this is not allowed. [ 172.576717][ T6710] loop9: detected capacity change from 0 to 512 [ 172.651800][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 172.651813][ T26] audit: type=1326 audit(1771956416.322:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6712 comm="syz.3.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ee20f629 code=0x7ffc0000 [ 172.706224][ T6710] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 172.708370][ T5379] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1) [ 172.725872][ T6710] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 172.773023][ T6710] EXT4-fs error (device loop9): ext4_do_update_inode:5222: inode #2: comm syz.9.611: corrupted inode contents [ 172.808863][ T26] audit: type=1326 audit(1771956416.352:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6712 comm="syz.3.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f92ee20f629 code=0x7ffc0000 [ 172.831962][ T26] audit: type=1326 audit(1771956416.352:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6712 comm="syz.3.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ee20f629 code=0x7ffc0000 [ 172.858217][ T26] audit: type=1326 audit(1771956416.352:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6712 comm="syz.3.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ee20f629 code=0x7ffc0000 [ 172.881383][ T26] audit: type=1326 audit(1771956416.352:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6712 comm="syz.3.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f92ee20f629 code=0x7ffc0000 [ 172.885203][ T5379] FAT-fs (loop7): Filesystem has been set read-only [ 172.903903][ T26] audit: type=1326 audit(1771956416.352:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6712 comm="syz.3.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ee20f629 code=0x7ffc0000 [ 172.915680][ T6710] EXT4-fs error (device loop9): ext4_dirty_inode:6058: inode #2: comm syz.9.611: mark_inode_dirty error [ 172.990852][ T26] audit: type=1326 audit(1771956416.352:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6712 comm="syz.3.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ee20f629 code=0x7ffc0000 [ 173.064781][ T6710] EXT4-fs error (device loop9): ext4_do_update_inode:5222: inode #2: comm syz.9.611: corrupted inode contents [ 173.103632][ T6710] EXT4-fs error (device loop9): __ext4_ext_dirty:183: inode #2: comm syz.9.611: mark_inode_dirty error [ 173.150634][ T6723] loop8: detected capacity change from 0 to 4096 [ 173.294693][ T6723] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 173.452816][ T26] audit: type=1800 audit(1771956417.122:44): pid=6723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.616" name="file0" dev="loop8" ino=13 res=0 errno=0 [ 173.646404][ T6762] loop9: detected capacity change from 0 to 1024 [ 173.686442][ T6758] loop4: detected capacity change from 0 to 2048 [ 173.811179][ T6762] EXT4-fs (loop9): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,errors=remount-ro,auto_da_alloc,nodioread_nolock,. Quota mode: none. [ 173.848668][ T6774] loop8: detected capacity change from 0 to 512 [ 173.897102][ T6762] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.912007][ T6758] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,noinit_itable,i_version,init_itable,resgid=0x0000000000000000,,errors=continue. Quota mode: none. [ 173.931535][ T6758] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.999464][ T6762] EXT4-fs error (device loop9): ext4_map_blocks:739: inode #15: block 3: comm syz.9.624: lblock 3 mapped to illegal pblock 3 (length 3) [ 174.053467][ T6774] EXT4-fs (loop8): Ignoring removed oldalloc option [ 174.060170][ T6774] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 174.113721][ T6762] EXT4-fs (loop9): Remounting filesystem read-only [ 174.263345][ T6774] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c018, mo2=0002] [ 174.272481][ T6774] System zones: 1-12 [ 174.296521][ T6774] EXT4-fs error (device loop8): ext4_iget_extra_inode:4566: inode #11: comm syz.8.623: corrupted in-inode xattr [ 174.345415][ T6774] EXT4-fs error (device loop8): ext4_orphan_get:1405: comm syz.8.623: couldn't read orphan inode 11 (err -117) [ 174.386498][ T6774] EXT4-fs (loop8): mounted filesystem without journal. Opts: debug,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,grpquota,block_validity,,errors=continue. Quota mode: writeback. [ 175.273036][ T6843] netlink: 48 bytes leftover after parsing attributes in process `syz.8.640'. [ 176.198442][ T6855] loop8: detected capacity change from 0 to 128 [ 176.322674][ T6858] device syzkaller0 entered promiscuous mode [ 176.811063][ T6875] netlink: 16 bytes leftover after parsing attributes in process `syz.8.649'. [ 176.847776][ T6875] device syzkaller0 entered promiscuous mode [ 176.866031][ T6877] loop4: detected capacity change from 0 to 512 [ 177.029965][ T6877] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,quota,quota,bsddf,dioread_lock,,errors=continue. Quota mode: writeback. [ 177.130533][ T6877] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 177.310715][ T26] audit: type=1800 audit(1771956420.912:45): pid=6895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.650" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 178.854859][ T6922] loop4: detected capacity change from 0 to 1024 [ 178.997558][ T6922] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,errors=remount-ro,auto_da_alloc,nodioread_nolock,. Quota mode: none. [ 179.042048][ T6922] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.098392][ T6935] netlink: 76 bytes leftover after parsing attributes in process `syz.7.660'. [ 179.159158][ T6938] program syz.7.660 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 179.204077][ T6922] EXT4-fs error (device loop4): ext4_map_blocks:739: inode #15: block 3: comm syz.4.657: lblock 3 mapped to illegal pblock 3 (length 3) [ 179.230758][ T6922] EXT4-fs (loop4): Remounting filesystem read-only [ 179.252783][ T6940] EXT4-fs error (device loop4): ext4_map_blocks:739: inode #15: block 8: comm syz.4.657: lblock 8 mapped to illegal pblock 8 (length 8) [ 179.320567][ T6940] EXT4-fs (loop4): Remounting filesystem read-only [ 179.702739][ T6947] loop3: detected capacity change from 0 to 8192 [ 180.140467][ T26] audit: type=1800 audit(1771956423.782:46): pid=6947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.662" name="bus" dev="loop3" ino=1048770 res=0 errno=0 [ 180.224309][ T26] audit: type=1804 audit(1771956423.782:47): pid=6947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.662" name="/newroot/28/file0/bus" dev="loop3" ino=1048770 res=1 errno=0 [ 180.304536][ T6968] loop4: detected capacity change from 0 to 4096 [ 180.360585][ T5442] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 180.364645][ T6968] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 180.453249][ T6971] loop3: detected capacity change from 0 to 512 [ 180.529264][ T26] audit: type=1800 audit(1771956424.192:48): pid=6952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.661" name="file0" dev="loop4" ino=13 res=0 errno=0 [ 180.610451][ T5442] usb 8-1: Using ep0 maxpacket: 16 [ 180.648283][ T6971] EXT4-fs (loop3): Ignoring removed oldalloc option [ 180.682589][ T6971] EXT4-fs (loop3): 1 truncate cleaned up [ 180.688274][ T6971] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,bsdgroups,lazytime,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback. [ 180.890528][ T5442] usb 8-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 180.899607][ T5442] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.938160][ T5442] usb 8-1: config 0 descriptor?? [ 181.152784][ T5442] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected [ 181.380532][ T5442] usb 8-1: Detected FT232BM [ 181.694757][ T6999] loop4: detected capacity change from 0 to 1024 [ 181.750055][ T6999] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 181.777449][ T6999] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 182.050755][ T6999] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 182.065787][ T6999] EXT4-fs (loop4): orphan cleanup on readonly fs [ 182.081694][ T6999] EXT4-fs error (device loop4): ext4_read_inode_bitmap:168: comm syz.4.668: Inode bitmap for bg 0 marked uninitialized [ 182.102448][ T6999] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000006,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 182.132470][ T6964] loop7: detected capacity change from 0 to 512 [ 182.182061][ T7004] loop8: detected capacity change from 0 to 1024 [ 182.392497][ T6964] EXT4-fs (loop7): 1 truncate cleaned up [ 182.393064][ T7004] EXT4-fs (loop8): inline encryption not supported [ 182.414599][ T6964] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 182.425483][ T7004] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 182.474958][ T6964] xt_hashlimit: size too large, truncated to 1048576 [ 182.563889][ T7004] EXT4-fs (loop8): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,noauto_da_alloc,data_err=ignore,nojournal_checksum,errors=remount-ro,grpquota,noblock_validity,user_xattr,noauto_da_alloc,errors=remount-ro,. Quota mode: writeback. [ 182.958266][ T5442] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 183.510455][ T7009] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 184.648844][ T7072] netlink: 4 bytes leftover after parsing attributes in process `syz.4.684'. [ 184.676386][ T7072] device syz_tun entered promiscuous mode [ 184.688327][ T7072] device macvtap1 entered promiscuous mode [ 184.747208][ T7072] device syz_tun left promiscuous mode [ 185.865232][ T7112] loop8: detected capacity change from 0 to 164 [ 187.069668][ T7133] sctp: [Deprecated]: syz.8.698 (pid 7133) Use of struct sctp_assoc_value in delayed_ack socket option. [ 187.069668][ T7133] Use struct sctp_sack_info instead [ 187.973371][ T7170] netlink: 40 bytes leftover after parsing attributes in process `syz.3.702'. [ 188.038457][ T4227] usb 8-1: USB disconnect, device number 2 [ 188.072778][ T4227] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 188.126593][ T4227] ftdi_sio 8-1:0.0: device disconnected [ 188.174940][ T7174] loop7: detected capacity change from 0 to 512 [ 188.257462][ T7174] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 188.284922][ T7174] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.326892][ T7174] EXT4-fs (loop7): shut down requested (1) [ 189.773410][ T7211] loop4: detected capacity change from 0 to 512 [ 189.904084][ T7211] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,quota,quota,bsddf,dioread_lock,,errors=continue. Quota mode: writeback. [ 189.945677][ T7211] ext4 filesystem being mounted at /33/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 190.095640][ T26] audit: type=1800 audit(1771956433.762:49): pid=7233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.712" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 190.196171][ T26] audit: type=1800 audit(1771956433.822:50): pid=7233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.712" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 190.321421][ T26] audit: type=1326 audit(1771956433.932:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7234 comm="syz.8.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a71a5b629 code=0x7ffc0000 [ 190.435650][ T26] audit: type=1326 audit(1771956433.932:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7234 comm="syz.8.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a71a5b629 code=0x7ffc0000 [ 190.462371][ T7242] xt_hashlimit: size too large, truncated to 1048576 [ 190.480781][ T26] audit: type=1326 audit(1771956433.942:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7234 comm="syz.8.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7f3a71a5b629 code=0x7ffc0000 [ 190.549360][ T26] audit: type=1326 audit(1771956433.942:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7234 comm="syz.8.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a71a5b629 code=0x7ffc0000 [ 190.579839][ T26] audit: type=1326 audit(1771956433.942:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7234 comm="syz.8.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a71a5b629 code=0x7ffc0000 [ 191.504269][ T7276] device syzkaller0 entered promiscuous mode [ 194.143858][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.150215][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.247719][ T7333] device gretap0 entered promiscuous mode [ 194.309348][ T7309] chnl_net:caif_netlink_parms(): no params data found [ 194.462506][ T7338] loop3: detected capacity change from 0 to 128 [ 194.521698][ T7309] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.538205][ T7309] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.547125][ T7309] device bridge_slave_0 entered promiscuous mode [ 194.555719][ T7309] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.562917][ T7309] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.571008][ T7309] device bridge_slave_1 entered promiscuous mode [ 194.593695][ T7309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.605034][ T7309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.031667][ T1325] Bluetooth: hci5: command 0x0409 tx timeout [ 195.096949][ T7309] team0: Port device team_slave_0 added [ 195.180641][ T7309] team0: Port device team_slave_1 added [ 195.306276][ T7350] loop7: detected capacity change from 0 to 512 [ 195.340508][ T7309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.357701][ T7309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.420414][ T7350] EXT4-fs (loop7): Ignoring removed oldalloc option [ 195.481226][ T7350] EXT4-fs (loop7): 1 truncate cleaned up [ 195.486963][ T7350] EXT4-fs (loop7): mounted filesystem without journal. Opts: quota,bsdgroups,lazytime,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback. [ 195.546315][ T7309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.828049][ T7309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.850581][ T7309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.950361][ T7309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.057769][ T7366] Process accounting resumed [ 196.087292][ T7309] device hsr_slave_0 entered promiscuous mode [ 196.126393][ T7309] device hsr_slave_1 entered promiscuous mode [ 196.146057][ T7309] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 196.171550][ T7309] Cannot create hsr debugfs directory [ 196.246334][ T7371] loop7: detected capacity change from 0 to 512 [ 196.377211][ T7371] EXT4-fs (loop7): Ignoring removed nobh option [ 196.520602][ T7371] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,nobh,,errors=continue. Quota mode: writeback. [ 196.549860][ T7371] ext4 filesystem being mounted at /86/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 196.648326][ T7371] EXT4-fs error (device loop7): __ext4_new_inode:1076: comm syz.7.741: reserved inode found cleared - inode=1 [ 197.100552][ T4228] Bluetooth: hci5: command 0x041b tx timeout [ 197.253129][ T7309] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 197.276376][ T7309] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 197.323269][ T7309] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 197.371469][ T7309] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 197.529716][ T7309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.591518][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 197.603210][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 197.629622][ T7309] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.663364][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 197.682996][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 197.742311][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.749451][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.817525][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 197.846464][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 197.865674][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 197.890590][ T4602] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.897712][ T4602] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.942372][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 198.028507][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 198.037832][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 198.082699][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 198.111875][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 198.163940][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 198.179539][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 198.219936][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 198.230245][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 198.249597][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 198.258632][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 198.295325][ T7309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 198.430470][ T7442] netlink: 'syz.8.756': attribute type 1 has an invalid length. [ 198.567693][ T7447] loop8: detected capacity change from 0 to 1024 [ 198.659949][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 198.677791][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 198.698601][ T7447] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpjquota=,errors=remount-ro,noquota,delalloc,journal_dev=0x0000000000000008,grpjquota=,. Quota mode: none. [ 198.745772][ T7309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.770532][ T7447] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.889102][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 198.922367][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 198.982640][ T7461] loop7: detected capacity change from 0 to 512 [ 199.001944][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 199.033198][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 199.089604][ T7309] device veth0_vlan entered promiscuous mode [ 199.113227][ T7461] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 199.158842][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 199.171886][ T7461] EXT4-fs (loop7): orphan cleanup on readonly fs [ 199.179946][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 199.187266][ T4229] Bluetooth: hci5: command 0x040f tx timeout [ 199.199521][ T7461] Quota error (device loop7): v2_read_file_info: Free block number too big (0 >= 0). [ 199.235370][ T7461] EXT4-fs warning (device loop7): ext4_enable_quotas:6486: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 199.259640][ T7461] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 199.267747][ T7309] device veth1_vlan entered promiscuous mode [ 199.300197][ T7461] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.759: bg 0: block 40: padding at end of block bitmap is not set [ 199.327804][ T7461] EXT4-fs (loop7): Remounting filesystem read-only [ 199.339789][ T7461] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 199.366720][ T7461] EXT4-fs (loop7): Remounting filesystem read-only [ 199.397532][ T7461] EXT4-fs (loop7): 1 truncate cleaned up [ 199.416410][ T7461] EXT4-fs (loop7): mounted filesystem without journal. Opts: bsddf,errors=remount-ro,errors=remount-ro,noinit_itable,. Quota mode: writeback. [ 199.535141][ T5973] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 199.559519][ T5973] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 199.862233][ T5973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 199.902716][ T5973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 200.058961][ T7481] mmap: syz.7.762 (7481) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 200.484093][ T7309] device veth0_macvtap entered promiscuous mode [ 200.760662][ T7309] device veth1_macvtap entered promiscuous mode [ 200.886985][ T7490] netlink: 4 bytes leftover after parsing attributes in process `syz.4.765'. [ 200.887359][ T7309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.947814][ T7309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.978083][ T7309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.996133][ T7309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.019875][ T7309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.058297][ T7309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.083986][ T7309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.105707][ T7309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.124377][ T7309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.142563][ T7309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.159886][ T7309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.172371][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 201.184323][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 201.198523][ T7309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.252184][ T7309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.262194][ T13] Bluetooth: hci5: command 0x0419 tx timeout [ 201.310706][ T7309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.329982][ T7309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.346604][ T7309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.365730][ T7309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.380527][ T7309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.393262][ T7309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.408345][ T7309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.419073][ T7309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.430910][ T7309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.451313][ T818] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 201.468713][ T818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 201.516570][ T7309] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.532408][ T7309] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.550067][ T7309] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.567734][ T7309] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.743034][ T818] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.778087][ T818] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.818635][ T5973] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 201.838300][ T5973] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.856238][ T5973] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.880597][ T818] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 201.979673][ T7524] netlink: 16 bytes leftover after parsing attributes in process `syz.1.724'. [ 202.014847][ T7524] device syzkaller0 entered promiscuous mode [ 202.286957][ T7535] loop7: detected capacity change from 0 to 128 [ 202.397951][ T7539] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 202.797132][ T7548] IPVS: Unknown mcast interface: bond0 [ 202.822801][ T7550] loop4: detected capacity change from 0 to 128 [ 204.545065][ T7594] loop7: detected capacity change from 0 to 128 [ 204.563466][ T7596] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 204.563466][ T7596] The task syz.8.786 (7596) triggered the difference, watch for misbehavior. [ 204.758269][ T7594] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 204.820578][ T7594] ext4 filesystem being mounted at /99/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 205.198353][ T7606] loop7: detected capacity change from 0 to 256 [ 206.345642][ T7622] cgroup: No subsys list or none specified [ 206.502600][ T7627] netlink: 16 bytes leftover after parsing attributes in process `syz.7.794'. [ 206.564587][ T7627] device syzkaller0 entered promiscuous mode [ 207.537536][ T7666] loop4: detected capacity change from 0 to 128 [ 207.651561][ T7671] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 209.056855][ T7691] loop8: detected capacity change from 0 to 512 [ 209.083183][ T7693] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 209.177366][ T7691] EXT4-fs error (device loop8): ext4_orphan_get:1400: inode #15: comm syz.8.809: inode has both inline data and extents flags [ 209.379384][ T7691] EXT4-fs error (device loop8): ext4_orphan_get:1405: comm syz.8.809: couldn't read orphan inode 15 (err -117) [ 209.395849][ T7691] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 209.697062][ T7709] device syzkaller0 entered promiscuous mode [ 210.269996][ T7716] loop3: detected capacity change from 0 to 512 [ 210.488456][ T7716] FAT-fs (loop3): Directory bread(block 199916) failed [ 210.507131][ T7716] FAT-fs (loop3): Directory bread(block 199917) failed [ 210.570519][ T7716] FAT-fs (loop3): Directory bread(block 199918) failed [ 210.577431][ T7716] FAT-fs (loop3): Directory bread(block 199919) failed [ 210.635205][ T7716] FAT-fs (loop3): Directory bread(block 199920) failed [ 210.709381][ T7716] FAT-fs (loop3): Directory bread(block 199921) failed [ 210.775038][ T7716] FAT-fs (loop3): Directory bread(block 199922) failed [ 210.810870][ T7716] FAT-fs (loop3): Directory bread(block 199923) failed [ 211.511345][ T7716] FAT-fs (loop3): Directory bread(block 199916) failed [ 211.562687][ T7716] FAT-fs (loop3): Directory bread(block 199917) failed [ 211.591888][ T7735] loop8: detected capacity change from 0 to 512 [ 211.703491][ T7735] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 211.753782][ T7742] loop4: detected capacity change from 0 to 4096 [ 211.770499][ T7735] ext4 filesystem being mounted at /138/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 211.799268][ T7752] netlink: 52 bytes leftover after parsing attributes in process `syz.1.827'. [ 212.146352][ T7742] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 212.513505][ T7735] EXT4-fs error (device loop8): ext4_map_blocks:629: inode #2: block 18: comm syz.8.821: lblock 23 mapped to illegal pblock 18 (length 1) [ 212.549523][ T26] audit: type=1800 audit(1771956456.212:56): pid=7742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.822" name="file0" dev="loop4" ino=13 res=0 errno=0 [ 212.595962][ T7735] EXT4-fs error (device loop8): ext4_readdir:263: inode #2: block 3: comm syz.8.821: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 212.853455][ T7761] loop1: detected capacity change from 0 to 2048 [ 213.820253][ T7735] EXT4-fs error (device loop8): ext4_readdir:263: inode #2: block 12: comm syz.8.821: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 213.924753][ T7735] EXT4-fs error (device loop8): ext4_readdir:263: inode #2: block 13: comm syz.8.821: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 213.969274][ T7735] EXT4-fs error (device loop8): ext4_readdir:263: inode #2: block 14: comm syz.8.821: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 214.282407][ T7797] netlink: 64 bytes leftover after parsing attributes in process `syz.3.838'. [ 214.535980][ T7800] loop8: detected capacity change from 0 to 4096 [ 214.555842][ T26] audit: type=1326 audit(1771956458.222:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7804 comm="syz.4.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dd94a2629 code=0x7ffc0000 [ 215.084483][ T7800] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 215.105927][ T26] audit: type=1326 audit(1771956458.242:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7804 comm="syz.4.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dd94a2629 code=0x7ffc0000 [ 215.150449][ T26] audit: type=1326 audit(1771956458.262:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7804 comm="syz.4.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dd94a2629 code=0x7ffc0000 [ 215.190407][ T26] audit: type=1326 audit(1771956458.262:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7804 comm="syz.4.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dd94a2629 code=0x7ffc0000 [ 215.327121][ T26] audit: type=1326 audit(1771956458.262:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7804 comm="syz.4.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f6dd94a2629 code=0x7ffc0000 [ 215.515663][ T26] audit: type=1326 audit(1771956458.262:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7804 comm="syz.4.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dd94a2629 code=0x7ffc0000 [ 215.543219][ T7826] loop8: detected capacity change from 0 to 512 [ 215.589420][ T26] audit: type=1326 audit(1771956458.272:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7804 comm="syz.4.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f6dd94a2629 code=0x7ffc0000 [ 215.697079][ T7826] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 215.735460][ T7838] sctp: [Deprecated]: syz.3.852 (pid 7838) Use of struct sctp_assoc_value in delayed_ack socket option. [ 215.735460][ T7838] Use struct sctp_sack_info instead [ 215.739230][ T26] audit: type=1326 audit(1771956458.272:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7804 comm="syz.4.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f6dd94a2629 code=0x7ffc0000 [ 215.822445][ T7826] EXT4-fs (loop8): 1 truncate cleaned up [ 215.851013][ T7826] EXT4-fs (loop8): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 216.996160][ T7865] 8021q: VLANs not supported on hsr0 [ 217.131581][ T7861] loop1: detected capacity change from 0 to 8192 [ 218.186056][ T7894] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 218.272532][ T7903] loop1: detected capacity change from 0 to 128 [ 218.416771][ T7903] FAT-fs (loop1): Directory bread(block 524322) failed [ 218.428743][ T7910] loop3: detected capacity change from 0 to 256 [ 218.446733][ T7903] FAT-fs (loop1): Directory bread(block 524323) failed [ 218.522282][ T7903] FAT-fs (loop1): Directory bread(block 524324) failed [ 218.549617][ T7903] FAT-fs (loop1): Directory bread(block 524325) failed [ 218.559478][ T7910] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 218.616207][ T7918] loop7: detected capacity change from 0 to 128 [ 218.651085][ T7903] FAT-fs (loop1): Directory bread(block 524326) failed [ 218.673543][ T7910] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 218.684268][ T7903] FAT-fs (loop1): Directory bread(block 524327) failed [ 218.703013][ T7903] FAT-fs (loop1): Directory bread(block 524328) failed [ 218.728260][ T7903] FAT-fs (loop1): Directory bread(block 524329) failed [ 218.743070][ T7903] FAT-fs (loop1): Directory bread(block 524322) failed [ 218.780025][ T7903] FAT-fs (loop1): Directory bread(block 524323) failed [ 218.819416][ T7918] FAT-fs (loop7): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 219.121684][ T7930] loop7: detected capacity change from 0 to 1024 [ 219.183871][ T7930] EXT4-fs (loop7): Ignoring removed orlov option [ 219.236972][ T7935] loop3: detected capacity change from 0 to 256 [ 219.311196][ T7930] EXT4-fs (loop7): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 220.649932][ T7961] netlink: 64 bytes leftover after parsing attributes in process `syz.3.885'. [ 222.727786][ T7999] loop7: detected capacity change from 0 to 128 [ 223.107662][ T8006] loop1: detected capacity change from 0 to 512 [ 224.265642][ T8006] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,quota,quota,bsddf,dioread_lock,,errors=continue. Quota mode: writeback. [ 224.333970][ T8006] ext4 filesystem being mounted at /25/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 224.381539][ T8019] loop3: detected capacity change from 0 to 512 [ 224.437679][ T26] audit: type=1800 audit(1771956468.102:65): pid=8006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.900" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 224.520417][ T8019] EXT4-fs (loop3): inline encryption not supported [ 224.601202][ T8019] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e09d, mo2=0002] [ 224.618462][ T8030] netlink: 36 bytes leftover after parsing attributes in process `syz.7.906'. [ 224.653403][ T8030] netlink: 36 bytes leftover after parsing attributes in process `syz.7.906'. [ 224.670758][ T8022] netlink: 24 bytes leftover after parsing attributes in process `syz.4.904'. [ 224.712931][ T8019] System zones: 1-12 [ 224.811419][ T8019] EXT4-fs (loop3): 1 orphan inode deleted [ 224.817199][ T8019] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,inlinecrypt,dioread_lock,inode_readahead_blks=0x0000000000000004,jqfmt=vfsv0,debug,journal_dev=0x000000000000844d,debug_want_extra_isize=0x000000000000005c,i_version,minixdf,,errors=continue. Quota mode: none. [ 225.686919][ T8052] loop1: detected capacity change from 0 to 512 [ 225.716365][ T8053] loop7: detected capacity change from 0 to 512 [ 225.775165][ T8055] loop4: detected capacity change from 0 to 512 [ 225.837807][ T8053] EXT4-fs (loop7): Ignoring removed nobh option [ 225.880180][ T8052] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 225.897727][ T8053] EXT4-fs error (device loop7): __ext4_iget:4912: inode #11: block 1: comm syz.7.912: invalid block [ 225.947935][ T8055] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 225.995527][ T8070] netlink: 12 bytes leftover after parsing attributes in process `syz.8.918'. [ 226.005450][ T8055] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.006545][ T8052] EXT4-fs (loop1): orphan cleanup on readonly fs [ 226.022763][ T8053] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.912: couldn't read orphan inode 11 (err -117) [ 226.114571][ T8053] EXT4-fs (loop7): mounted filesystem without journal. Opts: noauto_da_alloc,nobh,max_dir_size_kb=0x0000000000000004,bsddf,nodiscard,sysvgroups,debug_want_extra_isize=0x0000000000000004,noauto_da_alloc,init_itable,,errors=continue. Quota mode: none. [ 226.149322][ T8052] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 4294967295 out of range 0-7 [ 226.222703][ T8052] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 226.274750][ T8052] EXT4-fs error (device loop1): ext4_acquire_dquot:6234: comm syz.1.913: Failed to acquire dquot type 1 [ 226.335006][ T8052] EXT4-fs error (device loop1): ext4_do_update_inode:5222: inode #16: comm syz.1.913: corrupted inode contents [ 226.442301][ T8052] EXT4-fs error (device loop1): ext4_dirty_inode:6058: inode #16: comm syz.1.913: mark_inode_dirty error [ 226.533930][ T8052] EXT4-fs error (device loop1): ext4_do_update_inode:5222: inode #16: comm syz.1.913: corrupted inode contents [ 226.625317][ T8052] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #16: comm syz.1.913: mark_inode_dirty error [ 226.707339][ T8052] EXT4-fs error (device loop1): ext4_do_update_inode:5222: inode #16: comm syz.1.913: corrupted inode contents [ 226.790084][ T8052] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 226.900419][ T8052] EXT4-fs error (device loop1): ext4_do_update_inode:5222: inode #16: comm syz.1.913: corrupted inode contents [ 227.199662][ T8052] EXT4-fs error (device loop1): ext4_truncate:4279: inode #16: comm syz.1.913: mark_inode_dirty error [ 227.631505][ T8052] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 227.670009][ T8052] EXT4-fs (loop1): 1 truncate cleaned up [ 227.824968][ T8052] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 228.580477][ T8115] IPv6: addrconf: prefix option has invalid lifetime [ 228.787157][ T8128] loop3: detected capacity change from 0 to 1764 [ 230.101571][ T8155] tipc: Started in network mode [ 230.161018][ T8155] tipc: Node identity feb141a1516a, cluster identity 4711 [ 230.251440][ T8155] tipc: Enabled bearer , priority 0 [ 230.258340][ T8160] device syzkaller0 entered promiscuous mode [ 230.291183][ T8162] netlink: 12 bytes leftover after parsing attributes in process `syz.8.946'. [ 230.516178][ T8166] tipc: Resetting bearer [ 230.550564][ T8154] tipc: Resetting bearer [ 230.588833][ T8154] tipc: Disabling bearer [ 230.702427][ T8175] device bond3 entered promiscuous mode [ 230.708264][ T8175] 8021q: adding VLAN 0 to HW filter on device bond3 [ 230.895640][ T8188] loop1: detected capacity change from 0 to 1024 [ 231.014966][ T8188] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 231.254371][ T8204] device erspan1 entered promiscuous mode [ 231.393222][ T8214] netlink: 536 bytes leftover after parsing attributes in process `syz.1.957'. [ 231.622350][ T8226] netlink: 'syz.7.960': attribute type 1 has an invalid length. [ 231.679362][ T8230] netlink: 16 bytes leftover after parsing attributes in process `syz.3.963'. [ 231.946175][ T8240] loop4: detected capacity change from 0 to 2048 [ 232.034167][ T8240] EXT4-fs (loop4): Unrecognized mount option "obj_user=" or missing value [ 232.055721][ T8248] loop7: detected capacity change from 0 to 512 [ 232.162939][ T8248] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 232.228561][ T8248] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 232.252236][ T8248] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.969: invalid indirect mapped block 2683928664 (level 1) [ 232.270546][ T8248] EXT4-fs (loop7): Remounting filesystem read-only [ 232.280728][ T8248] EXT4-fs (loop7): 1 truncate cleaned up [ 232.286379][ T8248] EXT4-fs (loop7): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,errors=remount-ro,minixdf,jqfmt=vfsv0,usrjquota=.". Quota mode: writeback. [ 232.490578][ T8267] loop4: detected capacity change from 0 to 1024 [ 232.500866][ T1108] kernel write not supported for file /102/clear_refs (pid: 1108 comm: kworker/1:2) [ 232.599541][ T8267] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 232.813767][ T8277] device syzkaller0 entered promiscuous mode [ 232.870458][ T13] syzkaller0: tun_net_xmit 48 [ 233.010560][ T8277] syzkaller0: create flow: hash 335777262 index 1 [ 233.019382][ T8300] loop4: detected capacity change from 0 to 1024 [ 233.067423][ T8276] syzkaller0: delete flow: hash 335777262 index 1 [ 233.127400][ T8300] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #4: comm syz.4.983: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 233.250094][ T8300] EXT4-fs error (device loop4): ext4_quota_enable:6445: comm syz.4.983: Bad quota inode: 4, type: 1 [ 233.397668][ T8300] EXT4-fs warning (device loop4): ext4_enable_quotas:6486: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 233.441224][ T8300] EXT4-fs (loop4): mount failed [ 234.251459][ T8300] netlink: 32 bytes leftover after parsing attributes in process `syz.4.983'. [ 234.260509][ T8300] device batadv0 entered promiscuous mode [ 234.550218][ T8348] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1003'. [ 234.606405][ T8351] loop4: detected capacity change from 0 to 512 [ 234.727967][ T8353] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1006'. [ 234.791983][ T8351] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,barrier,usrquota,,errors=continue. Quota mode: writeback. [ 234.794977][ T8364] loop8: detected capacity change from 0 to 1024 [ 234.830487][ T8364] EXT4-fs (loop8): Ignoring removed orlov option [ 234.848781][ T8351] ext4 filesystem being mounted at /85/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 234.907346][ T26] audit: type=1800 audit(1771956478.572:66): pid=8351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1005" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 234.914615][ T8371] loop3: detected capacity change from 0 to 128 [ 234.943479][ T8364] EXT4-fs (loop8): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 235.018069][ T8373] netlink: 'syz.1.1011': attribute type 1 has an invalid length. [ 235.067260][ T8373] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1011'. [ 235.325671][ T8388] loop7: detected capacity change from 0 to 128 [ 235.467071][ T8388] attempt to access beyond end of device [ 235.467071][ T8388] loop7: rw=2049, want=250, limit=128 [ 235.505340][ T26] audit: type=1800 audit(1771956479.172:67): pid=8398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1016" name="file0" dev="loop7" ino=1048801 res=0 errno=0 [ 235.547471][ T8396] loop1: detected capacity change from 0 to 256 [ 235.622534][ T8396] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 235.653497][ T8396] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 235.707887][ T8404] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1021'. [ 236.064969][ T8425] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1028'. [ 236.122106][ T8413] loop1: detected capacity change from 0 to 8192 [ 236.148992][ T8426] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1026'. [ 236.356532][ T8432] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1029'. [ 236.552137][ T13] kernel write not supported for file /239/clear_refs (pid: 13 comm: kworker/0:1) [ 236.563771][ T8443] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1033'. [ 236.687534][ T8449] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1035'. [ 236.768062][ T8449] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1035'. [ 237.850506][ T5444] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 238.050571][ T5444] usb 9-1: device descriptor read/64, error -71 [ 238.340345][ T5444] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 238.414142][ T8534] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1059'. [ 238.531732][ T8543] tipc: Enabling of bearer rejected, failed to enable media [ 238.550501][ T5444] usb 9-1: device descriptor read/64, error -71 [ 238.607437][ T8548] loop3: detected capacity change from 0 to 1024 [ 238.668583][ T8551] device syzkaller0 entered promiscuous mode [ 238.674962][ T5444] usb usb9-port1: attempt power cycle [ 238.771146][ T8548] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 239.112165][ T8579] loop4: detected capacity change from 0 to 512 [ 239.120472][ T5444] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 239.154669][ T8579] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 239.194314][ T8579] EXT4-fs (loop4): journaled quota format not specified [ 239.204028][ T26] audit: type=1326 audit(1771956482.872:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8582 comm="syz.7.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f3a9ab629 code=0x7ffc0000 [ 239.250551][ T5444] usb 9-1: device descriptor read/8, error -71 [ 239.304445][ T26] audit: type=1326 audit(1771956482.892:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8582 comm="syz.7.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f3a9ab629 code=0x7ffc0000 [ 239.434970][ T26] audit: type=1326 audit(1771956482.902:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8582 comm="syz.7.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f3a9ab629 code=0x7ffc0000 [ 239.540404][ T5444] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 239.557851][ T26] audit: type=1326 audit(1771956482.902:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8582 comm="syz.7.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f3a9ab629 code=0x7ffc0000 [ 239.597044][ T8603] loop1: detected capacity change from 0 to 128 [ 239.627635][ T8607] loop4: detected capacity change from 0 to 128 [ 239.639156][ T26] audit: type=1326 audit(1771956482.902:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8582 comm="syz.7.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f2f3a9ab629 code=0x7ffc0000 [ 239.655957][ T8609] tipc: Enabling of bearer rejected, failed to enable media [ 239.677446][ T8611] loop3: detected capacity change from 0 to 512 [ 239.689097][ T8609] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 239.699763][ T8609] tipc: Enabled bearer , priority 10 [ 239.712483][ T5444] usb 9-1: device descriptor read/8, error -71 [ 239.758828][ T8603] FAT-fs (loop1): Directory bread(block 32) failed [ 239.771582][ T8611] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.1088: inode has both inline data and extents flags [ 239.775782][ T26] audit: type=1326 audit(1771956482.912:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8582 comm="syz.7.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f3a9ab629 code=0x7ffc0000 [ 239.790970][ T8603] FAT-fs (loop1): Directory bread(block 33) failed [ 239.808796][ T26] audit: type=1326 audit(1771956482.912:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8582 comm="syz.7.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f3a9ab629 code=0x7ffc0000 [ 239.838835][ T26] audit: type=1326 audit(1771956482.912:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8582 comm="syz.7.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f2f3a9ab629 code=0x7ffc0000 [ 239.861647][ T5444] usb usb9-port1: unable to enumerate USB device [ 239.869266][ T8603] FAT-fs (loop1): Directory bread(block 34) failed [ 239.876003][ T8603] FAT-fs (loop1): Directory bread(block 35) failed [ 239.882740][ T8603] FAT-fs (loop1): Directory bread(block 36) failed [ 239.889363][ T8603] FAT-fs (loop1): Directory bread(block 37) failed [ 239.900597][ T8611] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.1088: couldn't read orphan inode 15 (err -117) [ 239.913535][ T8603] FAT-fs (loop1): Directory bread(block 38) failed [ 239.920081][ T8603] FAT-fs (loop1): Directory bread(block 39) failed [ 239.932098][ T8603] FAT-fs (loop1): Directory bread(block 40) failed [ 239.938722][ T8603] FAT-fs (loop1): Directory bread(block 41) failed [ 239.945476][ T8611] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 240.033208][ T154] device hsr_slave_0 left promiscuous mode [ 240.046563][ T154] device hsr_slave_1 left promiscuous mode [ 240.084614][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.141432][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.170809][ T154] device bridge_slave_1 left promiscuous mode [ 240.210814][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.215170][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 240.215182][ T26] audit: type=1800 audit(1771956483.882:77): pid=8603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1085" name="file1" dev="loop1" ino=1048821 res=0 errno=0 [ 240.261929][ T154] device bridge_slave_0 left promiscuous mode [ 240.262601][ T8603] attempt to access beyond end of device [ 240.262601][ T8603] loop1: rw=0, want=4112, limit=128 [ 240.290763][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.375567][ T8635] loop3: detected capacity change from 0 to 512 [ 240.483395][ T26] audit: type=1800 audit(1771956484.152:78): pid=8635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1093" name="file2" dev="loop3" ino=1048822 res=0 errno=0 [ 240.505353][ T8635] FAT-fs (loop3): error, corrupted file size (i_pos 51, 9216) [ 240.640112][ T154] team0 (unregistering): Port device team_slave_1 removed [ 240.664911][ T8644] loop1: detected capacity change from 0 to 512 [ 240.704976][ T8648] loop8: detected capacity change from 0 to 512 [ 240.713354][ T154] team0 (unregistering): Port device team_slave_0 removed [ 240.738019][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.765998][ T8644] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 240.834271][ T8648] EXT4-fs error (device loop8): ext4_iget_extra_inode:4566: inode #15: comm syz.8.1098: corrupted in-inode xattr [ 240.875533][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.877328][ T8651] loop3: detected capacity change from 0 to 512 [ 240.894735][ T8648] EXT4-fs error (device loop8): ext4_orphan_get:1405: comm syz.8.1098: couldn't read orphan inode 15 (err -117) [ 240.922528][ T8644] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 240.951858][ T8648] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 240.987458][ T8651] EXT4-fs (loop3): inline encryption not supported [ 241.011420][ T8644] ext4 filesystem being mounted at /66/wÅü5ÔTÕÔ)­`)YFæ¾nA­½@T<Ÿ3»Ú‚$¢ó×rçcnH³<¿pƒrèñ¹“>ÅwC¾" žð-ùËòöè€Ó8 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.031936][ T154] bond0 (unregistering): Released all slaves [ 241.076319][ T8651] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e09d, mo2=0002] [ 241.084642][ T8648] EXT4-fs warning (device loop8): ext4_resize_begin:73: won't resize using backup superblock at 1 [ 241.091048][ T8651] System zones: 1-12 [ 241.126103][ T8651] EXT4-fs (loop3): 1 orphan inode deleted [ 241.152418][ T8651] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,inlinecrypt,dioread_lock,inode_readahead_blks=0x0000000000000004,jqfmt=vfsv0,debug,journal_dev=0x000000000000844d,debug_want_extra_isize=0x000000000000005c,i_version,minixdf,,errors=continue. Quota mode: none. [ 241.180257][ T13] tipc: Node number set to 2950381985 [ 241.222882][ T8651] Set syz1 is full, maxelem 0 reached [ 242.346338][ T8683] loop4: detected capacity change from 0 to 128 [ 242.427763][ T8683] EXT4-fs (loop4): mounted filesystem without journal. Opts: abort,nodelalloc,,errors=continue. Quota mode: none. [ 242.455262][ T8683] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.426053][ T8722] loop7: detected capacity change from 0 to 128 [ 243.447484][ T8719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1107'. [ 243.489115][ T8719] device batadv0 entered promiscuous mode [ 243.499048][ T8719] device vlan2 entered promiscuous mode [ 243.569558][ T8731] netlink: 'syz.3.1112': attribute type 29 has an invalid length. [ 243.588118][ T8722] FAT-fs (loop7): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 243.843265][ T8745] loop3: detected capacity change from 0 to 128 [ 243.925764][ T26] audit: type=1800 audit(1771956487.592:79): pid=8745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1117" name="file2" dev="loop3" ino=1048823 res=0 errno=0 [ 243.953442][ T8745] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 243.998777][ T8745] FAT-fs (loop3): Filesystem has been set read-only [ 244.052149][ T8745] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 244.082407][ T8745] attempt to access beyond end of device [ 244.082407][ T8745] loop3: rw=2049, want=2073, limit=128 [ 244.134567][ T8755] loop8: detected capacity change from 0 to 2048 [ 244.209491][ T8750] loop7: detected capacity change from 0 to 8192 [ 244.282924][ T8755] EXT4-fs (loop8): mounted filesystem without journal. Opts: delalloc,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 244.348944][ T26] audit: type=1800 audit(1771956488.012:80): pid=8750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1118" name="file1" dev="loop7" ino=1048824 res=0 errno=0 [ 244.417124][ T8771] loop3: detected capacity change from 0 to 512 [ 245.019738][ T8788] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.027182][ T8788] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.163873][ T8794] device bridge_slave_1 left promiscuous mode [ 245.192584][ T8794] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.306798][ T8794] device bridge_slave_0 left promiscuous mode [ 245.350694][ T8794] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.991785][ T8833] loop8: detected capacity change from 0 to 1024 [ 246.058862][ T8833] EXT4-fs (loop8): Quota format mount options ignored when QUOTA feature is enabled [ 246.092772][ T8833] EXT4-fs (loop8): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 246.140488][ T8833] EXT4-fs (loop8): Project quota feature not enabled. Cannot enable project quota enforcement. [ 246.311097][ T8833] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1139'. [ 246.553216][ T8844] loop1: detected capacity change from 0 to 256 [ 246.824015][ T8851] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1143'. [ 247.421521][ T13] Bluetooth: hci2: command 0x0406 tx timeout [ 247.429901][ T13] Bluetooth: hci0: command 0x0406 tx timeout [ 247.958359][ T8871] loop7: detected capacity change from 0 to 1024 [ 247.989725][ T8872] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1148'. [ 248.021640][ T8872] device syzkaller0 entered promiscuous mode [ 248.077169][ T8871] EXT4-fs (loop7): Ignoring removed orlov option [ 248.125278][ T8871] EXT4-fs (loop7): Ignoring removed nobh option [ 248.179025][ T8871] EXT4-fs (loop7): mounted filesystem without journal. Opts: block_validity,errors=remount-ro,sysvgroups,norecovery,nombcache,orlov,nogrpid,noauto_da_alloc,nobh,. Quota mode: none. [ 248.586453][ T8894] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1155'. [ 248.847430][ T26] audit: type=1326 audit(1771956492.512:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8906 comm="syz.7.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f3a9ab629 code=0x7ffc0000 [ 248.980331][ T26] audit: type=1326 audit(1771956492.552:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8906 comm="syz.7.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f3a9ab629 code=0x7ffc0000 [ 249.016614][ T8914] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1162'. [ 249.041524][ T8904] loop8: detected capacity change from 0 to 8192 [ 249.130133][ T26] audit: type=1326 audit(1771956492.552:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8906 comm="syz.7.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f3a9ab629 code=0x7ffc0000 [ 249.231604][ T8914] device syzkaller0 entered promiscuous mode [ 249.665827][ T26] audit: type=1326 audit(1771956492.552:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8906 comm="syz.7.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f3a9ab629 code=0x7ffc0000 [ 249.913088][ T26] audit: type=1326 audit(1771956492.552:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8906 comm="syz.7.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f2f3a9ab629 code=0x7ffc0000 [ 249.935934][ T26] audit: type=1326 audit(1771956492.552:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8906 comm="syz.7.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f3a9ab629 code=0x7ffc0000 [ 250.130164][ T8936] loop7: detected capacity change from 0 to 512 [ 250.140557][ T26] audit: type=1326 audit(1771956492.552:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8906 comm="syz.7.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f3a9ab629 code=0x7ffc0000 [ 250.197545][ T26] audit: type=1326 audit(1771956492.552:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8906 comm="syz.7.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f2f3a9ab629 code=0x7ffc0000 [ 250.226217][ T26] audit: type=1326 audit(1771956492.562:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8906 comm="syz.7.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f2f3a9ab629 code=0x7ffc0000 [ 250.310899][ T8936] EXT4-fs (loop7): inline encryption not supported [ 250.361334][ T8936] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e001e09c, mo2=0002] [ 250.369378][ T8936] System zones: 1-12 [ 250.372817][ T8956] loop4: detected capacity change from 0 to 1024 [ 250.467917][ T8936] EXT4-fs (loop7): 1 orphan inode deleted [ 250.484663][ T8956] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 250.515376][ T8936] EXT4-fs (loop7): mounted filesystem without journal. Opts: resuid=0x0000000000000000,inlinecrypt,dioread_lock,noauto_da_alloc,jqfmt=vfsv0,debug,journal_dev=0x000000000000844d,debug_want_extra_isize=0x000000000000005c,i_version,minixdf,,errors=continue. Quota mode: none. [ 250.549817][ T8965] loop3: detected capacity change from 0 to 128 [ 250.587991][ T8966] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1178'. [ 250.727222][ T8971] loop1: detected capacity change from 0 to 1024 [ 250.752983][ T8974] xt_hashlimit: max too large, truncated to 1048576 [ 250.890706][ T8979] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1183'. [ 250.935991][ T8984] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1185'. [ 251.015431][ T8971] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 251.265078][ T8982] device syzkaller0 entered promiscuous mode [ 251.299662][ T8992] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1185'. [ 251.312090][ T8992] 8021q: adding VLAN 0 to HW filter on device bond4 [ 251.400944][ T8995] device macvlan2 entered promiscuous mode [ 251.422514][ T8995] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 253.556074][ T9044] loop3: detected capacity change from 0 to 128 [ 253.595955][ T9047] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1200'. [ 253.608405][ T9047] device syzkaller0 entered promiscuous mode [ 253.674669][ T9050] loop7: detected capacity change from 0 to 512 [ 253.705522][ T9044] attempt to access beyond end of device [ 253.705522][ T9044] loop3: rw=2051, want=129, limit=128 [ 253.808553][ T9050] EXT4-fs (loop7): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback. [ 253.865005][ T9061] loop1: detected capacity change from 0 to 512 [ 253.884959][ T9050] ext4 filesystem being mounted at /185/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.023781][ T9061] EXT4-fs (loop1): mounted filesystem without journal. Opts: auto_da_alloc,barrier,noblock_validity,journal_ioprio=0x0000000000000004,delalloc,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 254.070384][ T9061] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.102358][ T9076] sg_write: data in/out 196864/1 bytes for SCSI command 0x0-- guessing data in; [ 254.102358][ T9076] program syz.3.1206 not setting count and/or reply_len properly [ 254.167418][ T9061] loop_set_status: loop1 () has still dirty pages (nrpages=3) [ 254.214077][ T9078] loop3: detected capacity change from 0 to 512 [ 254.477666][ T9078] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 254.510831][ T9078] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.231797][ T26] audit: type=1326 audit(1771956498.902:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9097 comm="syz.8.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a71a5b629 code=0x7ffc0000 [ 255.318384][ T26] audit: type=1326 audit(1771956498.922:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9097 comm="syz.8.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a71a5b629 code=0x7ffc0000 [ 255.466867][ T26] audit: type=1326 audit(1771956498.922:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9097 comm="syz.8.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f3a71a5b629 code=0x7ffc0000 [ 255.756139][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.773548][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.193154][ T26] audit: type=1326 audit(1771956498.922:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9097 comm="syz.8.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a71a5b629 code=0x7ffc0000 [ 256.224335][ T9107] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1213'. [ 256.323024][ T9107] device syzkaller0 entered promiscuous mode [ 256.371722][ T26] audit: type=1326 audit(1771956498.922:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9097 comm="syz.8.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a71a5b629 code=0x7ffc0000 [ 256.807679][ T9143] loop1: detected capacity change from 0 to 512 [ 256.843368][ T9141] loop8: detected capacity change from 0 to 4096 [ 256.912250][ T9143] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,quota,quota,bsddf,dioread_lock,,errors=continue. Quota mode: writeback. [ 256.979662][ T9143] ext4 filesystem being mounted at /94/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 257.051235][ T9141] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 257.107442][ T26] audit: type=1800 audit(1771956500.772:95): pid=9141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1225" name="file0" dev="loop8" ino=13 res=0 errno=0 [ 257.159427][ T9152] [ 257.161788][ T9152] ====================================================== [ 257.168800][ T9152] WARNING: possible circular locking dependency detected [ 257.175826][ T9152] syzkaller #0 Not tainted [ 257.180235][ T9152] ------------------------------------------------------ [ 257.187246][ T9152] syz.1.1224/9152 is trying to acquire lock: [ 257.193216][ T9152] ffff88806147f928 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_commit+0x5a/0x410 [ 257.202098][ T9152] [ 257.202098][ T9152] but task is already holding lock: [ 257.209452][ T9152] ffff888061425238 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_truncate+0x97f/0x10f0 [ 257.218774][ T9152] [ 257.218774][ T9152] which lock already depends on the new lock. [ 257.218774][ T9152] [ 257.220631][ T26] audit: type=1800 audit(1771956500.872:96): pid=9143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1224" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 257.229165][ T9152] [ 257.229165][ T9152] the existing dependency chain (in reverse order) is: [ 257.229173][ T9152] [ 257.229173][ T9152] -> #2 (&ei->i_data_sem/2){++++}-{3:3}: [ 257.266293][ T9152] down_write+0x38/0x60 [ 257.270979][ T9152] ext4_map_blocks+0x8bf/0x1b30 [ 257.276353][ T9152] ext4_getblk+0x176/0x670 [ 257.281291][ T9152] ext4_bread+0x26/0x180 [ 257.286051][ T9152] ext4_quota_write+0x236/0x580 [ 257.291422][ T9152] do_insert_tree+0x115c/0x1970 [ 257.296799][ T9152] do_insert_tree+0x5b1/0x1970 [ 257.302087][ T9152] do_insert_tree+0x5b1/0x1970 [ 257.307380][ T9152] do_insert_tree+0x5b1/0x1970 [ 257.312670][ T9152] qtree_write_dquot+0x361/0x4b0 [ 257.318137][ T9152] v2_write_dquot+0x108/0x190 [ 257.323337][ T9152] dquot_acquire+0x2d5/0x520 [ 257.328451][ T9152] ext4_acquire_dquot+0x2d9/0x4a0 [ 257.334004][ T9152] dqget+0x778/0xeb0 [ 257.338422][ T9152] __dquot_initialize+0x3c3/0xcd0 [ 257.343976][ T9152] ext4_process_orphan+0x54/0x300 [ 257.349525][ T9152] ext4_orphan_cleanup+0xad2/0x1320 [ 257.355246][ T9152] ext4_fill_super+0x8e25/0x95a0 [ 257.360709][ T9152] mount_bdev+0x287/0x3c0 [ 257.365562][ T9152] legacy_get_tree+0xe6/0x180 [ 257.370765][ T9152] vfs_get_tree+0x88/0x270 [ 257.375701][ T9152] do_new_mount+0x24a/0xa40 [ 257.380722][ T9152] __se_sys_mount+0x2e3/0x3d0 [ 257.385920][ T9152] do_syscall_64+0x4c/0xa0 [ 257.390862][ T9152] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 257.397276][ T9152] [ 257.397276][ T9152] -> #1 (&s->s_dquot.dqio_sem){++++}-{3:3}: [ 257.405442][ T9152] down_read+0x44/0x2e0 [ 257.410123][ T9152] v2_read_dquot+0x4a/0x110 [ 257.415153][ T9152] dquot_acquire+0x152/0x520 [ 257.420260][ T9152] ext4_acquire_dquot+0x2d9/0x4a0 [ 257.425813][ T9152] dqget+0x778/0xeb0 [ 257.430226][ T9152] __dquot_initialize+0x3c3/0xcd0 [ 257.435765][ T9152] ext4_create+0x92/0x470 [ 257.440609][ T9152] path_openat+0x11db/0x2fa0 [ 257.445713][ T9152] do_filp_open+0x1e2/0x410 [ 257.450730][ T9152] do_sys_openat2+0x150/0x4b0 [ 257.455919][ T9152] __x64_sys_openat+0x135/0x160 [ 257.461290][ T9152] do_syscall_64+0x4c/0xa0 [ 257.466224][ T9152] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 257.472640][ T9152] [ 257.472640][ T9152] -> #0 (&dquot->dq_lock){+.+.}-{3:3}: [ 257.480283][ T9152] __lock_acquire+0x2c42/0x7d10 [ 257.485656][ T9152] lock_acquire+0x19e/0x400 [ 257.490680][ T9152] __mutex_lock_common+0x1e3/0x2400 [ 257.496398][ T9152] mutex_lock_nested+0x17/0x20 [ 257.501689][ T9152] dquot_commit+0x5a/0x410 [ 257.506628][ T9152] ext4_write_dquot+0x1f0/0x360 [ 257.512003][ T9152] mark_all_dquot_dirty+0xf9/0x400 [ 257.517630][ T9152] __dquot_free_space+0x7ca/0xb90 [ 257.523174][ T9152] ext4_free_blocks+0x1b2b/0x24d0 [ 257.528724][ T9152] ext4_ext_remove_space+0x1f86/0x42b0 [ 257.534701][ T9152] ext4_ext_truncate+0x192/0x240 [ 257.540157][ T9152] ext4_truncate+0xa09/0x10f0 [ 257.545352][ T9152] ext4_setattr+0xffe/0x19e0 [ 257.550575][ T9152] notify_change+0xbcd/0xee0 [ 257.555694][ T9152] do_truncate+0x1ac/0x240 [ 257.560639][ T9152] path_openat+0x2922/0x2fa0 [ 257.565758][ T9152] do_filp_open+0x1e2/0x410 [ 257.570790][ T9152] do_sys_openat2+0x150/0x4b0 [ 257.575987][ T9152] __x64_sys_creat+0x8c/0xb0 [ 257.581100][ T9152] do_syscall_64+0x4c/0xa0 [ 257.586039][ T9152] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 257.592445][ T9152] [ 257.592445][ T9152] other info that might help us debug this: [ 257.592445][ T9152] [ 257.602665][ T9152] Chain exists of: [ 257.602665][ T9152] &dquot->dq_lock --> &s->s_dquot.dqio_sem --> &ei->i_data_sem/2 [ 257.602665][ T9152] [ 257.616310][ T9152] Possible unsafe locking scenario: [ 257.616310][ T9152] [ 257.623758][ T9152] CPU0 CPU1 [ 257.629113][ T9152] ---- ---- [ 257.634471][ T9152] lock(&ei->i_data_sem/2); [ 257.639064][ T9152] lock(&s->s_dquot.dqio_sem); [ 257.646427][ T9152] lock(&ei->i_data_sem/2); [ 257.653538][ T9152] lock(&dquot->dq_lock); [ 257.657950][ T9152] [ 257.657950][ T9152] *** DEADLOCK *** [ 257.657950][ T9152] [ 257.666082][ T9152] 5 locks held by syz.1.1224/9152: [ 257.671185][ T9152] #0: ffff88805b0ea460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 257.680336][ T9152] #1: ffff8880614253b0 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: do_truncate+0x198/0x240 [ 257.690618][ T9152] #2: ffff888061425550 (mapping.invalidate_lock){++++}-{3:3}, at: ext4_setattr+0xdb6/0x19e0 [ 257.700805][ T9152] #3: ffff888061425238 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_truncate+0x97f/0x10f0 [ 257.710564][ T9152] #4: ffffffff8c441538 (dquot_srcu){....}-{0:0}, at: rcu_lock_acquire+0x5/0x30 [ 257.719628][ T9152] [ 257.719628][ T9152] stack backtrace: [ 257.725639][ T9152] CPU: 1 PID: 9152 Comm: syz.1.1224 Not tainted syzkaller #0 [ 257.733017][ T9152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 257.743077][ T9152] Call Trace: [ 257.746354][ T9152] [ 257.749281][ T9152] dump_stack_lvl+0x188/0x250 [ 257.753967][ T9152] ? load_image+0x400/0x400 [ 257.758488][ T9152] ? show_regs_print_info+0x20/0x20 [ 257.763697][ T9152] ? print_circular_bug+0x12b/0x1a0 [ 257.768902][ T9152] check_noncircular+0x296/0x330 [ 257.773846][ T9152] ? add_chain_block+0x940/0x940 [ 257.778788][ T9152] ? lockdep_lock+0xf1/0x1f0 [ 257.783381][ T9152] ? mark_lock+0x94/0x320 [ 257.787709][ T9152] ? _find_first_zero_bit+0xce/0xf0 [ 257.792924][ T9152] __lock_acquire+0x2c42/0x7d10 [ 257.797785][ T9152] ? __bfs+0x2a3/0x5c0 [ 257.801857][ T9152] ? verify_lock_unused+0x140/0x140 [ 257.807143][ T9152] ? check_noncircular+0x189/0x330 [ 257.812253][ T9152] ? add_chain_block+0x940/0x940 [ 257.817199][ T9152] ? lockdep_lock+0xf1/0x1f0 [ 257.822150][ T9152] ? lockdep_unlock+0x143/0x2e0 [ 257.827010][ T9152] lock_acquire+0x19e/0x400 [ 257.831521][ T9152] ? dquot_commit+0x5a/0x410 [ 257.836117][ T9152] ? __might_sleep+0xf0/0xf0 [ 257.840708][ T9152] ? read_lock_is_recursive+0x10/0x10 [ 257.846099][ T9152] ? mark_lock+0x94/0x320 [ 257.850425][ T9152] ? dquot_commit+0x5a/0x410 [ 257.855119][ T9152] __mutex_lock_common+0x1e3/0x2400 [ 257.860313][ T9152] ? dquot_commit+0x5a/0x410 [ 257.864905][ T9152] ? __might_sleep+0xf0/0xf0 [ 257.869497][ T9152] ? mutex_lock_io_nested+0x60/0x60 [ 257.874708][ T9152] mutex_lock_nested+0x17/0x20 [ 257.879489][ T9152] dquot_commit+0x5a/0x410 [ 257.883931][ T9152] ? __ext4_journal_start_sb+0x1bd/0x360 [ 257.889567][ T9152] ext4_write_dquot+0x1f0/0x360 [ 257.894432][ T9152] mark_all_dquot_dirty+0xf9/0x400 [ 257.899544][ T9152] __dquot_free_space+0x7ca/0xb90 [ 257.904604][ T9152] ext4_free_blocks+0x1b2b/0x24d0 [ 257.909642][ T9152] ? ext4_mb_discard_preallocations_should_retry+0x690/0x690 [ 257.917016][ T9152] ? __ext4_journal_ensure_credits+0x2c/0x450 [ 257.923100][ T9152] ? ext4_inode_journal_mode+0x18f/0x460 [ 257.928739][ T9152] ext4_ext_remove_space+0x1f86/0x42b0 [ 257.934213][ T9152] ? ext4_ext_index_trans_blocks+0xf0/0xf0 [ 257.940025][ T9152] ? ext4_es_remove_extent+0x24f/0x3e0 [ 257.945490][ T9152] ext4_ext_truncate+0x192/0x240 [ 257.950459][ T9152] ext4_truncate+0xa09/0x10f0 [ 257.955155][ T9152] ? clear_nonspinnable+0x60/0x60 [ 257.960181][ T9152] ? up_write+0x1bb/0x420 [ 257.964516][ T9152] ? __ext4_mark_inode_dirty+0x700/0x700 [ 257.970157][ T9152] ext4_setattr+0xffe/0x19e0 [ 257.974758][ T9152] ? ext4_write_inode+0x5f0/0x5f0 [ 257.979784][ T9152] notify_change+0xbcd/0xee0 [ 257.984380][ T9152] do_truncate+0x1ac/0x240 [ 257.988800][ T9152] ? rcu_lock_release+0x20/0x20 [ 257.993656][ T9152] ? ima_bprm_check+0x200/0x200 [ 257.998516][ T9152] ? bpf_lsm_path_truncate+0x5/0x10 [ 258.003725][ T9152] path_openat+0x2922/0x2fa0 [ 258.008329][ T9152] ? do_filp_open+0x410/0x410 [ 258.013018][ T9152] do_filp_open+0x1e2/0x410 [ 258.017534][ T9152] ? vfs_tmpfile+0x300/0x300 [ 258.022136][ T9152] ? _raw_spin_unlock+0x24/0x40 [ 258.026995][ T9152] ? alloc_fd+0x598/0x630 [ 258.031333][ T9152] do_sys_openat2+0x150/0x4b0 [ 258.036017][ T9152] ? do_sys_open+0xe0/0xe0 [ 258.040436][ T9152] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 258.046426][ T9152] ? lock_chain_count+0x20/0x20 [ 258.051289][ T9152] ? vtime_user_exit+0x2c8/0x3e0 [ 258.056238][ T9152] __x64_sys_creat+0x8c/0xb0 [ 258.060832][ T9152] do_syscall_64+0x4c/0xa0 [ 258.065263][ T9152] ? clear_bhb_loop+0x30/0x80 [ 258.069947][ T9152] ? clear_bhb_loop+0x30/0x80 [ 258.074631][ T9152] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 258.080540][ T9152] RIP: 0033:0x7f000ec4d629 [ 258.084960][ T9152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.104569][ T9152] RSP: 002b:00007f000ce86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 258.112990][ T9152] RAX: ffffffffffffffda RBX: 00007f000eec7090 RCX: 00007f000ec4d629 [ 258.120968][ T9152] RDX: 0000000000000000 RSI: 0000000000000018 RDI: 0000200000000e40 [ 258.128941][ T9152] RBP: 00007f000ece3b39 R08: 0000000000000000 R09: 0000000000000000 [ 258.136916][ T9152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 258.145153][ T9152] R13: 00007f000eec7128 R14: 00007f000eec7090 R15: 00007ffefe31a768 [ 258.153139][ T9152] [ 258.311563][ T9193] loop4: detected capacity change from 0 to 512 [ 258.391023][ T9193] EXT4-fs (loop4): Unsupported blocksize for fs-verity